chore: refresh Go module deps

[clawford-bot]

Summary

• broaden the Go dependency refresh across the maintained module graph
• update the Cloud/Google stack that can be raised cleanly under go mod tidy
• keep cloud.google.com/go/ai at v0.8.0 because upgrading it to v0.18.0 breaks builds with the current github.com/google/generative-ai-go v0.20.1 dependency

Validation

• go test ./...
• go build ./...
• go list -u -m all

Notes

I also tried forcing more transitive upgrades, but Go prunes many of those back out of a tidy go.mod because they are not directly needed by this module. I left the PR in a tidy, validated state rather than pinning a large set of extra transitive modules manually. Updating cloud.google.com/go/ai specifically was tested and fails to compile due to generativelanguagepb API mismatches in github.com/google/generative-ai-go.

[coderabbitai]

📝 Walkthrough

Walkthrough

Updated Go module dependencies, upgrading Google Cloud and OpenTelemetry packages, adding new direct dependencies for cloud services (pubsub, spanner, storage) and OpenTelemetry operations, and introducing additional gRPC, xDS, and utility libraries.

Changes

Cohort / File(s)	Summary
Module Dependency Updates go.mod	Updated Google Cloud (cloud.google.com/go, cloud.google.com/go/longrunning), OpenTelemetry (otelgrpc, otelhttp, opentelemetry-operations-go), and related packages. Added new dependencies for Google Cloud services and OpenTelemetry components. Replaced older genproto entries with unified newer versions and added gRPC/xDS/Envoy libraries.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Possibly related PRs

• chore: update Go deps and CI runtime #47: Updates Google Cloud and OpenTelemetry-related dependencies in go.mod with overlapping version bumps to genproto, gax, googleapis, and otel packages.

Poem

🐰 With a hop and a bound, dependencies dance,
Google Cloud and OTEL in a grand new prance,
Versions bumped up, fresh modules in sight,
gRPC and spanner shining so bright! ✨

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title 'chore: refresh Go module deps' directly and clearly describes the main change—updating Go module dependencies.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/update-go-modules-2026-04

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@go.mod`:
- Around line 22-77: The go.mod require block added many new direct modules
(e.g., cloud.google.com/go/pubsub/v2, cloud.google.com/go/storage,
go.opentelemetry.io/contrib/detectors/gcp, go.opentelemetry.io/otel, etc.) that
likely shouldn’t be direct; run the provided verification snippet (or run go mod
why -m for each listed module) to identify which modules are actually imported,
then run go mod tidy to remove unused direct requirements and let genuinely
indirect modules be marked with // indirect; for any modules still needed but
only pulled in transitively, remove their explicit require lines so they become
indirect, re-run go mod tidy and go test to confirm no breakage, and commit the
updated go.mod/go.sum.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 5ad38a25-0f7c-4aba-8d60-840b9d7fb3ca

📥 Commits

Reviewing files that changed from the base of the PR and between eb285c9 and 7230caa.

⛔ Files ignored due to path filters (1)

• go.sum is excluded by !**/*.sum

📒 Files selected for processing (1)

• go.mod

[drywaters]

@codex review

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. Can't wait for the next one!

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".