Skip to content

Bump github.com/amatsagu/tempest from 1.7.2 to 1.9.2#13

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/amatsagu/tempest-1.9.2
Open

Bump github.com/amatsagu/tempest from 1.7.2 to 1.9.2#13
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/amatsagu/tempest-1.9.2

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Jun 2, 2026

Bumps github.com/amatsagu/tempest from 1.7.2 to 1.9.2.

Release notes

Sourced from github.com/amatsagu/tempest's releases.

v1.9.2

Hotfix for v1.9.1. Updated logic of rate limiter to better handle batch requests. It was "stress tested" for 3 hours in a row and had no issues.

v1.9.1

Hotfix for v1.9.0. I've got reports from (2) larger bot developers that at scale - they got temporarily blocked by Discord's CloudFlare anti DDoS after sending ~15k requests in less than 10min. This appear to be a bug with handling retryable (mostly 429 error) requests. At large scale, bot may have dozens of ticking retryable requests and previously they were incorrectly handled (partially outside rate limit checks). This hotfix introduces:

  • Fixes to original issue by adding missing checks and adding extra time sleep (for network backoff).
  • Adds internal retryable requester counter - it will fail early & send error if REST Client detects suspicious amount of failed but retryable requests (there's a chance they happen due to Tempest bug but they also may be because of bad code or network issues).

v1.9.0

[!NOTE] This release would normally be versioned as v1.8.1, but it was promoted to v1.9.0 due to the possibility that the new API rate limiter could introduce breaking changes to some API calls.

What's Changed

  • Upgraded REST implementation so now it also handles regional (per /endpoint) rate limit buckets. It uses by default quite aggressive settings for performance reasons but everything is configurable. Rate limiter can be disabled by providing custom http transport into http client used by REST Client. By default it may look like Tempest again consumes more memory - don't panic! It only sweeps old bucket data at specific thresholds to avoid spam of sweeping events. Example of it working:

Full Changelog: amatsagu/tempest@v1.8.0...v1.9.0

v1.8.0

What's Changed

  • Added optional support for zlib-stream compression for GatewayClient (works only for incoming payloads over ws conn to gateway). It can reduce size of incoming requests by up to ~70% at cost of slightly higher CPU usage.
  • Fixed potential race condition in Shard/Socket logic where (at least in theory) Shard logic could crash when trying to close and read/write from different goroutines in nearly the same time (max ~4ns time window).
  • Added missing status fields from presence update event payload. It now allows Tempest powered Discord Applicattions to display custom status.

Full Changelog: amatsagu/tempest@v1.7.2...v1.8.0

Commits
  • b4adae3 fix: delete example/example-bot binary
  • 59c9d8d fix: implement strict bucket synchronization to prevent 429 spam
  • 5556fe8 feat: simplify logic of internal retryable requests counter (emergency breaks)
  • 2cdab51 fix: add internal retry counter to error early if there's suspicious number o...
  • 4a81bdb fix: handle edge case where bot gets temporarily ip banned by sending again 4...
  • 3d3b74c docs: fix path to license badge
  • d9a0446 debug: add trace logs when rate limit is hit | use client's logger
  • 3647c4d feat: introduce http transport rate limiter to properly handle regional API b...
  • 9e0b158 feat: Add formatting/linting pre-commit hooks with Lefthook & golangci-lint...
  • ab29b14 docs: fix typos in README & add dedicated CONTRIBUTING.md (#64)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/amatsagu/tempest](https://github.com/amatsagu/tempest) from 1.7.2 to 1.9.2.
- [Release notes](https://github.com/amatsagu/tempest/releases)
- [Commits](amatsagu/tempest@v1.7.2...v1.9.2)

---
updated-dependencies:
- dependency-name: github.com/amatsagu/tempest
  dependency-version: 1.9.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jun 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants