Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 29, 2025

Bumps github.com/cloudposse/atmos from 1.189.0 to 1.192.0.

Release notes

Sourced from github.com/cloudposse/atmos's releases.

v1.192.0

why

  • Full control over logging: By implementing our own logger, we have complete control over formatting, filtering, and output behavior without being constrained by third-party library limitations
  • Foundation for log filtering: This implementation opens the door for future enhancements like secret filtering and redaction in logs, which is critical for safely handling sensitive data in Atmos
  • Enhanced debugging capabilities: The trace level enables extremely verbose debugging output when needed without modifying existing debug statements
  • Consistent behavior: Ensures uniform logging behavior across all Atmos components and provides a stable API for internal use
  • Performance optimization: Direct control allows us to optimize for Atmos-specific use cases and minimize overhead
  • Follows established logging hierarchy: Trace < Debug < Info < Warning < Error

Implementation Details

  • Created dedicated pkg/logger/ package with custom logger implementation
  • Logger is concurrency-safe using sync/atomic for global instance management
  • Added levels.go with TraceLevel constant and helper functions
  • Updated setupLogger in cmd/root.go to use the new logger package
  • Added comprehensive test coverage (94.6%) for logger functionality
  • Trace level works with all existing logging configuration methods:
    • CLI flag: --logs-level=Trace
    • Environment variable: ATMOS_LOGS_LEVEL=Trace
    • Config file: logs.level: Trace

Future Possibilities

With this custom logger implementation, we can now add:

  • Secret filtering and redaction in log output
  • Custom log formatters for different output targets
  • Log routing based on level or content
  • Performance metrics and instrumentation
  • Integration with external logging systems

Testing

  • Comprehensive unit tests in pkg/logger/ with 94.6% coverage
  • Integration tests in cmd/root_test.go
  • Tests verify level hierarchy, visibility filtering, formatted messages, and concurrent safety
  • All tests pass and linting requirements met

references

  • Implements custom log level for Charm Bracelet Log package
  • Follows Go best practices for log level implementation and concurrent safety

🤖 Generated with Claude Code

... (truncated)

Commits
  • d586060 feat: add trace log level support for enhanced debugging (#1525)
  • 59e0f8e feat: implement XDG Base Directory specification for cache management (#1524)
  • 0dfd333 feat: add subprocess coverage collection for tests (#1526)
  • 8fa234f fix: update GitHub Actions to use explicit tokens and latest versions (#1527)
  • e8c1aed fix: normalize path separators in terraform clean output for cross-platform c...
  • e0d7cd7 fix: prevent YAML function concatenation in lists (#1506)
  • 83e8a1f test: fix test isolation issues and improve sandbox testing (#1512)
  • e15c114 refactor: move Atmos functions from Learn to Reference section (#1503)
  • 2dcc478 docs: define the _defaults.yaml design pattern (#1514)
  • 6b4d40f fix: resolve Docker Hub rate limit issues in GitHub Actions (#1511)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/cloudposse/atmos](https://github.com/cloudposse/atmos) from 1.189.0 to 1.192.0.
- [Release notes](https://github.com/cloudposse/atmos/releases)
- [Changelog](https://github.com/cloudposse/atmos/blob/main/CHANGELOG.md)
- [Commits](cloudposse/atmos@v1.189.0...v1.192.0)

---
updated-dependencies:
- dependency-name: github.com/cloudposse/atmos
  dependency-version: 1.192.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code minor New features that do not break anything labels Sep 29, 2025
@dependabot dependabot bot requested review from a team as code owners September 29, 2025 08:34
@dependabot dependabot bot added the minor New features that do not break anything label Sep 29, 2025
@dependabot dependabot bot requested a review from joe-niland September 29, 2025 08:34
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Sep 29, 2025
@dependabot dependabot bot requested a review from nitrocode September 29, 2025 08:34
@dependabot dependabot bot added the go Pull requests that update Go code label Sep 29, 2025
Copy link

coderabbitai bot commented Sep 29, 2025

Important

Review skipped

Ignore keyword(s) in the title.

⛔ Ignored keywords (3)
  • Bump
  • chore(deps)
  • WIP

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


Comment @coderabbitai help to get the list of available commands and usage tips.

@mergify mergify bot added the auto-update This PR was automatically generated label Sep 29, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
auto-update This PR was automatically generated dependencies Pull requests that update a dependency file go Pull requests that update Go code minor New features that do not break anything
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants