Skip to content

deps: bump github.com/hashicorp/hcl/v2 from 2.20.1 to 2.24.0 - #10

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/hashicorp/hcl/v2-2.24.0
Closed

deps: bump github.com/hashicorp/hcl/v2 from 2.20.1 to 2.24.0#10
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/hashicorp/hcl/v2-2.24.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 7, 2025

Copy link
Copy Markdown
Contributor

Bumps github.com/hashicorp/hcl/v2 from 2.20.1 to 2.24.0.

Release notes

Sourced from github.com/hashicorp/hcl/v2's releases.

v2.24.0

Enhancements

  • Add support for decoding block and attribute source ranges when using gohcl. (#703)
  • hclsyntax: Detect and reject invalid nested splat result. (#724)

Bugs Fixed

  • Correct handling of unknown objects in Index function. (#763)

v2.23.0

What's Changed

Full Changelog: hashicorp/hcl@v2.22.0...v2.23.0

v2.22.0

Enhancements

  • feat: return an ExprSyntaxError for invalid references that end in a dot (#692)

v2.21.0

Enhancements

  • Introduce ParseTraversalPartial, which allows traversals that include the splat ([*]) index operator. (#673)
  • ext/dynblock: Now accepts marked values in for_each, and will transfer those marks (as much as technically possible) to values in the generated blocks. (#679)

Bugs Fixed

  • Expression evaluation will no longer panic if the splat operator is applied to an unknown value that has cty marks. (#678)
Changelog

Sourced from github.com/hashicorp/hcl/v2's changelog.

v2.24.0 (July 7, 2025)

Enhancements

  • Add support for decoding block and attribute source ranges when using gohcl. (#703)
  • hclsyntax: Detect and reject invalid nested splat result. (#724)

Bugs Fixed

  • Correct handling of unknown objects in Index function. (#763)

v2.23.0 (November 15, 2024)

Bugs Fixed

  • Preserve marks when traversing through unknown values. (#699)
  • Retain marks through conditional and for expressions. (#710)

v2.22.0 (August 26, 2024)

Enhancements

  • feat: return an ExprSyntaxError for invalid references that end in a dot (#692)

v2.21.0 (June 19, 2024)

Enhancements

  • Introduce ParseTraversalPartial, which allows traversals that include the splat ([*]) index operator. (#673)
  • ext/dynblock: Now accepts marked values in for_each, and will transfer those marks (as much as technically possible) to values in the generated blocks. (#679)

Bugs Fixed

  • Expression evaluation will no longer panic if the splat operator is applied to an unknown value that has cty marks. (#678)
Commits
  • 6b50680 Update CHANGELOG.md (#764)
  • 77ef278 ops: handle unknown objects correctly when looking up by index (#763)
  • dfa124f [Compliance] - PR Template Changes Required (#761)
  • 6b5c4c2 fix errors thrown by errcheck linter (#755)
  • 61bd79d suppress and fix lint errors by unused (#754)
  • 8b8cb9c build(deps): bump golangci/golangci-lint-action
  • aa4e447 build(deps): bump actions/setup-go
  • 7244363 Update go-cty to latest (#749)
  • b4e27ae test_suite: refactor schema validation of diagnostic file range, pos (#750)
  • 314d236 fix staticcheck lint errors
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot @github

dependabot Bot commented on behalf of github Jul 7, 2025

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: automerge, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Bumps [github.com/hashicorp/hcl/v2](https://github.com/hashicorp/hcl) from 2.20.1 to 2.24.0.
- [Release notes](https://github.com/hashicorp/hcl/releases)
- [Changelog](https://github.com/hashicorp/hcl/blob/main/CHANGELOG.md)
- [Commits](hashicorp/hcl@v2.20.1...v2.24.0)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/hcl/v2
  dependency-version: 2.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/github.com/hashicorp/hcl/v2-2.24.0 branch from 6ec0249 to b4e26bd Compare August 1, 2025 05:48
jingle2008 added a commit that referenced this pull request Mar 29, 2026
Updated all Go module dependencies to their latest versions.
Resolves conflicts in dependabot PRs #4, #8, #10, #14, #16.

Co-Authored-By: Jarvis <jarvis@openclaw.ai>
@jingle2008

Copy link
Copy Markdown
Owner

Superseded by #17 which updates all dependencies at once.

@jingle2008 jingle2008 closed this Mar 29, 2026
@dependabot @github

dependabot Bot commented on behalf of github Mar 29, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/go_modules/github.com/hashicorp/hcl/v2-2.24.0 branch March 29, 2026 19:52
jingle2008 added a commit that referenced this pull request May 17, 2026
#6 (pkg/models/base_model): document that GetDefaultDacShape returns
   a pointer aliasing an element of the underlying
   CompatibleDACShapes slice. Mutating it is visible to every
   BaseModel that shares the same *DacShapeConfigs. Treat as
   read-only.

#7 (internal/ui/tui/reducer_actions): rename local `key` variables
   to `itemKey` in scaleUpGpuPool / cordonNode / drainNode /
   getSelectedItem. The locals were shadowing the bubbles/key
   package import (no bug — Go scopes correctly — but the rest of
   the file uses `itemKey` and the parity is worth having).

#10 (internal/cli/output/WriteJSONL): document that "_group" is a
   reserved field name used to carry the originating map key when
   flattening keyed inputs; callers must not name a JSON field
   "_group" or it will be silently overwritten.

#5 (internal/cli/output/WriteJSONL): add a TODO(perf) note about
   the marshal→unmarshal→remarshal roundtrip in the map path.
   ~3× steady-state memory of a streaming writer; acceptable for
   current dataset sizes, revisit with reflect-based streaming if
   profiles show it as a hotspot.

Minor #8 (//nolint:cyclop on emitCategory) and Minor #9 (Categories
global unused outside tests) deliberately not addressed per the
reviewer's own guidance — both were explicitly out of scope.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
jingle2008 added a commit that referenced this pull request May 18, 2026
Sweeps the remaining review items #6, #7, and the relevant Minors:

  - #6 + Minor #9: merge validateMutationConfig and validateScaleConfig
    into a single function with (needsKube, needsRepo) booleans. Drop
    the unreachable "missing --kubeconfig" branch — the persistent
    flag always supplies ~/.kube/config so the os.Stat guard is the
    real check.

  - #7: each mutation tool description now spells out that mutations
    target the server's startup env only; env_* fields in the
    arguments are silently ignored by the JSON unmarshaler. Header
    comment in registerMutationTools explains the reasoning.

  - Minor #8: fold requireConfirm into runMutationTool. Each handler
    now makes a single call with `in.Confirm` and a perform closure
    instead of the previous two-step gate + execute. The 4-value
    return is gone; refusal becomes the same shape as failure.

  - Minor #12: fix doc-level wording — delete.Short adds "the",
    scale.Short drops the misleading plural, reboot.Long rewords
    "fire-and-forget" so it doesn't read as "OCI finished".

Minor #10 was based on misreading the perform-vs-runMutation
ordering; the "no change" note already prints before "OK". No
change needed.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
jingle2008 added a commit that referenced this pull request May 24, 2026
Code-review follow-up to the four-commit ImportedModel feature
(02fdba7 .. 2c1090e). All review feedback addressed:

Important #1 — MCP description claimed a `source` field that was
dropped in 0d194ae. Replaced with the orthogonality guidance the Go
doc and CHANGELOG now use. Agents planning JSON paths against the
tool description will no longer be misled.

Important #2 — CHANGELOG was missing the silent BaseModel filter
change (02fdba7). Added a `### Changed` entry explicit about the
count delta — `toolkit get basemodel -o json | jq length` returns
fewer items on clusters with tenant-scoped CBMs. Points readers at
the new `importedmodel` category to recover the full set.

Important #3 — Confirmed via inventory of pkg/models that
ImportedModel is the only category with both Namespace and TenantID
(DAC, LimitTenancyOverride, ConsolePropertyTenancyOverride each
have TenantID alone). Adopting the DAC pattern: TenantID is the OCI
tenant identifier (from `tenancy-id` label, populated on any source
that carries the label); Namespace is the K8s scope (the
authoritative source-kind indicator). They're orthogonal facets,
not synonyms. Loader behavior unchanged — only documentation flips,
in three places:

  - pkg/models/imported_model.go: expanded doc-comment with the
    "orthogonal facets" framing and explicit consumer guidance
    ("which K8s scope" vs "which OCI tenant").
  - internal/mcp/tools.go (list_imported_models description): same
    clarification, replacing the stale `source` mention.
  - CHANGELOG: same framing, with the DAC-pattern reference.

Important #4 — Added a deliberate comment in LoadImportedModels
explaining the all-or-nothing semantics vs. the LoadGpuPools
partial-error idiom. The two sources here are conceptually one
catalog; a half-loaded result is more confusing than an explicit
error, and the cross-GVR RBAC asymmetry (namespaced `basemodels`
vs cluster-scoped `clusterbasemodels`) is the realistic failure
mode the comment calls out.

Minor #5 — TestList_ImportedModels_FlatShape doc-comment said the
test asserts `source` is present; corrected to reflect that the
test now asserts `source` is absent (the post-0d194ae contract).

Skipped from the review's Minor list:
- #6 (lint suppression placement) — pre-existing, no change.
- #7 (split routeLoadingDataMsg following the routeList* pattern) —
  could land in a follow-up if the next addition pushes the message
  count above the cyclop ceiling again; not urgent at 10.
- #8 (ResetScopedData consistency) — already correct.
- #9 (StorageURI placement on BaseModel vs ImportedModel) — already
  the right call, no change.
- #10 (CLI table readability) — passed review.

Verified: go test ./..., make fmt-check, make goimports-check,
golangci-lint run ./... all green.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant