Skip to content

Bump internal dependencies and reduce image size - #928

Merged
Shaptic merged 2 commits into
mainfrom
deps/grpc-1.79.3-urllib3-2.6.3
Aug 13, 2026
Merged

Bump internal dependencies and reduce image size#928
Shaptic merged 2 commits into
mainfrom
deps/grpc-1.79.3-urllib3-2.6.3

Conversation

@Shaptic

@Shaptic Shaptic commented Aug 12, 2026

Copy link
Copy Markdown
Contributor

grpc v1.76.0 → v1.79.3

Remains an indirect dependency. go mod tidy carried along the usual cascade: genproto/googleapis/{api,rpc}, go.opentelemetry.io/otel* 1.38.0 → 1.39.0, golang.org/x/oauth2 0.32.0 → 0.34.0, cel.dev/expr, envoyproxy/*, cncf/xds.

go vet ./... is clean and the go/toolchain directives are unchanged.

--no-install-recommends on the stellar-core install

Both Dockerfiles already pass --no-install-recommends to their other apt install invocations; this brings the stellar-core install in line. The runtime images no longer carry the unnecessary Python 3 stack. Release image goes from 360MB to 324MB.

🤖 Generated with Claude Code

Copilot AI balanced review requested due to automatic review settings August 12, 2026 22:42

This comment was marked as outdated.

@Shaptic Shaptic changed the title Bump grpc to v1.79.3 and pin urllib3 2.6.3 in the Docker images Bump google.golang.org/grpc to v1.79.3 Aug 12, 2026
@Shaptic Shaptic changed the title Bump google.golang.org/grpc to v1.79.3 Bump grpc to v1.79.3; install stellar-core without Recommends Aug 13, 2026
Upgrades google.golang.org/grpc from v1.76.0 to v1.79.3. It remains an
indirect dependency; go mod tidy carried along the usual cascade
(genproto, otel 1.38 -> 1.39, x/oauth2, cel.dev/expr, envoyproxy, cncf/xds).

Both Dockerfiles already use --no-install-recommends for their other apt
installs; this makes the stellar-core install consistent. Drops the Python
stack from the runtime images, cutting the release image from 360MB to 324MB.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
@Shaptic Shaptic changed the title Bump grpc to v1.79.3; install stellar-core without Recommends Bump internal dependencies and reduce image size Aug 13, 2026
@Shaptic
Shaptic force-pushed the deps/grpc-1.79.3-urllib3-2.6.3 branch from 1697deb to f287068 Compare August 13, 2026 21:17
@Shaptic
Shaptic enabled auto-merge (squash) August 13, 2026 22:51
@Shaptic
Shaptic merged commit 39080fb into main Aug 13, 2026
17 checks passed
@Shaptic
Shaptic deleted the deps/grpc-1.79.3-urllib3-2.6.3 branch August 13, 2026 23:14
Shaptic added a commit that referenced this pull request Aug 13, 2026
… cut

The v28.0.0 section landed with #913, when the release branch pointed at the
protocol-next merge. Re-syncing to main brought in #854 (backfill bulk-load)
and #928 (dependency bump + slimmer release image), so the section now names
them.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants