Skip to content

Bump github.com/hashicorp/go-plugin from 1.4.6 to 1.8.0 - #645

Merged
rr3khan merged 1 commit into
mainfrom
dependabot/go_modules/github.com/hashicorp/go-plugin-1.8.0
Nov 3, 2026
Merged

rr3khan merged 1 commit into
mainfrom
dependabot/go_modules/github.com/hashicorp/go-plugin-1.8.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026 •

Copy link
Copy Markdown
Contributor

Bumps github.com/hashicorp/go-plugin from 1.4.6 to 1.8.0.

Release notes

Sourced from github.com/hashicorp/go-plugin's releases.

v1.8.0

What’s Changed

Compliance & Maintenance

  • updated copyright and license headers
  • Modernized build tags
  • Multiple GitHub Actions and dependency bumps

Fixes & Improvements

  • Fixed concurrency issue with pipesWaitGroup
  • Prevented pidfd leak in cmdrunner
  • Reduced logging configuration noise

Enhancements

  • Updated go_package to full path in proto
  • Improved gRPC example (plugin selection + encoding fix)
  • Added gRPC streaming example

Dependencies Upgrade

  • Upgraded protobuf
  • Several CI/CD action updates

New Contributors


v1.7.0

What's Changed

New Contributors

Full Changelog: hashicorp/go-plugin@v1.6.3...v1.7.0

... (truncated)

Changelog

Sourced from github.com/hashicorp/go-plugin's changelog.

Unreleased

SECURITY:

  • deps: Updated google.golang.org/grpc to v1.81.1 [GH-383]

ENHANCEMENTS:

  • deps: Removed direct use of deprecated github.com/golang/protobuf in favour of google.golang.org/protobuf [GH-388]

v1.7.0

CHANGES:

  • When go-plugin encounters a stack trace on the server stderr stream, it now raises output to a log-level of Error instead of Debug. [GH-292]

ENHANCEMENTS:

  • Don't spend resources parsing log lines when logging is disabled [GH-352]

v1.6.2

ENHANCEMENTS:

  • Added support for gRPC dial options to the Dial API [GH-257]

BUGS:

  • Fixed a bug where reattaching to a plugin that exits could kill an unrelated process [GH-320]

v1.6.1

BUGS:

  • Suppress spurious os.ErrClosed on plugin shutdown [GH-299]

ENHANCEMENTS:

  • deps: bump google.golang.org/grpc to v1.58.3 [GH-296]

v1.6.0

CHANGES:

  • plugin: Plugins written in other languages can optionally start to advertise whether they support gRPC broker multiplexing. If the environment variable PLUGIN_MULTIPLEX_GRPC is set, it is safe to include a seventh field containing a boolean value in the |-separated protocol negotiation line.

ENHANCEMENTS:

  • Support muxing gRPC broker connections over a single listener [GH-288]
  • client: Configurable buffer size for reading plugin log lines [GH-265]

... (truncated)

Commits
  • 155dcdd cmdrunner: release process handle in _pidAlive to avoid pidfd leak (#378)
  • 96d18ee [chore] : Bump actions/upload-artifact in the actions group (#376)
  • a0c251c [chore] : Bump actions/setup-go from 6.3.0 to 6.4.0 in the actions group (#375)
  • 6a56553 [chore] : Bump the actions group with 2 updates (#373)
  • abeb978 Bump protobuf from 4.25.8 to 5.29.6 in /examples/grpc/plugin-python (#372)
  • a4c9002 examples: Add gRPC streaming example (#339)
  • 0ac49e2 [chore] : Bump actions/checkout from 6.0.1 to 6.0.2 in the actions group (#370)
  • d662936 logging: lower priority of configuring messages (#311)
  • c57bf64 [chore] : Bump actions/setup-go from 6.1.0 to 6.2.0 in the actions group (#369)
  • a33e454 chore: add plugin selection and fix encoding in gRPC example (#368)
  • Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 27, 2026
@rr3khan

rr3khan commented Nov 3, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

Bumps [github.com/hashicorp/go-plugin](https://github.com/hashicorp/go-plugin) from 1.4.6 to 1.8.0.
- [Release notes](https://github.com/hashicorp/go-plugin/releases)
- [Changelog](https://github.com/hashicorp/go-plugin/blob/main/CHANGELOG.md)
- [Commits](hashicorp/go-plugin@v1.4.6...v1.8.0)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/go-plugin
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/github.com/hashicorp/go-plugin-1.8.0 branch from 1e95918 to 2921aad Compare November 3, 2026 03:12
@rr3khan
rr3khan merged commit 957e1f8 into main Nov 3, 2026
3 checks passed
@rr3khan
rr3khan deleted the dependabot/go_modules/github.com/hashicorp/go-plugin-1.8.0 branch November 3, 2026 15:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant