Skip to content

fix(deps): update dependencies - #446

Merged
tannevaled merged 1 commit into
mainfrom
renovate/deps
Sep 6, 2026
Merged

fix(deps): update dependencies#446
tannevaled merged 1 commit into
mainfrom
renovate/deps

Conversation

@tannevaled

@tannevaled tannevaled commented Sep 4, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
github.com/go-crdt/collab v0.40.0v0.45.0 age confidence
github.com/go-crdt/crdt v0.42.0v0.46.0 age confidence
github.com/go-widgets/painter v0.12.0v0.13.0 age confidence
github.com/go-widgets/toolkit v0.301.0v0.307.0 age confidence

Release Notes

go-crdt/collab (github.com/go-crdt/collab)

v0.45.0

Compare Source

v0.44.0

Compare Source

v0.43.0

Compare Source

v0.42.0

Compare Source

v0.41.0: — what mixed-version peers found

Compare Source

Both fixes here came from running a server and clients built against different
versions
against each other for the first time, over real gRPC. Neither path
had ever been exercised.

The fallback outgrew gRPC's default

A participant that cannot read this build's snapshot format is sent the whole
history instead — about 3.25× larger:

document snapshot operations
199 457 characters 1.55 MB 5.03 MB

So the peer least able to be upgraded was the one that met gRPC's four-mebibyte
default and was told:

rpc error: code = ResourceExhausted desc = grpc: received message larger than max

which names a resource rather than the version mismatch behind it. The threshold
is around 167 000 operations — one typed chapter.

The WebSocket carrier has raised that limit since it was written, with a comment
saying why. The gRPC carrier now does too — as a call option, because the
connection belongs to whoever built it and the call does not.

A participant locked out only when it rejoined

A server too old to have heard the advertisement sends a snapshot this build
cannot read. That failed — but only on a fresh join. Resume sends a version,
which takes the operations branch, so a new build could hold a session on such a
server indefinitely, survive cuts, push its offline work — and die the moment
it joined again.

A tab that works until it is reloaded is the worst kind of broken: nothing looks
wrong until everything is.

It now asks a second time, saying it holds nothing — two bytes, which has been
enough to get operations since long before any of this existed. On a fresh
connection, because a second join on one connection is refused.

The retry does not depend on what the document holds: only the text format moved,
so a composite can carry a readable list beside a dead text and still have a
current outer version byte. Readability is asked by trying.

And a way out of a store

collab/migrate v0.1.1
moves documents out of a snapshot format crdt v0.42.0 no longer reads. Every
document a server persisted before collab v0.37.0 is in one.

Its pin to an older crdt is enforced at run time, not commented — and Renovate has
now been taught to leave it alone, after trying to raise it and being caught by
that guard.

go-crdt/crdt (github.com/go-crdt/crdt)

v0.46.0

Compare Source

v0.45.0

Compare Source

v0.44.0

Compare Source

v0.43.0

Compare Source

go-widgets/painter (github.com/go-widgets/painter)

v0.13.0

Compare Source

go-widgets/toolkit (github.com/go-widgets/toolkit)

v0.307.0

Compare Source

v0.306.0

Compare Source

v0.305.0

Compare Source

v0.304.0

Compare Source

v0.303.0

Compare Source

v0.302.0

Compare Source


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

@tannevaled tannevaled changed the title fix(deps): update module github.com/go-crdt/collab to v0.41.0 fix(deps): update dependencies to v0.43.0 Sep 5, 2026
@tannevaled tannevaled changed the title fix(deps): update dependencies to v0.43.0 fix(deps): update dependencies Sep 6, 2026
@tannevaled

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: rougelex/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 3 additional dependencies were updated

Details:

Package Change
github.com/go-crdt/collab v0.40.0 -> v0.45.0
github.com/go-crdt/crdt v0.42.0 -> v0.46.0
github.com/go-widgets/painter v0.12.0 -> v0.13.0

@tannevaled
tannevaled merged commit d072bba into main Sep 6, 2026
1 check passed
@tannevaled
tannevaled deleted the renovate/deps branch September 6, 2026 11:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant