chore(deps): weekly safe go updates · 1 package

[mendral-app]

Packages bumped

Package	Old	New	Published
google.golang.org/grpc	v1.80.0	v1.82.1	2026-07-15

📋 Per-package changelog & impact

google.golang.org/grpc v1.80.0 → v1.82.1

v1.82.1 (Security)

• Stop reading from the connection when flooded by HTTP/2 frames (default limit: 100 frames, configurable via GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT)
• xds/rbac: Support Metadata and RequestedServerName permissions matcher fields (previously ignored in DENY rules, causing fail-open)
• xds/rbac: Fix panic when parsing unsupported fields in NotRule/NotId
• xds/rbac: Support deprecated source_ip principal identifier

v1.82.0 (Features & Behavior Changes)

• Strict path checking env var removed (default since v1.79.3, no longer toggleable)
• Load balancer registry is now case-sensitive
• New telemetry callback API: NewContextWithLabelCallback
• Response body included in non-gRPC HTTP error messages for debugging
• Server goroutine labels for pprof via GRPC_GO_SERVER_GOROUTINE_LABELS
• Memory leak fix in xds route config updates
• Fix retry attempt tracking in opentelemetry stats

Impact on this codebase: This repo defines gRPC service APIs and mocks — it does not run a gRPC server/client directly. The upgrade pulls in the latest transport and codegen compatibility. No code changes required. The security fix for HTTP/2 frame flooding benefits any downstream consumer that imports this module.

Files modified

• go.mod
• go.sum

⏭️ Skipped this ecosystem

Package	Current	Latest Stable	Reason
github.com/envoyproxy/protoc-gen-validate	v1.3.3	—	No stable release newer than v1.3.3 (only pre-release pseudo-versions)
go.uber.org/mock	v0.6.0	—	No stable release newer than v0.6.0 (only pre-release pseudo-versions)
google.golang.org/protobuf	v1.36.11	—	No stable release newer than v1.36.11 (only pre-release pseudo-versions)

Supersedes #6 (targets v1.82.0; this PR includes the v1.82.1 security patch).

---

Note

Created by Mendral. Tag @mendral-app with feedback or questions.

• View implementation session