Skip to content

chore(all): update deps - #353

Open
renovate-bot wants to merge 1 commit into
openconfig:mainfrom
renovate-bot:renovate/deps
Open

chore(all): update deps#353
renovate-bot wants to merge 1 commit into
openconfig:mainfrom
renovate-bot:renovate/deps

Conversation

@renovate-bot

@renovate-bot renovate-bot commented Jun 30, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Age Confidence
actions/checkout (changelog) action digest df4cb1c → d23441a
actions/checkout action minor v6.0.3 → v6.1.0 age confidence
aspect_bazel_lib bazel_dep minor 2.21.2 → 2.22.5 age confidence
bazel minor 8.7.0 → 8.8.1 age confidence
crate-ci/typos action minor v1.47.2 → v1.50.3 age confidence
distroless_base oci_pull digest f5a3067 → 389cad2
gazelle bazel_dep minor 0.51.3 → 0.54.0 age confidence
github.com/insomniacslk/dhcp require digest a415979 → 234b974 age confidence
github.com/openconfig/attestz require patch v0.6.15 → v0.6.17 age confidence
github.com/openconfig/monax require minor v0.0.0-20260720151517-883500dc841b → v0.1.0 age confidence
go uses-with minor 1.26.4 → 1.27.1 age confidence
go.mozilla.org/pkcs7 require minor v0.9.0 → v0.10.0 age confidence
golang (source) minor 1.26.4 → 1.27.1 age confidence
google.golang.org/protobuf require patch v1.36.12-0.20260120151049-f2248ac996af → v1.36.12 age confidence
grpc bazel_dep minor 1.81.1 → 1.84.0 age confidence
rules_go bazel_dep minor 0.61.1 → 0.64.1 age confidence
rules_oci bazel_dep minor 2.2.6 → 2.3.0 age confidence
shogo82148/actions-goveralls action patch v1.11.0 → v1.11.3 age confidence
tar.bzl bazel_dep minor 0.5.1 → 0.10.9 age confidence

Release Notes

actions/checkout (actions/checkout)

v6.1.0

Compare Source

bazelbuild/bazel (bazel)

v8.8.1

Compare Source


Release Notes:

v8.8.0

Compare Source


Release Notes:
crate-ci/typos (crate-ci/typos)

v1.50.3

Compare Source

[1.50.3] - 2026-09-25

Fixes
  • Don'y panicwhen case-converting non-ASCII corrections

v1.50.2

Compare Source

[1.50.2] - 2026-09-15

Fixes
  • Don't panic when files being examined are removed

v1.50.1

Compare Source

[1.50.1] - 2026-09-01

Fixes
  • Don't correct asend in Python code

v1.50.0

Compare Source

[1.50.0] - 2026-08-28

Features

v1.49.1

Compare Source

[1.49.1] - 2026-08-27

Fixes
  • Don't correct the brand name HashiCorp

v1.49.0

Compare Source

[1.49.0] - 2026-08-03

Features
  • Updated the dictionary with the July 2026 changes

v1.48.0

Compare Source

[1.48.0] - 2026-06-30

Features
  • Updated the dictionary with the June 2026 changes
bazel-contrib/bazel-gazelle (gazelle)

v0.54.0

Using Bzlmod

bazel_dep(name = "gazelle", version = "0.54.0")

Using WORKSPACE

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
http_archive(
    name = "bazel-gazelle",
    sha256 = "9dae87c03ea06b2990b8836256909a18367e191f885d5bb1d030e8ba80491b42",
    url = "https://github.com/bazel-contrib/bazel-gazelle/releases/download/v0.54.0/bazel-gazelle-v0.54.0.tar.gz",
)
load("@bazel-gazelle//:deps.bzl", "gazelle_dependencies")
gazelle_dependencies()

What's Changed

New Contributors

Full Changelog: bazel-contrib/bazel-gazelle@v0.53.0...v0.54.0

v0.53.0

Using Bzlmod

bazel_dep(name = "gazelle", version = "0.53.0")

Using WORKSPACE

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
http_archive(
    name = "bazel-gazelle",
    sha256 = "fec7a24acb027359eb7d2b31d116b17c81d2fab35842f6bfb2dd5945e1071346",
    url = "https://github.com/bazel-contrib/bazel-gazelle/releases/download/v0.53.0/bazel-gazelle-v0.53.0.tar.gz",
)
load("@bazel-gazelle//:deps.bzl", "gazelle_dependencies")
gazelle_dependencies()

What's Changed

New Contributors

Full Changelog: bazel-contrib/bazel-gazelle@v0.52.2...v0.53.0

v0.52.2

Using Bzlmod

bazel_dep(name = "gazelle", version = "0.52.2")

Using WORKSPACE

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
http_archive(
    name = "bazel-gazelle",
    sha256 = "6549bd37cf1b82bac406119aef1b26bfec5d1c02d0d5a5518275e4513f47b3b2",
    url = "https://github.com/bazel-contrib/bazel-gazelle/releases/download/v0.52.2/bazel-gazelle-v0.52.2.tar.gz",
)
load("@bazel-gazelle//:deps.bzl", "gazelle_dependencies")
gazelle_dependencies()

What's Changed

Full Changelog: bazel-contrib/bazel-gazelle@v0.52.1...v0.52.2

openconfig/attestz (github.com/openconfig/attestz)

v0.6.17

Compare Source

What's Changed

New Contributors

Full Changelog: openconfig/attestz@v0.6.16...v0.6.17

v0.6.16

Compare Source

What's Changed

New Contributors

Full Changelog: openconfig/attestz@v0.6.15...v0.6.16

actions/go-versions (go)

v1.27.1: 1.27.1

Compare Source

Go 1.27.1

v1.27.0: 1.27.0

Compare Source

Go 1.27.0

v1.26.8: 1.26.8

Compare Source

Go 1.26.8

v1.26.7: 1.26.7

Compare Source

Go 1.26.7

v1.26.6: 1.26.6

Compare Source

Go 1.26.6

v1.26.5: 1.26.5

Compare Source

Go 1.26.5

mozilla-services/pkcs7 (go.mozilla.org/pkcs7)

v0.10.0

Compare Source

What's Changed

  • Fix out-of-bounds panic in ber2der on malformed BER input by @​hneiva in #​94

Full Changelog: mozilla-services/pkcs7@v0.9.0...v0.10.0

golang/go (golang)

v1.27.1

v1.27.0

v1.26.8

v1.26.7

v1.26.6

v1.26.5

grpc/grpc (grpc)

v1.84.0

This is release 1.84.0 (gimbal) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

  • [promise_based_filter] enable v2_non_owning_waker_implementation experiment. (#​43253)
  • [xDS] allow server listener address to match wildcard port. (#​43247)
  • [WRR] remove env var guard for custom backend metrics. (#​43198)
  • [subchannel] enable connection scaling service config fields. (#​43116)
  • [subchannel] add metrics as per A94. (#​43140)
  • Fix incorrect hostname suffix matching in no_proxy handling (prevents proxy bypass). (#​41915)

C#

  • [C# Grpc.Tools] Add native macOS ARM64 support via universal binaries. (#​41222)

Python

  • [Python] Fix -Werror=unused-result error triggered by Cythonized code. (#​43313)
  • [Python] Release Python 3.15 wheels publicly. (#​43259)
  • [Python][AsyncIO] Fixed reference cycles. (#​43121)
  • [Python] fix: remove ghost key in grpc.aio.Metadata.delitem when last value is deleted. (#​42974)
  • [Python] Fix the StatusCode Enums to be int. (#​43167)
  • [Python] Fixed the parenthesis placement. (#​43111)
  • [Python] Removed UsageError exception from registered method. (#​43086)
  • [Python] Added registered methods support in AsyncIO stack . (#​41796)
  • [Python] AIO Part 4 - Typehints fixes and add Pyright for aio/_channel.py. (#​42736)
  • [Python] grpc-status: Relax protobuf dependency lower bound to allow 6.x. (#​43000)
  • [Python] Observability plugin fixes. (#​42785)

Ruby

  • [Ruby] Fix: Addressed Array of strings passed as metadata. (#​42827)

v1.83.1

This is release gRPC Core 1.83.1 (garden).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

v1.83.0

This is release 1.83.0 (garden) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

  • [Security] Default to Post-Quantum Cryptography in TLS key exchange. (#​42560)
  • [authz] don't pass RBAC policy by value when constructing authorization engine. (#​42636)

C#

  • Migrate CSharp Grpc.Tools to new DotNet Version. (#​42661)
  • [C#] Tools - Build: Fix protoc SIGSEGV on ARM64 by aligning max-page-size and migrating to manylinux_2_28. (#​42590)

Python

  • [Backport][v1.83.x][Python] grpc-status: Relax protobuf dependency lower bound to allow 6.x. (#​43001)
  • [Python] Add abort_with_status to the aio ServicerContext ABC. (#​42733)
  • [Python] Update lower bound for protobuf from 6.33.5 to 7.35.1. (#​42914)
  • [Python] Pyright typeCheckingMode - standard. (#​42739)
  • [Python] Support Python 3.15 - Upgrade bazel dep rules_python to 2.0.2. (#​42637)
  • [Python] Hide internal symbols from Python's cygrpc shared object. (#​42325)
  • [Python] Handle custom Interceptor exceptions in InterceptedCall APIs . (#​42593)

v1.82.1

This is release gRPC Core 1.82.1 (glacier).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

What's Changed

Python

Full Changelog: grpc/grpc@v1.82.0...v1.82.1

v1.82.0

This is release gRPC Core 1.82.0 (glacier).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.
This is release 1.82.0 (glacier) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

  • [call creds] Add support for looking up and attaching regional access boundary policy metadata. (#​41594)
  • Unregister CFStream callbacks during endpoint shutdown. (#​42211)
  • Fix fd 0 incorrectly treated as invalid across POSIX socket code. (#​41764)
  • [xDS] enable new ORCA-to-LRS propagation behavior (gRFC A85). (#​42411)
  • [RetryFilter::LegacyCallData]: avoid tripping abseil nullopt assertion. (#​42405)
  • [xds] Implement A114: WRR support for custom backend metrics. (#​41750)
  • [Core] Upgrade to protobuf 35 (#​42512)

PHP

  • [Backport][v1.82.x][PHP] Add PIE support for PHP extention. (#​42873)

Python

Added 2026-07-12:
CAUTION! This gRPC Python release 1.82.0 was yanked from PyPI on 2026-07-07 due to issue #​42906.

  • [Python] [Pyright] Part 2 - Pyright for src/python/grpcio/grpc/aio/_call.py. (#​42272)
  • [Python][aio] Fix issue #​42393: 100% CPU when Python run with -O flag. (#​42470)
  • [Python] [Typeguard] Part 6 - Add Typeguard SYNC Stack in tests. (#​40353)
  • [Python] [Pyright] Part 3 - Pyright for src/python/grpcio/grpc/aio/_metadata.py. (#​42273)
  • [Python] Cancel calls without closing channels in fork child. (#​41784)
  • [Python] Migrated to protobuf 3.35.

Ruby

  • [Ruby] Implemented Pure Ruby Call Credentials. (#​41946)
  • [Ruby] Fix Ruby interceptors not running in FIFO order. (#​42346)
bazelbuild/rules_go (rules_go)

v0.64.1

MODULE.bazel code

bazel_dep(name = "rules_go", version = "0.64.1")

go_sdk = use_extension("@rules_go//go:extensions.bzl", "go_sdk")
go_sdk.from_file(go_mod = "//:go.mod")

WORKSPACE code

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "io_bazel_rules_go",
    sha256 = "4306d89e9541b5ce31108c2bd34c319dbfd6589a272dcbdc04dccdd89ff009d9",
    urls = [
        "https://github.com/bazel-contrib/rules_go/releases/download/v0.64.1/rules_go-v0.64.1.zip",
    ],
)

load("@io_bazel_rules_go//go:deps.bzl", "go_register_toolchains", "go_rules_dependencies")

go_rules_dependencies()

go_register_toolchains(version = "1.27.1")

# Create the host platform repository transitively required by rules_go.
load("@bazel_tools//tools/build_defs/repo:utils.bzl", "maybe")
load("@platforms//host:extension.bzl", "host_platform_repo")

maybe(
    host_platform_repo,
    name = "host_platform",
)

What's Changed

Full Changelog: bazel-contrib/rules_go@v0.64.0...v0.64.1

v0.64.0

MODULE.bazel code

bazel_dep(name = "rules_go", version = "0.64.0")

go_sdk = use_extension("@rules_go//go:extensions.bzl", "go_sdk")
go_sdk.from_file(go_mod = "//:go.mod")

WORKSPACE code

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "io_bazel_rules_go",
    sha256 = "3bf3a9d3a90a10d94e0bebbfe6eabee9fd38cdc72397a7f48fc7059290cc2453",
    urls = [
        "https://github.com/bazel-contrib/rules_go/releases/download/v0.64.0/rules_go-v0.64.0.zip",
    ],
)

load("@io_bazel_rules_go//go:deps.bzl", "go_register_toolchains", "go_rules_dependencies")

go_rules_dependencies()

go_register_toolchains(version = "1.27.1")

# Create the host platform repository transitively required by rules_go.
load("@bazel_tools//tools/build_defs/repo:utils.bzl", "maybe")
load("@platforms//host:extension.bzl", "host_platform_repo")

maybe(
    host_platform_repo,
    name = "host_platform",
)

What's Changed

New Contributors

Full Changelog: bazel-contrib/rules_go@v0.63.0...v0.64.0

v0.63.0

MODULE.bazel code

bazel_dep(name = "rules_go", version = "0.63.0")

go_sdk = use_extension("@rules_go//go:extensions.bzl", "go_sdk")
go_sdk.from_file(go_mod = "//:go.mod")

WORKSPACE code

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "io_bazel_rules_go",
    sha256 = "c3e253237109ab2e2a8d3cb075688b98a6e6fce43d849849648e8e3a84f20d6f",
    urls = [
        "https://github.com/bazel-contrib/rules_go/releases/download/v0.63.0/rules_go-v0.63.0.zip",
    ],
)

load("@io_bazel_rules_go//go:deps.bzl", "go_register_toolchains", "go_rules_dependencies")

go_rules_dependencies()

go_register_toolchains(version = "1.26.6")

# Create the host platform repository transitively required by rules_go.
load("@bazel_tools//tools/build_defs/repo:utils.bzl", "maybe")
load("@platforms//host:extension.bzl", "host_platform_repo")

maybe(
    host_platform_repo,
    name = "host_platform",
)

What's Changed

New Contributors

Full Changelog: bazel-contrib/rules_go@v0.62.0...v0.63.0

v0.62.0

Author: zbarsky-bot

MODULE.bazel code

bazel_dep(name = "rules_go", version = "0.62.0")

go_sdk = use_extension("@rules_go//go:extensions.bzl", "go_sdk")
go_sdk.from_file(go_mod = "//:go.mod")

WORKSPACE code

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "io_bazel_rules_go",
    sha256 = "0b805c94fb3730dc23df32925ed477b3f4ed37b56075dcac6f218c3ea7b4ab42",
    urls = [
        "https://mirror.bazel.build/github.com/bazel-contrib/rules_go/releases/download/v0.62.0/rules_go-v0.62.0.zip",
        "https://github.com/bazel-contrib/rules_go/releases/download/v0.62.0/rules_go-v0.62.0.zip",
    ],
)

load("@io_bazel_rules_go//go:deps.bzl", "go_register_toolchains", "go_rules_dependencies")

go_rules_dependencies()

go_register_toolchains(version = "1.26.5")

# Create the host platform repository transitively required by rules_go.
load("@bazel_tools//tools/build_defs/repo:utils.bzl", "maybe")
load("@platforms//host:extension.bzl", "host_platform_repo")

maybe(
    host_platform_repo,
    name = "host_platform",
)

What's Changed

New Contributors

Full Changelog: bazel-contrib/rules_go@v0.61.1...v0.62.0

bazel-contrib/rules_oci (rules_oci)

v2.3.0

Using bzlmod with Bazel 6 or later:

  1. Add common --enable_bzlmod to .bazelrc.

  2. Add to your MODULE.bazel file:

bazel_dep(name = "rules_oci", version = "2.3.0")

# For testing, we also recommend https://registry.bazel.build/modules/container_structure_test

oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")

# Declare external images you need to pull, for example: 
oci.pull(
    name = "distroless_base",
    # 'latest' is not reproducible, but it's convenient.
    # During the build we print a WARNING message that includes recommended 'digest' and 'platforms'
    # values which you can use here in place of 'tag' to pin for reproducibility.
    tag = "latest",
    image = "gcr.io/distroless/base",
    platforms = ["linux/amd64"],
)

# For each oci.pull call, repeat the "name" here to expose them as dependencies.
use_repo(oci, "distroless_base")

Using WORKSPACE:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_oci",
    sha256 = "e987cab7a35475cb9c9060fc3f338a1fc8896c240295a3272968b217acefd0cb",
    strip_prefix = "rules_oci-2.3.0",
    url = "https://github.com/bazel-contrib/rules_oci/releases/download/v2.3.0/rules_oci-v2.3.0.tar.gz",
)

load("@rules_oci//oci:dependencies.bzl", "rules_oci_dependencies")

rules_oci_dependencies()

load("@rules_oci//oci:repositories.bzl", "oci_register_toolchains")

oci_register_toolchains(name = "oci")

# You can pull your base images using oci_pull like this:
load("@rules_oci//oci:pull.bzl", "oci_pull")

oci_pull(
    name = "distroless_base",
    digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86",
    image = "gcr.io/distroless/base",
    platforms = [
        "linux/amd64",
        "linux/arm64",
    ],
)

What's Changed

New Contributors

❗ Important

✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Monday through Friday (* * * * 1-5)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

gemini-code-assist[bot]
gemini-code-assist Bot reviewed Jun 30, 2026
View reviewed changes

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the google.golang.org/grpc dependency from v1.81.1 to v1.82.0 in go.mod and go.sum. Feedback suggests updating MODULE.bazel as well to keep the dependency versions in sync across build configurations.

Comment thread go.mod Outdated
github.com/openconfig/monax v0.0.0-20260626002019-e784596c3dca
go.mozilla.org/pkcs7 v0.9.0
google.golang.org/grpc v1.81.1
google.golang.org/grpc v1.82.0

@gemini-code-assist gemini-code-assist Bot Jun 30, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

The dependency version of google.golang.org/grpc is updated to v1.82.0 in go.mod, but MODULE.bazel is not updated. To keep dependency versions in sync, update MODULE.bazel to use v1.82.0 if it has been published to the Bazel Central Registry (BCR).

References
  1. Dependency versions should be kept in sync between go.mod and MODULE.bazel.

@renovate-bot renovate-bot changed the title chore(all): update module google.golang.org/grpc to v1.82.0 chore(all): update deps Jun 30, 2026
@renovate-bot
renovate-bot force-pushed the renovate/deps branch 4 times, most recently from 7c5932e to 70ca12f Compare July 7, 2026 19:43
@renovate-bot
renovate-bot force-pushed the renovate/deps branch 4 times, most recently from 9e02ce4 to b212c3b Compare July 15, 2026 05:28
@renovate-bot
renovate-bot force-pushed the renovate/deps branch 9 times, most recently from a023a4e to df3ebd9 Compare July 22, 2026 17:03
@renovate-bot
renovate-bot force-pushed the renovate/deps branch 7 times, most recently from f23ad9a to b174f09 Compare July 30, 2026 08:39
@renovate-bot
renovate-bot force-pushed the renovate/deps branch 4 times, most recently from fa852c6 to f3c9b6d Compare August 7, 2026 02:11
@renovate-bot
renovate-bot force-pushed the renovate/deps branch 6 times, most recently from 785f9f0 to 907a684 Compare August 26, 2026 23:00
@renovate-bot
renovate-bot force-pushed the renovate/deps branch 22 times, most recently from c66bc43 to f12c4c3 Compare September 3, 2026 06:02
@forking-renovate

forking-renovate Bot commented Sep 14, 2026 •
edited
Loading

Copy link
Copy Markdown

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 2 additional dependencies were updated

Details:

Package Change
google.golang.org/grpc v1.82.1 -> v1.83.2
golang.org/x/net v0.57.0 -> v0.58.0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

1 more reviewer
@gemini-code-assist gemini-code-assist[bot] gemini-code-assist[bot] left review comments
Reviewers whose approvals may not affect merge requirements

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@renovate-bot