Skip to content

chore(deps): Bump the dependencies group across 1 directory with 3 updates - #939

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/notifier/pubsub/dependencies-d85071f3c3
Open

chore(deps): Bump the dependencies group across 1 directory with 3 updates#939
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/notifier/pubsub/dependencies-d85071f3c3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 6, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 1 update in the /notifier/pubsub directory: cloud.google.com/go/pubsub/v2.

Updates cloud.google.com/go/pubsub/v2 from 2.4.0 to 2.6.1

Commits

Updates google.golang.org/api from 0.265.0 to 0.285.0

Release notes

Sourced from google.golang.org/api's releases.

v0.285.0

0.285.0 (2026-06-16)

Features

v0.284.0

0.284.0 (2026-06-09)

Features

v0.283.0

0.283.0 (2026-06-01)

Features

v0.282.0

0.282.0 (2026-05-27)

Features

v0.281.0

0.281.0 (2026-05-26)

Features

... (truncated)

Changelog

Sourced from google.golang.org/api's changelog.

0.285.0 (2026-06-16)

Features

0.284.0 (2026-06-09)

Features

0.283.0 (2026-06-01)

Features

0.282.0 (2026-05-27)

Features

0.281.0 (2026-05-26)

Features

0.280.0 (2026-05-19)

... (truncated)

Commits

Updates google.golang.org/grpc from 1.79.3 to 1.81.1

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.81.1

Security

  • xds/rbac: Fix a potential authorization bypass caused by incorrectly falling through URI/DNS SANs to Subject Distinguished Name (DN) when matching the authenticated principal name. With this fix, only the first non-empty identity source will be used, as per gRFC A41. (#9111)

Bug Fixes

  • otel: Segregate client and server RPC information used for metrics and traces, to avoid one overwriting the other. (#9081)

Release 1.81.0

Behavior Changes

  • balancer/rls: Switch gauge metrics to asynchronous emission (once per collection cycle) to reduce telemetry noise and align with other gRPC language implementations. (#8808)

Dependencies

  • Minimum supported Go version is now 1.25. (#8969)

Bug Fixes

  • xds: Use the leaf cluster's security config for the TLS handshake instead of the aggregate cluster's config. (#8956)
  • transport: Send a RST_STREAM when receiving an END_STREAM when the stream is not already half-closed. (#8832)
  • xds: Fix ADS resource name validation to prevent a panic. (#8970)

New Features

  • grpc/stats: Add support for custom labels in per-call metrics (gRFC A108). (#9008)
  • xds: Add support for Server Name Indication (SNI) and SAN validation (gRFC A101). Disabled by default. To enable, set GRPC_EXPERIMENTAL_XDS_SNI=true environment variable. (#9016)
  • xds: Add support to control which fields get propagated from ORCA backend metric reports to LRS load reports (gRFC A85). Disabled by default. To enable, set GRPC_EXPERIMENTAL_XDS_ORCA_LRS_PROPAGATION=true. (#9005)
  • xds: Add metrics to track xDS client connectivity and cached resource state (gRFC A78). (#8807)
  • stats/otel: Enhance grpc.subchannel.disconnections metric by adding disconnection reason to the grpc.disconnect_error label (gRFC A94). This provides granular insights into why subchannels are closing. (#8973)
  • mem: Add mem.Buffer.Slice() API to slice the buffer like a slice. (#8977)

Performance Improvements

  • alts: Pool read buffers to lower memory utilization when sockets are unreadable. (#8964)
  • transport: Pool HTTP/2 framer read buffers to reduce idle memory consumption. Currently limited to Linux for ALTS and non-encrypted transports (TCP, Unix). To disable, set GRPC_GO_EXPERIMENTAL_HTTP_FRAMER_READ_BUFFER_POOLING=false and report any issues. (#9032)

Release 1.80.0

Behavior Changes

  • balancer: log a warning if a balancer is registered with uppercase letters, as balancer names should be lowercase. In a future release, balancer names will be treated as case-insensitive; see #5288 for details. (#8837)
  • xds: update resource error handling and re-resolution logic (#8907)
    • Re-resolve all LOGICAL_DNS clusters simultaneously when re-resolution is requested.
    • Fail all in-flight RPCs immediately upon receipt of listener or route resource errors, instead of allowing them to complete.

Bug Fixes

... (truncated)

Commits

@dependabot dependabot Bot added the Skip-Changelog This doesn't require a change log label Apr 6, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) April 6, 2026 12:24
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/notifier/pubsub/dependencies-d85071f3c3 branch from 51afb7c to a713866 Compare April 13, 2026 13:13
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/notifier/pubsub/dependencies-d85071f3c3 branch 2 times, most recently from e86e3c5 to 00d46b1 Compare April 24, 2026 21:01
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/notifier/pubsub/dependencies-d85071f3c3 branch from 00d46b1 to 595d098 Compare May 4, 2026 15:38
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/notifier/pubsub/dependencies-d85071f3c3 branch 2 times, most recently from 6da09e2 to f239e4e Compare May 25, 2026 18:22
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/notifier/pubsub/dependencies-d85071f3c3 branch 2 times, most recently from 34c3bfd to 2df3e9d Compare June 8, 2026 12:24
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/notifier/pubsub/dependencies-d85071f3c3 branch 2 times, most recently from 237355a to 539a0c5 Compare June 22, 2026 12:23
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/notifier/pubsub/dependencies-d85071f3c3 branch from 539a0c5 to 4778d6a Compare June 29, 2026 12:23
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/notifier/pubsub/dependencies-d85071f3c3 branch 2 times, most recently from 00f20f8 to ba5f6a6 Compare July 13, 2026 12:23
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/notifier/pubsub/dependencies-d85071f3c3 branch from ba5f6a6 to 16016a4 Compare July 20, 2026 12:24
@dependabot
chore(deps): Bump the dependencies group across 1 directory with 3 up…
036680c 
…dates

Bumps the dependencies group with 1 update in the /notifier/pubsub directory: [cloud.google.com/go/pubsub/v2](https://github.com/googleapis/google-cloud-go).


Updates `cloud.google.com/go/pubsub/v2` from 2.4.0 to 2.6.1
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@pubsub/v2.4.0...pubsub/v2.6.1)

Updates `google.golang.org/api` from 0.265.0 to 0.285.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.265.0...v0.285.0)

Updates `google.golang.org/grpc` from 1.79.3 to 1.81.1
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.79.3...v1.81.1)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/pubsub/v2
  dependency-version: 2.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: google.golang.org/api
  dependency-version: 0.272.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: google.golang.org/grpc
  dependency-version: 1.80.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/notifier/pubsub/dependencies-d85071f3c3 branch from 16016a4 to 036680c Compare July 27, 2026 12:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

Skip-Changelog This doesn't require a change log

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants