Skip to content

fix(deps): update all non-major dependencies #196

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
renovate wants to merge 1 commit into
base: master
Choose a base branch
from
Open

fix(deps): update all non-major dependencies #196

renovate wants to merge 1 commit into from

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Oct 31, 2025 •
edited
Loading

This PR contains the following updates:

Package Change Age Confidence Type Update
@grpc/grpc-js (source) ^1.14.0 → ^1.14.3 age confidence dependencies patch
Google.Protobuf 3.33.0 → 3.33.2 age confidence nuget patch
Grpc.Net.Common 2.71.0 → 2.76.0 age confidence nuget minor
actions/setup-go v5.5.0 → v5.6.0 age confidence action minor
buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go v1.36.10-20250912141014-52f32327d4b0.1 → v1.36.11-20251209175733-2a1774d88802.1 age confidence require patch
bytes 1.10.1 → 1.11.0 age confidence dependencies minor
github.com/go-kratos/kratos/v2 v2.9.1 → v2.9.2 age confidence require patch
google.golang.org/grpc v1.76.0 → v1.78.0 age confidence require minor
google.golang.org/protobuf v1.36.10 → v1.36.11 age confidence require patch
grpc ^4.2.0 → 4.3.1 age confidence dependencies minor
grpc-tools (source) ^1.13.0 → ^1.13.1 age confidence dependencies patch
pbjson 0.7.0 → 0.9.0 age confidence dependencies minor
pbjson-types 0.7.0 → 0.9.0 age confidence dependencies minor
prost 0.13.5 → 0.14.1 age confidence dependencies minor
serde (source) 1.0.219 → 1.0.228 age confidence dependencies patch
tonic 0.12.3 → 0.14.2 age confidence dependencies minor

Release Notes

grpc/grpc-node (@​grpc/grpc-js)

v1.14.3: @​grpc/grpc-js 1.14.3

Compare Source

  • Send halfClose immediately after messages to prevent late halfClose issues with Envoy (#​3031 contributed by @​serkanerip)

v1.14.2: @​grpc/grpc-js 1.14.2

Compare Source

v1.14.1: @​grpc/grpc-js 1.14.1

Compare Source

  • Fix a regression of the settings used internally for HTTP/2 sessions (#​3023)
actions/setup-go (actions/setup-go)

v5.6.0

Compare Source

What's Changed

Full Changelog: actions/setup-go@v5...v5.6.0

tokio-rs/bytes (bytes)

v1.11.0

Compare Source

Fixed
  • fix: BytesMut only reuse if src has remaining (#​803)
  • Specialize BytesMut::put::<Bytes> (#​793)
  • Reserve capacity in BytesMut::put (#​794)
  • Change BytesMut::remaining_mut to use isize::MAX instead of usize::MAX (#​795)
Internal changes
  • Guarantee address in slice() for empty slices. (#​780)
  • Rename Vtable::to_* -> Vtable::into_* (#​776)
  • Fix latest clippy warnings (#​787)
  • Ignore BytesMut::freeze doctest on wasm (#​790)
  • Move drop_fn of from_owner into vtable (#​801)
go-kratos/kratos (github.com/go-kratos/kratos/v2)

v2.9.2

Compare Source

Dependencies
  • deps: upgrade kratos version to v2.9.2 (#​3773)
New Features
  • feat(ci): implement comment-check in workflows. (#​3426)
  • feat(consul): support custom tags for service registration (#​3707)
Bug Fixes
  • fix(metadata): ensure Clone creates deep copy of slices (#​3767)
  • fix(http): ignored errors in error message (#​3751)
  • fix: google.protobuf.Empty produces invalid type*pb.google_protobuf_Empty(#​3715) (#​3716)
  • fix(transport/grpc): ClientOption cannot initialize StreamMiddleware(#​3697) (#​3729)
Chores
  • chore(ci): update GitHub Actions dependencies (#​3746)
  • chore(go.mod): update Go version to 1.22 across all modules (#​3745)
  • chore(all): normalize whitespace (#​3713)
Others

  • build(deps): bump peter-evans/create-or-update-comment (#​3761)

  • docs: correct official documentation URLs (#​3768)

  • perf(config): move placeholder regex to package-level variable (#​3769)

  • perf(encoding/form): optimize parseURLQueryMapKey with memory-efficient implementation (#​3770)

  • docs: improve some comments (#​3766)

  • build(deps): bump actions/checkout from 4 to 6 (#​3762)

  • build(deps): bump peter-evans/find-comment from 3.1.0 to 4.0.0 (#​3760)

  • refactor(transport/http): improve compatibility for 'RequestFromServerContext' (#​3749)

  • ci: add missing fi in comment-check.yml (#​3753)

  • refactor: use math/rand/v2 instead of math/rand (#​3752)

  • Revert "支持nacos v2 (#​3493)" (#​3747)

  • 支持nacos v2 (#​3493)

  • style(contrib/registry/kubernetes): simplify namespace empty check in NewRegistry (#​3665)

  • perf(log): optimize key-value pair processing in Filter.Log (#​3664)

  • perf(selector/wrr): optimize map initialization and simplify node comparison (#​3738)

  • build(all): remove unused compatibility files and legacy build tags (#​3735)

  • ci: add Go 1.25 support (#​3736)

  • test(selector/random): update TestWrr to use more reasonable statistical bounds (#​3737)

  • build(deps): bump github/codeql-action from 3 to 4 (#​3744)

New Contributors

Full Changelog: go-kratos/kratos@v2.9.1...v2.9.2

grpc/grpc-go (google.golang.org/grpc)

v1.78.0: Release 1.78.0

Compare Source

Behavior Changes
  • client: Reject target URLs containing unbracketed colons in the hostname in Go version 1.26+. (#​8716)
New Features
  • stats/otel: Add backend service label to wrr metrics as part of A89. (#​8737)
  • stats/otel: Add subchannel metrics (without the disconnection reason) to eventually replace the pickfirst metrics. (#​8738)
  • client: Wait for all pending goroutines to complete when closing a graceful switch balancer. (#​8746)
Bug Fixes
  • transport/client : Return status code Unknown on malformed grpc-status. (#​8735)
  • client: Add experimental.AcceptCompressors so callers can restrict the grpc-accept-encoding header advertised for a call. (#​8718)
  • xds: Fix a bug in StringMatcher where regexes would match incorrectly when ignore_case is set to true. (#​8723)
  • xds/resolver:
    • Drop previous route resources and report an error when no matching virtual host is found.
    • Only log LDS/RDS configuration errors following a successful update and retain the last valid resource to prevent transient failures. (#​8711)
  • client:
    • Change connectivity state to CONNECTING when creating the name resolver (as part of exiting IDLE).
    • Change connectivity state to TRANSIENT_FAILURE if name resolver creation fails (as part of exiting IDLE).
    • Change connectivity state to IDLE after idle timeout expires even when current state is TRANSIENT_FAILURE.
    • Fix a bug that resulted in OnFinish call option not being invoked for RPCs where stream creation failed. (#​8710)
  • xdsclient: Fix a race in the xdsClient that could lead to resource-not-found errors. (#​8627)
Performance Improvements
  • mem: Round up to nearest 4KiB for pool allocations larger than 1MiB. (#​8705)

v1.77.0: Release 1.77.0

Compare Source

API Changes

  • mem: Replace the Reader interface with a struct for better performance and maintainability. (#​8669)

Behavior Changes

  • balancer/pickfirst: Remove support for the old pick_first LB policy via the environment variable GRPC_EXPERIMENTAL_ENABLE_NEW_PICK_FIRST=false. The new pick_first has been the default since v1.71.0. (#​8672)

Bug Fixes

  • xdsclient: Fix a race condition in the ADS stream implementation that could result in resource-not-found errors, causing the gRPC client channel to move to TransientFailure. (#​8605)
  • client: Ignore HTTP status header for gRPC streams. (#​8548)
  • client: Set a read deadline when closing a transport to prevent it from blocking indefinitely on a broken connection. (#​8534)
  • client: Fix a bug where default port 443 was not automatically added to addresses without a specified port when sent to a proxy.
    • Setting environment variable GRPC_EXPERIMENTAL_ENABLE_DEFAULT_PORT_FOR_PROXY_TARGET=false disables this change; please file a bug if any problems are encountered as we will remove this option soon. (#​8613)
  • balancer/pickfirst: Fix a bug where duplicate addresses were not being ignored as intended. (#​8611)
  • server: Fix a bug that caused overcounting of channelz metrics for successful and failed streams. (#​8573)
  • balancer/pickfirst: When configured, shuffle addresses in resolver updates that lack endpoints. Since gRPC automatically adds endpoints to resolver updates, this bug only affects custom LB policies that delegate to pick_first but don't set endpoints. (#​8610)
  • mem: Clear large buffers before re-using. (#​8670)

Performance Improvements

New Features

  • outlierdetection: Add metrics specified in gRFC A91. (#​8644)
  • stats/opentelemetry: Add support for optional label grpc.lb.backend_service in per-call metrics (#​8637)
  • xds: Add support for JWT Call Credentials as specified in gRFC A97. Set environment variable GRPC_EXPERIMENTAL_XDS_BOOTSTRAP_CALL_CREDS=true to enable this feature. (#​8536)
  • experimental/stats: Add support for up/down counters. (#​8581)
protocolbuffers/protobuf-go (google.golang.org/protobuf)

v1.36.11

Compare Source

Full Changelog: protocolbuffers/protobuf-go@v1.36.10...v1.36.11

User-visible changes:
CL/726780: encoding/prototext: Support URL chars in type URLs in text-format.

Bug fixes:
CL/728680: internal/impl: check recursion limit in lazy decoding validation
CL/711015: reflect/protodesc: fix handling of import options in dynamic builds

Maintenance:
CL/728681: reflect/protodesc: add support for edition unstable
CL/727960: all: add EDITION_UNSTABLE support
CL/727940: types: regenerate using latest protobuf v33.2 release
CL/727140: internal/testprotos/lazy: convert .proto files to editions
CL/723440: cmd/protoc-gen-go: add missing annotations for few generated protobuf symbols.
CL/720980: internal/filedesc: remove duplicative Message.unmarshalOptions
CL/716360: internal/encoding/tag: use proto3 defaults if proto3
CL/716520: proto: un-flake TestHasExtensionNoAlloc
CL/713342: compiler/protogen: properly filter option dependencies in go-protobuf plugin.
CL/711200: proto: add test for oneofs containing messages with required fields
CL/710855: proto: add explicit test for a non-nil but empty byte slice

grpc/grpc-dart (grpc)

v4.3.1

Compare Source

  • Downgrade meta dependency to 1.16.0

v4.3.0

Compare Source

  • Require package:protobuf 5.0.0
tokio-rs/prost (prost)

v0.14.1

Compare Source

PROST! is a Protocol Buffers implementation for the Rust Language. prost generates simple, idiomatic Rust code from proto2 and proto3 files.

⚠️ Revert emission of rerun commands

Version 0.14.1 reverts the emission of rerun commands. Other than this change, it is identical to 0.14.0.

In version 0.14.0, prost-build began emitting rerun commands. While intended to improve build correctness, this change caused regressions for some users—for example, those generating protos from an includes directory. These edge cases are difficult to address reliably, so the change has been rolled back in 0.14.1.

For more details, see issue #​1296.

Breaking changes

  • prost: Relax Message Debug trait bound (#​1147)

    BREAKING CHANGE: trait Debug was a supertrait of trait Message. This is no longer required by prost. If your code relies on trait Debug being implemented for every impl Message, you must now explicitly state that you require both Debug and Message. For example: where M: Debug + Message

  • prost: Remove prost-derive feature (#​1247)

    BREAKING CHANGE: Feature flag prost-derive is renamed to derive. Please rename any usage of prost-derive feature in your Cargo.toml.

  • prost-build: Prevent repeated fields to be boxed (#​1237)

    BREAKING CHANGE: A repeated field that is manually marked as boxed was typed as Vec<Box<T>>. Those fields are now simply typed as Vec<T> to prevent double indirection. The boxed configuration is effectively ignored for repeated fields.

  • prost-build: Make type_name_domain cumulative (#​1228)

    BREAKING CHANGE: The configuration for domain names of messages is now cumulative. All calls to prost_build::Config::type_name_domain are now concatenated. The previous behavior was that only the arguments of the last call were used. If you do multiple calls to type_name_domain, you need to remove all but the last call to maintain the same behavior.

  • prost-build: Derive Eq and Hash trait for messages where possible (#​1175)

    BREAKING CHANGE: prost-build will automatically derive trait Eq and trait Hash for types where all field support those as well. If you manually impl Eq and/or impl Hash for generated types, then you need to remove the manual implementation. If you use type_attribute to derive(Eq) and/or derive(Hash), then you need to remove those.

Features

  • prost-types: Implement conversion Duration to/from chrono::TimeDelta (#​1236)
  • prost-build: Prepare for 2024 keyword gen (#​1257)

Dependencies

  • (deps) Update pulldown-cmark to 0.13 (#​1259)
  • (deps) update criterion requirement from 0.5 to 0.6 (#​1280)

Documentation

  • Update dead link LICENSE in prost-types/README.md (#​1262)

Styling

Testing

  • Run tests using edition 2024 (#​1254)
  • Run clippy with edition 2024 enabled (#​1256)

v0.14.0

Compare Source

PROST! is a Protocol Buffers implementation for the Rust Language. prost generates simple, idiomatic Rust code from proto2 and proto3 files.

Breaking changes

  • prost: Relax Message Debug trait bound (#​1147)

    BREAKING CHANGE: trait Debug was a supertrait of trait Message. This is no longer required by prost. If your code relies on trait Debug being implemented for every impl Message, you must now explicitly state that you require both Debug and Message. For example: where M: Debug + Message

  • prost: Remove prost-derive feature (#​1247)

    BREAKING CHANGE: Feature flag prost-derive is renamed to derive. Please rename any usage of prost-derive feature in your Cargo.toml.

  • prost-build: Emit rerun commands (#​1140)

    BREAKING CHANGE: Previously cargo assumed it had to rerun build.rs if any files in the project changed. prost-build will now emit rerun commands, which means only the explicitly marked files cause a rerun. If your build.rs is dependent on any other file paths than those given to prost-build, then your build.rs needs to emit rerun commands as well.

  • prost-build: Prevent repeated fields to be boxed (#​1237)

    BREAKING CHANGE: A repeated field that is manually marked as boxed was typed as Vec<Box<T>>. Those fields are now simply typed as Vec<T> to prevent double indirection. The boxed configuration is effectively ignored for repeated fields.

  • prost-build: Make type_name_domain cumulative (#​1228)

    BREAKING CHANGE: The configuration for domain names of messages is now cumulative. All calls to prost_build::Config::type_name_domain are now concatenated. The previous behavior was that only the arguments of the last call were used. If you do multiple calls to type_name_domain, you need to remove all but the last call to maintain the same behavior.

  • prost-build: Derive Eq and Hash trait for messages where possible (#​1175)

    BREAKING CHANGE: prost-build will automatically derive trait Eq and trait Hash for types where all field support those as well. If you manually impl Eq and/or impl Hash for generated types, then you need to remove the manual implementation. If you use type_attribute to derive(Eq) and/or derive(Hash), then you need to remove those.

Features

  • prost-types: Implement conversion Duration to/from chrono::TimeDelta (#​1236)
  • prost-build: Prepare for 2024 keyword gen (#​1257)

Dependencies

  • (deps) Update pulldown-cmark to 0.13 (#​1259)
  • (deps) update criterion requirement from 0.5 to 0.6 (#​1280)

Documentation

  • Update dead link LICENSE in prost-types/README.md (#​1262)

Styling

Testing

  • Run tests using edition 2024 (#​1254)
  • Run clippy with edition 2024 enabled (#​1256)
hyperium/tonic (tonic)

v0.14.2

Compare Source

What's Changed
New Contributors

Full Changelog: hyperium/tonic@v0.14.1...v0.14.2

v0.14.1

Compare Source

Notable change is to relax the accidental MSRV bump in the last release.

What's Changed
New Contributors

Full Changelog: hyperium/tonic@v0.14.0...v0.14.1

v0.14.0

Compare Source

This release marks an important milestone for tonic, "hopefully" this will be the last major breaking release of Tonic before we start to transition work into bringing the community a joint-effort grpc-rust implementation. For the moment, any new features for the core of tonic that are not related to the work towards grpc-rust will not be accepted (I believe tonic to be in quite a good spot, security features of course will be handled with the upmost importance). Stay tuned there will be more information the coming months on what is going on with the new project but you can already see some of the code in the grpc crate within the tonic repository.

You can always watch this video for more info on grpc-rust.

Breaking Changes

  • Prost updated to v0.14
  • Prost has been extracted to their own crates

Migration guide

To migrate between <=v0.13.1 to v0.14 anything that used prost has now been moved into either tonic-prost or tonic-prost-build. All the previous types are still available but under these two new crates.

What's Changed

New Contributors

Full Changelog: hyperium/tonic@v0.13.1...v0.14.0

v0.13.1

Compare Source

What's Changed

New Contributors

Full Changelog: hyperium/tonic@v0.13.0...v0.13.1

v0.13.0

Compare Source

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) in timezone Asia/Singapore, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the renovate label Oct 31, 2025
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 895a3eb to bdb0147 Compare November 1, 2025 17:46
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 6985e7d to e42c654 Compare November 15, 2025 17:42
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from e42c654 to eea93dc Compare November 19, 2025 00:02
@renovate
Copy link
Contributor Author

renovate bot commented Nov 19, 2025

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 4 additional dependencies were updated

Details:

Package Change
golang.org/x/net v0.42.0 -> v0.46.1-0.20251013234738-63d1a5100f82
golang.org/x/sys v0.34.0 -> v0.37.0
golang.org/x/text v0.27.0 -> v0.30.0
google.golang.org/genproto/googleapis/rpc v0.0.0-20250804133106-a7a43d27e69b -> v0.0.0-20251022142026-3a174f9686a8

@renovate renovate bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 0bdb680 to 3e6be83 Compare December 7, 2025 00:52
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 3e6be83 to 6a943fc Compare December 10, 2025 12:55
@renovate
Copy link
Contributor Author

renovate bot commented Dec 10, 2025 •
edited
Loading

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 4 additional dependencies were updated

Details:

Package Change
golang.org/x/net v0.42.0 -> v0.47.0
golang.org/x/sys v0.34.0 -> v0.38.0
golang.org/x/text v0.27.0 -> v0.31.0
google.golang.org/genproto/googleapis/rpc v0.0.0-20250804133106-a7a43d27e69b -> v0.0.0-20251029180050-ab9386a59fda

@renovate renovate bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 7e0fbe0 to 528e589 Compare December 17, 2025 02:09
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 077905b to fbbffcf Compare December 24, 2025 13:50
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from fbbffcf to 52b2a6e Compare December 31, 2025 16:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

renovate

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant