Skip to content

chore: batch cherry-pick 15 pick-me PRs#1273

Closed
phlax with Copilot wants to merge 15 commits into
mainfrom
copilot/pick-me-pr-single
Closed

chore: batch cherry-pick 15 pick-me PRs#1273
phlax with Copilot wants to merge 15 commits into
mainfrom
copilot/pick-me-pr-single

Conversation

Copilot AI commented Jul 26, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Consolidates 17 pick-me-labelled dependency bump PRs into a single PR, applied in reverse order of lines touched in shared files to minimise conflicts.

Picked (15)

PR Change
#1267 @chakra-ui/react 3.34→3.36.1
#1269 vite 8.0.16→8.1.5
#1265 actions/checkout 7.0.0→7.0.1
#1263 toolshed/actions/github/container/auth
#1193 nginx 1.30→1.31.3
#1199 envoy-code-check + yarl (github-workflows)
#1213 aiohttp + yarl (shared/python)
#1219 envoyproxy/envoy 1.38.1→1.39.0 (golang-network)
#1220 envoyproxy/envoy 1.38.1→1.39.0 (golang-http)
#1221 openpolicyagent/opa 1.16.1→1.18.1
#1228 mysql digest bump
#1245 golang digest bump (shared/golang)
#1247 grpcio + requests + golang.org/x/net (grpc-bridge)
#1262 redis 8.8.0→8.8.1
#1264 golang.org/x/net 0.55→0.57 (grpc-bridge/server)

Skipped — yarn.lock conflicts (2)

Both conflict in single-page-app/ui/yarn.lock after the larger chakra-ui (#1267) and vite (#1269) changes land.

dependabot Bot added 15 commits July 26, 2026 19:47
@dependabot
build(deps): bump @chakra-ui/react in /single-page-app/ui
756efd6 
Bumps [@chakra-ui/react](https://github.com/chakra-ui/chakra-ui/tree/HEAD/packages/react) from 3.34.0 to 3.36.1.
- [Release notes](https://github.com/chakra-ui/chakra-ui/releases)
- [Changelog](https://github.com/chakra-ui/chakra-ui/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/chakra-ui/chakra-ui/commits/@chakra-ui/react@3.36.1/packages/react)

---
updated-dependencies:
- dependency-name: "@chakra-ui/react"
  dependency-version: 3.36.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
build(deps-dev): bump vite from 8.0.16 to 8.1.5 in /single-page-app/ui
2893d02 
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 8.0.16 to 8.1.5.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.1.5/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 8.1.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
build(deps): bump actions/checkout from 7.0.0 to 7.0.1
af3cc9e 
Bumps [actions/checkout](https://github.com/actions/checkout) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@9c091bb...3d3c42e)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
build(deps): bump envoyproxy/toolshed/actions/github/container/auth
f4dbacf 
Bumps [envoyproxy/toolshed/actions/github/container/auth](https://github.com/envoyproxy/toolshed) from f3c0acc8c3799305101f5669042b388edfb070c7 to 4cca74db6587ee660235fbadaac5a4fc2a19cfa9.
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](envoyproxy/toolshed@f3c0acc...4cca74d)

---
updated-dependencies:
- dependency-name: envoyproxy/toolshed/actions/github/container/auth
  dependency-version: 4cca74db6587ee660235fbadaac5a4fc2a19cfa9
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
build(deps): bump nginx
1145d00 
Bumps the examples-local-ratelimit group with 1 update in the /local_ratelimit directory: nginx.


Updates `nginx` from 1.30.0 to 1.31.3

---
updated-dependencies:
- dependency-name: nginx
  dependency-version: 1.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: examples-local-ratelimit
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
build(deps): bump the github-workflows group across 1 directory with …
c0af35e 
…2 updates

Bumps the github-workflows group with 2 updates in the /.github/workflows directory: [envoy-code-check](https://github.com/envoyproxy/toolshed) and [yarl](https://github.com/aio-libs/yarl).


Updates `envoy-code-check` from 0.6.1 to 0.6.8
- [Release notes](https://github.com/envoyproxy/toolshed/releases)
- [Commits](https://github.com/envoyproxy/toolshed/commits)

Updates `yarl` from 1.23.0 to 1.24.5
- [Release notes](https://github.com/aio-libs/yarl/releases)
- [Changelog](https://github.com/aio-libs/yarl/blob/master/CHANGES.rst)
- [Commits](aio-libs/yarl@v1.23.0...v1.24.5)

---
updated-dependencies:
- dependency-name: envoy-code-check
  dependency-version: 0.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-workflows
- dependency-name: yarl
  dependency-version: 1.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-workflows
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
build(deps): bump the examples-shared-python group across 1 directory…
eaa3b5f 
… with 2 updates

---
updated-dependencies:
- dependency-name: aiohttp
  dependency-version: 3.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: examples-shared-python
- dependency-name: yarl
  dependency-version: 1.24.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: examples-shared-python
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
build(deps): bump github.com/envoyproxy/envoy
e8b726e 
Bumps the examples-golang-network group with 1 update in the /golang-network/simple directory: [github.com/envoyproxy/envoy](https://github.com/envoyproxy/envoy).


Updates `github.com/envoyproxy/envoy` from 1.38.1 to 1.39.0
- [Release notes](https://github.com/envoyproxy/envoy/releases)
- [Changelog](https://github.com/envoyproxy/envoy/blob/main/RELEASES.md)
- [Commits](envoyproxy/envoy@v1.38.1...v1.39.0)

---
updated-dependencies:
- dependency-name: github.com/envoyproxy/envoy
  dependency-version: 1.38.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: examples-golang-network
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
build(deps): bump github.com/envoyproxy/envoy
3711f5e 
Bumps the examples-golang-http group with 1 update in the /golang-http/simple directory: [github.com/envoyproxy/envoy](https://github.com/envoyproxy/envoy).


Updates `github.com/envoyproxy/envoy` from 1.38.1 to 1.39.0
- [Release notes](https://github.com/envoyproxy/envoy/releases)
- [Changelog](https://github.com/envoyproxy/envoy/blob/main/RELEASES.md)
- [Commits](envoyproxy/envoy@v1.38.1...v1.39.0)

---
updated-dependencies:
- dependency-name: github.com/envoyproxy/envoy
  dependency-version: 1.38.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: examples-golang-http
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
build(deps): bump openpolicyagent/opa
ac50cf9 
Bumps the examples-ext-authz group with 1 update in the /ext_authz directory: openpolicyagent/opa.


Updates `openpolicyagent/opa` from 1.16.1-envoy-2-static to 1.18.1-envoy-2-static

---
updated-dependencies:
- dependency-name: openpolicyagent/opa
  dependency-version: 1.17.0-envoy-4-static
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: examples-ext-authz
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
build(deps): bump mysql from e370cd5 to cbade84 in /mysql
6cd9cd4 
Bumps mysql from `e370cd5` to `cbade84`.

---
updated-dependencies:
- dependency-name: mysql
  dependency-version: 9.7.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
build(deps): bump golang from 18aedc1 to 1ecb7ed in /shared/golang
17ab45d 
Bumps golang from `18aedc1` to `1ecb7ed`.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.26.5-bookworm
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
build(deps): bump the examples-grpc-bridge group across 1 directory w…
9e9a471 
…ith 4 updates

Bumps the examples-grpc-bridge group with 3 updates in the /grpc-bridge/client directory: [grpcio](https://github.com/grpc/grpc), [grpcio-tools](https://github.com/grpc/grpc) and [requests](https://github.com/psf/requests).


Updates `grpcio` from 1.80.0 to 1.83.0
- [Release notes](https://github.com/grpc/grpc/releases)
- [Commits](grpc/grpc@v1.80.0...v1.83.0)

Updates `grpcio-tools` from 1.80.0 to 1.83.0
- [Release notes](https://github.com/grpc/grpc/releases)
- [Commits](grpc/grpc@v1.80.0...v1.83.0)

Updates `protobuf` from 6.33.6 to 7.35.1
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

Updates `requests` from 2.34.0 to 2.34.2
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.34.0...v2.34.2)

---
updated-dependencies:
- dependency-name: grpcio
  dependency-version: 1.82.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: examples-grpc-bridge
- dependency-name: grpcio-tools
  dependency-version: 1.82.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: examples-grpc-bridge
- dependency-name: protobuf
  dependency-version: 7.35.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: examples-grpc-bridge
- dependency-name: requests
  dependency-version: 2.34.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: examples-grpc-bridge
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
build(deps): bump redis from 8.8.0 to 8.8.1 in /redis
c1b208c 
Bumps redis from 8.8.0 to 8.8.1.

---
updated-dependencies:
- dependency-name: redis
  dependency-version: 8.8.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
build(deps): bump golang.org/x/net
7796481 
Bumps the examples-grpc-bridge group with 1 update in the /grpc-bridge/server directory: [golang.org/x/net](https://github.com/golang/net).


Updates `golang.org/x/net` from 0.55.0 to 0.57.0
- [Commits](golang/net@v0.55.0...v0.57.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.57.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: examples-grpc-bridge
...

Signed-off-by: dependabot[bot] <support@github.com>
Copilot AI changed the title chore: batch cherry-pick of 15 pick-me PRs chore: batch cherry-pick 15 pick-me PRs Jul 26, 2026
Copilot finished work on behalf of phlax July 26, 2026 19:48
Copilot AI requested a review from phlax July 26, 2026 19:48
@phlax phlax closed this Jul 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@phlax phlax Awaiting requested review from phlax

Assignees

@phlax phlax

Copilot code review Copilot

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@phlax