Skip to content

chore(all): update deps - #278

Open
renovate-bot wants to merge 1 commit into
openconfig:mainfrom
renovate-bot:renovate/deps
Open

chore(all): update deps#278
renovate-bot wants to merge 1 commit into
openconfig:mainfrom
renovate-bot:renovate/deps

Conversation

@renovate-bot

@renovate-bot renovate-bot commented Jul 27, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change Age Confidence
actions/cache (changelog) action digest 27d5ce7 → caa2961
actions/checkout (changelog) action digest de0fac2 → d23441a
bazel minor 8.6.0 → 8.7.0 age confidence
gazelle bazel_dep minor 0.50.0 → 0.52.2 age confidence
go (source) toolchain patch 1.26.2 → 1.26.5 age confidence
golang (source) patch 1.26.2 → 1.26.5 age confidence
google.golang.org/grpc require minor v1.82.1 → v1.83.0 age confidence
google.golang.org/grpc/cmd/protoc-gen-go-grpc require patch v1.6.1 → v1.6.2 age confidence
google.golang.org/protobuf require patch v1.36.11 → v1.36.12 age confidence
grpc bazel_dep minor 1.80.0 → 1.83.0 age confidence
rules_go bazel_dep minor 0.60.0 → 0.62.0 age confidence
super-linter/super-linter (changelog) action digest 9e86335 → 4ce2083

Release Notes

bazelbuild/bazel (bazel)

v8.7.0

Compare Source


Release Notes:
bazel-contrib/bazel-gazelle (gazelle)

v0.52.2

Using Bzlmod

bazel_dep(name = "gazelle", version = "0.52.2")

Using WORKSPACE

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
http_archive(
    name = "bazel-gazelle",
    sha256 = "6549bd37cf1b82bac406119aef1b26bfec5d1c02d0d5a5518275e4513f47b3b2",
    url = "https://github.com/bazel-contrib/bazel-gazelle/releases/download/v0.52.2/bazel-gazelle-v0.52.2.tar.gz",
)
load("@bazel-gazelle//:deps.bzl", "gazelle_dependencies")
gazelle_dependencies()

What's Changed

Full Changelog: bazel-contrib/bazel-gazelle@v0.52.1...v0.52.2

v0.51.3

What's Changed

Full Changelog: bazel-contrib/bazel-gazelle@v0.51.2...v0.51.3

v0.51.1

What's changed

  • Fixed an issue where go mod tidy in a project that depends on github.com/bazelbuild/bazel-gazelle v0.51.0 would report missing v2 packages.

v0.51.0

What's Changed

New Contributors

Full Changelog: bazel-contrib/bazel-gazelle@v0.50.0...v0.51.0

golang/go (go)

v1.26.5

v1.26.4

v1.26.3

grpc/grpc-go (google.golang.org/grpc)

v1.83.0: Release 1.83.0

Compare Source

Security

  • server: Stop reading from connections when flooded by HTTP/2 frames to mitigate resource exhaustion. The default value for this limit is 100 frames, excluding DATA and HEADERS, and may be changed by setting environment variable GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT.
  • xds/rbac: Support Metadata and RequestedServerName permissions matcher fields. If present in a DENY rule, previously these would be ignored and fail-open.
  • xds/rbac: Fix panic when parsing unsupported fields in NotRule/NotId permissions.
  • xds/rbac: Support the deprecated source_ip principal identifier by treating it as equivalent to direct_remote_ip.
  • xds: Fix panic when parsing route header matchers configured with empty exact_match, prefix_match, or suffix_match strings. (#​9223)

New Features

  • xds/googlec2p: Enable DirectPath over Interconnect support for on-premises clients via the force-xds target URI query parameter. (#​9133)
  • xds: Enable xDS configuration to control which fields get propagated from ORCA backend metric reports to LRS load reports. (#​9145)
  • authz: Add OnPolicyUpdate callback to FileWatcherOptions to notify when an authz policy is loaded or updated. (#​9142)
  • xds: Add support for the GCP Authentication HTTP Filter, which automatically fetches and attaches GCP Service Account Identity JWT tokens to outgoing RPCs.
    • This feature can be enabled by setting environment variable GRPC_EXPERIMENTAL_XDS_GCP_AUTHENTICATION_FILTER=true. (#​9119)
  • xds: Add support for xDS-based HTTP CONNECT proxies.
    • This feature can be enabled by setting environment variable GRPC_EXPERIMENTAL_XDS_HTTP_CONNECT=true. (#​9151)
  • xds: Add support for contains_match in route header matchers. (#​9223)

Bug Fixes

  • credentials/alts: Fix panic when processing malformed frames by validating that the message frame length exceeds the message type field size. (#​9197)
  • grpc: Fix compilation on Plan 9 targets (GOOS=plan9), broken since v1.81.0. (#​9255)
grpc/grpc (grpc)

v1.83.0

This is release 1.83.0 (garden) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

  • [Security] Default to Post-Quantum Cryptography in TLS key exchange. (#​42560)
  • [authz] don't pass RBAC policy by value when constructing authorization engine. (#​42636)

C#

  • Migrate CSharp Grpc.Tools to new DotNet Version. (#​42661)
  • [C#] Tools - Build: Fix protoc SIGSEGV on ARM64 by aligning max-page-size and migrating to manylinux_2_28. (#​42590)

Python

  • [Backport][v1.83.x][Python] grpc-status: Relax protobuf dependency lower bound to allow 6.x. (#​43001)
  • [Python] Add abort_with_status to the aio ServicerContext ABC. (#​42733)
  • [Python] Update lower bound for protobuf from 6.33.5 to 7.35.1. (#​42914)
  • [Python] Pyright typeCheckingMode - standard. (#​42739)
  • [Python] Support Python 3.15 - Upgrade bazel dep rules_python to 2.0.2. (#​42637)
  • [Python] Hide internal symbols from Python's cygrpc shared object. (#​42325)
  • [Python] Handle custom Interceptor exceptions in InterceptedCall APIs . (#​42593)

v1.82.1

This is release gRPC Core 1.82.1 (glacier).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

What's Changed

Python

Full Changelog: grpc/grpc@v1.82.0...v1.82.1

v1.82.0

This is release gRPC Core 1.82.0 (glacier).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.
This is release 1.82.0 (glacier) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

  • [call creds] Add support for looking up and attaching regional access boundary policy metadata. (#​41594)
  • Unregister CFStream callbacks during endpoint shutdown. (#​42211)
  • Fix fd 0 incorrectly treated as invalid across POSIX socket code. (#​41764)
  • [xDS] enable new ORCA-to-LRS propagation behavior (gRFC A85). (#​42411)
  • [RetryFilter::LegacyCallData]: avoid tripping abseil nullopt assertion. (#​42405)
  • [xds] Implement A114: WRR support for custom backend metrics. (#​41750)
  • [Core] Upgrade to protobuf 35 (#​42512)

PHP

  • [Backport][v1.82.x][PHP] Add PIE support for PHP extention. (#​42873)

Python

Added 2026-07-12:
CAUTION! This gRPC Python release 1.82.0 was yanked from PyPI on 2026-07-07 due to issue #​42906.

  • [Python] [Pyright] Part 2 - Pyright for src/python/grpcio/grpc/aio/_call.py. (#​42272)
  • [Python][aio] Fix issue #​42393: 100% CPU when Python run with -O flag. (#​42470)
  • [Python] [Typeguard] Part 6 - Add Typeguard SYNC Stack in tests. (#​40353)
  • [Python] [Pyright] Part 3 - Pyright for src/python/grpcio/grpc/aio/_metadata.py. (#​42273)
  • [Python] Cancel calls without closing channels in fork child. (#​41784)
  • [Python] Migrated to protobuf 3.35.

Ruby

  • [Ruby] Implemented Pure Ruby Call Credentials. (#​41946)
  • [Ruby] Fix Ruby interceptors not running in FIFO order. (#​42346)

v1.81.1

This is release 1.81.0 (graphic) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

  • [EventEngine] Fix a potential use-after-free error on Windows. (#​42078)
  • [ssl] Server side handshaker factory stores a map of key signers. (#​42002)
  • [Core] Fix completion queue shutdown race on weak memory models (ARM). (#​41510)
  • [EventEngine] Fix a Windows race that causes an assertion error. (#​41563)
  • [grpc_error] enable error_flatten experiment in OSS. (#​41471)

Objective-C

  • [ObjC] Add receiveNextMessage to GRPCUnaryProtoCall. (#​42260)

Python

  • [Python] Add typing_extensions dep to aio Bazel target. (#​42001)
  • [Python] [Pyright] Part 1 - Pyright for src/python/grpcio/grpc/aio/_base_server.py. (#​42240)
  • [Python] Drop 3.9. (#​42145)
  • [Python] grpc-status: Relax protobuf dependency upper bound to allow 7.x. (#​41948)
  • [Python] [Typeguard] Part 5 - Add Typeguard SYNC Stack in tests. (#​40278)
  • [Python] Remove GIL from ReceiveMessageOperation.un_c method. (#​41812)
  • [Python] Support observability in AsyncIO stack. (#​41573)
  • [Python] Trim Python2 backward compatiblity syntax - removed (object) inheritance. (#​41708)

Ruby

  • [Ruby] Drop support for EOL Ruby 3.1 and clean up. (#​41435)
  • [Ruby] Composed CallCredentials keep a reference to their source. (#​41782)

v1.81.0

This is release 1.81.0 (graphic) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

  • [EventEngine] Fix a potential use-after-free error on Windows. (#​42078)
  • [ssl] Server side handshaker factory stores a map of key signers. (#​42002)
  • [Core] Fix completion queue shutdown race on weak memory models (ARM). (#​41510)
  • [EventEngine] Fix a Windows race that causes an assertion error. (#​41563)
  • [grpc_error] enable error_flatten experiment in OSS. (#​41471)

Objective-C

  • [ObjC] Add receiveNextMessage to GRPCUnaryProtoCall. (#​42260)

Python

  • [Python] Add typing_extensions dep to aio Bazel target. (#​42001)
  • [Python] [Pyright] Part 1 - Pyright for src/python/grpcio/grpc/aio/_base_server.py. (#​42240)
  • [Python] Drop 3.9. (#​42145)
  • [Python] grpc-status: Relax protobuf dependency upper bound to allow 7.x. (#​41948)
  • [Python] [Typeguard] Part 5 - Add Typeguard SYNC Stack in tests. (#​40278)
  • [Python] Remove GIL from ReceiveMessageOperation.un_c method. (#​41812)
  • [Python] Support observability in AsyncIO stack. (#​41573)
  • [Python] Trim Python2 backward compatiblity syntax - removed (object) inheritance. (#​41708)

Ruby

  • [Ruby] Drop support for EOL Ruby 3.1 and clean up. (#​41435)
  • [Ruby] Composed CallCredentials keep a reference to their source. (#​41782)
bazelbuild/rules_go (rules_go)

v0.62.0

Author: zbarsky-bot

MODULE.bazel code

bazel_dep(name = "rules_go", version = "0.62.0")

go_sdk = use_extension("@rules_go//go:extensions.bzl", "go_sdk")
go_sdk.from_file(go_mod = "//:go.mod")

WORKSPACE code

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "io_bazel_rules_go",
    sha256 = "0b805c94fb3730dc23df32925ed477b3f4ed37b56075dcac6f218c3ea7b4ab42",
    urls = [
        "https://mirror.bazel.build/github.com/bazel-contrib/rules_go/releases/download/v0.62.0/rules_go-v0.62.0.zip",
        "https://github.com/bazel-contrib/rules_go/releases/download/v0.62.0/rules_go-v0.62.0.zip",
    ],
)

load("@io_bazel_rules_go//go:deps.bzl", "go_register_toolchains", "go_rules_dependencies")

go_rules_dependencies()

go_register_toolchains(version = "1.26.5")

# Create the host platform repository transitively required by rules_go.
load("@bazel_tools//tools/build_defs/repo:utils.bzl", "maybe")
load("@platforms//host:extension.bzl", "host_platform_repo")

maybe(
    host_platform_repo,
    name = "host_platform",
)

What's Changed

New Contributors

Full Changelog: bazel-contrib/rules_go@v0.61.1...v0.62.0

v0.61.1

MODULE.bazel code

bazel_dep(name = "rules_go", version = "0.61.1")

go_sdk = use_extension("@rules_go//go:extensions.bzl", "go_sdk")
go_sdk.from_file(go_mod = "//:go.mod")

WORKSPACE code

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "io_bazel_rules_go",
    sha256 = "763f4a3f6b03469fdb00a77a333dd0b5546d3ee1fa29db373128c08fee73e0e8",
    urls = [
        "https://mirror.bazel.build/github.com/bazel-contrib/rules_go/releases/download/v0.61.1/rules_go-v0.61.1.zip",
        "https://github.com/bazel-contrib/rules_go/releases/download/v0.61.1/rules_go-v0.61.1.zip",
    ],
)

load("@io_bazel_rules_go//go:deps.bzl", "go_register_toolchains", "go_rules_dependencies")

go_rules_dependencies()

go_register_toolchains(version = "1.26.4")

# Create the host platform repository transitively required by rules_go.
load("@bazel_tools//tools/build_defs/repo:utils.bzl", "maybe")
load("@platforms//host:extension.bzl", "host_platform_repo")

maybe(
    host_platform_repo,
    name = "host_platform",
)

What's Changed

Full Changelog: bazel-contrib/rules_go@v0.61.0...v0.61.1

v0.61.0

MODULE.bazel code

bazel_dep(name = "rules_go", version = "0.61.0")

go_sdk = use_extension("@rules_go//go:extensions.bzl", "go_sdk")
go_sdk.from_file(go_mod = "//:go.mod")

WORKSPACE code

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "io_bazel_rules_go",
    sha256 = "5f05dbf4a8cfcf91f99139ad0ff2bedb7bc4fcf1b503ebf6fe8dfe7894efd117",
    urls = [
        "https://mirror.bazel.build/github.com/bazel-contrib/rules_go/releases/download/v0.61.0/rules_go-v0.61.0.zip",
        "https://github.com/bazel-contrib/rules_go/releases/download/v0.61.0/rules_go-v0.61.0.zip",
    ],
)

load("@io_bazel_rules_go//go:deps.bzl", "go_register_toolchains", "go_rules_dependencies")

go_rules_dependencies()

go_register_toolchains(version = "1.26.3")

# Create the host platform repository transitively required by rules_go.
load("@bazel_tools//tools/build_defs/repo:utils.bzl", "maybe")
load("@platforms//host:extension.bzl", "host_platform_repo")

maybe(
    host_platform_repo,
    name = "host_platform",
)

What's Changed

Full Changelog: bazel-contrib/rules_go@v0.60.0...v0.61.0

New Contributors

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Monday through Friday (* * * * 1-5)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate-bot
renovate-bot force-pushed the renovate/deps branch 2 times, most recently from 711e972 to 7eb23fe Compare July 30, 2026 05:27
@forking-renovate

forking-renovate Bot commented Jul 30, 2026

Copy link
Copy Markdown

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 1 additional dependency was updated

Details:

Package Change
google.golang.org/genproto/googleapis/rpc v0.0.0-20260414002931-afd174a4e478 -> v0.0.0-20260526163538-3dc84a4a5aaa

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@renovate-bot