Skip to content

Bump github.com/hashicorp/go-plugin from 1.4.6 to 1.8.0 - #645

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/hashicorp/go-plugin-1.8.0
Open

Bump github.com/hashicorp/go-plugin from 1.4.6 to 1.8.0#645
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/hashicorp/go-plugin-1.8.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/hashicorp/go-plugin from 1.4.6 to 1.8.0.

Release notes

Sourced from github.com/hashicorp/go-plugin's releases.

v1.8.0

What’s Changed

Compliance & Maintenance

  • updated copyright and license headers
  • Modernized build tags
  • Multiple GitHub Actions and dependency bumps

Fixes & Improvements

  • Fixed concurrency issue with pipesWaitGroup
  • Prevented pidfd leak in cmdrunner
  • Reduced logging configuration noise

Enhancements

  • Updated go_package to full path in proto
  • Improved gRPC example (plugin selection + encoding fix)
  • Added gRPC streaming example

Dependencies Upgrade

  • Upgraded protobuf
  • Several CI/CD action updates

New Contributors


v1.7.0

What's Changed

New Contributors

Full Changelog: hashicorp/go-plugin@v1.6.3...v1.7.0

... (truncated)

Changelog

Sourced from github.com/hashicorp/go-plugin's changelog.

Unreleased

SECURITY:

  • deps: Updated google.golang.org/grpc to v1.81.1 [GH-383]

ENHANCEMENTS:

  • deps: Removed direct use of deprecated github.com/golang/protobuf in favour of google.golang.org/protobuf [GH-388]

v1.7.0

CHANGES:

  • When go-plugin encounters a stack trace on the server stderr stream, it now raises output to a log-level of Error instead of Debug. [GH-292]

ENHANCEMENTS:

  • Don't spend resources parsing log lines when logging is disabled [GH-352]

v1.6.2

ENHANCEMENTS:

  • Added support for gRPC dial options to the Dial API [GH-257]

BUGS:

  • Fixed a bug where reattaching to a plugin that exits could kill an unrelated process [GH-320]

v1.6.1

BUGS:

  • Suppress spurious os.ErrClosed on plugin shutdown [GH-299]

ENHANCEMENTS:

  • deps: bump google.golang.org/grpc to v1.58.3 [GH-296]

v1.6.0

CHANGES:

  • plugin: Plugins written in other languages can optionally start to advertise whether they support gRPC broker multiplexing. If the environment variable PLUGIN_MULTIPLEX_GRPC is set, it is safe to include a seventh field containing a boolean value in the |-separated protocol negotiation line.

ENHANCEMENTS:

  • Support muxing gRPC broker connections over a single listener [GH-288]
  • client: Configurable buffer size for reading plugin log lines [GH-265]

... (truncated)

Commits
  • 155dcdd cmdrunner: release process handle in _pidAlive to avoid pidfd leak (#378)
  • 96d18ee [chore] : Bump actions/upload-artifact in the actions group (#376)
  • a0c251c [chore] : Bump actions/setup-go from 6.3.0 to 6.4.0 in the actions group (#375)
  • 6a56553 [chore] : Bump the actions group with 2 updates (#373)
  • abeb978 Bump protobuf from 4.25.8 to 5.29.6 in /examples/grpc/plugin-python (#372)
  • a4c9002 examples: Add gRPC streaming example (#339)
  • 0ac49e2 [chore] : Bump actions/checkout from 6.0.1 to 6.0.2 in the actions group (#370)
  • d662936 logging: lower priority of configuring messages (#311)
  • c57bf64 [chore] : Bump actions/setup-go from 6.1.0 to 6.2.0 in the actions group (#369)
  • a33e454 chore: add plugin selection and fix encoding in gRPC example (#368)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/hashicorp/go-plugin](https://github.com/hashicorp/go-plugin) from 1.4.6 to 1.8.0.
- [Release notes](https://github.com/hashicorp/go-plugin/releases)
- [Changelog](https://github.com/hashicorp/go-plugin/blob/main/CHANGELOG.md)
- [Commits](hashicorp/go-plugin@v1.4.6...v1.8.0)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/go-plugin
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants