chore(deps): bump golang.org/x/text from 0.38.0 to 0.40.0 - #179
Open
dependabot[bot] wants to merge 2 commits into
Open
chore(deps): bump golang.org/x/text from 0.38.0 to 0.40.0#179dependabot[bot] wants to merge 2 commits into
dependabot[bot] wants to merge 2 commits into
Conversation
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
dependabot
Bot
force-pushed
the
dependabot/go_modules/golang.org/x/text-0.40.0
branch
from
July 21, 2026 17:24
21d204e to
4df34a5
Compare
Bumps [golang.org/x/text](https://github.com/golang/text) from 0.38.0 to 0.40.0. - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.38.0...v0.40.0) --- updated-dependencies: - dependency-name: golang.org/x/text dependency-version: 0.40.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/go_modules/golang.org/x/text-0.40.0
branch
from
July 21, 2026 17:27
4df34a5 to
312ae27
Compare
marco-spagn
added a commit
that referenced
this pull request
Jul 22, 2026
The eval branch is off main, which still pins golang.org/x/text v0.38.0 (dependabot #179 not yet merged). govulncheck flags GO-2026-5970 in that version; v0.39.0 fixes it. Bumped to v0.40.0 to match dependabot #179 so the two don't diverge. go mod tidy pulled golang.org/x/sync v0.21.0 → v0.22.0. No source changes; build green. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
marco-spagn
added a commit
that referenced
this pull request
Jul 24, 2026
…ct audit (#185) * feat(eval): retrieval quality harness (recall@k / nDCG / MRR) + product audit Adds a retrieval QUALITY evaluation framework — measures whether /v1/retrieve returns the right memories, distinct from the SLO/k6 latency benchmarks which measure how fast. Closes the "no retrieval eval framework" gap: quality was neither tunable nor provable vs Mem0/Zep. eval/retrieval/: - run_eval.py — stdlib-only harness. recall@k, precision@k, hit@k, MRR, nDCG@k, macro-averaged, with a CI gate on thresholds.json. Seeds a self-contained corpus under root.eval.*, tolerates 429/5xx with backoff, detects real embedding readiness (not just row count) before scoring. - corpus/eval_seed.jsonl — 15 domain-neutral memories with deliberate distractors. - gold/seed_basic.jsonl — 10 queries with synonym gaps that force the semantic half (BM25-only misses them). - thresholds.json — CI gate floors. README.md — usage + how to extend. Makefile: `make eval-retrieval` (seed+eval), `make eval-retrieval-validate` (offline). Verified end-to-end against a live stack: with embeddings, recall@5=1.0 hit@5=1.0 mrr=1.0 nDCG@5=1.0 (gate passed); BM25-only (pre-embedding) scored 0.0 — the quantified proof that PCMI's semantic retrieval carries these queries. docs/PRODUCT_AUDIT.md: independent Principal-Engineer audit of the platform (architecture, gap table with P0/P1/P2, roadmap, top-10 competitive features). This eval harness implements its P0 #3. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> * ci: gate retrieval quality (recall@k / nDCG) on eval thresholds Adds a `retrieval-eval` job mirroring `integration-e2e`: brings up the compose stack (postgres + redis + api + worker) with the OpenAI secret, seeds the self-contained corpus, waits for embeddings, and runs eval/retrieval/run_eval.py with its CI gate on eval/retrieval/thresholds.json. A quality regression (recall, MRR, or nDCG below floor) now fails CI. - Skips gracefully when OPENAI_API_KEY is absent (forks/external PRs), matching the integration-e2e pattern — the semantic half needs embeddings. - RATE_LIMIT_DISABLED=true in the compose .env so the bursty benchmark isn't throttled (the harness also backs off on 429/5xx). - Uploads the per-query JSON report as an artifact (14-day retention). needs [go, golangci-lint]; timeout 30m. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> * chore(security): bump golang.org/x/text to v0.40.0 to fix GO-2026-5970 The eval branch is off main, which still pins golang.org/x/text v0.38.0 (dependabot #179 not yet merged). govulncheck flags GO-2026-5970 in that version; v0.39.0 fixes it. Bumped to v0.40.0 to match dependabot #179 so the two don't diverge. go mod tidy pulled golang.org/x/sync v0.21.0 → v0.22.0. No source changes; build green. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps golang.org/x/text from 0.38.0 to 0.40.0.
Commits
724af9cgo.mod: update golang.org/x dependenciesbf5b9d6internal/export/idna: always treat Punycode encoding pure ASCII as an errorb326f3dgo.mod: update golang.org/x dependencies5ae8e57unicode/norm: avoid infinite loop on invalid input0dc94a2all: fix some comments