fix(deps): update go dependencies - #585
Merged
Merged
Conversation
Contributor
Author
ℹ️ Artifact update noticeFile name: go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
renovate
Bot
force-pushed
the
renovate/go-deps
branch
from
September 21, 2026 16:11
602aa03 to
b382b14
Compare
privateip
approved these changes
Sep 21, 2026
1 task
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v1.9.0→v1.11.2v1.83.2→v1.84.0Release Notes
mdlayher/netlink (github.com/mdlayher/netlink)
v1.11.2Compare Source
where
netlink.Conn.Receivewould block concurrent calls tonetlink.Conn.Sendwhen blocking inrecvmsg.golang.org/x/netandgolang.org/x/sysdependencies.v1.11.1Compare Source
where
netlink.Conn.Receivewould reject valid netlink messages whose headerlength is not aligned. This is common with nfqueue, nflog and conntrack events.
where
netlink.Message.Datacould be silently overwritten by subsequentnetlink.Conn.Receivecalls whennetlink.Config.MessageBufferSizeis enabled,due to pooled buffer reuse.
error handling by usage of
errorspackage.v1.11.0Compare Source
This is the first release of package netlink that only supports Go 1.25+.
critical bug where
netlink.Conn.Receiveandnetlink.Conn.ReceiveIterwouldpanic if the received message was unaligned.
big-endian test fixtures for nlenc and deprecated endian helpers in favor of
binary.NativeEndian.
skipping of tests on big-endian hosts.
golangci-lint to the CI pipeline and fixed all existing lint issues.
dependencies and Go version to 1.25.
v1.10.0Compare Source
Users of this version should upgrade to v1.11.0 as this version contains a
critical bug.
MessageBufferSizeoption tonetlink.Configfor configuring the size of thecopy buffer used for receiving messages. This can improve performance in
high-throughput applications by reducing the number of syscalls needed to
receive messages.
debug logging inspired by libmnl. This is now the new default when setting
NLDEBUGin the environment.netlink.Conn.ReceiveIterfor iterating over responses without collectingthem into a slice. It also optimized
netlink.Conn.Receiveto use this newAPI internally so that less memory is used.
nltest.Conn.Receivecan be used to test that multi-part messages are drainedproperly.
the initial parsing of netlink messages in
netlink.Socket.Receiveby addingan iterator for parsing messages directly from the receive buffer.
integration test benchmarks for multi-part dumps.
the internal peek/allocate logic in
netlink.Socket.Receive. Messages areno longer being copied during peeking and the buffer is allocated to the exact
size of the upcoming message.
where concurrent calls to
netlink.Conn.Receivecould race with each otherwhen handling multi-part messages. Calls to
Receiveare now serialized.handling for truncated messages in
netlink.Socket.Receive.grpc/grpc-go (google.golang.org/grpc)
v1.84.0: Release 1.84.0Compare Source
Behavior Changes
grpc.lb.pick_first.*metrics have been removed and replaced withgrpc.subchannel.*metrics. See gRFC A94 for more details. (#9215)New Features
contains_matchin route header matchers. (#9223)Bug Fixes
ClientConncould get permanently stuck in IDLE when an RPC was canceled during stream creation. Previously, such cancellations triggered stream cleanup twice, corrupting the channel's idleness state and causing subsequent RPCs to fail with deadline exceeded errors. (#9191)Internalinstead of preserving the HTTP-mapped status code and response body. (#9217)Internalif invalid keys or values are found. Previously, invalid metadata from credentials was sent to the server in outgoing HTTP/2 requests. (#9202)io.ErrUnexpectedEOFwhen EOF is encountered after partial header or message body reads. Previously, partial reads could return a plainio.EOF, failing to distinguish truncated data from a clean end of stream. (#9204)PickResult.Metadata) and resolver addresses, failing the RPC with status codeInternalif invalid keys or values are found. Previously, invalid metadata from these sources was sent to the server in outgoing HTTP/2 requests. (#9203)exact_matchstrings. (#9223)prefix_matchorsuffix_matchstrings. Previously, this caused a panic during route matching. (#9223)PrincipalorPermissionrules with:schemeorgrpc-prefixed header matchers. Previously, such configurations could cause DENY policies to fail open. (#9258)hostheader matchers to:authorityin nestedPrincipalandPermissionrules. Previously, this rewrite only applied to top-level rules, causing nestedhostmatchers to never match incoming requests and DENY policies to fail open. (#9258)CidrRangeswith an unset prefix length. Previously, an omittedprefix_lenfield caused a panic during RBAC configuration parsing. (#9250)Performance Improvements
GRPC_GO_EXPERIMENTAL_ALTS_MAX_FRAME_SIZEenvironment variable (default 4KiB, max 512KiB) to configure the maximum ALTS record frame size. (#9268)Configuration
📅 Schedule: (in timezone America/New_York)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.