Skip to content

fix(deps): update module google.golang.org/protobuf to v1.36.12 - #577

Open
red-hat-konflux[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main/google.golang.org-protobuf-1.x
Open

fix(deps): update module google.golang.org/protobuf to v1.36.12#577
red-hat-konflux[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main/google.golang.org-protobuf-1.x

Conversation

@red-hat-konflux

@red-hat-konflux red-hat-konflux Bot commented Aug 15, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
google.golang.org/protobuf v1.36.11v1.36.12 age confidence

Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Release Notes

protocolbuffers/protobuf-go (google.golang.org/protobuf)

v1.36.12

Compare Source

Full Changelog: protocolbuffers/protobuf-go@v1.36.11...v1.36.12

User-visible changes:
CL/812620: defval: support hex and octal default values for numeric fields
CL/737480: reflect/protodesc: add missing IsProto3Optional initialization
CL/735401: internal/descfmt: replace uses of MethodByName with direct calls when possible
CL/735120: encoding/protojson: fix google.protobuf.Empty serialization
CL/734761: encoding/prototext: implement recursion limit
CL/734760: encoding/protodelim: error out when size exceeds math.MaxInt
CL/734280: internal/descfmt: fix dce with Go 1.26 by not calling MethodByName for Methods
CL/733841: encoding/protojson: reject non-numeric ints/floats
CL/729461: compiler/protogen: introduce and expose feature resoluton to protogen

Maintenance:
CL/810580: types: update to the protobuf version (35.1)
CL/735620: types: regenerate using latest protobuf v33.3 release
CL/737460: compiler/protogen: document --go_opt in addition to --go_out


Configuration

📅 Schedule: (in timezone America/New_York)

  • Branch creation
    • "every weekend"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux red-hat-konflux Bot added the ok-to-test Indicates a non-member PR verified by an org member that is safe to test. label Aug 15, 2026
@coderabbitai

coderabbitai Bot commented Aug 15, 2026

Copy link
Copy Markdown

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Repository: openshift-online/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: b29cba37-7f19-424a-83d9-49a393a73f53

📥 Commits

Reviewing files that changed from the base of the PR and between ab480c6 and 598bf33.

⛔ Files ignored due to path filters (1)
  • go.sum is excluded by !**/*.sum
📒 Files selected for processing (1)
  • go.mod

Walkthrough

The pull request updates the direct google.golang.org/protobuf dependency from v1.36.11 to v1.36.12.

Changes

Protobuf dependency update

Layer / File(s) Summary
Update protobuf dependency
go.mod
The direct google.golang.org/protobuf dependency changes to v1.36.12.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to 598bf

This PR updates protobuf from v1.36.11 to v1.36.12, including fixes to serialization, defaults, descriptors, and limit handling. No concrete compatibility, security, or readiness issue is identified, so no actionable merge-blocking risk remains after normal checks and review.

Suggested reviewers: jnpacker

🚥 Pre-merge checks | ✅ 11
✅ Passed checks (11 passed)
Check name Status Explanation
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
No-Weak-Crypto ✅ Passed The diff changes only protobuf version and checksums. No weak crypto or custom crypto code is added; protobuf SHA-1 is in the unchanged generate-corpus tool, identical in v1.36.11.
Container-Privileges ✅ Passed The parent-to-HEAD diff changes only go.mod and go.sum for protobuf v1.36.12; no container or Kubernetes manifest changes introduce the listed privilege settings.
No-Sensitive-Data-In-Logs ✅ Passed HEAD^..HEAD changes only the protobuf version and go.sum hashes; no application source or logging statements were added, so no sensitive-data logging condition was introduced.
No-Hardcoded-Secrets ✅ Passed The diff only updates the protobuf version and two go.sum checksums; no API keys, credentials, private keys, embedded-credential URLs, or secret-named literals were added.
No-Injection-Vectors ✅ Passed The diff only updates protobuf versions and checksums in go.mod/go.sum; it adds no SQL, shell, eval/exec, pickle, YAML, or HTML injection code.
Ai-Attribution ✅ Passed The authored PR text and HEAD commit do not mention an AI tool; HEAD has only a Red Hat bot Signed-off-by trailer and no AI Co-Authored-By, Assisted-by, or Generated-by trailer.
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly and concisely describes the dependency update from google.golang.org/protobuf to v1.36.12.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch konflux/mintmaker/main/google.golang.org-protobuf-1.x

Comment @coderabbitai help to get the list of available commands.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ok-to-test Indicates a non-member PR verified by an org member that is safe to test.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants