housekeeping: Update module github.com/envoyproxy/go-control-plane to v0.14.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/envoyproxy/go-control-plane	v0.12.0 -> v0.14.0

---

Release Notes

envoyproxy/go-control-plane (github.com/envoyproxy/go-control-plane)

v0.14.0

Compare Source

What's Changed

• Fix go.sum for envoy module with repo released by @​valerian-roche in #​1081
• build(deps): Bump github/codeql-action from 3.27.9 to 3.28.1 by @​dependabot[bot] in #​1087
• build(deps): Bump actions/upload-artifact from 4.4.3 to 4.6.0 by @​dependabot[bot] in #​1086
• build(deps): Bump github.com/go-git/go-git/v5 from 5.12.0 to 5.13.0 in /internal/tools by @​dependabot[bot] in #​1090
• build(deps): Bump google.golang.org/protobuf from 1.36.1 to 1.36.2 in /xdsmatcher by @​dependabot[bot] in #​1084
• build(deps): Bump google.golang.org/grpc from 1.69.2 to 1.69.4 in /examples/dyplomat by @​dependabot[bot] in #​1085
• build(deps): Bump google.golang.org/grpc from 1.67.1 to 1.69.4 by @​dependabot[bot] in #​1089
• build(deps): Bump google.golang.org/protobuf from 1.35.2 to 1.36.3 by @​dependabot[bot] in #​1091
• build(deps): Bump google.golang.org/grpc from 1.69.4 to 1.70.0 in /examples/dyplomat by @​dependabot[bot] in #​1101
• build(deps): Bump google.golang.org/protobuf from 1.36.2 to 1.36.4 in /xdsmatcher by @​dependabot[bot] in #​1100
• build(deps): Bump github/codeql-action from 3.28.1 to 3.28.6 by @​dependabot[bot] in #​1099
• build(deps): Bump actions/stale from 9.0.0 to 9.1.0 by @​dependabot[bot] in #​1098
• build(deps): Bump golangci/golangci-lint-action from 6.1.1 to 6.2.0 by @​dependabot[bot] in #​1095
• build(deps): Bump golang.org/x/net from 0.32.0 to 0.33.0 in /examples/dyplomat by @​dependabot[bot] in #​1104
• build(deps): Bump google.golang.org/grpc from 1.69.4 to 1.70.0 by @​dependabot[bot] in #​1097
• build(deps): Bump golang.org/x/net from 0.30.0 to 0.33.0 by @​dependabot[bot] in #​1102
• build(deps): Bump google.golang.org/protobuf from 1.36.3 to 1.36.4 by @​dependabot[bot] in #​1096
• build(deps): Bump golang.org/x/net from 0.28.0 to 0.33.0 in /ratelimit by @​dependabot[bot] in #​1103
• chore: use testify instead of t.Fatal or t.Error by @​mmorel-35 in #​1040
• [chore]: enable perfsprint linter by @​mmorel-35 in #​1039
• fix: define custom build for codeql workflow by @​mmorel-35 in #​1105
• chore: setup dependabot for internal/tools by @​mmorel-35 in #​1106
• build(deps): Bump github.com/golangci/golangci-lint from 1.62.2 to 1.63.4 in /internal/tools by @​dependabot[bot] in #​1107
• build(deps): Bump go.opentelemetry.io/build-tools/multimod from 0.15.0 to 0.17.0 in /internal/tools by @​dependabot[bot] in #​1108
• chore: setup dependabot for new sub-modules by @​mmorel-35 in #​1110
• build(deps): Bump google.golang.org/grpc from 1.67.1 to 1.70.0 in /envoy by @​dependabot[bot] in #​1120
• build(deps): Bump google.golang.org/protobuf from 1.35.2 to 1.36.4 in /ratelimit by @​dependabot[bot] in #​1116
• build(deps): Bump google.golang.org/protobuf from 1.35.2 to 1.36.4 in /contrib by @​dependabot[bot] in #​1112
• build(deps): Bump github.com/envoyproxy/protoc-gen-validate from 1.1.0 to 1.2.1 in /envoy by @​dependabot[bot] in #​1118
• build(deps): Bump google.golang.org/protobuf from 1.35.2 to 1.36.4 in /envoy by @​dependabot[bot] in #​1115
• build(deps): Bump github.com/prometheus/client_model from 0.6.0 to 0.6.1 in /envoy by @​dependabot[bot] in #​1119
• build(deps): Bump github/codeql-action from 3.28.6 to 3.28.8 by @​dependabot[bot] in #​1122
• build(deps): Bump google.golang.org/protobuf from 1.36.4 to 1.36.5 in /xdsmatcher by @​dependabot[bot] in #​1130
• build(deps): Bump google.golang.org/protobuf from 1.36.4 to 1.36.5 in /contrib by @​dependabot[bot] in #​1129
• build(deps): Bump go.opentelemetry.io/build-tools/multimod from 0.17.0 to 0.18.0 in /internal/tools by @​dependabot[bot] in #​1127
• build(deps): Bump golangci/golangci-lint-action from 6.2.0 to 6.3.2 by @​dependabot[bot] in #​1125
• build(deps): Bump github/codeql-action from 3.28.8 to 3.28.9 by @​dependabot[bot] in #​1124
• build(deps): Bump google.golang.org/protobuf from 1.36.4 to 1.36.5 by @​dependabot[bot] in #​1126
• build(deps): Bump go.opentelemetry.io/proto/otlp from 1.0.0 to 1.5.0 in /envoy by @​dependabot[bot] in #​1113
• build(deps): Bump google.golang.org/protobuf from 1.36.4 to 1.36.5 in /ratelimit by @​dependabot[bot] in #​1131
• build(deps): Bump google.golang.org/protobuf from 1.36.4 to 1.36.5 in /envoy by @​dependabot[bot] in #​1128
• build(deps): Bump golangci/golangci-lint-action from 6.3.2 to 6.5.0 by @​dependabot[bot] in #​1135
• build(deps): Bump github.com/golangci/golangci-lint from 1.63.4 to 1.64.5 in /internal/tools by @​dependabot[bot] in #​1134
• deps: update go version from 1.22.0 to 1.23.0 by @​mmorel-35 in #​1132
• build(deps): Bump the k8s-io group across 1 directory with 2 updates by @​dependabot[bot] in #​1133
• build(deps): Bump sigs.k8s.io/aws-iam-authenticator from 0.6.12 to 0.6.30 in /examples/dyplomat by @​dependabot[bot] in #​1123
• build(deps): Bump actions/upload-artifact from 4.6.0 to 4.6.1 by @​dependabot[bot] in #​1138
• build(deps): Bump github/codeql-action from 3.28.9 to 3.28.10 by @​dependabot[bot] in #​1139
• build(deps): Bump ossf/scorecard-action from 2.4.0 to 2.4.1 by @​dependabot[bot] in #​1140
• build(deps): Bump github.com/google/go-cmp from 0.6.0 to 0.7.0 by @​dependabot[bot] in #​1141
• build(deps): Bump github.com/golangci/golangci-lint from 1.64.5 to 1.64.6 in /internal/tools by @​dependabot[bot] in #​1144
• build(deps): Bump go.opentelemetry.io/build-tools/multimod from 0.18.0 to 0.19.0 in /internal/tools by @​dependabot[bot] in #​1145
• build(deps): Bump google.golang.org/grpc from 1.70.0 to 1.71.0 in /examples/dyplomat by @​dependabot[bot] in #​1147
• build(deps): Bump google.golang.org/grpc from 1.70.0 to 1.71.0 by @​dependabot[bot] in #​1148
• build(deps): Bump go.opentelemetry.io/build-tools/multimod from 0.19.0 to 0.20.0 in /internal/tools by @​dependabot[bot] in #​1149
• build(deps): Bump google.golang.org/grpc from 1.70.0 to 1.71.0 in /contrib by @​dependabot[bot] in #​1151
• build(deps): Bump google.golang.org/grpc from 1.70.0 to 1.71.0 in /ratelimit by @​dependabot[bot] in #​1150
• build(deps): Bump github/codeql-action from 3.28.10 to 3.28.11 by @​dependabot[bot] in #​1153
• build(deps): Bump google.golang.org/grpc from 1.70.0 to 1.71.0 in /envoy by @​dependabot[bot] in #​1152
• dependabot: use directories by @​mmorel-35 in #​1154
• build(deps): Bump golang.org/x/net from 0.35.0 to 0.36.0 in /internal/tools by @​dependabot[bot] in #​1158
• build(deps): Bump golang.org/x/net from 0.34.0 to 0.36.0 by @​dependabot[bot] in #​1157
• build(deps): Bump golangci/golangci-lint-action from 6.5.0 to 6.5.2 by @​dependabot[bot] in #​1159
• build(deps): Bump github.com/golangci/golangci-lint from 1.64.6 to 1.64.8 in /internal/tools by @​dependabot[bot] in #​1160
• build(deps): Bump golang.org/x/net from 0.34.0 to 0.36.0 in /contrib by @​dependabot[bot] in #​1162
• chore: revert toolchain changes by @​mmorel-35 in #​1164
• build(deps): Bump the k8s-io group across 1 directory with 3 updates by @​dependabot[bot] in #​1163
• build(deps): Bump github.com/golangci/golangci-lint from 1.64.6 to 1.64.8 in /internal/tools by @​dependabot[bot] in #​1166
• build(deps): Bump actions/upload-artifact from 4.6.1 to 4.6.2 by @​dependabot[bot] in #​1165
• build(deps): Bump github/codeql-action from 3.28.11 to 3.28.13 by @​dependabot[bot] in #​1170
• build(deps): Bump google.golang.org/protobuf from 1.36.5 to 1.36.6 in /xdsmatcher by @​dependabot[bot] in #​1169
• build(deps): Bump google.golang.org/protobuf from 1.36.5 to 1.36.6 in /contrib by @​dependabot[bot] in #​1171
• build(deps): Bump google.golang.org/protobuf from 1.36.5 to 1.36.6 by @​dependabot[bot] in #​1168
• build(deps): Bump golangci/golangci-lint-action from 6.5.2 to 7.0.0 by @​dependabot[bot] in #​1167
• chore: clean up golangci-lint configuration by @​mmorel-35 in #​1174
• build(deps): Bump google.golang.org/grpc from 1.71.0 to 1.71.1 in /examples/dyplomat by @​dependabot[bot] in #​1181
• build(deps): Bump sigs.k8s.io/aws-iam-authenticator from 0.6.30 to 0.6.31 in /examples/dyplomat by @​dependabot[bot] in #​1179
• build(deps): Bump github/codeql-action from 3.28.13 to 3.28.15 by @​dependabot[bot] in #​1176
• build(deps): Bump google.golang.org/grpc from 1.71.0 to 1.71.1 in /contrib by @​dependabot[bot] in #​1178
• build(deps): Bump google.golang.org/grpc from 1.71.0 to 1.71.1 by @​dependabot[bot] in #​1177
• Fix typo in go-control-plane readme by @​asiawildboar in #​1183
• build(deps): Bump github.com/prometheus/client_model from 0.6.1 to 0.6.2 in /envoy by @​dependabot[bot] in #​1184
• build(deps): Bump github.com/golangci/golangci-lint/v2 from 2.0.2 to 2.1.1 in /internal/tools by @​dependabot[bot] in #​1185
• build(deps): Bump go.opentelemetry.io/build-tools/multimod from 0.20.0 to 0.22.0 in /internal/tools by @​dependabot[bot] in #​1186
• build(deps): Bump golang.org/x/net from 0.36.0 to 0.38.0 in /examples/dyplomat by @​dependabot[bot] in #​1187
• build(deps): Bump golang.org/x/net from 0.36.0 to 0.38.0 in /contrib by @​dependabot[bot] in #​1188
• build(deps): Bump golang.org/x/net from 0.36.0 to 0.38.0 by @​mmorel-35 in #​1189
• build(deps): Bump github.com/golangci/golangci-lint/v2 from 2.1.1 to 2.1.2 in /internal/tools by @​dependabot[bot] in #​1190
• build(deps): Bump google.golang.org/grpc from 1.71.1 to 1.72.0 by @​dependabot[bot] in #​1193
• build(deps): Bump github/codeql-action from 3.28.15 to 3.28.16 by @​dependabot[bot] in #​1200
• build(deps): Bump github.com/golangci/golangci-lint/v2 from 2.1.2 to 2.1.5 in /internal/tools by @​dependabot[bot] in #​1201
• build(deps): Bump golangci/golangci-lint-action from 7.0.0 to 8.0.0 by @​dependabot[bot] in #​1204
• build(deps): Bump github/codeql-action from 3.28.16 to 3.28.17 by @​dependabot[bot] in #​1202
• build(deps): Bump go.opentelemetry.io/proto/otlp from 1.5.0 to 1.6.0 in /envoy by @​dependabot[bot] in #​1205
• build(deps): Bump github.com/golangci/golangci-lint/v2 from 2.1.5 to 2.1.6 in /internal/tools by @​dependabot[bot] in #​1207
• build(deps): Bump go.opentelemetry.io/build-tools/multimod from 0.22.0 to 0.23.1 in /internal/tools by @​dependabot[bot] in #​1206
• build(deps): Bump github/codeql-action from 3.28.17 to 3.28.18 by @​dependabot[bot] in #​1209
• build(deps): Bump google.golang.org/grpc from 1.72.0 to 1.72.1 in /contrib by @​dependabot[bot] in #​1213
• build(deps): Bump google.golang.org/grpc from 1.72.0 to 1.72.1 in /examples/dyplomat by @​dependabot[bot] in #​1214
• build(deps): Bump google.golang.org/grpc from 1.72.0 to 1.72.1 by @​dependabot[bot] in #​1210
• build(deps): Bump google.golang.org/grpc from 1.72.1 to 1.72.2 in /examples/dyplomat by @​dependabot[bot] in #​1219
• build(deps): Bump google.golang.org/grpc from 1.72.1 to 1.72.2 in /contrib by @​dependabot[bot] in #​1217
• build(deps): Bump google.golang.org/grpc from 1.72.1 to 1.72.2 by @​dependabot[bot] in #​1216
• build(deps): Bump google.golang.org/grpc from 1.72.1 to 1.72.2 in /envoy by @​dependabot[bot] in #​1218
• build(deps): Bump ossf/scorecard-action from 2.4.1 to 2.4.2 by @​dependabot[bot] in #​1221
• build(deps): Bump go.opentelemetry.io/proto/otlp from 1.6.0 to 1.7.0 in /envoy by @​dependabot[bot] in #​1222
• build(deps): Bump github/codeql-action from 3.28.18 to 3.28.19 by @​dependabot[bot] in #​1224
• build(deps): Bump google.golang.org/grpc from 1.72.2 to 1.73.0 by @​dependabot[bot] in #​1227
• build(deps): Bump github/codeql-action from 3.28.19 to 3.29.0 by @​dependabot[bot] in #​1234
• update ratelimit config api by @​zhaohuabing in #​1223
• build(deps): Bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 in /internal/tools by @​dependabot[bot] in #​1237
• build(deps): Bump github/codeql-action from 3.29.0 to 3.29.2 by @​dependabot[bot] in #​1238
• build(deps): Bump github.com/golangci/golangci-lint/v2 from 2.1.6 to 2.2.1 in /internal/tools by @​dependabot[bot] in #​1239
• build(deps): Bump go.opentelemetry.io/build-tools/multimod from 0.23.1 to 0.24.0 in /internal/tools by @​dependabot[bot] in #​1240
• build(deps): Bump github.com/golangci/golangci-lint/v2 from 2.2.1 to 2.2.2 in /internal/tools by @​dependabot[bot] in #​1241
• build(deps): Bump github/codeql-action from 3.29.2 to 3.29.3 by @​dependabot[bot] in #​1243
• build(deps): Bump github.com/golangci/golangci-lint/v2 from 2.2.2 to 2.3.1 in /internal/tools by @​dependabot[bot] in #​1249
• build(deps): Bump google.golang.org/grpc from 1.73.0 to 1.74.2 by @​dependabot[bot] in #​1246
• build(deps): Bump github/codeql-action from 3.29.3 to 3.29.5 by @​dependabot[bot] in #​1255
• build(deps): Bump go.opentelemetry.io/build-tools/multimod from 0.24.0 to 0.26.0 in /internal/tools by @​dependabot[bot] in #​1250
• build(deps): Bump go.opentelemetry.io/proto/otlp from 1.7.0 to 1.7.1 in /envoy by @​dependabot[bot] in #​1256
• ignore var-naming on pkg/cache/types by @​mmorel-35 in #​1254
• build(deps): Bump github/codeql-action from 3.29.7 to 3.29.8 by @​dependabot[bot] in #​1257
• build(deps): Bump google.golang.org/protobuf from 1.36.6 to 1.36.7 by @​dependabot[bot] in #​1258
• build(deps): Bump actions/checkout from 4.2.2 to 5.0.0 by @​dependabot[bot] in #​1261
• build(deps): Bump go.opentelemetry.io/build-tools/multimod from 0.26.0 to 0.26.1 in /internal/tools by @​dependabot[bot] in #​1263
• Release Envoy 1.34.4 by @​nezdolik in #​1244
• build(deps): Bump github/codeql-action from 3.29.8 to 3.30.5 by @​dependabot[bot] in #​1297
• build(deps): Bump actions/stale from 9.1.0 to 10.0.0 by @​dependabot[bot] in #​1283
• build(deps): Bump github.com/stretchr/testify from 1.10.0 to 1.11.1 in /xdsmatcher by @​dependabot[bot] in #​1279
• build(deps): Bump github.com/stretchr/testify from 1.10.0 to 1.11.1 by @​dependabot[bot] in #​1280
• build(deps): Bump google.golang.org/grpc from 1.74.2 to 1.75.1 in /examples/dyplomat by @​dependabot[bot] in #​1290
• build(deps): Bump google.golang.org/grpc from 1.74.2 to 1.75.1 in /contrib by @​dependabot[bot] in #​1288
• build(deps): Bump google.golang.org/grpc from 1.74.2 to 1.75.1 by @​dependabot[bot] in #​1287
• build(deps): Bump google.golang.org/grpc from 1.74.2 to 1.75.1 in /ratelimit by @​dependabot[bot] in #​1292
• build(deps): Bump google.golang.org/grpc from 1.74.2 to 1.75.1 in /envoy by @​dependabot[bot] in #​1289
• [sotw][linear] Fix missing watch cleanup in linear cache for sotw watches subscribing to multiple resources by @​valerian-roche in #​1298
• [sotw][issue-540] Return full state when applicable for watches in linear cache by @​valerian-roche in #​1299
• build(deps): Bump github/codeql-action from 3.30.5 to 3.30.6 by @​dependabot[bot] in #​1302
• build(deps): Bump actions/stale from 10.0.0 to 10.1.0 by @​dependabot[bot] in #​1303
• build(deps): Bump ossf/scorecard-action from 2.4.2 to 2.4.3 by @​dependabot[bot] in #​1304
• build(deps): Bump google.golang.org/protobuf from 1.36.7 to 1.36.10 in /contrib by @​dependabot[bot] in #​1307
• build(deps): Bump google.golang.org/protobuf from 1.36.7 to 1.36.10 in /xdsmatcher by @​dependabot[bot] in #​1315
• build(deps): Bump google.golang.org/protobuf from 1.36.7 to 1.36.10 by @​dependabot[bot] in #​1306
• [server][cache] Ensure subscription is properly updated for sotw and delta by @​valerian-roche in #​1300
• [Sotw][Linear cache] Ensure watches are properly considering subscription changes to not miss new resources by @​valerian-roche in #​1301
• build(deps): Bump github/codeql-action from 3.30.6 to 4.30.8 by @​dependabot[bot] in #​1317
• [Simple] Fix request/response loop if a non-wildcard request points to a resource not currently in the cache by @​valerian-roche in #​1319
• [Linear cache] rework watches and storage in the cache to make code more common between delta and sotw by @​valerian-roche in #​1320
• [Linear cache] Increase mutualization between delta and sotw in linear cache to have behavior driven logic instead by @​valerian-roche in #​1322
• [Linear] Ensure a resource is only serialized/hashed at most once to reply it by @​valerian-roche in #​1324
• build(deps): Bump github/codeql-action from 4.30.8 to 4.31.0 by @​dependabot[bot] in #​1327
• build(deps): Bump actions/upload-artifact from 4.6.2 to 5.0.0 by @​dependabot[bot] in #​1328
• Implements Fetch in MuxCache by @​davinci26 in #​1326
• build(deps): Bump github/codeql-action from 4.31.0 to 4.31.2 by @​dependabot[bot] in #​1330
• options to deactivate legacy wildcard by @​zhiyanfoo in #​1323
• Release go-control-plane v0.14.0 by @​valerian-roche in #​1333

New Contributors

• @​asiawildboar made their first contribution in #​1183
• @​nezdolik made their first contribution in #​1244
• @​davinci26 made their first contribution in #​1326

Full Changelog: envoyproxy/go-control-plane@v0.13.4...v0.14.0

v0.13.4

Compare Source

What's Changed

• build(deps): Bump google.golang.org/grpc from 1.67.1 to 1.69.2 in /examples/dyplomat by @​dependabot in #​1071
• build(deps): Bump golang.org/x/crypto from 0.29.0 to 0.31.0 in /internal/tools by @​dependabot in #​1067
• build(deps): Bump github/codeql-action from 3.27.6 to 3.27.9 by @​dependabot in #​1065
• build(deps): Bump google.golang.org/protobuf from 1.35.2 to 1.36.1 in /xdsmatcher by @​dependabot in #​1068
• deps: Remove Go minor version from go.mods by @​mmorel-35 in #​1078
• #​1074: Add imports of previous root package in new subpackages to avoid dependency upgrade issues. by @​valerian-roche in #​1075

Full Changelog: envoyproxy/go-control-plane@v0.13.2...v0.13.4

v0.13.3

Compare Source

v0.13.2

Compare Source

New releasing model

The go-control-plane repository is now released as multiple independent packages:

• github.com/envoyproxy/go-control-plane (this release), including the core components such as cache and server
• github.com/envoyproxy/go-control-plane/envoy and github.com/envoyproxy/go-control-plane/contrib for envoy API go generated files
• github.com/envoyproxy/go-control-plane/ratelimit and github.com/envoyproxy/go-control-plane/xdsmatcher as independent components for specific use-cases

What's Changed

• clean up: use only goimports with golangci-lint by @​mmorel-35 in #​1030
• build(deps): Bump github/codeql-action from 3.26.6 to 3.27.0 by @​dependabot in #​1031
• build(deps): Bump actions/checkout from 4.1.6 to 4.2.2 by @​dependabot in #​1032
• build(deps): Bump actions/upload-artifact from 4.4.0 to 4.4.3 by @​dependabot in #​1024
• build(deps): Bump golangci/golangci-lint-action from 6.1.0 to 6.1.1 by @​dependabot in #​1019
• Fix panic in case the resourceType is not know by the caches by @​alandiegosantos in #​1036
• build(deps): Bump golang from 1.21 to 1.22 by @​dependabot in #​879
• build(deps): Bump google.golang.org/grpc from 1.65.0 to 1.67.1 in /examples/dyplomat by @​dependabot in #​1018
• build(deps): Bump google.golang.org/protobuf from 1.34.2 to 1.35.2 in /xdsmatcher by @​dependabot in #​1048
• build(deps): Bump github/codeql-action from 3.27.0 to 3.27.4 by @​dependabot in #​1047
• build(deps): Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 in /xdsmatcher by @​dependabot in #​1054
• build(deps): Bump github/codeql-action from 3.27.4 to 3.27.5 by @​dependabot in #​1053
• build(deps): Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 by @​dependabot in #​1052
• build(deps): Bump github/codeql-action from 3.27.5 to 3.27.6 by @​dependabot in #​1059
• chore(deps): upgrade golang version to 1.22.8 by @​lukidzi in #​1038
• Support multi-module releases in go-control-plane by @​alecholmez in #​714
• Create releases for go-control-plane (0.13.2) and envoy API (1.32.2) by @​valerian-roche in #​1073

New Contributors

• @​alandiegosantos made their first contribution in #​1036
• @​lukidzi made their first contribution in #​1038

Full Changelog: envoyproxy/go-control-plane@v0.13.1...v0.13.2

v0.13.1

Compare Source

What's Changed

• build(deps): Bump ossf/scorecard-action from 2.3.3 to 2.4.0 by @​dependabot in #​975
• build(deps): Bump github/codeql-action from 3.25.6 to 3.26.5 by @​dependabot in #​990
• build(deps): Bump golangci/golangci-lint-action from 6.0.1 to 6.1.0 by @​dependabot in #​979
• build(deps): Bump actions/upload-artifact from 3.1.0 to 4.3.6 by @​dependabot in #​982
• fix: golangci-lint by @​mmorel-35 in #​993
• Bump google.golang.org/protobuf from 1.33.0 to 1.34.2 in /xdsmatcher by @​dependabot in #​955
• build(deps): Bump github.com/envoyproxy/protoc-gen-validate from 1.0.4 to 1.1.0 by @​dependabot in #​978
• update OSSF Scorecard badge link by @​mmorel-35 in #​857
• build(deps): Bump actions/upload-artifact from 4.3.6 to 4.4.0 by @​dependabot in #​998
• build(deps): Bump github/codeql-action from 3.26.5 to 3.26.6 by @​dependabot in #​997

Full Changelog: envoyproxy/go-control-plane@v0.13.0...v0.13.1

v0.13.0

Compare Source

What's Changed

• Setup Codeql workflow by @​mmorel-35 in #​846
• Improve OSSF score by @​mmorel-35 in #​848
• Fix build after recent protobuf changes by @​howardjohn in #​862
• Add detailed_metric field to ratelimit descriptor by @​akondapuram in #​841
• Enable testifylint linter by @​mmorel-35 in #​842
• build(deps): Bump actions/stale from 7.0.0 to 9.0.0 by @​dependabot in #​881
• build(deps): Bump github/codeql-action from 3.22.12 to 3.24.6 by @​dependabot in #​892
• build(deps): Bump golangci/golangci-lint-action from 3.7.0 to 4.0.0 by @​dependabot in #​880
• Linter fixes required by latest golangci-lint versions by @​sunjayBhatia in #​903
• build(deps): Bump google.golang.org/grpc from 1.58.3 to 1.62.1 by @​dependabot in #​899
• build(deps): Bump github/codeql-action from 3.24.6 to 3.24.8 by @​dependabot in #​906
• build(deps): Bump github.com/golang/protobuf from 1.5.3 to 1.5.4 by @​dependabot in #​898
• build(deps): Bump github.com/stretchr/testify from 1.8.4 to 1.9.0 by @​dependabot in #​891
• build(deps): Bump actions/checkout from 4.1.1 to 4.1.2 by @​dependabot in #​905
• build(deps): Bump github.com/prometheus/client_model from 0.5.0 to 0.6.0 by @​dependabot in #​886
• build(deps): Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 in /xdsmatcher by @​dependabot in #​900
• build(deps): Bump github.com/stretchr/testify from 1.8.4 to 1.9.0 in /xdsmatcher by @​dependabot in #​893
• build(deps): Bump google.golang.org/grpc from 1.59.0 to 1.62.1 in /examples/dyplomat by @​dependabot in #​901
• build(deps): Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 in /examples/dyplomat by @​dependabot in #​902
• Apply 'go mod tidy' after API sync by @​mmorel-35 in #​908
• build(deps): Bump github/codeql-action from 3.24.8 to 3.24.9 by @​dependabot in #​910
• Move go mod tidy to run in sync_protos by @​sunjayBhatia in #​911
• use replace in examples/dyplomat and xdsmatcher modules by @​mmorel-35 in #​912
• Bump vtprotobuf import by @​howardjohn in #​914
• Goroutine leak in DeltaStreamHandler: fix for issue 913: by @​zhiyanfoo in #​916
• build(deps): bump github.com/cncf/xds/go to v0.0.0-20240329184929 by @​mmorel-35 in #​923
• build(deps): Bump golang.org/x/net from 0.20.0 to 0.23.0 in /examples/dyplomat by @​dependabot in #​926
• build(deps): Bump golang.org/x/net from 0.20.0 to 0.23.0 by @​dependabot in #​925
• build(deps): Bump github/codeql-action from 3.24.9 to 3.25.0 by @​dependabot in #​924
• build(deps): bump github.com/cncf/xds/go to v0.0.0-20240329184929 by @​mmorel-35 in #​931
• Linearcache should respond immediately for the first wildcard delta request by @​tnqn in #​927
• build(deps): Bump actions/checkout from 4.1.2 to 4.1.5 by @​dependabot in #​938
• build(deps): Bump golangci/golangci-lint-action from 4.0.0 to 6.0.1 by @​dependabot in #​941
• build(deps): Bump ossf/scorecard-action from 2.3.1 to 2.3.3 by @​dependabot in #​943
• build(deps): Bump actions/checkout from 4.1.5 to 4.1.6 by @​dependabot in #​948
• build(deps): Bump github/codeql-action from 3.25.0 to 3.25.6 by @​dependabot in #​947
• xds server: Update reference/resource checks for DefaultFilterChain by @​sfc-gh-randerson in #​949
• chore: update go version to 1.21 by @​mmorel-35 in #​964
• Bump google.golang.org/grpc from 1.62.1 to 1.65.0 by @​mmorel-35 in #​968

New Contributors

• @​howardjohn made their first contribution in #​862
• @​akondapuram made their first contribution in #​841
• @​zhiyanfoo made their first contribution in #​916
• @​tnqn made their first contribution in #​927
• @​sfc-gh-randerson made their first contribution in #​949

Full Changelog: envoyproxy/go-control-plane@v0.12.0...v0.13.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: backend/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 21 additional dependencies were updated

Details:

Package	Change
github.com/stretchr/testify	v1.10.0 -> v1.11.1
golang.org/x/net	v0.37.0 -> v0.42.0
golang.org/x/oauth2	v0.28.0 -> v0.30.0
golang.org/x/sync	v0.12.0 -> v0.16.0
google.golang.org/genproto/googleapis/api	v0.0.0-20240415180920-8c6c420018be -> v0.0.0-20250728155136-f173205681a0
google.golang.org/genproto/googleapis/rpc	v0.0.0-20240415180920-8c6c420018be -> v0.0.0-20250728155136-f173205681a0
google.golang.org/grpc	v1.63.2 -> v1.75.1
google.golang.org/protobuf	v1.33.0 -> v1.36.10
github.com/cespare/xxhash/v2	v2.2.0 -> v2.3.0
github.com/cncf/xds/go	v0.0.0-20231128003011-0fa0005c9caa -> v0.0.0-20250501225837-2ac532fd4443
github.com/go-jose/go-jose/v4	v4.0.5 -> v4.1.1
github.com/go-logr/logr	v1.4.1 -> v1.4.3
github.com/google/go-cmp	v0.6.0 -> v0.7.0
github.com/lyft/protoc-gen-star/v2	v2.0.3 -> v2.0.4-0.20230330145011-496ad1ac90a4
github.com/prometheus/client_model	v0.5.0 -> v0.6.2
golang.org/x/crypto	v0.36.0 -> v0.40.0
golang.org/x/mod	v0.17.0 -> v0.25.0
golang.org/x/sys	v0.31.0 -> v0.34.0
golang.org/x/term	v0.30.0 -> v0.33.0
golang.org/x/text	v0.23.0 -> v0.27.0
golang.org/x/tools	v0.21.1-0.20240508182429-e35e4ccd0d2d -> v0.34.0

[github-actions]

This PR has been marked as stale after 7 or more days of inactivity. Please have a maintainer add the on hold label if this PR should remain open. If there is no further activity or the on hold label is not added, this PR will be closed in 3 days.

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (v0.14.0). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.