Skip to content

Conversation

@renovate-bot
Copy link
Contributor

@renovate-bot renovate-bot commented Oct 1, 2025

This PR contains the following updates:

Package Type Update Change Age Confidence
alpine final minor 3.22 -> 3.23 age confidence
bazel minor 8.4.1 -> 8.5.0 age confidence
gazelle bazel_dep minor 0.45.0 -> 0.47.0 age confidence
github.com/protocolbuffers/txtpbfmt require digest cf07efc -> fcb97cc age confidence
go (source) toolchain patch 1.25.1 -> 1.25.5 age confidence
golang (source) patch 1.25.1 -> 1.25.5 age confidence
golang.org/x/crypto require minor v0.45.0 -> v0.46.0 age confidence
golang.org/x/net require minor v0.47.0 -> v0.48.0 age confidence
google.golang.org/grpc require minor v1.75.1 -> v1.78.0 age confidence
google.golang.org/grpc/cmd/protoc-gen-go-grpc require minor v1.5.1 -> v1.6.0 age confidence
google.golang.org/protobuf require patch v1.36.9 -> v1.36.11 age confidence
grpc bazel_dep minor 1.74.1 -> 1.76.0.bcr.1 age confidence
rules_go bazel_dep minor 0.57.0 -> 0.59.0 age confidence

Release Notes

bazelbuild/bazel (bazel)

v8.5.0

Compare Source


Release Notes:

v8.4.2

Compare Source


Release Notes:

bazel-contrib/bazel-gazelle (gazelle)

v0.47.0

What's Changed

Full Changelog: bazel-contrib/bazel-gazelle@v0.46.0...v0.47.0

v0.46.0

What's Changed

New Contributors

Full Changelog: bazel-contrib/bazel-gazelle@v0.45.0...v0.46.0

golang/go (go)

v1.25.5

v1.25.4

v1.25.3

v1.25.2

grpc/grpc-go (google.golang.org/grpc)

v1.78.0: Release 1.78.0

Compare Source

Behavior Changes
  • client: Reject target URLs containing unbracketed colons in the hostname in Go version 1.26+. (#​8716)
New Features
  • stats/otel: Add backend service label to wrr metrics as part of A89. (#​8737)
  • stats/otel: Add subchannel metrics (without the disconnection reason) to eventually replace the pickfirst metrics. (#​8738)
  • client: Wait for all pending goroutines to complete when closing a graceful switch balancer. (#​8746)
Bug Fixes
  • transport/client : Return status code Unknown on malformed grpc-status. (#​8735)
  • client: Add experimental.AcceptCompressors so callers can restrict the grpc-accept-encoding header advertised for a call. (#​8718)
  • xds: Fix a bug in StringMatcher where regexes would match incorrectly when ignore_case is set to true. (#​8723)
  • xds/resolver:
    • Drop previous route resources and report an error when no matching virtual host is found.
    • Only log LDS/RDS configuration errors following a successful update and retain the last valid resource to prevent transient failures. (#​8711)
  • client:
    • Change connectivity state to CONNECTING when creating the name resolver (as part of exiting IDLE).
    • Change connectivity state to TRANSIENT_FAILURE if name resolver creation fails (as part of exiting IDLE).
    • Change connectivity state to IDLE after idle timeout expires even when current state is TRANSIENT_FAILURE.
    • Fix a bug that resulted in OnFinish call option not being invoked for RPCs where stream creation failed. (#​8710)
  • xdsclient: Fix a race in the xdsClient that could lead to resource-not-found errors. (#​8627)
Performance Improvements
  • mem: Round up to nearest 4KiB for pool allocations larger than 1MiB. (#​8705)

v1.77.0: Release 1.77.0

Compare Source

API Changes

  • mem: Replace the Reader interface with a struct for better performance and maintainability. (#​8669)

Behavior Changes

  • balancer/pickfirst: Remove support for the old pick_first LB policy via the environment variable GRPC_EXPERIMENTAL_ENABLE_NEW_PICK_FIRST=false. The new pick_first has been the default since v1.71.0. (#​8672)

Bug Fixes

  • xdsclient: Fix a race condition in the ADS stream implementation that could result in resource-not-found errors, causing the gRPC client channel to move to TransientFailure. (#​8605)
  • client: Ignore HTTP status header for gRPC streams. (#​8548)
  • client: Set a read deadline when closing a transport to prevent it from blocking indefinitely on a broken connection. (#​8534)
  • client: Fix a bug where default port 443 was not automatically added to addresses without a specified port when sent to a proxy.
    • Setting environment variable GRPC_EXPERIMENTAL_ENABLE_DEFAULT_PORT_FOR_PROXY_TARGET=false disables this change; please file a bug if any problems are encountered as we will remove this option soon. (#​8613)
  • balancer/pickfirst: Fix a bug where duplicate addresses were not being ignored as intended. (#​8611)
  • server: Fix a bug that caused overcounting of channelz metrics for successful and failed streams. (#​8573)
  • balancer/pickfirst: When configured, shuffle addresses in resolver updates that lack endpoints. Since gRPC automatically adds endpoints to resolver updates, this bug only affects custom LB policies that delegate to pick_first but don't set endpoints. (#​8610)
  • mem: Clear large buffers before re-using. (#​8670)

Performance Improvements

New Features

  • outlierdetection: Add metrics specified in gRFC A91. (#​8644)
  • stats/opentelemetry: Add support for optional label grpc.lb.backend_service in per-call metrics (#​8637)
  • xds: Add support for JWT Call Credentials as specified in gRFC A97. Set environment variable GRPC_EXPERIMENTAL_XDS_BOOTSTRAP_CALL_CREDS=true to enable this feature. (#​8536)
  • experimental/stats: Add support for up/down counters. (#​8581)

v1.76.0: Release 1.76.0

Compare Source

Dependencies

Bug Fixes

  • client: Return status INTERNAL when a server sends zero response messages for a unary or client-streaming RPC. (#​8523)
  • client: Fail RPCs with status INTERNAL instead of UNKNOWN upon receiving http headers with status 1xx and END_STREAM flag set. (#​8518)
  • pick_first: Fix race condition that could cause pick_first to get stuck in IDLE state on backend address change. (#​8615)

New Features

  • credentials: Add credentials/jwt package providing file-based JWT PerRPCCredentials (A97). (#​8431)

Performance Improvements

  • client: Improve HTTP/2 header size estimate to reduce re-allocations. (#​8547)
  • encoding/proto: Avoid redundant message size calculation when marshaling. (#​8569)
protocolbuffers/protobuf-go (google.golang.org/protobuf)

v1.36.11

Compare Source

Full Changelog: protocolbuffers/protobuf-go@v1.36.10...v1.36.11

User-visible changes:
CL/726780: encoding/prototext: Support URL chars in type URLs in text-format.

Bug fixes:
CL/728680: internal/impl: check recursion limit in lazy decoding validation
CL/711015: reflect/protodesc: fix handling of import options in dynamic builds

Maintenance:
CL/728681: reflect/protodesc: add support for edition unstable
CL/727960: all: add EDITION_UNSTABLE support
CL/727940: types: regenerate using latest protobuf v33.2 release
CL/727140: internal/testprotos/lazy: convert .proto files to editions
CL/723440: cmd/protoc-gen-go: add missing annotations for few generated protobuf symbols.
CL/720980: internal/filedesc: remove duplicative Message.unmarshalOptions
CL/716360: internal/encoding/tag: use proto3 defaults if proto3
CL/716520: proto: un-flake TestHasExtensionNoAlloc
CL/713342: compiler/protogen: properly filter option dependencies in go-protobuf plugin.
CL/711200: proto: add test for oneofs containing messages with required fields
CL/710855: proto: add explicit test for a non-nil but empty byte slice

v1.36.10

Compare Source

Full Changelog: protocolbuffers/protobuf-go@v1.36.9...v1.36.10

Bug fixes:
CL/704415: reflect/protodesc: edition-2024-specific properties should not be lost when converting FileDescriptorProto to protoreflect.FileDescriptor

Maintenance:
CL/708555: internal/race_test: add missing impl.LazyEnabled() t.Skip
CL/703295: proto: add more invalid group encoding test cases
CL/703276: internal/impl: verify lazy unmarshal on Deterministic encoding
CL/703275: internal/impl: stop using deprecated .Field in lazy_test.go
CL/702795: all: update to latest github.com/google/go-cmp

grpc/grpc (grpc)

v1.76.0

This is release 1.76.0 (genuine) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

  • Prioritize system CA over bundled CA. (#​40583)
  • [event_engine] Introduce a event_engine_poller_for_python experiment. (#​40243)
  • [metrics] add grpc.lb.backend_service label. (#​40486)

C#

  • [csharp tools] #​39374 Grpc.Tools can't process file Suffix name with Upper character. (#​40072)

Python

  • [Python] gRPC AsyncIO: Improve CompletionQueue polling performance. (#​39993)

v1.75.1

This is release gRPC Core 1.75.1 (gemini).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

What's Changed
Python
  • Release grpcio wheels with Python 3.14 support (#​40403)
  • Asyncio: fixes grpc shutdown race condition occurring during python interpreter finalizations. (#​40447)
    • This also addresses previously reported issues with empty error message on Python interpreter exit (Error in sys.excepthook:/Original exception was: empty): #​36655, #​38679, #​33342
  • Python 3.14: preserve current behavior when using grpc.aio async methods outside of a running event loop. (#​40750)
    • Note: using async methods outside of a running event loop is discouraged by Python, and will be deprecated in future gRPC releases. Please use the asyncio.run() function (or asyncio.Runner for custom loop factories). For interactive mode, use dedicated asyncio REPL: python -m asyncio.

Full Changelog: grpc/grpc@v1.75.0...v1.75.1

v1.75.0

This is release 1.75.0 (gemini) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

  • [Security] Cherry Pick Spiffe Verification. (#​40515)
  • [Python][Typeguard] Part 3 - Add Typeguard to AIO stack in tests. (#​40217)
  • [c-ares] update version to 1.34.5. (#​39508)
  • [pick_first] fix bug that caused us to stop attempting to connect. (#​40162)

C++

  • [OTel C++] Implement retry metrics. (#​39195)

Objective-C

  • Fix data race by adding custom getter for state property with @synchronized locking. (#​40146)

Python

  • gRPC Python (grpcio) now depends on typing-extensions~=4.13. (#​40137)
  • Update musllinux wheels from musllinux_1_1 to musllinux_1_2. (#​40317)
    • Dropping musllinux_1_1 because it reached EOL in November 2024
    • Reference on musllinux platform tags: PEP 656
  • grpc.aio typehint fixes. (#​40215, #​40217)
    • Metadata type validation: Fixed metadata handling to support all sequence types (not just tuples), preventing runtime errors. Enhanced metadata type validation: isinstance(metadata, Sequence) instead of isinstance(metadata, tuple)
    • Serializer parameters: Changed to Optional[SerializingFunction] for more accurate type representation
    • Fixing the error in public API: ClientCallDetails.method was declared as str but always called with bytes, see InterceptedUnaryUnaryCall.
  • Fixes issue #​40325 with grpcio failing to install on all non-Mac Apple devices internal builds. (#​40347)

Ruby

  • Ruby: Mark credential object in channel. (#​40394)
  • [Ruby] Add rubygems support for linux-gnu and linux-musl platforms. (#​39549)
bazelbuild/rules_go (rules_go)

v0.59.0

WORKSPACE code

load("@​bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "io_bazel_rules_go",
    sha256 = "68af54cb97fbdee5e5e8fe8d210d15a518f9d62abfd71620c3eaff3b26a5ff86",
    urls = [
        "https://mirror.bazel.build/github.com/bazel-contrib/rules_go/releases/download/v0.59.0/rules_go-v0.59.0.zip",
        "https://github.com/bazel-contrib/rules_go/releases/download/v0.59.0/rules_go-v0.59.0.zip",
    ],
)

load("@​io_bazel_rules_go//go:deps.bzl", "go_register_toolchains", "go_rules_dependencies")

go_rules_dependencies()

go_register_toolchains(version = "1.25.4")

# Create the host platform repository transitively required by rules_go.
load("@​bazel_tools//tools/build_defs/repo:utils.bzl", "maybe")
load("@​platforms//host:extension.bzl", "host_platform_repo")

maybe(
	host_platform_repo,
	name = "host_platform",
)

What's Changed

New Contributors

Full Changelog: bazel-contrib/rules_go@v0.58.3...v0.59.0

v0.58.3

WORKSPACE code

load("@​bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "io_bazel_rules_go",
    sha256 = "82f0af253fc61c7f06b005c67c079573776111185b7c3742563f751178aaa4c0",
    urls = [
        "https://mirror.bazel.build/github.com/bazel-contrib/rules_go/releases/download/v0.58.3/rules_go-v0.58.3.zip",
        "https://github.com/bazel-contrib/rules_go/releases/download/v0.58.3/rules_go-v0.58.3.zip",
    ],
)

load("@​io_bazel_rules_go//go:deps.bzl", "go_register_toolchains", "go_rules_dependencies")

go_rules_dependencies()

go_register_toolchains(version = "1.25.3")

# Create the host platform repository transitively required by rules_go.
load("@​bazel_tools//tools/build_defs/repo:utils.bzl", "maybe")
load("@​platforms//host:extension.bzl", "host_platform_repo")

maybe(
	host_platform_repo,
	name = "host_platform",
)

What's Changed

Full Changelog: bazel-contrib/rules_go@v0.58.2...v0.58.3

v0.58.2

WORKSPACE code

load("@​bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "io_bazel_rules_go",
    sha256 = "54bbb67a4196170cc60ef3b52a2747ad1759cba4764b4c4752b744080ad99947",
    urls = [
        "https://mirror.bazel.build/github.com/bazel-contrib/rules_go/releases/download/v0.58.2/rules_go-v0.58.2.zip",
        "https://github.com/bazel-contrib/rules_go/releases/download/v0.58.2/rules_go-v0.58.2.zip",
    ],
)

load("@​io_bazel_rules_go//go:deps.bzl", "go_register_toolchains", "go_rules_dependencies")

go_rules_dependencies()

go_register_toolchains(version = "1.25.3")

# Create the host platform repository transitively required by rules_go.
load("@​bazel_tools//tools/build_defs/repo:utils.bzl", "maybe")
load("@​platforms//host:extension.bzl", "host_platform_repo")

maybe(
	host_platform_repo,
	name = "host_platform",
)

What's Changed

Full Changelog: bazel-contrib/rules_go@v0.58.0...v0.58.2


Configuration

📅 Schedule: Branch creation - Monday through Friday ( * * * * 1-5 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate-bot renovate-bot changed the title chore(all): update dependency bazel to v8.4.2 chore(all): update deps Oct 2, 2025
@renovate-bot renovate-bot force-pushed the renovate/deps branch 17 times, most recently from dc2c628 to 5e5695e Compare October 6, 2025 20:28
@forking-renovate
Copy link

forking-renovate bot commented Oct 7, 2025

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 4 additional dependencies were updated

Details:

Package Change
golang.org/x/sys v0.38.0 -> v0.39.0
golang.org/x/term v0.37.0 -> v0.38.0
golang.org/x/text v0.31.0 -> v0.32.0
google.golang.org/genproto/googleapis/rpc v0.0.0-20250707201910-8d1bb00bc6a7 -> v0.0.0-20251022142026-3a174f9686a8

@renovate-bot renovate-bot force-pushed the renovate/deps branch 10 times, most recently from 476cd09 to 86df175 Compare October 8, 2025 20:38
@renovate-bot renovate-bot force-pushed the renovate/deps branch 6 times, most recently from c103614 to beabb49 Compare October 15, 2025 08:46
@renovate-bot renovate-bot force-pushed the renovate/deps branch 2 times, most recently from 51e01a0 to 749b77d Compare October 30, 2025 21:58
@renovate-bot renovate-bot force-pushed the renovate/deps branch 6 times, most recently from 6ce3ccf to 7921574 Compare November 11, 2025 23:59
@renovate-bot renovate-bot force-pushed the renovate/deps branch 6 times, most recently from af8d85c to f8d83ef Compare November 24, 2025 10:11
@renovate-bot renovate-bot force-pushed the renovate/deps branch 3 times, most recently from cb5fa6d to 71092fa Compare December 3, 2025 21:49
@forking-renovate
Copy link

forking-renovate bot commented Dec 10, 2025

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 4 additional dependencies were updated

Details:

Package Change
golang.org/x/sys v0.38.0 -> v0.39.0
golang.org/x/term v0.37.0 -> v0.38.0
golang.org/x/text v0.31.0 -> v0.32.0
google.golang.org/genproto/googleapis/rpc v0.0.0-20250707201910-8d1bb00bc6a7 -> v0.0.0-20251029180050-ab9386a59fda

@renovate-bot renovate-bot force-pushed the renovate/deps branch 2 times, most recently from 399dc56 to 73b1673 Compare December 12, 2025 09:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant