Skip to content

chore(all): update deps#241

Open
renovate-bot wants to merge 1 commit into
openconfig:masterfrom
renovate-bot:renovate/deps
Open

chore(all): update deps#241
renovate-bot wants to merge 1 commit into
openconfig:masterfrom
renovate-bot:renovate/deps

Conversation

@renovate-bot

@renovate-bot renovate-bot commented Apr 1, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change Age Confidence
alpine final minor 3.233.24 age confidence
bazel minor 8.6.08.7.0 age confidence
gazelle bazel_dep minor 0.48.00.51.3 age confidence
github.com/openconfig/grpctunnel require minor v0.1.0v0.2.0 age confidence
github.com/protocolbuffers/txtpbfmt require digest a481f6ac39628b age confidence
go (source) toolchain patch 1.26.11.26.5 age confidence
golang (source) patch 1.26.11.26.5 age confidence
golang.org/x/crypto require minor v0.49.0v0.53.0 age confidence
google.golang.org/grpc require minor v1.79.3v1.82.0 age confidence
google.golang.org/grpc/cmd/protoc-gen-go-grpc require patch v1.6.1v1.6.2 age confidence
grpc bazel_dep minor 1.80.01.82.0 age confidence
rules_go bazel_dep minor 0.60.00.61.1 age confidence

Release Notes

bazelbuild/bazel (bazel)

v8.7.0

Compare Source


Release Notes:

bazel-contrib/bazel-gazelle (gazelle)

v0.51.3

What's Changed

Full Changelog: bazel-contrib/bazel-gazelle@v0.51.2...v0.51.3

v0.51.1

What's changed

  • Fixed an issue where go mod tidy in a project that depends on github.com/bazelbuild/bazel-gazelle v0.51.0 would report missing v2 packages.

v0.51.0

What's Changed

New Contributors

Full Changelog: bazel-contrib/bazel-gazelle@v0.50.0...v0.51.0

v0.50.0

What's Changed

Full Changelog: bazel-contrib/bazel-gazelle@v0.49.0...v0.50.0

v0.49.0

What's Changed

Full Changelog: bazel-contrib/bazel-gazelle@v0.48.0...v0.49.0

openconfig/grpctunnel (github.com/openconfig/grpctunnel)

v0.2.0

Compare Source

What's Changed

New Contributors

Full Changelog: openconfig/grpctunnel@v0.1.0...v0.2.0

golang/go (go)

v1.26.5

v1.26.4

v1.26.3

v1.26.2

grpc/grpc-go (google.golang.org/grpc)

v1.82.0: Release 1.82.0

Compare Source

Behavior Changes

  • server: Remove support for GRPC_GO_EXPERIMENTAL_DISABLE_STRICT_PATH_CHECKING environment varibale. Strict incoming RPC path validation (which has been the default since v1.79.3) can no longer be disabled. (#​9112)
  • transport: Add environment variable to change the default max header list size from 16MB to 8KB. This may be enabled by setting GRPC_GO_EXPERIMENTAL_ENABLE_8KB_DEFAULT_HEADER_LIST_SIZE=true. This will be enabled by default in a subsequent release. (#​9019)
  • balancer: Load Balancing policy registry is now case-sensitive. Set GRPC_GO_EXPERIMENTAL_CASE_SENSITIVE_BALANCER_REGISTRIES=false (and file an issue) to revert to case-insensitive behavior. (#​9017)

New Features

  • experimental/stats: Expose a new API, NewContextWithLabelCallback, to register a callback that is invoked when telemetry labels are added. (#​8877)
  • client: Return a portion of the response body in the error message, when the client receives an unexpected non-gRPC HTTP response, to make debugging easier. (#​8929)
  • server: Add environment variable GRPC_GO_SERVER_GOROUTINE_LABELS that controls setting runtime/pprof.Labels on goroutines spawned by the server. Set GRPC_GO_SERVER_GOROUTINE_LABELS=grpc.method=true to add the grpc.method label on goroutines spawned to handle incoming requests. (#​9082)

Bug Fixes

  • xds/server: Fix a memory leak of HTTP filter instances occurring when route configurations are updated in-place during a Route Discovery Service (RDS) update. (#​9138)
  • grpc: In the deprecated gzip Compressor (used via the deprecated WithCompressor dial option), enforce the MaxRecvMsgSize limit on the decompressed message buffer, preventing excessive memory allocation from highly compressed payloads. (#​9114)
  • stats/opentelemetry: Record retry attempts, grpc.previous-rpc-attempts, at the call level and not the attempt level. (#​8923)
  • encoding: Ensure Close() is always called on readers returned from Compressor.Decompress if possible. (#​9135)
  • channelz: Fix the LastMessageSentTimestamp and LastMessageReceivedTimestamp fields in SocketMetrics to ensure they contain correct timestamp values. (#​9109)

v1.81.1: Release 1.81.1

Compare Source

Security

  • xds/rbac: Fix a potential authorization bypass caused by incorrectly falling through URI/DNS SANs to Subject Distinguished Name (DN) when matching the authenticated principal name. With this fix, only the first non-empty identity source will be used, as per gRFC A41. (#​9111)

v1.81.0: Release 1.81.0

Compare Source

Behavior Changes

  • balancer/rls: Switch gauge metrics to asynchronous emission (once per collection cycle) to reduce telemetry noise and align with other gRPC language implementations. (#​8808)

Dependencies

  • Minimum supported Go version is now 1.25. (#​8969)

Bug Fixes

  • xds: Use the leaf cluster's security config for the TLS handshake instead of the aggregate cluster's config. (#​8956)
  • transport: Send a RST_STREAM when receiving an END_STREAM when the stream is not already half-closed. (#​8832)
  • xds: Fix ADS resource name validation to prevent a panic. (#​8970)

New Features

  • grpc/stats: Add support for custom labels in per-call metrics (gRFC A108). (#​9008)
  • xds: Add support for Server Name Indication (SNI) and SAN validation (gRFC A101). Disabled by default. To enable, set GRPC_EXPERIMENTAL_XDS_SNI=true environment variable. (#​9016)
  • xds: Add support to control which fields get propagated from ORCA backend metric reports to LRS load reports (gRFC A85). Disabled by default. To enable, set GRPC_EXPERIMENTAL_XDS_ORCA_LRS_PROPAGATION=true. (#​9005)
  • xds: Add metrics to track xDS client connectivity and cached resource state (gRFC A78). (#​8807)
  • stats/otel: Enhance grpc.subchannel.disconnections metric by adding disconnection reason to the grpc.disconnect_error label (gRFC A94). This provides granular insights into why subchannels are closing. (#​8973)
  • mem: Add mem.Buffer.Slice() API to slice the buffer like a slice. (#​8977)

Performance Improvements

  • alts: Pool read buffers to lower memory utilization when sockets are unreadable. (#​8964)
  • transport: Pool HTTP/2 framer read buffers to reduce idle memory consumption. Currently limited to Linux for ALTS and non-encrypted transports (TCP, Unix). To disable, set GRPC_GO_EXPERIMENTAL_HTTP_FRAMER_READ_BUFFER_POOLING=false and report any issues. (#​9032)

v1.80.0

Compare Source

grpc/grpc (grpc)

v1.82.0

This is release gRPC Core 1.82.0 (glacier).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.
This is release 1.82.0 (glacier) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

  • [call creds] Add support for looking up and attaching regional access boundary policy metadata. (#​41594)
  • Unregister CFStream callbacks during endpoint shutdown. (#​42211)
  • Fix fd 0 incorrectly treated as invalid across POSIX socket code. (#​41764)
  • [xDS] enable new ORCA-to-LRS propagation behavior (gRFC A85). (#​42411)
  • [RetryFilter::LegacyCallData]: avoid tripping abseil nullopt assertion. (#​42405)
  • [xds] Implement A114: WRR support for custom backend metrics. (#​41750)

PHP

  • [Backport][v1.82.x][PHP] Add PIE support for PHP extention. (#​42873)

Python

  • [Python] [Pyright] Part 2 - Pyright for src/python/grpcio/grpc/aio/_call.py. (#​42272)
  • [Python][aio] Fix issue #​42393: 100% CPU when Python run with -O flag. (#​42470)
  • [Python] [Typeguard] Part 6 - Add Typeguard SYNC Stack in tests. (#​40353)
  • [Python] [Pyright] Part 3 - Pyright for src/python/grpcio/grpc/aio/_metadata.py. (#​42273)
  • [Python] Cancel calls without closing channels in fork child. (#​41784)

Ruby

  • [Ruby] Implemented Pure Ruby Call Credentials. (#​41946)
  • [Ruby] Fix Ruby interceptors not running in FIFO order. (#​42346)

v1.81.1

This is release 1.81.0 (graphic) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

  • [EventEngine] Fix a potential use-after-free error on Windows. (#​42078)
  • [ssl] Server side handshaker factory stores a map of key signers. (#​42002)
  • [Core] Fix completion queue shutdown race on weak memory models (ARM). (#​41510)
  • [EventEngine] Fix a Windows race that causes an assertion error. (#​41563)
  • [grpc_error] enable error_flatten experiment in OSS. (#​41471)

Objective-C

  • [ObjC] Add receiveNextMessage to GRPCUnaryProtoCall. (#​42260)

Python

  • [Python] Add typing_extensions dep to aio Bazel target. (#​42001)
  • [Python] [Pyright] Part 1 - Pyright for src/python/grpcio/grpc/aio/_base_server.py. (#​42240)
  • [Python] Drop 3.9. (#​42145)
  • [Python] grpc-status: Relax protobuf dependency upper bound to allow 7.x. (#​41948)
  • [Python] [Typeguard] Part 5 - Add Typeguard SYNC Stack in tests. (#​40278)
  • [Python] Remove GIL from ReceiveMessageOperation.un_c method. (#​41812)
  • [Python] Support observability in AsyncIO stack. (#​41573)
  • [Python] Trim Python2 backward compatiblity syntax - removed (object) inheritance. (#​41708)

Ruby

  • [Ruby] Drop support for EOL Ruby 3.1 and clean up. (#​41435)
  • [Ruby] Composed CallCredentials keep a reference to their source. (#​41782)

v1.81.0

This is release 1.81.0 (graphic) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

  • [EventEngine] Fix a potential use-after-free error on Windows. (#​42078)
  • [ssl] Server side handshaker factory stores a map of key signers. (#​42002)
  • [Core] Fix completion queue shutdown race on weak memory models (ARM). (#​41510)
  • [EventEngine] Fix a Windows race that causes an assertion error. (#​41563)
  • [grpc_error] enable error_flatten experiment in OSS. (#​41471)

Objective-C

  • [ObjC] Add receiveNextMessage to GRPCUnaryProtoCall. (#​42260)

Python

  • [Python] Add typing_extensions dep to aio Bazel target. (#​42001)
  • [Python] [Pyright] Part 1 - Pyright for src/python/grpcio/grpc/aio/_base_server.py. (#​42240)
  • [Python] Drop 3.9. (#​42145)
  • [Python] grpc-status: Relax protobuf dependency upper bound to allow 7.x. (#​41948)
  • [Python] [Typeguard] Part 5 - Add Typeguard SYNC Stack in tests. (#​40278)
  • [Python] Remove GIL from ReceiveMessageOperation.un_c method. (#​41812)
  • [Python] Support observability in AsyncIO stack. (#​41573)
  • [Python] Trim Python2 backward compatiblity syntax - removed (object) inheritance. (#​41708)

Ruby

  • [Ruby] Drop support for EOL Ruby 3.1 and clean up. (#​41435)
  • [Ruby] Composed CallCredentials keep a reference to their source. (#​41782)
bazelbuild/rules_go (rules_go)

v0.61.1

MODULE.bazel code

bazel_dep(name = "rules_go", version = "0.61.1")

go_sdk = use_extension("@​rules_go//go:extensions.bzl", "go_sdk")
go_sdk.from_file(go_mod = "//:go.mod")

WORKSPACE code

load("@​bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "io_bazel_rules_go",
    sha256 = "763f4a3f6b03469fdb00a77a333dd0b5546d3ee1fa29db373128c08fee73e0e8",
    urls = [
        "https://mirror.bazel.build/github.com/bazel-contrib/rules_go/releases/download/v0.61.1/rules_go-v0.61.1.zip",
        "https://github.com/bazel-contrib/rules_go/releases/download/v0.61.1/rules_go-v0.61.1.zip",
    ],
)

load("@​io_bazel_rules_go//go:deps.bzl", "go_register_toolchains", "go_rules_dependencies")

go_rules_dependencies()

go_register_toolchains(version = "1.26.4")

# Create the host platform repository transitively required by rules_go.
load("@​bazel_tools//tools/build_defs/repo:utils.bzl", "maybe")
load("@​platforms//host:extension.bzl", "host_platform_repo")

maybe(
    host_platform_repo,
    name = "host_platform",
)

What's Changed

Full Changelog: bazel-contrib/rules_go@v0.61.0...v0.61.1

v0.61.0

MODULE.bazel code

bazel_dep(name = "rules_go", version = "0.61.0")

go_sdk = use_extension("@​rules_go//go:extensions.bzl", "go_sdk")
go_sdk.from_file(go_mod = "//:go.mod")

WORKSPACE code

load("@​bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "io_bazel_rules_go",
    sha256 = "5f05dbf4a8cfcf91f99139ad0ff2bedb7bc4fcf1b503ebf6fe8dfe7894efd117",
    urls = [
        "https://mirror.bazel.build/github.com/bazel-contrib/rules_go/releases/download/v0.61.0/rules_go-v0.61.0.zip",
        "https://github.com/bazel-contrib/rules_go/releases/download/v0.61.0/rules_go-v0.61.0.zip",
    ],
)

load("@​io_bazel_rules_go//go:deps.bzl", "go_register_toolchains", "go_rules_dependencies")

go_rules_dependencies()

go_register_toolchains(version = "1.26.3")

# Create the host platform repository transitively required by rules_go.
load("@​bazel_tools//tools/build_defs/repo:utils.bzl", "maybe")
load("@​platforms//host:extension.bzl", "host_platform_repo")

maybe(
    host_platform_repo,
    name = "host_platform",
)

What's Changed

Full Changelog: bazel-contrib/rules_go@v0.60.0...v0.61.0

New Contributors


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Monday through Friday (* * * * 1-5)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@forking-renovate

forking-renovate Bot commented Apr 1, 2026

Copy link
Copy Markdown

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 5 additional dependencies were updated

Details:

Package Change
golang.org/x/net v0.52.0 -> v0.55.0
golang.org/x/sys v0.42.0 -> v0.46.0
golang.org/x/term v0.41.0 -> v0.44.0
golang.org/x/text v0.35.0 -> v0.38.0
google.golang.org/genproto/googleapis/rpc v0.0.0-20251202230838-ff82c1b0f217 -> v0.0.0-20260414002931-afd174a4e478

@renovate-bot renovate-bot changed the title chore(all): update module google.golang.org/grpc to v1.80.0 chore(all): update deps Apr 6, 2026
@renovate-bot renovate-bot force-pushed the renovate/deps branch 4 times, most recently from 3a31d5f to 6c58770 Compare April 9, 2026 21:00
@renovate-bot renovate-bot force-pushed the renovate/deps branch 4 times, most recently from 5f760f0 to f91589a Compare May 8, 2026 21:32
@renovate-bot renovate-bot force-pushed the renovate/deps branch 2 times, most recently from d5a30da to 8f04871 Compare May 14, 2026 20:24
@renovate-bot renovate-bot force-pushed the renovate/deps branch 5 times, most recently from 51621e4 to d3dc4e7 Compare June 4, 2026 18:58
@renovate-bot renovate-bot force-pushed the renovate/deps branch 3 times, most recently from 2d7572b to e1adac8 Compare June 13, 2026 15:52
@renovate-bot renovate-bot force-pushed the renovate/deps branch 3 times, most recently from fd0fe76 to d68d50c Compare June 30, 2026 18:40
@renovate-bot renovate-bot force-pushed the renovate/deps branch 3 times, most recently from 39fd873 to 90b4558 Compare July 6, 2026 21:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant