Skip to content

Merge queue: Consolidate 16 passing Dependabot PRs - #942

Merged
phlax merged 16 commits into
mainfrom
copilot/create-merge-queue-pr
Jan 3, 2026
Merged

Merge queue: Consolidate 16 passing Dependabot PRs#942
phlax merged 16 commits into
mainfrom
copilot/create-merge-queue-pr

Conversation

CopilotAI commented Jan 3, 2026•
edited
Loading

Copy link
Copy Markdown
Contributor

Consolidates dependency updates from 16 passing Dependabot PRs to reduce CI costs. Each PR is cherry-picked as a clean individual commit to allow individual revert capability after rebase landing.

Status

Complete: Successfully cherry-picked 16 passing PRs with clean commits.

PRs Included (16)

Docker Images:

Go Modules:

Python:

JavaScript:

Excluded

Approach

  1. User labeled passing PRs with pick-me label (17 total)
  2. Cherry-picked commits cleanly (16 succeeded, 1 skipped due to conflict)
  3. Applied conflicting package.json PRs in reverse order to avoid conflicts
  4. Each commit is clean and can be reverted individually after rebase landing

Validation

  • ✅ Code review passed
  • ✅ Security scan clean
  • ✅ 16 clean commits (one per PR, no merge commits)
  • ✅ All picks can be reverted individually if needed
Original prompt

this repo has many pending dependabot prs - some are failing, some are passing

ci is expensive - so rather than landing all the passing ones individually i want you to create a merge queue pr that picks the commits from all the passing dependabot prs

its absolutely ESSENTIAL you DO NOT pick the commits from any of the failing prs

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

CopilotAI changed the title [WIP] Create a merge queue PR for passing dependabot commitsMerge queue: Consolidate passing Dependabot PRsJan 3, 2026
CopilotAI requested a review from phlaxJanuary 3, 2026 12:36
@phlax

phlax commented Jan 3, 2026

Copy link
Copy Markdown
Member

@copilot ive labelled the passing ones with pick-me

note: if any touch the same file then you should apply in reverse order from their affected line nos - this generally avoids conflicts

CopilotAI commented Jan 3, 2026

Copy link
Copy Markdown
ContributorAuthor

@copilot ive labelled the passing ones with pick-me

note: if any touch the same file then you should apply in reverse order from their affected line nos - this generally avoids conflicts

Done! Cherry-picked 16 of the 17 pick-me PRs in clean commits (commit 3428c4d).

Skipped #933 (actions/checkout) for the 2nd pass since it conflicts with recent bind-mounts changes.

All package.json PRs (#898, #900, #905, #911) applied cleanly in reverse order as you suggested - git handled the merges automatically without conflicts.

dependabotBot added 16 commits January 3, 2026 12:49
@dependabot@phlax
build(deps): bump otel/opentelemetry-collector in /opentelemetry
bcac2e3
Bumps otel/opentelemetry-collector from 0.138.0 to 0.140.0.
---
updated-dependencies:
- dependency-name: otel/opentelemetry-collector
dependency-version: 0.140.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump redis from 8.2.2 to 8.4.0 in /redis
f7369a3
Bumps redis from 8.2.2 to 8.4.0.
---
updated-dependencies:
- dependency-name: redis
dependency-version: 8.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump the examples-load-reporting group across 1 director…
8a79d9b
…y with 2 updates
Bumps the examples-load-reporting group with 2 updates in the /load-reporting-service directory: [github.com/envoyproxy/go-control-plane/envoy](https://github.com/envoyproxy/go-control-plane) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).
Updates `github.com/envoyproxy/go-control-plane/envoy` from 1.35.0 to 1.36.0
- [Release notes](https://github.com/envoyproxy/go-control-plane/releases)
- [Changelog](https://github.com/envoyproxy/go-control-plane/blob/main/CHANGELOG.md)
- [Commits](envoyproxy/go-control-plane@envoy/v1.35.0...envoy/v1.36.0)
Updates `google.golang.org/grpc` from 1.76.0 to 1.77.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.76.0...v1.77.0)
---
updated-dependencies:
- dependency-name: github.com/envoyproxy/go-control-plane/envoy
dependency-version: 1.36.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: examples-load-reporting
- dependency-name: google.golang.org/grpc
dependency-version: 1.77.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: examples-load-reporting
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump the examples-ext-authz group across 1 directory wit…
8bae3ee
…h 2 updates
Bumps the examples-ext-authz group with 2 updates in the /ext_authz/auth/grpc-service directory: [github.com/envoyproxy/go-control-plane/envoy](https://github.com/envoyproxy/go-control-plane) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).
Updates `github.com/envoyproxy/go-control-plane/envoy` from 1.35.0 to 1.36.0
- [Release notes](https://github.com/envoyproxy/go-control-plane/releases)
- [Changelog](https://github.com/envoyproxy/go-control-plane/blob/main/CHANGELOG.md)
- [Commits](envoyproxy/go-control-plane@envoy/v1.35.0...envoy/v1.36.0)
Updates `google.golang.org/grpc` from 1.76.0 to 1.77.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.76.0...v1.77.0)
---
updated-dependencies:
- dependency-name: github.com/envoyproxy/go-control-plane/envoy
dependency-version: 1.36.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: examples-ext-authz
- dependency-name: google.golang.org/grpc
dependency-version: 1.77.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: examples-ext-authz
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump the examples-grpc-bridge group across 1 directory w…
750be4f
…ith 2 updates
Bumps the examples-grpc-bridge group with 2 updates in the /grpc-bridge/server directory: [golang.org/x/net](https://github.com/golang/net) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).
Updates `golang.org/x/net` from 0.46.0 to 0.47.0
- [Commits](golang/net@v0.46.0...v0.47.0)
Updates `google.golang.org/grpc` from 1.76.0 to 1.77.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.76.0...v1.77.0)
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-version: 0.47.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: examples-grpc-bridge
- dependency-name: google.golang.org/grpc
dependency-version: 1.77.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: examples-grpc-bridge
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump node in /shared/node
61d33cc
Bumps node from 25.0-bookworm-slim to 25.2-bookworm-slim.
---
updated-dependencies:
- dependency-name: node
dependency-version: 25.2-bookworm-slim
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump apache/skywalking-oap-server in /skywalking
15721f7
Bumps apache/skywalking-oap-server from 10.2.0 to 10.3.0.
---
updated-dependencies:
- dependency-name: apache/skywalking-oap-server
dependency-version: 10.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump golang in /shared/golang
b9c4739
Bumps golang from 1.25.3-bookworm to 1.25.4-bookworm.
---
updated-dependencies:
- dependency-name: golang
dependency-version: 1.25.4-bookworm
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump aiohttp
4e67e31
---
updated-dependencies:
- dependency-name: aiohttp
dependency-version: 3.13.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-workflows
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump aiohttp
a2a7e22
---
updated-dependencies:
- dependency-name: aiohttp
dependency-version: 3.13.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: examples-shared-python
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump nginx
332a62b
Bumps the examples-local-ratelimit group in /local_ratelimit with 1 update: nginx.
Updates `nginx` from `029d446` to `b619c34`
---
updated-dependencies:
- dependency-name: nginx
dependency-version: b619c34a163ac12f68c1982568a122c4953dbf3126b8dbf0cc2f6fdbfd85de27
dependency-type: direct:production
dependency-group: examples-local-ratelimit
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump openpolicyagent/opa
b7fe260
Bumps the examples-ext-authz group in /ext_authz with 1 update: openpolicyagent/opa.
Updates `openpolicyagent/opa` from 1.9.0-envoy-5-static to 1.9.0-envoy-6-static
---
updated-dependencies:
- dependency-name: openpolicyagent/opa
dependency-version: 1.9.0-envoy-6-static
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: examples-ext-authz
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps-dev): bump eslint-plugin-react-hooks in /single-page-app/ui
d62e2c7
Bumps [eslint-plugin-react-hooks](https://github.com/facebook/react/tree/HEAD/packages/eslint-plugin-react-hooks) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/packages/eslint-plugin-react-hooks/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/HEAD/packages/eslint-plugin-react-hooks)
---
updated-dependencies:
- dependency-name: eslint-plugin-react-hooks
dependency-version: 7.0.1
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps-dev): bump @vitejs/plugin-react in /single-page-app/ui
78cadaa
Bumps [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) from 5.0.4 to 5.1.0.
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@5.1.0/packages/plugin-react)
---
updated-dependencies:
- dependency-name: "@vitejs/plugin-react"
dependency-version: 5.1.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump react-router-dom in /single-page-app/ui
5ad9a79
Bumps [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) from 7.9.4 to 7.9.5.
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.9.5/packages/react-router-dom)
---
updated-dependencies:
- dependency-name: react-router-dom
dependency-version: 7.9.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump @chakra-ui/react in /single-page-app/ui
47f63d8
Bumps [@chakra-ui/react](https://github.com/chakra-ui/chakra-ui/tree/HEAD/packages/react) from 3.28.0 to 3.28.1.
- [Release notes](https://github.com/chakra-ui/chakra-ui/releases)
- [Changelog](https://github.com/chakra-ui/chakra-ui/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/chakra-ui/chakra-ui/commits/@chakra-ui/react@3.28.1/packages/react)
---
updated-dependencies:
- dependency-name: "@chakra-ui/react"
dependency-version: 3.28.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
@phlax
phlaxforce-pushed the copilot/create-merge-queue-pr branch from 3428c4d to 47f63d8CompareJanuary 3, 2026 12:49
CopilotAI changed the title Merge queue: Consolidate passing Dependabot PRsMerge queue: Consolidate 16 passing Dependabot PRsJan 3, 2026
@phlax
phlaxforce-pushed the copilot/create-merge-queue-pr branch from 1a33aee to 47f63d8CompareJanuary 3, 2026 13:03
@phlax
phlax marked this pull request as ready for review January 3, 2026 13:14
@phlax
phlax merged commit 1cbf11e into mainJan 3, 2026
9 checks passed
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@phlaxphlaxAwaiting requested review from phlax

Assignees

@phlaxphlax

Copilot code reviewCopilot

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@phlax
, 'i'); if (__m === '*' || __re.test(location.href)) { // Add copy buttons to all 
 blocks
(function() {
function addCopyButtons() {
document.querySelectorAll('pre code').forEach(function(codeBlock) {
if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;
codeBlock.parentElement.setAttribute('data-copy-added', 'true');
var btn = document.createElement('button');
btn.textContent = 'Copy';
btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';
btn.onmouseover = function() { this.style.opacity = '1'; };
btn.onmouseout = function() { this.style.opacity = '0.7'; };
btn.onclick = function() {
navigator.clipboard.writeText(codeBlock.textContent).then(function() {
btn.textContent = 'Copied!';
setTimeout(function() { btn.textContent = 'Copy'; }, 1500);
});
};
codeBlock.parentElement.style.position = 'relative';
codeBlock.parentElement.appendChild(btn);
});
}
addCopyButtons();
// Re-run on dynamic content
var observer = new MutationObserver(addCopyButtons);
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '
Merge queue: Consolidate 16 passing Dependabot PRs by Copilot · Pull Request #942 · envoyproxy/examples · GitHub
Skip to content
Merge queue: Consolidate 16 passing Dependabot PRs - #942
Merged
phlax merged 16 commits into
mainfrom 
copilot/create-merge-queue-pr
Jan 3, 2026
Merged
Merge queue: Consolidate 16 passing Dependabot PRs#942
phlax merged 16 commits into
mainfrom 
copilot/create-merge-queue-pr
Conversation
CopilotAI
commented
Jan 3, 2026•

edited

Loading

Copy link


Copy Markdown

Contributor
Consolidates dependency updates from 16 passing Dependabot PRs to reduce CI costs. Each PR is cherry-picked as a clean individual commit to allow individual revert capability after rebase landing.
Status
Complete: Successfully cherry-picked 16 passing PRs with clean commits.
PRs Included (16)
Docker Images:
Go Modules:
Python:
JavaScript:
Excluded
Approach
  1. User labeled passing PRs with pick-me label (17 total)
  2. Cherry-picked commits cleanly (16 succeeded, 1 skipped due to conflict)
  3. Applied conflicting package.json PRs in reverse order to avoid conflicts
  4. Each commit is clean and can be reverted individually after rebase landing
Validation
  • ✅ Code review passed
  • ✅ Security scan clean
  • ✅ 16 clean commits (one per PR, no merge commits)
  • ✅ All picks can be reverted individually if needed
Original prompt
this repo has many pending dependabot prs - some are failing, some are passing
ci is expensive - so rather than landing all the passing ones individually i want you to create a merge queue pr that picks the commits from all the passing dependabot prs
its absolutely ESSENTIAL you DO NOT pick the commits from any of the failing prs
💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.
CopilotAI
changed the title
[WIP] Create a merge queue PR for passing dependabot commitsMerge queue: Consolidate passing Dependabot PRsJan 3, 2026
CopilotAI
requested a review
from phlaxJanuary 3, 2026 12:36
@phlax
phlax
commented
Jan 3, 2026

Copy link


Copy Markdown

Member
@copilot ive labelled the passing ones with pick-me
note: if any touch the same file then you should apply in reverse order from their affected line nos - this generally avoids conflicts
CopilotAI
commented
Jan 3, 2026

Copy link


Copy Markdown

ContributorAuthor
@copilot ive labelled the passing ones with pick-me
note: if any touch the same file then you should apply in reverse order from their affected line nos - this generally avoids conflicts
Done! Cherry-picked 16 of the 17 pick-me PRs in clean commits (commit 3428c4d).
Skipped #933 (actions/checkout) for the 2nd pass since it conflicts with recent bind-mounts changes.
All package.json PRs (#898, #900, #905, #911) applied cleanly in reverse order as you suggested - git handled the merges automatically without conflicts.
dependabotBot
added 16 commits
January 3, 2026 12:49
@dependabot@phlax
build(deps): bump otel/opentelemetry-collector in /opentelemetry
bcac2e3
Bumps otel/opentelemetry-collector from 0.138.0 to 0.140.0.
---
updated-dependencies:
- dependency-name: otel/opentelemetry-collector
dependency-version: 0.140.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump redis from 8.2.2 to 8.4.0 in /redis
f7369a3
Bumps redis from 8.2.2 to 8.4.0.
---
updated-dependencies:
- dependency-name: redis
dependency-version: 8.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump the examples-load-reporting group across 1 director…
8a79d9b
…y with 2 updates
Bumps the examples-load-reporting group with 2 updates in the /load-reporting-service directory: [github.com/envoyproxy/go-control-plane/envoy](https://github.com/envoyproxy/go-control-plane) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).
Updates `github.com/envoyproxy/go-control-plane/envoy` from 1.35.0 to 1.36.0
- [Release notes](https://github.com/envoyproxy/go-control-plane/releases)
- [Changelog](https://github.com/envoyproxy/go-control-plane/blob/main/CHANGELOG.md)
- [Commits](envoyproxy/go-control-plane@envoy/v1.35.0...envoy/v1.36.0)
Updates `google.golang.org/grpc` from 1.76.0 to 1.77.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.76.0...v1.77.0)
---
updated-dependencies:
- dependency-name: github.com/envoyproxy/go-control-plane/envoy
dependency-version: 1.36.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: examples-load-reporting
- dependency-name: google.golang.org/grpc
dependency-version: 1.77.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: examples-load-reporting
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump the examples-ext-authz group across 1 directory wit…
8bae3ee
…h 2 updates
Bumps the examples-ext-authz group with 2 updates in the /ext_authz/auth/grpc-service directory: [github.com/envoyproxy/go-control-plane/envoy](https://github.com/envoyproxy/go-control-plane) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).
Updates `github.com/envoyproxy/go-control-plane/envoy` from 1.35.0 to 1.36.0
- [Release notes](https://github.com/envoyproxy/go-control-plane/releases)
- [Changelog](https://github.com/envoyproxy/go-control-plane/blob/main/CHANGELOG.md)
- [Commits](envoyproxy/go-control-plane@envoy/v1.35.0...envoy/v1.36.0)
Updates `google.golang.org/grpc` from 1.76.0 to 1.77.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.76.0...v1.77.0)
---
updated-dependencies:
- dependency-name: github.com/envoyproxy/go-control-plane/envoy
dependency-version: 1.36.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: examples-ext-authz
- dependency-name: google.golang.org/grpc
dependency-version: 1.77.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: examples-ext-authz
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump the examples-grpc-bridge group across 1 directory w…
750be4f
…ith 2 updates
Bumps the examples-grpc-bridge group with 2 updates in the /grpc-bridge/server directory: [golang.org/x/net](https://github.com/golang/net) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).
Updates `golang.org/x/net` from 0.46.0 to 0.47.0
- [Commits](golang/net@v0.46.0...v0.47.0)
Updates `google.golang.org/grpc` from 1.76.0 to 1.77.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.76.0...v1.77.0)
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-version: 0.47.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: examples-grpc-bridge
- dependency-name: google.golang.org/grpc
dependency-version: 1.77.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: examples-grpc-bridge
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump node in /shared/node
61d33cc
Bumps node from 25.0-bookworm-slim to 25.2-bookworm-slim.
---
updated-dependencies:
- dependency-name: node
dependency-version: 25.2-bookworm-slim
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump apache/skywalking-oap-server in /skywalking
15721f7
Bumps apache/skywalking-oap-server from 10.2.0 to 10.3.0.
---
updated-dependencies:
- dependency-name: apache/skywalking-oap-server
dependency-version: 10.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump golang in /shared/golang
b9c4739
Bumps golang from 1.25.3-bookworm to 1.25.4-bookworm.
---
updated-dependencies:
- dependency-name: golang
dependency-version: 1.25.4-bookworm
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump aiohttp
4e67e31
---
updated-dependencies:
- dependency-name: aiohttp
dependency-version: 3.13.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-workflows
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump aiohttp
a2a7e22
---
updated-dependencies:
- dependency-name: aiohttp
dependency-version: 3.13.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: examples-shared-python
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump nginx
332a62b
Bumps the examples-local-ratelimit group in /local_ratelimit with 1 update: nginx.
Updates `nginx` from `029d446` to `b619c34`
---
updated-dependencies:
- dependency-name: nginx
dependency-version: b619c34a163ac12f68c1982568a122c4953dbf3126b8dbf0cc2f6fdbfd85de27
dependency-type: direct:production
dependency-group: examples-local-ratelimit
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump openpolicyagent/opa
b7fe260
Bumps the examples-ext-authz group in /ext_authz with 1 update: openpolicyagent/opa.
Updates `openpolicyagent/opa` from 1.9.0-envoy-5-static to 1.9.0-envoy-6-static
---
updated-dependencies:
- dependency-name: openpolicyagent/opa
dependency-version: 1.9.0-envoy-6-static
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: examples-ext-authz
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps-dev): bump eslint-plugin-react-hooks in /single-page-app/ui
d62e2c7
Bumps [eslint-plugin-react-hooks](https://github.com/facebook/react/tree/HEAD/packages/eslint-plugin-react-hooks) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/packages/eslint-plugin-react-hooks/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/HEAD/packages/eslint-plugin-react-hooks)
---
updated-dependencies:
- dependency-name: eslint-plugin-react-hooks
dependency-version: 7.0.1
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps-dev): bump @vitejs/plugin-react in /single-page-app/ui
78cadaa
Bumps [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) from 5.0.4 to 5.1.0.
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@5.1.0/packages/plugin-react)
---
updated-dependencies:
- dependency-name: "@vitejs/plugin-react"
dependency-version: 5.1.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump react-router-dom in /single-page-app/ui
5ad9a79
Bumps [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) from 7.9.4 to 7.9.5.
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.9.5/packages/react-router-dom)
---
updated-dependencies:
- dependency-name: react-router-dom
dependency-version: 7.9.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump @chakra-ui/react in /single-page-app/ui
47f63d8
Bumps [@chakra-ui/react](https://github.com/chakra-ui/chakra-ui/tree/HEAD/packages/react) from 3.28.0 to 3.28.1.
- [Release notes](https://github.com/chakra-ui/chakra-ui/releases)
- [Changelog](https://github.com/chakra-ui/chakra-ui/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/chakra-ui/chakra-ui/commits/@chakra-ui/react@3.28.1/packages/react)
---
updated-dependencies:
- dependency-name: "@chakra-ui/react"
dependency-version: 3.28.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
@phlax
phlaxforce-pushed
the
copilot/create-merge-queue-pr
branch
from
3428c4d to
47f63d8CompareJanuary 3, 2026 12:49
CopilotAI
changed the title
Merge queue: Consolidate passing Dependabot PRsMerge queue: Consolidate 16 passing Dependabot PRsJan 3, 2026
@phlax
phlaxforce-pushed
the
copilot/create-merge-queue-pr
branch
from
1a33aee to
47f63d8CompareJanuary 3, 2026 13:03
@phlax
phlax
marked this pull request as ready for review
January 3, 2026 13:14
@phlax
phlax
merged commit 1cbf11e
into
mainJan 3, 2026

9 checks passed

Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers

@phlaxphlaxAwaiting requested review from phlax

Assignees

@phlaxphlax
Copilot code reviewCopilot

Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

2 participants

@phlax

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Force GitHub README to respect dark mode
(function() {
var style = document.createElement('style');
style.textContent = '
.markdown-body {
color-scheme: dark light;
}
.markdown-body pre { background: #161b22 !important; }
.markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }
.markdown-body table th, .markdown-body table td { border-color: #30363d !important; }
.markdown-body img { background: #0d1117; }
.markdown-body blockquote { border-left-color: #8b949e; }
.markdown-body hr { border-color: #30363d; }
';
document.head.appendChild(style);
})();
}
} catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
Merge queue: Consolidate 16 passing Dependabot PRs by Copilot · Pull Request #942 · envoyproxy/examples · GitHub
Skip to content
Merge queue: Consolidate 16 passing Dependabot PRs - #942
Merged
phlax merged 16 commits into
mainfrom 
copilot/create-merge-queue-pr
Jan 3, 2026
Merged
Merge queue: Consolidate 16 passing Dependabot PRs#942
phlax merged 16 commits into
mainfrom 
copilot/create-merge-queue-pr
Conversation
CopilotAI
commented
Jan 3, 2026•

edited

Loading

Copy link


Copy Markdown

Contributor
Consolidates dependency updates from 16 passing Dependabot PRs to reduce CI costs. Each PR is cherry-picked as a clean individual commit to allow individual revert capability after rebase landing.
Status
Complete: Successfully cherry-picked 16 passing PRs with clean commits.
PRs Included (16)
Docker Images:
Go Modules:
Python:
JavaScript:
Excluded
Approach
  1. User labeled passing PRs with pick-me label (17 total)
  2. Cherry-picked commits cleanly (16 succeeded, 1 skipped due to conflict)
  3. Applied conflicting package.json PRs in reverse order to avoid conflicts
  4. Each commit is clean and can be reverted individually after rebase landing
Validation
  • ✅ Code review passed
  • ✅ Security scan clean
  • ✅ 16 clean commits (one per PR, no merge commits)
  • ✅ All picks can be reverted individually if needed
Original prompt
this repo has many pending dependabot prs - some are failing, some are passing
ci is expensive - so rather than landing all the passing ones individually i want you to create a merge queue pr that picks the commits from all the passing dependabot prs
its absolutely ESSENTIAL you DO NOT pick the commits from any of the failing prs
💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.
CopilotAI
changed the title
[WIP] Create a merge queue PR for passing dependabot commitsMerge queue: Consolidate passing Dependabot PRsJan 3, 2026
CopilotAI
requested a review
from phlaxJanuary 3, 2026 12:36
@phlax
phlax
commented
Jan 3, 2026

Copy link


Copy Markdown

Member
@copilot ive labelled the passing ones with pick-me
note: if any touch the same file then you should apply in reverse order from their affected line nos - this generally avoids conflicts
CopilotAI
commented
Jan 3, 2026

Copy link


Copy Markdown

ContributorAuthor
@copilot ive labelled the passing ones with pick-me
note: if any touch the same file then you should apply in reverse order from their affected line nos - this generally avoids conflicts
Done! Cherry-picked 16 of the 17 pick-me PRs in clean commits (commit 3428c4d).
Skipped #933 (actions/checkout) for the 2nd pass since it conflicts with recent bind-mounts changes.
All package.json PRs (#898, #900, #905, #911) applied cleanly in reverse order as you suggested - git handled the merges automatically without conflicts.
dependabotBot
added 16 commits
January 3, 2026 12:49
@dependabot@phlax
build(deps): bump otel/opentelemetry-collector in /opentelemetry
bcac2e3
Bumps otel/opentelemetry-collector from 0.138.0 to 0.140.0.
---
updated-dependencies:
- dependency-name: otel/opentelemetry-collector
dependency-version: 0.140.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump redis from 8.2.2 to 8.4.0 in /redis
f7369a3
Bumps redis from 8.2.2 to 8.4.0.
---
updated-dependencies:
- dependency-name: redis
dependency-version: 8.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump the examples-load-reporting group across 1 director…
8a79d9b
…y with 2 updates
Bumps the examples-load-reporting group with 2 updates in the /load-reporting-service directory: [github.com/envoyproxy/go-control-plane/envoy](https://github.com/envoyproxy/go-control-plane) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).
Updates `github.com/envoyproxy/go-control-plane/envoy` from 1.35.0 to 1.36.0
- [Release notes](https://github.com/envoyproxy/go-control-plane/releases)
- [Changelog](https://github.com/envoyproxy/go-control-plane/blob/main/CHANGELOG.md)
- [Commits](envoyproxy/go-control-plane@envoy/v1.35.0...envoy/v1.36.0)
Updates `google.golang.org/grpc` from 1.76.0 to 1.77.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.76.0...v1.77.0)
---
updated-dependencies:
- dependency-name: github.com/envoyproxy/go-control-plane/envoy
dependency-version: 1.36.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: examples-load-reporting
- dependency-name: google.golang.org/grpc
dependency-version: 1.77.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: examples-load-reporting
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump the examples-ext-authz group across 1 directory wit…
8bae3ee
…h 2 updates
Bumps the examples-ext-authz group with 2 updates in the /ext_authz/auth/grpc-service directory: [github.com/envoyproxy/go-control-plane/envoy](https://github.com/envoyproxy/go-control-plane) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).
Updates `github.com/envoyproxy/go-control-plane/envoy` from 1.35.0 to 1.36.0
- [Release notes](https://github.com/envoyproxy/go-control-plane/releases)
- [Changelog](https://github.com/envoyproxy/go-control-plane/blob/main/CHANGELOG.md)
- [Commits](envoyproxy/go-control-plane@envoy/v1.35.0...envoy/v1.36.0)
Updates `google.golang.org/grpc` from 1.76.0 to 1.77.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.76.0...v1.77.0)
---
updated-dependencies:
- dependency-name: github.com/envoyproxy/go-control-plane/envoy
dependency-version: 1.36.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: examples-ext-authz
- dependency-name: google.golang.org/grpc
dependency-version: 1.77.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: examples-ext-authz
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump the examples-grpc-bridge group across 1 directory w…
750be4f
…ith 2 updates
Bumps the examples-grpc-bridge group with 2 updates in the /grpc-bridge/server directory: [golang.org/x/net](https://github.com/golang/net) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).
Updates `golang.org/x/net` from 0.46.0 to 0.47.0
- [Commits](golang/net@v0.46.0...v0.47.0)
Updates `google.golang.org/grpc` from 1.76.0 to 1.77.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.76.0...v1.77.0)
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-version: 0.47.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: examples-grpc-bridge
- dependency-name: google.golang.org/grpc
dependency-version: 1.77.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: examples-grpc-bridge
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump node in /shared/node
61d33cc
Bumps node from 25.0-bookworm-slim to 25.2-bookworm-slim.
---
updated-dependencies:
- dependency-name: node
dependency-version: 25.2-bookworm-slim
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump apache/skywalking-oap-server in /skywalking
15721f7
Bumps apache/skywalking-oap-server from 10.2.0 to 10.3.0.
---
updated-dependencies:
- dependency-name: apache/skywalking-oap-server
dependency-version: 10.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump golang in /shared/golang
b9c4739
Bumps golang from 1.25.3-bookworm to 1.25.4-bookworm.
---
updated-dependencies:
- dependency-name: golang
dependency-version: 1.25.4-bookworm
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump aiohttp
4e67e31
---
updated-dependencies:
- dependency-name: aiohttp
dependency-version: 3.13.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-workflows
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump aiohttp
a2a7e22
---
updated-dependencies:
- dependency-name: aiohttp
dependency-version: 3.13.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: examples-shared-python
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump nginx
332a62b
Bumps the examples-local-ratelimit group in /local_ratelimit with 1 update: nginx.
Updates `nginx` from `029d446` to `b619c34`
---
updated-dependencies:
- dependency-name: nginx
dependency-version: b619c34a163ac12f68c1982568a122c4953dbf3126b8dbf0cc2f6fdbfd85de27
dependency-type: direct:production
dependency-group: examples-local-ratelimit
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump openpolicyagent/opa
b7fe260
Bumps the examples-ext-authz group in /ext_authz with 1 update: openpolicyagent/opa.
Updates `openpolicyagent/opa` from 1.9.0-envoy-5-static to 1.9.0-envoy-6-static
---
updated-dependencies:
- dependency-name: openpolicyagent/opa
dependency-version: 1.9.0-envoy-6-static
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: examples-ext-authz
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps-dev): bump eslint-plugin-react-hooks in /single-page-app/ui
d62e2c7
Bumps [eslint-plugin-react-hooks](https://github.com/facebook/react/tree/HEAD/packages/eslint-plugin-react-hooks) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/packages/eslint-plugin-react-hooks/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/HEAD/packages/eslint-plugin-react-hooks)
---
updated-dependencies:
- dependency-name: eslint-plugin-react-hooks
dependency-version: 7.0.1
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps-dev): bump @vitejs/plugin-react in /single-page-app/ui
78cadaa
Bumps [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) from 5.0.4 to 5.1.0.
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@5.1.0/packages/plugin-react)
---
updated-dependencies:
- dependency-name: "@vitejs/plugin-react"
dependency-version: 5.1.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump react-router-dom in /single-page-app/ui
5ad9a79
Bumps [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) from 7.9.4 to 7.9.5.
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.9.5/packages/react-router-dom)
---
updated-dependencies:
- dependency-name: react-router-dom
dependency-version: 7.9.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump @chakra-ui/react in /single-page-app/ui
47f63d8
Bumps [@chakra-ui/react](https://github.com/chakra-ui/chakra-ui/tree/HEAD/packages/react) from 3.28.0 to 3.28.1.
- [Release notes](https://github.com/chakra-ui/chakra-ui/releases)
- [Changelog](https://github.com/chakra-ui/chakra-ui/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/chakra-ui/chakra-ui/commits/@chakra-ui/react@3.28.1/packages/react)
---
updated-dependencies:
- dependency-name: "@chakra-ui/react"
dependency-version: 3.28.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
@phlax
phlaxforce-pushed
the
copilot/create-merge-queue-pr
branch
from
3428c4d to
47f63d8CompareJanuary 3, 2026 12:49
CopilotAI
changed the title
Merge queue: Consolidate passing Dependabot PRsMerge queue: Consolidate 16 passing Dependabot PRsJan 3, 2026
@phlax
phlaxforce-pushed
the
copilot/create-merge-queue-pr
branch
from
1a33aee to
47f63d8CompareJanuary 3, 2026 13:03
@phlax
phlax
marked this pull request as ready for review
January 3, 2026 13:14
@phlax
phlax
merged commit 1cbf11e
into
mainJan 3, 2026

9 checks passed

Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers

@phlaxphlaxAwaiting requested review from phlax

Assignees

@phlaxphlax
Copilot code reviewCopilot

Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

2 participants

@phlax

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Highlight search terms from Google/DuckDuckGo/Bing referrer
(function() {
var ref = document.referrer;
var terms = [];
if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {
var url = new URL(ref);
var q = url.searchParams.get('q') || url.searchParams.get('p');
if (q) {
terms = q.split(/\s+/).filter(function(t) { return t.length > 2; });
}
}
if (terms.length === 0) return;
var style = document.createElement('style');
style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';
document.head.appendChild(style);
function highlight(node) {
if (node.nodeType === 3) { // text node
var text = node.textContent;
var found = false;
terms.forEach(function(term) {
var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\]\\]/g, '\\') + ')', 'gi');
if (regex.test(text)) {
found = true;
var frag = document.createDocumentFragment();
var parts = text.split(regex);
parts.forEach(function(part, i) {
if (i % 2 === 0) {
frag.appendChild(document.createTextNode(part));
} else {
var span = document.createElement('span');
span.className = 'userscript-highlight';
span.textContent = part;
frag.appendChild(span);
}
});
node.parentNode.replaceChild(frag, node);
}
});
} else if (node.nodeType === 1 && node.childNodes) { // element
var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];
if (!skipTags.includes(node.tagName)) {
Array.from(node.childNodes).forEach(highlight);
}
}
}
highlight(document.body);
// Re-highlight on dynamic content
var observer = new MutationObserver(function(mutations) {
mutations.forEach(function(m) {
m.addedNodes.forEach(function(node) {
if (node.nodeType === 1 || node.nodeType === 3) highlight(node);
});
});
});
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
Merge queue: Consolidate 16 passing Dependabot PRs by Copilot · Pull Request #942 · envoyproxy/examples · GitHub
Skip to content
Merge queue: Consolidate 16 passing Dependabot PRs - #942
Merged
phlax merged 16 commits into
mainfrom 
copilot/create-merge-queue-pr
Jan 3, 2026
Merged
Merge queue: Consolidate 16 passing Dependabot PRs#942
phlax merged 16 commits into
mainfrom 
copilot/create-merge-queue-pr
Conversation
CopilotAI
commented
Jan 3, 2026•

edited

Loading

Copy link


Copy Markdown

Contributor
Consolidates dependency updates from 16 passing Dependabot PRs to reduce CI costs. Each PR is cherry-picked as a clean individual commit to allow individual revert capability after rebase landing.
Status
Complete: Successfully cherry-picked 16 passing PRs with clean commits.
PRs Included (16)
Docker Images:
Go Modules:
Python:
JavaScript:
Excluded
Approach
  1. User labeled passing PRs with pick-me label (17 total)
  2. Cherry-picked commits cleanly (16 succeeded, 1 skipped due to conflict)
  3. Applied conflicting package.json PRs in reverse order to avoid conflicts
  4. Each commit is clean and can be reverted individually after rebase landing
Validation
  • ✅ Code review passed
  • ✅ Security scan clean
  • ✅ 16 clean commits (one per PR, no merge commits)
  • ✅ All picks can be reverted individually if needed
Original prompt
this repo has many pending dependabot prs - some are failing, some are passing
ci is expensive - so rather than landing all the passing ones individually i want you to create a merge queue pr that picks the commits from all the passing dependabot prs
its absolutely ESSENTIAL you DO NOT pick the commits from any of the failing prs
💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.
CopilotAI
changed the title
[WIP] Create a merge queue PR for passing dependabot commitsMerge queue: Consolidate passing Dependabot PRsJan 3, 2026
CopilotAI
requested a review
from phlaxJanuary 3, 2026 12:36
@phlax
phlax
commented
Jan 3, 2026

Copy link


Copy Markdown

Member
@copilot ive labelled the passing ones with pick-me
note: if any touch the same file then you should apply in reverse order from their affected line nos - this generally avoids conflicts
CopilotAI
commented
Jan 3, 2026

Copy link


Copy Markdown

ContributorAuthor
@copilot ive labelled the passing ones with pick-me
note: if any touch the same file then you should apply in reverse order from their affected line nos - this generally avoids conflicts
Done! Cherry-picked 16 of the 17 pick-me PRs in clean commits (commit 3428c4d).
Skipped #933 (actions/checkout) for the 2nd pass since it conflicts with recent bind-mounts changes.
All package.json PRs (#898, #900, #905, #911) applied cleanly in reverse order as you suggested - git handled the merges automatically without conflicts.
dependabotBot
added 16 commits
January 3, 2026 12:49
@dependabot@phlax
build(deps): bump otel/opentelemetry-collector in /opentelemetry
bcac2e3
Bumps otel/opentelemetry-collector from 0.138.0 to 0.140.0.
---
updated-dependencies:
- dependency-name: otel/opentelemetry-collector
dependency-version: 0.140.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump redis from 8.2.2 to 8.4.0 in /redis
f7369a3
Bumps redis from 8.2.2 to 8.4.0.
---
updated-dependencies:
- dependency-name: redis
dependency-version: 8.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump the examples-load-reporting group across 1 director…
8a79d9b
…y with 2 updates
Bumps the examples-load-reporting group with 2 updates in the /load-reporting-service directory: [github.com/envoyproxy/go-control-plane/envoy](https://github.com/envoyproxy/go-control-plane) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).
Updates `github.com/envoyproxy/go-control-plane/envoy` from 1.35.0 to 1.36.0
- [Release notes](https://github.com/envoyproxy/go-control-plane/releases)
- [Changelog](https://github.com/envoyproxy/go-control-plane/blob/main/CHANGELOG.md)
- [Commits](envoyproxy/go-control-plane@envoy/v1.35.0...envoy/v1.36.0)
Updates `google.golang.org/grpc` from 1.76.0 to 1.77.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.76.0...v1.77.0)
---
updated-dependencies:
- dependency-name: github.com/envoyproxy/go-control-plane/envoy
dependency-version: 1.36.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: examples-load-reporting
- dependency-name: google.golang.org/grpc
dependency-version: 1.77.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: examples-load-reporting
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump the examples-ext-authz group across 1 directory wit…
8bae3ee
…h 2 updates
Bumps the examples-ext-authz group with 2 updates in the /ext_authz/auth/grpc-service directory: [github.com/envoyproxy/go-control-plane/envoy](https://github.com/envoyproxy/go-control-plane) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).
Updates `github.com/envoyproxy/go-control-plane/envoy` from 1.35.0 to 1.36.0
- [Release notes](https://github.com/envoyproxy/go-control-plane/releases)
- [Changelog](https://github.com/envoyproxy/go-control-plane/blob/main/CHANGELOG.md)
- [Commits](envoyproxy/go-control-plane@envoy/v1.35.0...envoy/v1.36.0)
Updates `google.golang.org/grpc` from 1.76.0 to 1.77.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.76.0...v1.77.0)
---
updated-dependencies:
- dependency-name: github.com/envoyproxy/go-control-plane/envoy
dependency-version: 1.36.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: examples-ext-authz
- dependency-name: google.golang.org/grpc
dependency-version: 1.77.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: examples-ext-authz
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump the examples-grpc-bridge group across 1 directory w…
750be4f
…ith 2 updates
Bumps the examples-grpc-bridge group with 2 updates in the /grpc-bridge/server directory: [golang.org/x/net](https://github.com/golang/net) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).
Updates `golang.org/x/net` from 0.46.0 to 0.47.0
- [Commits](golang/net@v0.46.0...v0.47.0)
Updates `google.golang.org/grpc` from 1.76.0 to 1.77.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.76.0...v1.77.0)
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-version: 0.47.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: examples-grpc-bridge
- dependency-name: google.golang.org/grpc
dependency-version: 1.77.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: examples-grpc-bridge
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump node in /shared/node
61d33cc
Bumps node from 25.0-bookworm-slim to 25.2-bookworm-slim.
---
updated-dependencies:
- dependency-name: node
dependency-version: 25.2-bookworm-slim
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump apache/skywalking-oap-server in /skywalking
15721f7
Bumps apache/skywalking-oap-server from 10.2.0 to 10.3.0.
---
updated-dependencies:
- dependency-name: apache/skywalking-oap-server
dependency-version: 10.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump golang in /shared/golang
b9c4739
Bumps golang from 1.25.3-bookworm to 1.25.4-bookworm.
---
updated-dependencies:
- dependency-name: golang
dependency-version: 1.25.4-bookworm
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump aiohttp
4e67e31
---
updated-dependencies:
- dependency-name: aiohttp
dependency-version: 3.13.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-workflows
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump aiohttp
a2a7e22
---
updated-dependencies:
- dependency-name: aiohttp
dependency-version: 3.13.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: examples-shared-python
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump nginx
332a62b
Bumps the examples-local-ratelimit group in /local_ratelimit with 1 update: nginx.
Updates `nginx` from `029d446` to `b619c34`
---
updated-dependencies:
- dependency-name: nginx
dependency-version: b619c34a163ac12f68c1982568a122c4953dbf3126b8dbf0cc2f6fdbfd85de27
dependency-type: direct:production
dependency-group: examples-local-ratelimit
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump openpolicyagent/opa
b7fe260
Bumps the examples-ext-authz group in /ext_authz with 1 update: openpolicyagent/opa.
Updates `openpolicyagent/opa` from 1.9.0-envoy-5-static to 1.9.0-envoy-6-static
---
updated-dependencies:
- dependency-name: openpolicyagent/opa
dependency-version: 1.9.0-envoy-6-static
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: examples-ext-authz
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps-dev): bump eslint-plugin-react-hooks in /single-page-app/ui
d62e2c7
Bumps [eslint-plugin-react-hooks](https://github.com/facebook/react/tree/HEAD/packages/eslint-plugin-react-hooks) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/packages/eslint-plugin-react-hooks/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/HEAD/packages/eslint-plugin-react-hooks)
---
updated-dependencies:
- dependency-name: eslint-plugin-react-hooks
dependency-version: 7.0.1
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps-dev): bump @vitejs/plugin-react in /single-page-app/ui
78cadaa
Bumps [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) from 5.0.4 to 5.1.0.
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@5.1.0/packages/plugin-react)
---
updated-dependencies:
- dependency-name: "@vitejs/plugin-react"
dependency-version: 5.1.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump react-router-dom in /single-page-app/ui
5ad9a79
Bumps [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) from 7.9.4 to 7.9.5.
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.9.5/packages/react-router-dom)
---
updated-dependencies:
- dependency-name: react-router-dom
dependency-version: 7.9.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump @chakra-ui/react in /single-page-app/ui
47f63d8
Bumps [@chakra-ui/react](https://github.com/chakra-ui/chakra-ui/tree/HEAD/packages/react) from 3.28.0 to 3.28.1.
- [Release notes](https://github.com/chakra-ui/chakra-ui/releases)
- [Changelog](https://github.com/chakra-ui/chakra-ui/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/chakra-ui/chakra-ui/commits/@chakra-ui/react@3.28.1/packages/react)
---
updated-dependencies:
- dependency-name: "@chakra-ui/react"
dependency-version: 3.28.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
@phlax
phlaxforce-pushed
the
copilot/create-merge-queue-pr
branch
from
3428c4d to
47f63d8CompareJanuary 3, 2026 12:49
CopilotAI
changed the title
Merge queue: Consolidate passing Dependabot PRsMerge queue: Consolidate 16 passing Dependabot PRsJan 3, 2026
@phlax
phlaxforce-pushed
the
copilot/create-merge-queue-pr
branch
from
1a33aee to
47f63d8CompareJanuary 3, 2026 13:03
@phlax
phlax
marked this pull request as ready for review
January 3, 2026 13:14
@phlax
phlax
merged commit 1cbf11e
into
mainJan 3, 2026

9 checks passed

Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers

@phlaxphlaxAwaiting requested review from phlax

Assignees

@phlaxphlax
Copilot code reviewCopilot

Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

2 participants

@phlax

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Strip utm_, fbclid, gclid, etc. from all links on page
(function() {
var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',
'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',
'ref', 'ref_src', 'source', 'medium', 'campaign'];
function cleanUrl(url) {
try {
var u = new URL(url, window.location.origin);
var changed = false;
trackingParams.forEach(function(p) {
if (u.searchParams.has(p)) {
u.searchParams.delete(p);
changed = true;
}
});
return changed ? u.toString() : url;
} catch (e) {
return url;
}
}
function cleanLinks() {
document.querySelectorAll('a[href]').forEach(function(a) {
var clean = cleanUrl(a.href);
if (clean !== a.href) a.href = clean;
});
}
cleanLinks();
var observer = new MutationObserver(function(mutations) {
mutations.forEach(function(m) {
m.addedNodes.forEach(function(node) {
if (node.nodeType === 1) {
if (node.tagName === 'A') cleanLinks();
node.querySelectorAll('a[href]').forEach(function(a) {
var clean = cleanUrl(a.href);
if (clean !== a.href) a.href = clean;
});
}
});
});
});
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); }
})();
(function(){
try {
var __m = "youtube.com";
var __re = new RegExp('^' + "youtube\\.com" + '
Merge queue: Consolidate 16 passing Dependabot PRs by Copilot · Pull Request #942 · envoyproxy/examples · GitHub
Skip to content
Merge queue: Consolidate 16 passing Dependabot PRs - #942
Merged
phlax merged 16 commits into
mainfrom 
copilot/create-merge-queue-pr
Jan 3, 2026
Merged
Merge queue: Consolidate 16 passing Dependabot PRs#942
phlax merged 16 commits into
mainfrom 
copilot/create-merge-queue-pr
Conversation
CopilotAI
commented
Jan 3, 2026•

edited

Loading

Copy link


Copy Markdown

Contributor
Consolidates dependency updates from 16 passing Dependabot PRs to reduce CI costs. Each PR is cherry-picked as a clean individual commit to allow individual revert capability after rebase landing.
Status
Complete: Successfully cherry-picked 16 passing PRs with clean commits.
PRs Included (16)
Docker Images:
Go Modules:
Python:
JavaScript:
Excluded
Approach
  1. User labeled passing PRs with pick-me label (17 total)
  2. Cherry-picked commits cleanly (16 succeeded, 1 skipped due to conflict)
  3. Applied conflicting package.json PRs in reverse order to avoid conflicts
  4. Each commit is clean and can be reverted individually after rebase landing
Validation
  • ✅ Code review passed
  • ✅ Security scan clean
  • ✅ 16 clean commits (one per PR, no merge commits)
  • ✅ All picks can be reverted individually if needed
Original prompt
this repo has many pending dependabot prs - some are failing, some are passing
ci is expensive - so rather than landing all the passing ones individually i want you to create a merge queue pr that picks the commits from all the passing dependabot prs
its absolutely ESSENTIAL you DO NOT pick the commits from any of the failing prs
💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.
CopilotAI
changed the title
[WIP] Create a merge queue PR for passing dependabot commitsMerge queue: Consolidate passing Dependabot PRsJan 3, 2026
CopilotAI
requested a review
from phlaxJanuary 3, 2026 12:36
@phlax
phlax
commented
Jan 3, 2026

Copy link


Copy Markdown

Member
@copilot ive labelled the passing ones with pick-me
note: if any touch the same file then you should apply in reverse order from their affected line nos - this generally avoids conflicts
CopilotAI
commented
Jan 3, 2026

Copy link


Copy Markdown

ContributorAuthor
@copilot ive labelled the passing ones with pick-me
note: if any touch the same file then you should apply in reverse order from their affected line nos - this generally avoids conflicts
Done! Cherry-picked 16 of the 17 pick-me PRs in clean commits (commit 3428c4d).
Skipped #933 (actions/checkout) for the 2nd pass since it conflicts with recent bind-mounts changes.
All package.json PRs (#898, #900, #905, #911) applied cleanly in reverse order as you suggested - git handled the merges automatically without conflicts.
dependabotBot
added 16 commits
January 3, 2026 12:49
@dependabot@phlax
build(deps): bump otel/opentelemetry-collector in /opentelemetry
bcac2e3
Bumps otel/opentelemetry-collector from 0.138.0 to 0.140.0.
---
updated-dependencies:
- dependency-name: otel/opentelemetry-collector
dependency-version: 0.140.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump redis from 8.2.2 to 8.4.0 in /redis
f7369a3
Bumps redis from 8.2.2 to 8.4.0.
---
updated-dependencies:
- dependency-name: redis
dependency-version: 8.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump the examples-load-reporting group across 1 director…
8a79d9b
…y with 2 updates
Bumps the examples-load-reporting group with 2 updates in the /load-reporting-service directory: [github.com/envoyproxy/go-control-plane/envoy](https://github.com/envoyproxy/go-control-plane) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).
Updates `github.com/envoyproxy/go-control-plane/envoy` from 1.35.0 to 1.36.0
- [Release notes](https://github.com/envoyproxy/go-control-plane/releases)
- [Changelog](https://github.com/envoyproxy/go-control-plane/blob/main/CHANGELOG.md)
- [Commits](envoyproxy/go-control-plane@envoy/v1.35.0...envoy/v1.36.0)
Updates `google.golang.org/grpc` from 1.76.0 to 1.77.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.76.0...v1.77.0)
---
updated-dependencies:
- dependency-name: github.com/envoyproxy/go-control-plane/envoy
dependency-version: 1.36.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: examples-load-reporting
- dependency-name: google.golang.org/grpc
dependency-version: 1.77.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: examples-load-reporting
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump the examples-ext-authz group across 1 directory wit…
8bae3ee
…h 2 updates
Bumps the examples-ext-authz group with 2 updates in the /ext_authz/auth/grpc-service directory: [github.com/envoyproxy/go-control-plane/envoy](https://github.com/envoyproxy/go-control-plane) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).
Updates `github.com/envoyproxy/go-control-plane/envoy` from 1.35.0 to 1.36.0
- [Release notes](https://github.com/envoyproxy/go-control-plane/releases)
- [Changelog](https://github.com/envoyproxy/go-control-plane/blob/main/CHANGELOG.md)
- [Commits](envoyproxy/go-control-plane@envoy/v1.35.0...envoy/v1.36.0)
Updates `google.golang.org/grpc` from 1.76.0 to 1.77.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.76.0...v1.77.0)
---
updated-dependencies:
- dependency-name: github.com/envoyproxy/go-control-plane/envoy
dependency-version: 1.36.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: examples-ext-authz
- dependency-name: google.golang.org/grpc
dependency-version: 1.77.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: examples-ext-authz
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump the examples-grpc-bridge group across 1 directory w…
750be4f
…ith 2 updates
Bumps the examples-grpc-bridge group with 2 updates in the /grpc-bridge/server directory: [golang.org/x/net](https://github.com/golang/net) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).
Updates `golang.org/x/net` from 0.46.0 to 0.47.0
- [Commits](golang/net@v0.46.0...v0.47.0)
Updates `google.golang.org/grpc` from 1.76.0 to 1.77.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.76.0...v1.77.0)
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-version: 0.47.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: examples-grpc-bridge
- dependency-name: google.golang.org/grpc
dependency-version: 1.77.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: examples-grpc-bridge
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump node in /shared/node
61d33cc
Bumps node from 25.0-bookworm-slim to 25.2-bookworm-slim.
---
updated-dependencies:
- dependency-name: node
dependency-version: 25.2-bookworm-slim
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump apache/skywalking-oap-server in /skywalking
15721f7
Bumps apache/skywalking-oap-server from 10.2.0 to 10.3.0.
---
updated-dependencies:
- dependency-name: apache/skywalking-oap-server
dependency-version: 10.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump golang in /shared/golang
b9c4739
Bumps golang from 1.25.3-bookworm to 1.25.4-bookworm.
---
updated-dependencies:
- dependency-name: golang
dependency-version: 1.25.4-bookworm
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump aiohttp
4e67e31
---
updated-dependencies:
- dependency-name: aiohttp
dependency-version: 3.13.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-workflows
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump aiohttp
a2a7e22
---
updated-dependencies:
- dependency-name: aiohttp
dependency-version: 3.13.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: examples-shared-python
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump nginx
332a62b
Bumps the examples-local-ratelimit group in /local_ratelimit with 1 update: nginx.
Updates `nginx` from `029d446` to `b619c34`
---
updated-dependencies:
- dependency-name: nginx
dependency-version: b619c34a163ac12f68c1982568a122c4953dbf3126b8dbf0cc2f6fdbfd85de27
dependency-type: direct:production
dependency-group: examples-local-ratelimit
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump openpolicyagent/opa
b7fe260
Bumps the examples-ext-authz group in /ext_authz with 1 update: openpolicyagent/opa.
Updates `openpolicyagent/opa` from 1.9.0-envoy-5-static to 1.9.0-envoy-6-static
---
updated-dependencies:
- dependency-name: openpolicyagent/opa
dependency-version: 1.9.0-envoy-6-static
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: examples-ext-authz
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps-dev): bump eslint-plugin-react-hooks in /single-page-app/ui
d62e2c7
Bumps [eslint-plugin-react-hooks](https://github.com/facebook/react/tree/HEAD/packages/eslint-plugin-react-hooks) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/packages/eslint-plugin-react-hooks/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/HEAD/packages/eslint-plugin-react-hooks)
---
updated-dependencies:
- dependency-name: eslint-plugin-react-hooks
dependency-version: 7.0.1
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps-dev): bump @vitejs/plugin-react in /single-page-app/ui
78cadaa
Bumps [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) from 5.0.4 to 5.1.0.
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@5.1.0/packages/plugin-react)
---
updated-dependencies:
- dependency-name: "@vitejs/plugin-react"
dependency-version: 5.1.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump react-router-dom in /single-page-app/ui
5ad9a79
Bumps [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) from 7.9.4 to 7.9.5.
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.9.5/packages/react-router-dom)
---
updated-dependencies:
- dependency-name: react-router-dom
dependency-version: 7.9.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump @chakra-ui/react in /single-page-app/ui
47f63d8
Bumps [@chakra-ui/react](https://github.com/chakra-ui/chakra-ui/tree/HEAD/packages/react) from 3.28.0 to 3.28.1.
- [Release notes](https://github.com/chakra-ui/chakra-ui/releases)
- [Changelog](https://github.com/chakra-ui/chakra-ui/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/chakra-ui/chakra-ui/commits/@chakra-ui/react@3.28.1/packages/react)
---
updated-dependencies:
- dependency-name: "@chakra-ui/react"
dependency-version: 3.28.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
@phlax
phlaxforce-pushed
the
copilot/create-merge-queue-pr
branch
from
3428c4d to
47f63d8CompareJanuary 3, 2026 12:49
CopilotAI
changed the title
Merge queue: Consolidate passing Dependabot PRsMerge queue: Consolidate 16 passing Dependabot PRsJan 3, 2026
@phlax
phlaxforce-pushed
the
copilot/create-merge-queue-pr
branch
from
1a33aee to
47f63d8CompareJanuary 3, 2026 13:03
@phlax
phlax
marked this pull request as ready for review
January 3, 2026 13:14
@phlax
phlax
merged commit 1cbf11e
into
mainJan 3, 2026

9 checks passed

Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers

@phlaxphlaxAwaiting requested review from phlax

Assignees

@phlaxphlax
Copilot code reviewCopilot

Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

2 participants

@phlax

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Auto-enable theater mode on YouTube
(function() {
function tryTheater() {
var btn = document.querySelector('button[aria-label="Theater mode"], ytd-player #player button[title="Theater mode"]');
if (btn && !btn.classList.contains('activated')) {
btn.click();
}
}
// Try immediately
tryTheater();
// Try after navigation (SPA)
var lastUrl = location.href;
setInterval(function() {
if (location.href !== lastUrl) {
lastUrl = location.href;
setTimeout(tryTheater, 500);
}
}, 1000);
// Also try on player load
var observer = new MutationObserver(tryTheater);
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
Merge queue: Consolidate 16 passing Dependabot PRs by Copilot · Pull Request #942 · envoyproxy/examples · GitHub
Skip to content
Merge queue: Consolidate 16 passing Dependabot PRs - #942
Merged
phlax merged 16 commits into
mainfrom 
copilot/create-merge-queue-pr
Jan 3, 2026
Merged
Merge queue: Consolidate 16 passing Dependabot PRs#942
phlax merged 16 commits into
mainfrom 
copilot/create-merge-queue-pr
Conversation
CopilotAI
commented
Jan 3, 2026•

edited

Loading

Copy link


Copy Markdown

Contributor
Consolidates dependency updates from 16 passing Dependabot PRs to reduce CI costs. Each PR is cherry-picked as a clean individual commit to allow individual revert capability after rebase landing.
Status
Complete: Successfully cherry-picked 16 passing PRs with clean commits.
PRs Included (16)
Docker Images:
Go Modules:
Python:
JavaScript:
Excluded
Approach
  1. User labeled passing PRs with pick-me label (17 total)
  2. Cherry-picked commits cleanly (16 succeeded, 1 skipped due to conflict)
  3. Applied conflicting package.json PRs in reverse order to avoid conflicts
  4. Each commit is clean and can be reverted individually after rebase landing
Validation
  • ✅ Code review passed
  • ✅ Security scan clean
  • ✅ 16 clean commits (one per PR, no merge commits)
  • ✅ All picks can be reverted individually if needed
Original prompt
this repo has many pending dependabot prs - some are failing, some are passing
ci is expensive - so rather than landing all the passing ones individually i want you to create a merge queue pr that picks the commits from all the passing dependabot prs
its absolutely ESSENTIAL you DO NOT pick the commits from any of the failing prs
💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.
CopilotAI
changed the title
[WIP] Create a merge queue PR for passing dependabot commitsMerge queue: Consolidate passing Dependabot PRsJan 3, 2026
CopilotAI
requested a review
from phlaxJanuary 3, 2026 12:36
@phlax
phlax
commented
Jan 3, 2026

Copy link


Copy Markdown

Member
@copilot ive labelled the passing ones with pick-me
note: if any touch the same file then you should apply in reverse order from their affected line nos - this generally avoids conflicts
CopilotAI
commented
Jan 3, 2026

Copy link


Copy Markdown

ContributorAuthor
@copilot ive labelled the passing ones with pick-me
note: if any touch the same file then you should apply in reverse order from their affected line nos - this generally avoids conflicts
Done! Cherry-picked 16 of the 17 pick-me PRs in clean commits (commit 3428c4d).
Skipped #933 (actions/checkout) for the 2nd pass since it conflicts with recent bind-mounts changes.
All package.json PRs (#898, #900, #905, #911) applied cleanly in reverse order as you suggested - git handled the merges automatically without conflicts.
dependabotBot
added 16 commits
January 3, 2026 12:49
@dependabot@phlax
build(deps): bump otel/opentelemetry-collector in /opentelemetry
bcac2e3
Bumps otel/opentelemetry-collector from 0.138.0 to 0.140.0.
---
updated-dependencies:
- dependency-name: otel/opentelemetry-collector
dependency-version: 0.140.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump redis from 8.2.2 to 8.4.0 in /redis
f7369a3
Bumps redis from 8.2.2 to 8.4.0.
---
updated-dependencies:
- dependency-name: redis
dependency-version: 8.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump the examples-load-reporting group across 1 director…
8a79d9b
…y with 2 updates
Bumps the examples-load-reporting group with 2 updates in the /load-reporting-service directory: [github.com/envoyproxy/go-control-plane/envoy](https://github.com/envoyproxy/go-control-plane) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).
Updates `github.com/envoyproxy/go-control-plane/envoy` from 1.35.0 to 1.36.0
- [Release notes](https://github.com/envoyproxy/go-control-plane/releases)
- [Changelog](https://github.com/envoyproxy/go-control-plane/blob/main/CHANGELOG.md)
- [Commits](envoyproxy/go-control-plane@envoy/v1.35.0...envoy/v1.36.0)
Updates `google.golang.org/grpc` from 1.76.0 to 1.77.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.76.0...v1.77.0)
---
updated-dependencies:
- dependency-name: github.com/envoyproxy/go-control-plane/envoy
dependency-version: 1.36.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: examples-load-reporting
- dependency-name: google.golang.org/grpc
dependency-version: 1.77.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: examples-load-reporting
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump the examples-ext-authz group across 1 directory wit…
8bae3ee
…h 2 updates
Bumps the examples-ext-authz group with 2 updates in the /ext_authz/auth/grpc-service directory: [github.com/envoyproxy/go-control-plane/envoy](https://github.com/envoyproxy/go-control-plane) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).
Updates `github.com/envoyproxy/go-control-plane/envoy` from 1.35.0 to 1.36.0
- [Release notes](https://github.com/envoyproxy/go-control-plane/releases)
- [Changelog](https://github.com/envoyproxy/go-control-plane/blob/main/CHANGELOG.md)
- [Commits](envoyproxy/go-control-plane@envoy/v1.35.0...envoy/v1.36.0)
Updates `google.golang.org/grpc` from 1.76.0 to 1.77.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.76.0...v1.77.0)
---
updated-dependencies:
- dependency-name: github.com/envoyproxy/go-control-plane/envoy
dependency-version: 1.36.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: examples-ext-authz
- dependency-name: google.golang.org/grpc
dependency-version: 1.77.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: examples-ext-authz
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump the examples-grpc-bridge group across 1 directory w…
750be4f
…ith 2 updates
Bumps the examples-grpc-bridge group with 2 updates in the /grpc-bridge/server directory: [golang.org/x/net](https://github.com/golang/net) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).
Updates `golang.org/x/net` from 0.46.0 to 0.47.0
- [Commits](golang/net@v0.46.0...v0.47.0)
Updates `google.golang.org/grpc` from 1.76.0 to 1.77.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.76.0...v1.77.0)
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-version: 0.47.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: examples-grpc-bridge
- dependency-name: google.golang.org/grpc
dependency-version: 1.77.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: examples-grpc-bridge
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump node in /shared/node
61d33cc
Bumps node from 25.0-bookworm-slim to 25.2-bookworm-slim.
---
updated-dependencies:
- dependency-name: node
dependency-version: 25.2-bookworm-slim
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump apache/skywalking-oap-server in /skywalking
15721f7
Bumps apache/skywalking-oap-server from 10.2.0 to 10.3.0.
---
updated-dependencies:
- dependency-name: apache/skywalking-oap-server
dependency-version: 10.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump golang in /shared/golang
b9c4739
Bumps golang from 1.25.3-bookworm to 1.25.4-bookworm.
---
updated-dependencies:
- dependency-name: golang
dependency-version: 1.25.4-bookworm
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump aiohttp
4e67e31
---
updated-dependencies:
- dependency-name: aiohttp
dependency-version: 3.13.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-workflows
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump aiohttp
a2a7e22
---
updated-dependencies:
- dependency-name: aiohttp
dependency-version: 3.13.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: examples-shared-python
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump nginx
332a62b
Bumps the examples-local-ratelimit group in /local_ratelimit with 1 update: nginx.
Updates `nginx` from `029d446` to `b619c34`
---
updated-dependencies:
- dependency-name: nginx
dependency-version: b619c34a163ac12f68c1982568a122c4953dbf3126b8dbf0cc2f6fdbfd85de27
dependency-type: direct:production
dependency-group: examples-local-ratelimit
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump openpolicyagent/opa
b7fe260
Bumps the examples-ext-authz group in /ext_authz with 1 update: openpolicyagent/opa.
Updates `openpolicyagent/opa` from 1.9.0-envoy-5-static to 1.9.0-envoy-6-static
---
updated-dependencies:
- dependency-name: openpolicyagent/opa
dependency-version: 1.9.0-envoy-6-static
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: examples-ext-authz
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps-dev): bump eslint-plugin-react-hooks in /single-page-app/ui
d62e2c7
Bumps [eslint-plugin-react-hooks](https://github.com/facebook/react/tree/HEAD/packages/eslint-plugin-react-hooks) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/packages/eslint-plugin-react-hooks/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/HEAD/packages/eslint-plugin-react-hooks)
---
updated-dependencies:
- dependency-name: eslint-plugin-react-hooks
dependency-version: 7.0.1
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps-dev): bump @vitejs/plugin-react in /single-page-app/ui
78cadaa
Bumps [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) from 5.0.4 to 5.1.0.
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@5.1.0/packages/plugin-react)
---
updated-dependencies:
- dependency-name: "@vitejs/plugin-react"
dependency-version: 5.1.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump react-router-dom in /single-page-app/ui
5ad9a79
Bumps [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) from 7.9.4 to 7.9.5.
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.9.5/packages/react-router-dom)
---
updated-dependencies:
- dependency-name: react-router-dom
dependency-version: 7.9.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump @chakra-ui/react in /single-page-app/ui
47f63d8
Bumps [@chakra-ui/react](https://github.com/chakra-ui/chakra-ui/tree/HEAD/packages/react) from 3.28.0 to 3.28.1.
- [Release notes](https://github.com/chakra-ui/chakra-ui/releases)
- [Changelog](https://github.com/chakra-ui/chakra-ui/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/chakra-ui/chakra-ui/commits/@chakra-ui/react@3.28.1/packages/react)
---
updated-dependencies:
- dependency-name: "@chakra-ui/react"
dependency-version: 3.28.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
@phlax
phlaxforce-pushed
the
copilot/create-merge-queue-pr
branch
from
3428c4d to
47f63d8CompareJanuary 3, 2026 12:49
CopilotAI
changed the title
Merge queue: Consolidate passing Dependabot PRsMerge queue: Consolidate 16 passing Dependabot PRsJan 3, 2026
@phlax
phlaxforce-pushed
the
copilot/create-merge-queue-pr
branch
from
1a33aee to
47f63d8CompareJanuary 3, 2026 13:03
@phlax
phlax
marked this pull request as ready for review
January 3, 2026 13:14
@phlax
phlax
merged commit 1cbf11e
into
mainJan 3, 2026

9 checks passed

Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers

@phlaxphlaxAwaiting requested review from phlax

Assignees

@phlaxphlax
Copilot code reviewCopilot

Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

2 participants

@phlax

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Remove or un-stick sticky/fixed headers that block content
(function() {
function unstick() {
document.querySelectorAll('header, nav, [role="banner"], .header, .navbar, .sticky, .fixed-top, [style*="position: fixed"], [style*="position:sticky"]').forEach(function(el) {
if (el.style.position === 'fixed' || el.style.position === 'sticky' || getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {
el.style.position = 'static';
el.style.top = 'auto';
el.style.zIndex = 'auto';
}
});
}
unstick();
var observer = new MutationObserver(unstick);
observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });
})();
}
} catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); }
})();
})();
Merge queue: Consolidate 16 passing Dependabot PRs by Copilot · Pull Request #942 · envoyproxy/examples · GitHub
Skip to content
Merge queue: Consolidate 16 passing Dependabot PRs - #942
Merged
phlax merged 16 commits into
mainfrom 
copilot/create-merge-queue-pr
Jan 3, 2026
Merged
Merge queue: Consolidate 16 passing Dependabot PRs#942
phlax merged 16 commits into
mainfrom 
copilot/create-merge-queue-pr
Conversation
CopilotAI
commented
Jan 3, 2026•

edited

Loading

Copy link


Copy Markdown

Contributor
Consolidates dependency updates from 16 passing Dependabot PRs to reduce CI costs. Each PR is cherry-picked as a clean individual commit to allow individual revert capability after rebase landing.
Status
Complete: Successfully cherry-picked 16 passing PRs with clean commits.
PRs Included (16)
Docker Images:
Go Modules:
Python:
JavaScript:
Excluded
Approach
  1. User labeled passing PRs with pick-me label (17 total)
  2. Cherry-picked commits cleanly (16 succeeded, 1 skipped due to conflict)
  3. Applied conflicting package.json PRs in reverse order to avoid conflicts
  4. Each commit is clean and can be reverted individually after rebase landing
Validation
  • ✅ Code review passed
  • ✅ Security scan clean
  • ✅ 16 clean commits (one per PR, no merge commits)
  • ✅ All picks can be reverted individually if needed
Original prompt
this repo has many pending dependabot prs - some are failing, some are passing
ci is expensive - so rather than landing all the passing ones individually i want you to create a merge queue pr that picks the commits from all the passing dependabot prs
its absolutely ESSENTIAL you DO NOT pick the commits from any of the failing prs
💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.
CopilotAI
changed the title
[WIP] Create a merge queue PR for passing dependabot commitsMerge queue: Consolidate passing Dependabot PRsJan 3, 2026
CopilotAI
requested a review
from phlaxJanuary 3, 2026 12:36
@phlax
phlax
commented
Jan 3, 2026

Copy link


Copy Markdown

Member
@copilot ive labelled the passing ones with pick-me
note: if any touch the same file then you should apply in reverse order from their affected line nos - this generally avoids conflicts
CopilotAI
commented
Jan 3, 2026

Copy link


Copy Markdown

ContributorAuthor
@copilot ive labelled the passing ones with pick-me
note: if any touch the same file then you should apply in reverse order from their affected line nos - this generally avoids conflicts
Done! Cherry-picked 16 of the 17 pick-me PRs in clean commits (commit 3428c4d).
Skipped #933 (actions/checkout) for the 2nd pass since it conflicts with recent bind-mounts changes.
All package.json PRs (#898, #900, #905, #911) applied cleanly in reverse order as you suggested - git handled the merges automatically without conflicts.
dependabotBot
added 16 commits
January 3, 2026 12:49
@dependabot@phlax
build(deps): bump otel/opentelemetry-collector in /opentelemetry
bcac2e3
Bumps otel/opentelemetry-collector from 0.138.0 to 0.140.0.
---
updated-dependencies:
- dependency-name: otel/opentelemetry-collector
dependency-version: 0.140.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump redis from 8.2.2 to 8.4.0 in /redis
f7369a3
Bumps redis from 8.2.2 to 8.4.0.
---
updated-dependencies:
- dependency-name: redis
dependency-version: 8.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump the examples-load-reporting group across 1 director…
8a79d9b
…y with 2 updates
Bumps the examples-load-reporting group with 2 updates in the /load-reporting-service directory: [github.com/envoyproxy/go-control-plane/envoy](https://github.com/envoyproxy/go-control-plane) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).
Updates `github.com/envoyproxy/go-control-plane/envoy` from 1.35.0 to 1.36.0
- [Release notes](https://github.com/envoyproxy/go-control-plane/releases)
- [Changelog](https://github.com/envoyproxy/go-control-plane/blob/main/CHANGELOG.md)
- [Commits](envoyproxy/go-control-plane@envoy/v1.35.0...envoy/v1.36.0)
Updates `google.golang.org/grpc` from 1.76.0 to 1.77.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.76.0...v1.77.0)
---
updated-dependencies:
- dependency-name: github.com/envoyproxy/go-control-plane/envoy
dependency-version: 1.36.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: examples-load-reporting
- dependency-name: google.golang.org/grpc
dependency-version: 1.77.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: examples-load-reporting
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump the examples-ext-authz group across 1 directory wit…
8bae3ee
…h 2 updates
Bumps the examples-ext-authz group with 2 updates in the /ext_authz/auth/grpc-service directory: [github.com/envoyproxy/go-control-plane/envoy](https://github.com/envoyproxy/go-control-plane) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).
Updates `github.com/envoyproxy/go-control-plane/envoy` from 1.35.0 to 1.36.0
- [Release notes](https://github.com/envoyproxy/go-control-plane/releases)
- [Changelog](https://github.com/envoyproxy/go-control-plane/blob/main/CHANGELOG.md)
- [Commits](envoyproxy/go-control-plane@envoy/v1.35.0...envoy/v1.36.0)
Updates `google.golang.org/grpc` from 1.76.0 to 1.77.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.76.0...v1.77.0)
---
updated-dependencies:
- dependency-name: github.com/envoyproxy/go-control-plane/envoy
dependency-version: 1.36.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: examples-ext-authz
- dependency-name: google.golang.org/grpc
dependency-version: 1.77.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: examples-ext-authz
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump the examples-grpc-bridge group across 1 directory w…
750be4f
…ith 2 updates
Bumps the examples-grpc-bridge group with 2 updates in the /grpc-bridge/server directory: [golang.org/x/net](https://github.com/golang/net) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).
Updates `golang.org/x/net` from 0.46.0 to 0.47.0
- [Commits](golang/net@v0.46.0...v0.47.0)
Updates `google.golang.org/grpc` from 1.76.0 to 1.77.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.76.0...v1.77.0)
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-version: 0.47.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: examples-grpc-bridge
- dependency-name: google.golang.org/grpc
dependency-version: 1.77.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: examples-grpc-bridge
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump node in /shared/node
61d33cc
Bumps node from 25.0-bookworm-slim to 25.2-bookworm-slim.
---
updated-dependencies:
- dependency-name: node
dependency-version: 25.2-bookworm-slim
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump apache/skywalking-oap-server in /skywalking
15721f7
Bumps apache/skywalking-oap-server from 10.2.0 to 10.3.0.
---
updated-dependencies:
- dependency-name: apache/skywalking-oap-server
dependency-version: 10.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump golang in /shared/golang
b9c4739
Bumps golang from 1.25.3-bookworm to 1.25.4-bookworm.
---
updated-dependencies:
- dependency-name: golang
dependency-version: 1.25.4-bookworm
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump aiohttp
4e67e31
---
updated-dependencies:
- dependency-name: aiohttp
dependency-version: 3.13.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-workflows
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump aiohttp
a2a7e22
---
updated-dependencies:
- dependency-name: aiohttp
dependency-version: 3.13.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: examples-shared-python
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump nginx
332a62b
Bumps the examples-local-ratelimit group in /local_ratelimit with 1 update: nginx.
Updates `nginx` from `029d446` to `b619c34`
---
updated-dependencies:
- dependency-name: nginx
dependency-version: b619c34a163ac12f68c1982568a122c4953dbf3126b8dbf0cc2f6fdbfd85de27
dependency-type: direct:production
dependency-group: examples-local-ratelimit
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump openpolicyagent/opa
b7fe260
Bumps the examples-ext-authz group in /ext_authz with 1 update: openpolicyagent/opa.
Updates `openpolicyagent/opa` from 1.9.0-envoy-5-static to 1.9.0-envoy-6-static
---
updated-dependencies:
- dependency-name: openpolicyagent/opa
dependency-version: 1.9.0-envoy-6-static
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: examples-ext-authz
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps-dev): bump eslint-plugin-react-hooks in /single-page-app/ui
d62e2c7
Bumps [eslint-plugin-react-hooks](https://github.com/facebook/react/tree/HEAD/packages/eslint-plugin-react-hooks) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/packages/eslint-plugin-react-hooks/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/HEAD/packages/eslint-plugin-react-hooks)
---
updated-dependencies:
- dependency-name: eslint-plugin-react-hooks
dependency-version: 7.0.1
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps-dev): bump @vitejs/plugin-react in /single-page-app/ui
78cadaa
Bumps [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) from 5.0.4 to 5.1.0.
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@5.1.0/packages/plugin-react)
---
updated-dependencies:
- dependency-name: "@vitejs/plugin-react"
dependency-version: 5.1.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump react-router-dom in /single-page-app/ui
5ad9a79
Bumps [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) from 7.9.4 to 7.9.5.
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.9.5/packages/react-router-dom)
---
updated-dependencies:
- dependency-name: react-router-dom
dependency-version: 7.9.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot@phlax
build(deps): bump @chakra-ui/react in /single-page-app/ui
47f63d8
Bumps [@chakra-ui/react](https://github.com/chakra-ui/chakra-ui/tree/HEAD/packages/react) from 3.28.0 to 3.28.1.
- [Release notes](https://github.com/chakra-ui/chakra-ui/releases)
- [Changelog](https://github.com/chakra-ui/chakra-ui/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/chakra-ui/chakra-ui/commits/@chakra-ui/react@3.28.1/packages/react)
---
updated-dependencies:
- dependency-name: "@chakra-ui/react"
dependency-version: 3.28.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
@phlax
phlaxforce-pushed
the
copilot/create-merge-queue-pr
branch
from
3428c4d to
47f63d8CompareJanuary 3, 2026 12:49
CopilotAI
changed the title
Merge queue: Consolidate passing Dependabot PRsMerge queue: Consolidate 16 passing Dependabot PRsJan 3, 2026
@phlax
phlaxforce-pushed
the
copilot/create-merge-queue-pr
branch
from
1a33aee to
47f63d8CompareJanuary 3, 2026 13:03
@phlax
phlax
marked this pull request as ready for review
January 3, 2026 13:14
@phlax
phlax
merged commit 1cbf11e
into
mainJan 3, 2026

9 checks passed

Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers

@phlaxphlaxAwaiting requested review from phlax

Assignees

@phlaxphlax
Copilot code reviewCopilot

Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

2 participants

@phlax