Skip to content

fix(deps): update minor dependencies (main)#82

Merged
derekbit merged 1 commit intomainfrom
renovate/main-minor-dependencies
Mar 30, 2026
Merged

fix(deps): update minor dependencies (main)#82
derekbit merged 1 commit intomainfrom
renovate/main-minor-dependencies

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Feb 15, 2026 •
edited
Loading

This PR contains the following updates:

Package Type Update Change OpenSSF
go (source) toolchain minor 1.25.6 → 1.26.1 OpenSSF Scorecard
google.golang.org/grpc require minor v1.78.0 → v1.79.3 OpenSSF Scorecard

Release Notes

golang/go (go)

v1.26.1

v1.26.0

v1.25.8

v1.25.7

grpc/grpc-go (google.golang.org/grpc)

v1.79.3: Release 1.79.3

Compare Source

Security

  • server: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted "deny" rules in interceptors like grpc/authz. Any request with a non-canonical path is now immediately rejected with an Unimplemented error. (#​8981)

v1.79.2: Release 1.79.2

Compare Source

Bug Fixes

  • stats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (#​8874)

v1.79.1: Release 1.79.1

Compare Source

Bug Fixes

  • grpc: Remove the -dev suffix from the User-Agent header. (#​8902)

v1.79.0: Release 1.79.0

Compare Source

API Changes

  • mem: Add experimental API SetDefaultBufferPool to change the default buffer pool. (#​8806)
  • experimental/stats: Update MetricsRecorder to require embedding the new UnimplementedMetricsRecorder (a no-op struct) in all implementations for forward compatibility. (#​8780)

Behavior Changes

  • balancer/weightedtarget: Remove handling of Addresses and only handle Endpoints in resolver updates. (#​8841)

New Features

  • experimental/stats: Add support for asynchronous gauge metrics through the new AsyncMetricReporter and RegisterAsyncReporter APIs. (#​8780)
  • pickfirst: Add support for weighted random shuffling of endpoints, as described in gRFC A113.
    • This is enabled by default, and can be turned off using the environment variable GRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING. (#​8864)
  • xds: Implement :authority rewriting, as specified in gRFC A81. (#​8779)
  • balancer/randomsubsetting: Implement the random_subsetting LB policy, as specified in gRFC A68. (#​8650)
  • server: Include status detail headers, if available, when terminating a stream during request header processing. (#​8754)

Bug Fixes

  • credentials/tls: Fix a bug where the port was not stripped from the authority override before validation. (#​8726)
  • xds/priority: Fix a bug causing delayed failover to lower-priority clusters when a higher-priority cluster is stuck in CONNECTING state. (#​8813)
  • health: Fix a bug where health checks failed for clients using legacy compression options (WithDecompressor or RPCDecompressor). (#​8765)
  • transport: Fix an issue where the HTTP/2 server could skip header size checks when terminating a stream early. (#​8769)

Performance Improvements

  • credentials/alts: Optimize read buffer alignment to reduce copies. (#​8791)
  • mem: Optimize pooling and creation of buffer objects. (#​8784)
  • transport: Reduce slice re-allocations by reserving slice capacity. (#​8797)

Configuration

📅 Schedule: Branch creation - "after 1pm on sunday" in timezone Asia/Taipei, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
Copy link
Copy Markdown
Contributor Author

renovate Bot commented Feb 15, 2026

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 4 additional dependencies were updated

Details:

Package Change
golang.org/x/net v0.47.0 -> v0.48.0
golang.org/x/sys v0.38.0 -> v0.39.0
golang.org/x/text v0.31.0 -> v0.32.0
google.golang.org/genproto/googleapis/rpc v0.0.0-20251029180050-ab9386a59fda -> v0.0.0-20251202230838-ff82c1b0f217

@renovate renovate Bot force-pushed the renovate/main-minor-dependencies branch 3 times, most recently from f53eacf to 889d244 Compare March 6, 2026 08:47
@renovate renovate Bot force-pushed the renovate/main-minor-dependencies branch from 889d244 to 5f9a6f6 Compare March 18, 2026 01:36
@renovate renovate Bot changed the title fix(deps): update minor dependencies (main) chore(deps): update dependency go to v1.26.1 (main) Mar 19, 2026
@renovate renovate Bot force-pushed the renovate/main-minor-dependencies branch from 5f9a6f6 to 1bc4c9b Compare March 19, 2026 04:42
@renovate renovate Bot force-pushed the renovate/main-minor-dependencies branch from 1bc4c9b to ba6dac0 Compare March 27, 2026 01:06
@renovate renovate Bot changed the title chore(deps): update dependency go to v1.26.1 (main) fix(deps): update minor dependencies (main) Mar 27, 2026
@renovate renovate Bot force-pushed the renovate/main-minor-dependencies branch from ba6dac0 to 2e2e7f0 Compare March 27, 2026 13:09
@derekbit derekbit merged commit c2e9994 into main Mar 30, 2026
2 checks passed
@derekbit derekbit deleted the renovate/main-minor-dependencies branch March 30, 2026 01:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@derekbit derekbit derekbit approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@derekbit