[dependabot]

Bumps golang.org/x/sys from 0.49.0 to 0.50.0.

Commits

• 00227f1 unix: avoid using stale written count from sendfile on freebsd/386 after EINVAL
• aa1b965 unix: don't skip directory entries with zero inodes on Linux
• 37845fb unix: reject a short SCM_CREDENTIALS payload in ParseUnixCredentials
• 313c631 unix: add IoctlGetUint64
• 4a36a34 cpu: add wasm32 "architecture"
• 908ab59 windows: use SyscallN consistently for Windows system calls
• f5cb030 unix: set R12 before the ppc64x syscall branch
• 0e9e10f windows: remove MemoryBasicInformation.PartitionId field on windows/386
• 9b24ac0 windows: fix PSAPI_WORKING_SET_EX_BLOCK bit accessors
• 69a6691 windows/mkwinsyscall: read 32-bit results from the low half of the return reg...
• See full diff in compare view

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: f6eccf3a-9691-4d56-866a-2d0e2fab2627

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn

[clawgenti]

Summary

This is a routine Dependabot minor bump of golang.org/x/sys from v0.49.0 to v0.50.0 in core. The dependabot-tidy commit (568daab) carries the bump into the five modules that pull in core through replace: cmd/agentop, cmd/cortex, cmd/cortex-envoy, core/storage/redis and scripts/readme-demo. The diff touches only go.mod and go.sum (12 files, +12/-12). The new h1: hashes match sum.golang.org. No must-fix issues found.

Author: dependabot[bot] (CONTRIBUTOR, trusted automated dependency bot)
Areas reviewed: Go module manifests (go.mod/go.sum), module graph consistency, x/sys/unix API usage, supply chain
Agent/IDE config (.claude/.vscode): none
Commits: 2 commits (the bump plus the dependabot-tidy chore: go mod tidy across modules), all signed-off: yes (DCO pass)
CI status: pending. At review time head 568daab has 8 pass (incl. DCO, CodeQL (go), Dependency Review, and the authbridge image build), 0 fail, 29 pending, and 2 skipped.

• On the pre-tidy commit cf9ccfe, Go CI (core peerproc, macOS) (step "Build and test cmd/cortex (local profile)") and Go CI (core/storage/redis) (Lint) failed.
• I reproduced both locally as go: updates to go.mod needed. That is the expected stale-sibling state the tidy commit fixes, and both modules build read-only at the head SHA.

Please confirm the head run goes green before merging.

Upstream / transitive check

• go directive: x/sys v0.50.0's go.mod declares go 1.26.0 and has no require block, the same as v0.49.0. Every affected module declares go 1.26.10, so that's fine.
• Transitive requirements: none. The /go.mod hash hNLxWAXm… is the same in v0.49.0 and v0.50.0, so only the x/sys lines change in each go.sum.
• go.sum: h1:dkKZEFTE… matches sum.golang.org (tree 71041460). The zip I rebuilt from tag v0.50.0 (00227f1d) gives the same h1:, and all six modules carry the same hash pair.
• Upstream changes (10 commits): mostly Windows and mkwinsyscall, plus cpu: wasm32, unix: ppc64x R12, IoctlGetUint64, and freebsd/386 sendfile. Linux behavior changes:
  • ParseDirent keeps zero-inode entries on Linux.
  • ParseUnixCredentials rejects a short SCM_CREDENTIALS payload.
• Repo usage: core uses x/sys/unix in listener/vmcontrol, listener/transparentproxy (SO_ORIGINAL_DST via Syscall6), and peerproc/darwin (SysctlRaw, SysctlKinfoProc, SYS_PROC_INFO). It also uses GetsockoptUcred/GetsockoptXucred, UnixRights/ParseUnixRights and ParseSocketControlMessage. None of these changed, and nothing calls ParseDirent, ParseUnixCredentials or x/sys/windows.
• Local verification (Go 1.26.10, GOWORK=off):
  • go build ./... passes in core.
  • go vet (linux and GOOS=darwin) and go test pass for listener/vmcontrol, listener/transparentproxy, peerproc, sessionapi and plugins/sessionbudget.
  • At the head SHA, every module builds with -mod=readonly, including cmd/cortex with the local profile tags.
• replace / siblings: after the tidy, all modules resolve x/sys v0.50.0 and the replace directives are unchanged. #1754 makes the same bump to agentop/readme-demo, so whichever merges second should rebase cleanly to identical lines.

[huang195]

@dependabot rebase

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.