chore(deps): bump the gomod-minor-patch group with 4 updates

[dependabot]

Bumps the gomod-minor-patch group with 4 updates: github.com/google/go-containerregistry, github.com/grpc-ecosystem/grpc-gateway/v2, google.golang.org/genproto/googleapis/api and google.golang.org/genproto/googleapis/rpc.

Updates github.com/google/go-containerregistry from 0.21.8 to 0.21.9

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.21.9

What's Changed

• actions: pin slsa generator by version by @​Subserial in google/go-containerregistry#2395
• fix: prevent data race on scope refreshes within remote.writer by @​Subserial in google/go-containerregistry#2396
• fix: remove '.' from unsafe path prefixes by @​Subserial in google/go-containerregistry#2400
• build(deps): bump the actions group with 3 updates by @​dependabot[bot] in google/go-containerregistry#2398

Full Changelog: google/go-containerregistry@v0.21.8...v0.21.9

Commits

• 7b32099 build(deps): bump the actions group with 3 updates (#2398)
• 2a4447d fix: remove '.' from unsafe path prefixes (#2400)
• 43cc3e8 fix: prevent data race on scope refreshes within remote.writer (#2396)
• 7775aab actions: pin slsa generator version following linter exception (#2395)
• See full diff in compare view

Updates github.com/grpc-ecosystem/grpc-gateway/v2 from 2.29.0 to 2.30.0

Release notes

Sourced from github.com/grpc-ecosystem/grpc-gateway/v2's releases.

v2.30.0

New Features

• protoc-gen-openapiv3: Brand new minimal OpenAPI v3 generator (#6623), plus follow-ups:
  • Visibility selectors (#6673)
  • disable_default_errors option (#6672)
  • Annotation support (#6681)
  • Improved plugin error surfacing (#6937)
  • field_behavior REQUIRED support for query parameters (#7180) — @​maydietwice
• openapiv3-merge: New standalone tool for merging OpenAPI v3 documents (#6771) — @​johanbrandhorst
• protoc-gen-openapiv2 moved to the protoc toolchain (#6988) — @​EliSauder

Fixes

Change	PR	Contributor
OpenAPI v2: messages sorted before rendering definitions for determinism	#6732	@​alliasgher
OpenAPI v2: enum comments now go to description instead of title	#6785	@​superShen0916
OpenAPI v2: include field schema metadata on parameters	#6894	@​puneetdixit200
OpenAPI v2: omit empty body objects for nested path parameters	#7065	@​alliasgher
OpenAPI v3: omit empty body objects for nested path parameters	#7068	@​alliasgher
OpenAPI v2: preserve x-nullable when use_allof_for_refs wraps a $ref	#7026	@​pkhanaljc
OpenAPI v2: fix path joining for colon-prefixed segments	#7191	@​Ritik100-AIT
Prioritize OpenAPI config options over proto options	#6973	@​maskedmaxx
Support Service doc comments for OpenAPI/Swagger generation	#6200	@​majiayu000
Fix nested body path initialization for oneof fields	#6948	@​cyphercodes
Remove redundant enum assignment for nested proto3 fields	#7059	@​abhishek-dalbanjan
Drain request only after ParseForm in generated code	#7192	@​paskozdilar
Support field extensions with use_allof_for_refs	#3100	@​same-id
Ignore M import-path mappings in openapiv3 plugin params	#6936	@​johanbrandhorst

Documentation

• Clarify HttpBody download usage (#6904) — @​ketpatil77
• Clarify Go tool dependency options (#7042) — @​hawk-roy
• Add a runnable OpenTelemetry tracing example (#7110) — @​hsdfat
• Fix SLSA link in README (#7149) — @​ZayanKhan-12
• Explain Buf strategy for shared API config (#7147) — @​dlanov

Tests / CI / Infra

• Add test coverage for slice converters in convert.go (#7041) — @​viniciusmtsantos
• Remove Java swagger generator test dependency (#6735) — @​johanbrandhorst
• CI improvements — go-version-file usage, release workflow tag input, checkout ref fixes, node_test timeouts, Node 22 LTS for browser tests (avoids a Node 24 zlib hang) (#6627, #6632, #6633, #6867, #6868) — @​johanbrandhorst
• Better Bazel caching; auto-merge job for dependabot PRs (#6667, #6668) — @​johanbrandhorst
• Run gazelle on openapiv3 files; add missing Bazel files (#6734, #6738) — @​johanbrandhorst

New Contributors

@​alliasgher, @​superShen0916, @​puneetdixit200, @​ketpatil77, @​EliSauder, @​maskedmaxx, @​hawk-roy, @​viniciusmtsantos, @​cyphercodes, @​abhishek-dalbanjan, @​hsdfat, @​ZayanKhan-12, @​dlanov, @​maydietwice, @​pkhanaljc, @​Ritik100-AIT

---

... (truncated)

Commits

• 1debdea Fix openapiv2 path joining for colon-prefixed segments (#7191)
• 561f393 Drain request only after ParseForm in generated code (#7192)
• a16cad8 fix(openapiv2): preserve x-nullable when use_allof_for_refs wraps $ref (#7026)
• 544d99d openapiv3: support field_behavior REQUIRED for query parameters (#7180)
• 89a9e41 chore(deps): update google/oss-fuzz digest to 3ea2a9b (#7195)
• 42ced5f fix(deps): update opentelemetry-go-contrib monorepo to v0.70.0 (#7194)
• c63e364 chore(deps): update googleapis digest to 5739471 (#7193)
• 873f41a chore(deps): update google/oss-fuzz digest to 8d292af (#7190)
• f56f8ad chore(deps): update googleapis digest to f3ff3a1 (#7189)
• 3087cc7 build(deps-dev): bump fast-uri in /examples/internal/browser (#7187)
• Additional commits viewable in compare view

Updates google.golang.org/genproto/googleapis/api from 0.0.0-20260727163830-6c54dddc4772 to 0.0.0-20260803160001-6ac0973c030d

Commits

• See full diff in compare view

Updates google.golang.org/genproto/googleapis/rpc from 0.0.0-20260720155508-bb71a54f79dc to 0.0.0-20260803160001-6ac0973c030d

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions