merge latest upstream main by dray92 · Pull Request #11 · devzero-inc/microservices-demo

dray92 · 2025-01-13T20:40:23Z

Background

Fixes

Change Summary

Additional Notes

Testing Procedure

Related PRs or Issues

Summary by CodeRabbit

New Features
- Multi-architecture container builds; load generator adds RATE env (default "1").
Documentation
- New microservice onboarding guide; clarified development guide; added demo links and minor README fixes.
Chores
- CI/tooling and runtime upgrades (actions, .NET/Go versions); Terraform/provider version bumps; broad dependency and image updates; Skaffold multi-platform builds.
Resource Defaults
- Increased memory defaults for cart, currency, and payment services.
Helm / Kubernetes
- seccompProfile now gated by securityContext flag; many image tags, ports, probes, and health wiring updated.
Observability
- OpenTelemetry tracing pipeline modernized; profiler startup disabled in some services.

height · 2025-01-13T20:40:26Z

Link Height tasks by mentioning a task ID in the pull request title or commit messages, or description and comments with the keyword link (e.g. "Link T-123").

💡Tip: You can also use "Close T-X" to automatically close a task when the pull request is merged.

#2901)

Bumps [cryptography](https://github.com/pyca/cryptography) from 44.0.0 to 44.0.1. - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@44.0.0...44.0.1) --- updated-dependencies: - dependency-name: cryptography dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…o v0.119.0 (#2909)

This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [python-json-logger](https://redirect.github.com/nhairs/python-json-logger) | `==3.2.1` -> `==3.3.0` | [![age](https://developer.mend.io/api/mc/badges/age/pypi/python-json-logger/3.3.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/pypi/python-json-logger/3.3.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/pypi/python-json-logger/2.0.7/3.3.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/python-json-logger/2.0.7/3.3.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>nhairs/python-json-logger (python-json-logger)</summary> ### [`v3.3.0`](https://redirect.github.com/nhairs/python-json-logger/releases/tag/v3.3.0): 3.3.0 [Compare Source](https://redirect.github.com/nhairs/python-json-logger/compare/v3.2.1...v3.3.0) ##### Added - `exc_info_as_array` and `stack_info_as_array` options are added to `pythonjsonlogger.core.BaseJsonFormatter` allowing both to be encoded as list of lines instead of a single multi-line string. [#35](https://redirect.github.com/nhairs/python-json-logger/issues/35) ##### Security - Remove `msgspec-python313-pre` from `dev` dependencies preventing potential RCE. Details: [GHSA-wmxh-pxcx-9w24](https://redirect.github.com/nhairs/python-json-logger/security/advisories/GHSA-wmxh-pxcx-9w24#advisory-comment-121307) Thanks [@1hakusai1](https://redirect.github.com/1hakusai1) and [@omnigodz](https://redirect.github.com/omnigodz) ### [`v3.2.1`](https://redirect.github.com/nhairs/python-json-logger/releases/tag/v3.2.1): 3.2.1 [Compare Source](https://redirect.github.com/nhairs/python-json-logger/compare/v3.2.0...v3.2.1) ##### Fixed - Import error on `import pythonjsonlogger.jsonlogger` [#29](https://redirect.github.com/nhairs/python-json-logger/issues/29) ### [`v3.2.0`](https://redirect.github.com/nhairs/python-json-logger/releases/tag/v3.2.0): 3.2.0 [Compare Source](https://redirect.github.com/nhairs/python-json-logger/compare/v3.1.0...v3.2.0) ##### Changed - `pythonjsonlogger.[ORJSON,MSGSPEC]_AVAILABLE` no longer imports the respective package when determining availability. - `pythonjsonlogger.[orjson,msgspec]` now throws a `pythonjsonlogger.exception.MissingPackageError` when required libraries are not available. These contain more information about what is missing whilst still being an `ImportError`. - `defaults` parameter is no longer ignored and now conforms to the standard library. Setting a defaults dictionary will add the specified keys if the those keys do not exist in a record or weren't passed by the `extra` parameter when logging a message. - `typing_extensions` is only installed on Python version < 3.10. - Support Python 3.13 - `msgspec` has only been tested against pre-release versions. Thanks [@cjwatson](https://redirect.github.com/cjwatson) and [@bharel](https://redirect.github.com/bharel) ### [`v3.1.0`](https://redirect.github.com/nhairs/python-json-logger/releases/tag/v3.1.0) [Compare Source](https://redirect.github.com/nhairs/python-json-logger/compare/v3.0.1...v3.1.0) This splits common funcitonality out to allow supporting other JSON encoders. Although this is a large refactor, backwards compatibility has been maintained. ##### Added - `pythonjsonlogger.core` - more details below. - `pythonjsonlogger.defaults` module that provides many functions for handling unsupported types. - Orjson encoder support via `pythonjsonlogger.orjson.OrjsonFormatter` with the following additions: - bytes are URL safe base64 encoded. - Exceptions are "pretty printed" using the exception name and message e.g. `"ValueError: bad value passed"` - Enum values use their value, Enum classes now return all values as a list. - Tracebacks are supported - Classes (aka types) are support - Will fallback on `__str__` if available, else `__repr__` if available, else will use `__could_not_encode__` - MsgSpec encoder support via `pythonjsonlogger.msgspec.MsgspecFormatter` with the following additions: - Exceptions are "pretty printed" using the exception name and message e.g. `"ValueError: bad value passed"` - Enum classes now return all values as a list. - Tracebacks are supported - Classes (aka types) are support - Will fallback on `__str__` if available, else `__repr__` if available, else will use `__could_not_encode__` - Note: msgspec only supprts enum values of type `int` or `str` [jcrist/msgspec#680](https://redirect.github.com/jcrist/msgspec/issues/680) ##### Changed - `pythonjsonlogger.jsonlogger` has been moved to `pythonjsonlogger.json` with core functionality moved to `pythonjsonlogger.core`. - `pythonjsonlogger.core.BaseJsonFormatter` properly supports all `logging.Formatter` arguments: - `fmt` is unchanged. - `datefmt` is unchanged. - `style` can now support non-standard arguments by setting `validate` to `False` - `validate` allows non-standard `style` arguments or prevents calling `validate` on standard `style` arguments. - `default` is ignored. - `pythonjsonlogger.json.JsonFormatter` default encodings changed: - bytes are URL safe base64 encoded. - Exception formatting detected using `BaseException` instead of `Exception`. Now "pretty prints" the exception using the exception name and message e.g. `"ValueError: bad value passed"` - Dataclasses are now supported - Enum values now use their value, Enum classes now return all values as a list. - Will fallback on `__str__` if available, else `__repr__` if available, else will use `__could_not_encode__` - Renaming fields now preserves order ([#7](https://redirect.github.com/nhairs/python-json-logger/issues/7)) and ignores missing fields ([#6](https://redirect.github.com/nhairs/python-json-logger/issues/6)). - Documentation - Generated documentation using `mkdocs` is stored in `docs/` - Documentation within `README.md` has been moved to `docs/index.md` and `docs/qucikstart.md`. - `CHANGELOG.md` has been moved to `docs/change-log.md` - `SECURITY.md` has been moved and replaced with a symbolic link to `docs/security.md`. ##### Deprecated - `pythonjsonlogger.jsonlogger` is now `pythonjsonlogger.json` - `pythonjsonlogger.jsonlogger.RESERVED_ATTRS` is now `pythonjsonlogger.core.RESERVED_ATTRS`. - `pythonjsonlogger.jsonlogger.merge_record_extra` is now `pythonjsonlogger.core.merge_record_extra`. ##### Removed - Python 3.7 support dropped - `pythonjsonlogger.jsonlogger.JsonFormatter._str_to_fn` replaced with `pythonjsonlogger.core.str_to_object`. ### [`v3.0.1`](https://redirect.github.com/nhairs/python-json-logger/releases/tag/v3.0.1) [Compare Source](https://redirect.github.com/nhairs/python-json-logger/compare/v3.0.0...v3.0.1) ##### Fixes - Fix spelling of parameter `json_serialiser` -> `json_serializer` ([#8](https://redirect.github.com/nhairs/python-json-logger/issues/8)) - [@juliangilbey](https://redirect.github.com/juliangilbey) ### [`v3.0.0`](https://redirect.github.com/nhairs/python-json-logger/releases/tag/v3.0.0) [Compare Source](https://redirect.github.com/nhairs/python-json-logger/compare/v2.0.7...v3.0.0) Note: using new major version to separate changes from this fork and the original (upstream). See [#1](https://redirect.github.com/nhairs/python-json-logger/issues/1) for details. ##### Changes - Update supported Python versions - [@nhairs](https://redirect.github.com/nhairs) - Drop 3.6 - The following versions are supported and tested: - CPython 3.7-3.12 (ubuntu, windows, mac) - PyPy 3.7-3.10 (ubuntu, wundows, mac) - `RESERVED_ATTRS` is now a list and version dependent - Fix `JsonFormatter.__init__` return type (`None`) - [@nhairs](https://redirect.github.com/nhairs) - Moved to `pyproject.toml` - [@nhairs](https://redirect.github.com/nhairs) - Update linting and testing - [@nhairs](https://redirect.github.com/nhairs) - Split lint and test steps in GHA - Use validate-pyproject, black, pylint, mypy #### New Contributors **Full Changelog**: https://togithub.com/nhairs/python-json-logger/compare/v2.0.7...v3.0.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - "* 0-3 * * 1" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/GoogleCloudPlatform/microservices-demo).

kevin-devzero · 2025-03-31T07:08:19Z

closing for now

…o v0.122.1 (#2924)

…2974)

* Revert "Add support for arm64 (#2589)" This reverts commit 916eeac. * Release v0.10.3 * Add support for arm64 (#2589) * New demo featuring Online Boutique with Score and Humanitec (Platform Engineering) * --platform=$BUILDPLATFORM * platforms: ["linux/amd64", "linux/arm64"] * ARG BUILDPLATFORM * -a $TARGETARCH * Fix TrimMode=full * Update skaffold.yaml - useDockerCLI: true * multi-arch digest for python 3.12.8 * dotnet 9.0.1 * eclipse-temurin:21.0.5_11 * golang:1.23.4-alpine * node:20.18.1-alpine * Fix python container on arm64 (linux-headers and libstdc++) --------- Co-authored-by: Olivier Bourgeois <3271352+bourgeoisor@users.noreply.github.com> --------- Co-authored-by: Mathieu Benoit <mathieu-benoit@hotmail.fr>

…3261) Bumps [werkzeug](https://github.com/pallets/werkzeug) from 3.1.5 to 3.1.6. - [Release notes](https://github.com/pallets/werkzeug/releases) - [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst) - [Commits](pallets/werkzeug@3.1.5...3.1.6) --- updated-dependencies: - dependency-name: werkzeug dependency-version: 3.1.6 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [langgraph](https://github.com/langchain-ai/langgraph) from 1.0.5 to 1.0.10rc1. - [Release notes](https://github.com/langchain-ai/langgraph/releases) - [Commits](langchain-ai/langgraph@1.0.5...1.0.10rc1) --- updated-dependencies: - dependency-name: langgraph dependency-version: 1.0.10rc1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

) Bumps [flask](https://github.com/pallets/flask) from 3.1.2 to 3.1.3. - [Release notes](https://github.com/pallets/flask/releases) - [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst) - [Commits](pallets/flask@3.1.2...3.1.3) --- updated-dependencies: - dependency-name: flask dependency-version: 3.1.3 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [pyasn1](https://github.com/pyasn1/pyasn1) from 0.6.2 to 0.6.3. - [Release notes](https://github.com/pyasn1/pyasn1/releases) - [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst) - [Commits](pyasn1/pyasn1@v0.6.2...v0.6.3) --- updated-dependencies: - dependency-name: pyasn1 dependency-version: 0.6.3 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

@todo

…c, improve tests (#3276) * fix: remove deprecated rand.Seed in shippingservice rand.Seed has been deprecated since Go 1.20. The global random number generator is now automatically seeded, making manual seeding and the seeded flag unnecessary. * fix: use actual item count in GetQuote CreateQuoteFromCount was called with a hardcoded 0 and ignored its count parameter entirely. This passes the real item count and handles the zero-item edge case. * test: improve shippingservice test coverage - Fix misleading expected value in TestGetQuote error message - Add regex-based tracking ID format validation (addresses existing @todo) - Add table-driven tests for CreateQuoteFromFloat - Add tests for CreateQuoteFromCount, getRandomLetterCode, getRandomNumber - Add empty cart quote test - Add tracking ID uniqueness check --------- Co-authored-by: splint-disk-8i <splint-disk-8i@users.noreply.github.com>

Bumps [orjson](https://github.com/ijl/orjson) from 3.11.3 to 3.11.6. - [Release notes](https://github.com/ijl/orjson/releases) - [Changelog](https://github.com/ijl/orjson/blob/master/CHANGELOG.md) - [Commits](ijl/orjson@3.11.3...3.11.6) --- updated-dependencies: - dependency-name: orjson dependency-version: 3.11.6 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [golang.org/x/net](https://pkg.go.dev/golang.org/x/net) | [`v0.51.0` → `v0.52.0`](https://cs.opensource.google/go/x/net/+/refs/tags/v0.51.0...refs/tags/v0.52.0) | ![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2fnet/v0.52.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2fnet/v0.51.0/v0.52.0?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/728) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/GoogleCloudPlatform/microservices-demo).

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.79.2 to 1.79.3. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.79.2...v1.79.3) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-version: 1.79.3 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

#3291) Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.79.2 to 1.79.3. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.79.2...v1.79.3) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-version: 1.79.3 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

GetProduct was calling parseCatalog() three times per loop iteration and didn't early-return on match. This caches the result and returns immediately when the product is found. Co-authored-by: splint-disk-8i <splint-disk-8i@users.noreply.github.com>

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.79.2 to 1.79.3. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.79.2...v1.79.3) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-version: 1.79.3 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…urity] (#3315)

…#3317)

…o v0.150.1 (#3325)

Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 1.1.12 to 1.1.14. - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](juliangruber/brace-expansion@v1.1.12...v1.1.14) --- updated-dependencies: - dependency-name: brace-expansion dependency-version: 1.1.14 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

renovate-bot and others added 15 commits February 9, 2025 22:47

chore(deps): refresh pip-compile outputs python (#2899)

5790da6

chore(deps): update gcr.io/k8s-skaffold/skaffold docker tag to v2.14.1 (

04cf8a8

#2901)

chore(deps): update terraform google to v6.19.0 (#2902)

98fd50d

chore(deps): refresh pip-compile outputs (#2904)

2fff76e

chore(deps): update redis:alpine docker digest to 02419de (#2906)

62b710b

chore(deps): update dotnet (#2907)

7ce850c

fix(deps): update nodejs (#2908)

6b35b39

chore(deps): update otel/opentelemetry-collector-contrib docker tag t…

056cfa9

…o v0.119.0 (#2909)

chore(deps): refresh pip-compile outputs python (#2910)

8c35871

chore(deps): update busybox:latest docker digest to 498a000 (#2912)

11c7fd3

chore(deps): update dotnet to 9.0.2 (#2913)

9181ac0

fix(deps): update golang (#2914)

350d6e6

chore(deps): update terraform google to v6.20.0 (#2917)

5f5b66c

kevin-devzero closed this Mar 31, 2025

kevin-devzero reopened this Mar 31, 2025

renovate-bot and others added 11 commits March 31, 2025 23:16

fix(deps): update java (#2915)

b9c3a48

fix(deps): update nodejs (#2916)

5008a62

chore(deps): refresh pip-compile outputs python (#2920)

234b4b4

chore(deps): update otel/opentelemetry-collector-contrib docker tag t…

01abc6b

…o v0.122.1 (#2924)

chore(deps): update terraform google to v6.26.0 (#2925)

76771a3

chore(deps): update dotnet (#2930)

27da171

chore(deps): update dependency go to 1.24 (#2938)

a20677b

fix(deps): update golang (#2939)

9697445

chore(deps): update busybox:latest docker digest to 37f7b37 (#2944)

bca5142

Update values.yaml- increase memory request/limit for three services (#…

7cfba45

…2974)

renovate-bot and others added 30 commits March 16, 2026 13:46

chore(deps): update dotnet (#3256)

a1e0927

fix(deps): update golang (#3257)

ef47406

chore(deps): update dependency go to 1.26 (#3258)

424ae5b

fix(deps): update nodejs (#3260)

3b0690b

chore(deps): update python:3.14.3-slim docker digest to fb83750 (#3288)

3f812c2

chore(deps): update dotnet (#3289)

b04fa98

Remove unsecure commands in workflows (#3329)

b3a12ee

fix(deps): update module go.opentelemetry.io/otel/sdk to v1.43.0 [sec…

5b3eeea

…urity] (#3315)

fix(deps): update module github.com/jackc/pgx/v5 to v5.9.2 [security] (…

1db7e99

…#3317)

chore(deps): update busybox:latest docker digest to 1487d0a (#3319)

a63de5b

chore(deps): update docker (#3320)

989914b

chore(deps): update redis:alpine docker digest to c5e375a (#3321)

9f75c3c

fix(deps): update java (#3322)

aa26505

fix(deps): update nodejs (#3323)

b5fe327

chore(deps): update dotnet (#3324)

fe09f30

chore(deps): update otel/opentelemetry-collector-contrib docker tag t…

2d5235f

…o v0.150.1 (#3325)

chore(deps): update terraform google to v7.28.0 (#3326)

0f2264b

fix(deps): update dependency uuid to v14 [security] (#3332)

5096a85

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

merge latest upstream main#11

merge latest upstream main#11
dray92 wants to merge 325 commits into
devzero-inc:mainfrom
GoogleCloudPlatform:main

dray92 commented Jan 13, 2025 •

edited by coderabbitai Bot

Loading

Uh oh!

height Bot commented Jan 13, 2025

Uh oh!

kevin-devzero commented Mar 31, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

11 participants

Conversation

dray92 commented Jan 13, 2025 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Background

Fixes

Change Summary

Additional Notes

Testing Procedure

Related PRs or Issues

Summary by CodeRabbit

Uh oh!

height Bot commented Jan 13, 2025

Uh oh!

kevin-devzero commented Mar 31, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

11 participants

dray92 commented Jan 13, 2025 •

edited by coderabbitai Bot

Loading