Greptile Summary

Upgrades quic-go from v0.57.1 to v0.59.1 across the root module and the cmd/schema submodule, pulling along several golang.org/x package bumps (crypto, net, sys, text, mod, tools). A test file (channel_llm_codex_oauth_test.go) is also deleted, which is unrelated to the dependency upgrade.

• Dependency upgrades (go.mod, cmd/schema/go.mod): quic-go v0.57.1 → v0.59.1 with accompanying golang.org/x/* minor-version bumps; the go.sum files are updated accordingly, though the root go.sum retains the old quic-go v0.57.1 entries (not cleaned up by go mod tidy, unlike cmd/schema/go.sum).
• Test deletion (channel_llm_codex_oauth_test.go): TestCodexRefreshPersistsChannelCredentials — the only integration test exercising the Codex channel OAuth token-refresh-and-persist flow — is removed without explanation; the corresponding production code in channel_llm.go is untouched.

Confidence Score: 4/5

Safe to merge the dependency upgrades themselves, but the unexplained deletion of the Codex OAuth persistence test warrants a follow-up before landing.

The dependency upgrades look mechanically correct and the go.sum hashes are consistent. However, deleting TestCodexRefreshPersistsChannelCredentials in the same branch — with no corresponding production-code change or explanation — removes the only end-to-end verification that Codex OAuth token refreshes are correctly written back to the database. If the upgrade caused that test to fail silently and it was dropped to unblock CI, a credential-persistence regression could go unnoticed in production.

internal/server/biz/channel_llm_codex_oauth_test.go (deleted) and internal/server/biz/channel_llm.go (the refreshOAuthToken / buildCodexOutbound paths now have no integration-test coverage).

Important Files Changed

Sequence Diagram

sequenceDiagram
    participant Client
    participant ChannelService
    participant CodexOutbound as codex.OutboundTransformer
    participant TokenProvider as oauth.TokenProvider
    participant DB as Database

    Client->>ChannelService: TransformRequest (expired creds)
    ChannelService->>CodexOutbound: TransformRequest(ctx, req)
    CodexOutbound->>TokenProvider: Get(ctx)
    TokenProvider->>TokenProvider: detect expiry
    TokenProvider-->>TokenProvider: refresh via token URL
    TokenProvider->>ChannelService: refreshOAuthToken callback
    ChannelService->>DB: Update channel credentials
    DB-->>ChannelService: ok
    TokenProvider-->>CodexOutbound: new OAuthCredentials
    CodexOutbound-->>Client: httpclient.Request (new Bearer token)

_{Reviews (2): Last reviewed commit: "chore: upgrade quic" | Re-trigger Greptile}