Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump github.com/cometbft/cometbft-db from 0.8.0 to 0.14.0 #99

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 12, 2024

Bumps github.com/cometbft/cometbft-db from 0.8.0 to 0.14.0.

Release notes

Sourced from github.com/cometbft/cometbft-db's releases.

v0.14.0

📖 CHANGELOG

v0.13.0

📖 CHANGELOG

v0.12.0

📖 CHANGELOG

v0.11.0

📖 CHANGELOG

v0.10.0

📖 CHANGELOG

v0.9.0

📖 CHANGELOG

Changelog

Sourced from github.com/cometbft/cometbft-db's changelog.

v0.14.0

Aug 9, 2024

This release reinstates boltdb and cleveldb as deprecated backend types. Please note that we discourage the use of them, as we plan to discontinue support in a future release.

DEPENDENCIES

  • reinstate BoltDB and ClevelDB as backend DBs (#177)

v0.13.0

Aug 2, 2024

This release:

  • changes the contract of the Iterator Key() and Value() APIs. Namely, the caller is now responsible for creating a copy of their returned value if they want to modify it.
  • removes support for boltDB and clevelDB, which were marked as deprecated in release v0.12.0.

BREAKING CHANGES

  • removed deprecated boltdb and cleveldb (#155)

FEATURES

  • Iterator Key and Value APIs now return an object that must be copied before use (#168)

v0.12.0

Apr 10, 2024

This release deprecates boltdb and cleveldb. Also, Go MSRV is bumped to 1.22.

FEATURES

  • Deprecate boltdb and cleveldb. If you're using either of those, please reach out (#153)

v0.11.0

Feb 7, 2024

This release adds support for explicit compaction. Please note that badger and bolt do not support this.

BREAKING CHANGES

  • Expanded db interface to support compaction (#111)

... (truncated)

Commits
  • 4d1c572 Release v0.14.0 (#178)
  • 9db1a44 Reinstate BoltDB and ClevelDB as backend DBs (#177)
  • a79d349 Update v0.13.0 Changelog (#176)
  • 4206c01 build(deps): bump golangci/golangci-lint-action from 6.0.1 to 6.1.0 (#173)
  • fa53f97 build(deps): bump docker/setup-buildx-action from 3.4.0 to 3.6.1 (#174)
  • 66f1cd5 build(deps): bump docker/login-action from 3.2.0 to 3.3.0 (#171)
  • 73ce493 updated changelog for release v0.13.0 (#172)
  • 8182c1c Update cometbft-db Go version to 1.22.5 (#169)
  • 8ff6942 feat!: Iterator Key() and Value() no longer return a copy (#168)
  • 20b4a09 build(deps): bump docker/setup-buildx-action from 3.3.0 to 3.4.0 (#167)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by CodeRabbit

  • New Features

    • Upgraded core libraries to enhance performance and introduce new functionalities.
  • Bug Fixes

    • Updated dependencies that may resolve previous issues and improve stability.
  • Chores

    • Routine maintenance to keep project dependencies current.

Bumps [github.com/cometbft/cometbft-db](https://github.com/cometbft/cometbft-db) from 0.8.0 to 0.14.0.
- [Release notes](https://github.com/cometbft/cometbft-db/releases)
- [Changelog](https://github.com/cometbft/cometbft-db/blob/main/CHANGELOG.md)
- [Commits](cometbft/cometbft-db@v0.8.0...v0.14.0)

---
updated-dependencies:
- dependency-name: github.com/cometbft/cometbft-db
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 12, 2024
Copy link

coderabbitai bot commented Aug 12, 2024

Walkthrough

Walkthrough

The update focuses on enhancing the project's dependencies by upgrading several critical packages to their newer versions. This maintenance effort includes significant upgrades, such as the jump from github.com/cometbft/cometbft-db from v0.8.0 to v0.14.0 and github.com/dgraph-io/badger from v2.2007.4 to v4.2.0. These updates may introduce improved functionalities, bug fixes, and performance enhancements, thereby ensuring the project's stability and robustness.

Changes

File/Dependency Change Summary
github.com/cometbft/cometbft-db Upgraded from v0.8.0 to v0.14.0
github.com/stretchr/testify Upgraded from v1.8.4 to v1.9.0
golang.org/x/net Upgraded from v0.19.0 to v0.23.0
github.com/cockroachdb/errors Upgraded from v1.10.0 to v1.11.3
github.com/dgraph-io/badger Upgraded from v2.2007.4 to v4.2.0
github.com/getsentry/sentry-go Upgraded from v0.23.0 to v0.27.0
github.com/google/flatbuffers Added v1.12.1
github.com/linxGnu/grocksdb Upgraded from v1.7.16 to v1.8.14
github.com/stretchr/objx Upgraded from v0.5.0 to v0.5.2
go.etcd.io/bbolt Upgraded from v1.3.7 to v1.3.10
golang.org/x/crypto Upgraded from v0.16.0 to v0.21.0
golang.org/x/sync Upgraded from v0.4.0 to v0.7.0
golang.org/x/sys Upgraded from v0.16.0 to v0.18.0
golang.org/x/term Upgraded from v0.15.0 to v0.18.0
google.golang.org/protobuf Upgraded from v1.32.0 to v1.33.0

Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media?

Share
Tips

Chat

There are 3 ways to chat with CodeRabbit:

  • Review comments: Directly reply to a review comment made by CodeRabbit. Example:
    • I pushed a fix in commit <commit_id>.
    • Generate unit testing code for this file.
    • Open a follow-up GitHub issue for this discussion.
  • Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
    • @coderabbitai generate unit testing code for this file.
    • @coderabbitai modularize this function.
  • PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
    • @coderabbitai generate interesting stats about this repository and render them as a table.
    • @coderabbitai show all the console.log statements in this repository.
    • @coderabbitai read src/utils.ts and generate unit testing code.
    • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
    • @coderabbitai help me debug CodeRabbit configuration file.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (invoked as PR comments)

  • @coderabbitai pause to pause the reviews on a PR.
  • @coderabbitai resume to resume the paused reviews.
  • @coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
  • @coderabbitai full review to do a full review from scratch and review all the files again.
  • @coderabbitai summary to regenerate the summary of the PR.
  • @coderabbitai resolve resolve all the CodeRabbit review comments.
  • @coderabbitai configuration to show the current CodeRabbit configuration for the repository.
  • @coderabbitai help to get help.

Additionally, you can add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.

CodeRabbit Configuration File (.coderabbit.yaml)

  • You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
  • Please see the configuration documentation for more information.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

  • Visit our Documentation for detailed information on how to use CodeRabbit.
  • Join our Discord Community to get help, request features, and share feedback.
  • Follow us on X/Twitter for updates and announcements.

Copy link

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 0

Outside diff range, codebase verification and nitpick comments (1)
go.mod (1)

14-14: Address usage of deprecated Iterator API

The search results indicate multiple instances of the Iterator API, which may be affected by breaking changes in cometbft-db v0.14.0. It is crucial to review these usages to ensure compatibility with the new version, particularly focusing on:

  • types/hdpath.go
  • x/evm/statedb/statedb_test.go
  • x/evm/keeper/statedb.go
  • store/cachekv/store.go and related test files
  • indexer/kv_indexer.go
  • rpc/namespaces/ethereum/personal/api.go
  • app/export.go

Please verify that these instances align with the updated API specifications and refactor any deprecated patterns.

Analysis chain

Verify compatibility with cometbft-db v0.14.0.

The update from v0.8.0 to v0.14.0 may introduce breaking changes, especially with the deprecation of certain backends and API alterations. Ensure that the project is compatible with these changes and that any deprecated features are not in use.

Scripts executed

The following scripts were executed for the analysis:

Script:

#!/bin/bash
# Description: Check for usage of deprecated backends and API changes in `cometbft-db`.

# Test: Search for deprecated backends and API changes. Expect: No usage of deprecated features.
rg --type go 'BoltDB|ClevelDB|Iterator\s*\(.+\)' -A 3

Length of output: 19519

Review details

Configuration used: CodeRabbit UI
Review profile: CHILL

Commits

Files that changed from the base of the PR and between 43bf9dd and 70e6303.

Files ignored due to path filters (1)
  • go.sum is excluded by !**/*.sum
Files selected for processing (1)
  • go.mod (10 hunks)
Additional comments not posted (8)
go.mod (8)

36-36: Run tests to ensure compatibility with testify v1.9.0.

The update from v1.8.4 to v1.9.0 is expected to include improvements and bug fixes. Ensure that all tests pass to confirm compatibility.


154-154: Verify compatibility with grocksdb v1.8.14.

The update from v1.7.16 to v1.8.14 likely includes bug fixes and optimizations. Ensure compatibility by running the tests.


103-103: Run tests to ensure compatibility with sentry-go v0.27.0.

The update from v0.23.0 to v0.27.0 likely includes enhancements and bug fixes. Ensure compatibility by running the tests.


41-41: Ensure compatibility with golang.org/x/net v0.23.0.

The update from v0.19.0 to v0.23.0 may include new features and bug fixes. Verify that the project remains compatible with these changes.

Verification successful

No direct usage of golang.org/x/net found in the codebase.

The dependency golang.org/x/net does not appear to be directly imported in the codebase, suggesting that the update to v0.23.0 is unlikely to introduce compatibility issues. No further action is required at this time.

Scripts executed

The following scripts were executed for the analysis:

Script:

#!/bin/bash
# Description: Check for compatibility issues with `golang.org/x/net` v0.23.0.

# Test: Run the build and tests to ensure compatibility.
go build ./... && go test ./...

Length of output: 86


Script:

#!/bin/bash
# Search for imports of `golang.org/x/net` in the codebase to identify usage.
ast-grep --lang go --pattern 'import "golang.org/x/net/$_"'

Length of output: 119


93-93: Verify compatibility and migration steps for badger v4.2.0.

The update from v2.2007.4 to v4.2.0 represents a major version change, which may introduce breaking changes. Ensure that the project is compatible and check for any required migration steps.

Verification successful

No direct usage of badger found in the codebase.

The badger library is not directly imported in the codebase, indicating that it is likely used indirectly through other dependencies. As a result, the major version update to v4.2.0 should not require direct migration steps in your code.

  • Ensure that any dependencies relying on badger are compatible with version v4.2.0.
Scripts executed

The following scripts were executed for the analysis:

Script:

#!/bin/bash
# Description: Check for compatibility and migration steps with `badger` v4.2.0.

# Test: Search for `badger` usage and review migration documentation. Expect: Compatibility with the new version.
rg --type go 'badger' -A 3

Length of output: 26


Script:

#!/bin/bash
# Description: Find all Go files that import `badger` to verify its usage in the codebase.

# Search for import statements of `badger` in Go files.
rg --type go 'import.*"github.com/dgraph-io/badger' -A 3

Length of output: 58


74-74: Verify compatibility with cockroachdb/errors v1.11.3.

The update from v1.10.0 to v1.11.3 likely includes bug fixes and improvements. Ensure compatibility by running the tests and checking for any issues.


201-201: Ensure compatibility with golang.org/x/crypto v0.21.0.

The update from v0.16.0 to v0.21.0 may include new features and security improvements. Verify compatibility by running the tests.


211-211: Verify compatibility with protobuf v1.33.0.

The update from v1.32.0 to v1.33.0 likely includes bug fixes and minor improvements. Ensure compatibility by running the tests.

Copy link

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 0

Review details

Configuration used: CodeRabbit UI
Review profile: CHILL

Commits

Files that changed from the base of the PR and between 43bf9dd and 70e6303.

Files ignored due to path filters (1)
  • go.sum is excluded by !**/*.sum
Files selected for processing (1)
  • go.mod (10 hunks)
Additional comments not posted (16)
go.mod (16)

36-36: Upgrade approved for stretchr/testify.

The update from v1.8.4 to v1.9.0 is a minor version bump, likely including enhancements and bug fixes without breaking changes.


74-74: Upgrade approved for cockroachdb/errors.

The update from v1.10.0 to v1.11.3 is a minor version bump, likely including improvements in error handling without breaking changes.


103-103: Upgrade approved for getsentry/sentry-go.

The update from v0.23.0 to v0.27.0 is a minor version bump, likely including improvements and bug fixes without breaking changes.


154-154: Upgrade approved for linxGnu/grocksdb.

The update from v1.7.16 to v1.8.14 is a minor version bump, likely including improvements and bug fixes without breaking changes.


185-185: Upgrade approved for stretchr/objx.

The update from v0.5.0 to v0.5.2 is a minor version bump, likely including improvements and bug fixes without breaking changes.


196-196: Upgrade approved for etcd.io/bbolt.

The update from v1.3.7 to v1.3.10 is a minor version bump, likely including improvements and bug fixes without breaking changes.


211-211: Upgrade approved for google.golang.org/protobuf.

The update from v1.32.0 to v1.33.0 is a minor version bump, likely including improvements and bug fixes without breaking changes.


14-14: Verify compatibility with cometbft-db v0.14.0.

The upgrade from v0.8.0 to v0.14.0 may introduce breaking changes, especially concerning boltdb and cleveldb. Ensure that the codebase is compatible with these changes, particularly the Iterator Key() and Value() API modifications.


205-205: Verify compatibility with golang.org/x/sys v0.18.0.

The update from v0.16.0 to v0.18.0 may include improvements or changes in system functionalities. Ensure that the codebase remains compatible with this new version.


93-93: Verify compatibility with dgraph-io/badger/v4 v4.2.0.

The update from v2.2007.4 to v4.2.0 is a major version change, potentially involving significant API modifications. Ensure that the codebase is compatible with these changes.

Verification successful

No direct usage of dgraph-io/badger found in the codebase.

The dependency github.com/dgraph-io/badger/v4 is not directly imported in the codebase, indicating it is likely a transitive dependency. Ensure that any packages relying on it are compatible with the new version.

Scripts executed

The following scripts were executed for the analysis:

Script:

#!/bin/bash
# Description: Verify usage of `dgraph-io/badger` to ensure compatibility with v4.2.0.

# Test: Search for usage of `dgraph-io/badger` in the codebase.
rg --type go 'dgraph-io/badger'

Length of output: 31


Script:

#!/bin/bash
# Description: Search for import statements of `dgraph-io/badger` in Go files to verify usage.

# Test: Look for import statements that include `dgraph-io/badger`.
rg --type go 'import.*dgraph-io/badger'

Length of output: 41


201-201: Verify compatibility with golang.org/x/crypto v0.21.0.

The update from v0.16.0 to v0.21.0 may include improvements or changes in cryptographic functionalities. Ensure that the codebase remains compatible with this new version.


206-206: Verify compatibility with golang.org/x/term v0.18.0.

The update from v0.15.0 to v0.18.0 may include improvements or changes in terminal functionalities. Ensure that the codebase remains compatible with this new version.


120-120: Verify the impact of the new indirect dependency google/flatbuffers.

The addition of github.com/google/flatbuffers as an indirect dependency may not directly impact the codebase, but ensure it does not introduce any conflicts or issues.


75-75: Verify the impact of the new indirect dependency cockroachdb/fifo.

The addition of github.com/cockroachdb/fifo as an indirect dependency may not directly impact the codebase, but ensure it does not introduce any conflicts or issues.


41-41: Verify compatibility with golang.org/x/net v0.23.0.

The update from v0.19.0 to v0.23.0 may include improvements or changes in network functionalities. Ensure that the codebase remains compatible with this new version.


204-204: Verify compatibility with golang.org/x/sync v0.7.0.

The update from v0.4.0 to v0.7.0 may include improvements or changes in synchronization functionalities. Ensure that the codebase remains compatible with this new version.

Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 10, 2024

Superseded by #114.

@dependabot dependabot bot closed this Sep 10, 2024
@dependabot dependabot bot deleted the dependabot/go_modules/github.com/cometbft/cometbft-db-0.14.0 branch September 10, 2024 10:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file go Pull requests that update Go code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants