[dependabot]

Bumps golang.org/x/sys from 0.49.0 to 0.50.0.

Commits

• 00227f1 unix: avoid using stale written count from sendfile on freebsd/386 after EINVAL
• aa1b965 unix: don't skip directory entries with zero inodes on Linux
• 37845fb unix: reject a short SCM_CREDENTIALS payload in ParseUnixCredentials
• 313c631 unix: add IoctlGetUint64
• 4a36a34 cpu: add wasm32 "architecture"
• 908ab59 windows: use SyscallN consistently for Windows system calls
• f5cb030 unix: set R12 before the ppc64x syscall branch
• 0e9e10f windows: remove MemoryBasicInformation.PartitionId field on windows/386
• 9b24ac0 windows: fix PSAPI_WORKING_SET_EX_BLOCK bit accessors
• 69a6691 windows/mkwinsyscall: read 32-bit results from the low half of the return reg...
• See full diff in compare view

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 82ae8af2-ea40-4b36-9288-973f2193e1c1

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn

[clawgenti]

Summary

This is a routine Dependabot minor bump of golang.org/x/sys from v0.49.0 to v0.50.0 in cmd/agentop. The dependabot-tidy commit (42435d4) carries the same bump into scripts/readme-demo, which pulls in agentop through a replace. The diff touches only go.mod and go.sum (4 files, +6/-6). The new h1: hashes match sum.golang.org. No must-fix issues found.

Author: dependabot[bot] (CONTRIBUTOR, trusted automated dependency bot)
Areas reviewed: Go module manifests (go.mod/go.sum), module graph consistency, supply chain
Agent/IDE config (.claude/.vscode): none
Commits: 2 commits (the bump plus the dependabot-tidy chore: go mod tidy across modules), all signed-off: yes (DCO pass)
CI status: pending. On head 42435d4 only DCO has passed so far: 1 pass, 0 fail, 35 pending, and 3 skipped (CodeRabbit, Spellcheck, and the tidy job, which correctly found nothing left to do). The CI, Security Scans, Build-Publish and PR Verifier runs are still queued. Before the tidy commit, the run on 1770722 had no failures. Please confirm CI goes green before merging.

Upstream / transitive check

• go directive: x/sys v0.50.0's go.mod declares go 1.26.0 and has no require block, the same as v0.49.0. cmd/agentop and scripts/readme-demo both declare go 1.26.10, so that's fine.
• Transitive requirements: none. The /go.mod hash hNLxWAXm… is the same in v0.49.0 and v0.50.0, which is why the go.sum delta is limited to the x/sys lines.
• go.sum: h1:dkKZEFTE… and /go.mod h1:hNLxWAXm… match sum.golang.org (tree 71041460). I also rebuilt the module zip from the v0.50.0 tag (00227f1d) and got the same h1:.
• Upstream changes (10 commits): mostly Windows (SyscallN, mkwinsyscall, PSAPI accessors, removal of MemoryBasicInformation.PartitionId on windows/386), plus cpu: wasm32, unix: ppc64x R12, IoctlGetUint64, and a freebsd/386 sendfile fix. Two Linux behavior changes:
  • ParseDirent no longer skips zero-inode entries on Linux.
  • ParseUnixCredentials now rejects a short SCM_CREDENTIALS payload with EINVAL.
• Repo usage: agentop only calls unix.Getsid (in setup_probe_test.go). Across the repo, the unix uses are GetsockoptUcred/GetsockoptXucred, UnixRights/ParseUnixRights, SysctlRaw, SysctlKinfoProc, Syscall6 and similar. Nothing calls ParseDirent, ParseUnixCredentials, or x/sys/windows, and no API the repo uses was removed or changed.
• replace / siblings: cmd/agentop replaces core => ../../core, and core stays on v0.49.0, so MVS selects v0.50.0 for agentop and readme-demo. That's valid. Locally (Go 1.26.10, GOWORK=off, -mod=readonly) every module builds at the head SHA: core, core/storage/redis, cmd/agentop, cmd/cortex (local profile tags), cmd/cortex-envoy, and scripts/readme-demo. go vet ./... (linux and darwin) and go test ./... pass for readme-demo. They also pass for agentop, except TestReportSessionInterruption, which fails the same way on main in my sandbox and is unrelated to this bump.

Nit (non-blocking): core and the rest of the modules still list x/sys v0.49.0. The sibling #1753 bumps core, and that PR's tidy moves all modules to v0.50.0, so the two PRs line up whichever merges first.

[clawgenti]

Summary

This is a routine Dependabot minor bump of golang.org/x/sys from v0.49.0 to v0.50.0 in cmd/agentop. The dependabot-tidy commit (42435d4) carries the same bump into scripts/readme-demo, which pulls in agentop through a replace. The diff touches only go.mod/go.sum (4 files, +6/-6). No must-fix issues found.

Author: dependabot[bot] (CONTRIBUTOR, returning external)
Areas reviewed: Go module manifests (go.mod/go.sum), module graph consistency, supply chain
Agent/IDE config (.claude/.vscode): none
Commits: 2 commits, all signed-off: yes (DCO pass)
CI status: passing on head 42435d4: 37 pass, 0 fail, 3 skipped (CodeRabbit, Spellcheck, and the tidy job, which had nothing left to do). This includes Go CI (authbridge agentop), Go CI (README demo), Verify module graph is tidy, Dependency Review and Trivy Filesystem Scan.

Verification (local, Go 1.26.10, GOWORK=off)

• go.sum integrity: golang.org/x/sys v0.50.0 h1:dkKZEFTE… and /go.mod h1:hNLxWAXm… match the sum.golang.org record (tree 71041460). go mod verify passes in both modules. The /go.mod hash is the same as v0.49.0's (x/sys has no requirements), so no other go.sum lines changed.
• Tidiness: go mod tidy -diff is empty for cmd/agentop and scripts/readme-demo at head.
• Build/vet: go build ./... and go vet ./... (linux and GOOS=darwin) succeed for both modules with -mod=readonly, and go list -m resolves golang.org/x/sys v0.50.0.
• Tests: scripts/readme-demo passes go test ./.... In cmd/agentop, all packages pass except three tests that also fail on main in my sandbox (no systemd user bus, a sandbox network proxy) or are timing-flaky (TestTrunc_ScalesLinearly, which passes on rerun). None of them are related to this bump, and the CI agentop job is green.
• API impact: agentop only uses unix.Getsid, and nothing the repo calls from x/sys was removed or changed in v0.50.0.

Nit (non-blocking): core and the other modules remain on x/sys v0.49.0. Sibling #1753 bumps core, and the tidy step on whichever PR merges second will reconcile the rest.

Verdict note: The diff is clean. Under the review policy, though, PRs from non-maintainer authors (dependabot's association here is CONTRIBUTOR) are not auto-approved. A maintainer should give the final approval.