Skip to content

build(deps): bump google.golang.org/grpc from 1.80.0 to 1.82.1 in the go_modules group across 1 directory - #80

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go_modules-c93f3641e6
Open

build(deps): bump google.golang.org/grpc from 1.80.0 to 1.82.1 in the go_modules group across 1 directory#80
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go_modules-c93f3641e6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 28, 2026

Copy link
Copy Markdown

Bumps the go_modules group with 1 update in the / directory: google.golang.org/grpc.

Updates google.golang.org/grpc from 1.80.0 to 1.82.1

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.82.1

Security

  • server: Stop reading from the connection when flooded by HTTP/2 frames. The default value for this limit is 100 frames, excluding DATA and HEADERS, and may be changed by setting environment variable GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT.
  • xds/rbac: Support Metadata and RequestedServerName permissions matcher fields. If present in a DENY rule, previously these would be ignored and fail-open.
  • xds/rbac: Fix panic when parsing unsupported fields in NotRule/NotId permissions.
  • xds/rbac: Support the deprecated source_ip principal identifier by treating it as equivalent to direct_remote_ip.

Release 1.82.0

Behavior Changes

  • server: Remove support for GRPC_GO_EXPERIMENTAL_DISABLE_STRICT_PATH_CHECKING environment varibale. Strict incoming RPC path validation (which has been the default since v1.79.3) can no longer be disabled. (#9112)
  • transport: Add environment variable to change the default max header list size from 16MB to 8KB. This may be enabled by setting GRPC_GO_EXPERIMENTAL_ENABLE_8KB_DEFAULT_HEADER_LIST_SIZE=true. This will be enabled by default in a subsequent release. (#9019)
  • balancer: Load Balancing policy registry is now case-sensitive. Set GRPC_GO_EXPERIMENTAL_CASE_SENSITIVE_BALANCER_REGISTRIES=false (and file an issue) to revert to case-insensitive behavior. (#9017)

New Features

  • experimental/stats: Expose a new API, NewContextWithLabelCallback, to register a callback that is invoked when telemetry labels are added. (#8877)
  • client: Return a portion of the response body in the error message, when the client receives an unexpected non-gRPC HTTP response, to make debugging easier. (#8929)
  • server: Add environment variable GRPC_GO_SERVER_GOROUTINE_LABELS that controls setting runtime/pprof.Labels on goroutines spawned by the server. Set GRPC_GO_SERVER_GOROUTINE_LABELS=grpc.method=true to add the grpc.method label on goroutines spawned to handle incoming requests. (#9082)

Bug Fixes

  • xds/server: Fix a memory leak of HTTP filter instances occurring when route configurations are updated in-place during a Route Discovery Service (RDS) update. (#9138)
  • grpc: In the deprecated gzip Compressor (used via the deprecated WithCompressor dial option), enforce the MaxRecvMsgSize limit on the decompressed message buffer, preventing excessive memory allocation from highly compressed payloads. (#9114)
  • stats/opentelemetry: Record retry attempts, grpc.previous-rpc-attempts, at the call level and not the attempt level. (#8923)
  • encoding: Ensure Close() is always called on readers returned from Compressor.Decompress if possible. (#9135)
  • channelz: Fix the LastMessageSentTimestamp and LastMessageReceivedTimestamp fields in SocketMetrics to ensure they contain correct timestamp values. (#9109)

Release 1.81.1

Security

  • xds/rbac: Fix a potential authorization bypass caused by incorrectly falling through URI/DNS SANs to Subject Distinguished Name (DN) when matching the authenticated principal name. With this fix, only the first non-empty identity source will be used, as per gRFC A41. (#9111)

Bug Fixes

  • otel: Segregate client and server RPC information used for metrics and traces, to avoid one overwriting the other. (#9081)

Release 1.81.0

Behavior Changes

  • balancer/rls: Switch gauge metrics to asynchronous emission (once per collection cycle) to reduce telemetry noise and align with other gRPC language implementations. (#8808)

Dependencies

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 28, 2026
@github-actions

github-actions Bot commented Jul 28, 2026

Copy link
Copy Markdown
Contributor

Gavel summary

Source Pass Fail Skip Duration
git 154 1 4 6.0s
./site 14 0 0 1.2s
./testrunner/ui 64 0 0 630ms
baseline 18 0 0 492.043µs
changegraph 14 0 0 222ms
commit 115 0 0 1.1s
fixtures 22 0 5 11ms
gavel 10 0 0 160ms
github.com/flanksource/gavel/ai 7 0 0 -
github.com/flanksource/gavel/ai/aifix 18 0 0 -
github.com/flanksource/gavel/claudehistory 16 0 0 -
github.com/flanksource/gavel/cmd/gavel 167 0 0 39.3s
github.com/flanksource/gavel/cmd/gavel/choose 18 0 0 -
github.com/flanksource/gavel/commit 196 0 0 8.4s
github.com/flanksource/gavel/fixtures 143 0 0 150ms
github.com/flanksource/gavel/fixtures/types 10 0 0 -
github.com/flanksource/gavel/git 38 0 0 -
github.com/flanksource/gavel/github 110 0 2 -
github.com/flanksource/gavel/github/activity 8 0 0 -
github.com/flanksource/gavel/github/cache 64 0 5 10ms
github.com/flanksource/gavel/internal/ttyrender 3 0 0 -
github.com/flanksource/gavel/linters 49 0 0 40ms
github.com/flanksource/gavel/linters/betterleaks 14 0 0 10ms
github.com/flanksource/gavel/linters/golangci 2 0 0 -
github.com/flanksource/gavel/linters/jscpd 23 0 0 -
github.com/flanksource/gavel/linters/jscpd/testdata/sample 0 0 1 -
github.com/flanksource/gavel/linters/tsc 11 0 0 -
github.com/flanksource/gavel/pr/ui 45 0 0 -
github.com/flanksource/gavel/prwatch 87 0 0 -
github.com/flanksource/gavel/service 46 0 0 4.5s
github.com/flanksource/gavel/snapshots 19 0 0 830ms
github.com/flanksource/gavel/status 48 0 0 1.5s
github.com/flanksource/gavel/testrunner 147 0 0 4.7s
github.com/flanksource/gavel/testrunner/bench 12 0 0 -
github.com/flanksource/gavel/testrunner/history 6 0 0 -
github.com/flanksource/gavel/testrunner/parsers 90 0 0 120ms
github.com/flanksource/gavel/testrunner/runners 72 0 0 40ms
github.com/flanksource/gavel/testrunner/ui 53 0 0 140ms
github.com/flanksource/gavel/todos 36 0 0 -
github.com/flanksource/gavel/todos/claude 55 0 0 470ms
github.com/flanksource/gavel/todos/types 30 0 0 -
github.com/flanksource/gavel/utils 51 0 0 -
github.com/flanksource/gavel/verify 199 0 0 -
kubernetes 43 0 0 40ms
lint: betterleaks 0 0 1 -
lint: golangci-lint 1 0 0 3m6s
lint: tsc 3 0 0 22.5s
linters 8 0 0 7ms
parsers 22 0 0 765.062µs
runcache 11 0 0 156ms
serve 28 0 0 371ms
testrunner 1 0 0 86ms
ui 20 0 0 46.7s
utils 75 0 0 15ms

Totals: 2516 passed · 1 failed · 18 skipped · 5m25s

Failing tests

git — GetCommitHistory > with author filtering > should filter by author name or email

Unexpected error:
    <*errors.errorString | 0x12cf36960a90>: 
    no commits match the specified criteria
    {
... (3 more lines truncated)

View full results

Bumps the go_modules group with 1 update in the / directory: [google.golang.org/grpc](https://github.com/grpc/grpc-go).


Updates `google.golang.org/grpc` from 1.80.0 to 1.82.1
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.80.0...v1.82.1)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.82.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/go_modules-c93f3641e6 branch from c019987 to 5cc9867 Compare August 2, 2026 17:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants