Skip to content

chore(all): update deps - #286

Open
renovate-bot wants to merge 1 commit into
openconfig:mainfrom
renovate-bot:renovate/deps
Open

chore(all): update deps#286
renovate-bot wants to merge 1 commit into
openconfig:mainfrom
renovate-bot:renovate/deps

Conversation

@renovate-bot

@renovate-bot renovate-bot commented Sep 11, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change Age Confidence
bazel minor 9.2.0 → 9.3.0 age confidence
go (source) toolchain patch 1.27.1 → 1.27.3 age confidence
golang (source) patch 1.27.1 → 1.27.3 age confidence
google.golang.org/grpc require minor v1.83.2 → v1.84.0 age confidence
grpc bazel_dep minor 1.83.0 → 1.84.0 age confidence
rules_go bazel_dep minor 0.63.0 → 0.64.2 age confidence

Release Notes

bazelbuild/bazel (bazel)

v9.3.0

Compare Source


Release Notes:
golang/go (go)

v1.27.2

grpc/grpc-go (google.golang.org/grpc)

v1.84.0: Release 1.84.0

Compare Source

Behavior Changes
  • stats/otel: The grpc.lb.pick_first.* metrics have been removed and replaced with grpc.subchannel.* metrics. See gRFC A94 for more details. (#​9215)
New Features
  • xds: Add support for contains_match in route header matchers. (#​9223)
Bug Fixes
  • client: Fix a bug where a ClientConn could get permanently stuck in IDLE when an RPC was canceled during stream creation. Previously, such cancellations triggered stream cleanup twice, corrupting the channel's idleness state and causing subsequent RPCs to fail with deadline exceeded errors. (#​9191)
  • client: Fix a bug where non-gRPC HTTP responses ending with an empty DATA frame failed the RPC with status code Internal instead of preserving the HTTP-mapped status code and response body. (#​9217)
  • credentials: Validate metadata returned by per-RPC credentials, failing the RPC with status code Internal if invalid keys or values are found. Previously, invalid metadata from credentials was sent to the server in outgoing HTTP/2 requests. (#​9202)
  • credentials/sts: Prevent potential token leakage by disallowing HTTP redirects during STS token exchange. Previously, 3xx redirects were followed automatically, replaying the request body containing authentication tokens to the redirect destination. (#​9299)
  • randomsubsetting: Ignore endpoints that contain no addresses. Previously, this could cause the policy to panic while computing hashes. (#​9259)
  • stats/otel: Ensure method names are populated in trace spans when metrics are disabled. Previously, running with tracing enabled and metrics disabled resulted in server trace spans lacking the RPC method name (recording only "Recv."). (#​9262)
  • transport: Return io.ErrUnexpectedEOF when EOF is encountered after partial header or message body reads. Previously, partial reads could return a plain io.EOF, failing to distinguish truncated data from a clean end of stream. (#​9204)
  • transport: Validate metadata supplied by balancers (in PickResult.Metadata) and resolver addresses, failing the RPC with status code Internal if invalid keys or values are found. Previously, invalid metadata from these sources was sent to the server in outgoing HTTP/2 requests. (#​9203)
  • xds: Fix a rare corner case that could prevent a cluster from being removed when it is no longer in use. (#​9140)
  • xds: Fix panic during route matching for routes containing header matchers with empty exact_match strings. (#​9223)
  • xds: Reject routes containing header matchers with empty prefix_match or suffix_match strings. Previously, this caused a panic during route matching. (#​9223)
  • xds: Fix EDS drop policies being applied at a much lower rate than configured due to an integer overflow. (#​9257)
  • xds: Reject EDS resources containing drop policies with unsupported denominators. Previously, such resources caused the client to panic when calculating drop rates. (#​9218)
  • xds/rbac: Reject RBAC configurations containing nested Principal or Permission rules with :scheme or grpc- prefixed header matchers. Previously, such configurations could cause DENY policies to fail open. (#​9258)
  • xds/rbac: Rewrite host header matchers to :authority in nested Principal and Permission rules. Previously, this rewrite only applied to top-level rules, causing nested host matchers to never match incoming requests and DENY policies to fail open. (#​9258)
  • xds/rbac: Reject CidrRanges with an unset prefix length. Previously, an omitted prefix_len field caused a panic during RBAC configuration parsing. (#​9250)
Performance Improvements
  • transport: Avoid a heap allocation when flushing shared write buffers. (#​9233)
  • credentials/alts: Support dynamic frame size negotiation and add the GRPC_GO_EXPERIMENTAL_ALTS_MAX_FRAME_SIZE environment variable (default 4KiB, max 512KiB) to configure the maximum ALTS record frame size. (#​9268)
grpc/grpc (grpc)

v1.84.0

This is release 1.84.0 (gimbal) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

  • [promise_based_filter] enable v2_non_owning_waker_implementation experiment. (#​43253)
  • [xDS] allow server listener address to match wildcard port. (#​43247)
  • [WRR] remove env var guard for custom backend metrics. (#​43198)
  • [subchannel] enable connection scaling service config fields. (#​43116)
  • [subchannel] add metrics as per A94. (#​43140)
  • Fix incorrect hostname suffix matching in no_proxy handling (prevents proxy bypass). (#​41915)

C#

  • [C# Grpc.Tools] Add native macOS ARM64 support via universal binaries. (#​41222)

Python

  • [Python] Fix -Werror=unused-result error triggered by Cythonized code. (#​43313)
  • [Python] Release Python 3.15 wheels publicly. (#​43259)
  • [Python][AsyncIO] Fixed reference cycles. (#​43121)
  • [Python] fix: remove ghost key in grpc.aio.Metadata.delitem when last value is deleted. (#​42974)
  • [Python] Fix the StatusCode Enums to be int. (#​43167)
  • [Python] Fixed the parenthesis placement. (#​43111)
  • [Python] Removed UsageError exception from registered method. (#​43086)
  • [Python] Added registered methods support in AsyncIO stack . (#​41796)
  • [Python] AIO Part 4 - Typehints fixes and add Pyright for aio/_channel.py. (#​42736)
  • [Python] grpc-status: Relax protobuf dependency lower bound to allow 6.x. (#​43000)
  • [Python] Observability plugin fixes. (#​42785)

Ruby

  • [Ruby] Fix: Addressed Array of strings passed as metadata. (#​42827)

v1.83.1

This is release gRPC Core 1.83.1 (garden).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

bazelbuild/rules_go (rules_go)

v0.64.2

MODULE.bazel code

bazel_dep(name = "rules_go", version = "0.64.2")

go_sdk = use_extension("@rules_go//go:extensions.bzl", "go_sdk")
go_sdk.from_file(go_mod = "//:go.mod")

WORKSPACE code

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "io_bazel_rules_go",
    sha256 = "d5c2c953bf24697b209c21f3ff4edf46fedea98514ec358b10c0e78fc35d363e",
    urls = [
        "https://github.com/bazel-contrib/rules_go/releases/download/v0.64.2/rules_go-v0.64.2.zip",
    ],
)

load("@io_bazel_rules_go//go:deps.bzl", "go_register_toolchains", "go_rules_dependencies")

go_rules_dependencies()

go_register_toolchains(version = "1.27.1")

# Create the host platform repository transitively required by rules_go.
load("@bazel_tools//tools/build_defs/repo:utils.bzl", "maybe")
load("@platforms//host:extension.bzl", "host_platform_repo")

maybe(
    host_platform_repo,
    name = "host_platform",
)

What's Changed

New Contributors

Full Changelog: bazel-contrib/rules_go@v0.64.1...v0.64.2

v0.64.1

MODULE.bazel code

bazel_dep(name = "rules_go", version = "0.64.1")

go_sdk = use_extension("@rules_go//go:extensions.bzl", "go_sdk")
go_sdk.from_file(go_mod = "//:go.mod")

WORKSPACE code

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "io_bazel_rules_go",
    sha256 = "4306d89e9541b5ce31108c2bd34c319dbfd6589a272dcbdc04dccdd89ff009d9",
    urls = [
        "https://github.com/bazel-contrib/rules_go/releases/download/v0.64.1/rules_go-v0.64.1.zip",
    ],
)

load("@io_bazel_rules_go//go:deps.bzl", "go_register_toolchains", "go_rules_dependencies")

go_rules_dependencies()

go_register_toolchains(version = "1.27.1")

# Create the host platform repository transitively required by rules_go.
load("@bazel_tools//tools/build_defs/repo:utils.bzl", "maybe")
load("@platforms//host:extension.bzl", "host_platform_repo")

maybe(
    host_platform_repo,
    name = "host_platform",
)

What's Changed

Full Changelog: bazel-contrib/rules_go@v0.64.0...v0.64.1

v0.64.0

MODULE.bazel code

bazel_dep(name = "rules_go", version = "0.64.0")

go_sdk = use_extension("@rules_go//go:extensions.bzl", "go_sdk")
go_sdk.from_file(go_mod = "//:go.mod")

WORKSPACE code

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "io_bazel_rules_go",
    sha256 = "3bf3a9d3a90a10d94e0bebbfe6eabee9fd38cdc72397a7f48fc7059290cc2453",
    urls = [
        "https://github.com/bazel-contrib/rules_go/releases/download/v0.64.0/rules_go-v0.64.0.zip",
    ],
)

load("@io_bazel_rules_go//go:deps.bzl", "go_register_toolchains", "go_rules_dependencies")

go_rules_dependencies()

go_register_toolchains(version = "1.27.1")

# Create the host platform repository transitively required by rules_go.
load("@bazel_tools//tools/build_defs/repo:utils.bzl", "maybe")
load("@platforms//host:extension.bzl", "host_platform_repo")

maybe(
    host_platform_repo,
    name = "host_platform",
)

What's Changed

New Contributors

Full Changelog: bazel-contrib/rules_go@v0.63.0...v0.64.0

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Monday through Friday (* * * * 1-5)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate-bot renovate-bot changed the title chore(all): update dependency grpc to v1.84.0 chore(all): update deps to v1.84.0 Sep 17, 2026
@forking-renovate

forking-renovate Bot commented Sep 17, 2026

Copy link
Copy Markdown

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 1 additional dependency was updated

Details:

Package Change
google.golang.org/genproto/googleapis/rpc v0.0.0-20260526163538-3dc84a4a5aaa -> v0.0.0-20260706201446-f0a921348800

@renovate-bot renovate-bot changed the title chore(all): update deps to v1.84.0 chore(all): update deps Oct 1, 2026
@renovate-bot
renovate-bot force-pushed the renovate/deps branch 3 times, most recently from 43636ea to f120811 Compare October 7, 2026 23:27
@renovate-bot
renovate-bot force-pushed the renovate/deps branch 2 times, most recently from 7637374 to 296fb21 Compare October 8, 2026 18:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@morrowc morrowc morrowc approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@renovate-bot @morrowc