fix(deps): update module github.com/knights-analytics/hugot to v0.7.8 - #7052
fix(deps): update module github.com/knights-analytics/hugot to v0.7.8#7052renovate-fullsend[bot] wants to merge 1 commit into
Conversation
ℹ️ Artifact update noticeFile name: go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
|
🤖 Finished Review · ✅ Success · Started 3:29 AM UTC · Completed 3:42 AM UTC Commit: Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $2.91 |
Codecov Report✅ All modified and coverable lines are covered by tests. 📢 Thoughts on this report? Let us know! |
|
Risk Assessment: moderate (2/5) DetailsRoutine bot-authored dependency update (hugot v0.7.7 to v0.7.8) touching only go.mod and go.sum with no protected paths, security-sensitive files, or CI changes; composite score 2.05 rounds to 2, consistent with prior assessment. Previous runRisk Assessment: moderate (2/5) DetailsRoutine bot-authored dependency update touching only go.mod and go.sum with no protected paths, security-sensitive files, or CI changes; composite score of 2.17 (0.62×1.75 + 0.38×2.86) rounds to 2, unchanged from the prior assessment. Previous run (2)Risk Assessment: moderate (2/5) DetailsRoutine bot-authored dependency update touching only go.mod and go.sum with no protected paths, security-sensitive files, or CI changes; Tier 2 signals are inflated by fix(deps) commit message pattern matching and multi-author contention on frequently-updated dependency manifests rather than genuine instability, yielding a composite of 2.17 consistent with the prior moderate assessment. Previous run (3)Risk Assessment: moderate (2/5) DetailsRoutine bot-authored dependency update touching only go.mod and go.sum with no protected paths, security-sensitive files, or CI changes; the elevated regression-history signal reflects fix(deps) commit message pattern matching on frequently-updated dependency manifests rather than genuine instability. |
ReviewFindingsLow
Next steps:
Previous runReviewFindingsLow
Next steps:
Previous run (2)ReviewFindingsLow
Next steps:
Previous run (3)ReviewFindingsLow
|
![fullsend-ai-review[bot]](https://avatars.githubusercontent.com/in/3478501?s=60&v=4){kind=small}
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
fullsend-ai-review
Bot
added
the
ready-for-merge
235fc22 to
d8ed9b5
Compare
|
🤖 Finished Review · ✅ Success · Started 3:22 PM UTC · Completed 3:37 PM UTC Commit: Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $3.39 |
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
fullsend-ai-review
Bot
removed
the
ready-for-merge
d8ed9b5 to
285f1d2
Compare
|
🤖 Finished Review · ✅ Success · Started 3:32 AM UTC · Completed 3:45 AM UTC Commit: Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $2.64 |
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
285f1d2 to
ebdad91
Compare
|
🤖 Finished Review · ✅ Success · Started 3:26 PM UTC · Completed 3:41 PM UTC Commit: Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $3.15 |
| github.com/google/cel-go v0.29.2 | ||
| github.com/google/uuid v1.6.0 | ||
| github.com/knights-analytics/hugot v0.7.7 | ||
| github.com/knights-analytics/hugot v0.7.8 |
There was a problem hiding this comment.
[low] api-contract
hugot v0.7.8 includes breaking API changes (filesystem integrations must implement fileutil.FileSystem, WalkDir signature changed, pipeline constructors no longer accept *options.Options). Verified against the codebase: mlscan_ort.go uses hugot.NewORTSession with functional options and hugot.NewPipeline with a typed TextClassificationConfig struct — neither matches the breaking change surface. No fileutil imports exist in the codebase and all WalkDir calls use the standard library. CI verification with the ORT build tag remains prudent since these code paths only compile in specific environments.
| module github.com/fullsend-ai/fullsend | ||
|
|
||
| go 1.26.5 | ||
| go 1.27.0 |
There was a problem hiding this comment.
[low] api-contract
Go minimum version bumped from 1.26.5 to 1.27.0, driven by the hugot dependency upgrade. All CI workflows use go-version-file: go.mod, so the Go toolchain version will be picked up automatically. No hardcoded Go version references found in CI workflows, Dockerfiles, or Makefiles.
This PR contains the following updates:
v0.7.7→v0.7.8Release Notes
knights-analytics/hugot (github.com/knights-analytics/hugot)
v0.7.8Compare Source
[0.7.8] - 2026-09-02
Added
NewORTTrainingSessionfor training with the ORT backend.options.WithGoMLXto use GoMLX for model execution with an ORT session.options.WithFileSystem, see README.MD for details.Changed
Breaking changes
fileutil.FileSystemand be supplied withoptions.WithFileSystem; the previous globalviant/afsintegration is no longer used.fileutil.WalkDirnow takes a context and handler directly, andfileutil.FileStatsreturnsos.FileInfo; update callers and adapters accordingly.*options.Options; backend configuration is now supplied when creating the session.Configuration
📅 Schedule: (UTC)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate CLI.