Skip to content

build(deps): bump the google group across 2 directories with 7 updates - #7404

Merged
mohammedfirdouss merged 2 commits into
masterfrom
dependabot/go_modules/google-becaf96f1e
Sep 25, 2026
Merged

build(deps): bump the google group across 2 directories with 7 updates#7404
mohammedfirdouss merged 2 commits into
masterfrom
dependabot/go_modules/google-becaf96f1e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 22, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the google group with 7 updates in the / directory:

Package From To
cloud.google.com/go/firestore 1.22.0 1.25.0
cloud.google.com/go/profiler 0.3.1 0.6.0
cloud.google.com/go/secretmanager 1.20.0 1.21.0
cloud.google.com/go/storage 1.65.0 1.68.0
google.golang.org/api 0.287.1 0.299.0
google.golang.org/grpc 1.82.1 1.84.0
google.golang.org/protobuf 1.36.11 1.36.12
google.golang.org/grpc 1.82.1 1.84.0

Bumps the google group with 1 update in the /pkg/plugin/sdk directory: google.golang.org/grpc.

Updates cloud.google.com/go/firestore from 1.22.0 to 1.25.0

Release notes

Sourced from cloud.google.com/go/firestore's releases.

osconfig: v1.23.0

1.23.0 (2026-09-23)

Features

run: v1.23.0

1.23.0 (2026-09-23)

Features

texttospeech: v1.23.0

1.23.0 (2026-09-23)

Features

Changelog

Sourced from cloud.google.com/go/firestore's changelog.

1.25.0 (2024-02-09)

Features

  • documentai: Expose model_type in v1 processor, so that user can see the model_type after get or list processor version (2fcf55c)

1.24.0 (2024-02-06)

Features

  • documentai: Add model_type in v1beta3 processor proto (#9355) (05e9e1f)

1.23.8 (2024-01-30)

Bug Fixes

  • documentai: Enable universe domain resolution options (fd1d569)

1.23.7 (2023-12-13)

Documentation

  • documentai: Clarify Properties documentation (757c1b0)

1.23.6 (2023-11-27)

Documentation

  • documentai: Update comment for ProcessOptions.page_range (63ffff2)

1.23.5 (2023-11-01)

Bug Fixes

  • documentai: Bump google.golang.org/api to v0.149.0 (8d2ab9f)

Documentation

  • documentai: Updated comments (24e410e)

1.23.4 (2023-10-26)

... (truncated)

Commits
  • 1b34244 chore: librarian release pull request: 20260122T080909Z (#13657)
  • e31373e chore: tidy snippets (#13655)
  • 2103cc6 chore: librarian release pull request: 20260121T212954Z (#13654)
  • 8ddeca5 chore: librarian generate pull request: 20260121T080645Z (#13650)
  • a80159a chore(all): update deps (major) (#13644)
  • e6111d4 chore: disable major version upgrade of pubsub (#13648)
  • 8e33ea0 chore(all): update opentelemetry-go monorepo to v1.39.0 (#13643)
  • 3876978 fix(auth): add InternalOptions.TelemetryAttributes for internal client use (#...
  • 736b758 chore: update spanner test module (#13639)
  • 4fecc87 chore(all): update module golang.org/x/crypto to v0.45.0 [SECURITY] (#13640)
  • Additional commits viewable in compare view

Updates cloud.google.com/go/profiler from 0.3.1 to 0.6.0

Release notes

Sourced from cloud.google.com/go/profiler's releases.

grafeas: v0.6.0

0.6.0 (2026-09-23)

Features

Changelog

Sourced from cloud.google.com/go/profiler's changelog.

v0.6.0

  • Beta release of BigQuery, DataStore, Logging and Storage. See the blog post.

  • bigquery:

    • struct support. Read a row directly into a struct with RowIterator.Next, and upload a row directly from a struct with Uploader.Put. You can also use field tags. See the [package documentation][cloud-bigquery-ref] for details.

    • The ValueList type was removed. It is no longer necessary. Instead of

    var v ValueList
... it.Next(&v) ..

    use

    var v []Value
... it.Next(&v) ...

    • Previously, repeatedly calling RowIterator.Next on the same []Value or ValueList would append to the slice. Now each call resets the size to zero first.

    • Schema inference will infer the SQL type BYTES for a struct field of type []byte. Previously it inferred STRING.

    • The types uint, uint64 and uintptr are no longer supported in schema inference. BigQuery's integer type is INT64, and those types may hold values that are not correctly represented in a 64-bit signed integer.

v0.5.0

  • bigquery:
    • The SQL types DATE, TIME and DATETIME are now supported. They correspond to the Date, Time and DateTime types in the new cloud.google.com/go/civil package.
    • Support for query parameters.
    • Support deleting a dataset.
    • Values from INTEGER columns will now be returned as int64, not int. This will avoid errors arising from large values on 32-bit systems.
  • datastore:
    • Nested Go structs encoded as Entity values, instead of a flattened list of the embedded struct's fields. This means that you may now have twice-nested slices, eg. 
      type State struct {
  Cities  []struct{
    Populations []int

... (truncated)

Commits
  • c116c79 bigquery: cache schema inference
  • dd37f36 bigquery: check for recursive types during schema inference
  • 0c87a68 bigquery,logging,storage,datastore: mention beta status in doc comment
  • 1e032f3 datastore: implement structCodec using internal/fields
  • ee72afc README: change "experimental" to "alpha"
  • 9d965e6 README: update status of select clients
  • 3d66f77 fields: factor out fast cache to separate package.
  • e80926d bigquery: support uploading structs directly
  • 5bfd313 internal/fields: adds func for validating struct
  • c9f70e2 bigquery: support struct field tags
  • Additional commits viewable in compare view

Updates cloud.google.com/go/secretmanager from 1.20.0 to 1.21.0

Release notes

Sourced from cloud.google.com/go/secretmanager's releases.

metastore: v1.21.0

1.21.0 (2026-09-23)

Features

orgpolicy: v1.21.0

1.21.0 (2026-09-23)

Features

workflows: v1.21.0

1.21.0 (2026-09-23)

Features

Changelog

Sourced from cloud.google.com/go/secretmanager's changelog.

1.21.0 (2023-07-18)

Features

  • documentai: Removed id field from Document message (4a5651c)
Commits

Updates cloud.google.com/go/storage from 1.65.0 to 1.68.0

Commits
  • cec012d chore: release main (#20507)
  • 78076a8 chore(main): release spanner 1.95.1 (#20501)
  • e8737c3 chore(main): release bigtable 1.57.0 (#20485)
  • 015b73c test(bigtable): fakeStream.Recv observes ctx.Done to fix pool-Close deadlock ...
  • 2bfdb5d fix(bigtable): keep single-key ReadRows on the streaming classic path (#20506)
  • 95479e9 feat: update API sources and regenerate (#20502)
  • 1c940ce chore(deps): bump google.golang.org/grpc from 1.83.0 to 1.83.2 in /ftp (#20492)
  • 93af903 chore(deps): bump google.golang.org/grpc from 1.83.1 to 1.83.2 in /support (#...
  • fd29470 chore(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.2 in /webrisk (#...
  • 70b9796 chore(deps): bump google.golang.org/grpc from 1.83.1 to 1.83.2 in /trace (#20...
  • Additional commits viewable in compare view

Updates google.golang.org/api from 0.287.1 to 0.299.0

Release notes

Sourced from google.golang.org/api's releases.

v0.299.0

0.299.0 (2026-09-21)

Features

v0.298.0

0.298.0 (2026-09-14)

Features

v0.297.0

0.297.0 (2026-09-01)

Features

  • Move to go1.26.0 as the lowest supported go version (#3724) (7770e01)

v0.296.0

0.296.0 (2026-08-31)

Features

v0.295.0

0.295.0 (2026-08-28)

Features

v0.294.0

0.294.0 (2026-08-26)

... (truncated)

Changelog

Sourced from google.golang.org/api's changelog.

0.299.0 (2026-09-21)

Features

0.298.0 (2026-09-14)

Features

0.297.0 (2026-09-01)

Features

  • Move to go1.26.0 as the lowest supported go version (#3724) (7770e01)

0.296.0 (2026-08-31)

Features

0.295.0 (2026-08-28)

Features

0.294.0 (2026-08-26)

Features

... (truncated)

Commits

Updates google.golang.org/grpc from 1.82.1 to 1.84.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.84.0

Behavior Changes

  • stats/otel: The grpc.lb.pick_first.* metrics have been removed and replaced with grpc.subchannel.* metrics. See gRFC A94 for more details. (#9215)

New Features

  • xds: Add support for contains_match in route header matchers. (#9223)

Bug Fixes

  • client: Fix a bug where a ClientConn could get permanently stuck in IDLE when an RPC was canceled during stream creation. Previously, such cancellations triggered stream cleanup twice, corrupting the channel's idleness state and causing subsequent RPCs to fail with deadline exceeded errors. (#9191)
  • client: Fix a bug where non-gRPC HTTP responses ending with an empty DATA frame failed the RPC with status code Internal instead of preserving the HTTP-mapped status code and response body. (#9217)
  • credentials: Validate metadata returned by per-RPC credentials, failing the RPC with status code Internal if invalid keys or values are found. Previously, invalid metadata from credentials was sent to the server in outgoing HTTP/2 requests. (#9202)
  • credentials/sts: Prevent potential token leakage by disallowing HTTP redirects during STS token exchange. Previously, 3xx redirects were followed automatically, replaying the request body containing authentication tokens to the redirect destination. (#9299)
  • randomsubsetting: Ignore endpoints that contain no addresses. Previously, this could cause the policy to panic while computing hashes. (#9259)
  • stats/otel: Ensure method names are populated in trace spans when metrics are disabled. Previously, running with tracing enabled and metrics disabled resulted in server trace spans lacking the RPC method name (recording only "Recv."). (#9262)
  • transport: Return io.ErrUnexpectedEOF when EOF is encountered after partial header or message body reads. Previously, partial reads could return a plain io.EOF, failing to distinguish truncated data from a clean end of stream. (#9204)
  • transport: Validate metadata supplied by balancers (in PickResult.Metadata) and resolver addresses, failing the RPC with status code Internal if invalid keys or values are found. Previously, invalid metadata from these sources was sent to the server in outgoing HTTP/2 requests. (#9203)
  • xds: Fix a rare corner case that could prevent a cluster from being removed when it is no longer in use. (#9140)
  • xds: Fix panic during route matching for routes containing header matchers with empty exact_match strings. (#9223)
  • xds: Reject routes containing header matchers with empty prefix_match or suffix_match strings. Previously, this caused a panic during route matching. (#9223)
  • xds: Fix EDS drop policies being applied at a much lower rate than configured due to an integer overflow. (#9257)
  • xds: Reject EDS resources containing drop policies with unsupported denominators. Previously, such resources caused the client to panic when calculating drop rates. (#9218)
  • xds/rbac: Reject RBAC configurations containing nested Principal or Permission rules with :scheme or grpc- prefixed header matchers. Previously, such configurations could cause DENY policies to fail open. (#9258)
  • xds/rbac: Rewrite host header matchers to :authority in nested Principal and Permission rules. Previously, this rewrite only applied to top-level rules, causing nested host matchers to never match incoming requests and DENY policies to fail open. (#9258)
  • xds/rbac: Reject CidrRanges with an unset prefix length. Previously, an omitted prefix_len field caused a panic during RBAC configuration parsing. (#9250)

Performance Improvements

  • transport: Avoid a heap allocation when flushing shared write buffers. (#9233)
  • credentials/alts: Support dynamic frame size negotiation and add the GRPC_GO_EXPERIMENTAL_ALTS_MAX_FRAME_SIZE environment variable (default 4KiB, max 512KiB) to configure the maximum ALTS record frame size. (#9268)

Release 1.83.2

... (truncated)

Commits

Updates google.golang.org/protobuf from 1.36.11 to 1.36.12

Updates google.golang.org/grpc from 1.82.1 to 1.84.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.84.0

Behavior Changes

  • stats/otel: The grpc.lb.pick_first.* metrics have been removed and replaced with grpc.subchannel.* metrics. See gRFC A94 for more details. (#9215)

New Features

  • xds: Add support for contains_match in route header matchers. (#9223)

Bug Fixes

  • client: Fix a bug where a ClientConn could get permanently stuck in IDLE when an RPC was canceled during stream creation. Previously, such cancellations triggered stream cleanup twice, corrupting the channel's idleness state and causing subsequent RPCs to fail with deadline exceeded errors. (#9191)
  • client: Fix a bug where non-gRPC HTTP responses ending with an empty DATA frame failed the RPC with status code Internal instead of preserving the HTTP-mapped status code and response body. (#9217)
  • credentials: Validate metadata returned by per-RPC credentials, failing the RPC with status code Internal if invalid keys or values are found. Previously, invalid metadata from credentials was sent to the server in outgoing HTTP/2 requests. (#9202)
  • credentials/sts: Prevent potential token leakage by disallowing HTTP redirects during STS token exchange. Previously, 3xx redirects were followed automatically, replaying the request body containing authentication tokens to the redirect destination. (#9299)
  • randomsubsetting: Ignore endpoints that contain no addresses. Previously, this could cause the policy to panic while computing hashes. (#9259)
  • stats/otel: Ensure method names are populated in trace spans when metrics are disabled. Previously, running with tracing enabled and metrics disabled resulted in server trace spans lacking the RPC method name (recording only "Recv."). (#9262)
  • transport: Return io.ErrUnexpectedEOF when EOF is encountered after partial header or message body reads. Previously, partial reads could return a plain io.EOF, failing to distinguish truncated data from a clean end of stream. (#9204)
  • transport: Validate metadata supplied by balancers (in PickResult.Metadata) and resolver addresses, failing the RPC with status code Internal if invalid keys or values are found. Previously, invalid metadata from these sources was sent to the server in outgoing HTTP/2 requests. (#9203)
  • xds: Fix a rare corner case that could prevent a cluster from being removed when it is no longer in use. (#9140)
  • xds: Fix panic during route matching for routes containing header matchers with empty exact_match strings. (#9223)
  • xds: Reject routes containing header matchers with empty prefix_match or suffix_match strings. Previously, this caused a panic during route matching. (#9223)
  • xds: Fix EDS drop policies being applied at a much lower rate than configured due to an integer overflow. (#9257)
  • xds: Reject EDS resources containing drop policies with unsupported denominators. Previously, such resources caused the client to panic when calculating drop rates. (#9218)
  • xds/rbac: Reject RBAC configurations containing nested Principal or Permission rules with :scheme or grpc- prefixed header matchers. Previously, such configurations could cause DENY policies to fail open. (#9258)
  • xds/rbac: Rewrite host header matchers to :authority in nested Principal and Permission rules. Previously, this rewrite only applied to top-level rules, causing nested host matchers to never match incoming requests and DENY policies to fail open. (#9258)
  • xds/rbac: Reject CidrRanges with an unset prefix length. Previously, an omitted prefix_len field caused a panic during RBAC configuration parsing. (#9250)

Performance Improvements

  • transport: Avoid a heap allocation when flushing shared write buffers. (#9233)
  • credentials/alts: Support dynamic frame size negotiation and add the GRPC_GO_EXPERIMENTAL_ALTS_MAX_FRAME_SIZE environment variable (default 4KiB, max 512KiB) to configure the maximum ALTS record frame size. (#9268)

Release 1.83.2

... (truncated)

Commits

Updates google.golang.org/grpc from 1.83.1 to 1.84.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.84.0

Behavior Changes

  • stats/otel: The grpc.lb.pick_first.* metrics have been removed and replaced with grpc.subchannel.* metrics. See gRFC A94 for more details. (#9215)

New Features

  • xds: Add support for contains_match in route header matchers. (#9223)

Bug Fixes

  • client: Fix a bug where a ClientConn could get permanently stuck in IDLE when an RPC was canceled during stream creation. Previously, such cancellations triggered stream cleanup twice, corrupting the channel's idleness state and causing subsequent RPCs to fail with deadline exceeded errors. (#9191)
  • client: Fix a bug where non-gRPC HTTP responses ending with an empty DATA frame failed the RPC with status code Internal instead of preserving the HTTP-mapped status code and response body. (#9217)
  • credentials: Validate metadata returned by per-RPC credentials, failing the RPC with status code Internal if invalid keys or values are found. Previously, invalid metadata from credentials was sent to the server in outgoing HTTP/2 requests. (#9202)
  • credentials/sts: Prevent potential token leakage by disallowing HTTP redirects during STS token exchange. Previously, 3xx redirects were followed automatically, replaying the request body containing authentication tokens to the redirect destination. (#9299)
  • randomsubsetting: Ignore endpoints that contain no addresses. Previously, this could cause the policy to panic while computing hashes. (#9259)
  • stats/otel: Ensure method names are populated in trace spans when metrics are disabled. Previously, running with tracing enabled and metrics disabled resulted in server trace spans lacking the RPC method name (recording only "Recv."). (#9262)
  • transport: Return io.ErrUnexpectedEOF when EOF is encountered after partial header or message body reads. Previously, partial reads could return a plain io.EOF, failing to distinguish truncated data from a clean end of stream. (#9204)
  • transport: Validate metadata supplied by balancers (in PickResult.Metadata) and resolver addresses, failing the RPC with status code Internal if invalid keys or values are found. Previously, invalid metadata from these sources was sent to the server in outgoing HTTP/2 requests. (#9203)
  • xds: Fix a rare corner case that could prevent a cluster from being removed when it is no longer in use. (#9140)
  • xds: Fix panic during route matching for routes containing header matchers with empty exact_match strings. (#9223)
  • xds: Reject routes containing header matchers with empty prefix_match or suffix_match strings. Previously, this caused a panic during route matching. (#9223)
  • xds: Fix EDS drop policies being applied at a much lower rate than configured due to an integer overflow. (#9257)
  • xds: Reject EDS resources containing drop policies with unsupported denominators. Previously, such resources caused the client to panic when calculating drop rates. (#9218)
  • xds/rbac: Reject RBAC configurations containing nested Principal or Permission rules with :scheme or grpc- prefixed header matchers. Previously, such configurations could cause DENY policies to fail open. (#9258)
  • xds/rbac: Rewrite host header matchers to :authority in nested Principal and Permission rules. Previously, this rewrite only applied to top-level rules, causing nested host matchers to never match incoming requests and DENY policies to fail open. (#9258)
  • xds/rbac: Reject CidrRanges with an unset prefix length. Previously, an omitted prefix_len field caused a panic during RBAC configuration parsing. (#9250)

Performance Improvements

  • transport: Avoid a heap allocation when flushing shared write buffers. (#9233)
  • credentials/alts: Support dynamic frame size negotiation and add the GRPC_GO_EXPERIMENTAL_ALTS_MAX_FRAME_SIZE environment variable (default 4KiB, max 512KiB) to configure the maximum ALTS record frame size. (#9268)

Release 1.83.2

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 22, 2026
Copilot AI lite review requested due to automatic review settings September 22, 2026 13:40
@dependabot
dependabot Bot requested review from a team as code owners September 22, 2026 13:40
@dependabot dependabot Bot mentioned this pull request Sep 22, 2026
Closed
@netlify

netlify Bot commented Sep 22, 2026 •
edited
Loading

Copy link
Copy Markdown

✅ Deploy Preview for pipecd-site canceled.

Name Link
🔨 Latest commit 3c65b09
🔍 Latest deploy log https://app.netlify.com/projects/pipecd-site/deploys/6ab649301dd7e800086635b2

Copilot AI reviewed Sep 22, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot review overview

🟢 Approval recommended

No unresolved review comments remain.

Review effort: Lite
Findings: None

What changed in this PR

This pull request updates Google Cloud, gRPC, protobuf, and related dependencies across the main module, SDK, tools, and plugins.

Changes:

  • Bumps direct and transitive dependency versions.
  • Refreshes Go module checksums.
  • Synchronizes plugin dependency metadata.
File Description
tool/​actions-plan-preview/​go.sum Refreshes dependency checksums.
tool/​actions-plan-preview/​go.mod Updates protobuf dependencies.
pkg/​plugin/​sdk/​go.sum Refreshes SDK checksums.
pkg/​plugin/​sdk/​go.mod Updates SDK dependencies.
pkg/​app/​pipedv1/​plugin/​waitapproval/​go.mod Updates plugin dependencies.
pkg/​app/​pipedv1/​plugin/​wait/​go.mod Updates plugin dependencies.
pkg/​app/​pipedv1/​plugin/​terraform/​go.sum Refreshes plugin checksums.
pkg/​app/​pipedv1/​plugin/​terraform/​go.mod Updates plugin dependencies.
pkg/​app/​pipedv1/​plugin/​scriptrun/​go.mod Updates plugin dependencies.
pkg/​app/​pipedv1/​plugin/​kubernetes/​go.sum Refreshes plugin checksums.
pkg/​app/​pipedv1/​plugin/​kubernetes/​go.mod Updates plugin dependencies.
pkg/​app/​pipedv1/​plugin/​kubernetes_multicluster/​go.sum Refreshes plugin checksums.
pkg/​app/​pipedv1/​plugin/​kubernetes_multicluster/​go.mod Updates plugin dependencies.
pkg/​app/​pipedv1/​plugin/​ecs/​go.mod Updates plugin dependencies.
pkg/​app/​pipedv1/​plugin/​cloudrun/​go.mod Updates plugin dependencies.
pkg/​app/​pipedv1/​plugin/​analysis/​go.sum Refreshes plugin checksums.
pkg/​app/​pipedv1/​plugin/​analysis/​go.mod Updates plugin dependencies.
go.mod Updates root Google dependencies.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

@dependabot
dependabot Bot force-pushed the dependabot/go_modules/google-becaf96f1e branch 2 times, most recently from ca3768e to 32f8f6e Compare September 24, 2026 07:04
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/google-becaf96f1e branch from 32f8f6e to fc1ee94 Compare September 24, 2026 09:07
@mohammedfirdouss
mohammedfirdouss enabled auto-merge (squash) September 24, 2026 09:35
@codecov

codecov Bot commented Sep 24, 2026 •
edited
Loading

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 30.36%. Comparing base (46dccc8) to head (3c65b09).
⚠️ Report is 2 commits behind head on master.

Additional details and impacted files 
@@           Coverage Diff           @@
##           master    #7404   +/-   ##
=======================================
  Coverage   30.35%   30.36%           
=======================================
  Files         601      601           
  Lines       52622    52622           
=======================================
+ Hits        15975    15980    +5     
+ Misses      35128    35123    -5     
  Partials     1519     1519
Flag Coverage Δ
. 24.34% <ø> (+0.01%) ⬆️
.-pkg-app-pipedv1-plugin-analysis 29.19% <ø> (ø)
.-pkg-app-pipedv1-plugin-ecs 33.75% <ø> (ø)
.-pkg-app-pipedv1-plugin-kubernetes 59.85% <ø> (ø)
.-pkg-app-pipedv1-plugin-kubernetes_multicluster 60.48% <ø> (ø)
.-pkg-app-pipedv1-plugin-scriptrun 58.22% <ø> (ø)
.-pkg-app-pipedv1-plugin-terraform 39.88% <ø> (ø)
.-pkg-app-pipedv1-plugin-wait 32.22% <ø> (ø)
.-pkg-app-pipedv1-plugin-waitapproval 55.14% <ø> (ø)
.-pkg-plugin-sdk 52.07% <ø> (ø)
.-tool-actions-gh-release 19.94% <ø> (ø)
.-tool-actions-plan-preview 28.04% <ø> (ø)
.-tool-codegen-protoc-gen-auth 0.00% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@khanhtc1202 khanhtc1202 mentioned this pull request Sep 25, 2026
Closed
@khanhtc1202

khanhtc1202 commented Sep 25, 2026

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Sep 25, 2026

Copy link
Copy Markdown
Contributor Author

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@khanhtc1202

khanhtc1202 commented Sep 25, 2026

Copy link
Copy Markdown
Member

@dependabot recreate

@dependabot
build(deps): bump the google group across 2 directories with 7 updates
1d6db32 
Bumps the google group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [cloud.google.com/go/firestore](https://github.com/googleapis/google-cloud-go) | `1.22.0` | `1.25.0` |
| [cloud.google.com/go/profiler](https://github.com/googleapis/google-cloud-go) | `0.3.1` | `0.6.0` |
| [cloud.google.com/go/secretmanager](https://github.com/googleapis/google-cloud-go) | `1.20.0` | `1.21.0` |
| [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) | `1.65.0` | `1.68.0` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.287.1` | `0.299.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.82.1` | `1.84.0` |
| google.golang.org/protobuf | `1.36.11` | `1.36.12` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.82.1` | `1.84.0` |

Bumps the google group with 1 update in the /pkg/plugin/sdk directory: [google.golang.org/grpc](https://github.com/grpc/grpc-go).


Updates `cloud.google.com/go/firestore` from 1.22.0 to 1.25.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md)
- [Commits](googleapis/google-cloud-go@run/v1.22.0...kms/v1.25.0)

Updates `cloud.google.com/go/profiler` from 0.3.1 to 0.6.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@ai/v0.3.1...v0.6.0)

Updates `cloud.google.com/go/secretmanager` from 1.20.0 to 1.21.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md)
- [Commits](googleapis/google-cloud-go@kms/v1.20.0...kms/v1.21.0)

Updates `cloud.google.com/go/storage` from 1.65.0 to 1.68.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@compute/v1.65.0...compute/v1.68.0)

Updates `google.golang.org/api` from 0.287.1 to 0.299.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.287.1...v0.299.0)

Updates `google.golang.org/grpc` from 1.82.1 to 1.84.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.82.1...v1.84.0)

Updates `google.golang.org/protobuf` from 1.36.11 to 1.36.12

Updates `google.golang.org/grpc` from 1.82.1 to 1.84.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.82.1...v1.84.0)

Updates `google.golang.org/grpc` from 1.83.1 to 1.84.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.82.1...v1.84.0)

Updates `google.golang.org/grpc` from 1.83.1 to 1.84.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.82.1...v1.84.0)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/firestore
  dependency-version: 1.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: google
- dependency-name: cloud.google.com/go/profiler
  dependency-version: 0.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: google
- dependency-name: cloud.google.com/go/secretmanager
  dependency-version: 1.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: google
- dependency-name: cloud.google.com/go/storage
  dependency-version: 1.68.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: google
- dependency-name: google.golang.org/api
  dependency-version: 0.298.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: google
- dependency-name: google.golang.org/grpc
  dependency-version: 1.83.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: google
- dependency-name: google.golang.org/grpc
  dependency-version: 1.83.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: google
- dependency-name: google.golang.org/grpc
  dependency-version: 1.84.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: google
- dependency-name: google.golang.org/grpc
  dependency-version: 1.84.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: google
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: google
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/google-becaf96f1e branch from 2daf7c2 to 1d6db32 Compare September 25, 2026 09:19
@khanhtc1202
Update expected grpc version in rpc test to 1.84.0
3c65b09 
Signed-off-by: khanhtc1202 <khanhtc1202@gmail.com>
@mohammedfirdouss
mohammedfirdouss merged commit a073be6 into master Sep 25, 2026
79 checks passed
@mohammedfirdouss
mohammedfirdouss deleted the dependabot/go_modules/google-becaf96f1e branch September 25, 2026 10:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot
Copilot review effort, defaults to Lite
Applies to this pull request for everyone.Learn more about Copilot code review.
Copilot left review comments
@khanhtc1202 khanhtc1202 khanhtc1202 approved these changes
@mohammedfirdouss mohammedfirdouss mohammedfirdouss left review comments
@ffjlabo ffjlabo Awaiting requested review from ffjlabo ffjlabo is a code owner automatically assigned from pipe-cd/pipecd-approvers
@t-kikuc t-kikuc Awaiting requested review from t-kikuc t-kikuc is a code owner automatically assigned from pipe-cd/pipecd-approvers
@armistcxy armistcxy Awaiting requested review from armistcxy armistcxy is a code owner automatically assigned from pipe-cd/pipecd-approvers

Assignees

No one assigned

Labels

area/go area/pipedv1 area/plugin-sdk piped-plugin-sdk area/tool dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@khanhtc1202 @mohammedfirdouss