Skip to content

chore(all): update deps - #353

Open
renovate-bot wants to merge 1 commit into
openconfig:mainfrom
renovate-bot:renovate/deps
Open

chore(all): update deps#353
renovate-bot wants to merge 1 commit into
openconfig:mainfrom
renovate-bot:renovate/deps

Conversation

@renovate-bot

@renovate-bot renovate-bot commented Jun 30, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Age Confidence
actions/checkout (changelog) action digest df4cb1c → d23441a
actions/checkout action minor v6.0.3 → v6.1.0 age confidence
aspect_bazel_lib bazel_dep minor 2.21.2 → 2.22.5 age confidence
crate-ci/typos action minor v1.47.2 → v1.49.0 age confidence
distroless_base oci_pull digest f5a3067 → 20dc7ed
gazelle bazel_dep minor 0.51.3 → 0.53.0 age confidence
github.com/insomniacslk/dhcp require digest a415979 → c308df0 age confidence
github.com/openconfig/monax require minor v0.0.0-20260720151517-883500dc841b → v0.1.0 age confidence
go uses-with minor 1.26.4 → 1.27.0 age confidence
go.mozilla.org/pkcs7 require minor v0.9.0 → v0.10.0 age confidence
golang (source) minor 1.26.4 → 1.27.0 age confidence
google.golang.org/grpc require minor v1.82.1 → v1.83.1 age confidence
google.golang.org/protobuf require patch v1.36.12-0.20260120151049-f2248ac996af → v1.36.12 age confidence
grpc bazel_dep minor 1.81.1 → 1.83.0 age confidence
rules_go bazel_dep minor 0.61.1 → 0.63.0 age confidence
rules_oci bazel_dep minor 2.2.6 → 2.3.0 age confidence
shogo82148/actions-goveralls action patch v1.11.0 → v1.11.1 age confidence
tar.bzl bazel_dep minor 0.5.1 → 0.10.8 age confidence

Release Notes

actions/checkout (actions/checkout)

v6.1.0

Compare Source

crate-ci/typos (crate-ci/typos)

v1.49.0

Compare Source

[1.49.0] - 2026-08-03

Features
  • Updated the dictionary with the July 2026 changes

v1.48.0

Compare Source

[1.48.0] - 2026-06-30

Features
  • Updated the dictionary with the June 2026 changes
bazel-contrib/bazel-gazelle (gazelle)

v0.53.0

Using Bzlmod

bazel_dep(name = "gazelle", version = "0.53.0")

Using WORKSPACE

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
http_archive(
    name = "bazel-gazelle",
    sha256 = "fec7a24acb027359eb7d2b31d116b17c81d2fab35842f6bfb2dd5945e1071346",
    url = "https://github.com/bazel-contrib/bazel-gazelle/releases/download/v0.53.0/bazel-gazelle-v0.53.0.tar.gz",
)
load("@bazel-gazelle//:deps.bzl", "gazelle_dependencies")
gazelle_dependencies()

What's Changed

New Contributors

Full Changelog: bazel-contrib/bazel-gazelle@v0.52.2...v0.53.0

v0.52.2

Using Bzlmod

bazel_dep(name = "gazelle", version = "0.52.2")

Using WORKSPACE

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
http_archive(
    name = "bazel-gazelle",
    sha256 = "6549bd37cf1b82bac406119aef1b26bfec5d1c02d0d5a5518275e4513f47b3b2",
    url = "https://github.com/bazel-contrib/bazel-gazelle/releases/download/v0.52.2/bazel-gazelle-v0.52.2.tar.gz",
)
load("@bazel-gazelle//:deps.bzl", "gazelle_dependencies")
gazelle_dependencies()

What's Changed

Full Changelog: bazel-contrib/bazel-gazelle@v0.52.1...v0.52.2

actions/go-versions (go)

v1.27.0: 1.27.0

Compare Source

Go 1.27.0

v1.26.7: 1.26.7

Compare Source

Go 1.26.7

v1.26.6: 1.26.6

Compare Source

Go 1.26.6

v1.26.5: 1.26.5

Compare Source

Go 1.26.5

mozilla-services/pkcs7 (go.mozilla.org/pkcs7)

v0.10.0

Compare Source

What's Changed

  • Fix out-of-bounds panic in ber2der on malformed BER input by @​hneiva in #​94

Full Changelog: mozilla-services/pkcs7@v0.9.0...v0.10.0

golang/go (golang)

v1.27.0

v1.26.7

v1.26.6

v1.26.5

grpc/grpc-go (google.golang.org/grpc)

v1.83.1: Release 1.83.1

Compare Source

Security

  • xds/rbac: Fix a bug where nested Principal or Permission rules with :scheme or grpc- prefixed header matchers were not rejected, which could cause DENY rules to fail open. (#​9258)
  • xds/rbac: Fix a bug where the host header matcher was not being replaced with :authority in nested Principal or Permission rules. (#​9258)
  • xds/rbac: Fix a bug where a header matcher whose name was not lowercase, such as X-Role, matched no header, which could cause DENY rules to fail open. (#​9332)
  • xds/rbac: Fix a bug where a :scheme or grpc- prefixed header matcher was accepted when its name was not lowercase. (#​9332)
  • xds/rbac: Fix a bug where a Host header matcher was not replaced with :authority. (#​9332)

Performance

  • transport: Restrict memory overhead of buffering small data frames. (#​9331)

v1.83.0: Release 1.83.0

Compare Source

Security

  • server: Stop reading from connections when flooded by HTTP/2 frames to mitigate resource exhaustion. The default value for this limit is 100 frames, excluding DATA and HEADERS, and may be changed by setting environment variable GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT.
  • xds/rbac: Support Metadata and RequestedServerName permissions matcher fields. If present in a DENY rule, previously these would be ignored and fail-open.
  • xds/rbac: Fix panic when parsing unsupported fields in NotRule/NotId permissions.
  • xds/rbac: Support the deprecated source_ip principal identifier by treating it as equivalent to direct_remote_ip.
  • xds: Fix panic when parsing route header matchers configured with empty exact_match, prefix_match, or suffix_match strings. (#​9223)

New Features

  • xds/googlec2p: Enable DirectPath over Interconnect support for on-premises clients via the force-xds target URI query parameter. (#​9133)
  • xds: Enable xDS configuration to control which fields get propagated from ORCA backend metric reports to LRS load reports. (#​9145)
  • authz: Add OnPolicyUpdate callback to FileWatcherOptions to notify when an authz policy is loaded or updated. (#​9142)
  • xds: Add support for the GCP Authentication HTTP Filter, which automatically fetches and attaches GCP Service Account Identity JWT tokens to outgoing RPCs.
    • This feature can be enabled by setting environment variable GRPC_EXPERIMENTAL_XDS_GCP_AUTHENTICATION_FILTER=true. (#​9119)
  • xds: Add support for xDS-based HTTP CONNECT proxies.
    • This feature can be enabled by setting environment variable GRPC_EXPERIMENTAL_XDS_HTTP_CONNECT=true. (#​9151)
  • xds: Add support for contains_match in route header matchers. (#​9223)

Bug Fixes

  • credentials/alts: Fix panic when processing malformed frames by validating that the message frame length exceeds the message type field size. (#​9197)
  • grpc: Fix compilation on Plan 9 targets (GOOS=plan9), broken since v1.81.0. (#​9255)
grpc/grpc (grpc)

v1.83.0

This is release 1.83.0 (garden) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

  • [Security] Default to Post-Quantum Cryptography in TLS key exchange. (#​42560)
  • [authz] don't pass RBAC policy by value when constructing authorization engine. (#​42636)

C#

  • Migrate CSharp Grpc.Tools to new DotNet Version. (#​42661)
  • [C#] Tools - Build: Fix protoc SIGSEGV on ARM64 by aligning max-page-size and migrating to manylinux_2_28. (#​42590)

Python

  • [Backport][v1.83.x][Python] grpc-status: Relax protobuf dependency lower bound to allow 6.x. (#​43001)
  • [Python] Add abort_with_status to the aio ServicerContext ABC. (#​42733)
  • [Python] Update lower bound for protobuf from 6.33.5 to 7.35.1. (#​42914)
  • [Python] Pyright typeCheckingMode - standard. (#​42739)
  • [Python] Support Python 3.15 - Upgrade bazel dep rules_python to 2.0.2. (#​42637)
  • [Python] Hide internal symbols from Python's cygrpc shared object. (#​42325)
  • [Python] Handle custom Interceptor exceptions in InterceptedCall APIs . (#​42593)

v1.82.1

This is release gRPC Core 1.82.1 (glacier).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

What's Changed

Python

Full Changelog: grpc/grpc@v1.82.0...v1.82.1

v1.82.0

This is release gRPC Core 1.82.0 (glacier).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.
This is release 1.82.0 (glacier) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

  • [call creds] Add support for looking up and attaching regional access boundary policy metadata. (#​41594)
  • Unregister CFStream callbacks during endpoint shutdown. (#​42211)
  • Fix fd 0 incorrectly treated as invalid across POSIX socket code. (#​41764)
  • [xDS] enable new ORCA-to-LRS propagation behavior (gRFC A85). (#​42411)
  • [RetryFilter::LegacyCallData]: avoid tripping abseil nullopt assertion. (#​42405)
  • [xds] Implement A114: WRR support for custom backend metrics. (#​41750)
  • [Core] Upgrade to protobuf 35 (#​42512)

PHP

  • [Backport][v1.82.x][PHP] Add PIE support for PHP extention. (#​42873)

Python

Added 2026-07-12:
CAUTION! This gRPC Python release 1.82.0 was yanked from PyPI on 2026-07-07 due to issue #​42906.

  • [Python] [Pyright] Part 2 - Pyright for src/python/grpcio/grpc/aio/_call.py. (#​42272)
  • [Python][aio] Fix issue #​42393: 100% CPU when Python run with -O flag. (#​42470)
  • [Python] [Typeguard] Part 6 - Add Typeguard SYNC Stack in tests. (#​40353)
  • [Python] [Pyright] Part 3 - Pyright for src/python/grpcio/grpc/aio/_metadata.py. (#​42273)
  • [Python] Cancel calls without closing channels in fork child. (#​41784)
  • [Python] Migrated to protobuf 3.35.

Ruby

  • [Ruby] Implemented Pure Ruby Call Credentials. (#​41946)
  • [Ruby] Fix Ruby interceptors not running in FIFO order. (#​42346)
bazelbuild/rules_go (rules_go)

v0.63.0

MODULE.bazel code

bazel_dep(name = "rules_go", version = "0.63.0")

go_sdk = use_extension("@rules_go//go:extensions.bzl", "go_sdk")
go_sdk.from_file(go_mod = "//:go.mod")

WORKSPACE code

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "io_bazel_rules_go",
    sha256 = "c3e253237109ab2e2a8d3cb075688b98a6e6fce43d849849648e8e3a84f20d6f",
    urls = [
        "https://github.com/bazel-contrib/rules_go/releases/download/v0.63.0/rules_go-v0.63.0.zip",
    ],
)

load("@io_bazel_rules_go//go:deps.bzl", "go_register_toolchains", "go_rules_dependencies")

go_rules_dependencies()

go_register_toolchains(version = "1.26.6")

# Create the host platform repository transitively required by rules_go.
load("@bazel_tools//tools/build_defs/repo:utils.bzl", "maybe")
load("@platforms//host:extension.bzl", "host_platform_repo")

maybe(
    host_platform_repo,
    name = "host_platform",
)

What's Changed

New Contributors

Full Changelog: bazel-contrib/rules_go@v0.62.0...v0.63.0

v0.62.0

Author: zbarsky-bot

MODULE.bazel code

bazel_dep(name = "rules_go", version = "0.62.0")

go_sdk = use_extension("@rules_go//go:extensions.bzl", "go_sdk")
go_sdk.from_file(go_mod = "//:go.mod")

WORKSPACE code

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "io_bazel_rules_go",
    sha256 = "0b805c94fb3730dc23df32925ed477b3f4ed37b56075dcac6f218c3ea7b4ab42",
    urls = [
        "https://mirror.bazel.build/github.com/bazel-contrib/rules_go/releases/download/v0.62.0/rules_go-v0.62.0.zip",
        "https://github.com/bazel-contrib/rules_go/releases/download/v0.62.0/rules_go-v0.62.0.zip",
    ],
)

load("@io_bazel_rules_go//go:deps.bzl", "go_register_toolchains", "go_rules_dependencies")

go_rules_dependencies()

go_register_toolchains(version = "1.26.5")

# Create the host platform repository transitively required by rules_go.
load("@bazel_tools//tools/build_defs/repo:utils.bzl", "maybe")
load("@platforms//host:extension.bzl", "host_platform_repo")

maybe(
    host_platform_repo,
    name = "host_platform",
)

What's Changed

New Contributors

Full Changelog: bazel-contrib/rules_go@v0.61.1...v0.62.0

bazel-contrib/rules_oci (rules_oci)

v2.3.0

Using bzlmod with Bazel 6 or later:

  1. Add common --enable_bzlmod to .bazelrc.

  2. Add to your MODULE.bazel file:

bazel_dep(name = "rules_oci", version = "2.3.0")

# For testing, we also recommend https://registry.bazel.build/modules/container_structure_test

oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")

# Declare external images you need to pull, for example: 
oci.pull(
    name = "distroless_base",
    # 'latest' is not reproducible, but it's convenient.
    # During the build we print a WARNING message that includes recommended 'digest' and 'platforms'
    # values which you can use here in place of 'tag' to pin for reproducibility.
    tag = "latest",
    image = "gcr.io/distroless/base",
    platforms = ["linux/amd64"],
)

# For each oci.pull call, repeat the "name" here to expose them as dependencies.
use_repo(oci, "distroless_base")

Using WORKSPACE:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_oci",
    sha256 = "e987cab7a35475cb9c9060fc3f338a1fc8896c240295a3272968b217acefd0cb",
    strip_prefix = "rules_oci-2.3.0",
    url = "https://github.com/bazel-contrib/rules_oci/releases/download/v2.3.0/rules_oci-v2.3.0.tar.gz",
)

load("@rules_oci//oci:dependencies.bzl", "rules_oci_dependencies")

rules_oci_dependencies()

load("@rules_oci//oci:repositories.bzl", "oci_register_toolchains")

oci_register_toolchains(name = "oci")

# You can pull your base images using oci_pull like this:
load("@rules_oci//oci:pull.bzl", "oci_pull")

oci_pull(
    name = "distroless_base",
    digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86",
    image = "gcr.io/distroless/base",
    platforms = [
        "linux/amd64",
        "linux/arm64",
    ],
)

What's Changed

New Contributors

Full Changelog: bazel-contrib/rules_oci@v2.2.7...v2.3.0

v2.2.7

Using bzlmod with Bazel 6 or later:

  1. Add common --enable_bzlmod to .bazelrc.

  2. Add to your MODULE.bazel file:

bazel_dep(name = "rules_oci", version = "2.2.7")

# For testing, we also recommend https://registry.bazel.build/modules/container_structure_test

oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")

# Declare external images you need to pull, for example: 
oci.pull(
    name = "distroless_base",
    # 'latest' is not reproducible, but it's convenient.
    # During the build we print a WARNING message that includes recommended 'digest' and 'platforms'
    # values which you can use here in place of 'tag' to pin for reproducibility.
    tag = "latest",
    image = "gcr.io/distroless/base",
    platforms = ["linux/amd64"],
)

# For each oci.pull call, repeat the "name" here to expose them as dependencies.
use_repo(oci, "distroless_base")

Using WORKSPACE:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_oci",
    sha256 = "b8db7ab889d501db33313620b2c8040dbb07e95c26a0fefe06004b35baf80e08",
    strip_prefix = "rules_oci-2.2.7",
    url = "https://github.com/bazel-contrib/rules_oci/releases/download/v2.2.7/rules_oci-v2.2.7.tar.gz",
)

load("@rules_oci//oci:dependencies.bzl", "rules_oci_dependencies")

rules_oci_dependencies()

load("@rules_oci//oci:repositories.bzl", "oci_register_toolchains")

oci_register_toolchains(name = "oci")

# You can pull your base images using oci_pull like this:
load("@rules_oci//oci:pull.bzl", "oci_pull")

oci_pull(
    name = "distroless_base",
    digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86",
    image = "gcr.io/distroless/base",
    platforms = [
        "linux/amd64",
        "linux/arm64",
    ],
)

What's Changed

New Contributors

Full Changelog: bazel-contrib/rules_oci@v2.2.6...v2.2.7

shogo82148/actions-goveralls (shogo82148/actions-goveralls)

v1.11.1

Compare Source

What's Changed

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Monday through Friday (* * * * 1-5)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

gemini-code-assist[bot]
gemini-code-assist Bot reviewed Jun 30, 2026
View reviewed changes

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the google.golang.org/grpc dependency from v1.81.1 to v1.82.0 in go.mod and go.sum. Feedback suggests updating MODULE.bazel as well to keep the dependency versions in sync across build configurations.

Comment thread go.mod Outdated
github.com/openconfig/monax v0.0.0-20260626002019-e784596c3dca
go.mozilla.org/pkcs7 v0.9.0
google.golang.org/grpc v1.81.1
google.golang.org/grpc v1.82.0

@gemini-code-assist gemini-code-assist Bot Jun 30, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

The dependency version of google.golang.org/grpc is updated to v1.82.0 in go.mod, but MODULE.bazel is not updated. To keep dependency versions in sync, update MODULE.bazel to use v1.82.0 if it has been published to the Bazel Central Registry (BCR).

References
  1. Dependency versions should be kept in sync between go.mod and MODULE.bazel.

@renovate-bot renovate-bot changed the title chore(all): update module google.golang.org/grpc to v1.82.0 chore(all): update deps Jun 30, 2026
@renovate-bot
renovate-bot force-pushed the renovate/deps branch 4 times, most recently from 7c5932e to 70ca12f Compare July 7, 2026 19:43
@renovate-bot
renovate-bot force-pushed the renovate/deps branch 4 times, most recently from 9e02ce4 to b212c3b Compare July 15, 2026 05:28
@renovate-bot
renovate-bot force-pushed the renovate/deps branch 9 times, most recently from a023a4e to df3ebd9 Compare July 22, 2026 17:03
@renovate-bot
renovate-bot force-pushed the renovate/deps branch 7 times, most recently from f23ad9a to b174f09 Compare July 30, 2026 08:39
@renovate-bot
renovate-bot force-pushed the renovate/deps branch 4 times, most recently from fa852c6 to f3c9b6d Compare August 7, 2026 02:11
@renovate-bot
renovate-bot force-pushed the renovate/deps branch 10 times, most recently from 1543528 to 59879c3 Compare August 17, 2026 13:09
@renovate-bot
renovate-bot force-pushed the renovate/deps branch 5 times, most recently from 32bd5f4 to bf65454 Compare August 20, 2026 08:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

1 more reviewer
@gemini-code-assist gemini-code-assist[bot] gemini-code-assist[bot] left review comments
Reviewers whose approvals may not affect merge requirements

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@renovate-bot