Skip to content

fix(deps): update all non-major dependencies#202

Open
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/all-minor-patch
Open

fix(deps): update all non-major dependencies#202
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Apr 30, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence Type Update
@grpc/grpc-js (source) ^1.14.3 → ^1.14.4 age confidence dependencies patch
Google.Protobuf 3.34.0 → 3.35.1 age confidence nuget minor
Grpc.Net.Common 2.76.0 → 2.80.0 age confidence nuget minor
buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go v1.36.11-20260209202127-80ab13bee0bf.1 → v1.36.11-20260415201107-50325440f8f2.1 age confidence require patch
bytes 1.11.1 → 1.12.0 age confidence dependencies minor
connectrpc.com/connect v1.19.1 → v1.20.0 age confidence require minor
dart-lang/setup-dart v1.4 → v1.7.2 age confidence action minor
google.golang.org/grpc v1.79.3 → v1.82.0 age confidence require minor
grpc 4.2.0 → 4.3.1 age confidence dependencies minor
prost 0.14.3 → 0.14.4 age confidence dependencies patch
tonic 0.14.5 → 0.14.6 age confidence dependencies patch
tonic-prost 0.14.5 → 0.14.6 age confidence dependencies patch

Release Notes

grpc/grpc-dotnet (Grpc.Net.Common)

v2.80.0

What's Changed
New Contributors

Full Changelog: grpc/grpc-dotnet@v2.76.0...v2.80.0

connectrpc/connect-go (connectrpc.com/connect)

v1.20.0

Compare Source

What's Changed

Other changes

New Contributors

Full Changelog: connectrpc/connect-go@v1.19.2...v1.20.0

v1.19.2

Compare Source

What's Changed
Governance
Bugfixes
  • Use 'deadline_exceeded' instead of 'canceled' on HTTP/2 cancelation when appropriate by @​jhump in #​904
  • Fix nil pointer deref in duplexHTTPCall under concurrent Send + CloseAndReceive by @​simonferquel in #​919
Other changes
New Contributors

Full Changelog:

dart-lang/setup-dart (dart-lang/setup-dart)

v1.7.2

Compare Source

  • Update Node.js requirement to Node 24.
  • Fix open Dependabot alerts by bumping undici to >=6.24.0.
  • Update GitHub Action dependencies (@actions/core, @actions/exec, @actions/tool-cache, @actions/http-client).
  • Update workflow actions to their latest versions (actions/checkout v6, setup-flutter).

v1.7.1

Compare Source

  • Roll undici dependency to address CVE-2025-22150.
  • Update to the latest npm dependencies.
  • Recompile the action using the new Dart / JavaScript interop.

v1.7.0

Compare Source

  • Install flutter sdk in publishing step, allowing Flutter packages to be
    published (#​68)

v1.6.5

Compare Source

  • Fix zip path handling on Windows 11 (#​118)

v1.6.4

Compare Source

  • Rebuild JS code.

v1.6.3

Compare Source

v1.6.2

Compare Source

v1.6.1

Compare Source

  • Updated the google storage url for main channel releases.

v1.6.0

Compare Source

  • Enable provisioning of the latest Dart SDK patch release by specifying just
    the major and minor version (e.g. 3.2).

v1.5.1

Compare Source

  • No longer test the setup-dart action on pre-2.12 SDKs.
  • Upgrade JS interop code to use extension types
    (the new name for inline classes).
  • The upcoming rename of the be channel to main is now supported with
    forward compatibility that switches when the rename happens.

v1.5.0

Compare Source

  • Re-wrote the implementation of the action into Dart.
  • Auto-detect the platform architecture (x64, ia32, arm, arm64).
  • Improved the caching and download resilience of the sdk.
  • Added a new action output: dart-version - the installed version of the sdk.
grpc/grpc-go (google.golang.org/grpc)

v1.82.0: Release 1.82.0

Compare Source

Behavior Changes

  • server: Remove support for GRPC_GO_EXPERIMENTAL_DISABLE_STRICT_PATH_CHECKING environment varibale. Strict incoming RPC path validation (which has been the default since v1.79.3) can no longer be disabled. (#​9112)
  • transport: Add environment variable to change the default max header list size from 16MB to 8KB. This may be enabled by setting GRPC_GO_EXPERIMENTAL_ENABLE_8KB_DEFAULT_HEADER_LIST_SIZE=true. This will be enabled by default in a subsequent release. (#​9019)
  • balancer: Load Balancing policy registry is now case-sensitive. Set GRPC_GO_EXPERIMENTAL_CASE_SENSITIVE_BALANCER_REGISTRIES=false (and file an issue) to revert to case-insensitive behavior. (#​9017)

New Features

  • experimental/stats: Expose a new API, NewContextWithLabelCallback, to register a callback that is invoked when telemetry labels are added. (#​8877)
  • client: Return a portion of the response body in the error message, when the client receives an unexpected non-gRPC HTTP response, to make debugging easier. (#​8929)
  • server: Add environment variable GRPC_GO_SERVER_GOROUTINE_LABELS that controls setting runtime/pprof.Labels on goroutines spawned by the server. Set GRPC_GO_SERVER_GOROUTINE_LABELS=grpc.method=true to add the grpc.method label on goroutines spawned to handle incoming requests. (#​9082)

Bug Fixes

  • xds/server: Fix a memory leak of HTTP filter instances occurring when route configurations are updated in-place during a Route Discovery Service (RDS) update. (#​9138)
  • grpc: In the deprecated gzip Compressor (used via the deprecated WithCompressor dial option), enforce the MaxRecvMsgSize limit on the decompressed message buffer, preventing excessive memory allocation from highly compressed payloads. (#​9114)
  • stats/opentelemetry: Record retry attempts, grpc.previous-rpc-attempts, at the call level and not the attempt level. (#​8923)
  • encoding: Ensure Close() is always called on readers returned from Compressor.Decompress if possible. (#​9135)
  • channelz: Fix the LastMessageSentTimestamp and LastMessageReceivedTimestamp fields in SocketMetrics to ensure they contain correct timestamp values. (#​9109)

v1.81.1: Release 1.81.1

Compare Source

Security

  • xds/rbac: Fix a potential authorization bypass caused by incorrectly falling through URI/DNS SANs to Subject Distinguished Name (DN) when matching the authenticated principal name. With this fix, only the first non-empty identity source will be used, as per gRFC A41. (#​9111)

v1.81.0: Release 1.81.0

Compare Source

Behavior Changes

  • balancer/rls: Switch gauge metrics to asynchronous emission (once per collection cycle) to reduce telemetry noise and align with other gRPC language implementations. (#​8808)

Dependencies

  • Minimum supported Go version is now 1.25. (#​8969)

Bug Fixes

  • xds: Use the leaf cluster's security config for the TLS handshake instead of the aggregate cluster's config. (#​8956)
  • transport: Send a RST_STREAM when receiving an END_STREAM when the stream is not already half-closed. (#​8832)
  • xds: Fix ADS resource name validation to prevent a panic. (#​8970)

New Features

  • grpc/stats: Add support for custom labels in per-call metrics (gRFC A108). (#​9008)
  • xds: Add support for Server Name Indication (SNI) and SAN validation (gRFC A101). Disabled by default. To enable, set GRPC_EXPERIMENTAL_XDS_SNI=true environment variable. (#​9016)
  • xds: Add support to control which fields get propagated from ORCA backend metric reports to LRS load reports (gRFC A85). Disabled by default. To enable, set GRPC_EXPERIMENTAL_XDS_ORCA_LRS_PROPAGATION=true. (#​9005)
  • xds: Add metrics to track xDS client connectivity and cached resource state (gRFC A78). (#​8807)
  • stats/otel: Enhance grpc.subchannel.disconnections metric by adding disconnection reason to the grpc.disconnect_error label (gRFC A94). This provides granular insights into why subchannels are closing. (#​8973)
  • mem: Add mem.Buffer.Slice() API to slice the buffer like a slice. (#​8977)

Performance Improvements

  • alts: Pool read buffers to lower memory utilization when sockets are unreadable. (#​8964)
  • transport: Pool HTTP/2 framer read buffers to reduce idle memory consumption. Currently limited to Linux for ALTS and non-encrypted transports (TCP, Unix). To disable, set GRPC_GO_EXPERIMENTAL_HTTP_FRAMER_READ_BUFFER_POOLING=false and report any issues. (#​9032)

v1.80.0

Compare Source

grpc/grpc-dart (grpc)

v4.3.1

Compare Source

  • Downgrade meta dependency to 1.16.0

v4.3.0

Compare Source

  • Require package:protobuf 5.0.0

Configuration

📅 Schedule: (in timezone Asia/Singapore)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, on day 1 of the month (* 0-3 1 * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the renovate label Apr 30, 2026
@renovate

renovate Bot commented Apr 30, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 5 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.24.0 -> 1.25.0
golang.org/x/net v0.48.0 -> v0.53.0
golang.org/x/sys v0.39.0 -> v0.43.0
golang.org/x/text v0.32.0 -> v0.36.0
google.golang.org/genproto/googleapis/api v0.0.0-20251202230838-ff82c1b0f217 -> v0.0.0-20260414002931-afd174a4e478
google.golang.org/genproto/googleapis/rpc v0.0.0-20251202230838-ff82c1b0f217 -> v0.0.0-20260414002931-afd174a4e478

@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 7040af6 to abf91b0 Compare May 8, 2026 05:42
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from f12c3eb to be69cf5 Compare May 21, 2026 17:54
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch from be69cf5 to 5a1642d Compare May 22, 2026 01:12
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 1deecb1 to d644dfe Compare June 8, 2026 10:15
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from a410e33 to c6f113d Compare June 12, 2026 22:46
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch from c6f113d to e8a966b Compare June 19, 2026 11:52
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch from e8a966b to 86d2164 Compare July 2, 2026 00:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

renovate

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants