chore(deps): bump the go-dependencies group across 3 directories with 13 updates by dependabot[bot] · Pull Request #311 · einride/extend

dependabot · 2025-10-01T07:31:44Z

Bumps the go-dependencies group with 5 updates in the / directory:

Package	From	To
github.com/google/go-cmp	`0.6.0`	`0.7.0`
github.com/grpc-ecosystem/grpc-gateway/v2	`2.21.0`	`2.29.0`
go.einride.tech/aip	`0.68.0`	`0.86.2`
go.einride.tech/grpc-service-config	`0.12.0`	`0.14.0`
go.einride.tech/iam	`0.55.0`	`0.57.0`

Bumps the go-dependencies group with 1 update in the /.sage directory: go.einride.tech/sage.
Bumps the go-dependencies group with 5 updates in the /cmd/saga directory:

Package	From	To
github.com/grpc-ecosystem/grpc-gateway/v2	`2.26.3`	`2.29.0`
go.einride.tech/grpc-service-config	`0.12.0`	`0.14.0`
go.einride.tech/iam	`0.56.0`	`0.57.0`
github.com/spf13/cobra	`1.9.1`	`1.10.2`
go.einride.tech/aip-cli	`0.31.0`	`0.36.0`

Updates github.com/google/go-cmp from 0.6.0 to 0.7.0

Release notes

Sourced from github.com/google/go-cmp's releases.

v0.7.0

New API:

(#367) Support compare functions with SortSlices and SortMaps

Panic messaging:

(#370) Detect proto.Message types when failing to export a field

Commits

9b12f36 Detect proto.Message types when failing to export a field (#370)
4dd3d63 fix: type 'aribica' => 'arabica' (#368)
391980c Support compare functions with SortSlices and SortMaps (#367)
See full diff in compare view

Updates github.com/grpc-ecosystem/grpc-gateway/v2 from 2.21.0 to 2.29.0

Release notes

Sourced from github.com/grpc-ecosystem/grpc-gateway/v2's releases.

v2.29.0

What's Changed

fix: use proto.Merge to avoid copylocks with use_opaque_api=true by @emahiro in grpc-ecosystem/grpc-gateway#6383

fix: allow proto3 optional fields in path parameters by @susanachl in grpc-ecosystem/grpc-gateway#6416

Add option to disable HTTP method override by @achew22 in grpc-ecosystem/grpc-gateway#6447

Add Go documentation badge to README by @achew22 in grpc-ecosystem/grpc-gateway#6448

fix: add missing return statements in error handler paths by @jet-go in grpc-ecosystem/grpc-gateway#6561

Deprecate fields and methods if file is deprecated by @aidandj in grpc-ecosystem/grpc-gateway#6613

Add edition 2024 support by @printfn in grpc-ecosystem/grpc-gateway#6622

New Contributors

@emahiro made their first contribution in grpc-ecosystem/grpc-gateway#6383

@susanachl made their first contribution in grpc-ecosystem/grpc-gateway#6416

@jet-go made their first contribution in grpc-ecosystem/grpc-gateway#6561

@aidandj made their first contribution in grpc-ecosystem/grpc-gateway#6613

@printfn made their first contribution in grpc-ecosystem/grpc-gateway#6622

Full Changelog: grpc-ecosystem/grpc-gateway@v2.28.0...v2.29.0

v2.28.0

What's Changed

feat: add option to disable chunked headers by @irenarindos in grpc-ecosystem/grpc-gateway#6354

fix(protoc-gen-openapiv2): fix panic on enum resolution in nested messages by @franchb in grpc-ecosystem/grpc-gateway#6367

New Contributors

@irenarindos made their first contribution in grpc-ecosystem/grpc-gateway#6354

Full Changelog: grpc-ecosystem/grpc-gateway@v2.27.8...v2.28.0

v2.27.8

What's Changed

Fix opaque missing imports casing by @kellen-miller in grpc-ecosystem/grpc-gateway#6304

Revert "fix(protoc-gen-openapiv2): prevent panic when generating OpenAPI for multiple files" by @johanbrandhorst in grpc-ecosystem/grpc-gateway#6309

fix(protoc-gen-openapiv2): fix naming cache for multi-file generation by @franchb in grpc-ecosystem/grpc-gateway#6315

fix(openapiv2): exclude oneof fields from required with proto3 field semantics by @sessa in grpc-ecosystem/grpc-gateway#6335

New Contributors

@sessa made their first contribution in grpc-ecosystem/grpc-gateway#6335

Full Changelog: grpc-ecosystem/grpc-gateway@v2.27.7...v2.27.8

v2.27.7

Re-release of v2.26.7 as v2.27.7 for correct semver ordering.

v2.27.6

What's Changed

feat(generator): harden opaque imports and fix snake case to go casing by @kellen-miller in grpc-ecosystem/grpc-gateway#6279

fix(protoc-gen-openapiv2): prevent panic when generating OpenAPI for multiple files by @franchb in grpc-ecosystem/grpc-gateway#6275

... (truncated)

Commits

ba9b55c chore(deps): update dependency rules_shell to v0.8.0 (#6626)
284a82e chore(deps): update googleapis digest to bcfcbda (#6625)
f74bc7f chore(deps): update google/oss-fuzz digest to d58fd64 (#6624)
efb665d Add edition 2024 support (#6622)
c58da15 chore(deps): update google/oss-fuzz digest to 32b8df7 (#6621)
42997a1 Deprecate fields and methods if file is deprecated (#6613)
6f4af8b chore(deps): update googleapis digest to bf85cad (#6620)
68fde5f chore(deps): update google/oss-fuzz digest to 7b814a1 (#6619)
6da2a46 chore(deps): update googleapis digest to 898f25c (#6617)
c9c7ad4 chore(deps): update googleapis digest to fc96870 (#6616)
Additional commits viewable in compare view

Updates go.einride.tech/aip from 0.68.0 to 0.86.2

Release notes

Sourced from go.einride.tech/aip's releases.

v0.86.2

0.86.2 (2026-05-08)

Bug Fixes

avoid race condition on filter declarations (84a917c9)

v0.86.1

0.86.1 (2026-04-28)

Bug Fixes

ValidateUserSettable failling on UUIDs that begin with a number (13d16f59)

v0.86.0

0.86.0 (2026-04-23)

Feature

add pattern method to resource name (91bd1832)

Chores

fix dependabot cooldown for non-semver ecosystems (ae2ce767)

fix dependabot cooldown for non-semver ecosystems (ef9ed699)

add dependabot cooldown settings (f8dd4b84)

v0.85.0

0.85.0 (2026-04-13)

Feature

Allow filtering on float values with integer inputs (f3e53f4d)

Chores

Bump linter version (620c71b6)

v0.84.0

0.84.0 (2026-03-23)

Breaking Changes

replace ProtoDeclarations with DeclareProtoMessageIdents (e8940585)
This replaces ProtoDeclarations with DeclareProtoMessageIdents.
ProtoDeclarations were limiting in that they did not allow for adding any additional
declarations aside from the included standard functions and filterable field identifiers
declared in the FilterOptions.
</tr></table> 

... (truncated)

Commits

84a917c fix: avoid race condition on filter declarations
13d16f5 fix: ValidateUserSettable failling on UUIDs that begin with a number
91bd183 feat: add pattern method to resource name
ae2ce76 chore: fix dependabot cooldown for non-semver ecosystems
ef9ed69 chore: fix dependabot cooldown for non-semver ecosystems
f8dd4b8 chore: add dependabot cooldown settings
f3e53f4 feat: Allow filtering on float values with integer inputs
620c71b chore: Bump linter version
e894058 feat!: replace ProtoDeclarations with DeclareProtoMessageIdents
9ff4966 fix: remove outdated comment about UUID restriction for resource IDs
Additional commits viewable in compare view

Updates go.einride.tech/grpc-service-config from 0.12.0 to 0.14.0

Release notes

Sourced from go.einride.tech/grpc-service-config's releases.

v0.14.0

0.14.0 (2025-08-12)

Feature

sage v0.370.0 (70af0a2c)

Chores

deps: bump google.golang.org/grpc from 1.72.2 to 1.74.2 (d09f2b6e)

deps: bump golang.org/x/net from 0.33.0 to 0.38.0 (3d86f35d)

deps: bump google.golang.org/grpc from 1.67.1 to 1.72.2 (2e2db82d)

v0.13.0

0.13.0 (2025-05-13)

Feature

allow optional keyword (0add5818)

Documentation

security: add Security Policy (a4e7f8cf)

Chores

deps: run make after updating dependencies (4b023ab2)

deps: bump google.golang.org/protobuf from 1.34.2 to 1.36.6 (142cda2a)

deps: run make after updating dependencies (664cfb72)

deps: bump go.einride.tech/sage from 0.334.0 to 0.354.0 in /.sage (9acad142)

deps: bump golang.org/x/net from 0.28.0 to 0.33.0 (52326e3e)

deps: bump go.einride.tech/sage from 0.314.0 to 0.334.0 in /.sage (b7fac04c)

deps: bump go.einride.tech/sage from 0.305.0 to 0.314.0 in /.sage (d211e68e)

deps: bump google.golang.org/grpc from 1.66.0 to 1.67.1 (35b06b6d)

deps: bump google.golang.org/grpc from 1.65.0 to 1.66.0 (1daae4d4)

deps: bump go.einride.tech/sage from 0.293.0 to 0.305.0 in /.sage (eb77fc44)

deps: bump go.einride.tech/sage from 0.286.0 to 0.293.0 in /.sage (defee272)

Commits

70af0a2 feat: sage v0.370.0
d09f2b6 chore(deps): bump google.golang.org/grpc from 1.72.2 to 1.74.2
3d86f35 chore(deps): bump golang.org/x/net from 0.33.0 to 0.38.0
2e2db82 chore(deps): bump google.golang.org/grpc from 1.67.1 to 1.72.2
0add581 feat: allow optional keyword
4b023ab chore(deps): run make after updating dependencies
142cda2 chore(deps): bump google.golang.org/protobuf from 1.34.2 to 1.36.6
664cfb7 chore(deps): run make after updating dependencies
9acad14 chore(deps): bump go.einride.tech/sage from 0.334.0 to 0.354.0 in /.sage
52326e3 chore(deps): bump golang.org/x/net from 0.28.0 to 0.33.0
Additional commits viewable in compare view

Updates go.einride.tech/iam from 0.55.0 to 0.57.0

Release notes

Sourced from go.einride.tech/iam's releases.

v0.57.0

0.57.0 (2025-11-28)

Feature

add support for optional keyword (c718b181)

Chores

deps: bump golang.org/x/net from 0.33.0 to 0.38.0 (7a30106a)

deps: bump golang.org/x/crypto from 0.31.0 to 0.35.0 (7274778e)

deps: bump go.einride.tech/sage from 0.370.0 to 0.371.1 in /.sage (0c1cf6bb)

deps: bump actions/stale from 9 to 10 (7c56142d)

deps: bump golang.org/x/oauth2 from 0.23.0 to 0.27.0 (e05436f0)

deps: bump go.einride.tech/sage from 0.368.0 to 0.370.0 in /.sage (08d598b7)

deps: bump go.einride.tech/sage from 0.354.0 to 0.368.0 in /.sage (43d52929)

deps: run make after updating dependencies (4536d55c)

deps: bump go.einride.tech/sage from 0.351.1 to 0.354.0 in /.sage (855c8109)

CI

dependabot: update interval to monthly (a6e43e43)

v0.56.1

0.56.1 (2025-03-25)

Bug Fixes

buf: do not use deprecated DEFAULT lint target (d9c6b427)

api-linter: allow foreign type references (7786d464)

Chores

deps: bump go.einride.tech/sage from 0.327.1 to 0.351.1 in /.sage (20ff3ffc)

deps: bump golang.org/x/net from 0.30.0 to 0.33.0 (b18ff52b)

deps: bump golang.org/x/crypto from 0.28.0 to 0.31.0 (583314ed)

deps: bump the all group with 3 updates (c1d722d3)

deps: bump go.einride.tech/sage from 0.326.0 to 0.327.1 in /.sage (a69efa17)

CI

go: bump sage Go version (82062813)

v0.56.0

0.56.0 (2024-10-17)

Feature

mark raw identity tokens as redacted (404468ab)

bump all deps (45b26bb5)

... (truncated)

Commits

c718b18 feat: add support for optional keyword
7a30106 chore(deps): bump golang.org/x/net from 0.33.0 to 0.38.0
7274778 chore(deps): bump golang.org/x/crypto from 0.31.0 to 0.35.0
0c1cf6b chore(deps): bump go.einride.tech/sage from 0.370.0 to 0.371.1 in /.sage
a6e43e4 ci(dependabot): update interval to monthly
7c56142 chore(deps): bump actions/stale from 9 to 10
e05436f chore(deps): bump golang.org/x/oauth2 from 0.23.0 to 0.27.0
08d598b chore(deps): bump go.einride.tech/sage from 0.368.0 to 0.370.0 in /.sage
43d5292 chore(deps): bump go.einride.tech/sage from 0.354.0 to 0.368.0 in /.sage
4536d55 chore(deps): run make after updating dependencies
Additional commits viewable in compare view

Updates google.golang.org/genproto from 0.0.0-20240730163845-b1a4ccb954bf to 0.0.0-20241015192408-796eee8c2d53

Commits

See full diff in compare view

Updates google.golang.org/genproto/googleapis/api from 0.0.0-20240730163845-b1a4ccb954bf to 0.0.0-20260414002931-afd174a4e478

Commits

See full diff in compare view

Updates google.golang.org/grpc from 1.65.0 to 1.80.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.80.0

Behavior Changes

balancer: log a warning if a balancer is registered with uppercase letters, as balancer names should be lowercase. In a future release, balancer names will be treated as case-insensitive; see #5288 for details. (#8837)

xds: update resource error handling and re-resolution logic (#8907)

Re-resolve all LOGICAL_DNS clusters simultaneously when re-resolution is requested.

Fail all in-flight RPCs immediately upon receipt of listener or route resource errors, instead of allowing them to complete.

Bug Fixes

xds: support the LB policy configured in LOGICAL_DNS cluster resources instead of defaulting to pick_first. (#8733)

credentials/tls: perform per-RPC authority validation against the leaf certificate instead of the entire peer certificate chain. (#8831)

xds: enabling A76 ring hash endpoint keys no longer causes EDS resources with invalid proxy metadata to be NACKed when HTTP CONNECT (gRFC A86) is disabled. (#8875)

xds: validate that the sum of endpoint weights in a locality does not exceed the maximum uint32 value. (#8899)

Special Thanks: @RAVEYUS

xds: fix incorrect proto field access in the weighted round robin (WRR) configuration where blackout_period was used instead of weight_expiration_period. (#8915)

Special Thanks: @gregbarasch

xds/rbac: handle addresses with ports in IP matchers. (#8990)

New Features

ringhash: enable gRFC A76 (endpoint hash keys and request hash headers) by default. (#8922)

Performance Improvements

credentials/alts: pool write buffers to reduce memory allocations and usage. (#8919)

grpc: enable the use of pooled write buffers for buffering HTTP/2 frame writes by default. This reduces memory usage when connections are idle. Use the WithSharedWriteBuffer dial option or the SharedWriteBuffer server option to disable this feature. (#8957)

xds/priority: stop caching child LB policies removed from the configuration. This will help reduce memory and cpu usage when localities are constantly switching between priorities. (#8997)

mem: add a faster tiered buffer pool; use the experimental mem.NewBinaryTieredBufferPool function to create such pools. (#8775)

Release 1.79.3

Security

server: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted "deny" rules in interceptors like grpc/authz. Any request with a non-canonical path is now immediately rejected with an Unimplemented error. (#8981)

Release 1.79.2

Bug Fixes

stats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (grpc/grpc-go#8874)

Release 1.79.1

Bug Fixes

grpc: Remove the -dev suffix from the User-Agent header. (grpc/grpc-go#8902)

Release 1.79.0

API Changes

mem: Add experimental API SetDefaultBufferPool to change the default buffer pool. (#8806)

Special Thanks: @vanja-p

experimental/stats: Update MetricsRecorder to require embedding the new UnimplementedMetricsRecorder (a no-op struct) in all implementations for forward compatibility. (#8780)

... (truncated)

Commits

397e45e Change version to 1.80.0 (#8948)
64ebf0a Cherry-pick #8997 to v1.80.x (#9027)
e45ed24 xds/rbac: add additional handling for addresses with ports (#8990) (#9022)
c78d26e Cherry-pick #8957 to v1.80.x (#9007)
bd7cd3c grpc: enforce strict path checking for incoming requests on the server (#8987)
b6597b3 xds/clusterimpl: use xdsConfig for updates and remove redundant fields from L...
1d4fa8a xds: change cdsbalancer to use update from dependency manager (#8907)
8f47d36 attributes: Replace internal map with linked list (#8933)
22e1ee8 xds: add panic recovery in xdsclient resource unmarshalling. (#8895)
7136e99 credentials/alts: Pool write buffers (#8919)
Additional commits viewable in compare view

Updates google.golang.org/protobuf from 1.34.2 to 1.36.11

Updates gotest.tools/v3 from 3.5.1 to 3.5.2

Release notes

Sourced from gotest.tools/v3's releases.

v3.5.2

What's Changed

assert: ensure message is always displayed & fix under bazel by @cstrahan in gotestyourself/gotest.tools#276

go.mod: golang.org/x/tools v0.13.0 for go1.22+ compatibility by @thaJeztah in gotestyourself/gotest.tools#282

poll: Continue(): use format.Message for formatting by @thaJeztah in gotestyourself/gotest.tools#279

fix TestFromDirSymlink on Windows due to missing drive-letter by @thaJeztah in gotestyourself/gotest.tools#283

Fix various linting issues and minor bugs by @thaJeztah in gotestyourself/gotest.tools#280

fix badges in readme, gofmt, and minor linting fix by @thaJeztah in gotestyourself/gotest.tools#284

circleci: add go1.21, go1.22, go1.23, and update golangci-lint to v1.60.3 by @thaJeztah in gotestyourself/gotest.tools#285

assert, assert/cmp: un-deprecate assert.ErrorType for now by @thaJeztah in gotestyourself/gotest.tools#286

New Contributors

@cstrahan made their first contribution in gotestyourself/gotest.tools#276

Full Changelog: gotestyourself/gotest.tools@v3.5.1...v3.5.2

Commits

0b81523 Merge pull request #286 from thaJeztah/undeprecate_ErrorType
c5dad8f Merge pull request #285 from thaJeztah/update_go_versions
160ab0e Remove go1.18 and go1.19
8569bbc Merge pull request #284 from thaJeztah/cleanup_readme
4256834 assert, assert/cmp: un-deprecate assert.ErrorType for now
eb32186 circleci: update golangci-lint to v1.60.3
5fc8473 circleci: add go1.21, go1.22, go1.23
6f26df9 circleci: test generics on go1.20 and windows as well
732dfcf internal/difflib: rename funcs that collided with built-ins
7d95f55 internal/difflib: gofmt
Additional commits viewable in compare view

Updates github.com/grpc-ecosystem/grpc-gateway/v2 from 2.21.0 to 2.29.0

Release notes

Sourced from github.com/grpc-ecosystem/grpc-gateway/v2's releases.

v2.29.0

What's Changed

fix: use proto.Merge to avoid copylocks with use_opaque_api=true by @emahiro in grpc-ecosystem/grpc-gateway#6383

fix: allow proto3 optional fields in path parameters by @susanachl in grpc-ecosystem/grpc-gateway#6416

Add option to disable HTTP method override by @achew22 in grpc-ecosystem/grpc-gateway#6447

Add Go documentation badge to README by @achew22 in grpc-ecosystem/grpc-gateway#6448

fix: add missing return statements in error handler paths by @jet-go in grpc-ecosystem/grpc-gateway#6561

Deprecate fields and methods if file is deprecated by @aidandj in grpc-ecosystem/grpc-gateway#6613

Add edition 2024 support by @printfn in grpc-ecosystem/grpc-gateway#6622

New Contributors

@emahiro made their first contribution in grpc-ecosystem/grpc-gateway#6383

@susanachl made their first contribution in grpc-ecosystem/grpc-gateway#6416

@jet-go made their first contribution in grpc-ecosystem/grpc-gateway#6561

@aidandj made their first contribution in grpc-ecosystem/grpc-gateway#6613

@printfn made their first contribution in grpc-ecosystem/grpc-gateway#6622

Full Changelog: grpc-ecosystem/grpc-gateway@v2.28.0...v2.29.0

v2.28.0

What's Changed

feat: add option to disable chunked headers by @irenarindos in grpc-ecosystem/grpc-gateway#6354

fix(protoc-gen-openapiv2): fix panic on enum resolution in nested messages by @franchb in grpc-ecosystem/grpc-gateway#6367

New Contributors

@irenarindos made their first contribution in grpc-ecosystem/grpc-gateway#6354

Full Changelog: grpc-ecosystem/grpc-gateway@v2.27.8...v2.28.0

v2.27.8

What's Changed

Fix opaque missing imports casing by @kellen-miller in grpc-ecosystem/grpc-gateway#6304

Revert "fix(protoc-gen-openapiv2): prevent panic when generating OpenAPI for multiple files" by @johanbrandhorst in grpc-ecosystem/grpc-gateway#6309

fix(protoc-gen-openapiv2): fix naming cache for multi-file generation by @franchb in grpc-ecosystem/grpc-gateway#6315

fix(openapiv2): exclude oneof fields from required with proto3 field semantics by @sessa in grpc-ecosystem/grpc-gateway#6335

New Contributors

@sessa made their first contribution in grpc-ecosystem/grpc-gateway#6335

Full Changelog: grpc-ecosystem/grpc-gateway@v2.27.7...v2.27.8

v2.27.7

Re-release of v2.26.7 as v2.27.7 for correct semver ordering.

v2.27.6

What's Changed

feat(generator): harden opaque imports and fix snake case to go casing by @kellen-miller in grpc-ecosystem/grpc-gateway#6279

fix(protoc-gen-openapiv2): prevent panic when generating OpenAPI for multiple files by @franchb in grpc-ecosystem/grpc-gateway#6275

... (truncated)

Commits

ba9b55c chore(deps): update dependency rules_shell to v0.8.0 (#6626)
284a82e chore(deps): update googleapis digest to bcfcbda (#6625)
f74bc7f chore(deps): update google/oss-fuzz digest to d58fd64 (#6624)
efb665d Add edition 2024 support (#6622)
c58da15 chore(deps): update google/oss-fuzz digest to 32b8df7 (#6621)
42997a1 Deprecate fields and methods if file is deprecated (#6613)
6f4af8b chore(deps): update googleapis digest to bf85cad (#6620)
68fde5f chore(deps): update google/oss-fuzz digest to 7b814a1 (#6619)
6da2a46 chore(deps): update googleapis digest to 898f25c (#6617)
c9c7ad4 chore(deps): update googleapis digest to fc96870 (#6616)
Additional commits viewable in compare view

Updates go.einride.tech/grpc-service-config from 0.12.0 to 0.14.0

Release notes

Sourced from go.einride.tech/grpc-service-config's releases.

v0.14.0

0.14.0 (2025-08-12)

Feature

sage v0.370.0 (70af0a2c)

Chores

deps: bump google.golang.org/grpc from 1.72.2 to 1.74.2 (d09f2b6e)

deps: bump golang.org/x/net from 0.33.0 to 0.38.0 (3d86f35d)

deps: bump google.golang.org/grpc from 1.67.1 to 1.72.2 (2e2db82d)

v0.13.0

0.13.0 (2025-05-13)

Feature

allow optional keyword (0add5818)

Documentation

security: add Security Policy (a4e7f8cf)

Chores

deps: run make after updating dependencies (4b023ab2)

deps: bump google.golang.org/protobuf from 1.34.2 to 1.36.6 (142cda2a)

deps: run make after updating dependencies (664cfb72)

deps: bump go.einride.tech/sage from 0.334.0 to 0.354.0 in /.sage (9acad142)

deps: bump golang.org/x/net from 0.28.0 to 0.33.0 (52326e3e)

deps: bump go.einride.tech/sage from 0.314.0 to 0.334.0 in /.sage (b7fac04c)

deps: bump go.einride.tech/sage from 0.305.0 to 0.314.0 in /.sage (d211e68e)

deps: bump google.golang.org/grpc from 1.66.0 to 1.67.1 (35b06b6d)

deps: bump google.golang.org/grpc from 1.65.0 to 1.66.0 (1daae4d4)

deps: bump go.einride.tech/sage from 0.293.0 to 0.305.0 in /.sage (eb77fc44)

deps: bump go.einride.tech/sage from 0.286.0 to 0.293.0 in /.sage (defee272)

Commits

70af0a2 feat: sage v0.370.0
d09f2b6 chore(deps): bump google.golang.org/grpc from 1.72.2 to 1.74.2
3d86f35 chore(deps): bump golang.org/x/net from 0.33.0 to 0.38.0
2e2db82 chore(deps): bump google.golang.org/grpc from 1.67.1 to 1.72.2
0add581 feat: allow optional keyword
4b023ab chore(deps): run make after updating dependencies
142cda2 chore(deps): bump google.golang.org/protobuf from 1.34.2 to 1.36.6
664cfb7 chore(deps): run make after updating dependencies
9acad14 chore(deps): bump go.einride.tech/sage from 0.334.0 to 0.354.0 in /.sage
52326e3 chore(deps): bump golang.org/x/net from 0.28.0 to 0.33.0
Additional commits viewable in compare view

Updates go.einride.tech/iam from 0.55.0 to 0.57.0

Release notes

Sourced from go.einride.tech/iam's releases.

v0.57.0

0.57.0 (2025-11-28)

Feature

add support for optional keyword (c718b181)

Chores

deps: bump golang.org/x/net from 0.33.0 to 0.38.0 (7a30106a)

deps: bump golang.org/x/crypto from 0.31.0 to 0.35.0 (7274778e)

deps: bump go.einride.tech/sage from 0.370.0 to 0.371.1 in /.sage (0c1cf6bb)

deps: bump actions/stale from 9 to 10 (7c56142d)

deps: bump golang.org/x/oauth2 from 0.23.0 to 0.27.0 (e05436f0)

deps: bump go.einride.tech/sage from 0.368.0 to 0.370.0 in /.sage (08d598b7)

deps: bump go.einride.tech/sage from 0.354.0 to 0.368.0 in /.sage (43d52929)

deps: run make after updating dependencies (4536d55c)

deps: bump go.einride.tech/sage from 0.351.1 to 0.354.0 in /.sage (855c8109)

CI

dependabot: update interval to monthly (a6e43e43)

v0.56.1

0.56.1 (2025-03-25)

Bug Fixes

buf: do not use deprecated DEFAULT lint target (d9c6b427)

api-linter: allow foreign type references (7786d464)

Chores

deps: bump go.einride.tech/sage from 0.327.1 to 0.351.1 in /.sage (20ff3ffc)

deps: bump golang.org/x/net from 0.30.0 to 0.33.0 (b18ff52b)

deps: bump golang.org/x/crypto from 0.28.0 to 0.31.0 (583314ed)

deps: bump the all group with 3 updates (c1d722d3)

deps: bump go.einride.tech/sage from 0.326.0 to 0.327.1 in /.sage (a69efa17)

CI

go: bump sage Go version (82062813)

v0.56.0

0.56.0 (2024-10-17)

Feature

mark raw identity tokens as redacted (404468ab)

bump all deps (45b26bb5)

... (truncated)

Commits

c718b18 feat: add support for optional keyword
7a30106 chore(deps): bump golang.org/x/net from 0.33.0 to 0.38.0
7274778 chore(deps): bump golang.org/x/crypto from 0.31.0 to 0.35.0
0c1cf6b chore(deps): bump go.einride.tech/sage from 0.370.0 to 0.371.1 in /.sage
a6e43e4 ci(dependabot): update interval to monthly
7c56142 chore(deps): bump actions/stale from 9 to 10
e05436f chore(deps): bump golang.org/x/oauth2 from 0.23.0 to 0.27.0
08d598b chore(deps): bump go.einride.tech/sage from 0.368.0 to 0.370.0 in /.sage
43d5292 chore(deps): bump go.einride.tech/sage from 0.354.0 to 0.368.0 in /.sage
4536d55 chore(deps): run make after updating dependencies
Additional commits viewable in compare view

Updates google.golang.org/genproto from 0.0.0-20240730163845-b1a4ccb954bf to 0.0.0-20241015192408-796eee8c2d53

Commits

See full diff in compare view

Updates google.golang.org/genproto/googleapis/api from 0.0.0-20240730163845-b1a4ccb954bf to 0.0.0-20260414002931-afd174a4e478

Commits

See full diff in compare view

Updates google.golang.org/grpc from 1.65.0 to 1.80.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.80.0

Behavior Changes

balancer: log a warning if a balancer is registered with uppercase letters, as balancer names should be lowercase. In a future release, balancer names will be treated as case-insensitive; see #5288 for details. (#8837)

xds: update resource error handling and re-resolution logic (#8907)

Re-resolve all LOGICAL_DNS clusters simultaneously when re-resolution is requested.

Fail all in-flight RPCs immediately upon receipt of listener or route resource errors, instead of allowing them to complete.

Bug Fixes

xds: support the LB policy configured in LOGICAL_DNS cluster resources instead of defaulting to pick_first. (#8733)

credentials/tls: perform per-RPC authority validation against the leaf certificate instead of the entire peer certificate chain. (#8831)

xds: enabling A76 ring hash endpoint keys no longer causes EDS resources with invalid proxy metadata to be NACKed when HTTP CONNECT (gRFC A86) is disabled. (#8875)

xds: validate that the sum of endpoint weights in a locality does not exceed the maximum uint32 value. (#8899)

Special Thanks: @RAVEYUS

xds: fix incorrect proto field access in the weighted round robin (WRR) configuration where blackout_period was used instead of weight_expiration_period. (#8915)

Special Thanks: @gregbarasch

xds/rbac: handle addresses with ports in IP matchers. (#8990)

New Features

ringhash: enable gRFC A76 (endpoint hash keys and request hash headers) by default. (#8922)

Performance Improvements

credentials/alts: pool write buffers to reduce memory allocations and usage. (#8919)

grpc: enable the use of pooled write buffers for buffering HTTP/2 frame writes by default. This reduces memory usage when connections are idle. Use the WithSharedWriteBuffer dial option or the SharedWriteBuffer server option to disable this feature. (#8957)

xds/priority: stop caching child LB policies removed from the configuration. This will help reduce memory and cpu usage when localities are constantly switching between priorities. (#8997)

mem: add a faster tiered buffer pool; use the experimental mem.NewBinaryTieredBufferPool function to create such pools. (#8775)

Release 1.79.3

Security

server: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted "deny" rules in interceptors like grpc/authz. Any request with a non-canonical path is now immediately rejected with an Unimplemented error. (#8981)

Release 1.79.2

Bug Fixes

stats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (grpc/grpc-go#8874)

Release 1.79.1

Bug Fixes

grpc: Remove the -dev suffix from the User-Agent header. (grpc/grpc-go#8902)

Release 1.79.0

API Changes

mem: Add experimental API SetDefaultBufferPool to change the default buffer pool. (#8806)

Special Thanks: @vanja-p

experimental/stats: Update MetricsRecorder to require embedding the new UnimplementedMetricsRecorder (a no-op struct) in all implementations for forward compatibility. (#8780)

... (truncated)

Commits

397e45e Change version to 1.80.0 (#8948)
64ebf0a Cherry-pick #8997 to v1.80.x (#9027)
e45ed24 xds/rbac: add additional handling for addresses with ports (#8990) (#9022)
c78d26e Cherry-pick #8957 to v1.80.x (#9007)
bd7cd3c grpc: enforce strict path checking for incoming requests on the server (#8987)
b6597b3 xds/clusterimpl: use xdsConfig for updates and remove redundant fields from L...
1d4fa8a xds: change cdsbalancer to use update from dependency manager (#8907)
8f47d36 attributes: Replace internal map with linked lis...
Description has been truncated

… 13 updates Bumps the go-dependencies group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/google/go-cmp](https://github.com/google/go-cmp) | `0.6.0` | `0.7.0` | | [github.com/grpc-ecosystem/grpc-gateway/v2](https://github.com/grpc-ecosystem/grpc-gateway) | `2.21.0` | `2.29.0` | | [go.einride.tech/aip](https://github.com/einride/aip-go) | `0.68.0` | `0.86.2` | | [go.einride.tech/grpc-service-config](https://github.com/einride/grpc-service-config-go) | `0.12.0` | `0.14.0` | | [go.einride.tech/iam](https://github.com/einride/iam-go) | `0.55.0` | `0.57.0` | Bumps the go-dependencies group with 1 update in the /.sage directory: [go.einride.tech/sage](https://github.com/einride/sage). Bumps the go-dependencies group with 5 updates in the /cmd/saga directory: | Package | From | To | | --- | --- | --- | | [github.com/grpc-ecosystem/grpc-gateway/v2](https://github.com/grpc-ecosystem/grpc-gateway) | `2.26.3` | `2.29.0` | | [go.einride.tech/grpc-service-config](https://github.com/einride/grpc-service-config-go) | `0.12.0` | `0.14.0` | | [go.einride.tech/iam](https://github.com/einride/iam-go) | `0.56.0` | `0.57.0` | | [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.9.1` | `1.10.2` | | [go.einride.tech/aip-cli](https://github.com/einride/aip-cli-go) | `0.31.0` | `0.36.0` | Updates `github.com/google/go-cmp` from 0.6.0 to 0.7.0 - [Release notes](https://github.com/google/go-cmp/releases) - [Commits](google/go-cmp@v0.6.0...v0.7.0) Updates `github.com/grpc-ecosystem/grpc-gateway/v2` from 2.21.0 to 2.29.0 - [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases) - [Commits](grpc-ecosystem/grpc-gateway@v2.21.0...v2.29.0) Updates `go.einride.tech/aip` from 0.68.0 to 0.86.2 - [Release notes](https://github.com/einride/aip-go/releases) - [Commits](einride/aip-go@v0.68.0...v0.86.2) Updates `go.einride.tech/grpc-service-config` from 0.12.0 to 0.14.0 - [Release notes](https://github.com/einride/grpc-service-config-go/releases) - [Commits](einride/grpc-service-config-go@v0.12.0...v0.14.0) Updates `go.einride.tech/iam` from 0.55.0 to 0.57.0 - [Release notes](https://github.com/einride/iam-go/releases) - [Commits](einride/iam-go@v0.55.0...v0.57.0) Updates `google.golang.org/genproto` from 0.0.0-20240730163845-b1a4ccb954bf to 0.0.0-20241015192408-796eee8c2d53 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20240730163845-b1a4ccb954bf to 0.0.0-20260414002931-afd174a4e478 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/grpc` from 1.65.0 to 1.80.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.65.0...v1.80.0) Updates `google.golang.org/protobuf` from 1.34.2 to 1.36.11 Updates `gotest.tools/v3` from 3.5.1 to 3.5.2 - [Release notes](https://github.com/gotestyourself/gotest.tools/releases) - [Commits](gotestyourself/gotest.tools@v3.5.1...v3.5.2) Updates `github.com/grpc-ecosystem/grpc-gateway/v2` from 2.21.0 to 2.29.0 - [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases) - [Commits](grpc-ecosystem/grpc-gateway@v2.21.0...v2.29.0) Updates `go.einride.tech/grpc-service-config` from 0.12.0 to 0.14.0 - [Release notes](https://github.com/einride/grpc-service-config-go/releases) - [Commits](einride/grpc-service-config-go@v0.12.0...v0.14.0) Updates `go.einride.tech/iam` from 0.55.0 to 0.57.0 - [Release notes](https://github.com/einride/iam-go/releases) - [Commits](einride/iam-go@v0.55.0...v0.57.0) Updates `google.golang.org/genproto` from 0.0.0-20240730163845-b1a4ccb954bf to 0.0.0-20241015192408-796eee8c2d53 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20240730163845-b1a4ccb954bf to 0.0.0-20260414002931-afd174a4e478 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/grpc` from 1.65.0 to 1.80.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.65.0...v1.80.0) Updates `google.golang.org/protobuf` from 1.34.2 to 1.36.11 Updates `gotest.tools/v3` from 3.5.1 to 3.5.2 - [Release notes](https://github.com/gotestyourself/gotest.tools/releases) - [Commits](gotestyourself/gotest.tools@v3.5.1...v3.5.2) Updates `go.einride.tech/sage` from 0.405.1 to 0.412.0 - [Release notes](https://github.com/einride/sage/releases) - [Commits](einride/sage@v0.405.1...v0.412.0) Updates `github.com/grpc-ecosystem/grpc-gateway/v2` from 2.26.3 to 2.29.0 - [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases) - [Commits](grpc-ecosystem/grpc-gateway@v2.21.0...v2.29.0) Updates `go.einride.tech/grpc-service-config` from 0.12.0 to 0.14.0 - [Release notes](https://github.com/einride/grpc-service-config-go/releases) - [Commits](einride/grpc-service-config-go@v0.12.0...v0.14.0) Updates `go.einride.tech/iam` from 0.56.0 to 0.57.0 - [Release notes](https://github.com/einride/iam-go/releases) - [Commits](einride/iam-go@v0.55.0...v0.57.0) Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20250303144028-a0af3efb3deb to 0.0.0-20260414002931-afd174a4e478 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/grpc` from 1.70.0 to 1.80.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.65.0...v1.80.0) Updates `google.golang.org/protobuf` from 1.36.5 to 1.36.11 Updates `github.com/grpc-ecosystem/grpc-gateway/v2` from 2.26.3 to 2.29.0 - [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases) - [Commits](grpc-ecosystem/grpc-gateway@v2.21.0...v2.29.0) Updates `github.com/spf13/cobra` from 1.9.1 to 1.10.2 - [Release notes](https://github.com/spf13/cobra/releases) - [Commits](spf13/cobra@v1.9.1...v1.10.2) Updates `go.einride.tech/aip-cli` from 0.31.0 to 0.36.0 - [Release notes](https://github.com/einride/aip-cli-go/releases) - [Commits](einride/aip-cli-go@v0.31.0...v0.36.0) Updates `go.einride.tech/grpc-service-config` from 0.12.0 to 0.14.0 - [Release notes](https://github.com/einride/grpc-service-config-go/releases) - [Commits](einride/grpc-service-config-go@v0.12.0...v0.14.0) Updates `go.einride.tech/iam` from 0.56.0 to 0.57.0 - [Release notes](https://github.com/einride/iam-go/releases) - [Commits](einride/iam-go@v0.55.0...v0.57.0) Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20250303144028-a0af3efb3deb to 0.0.0-20260414002931-afd174a4e478 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/grpc` from 1.70.0 to 1.80.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.65.0...v1.80.0) Updates `google.golang.org/protobuf` from 1.36.5 to 1.36.11 --- updated-dependencies: - dependency-name: github.com/google/go-cmp dependency-version: 0.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2 dependency-version: 2.27.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2 dependency-version: 2.27.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2 dependency-version: 2.27.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2 dependency-version: 2.27.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/spf13/cobra dependency-version: 1.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: go.einride.tech/aip dependency-version: 0.73.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: go.einride.tech/aip-cli dependency-version: 0.32.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: go.einride.tech/grpc-service-config dependency-version: 0.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: go.einride.tech/grpc-service-config dependency-version: 0.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: go.einride.tech/grpc-service-config dependency-version: 0.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: go.einride.tech/grpc-service-config dependency-version: 0.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: go.einride.tech/iam dependency-version: 0.56.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: go.einride.tech/iam dependency-version: 0.56.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: go.einride.tech/iam dependency-version: 0.56.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: go.einride.tech/iam dependency-version: 0.56.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: go.einride.tech/sage dependency-version: 0.377.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: google.golang.org/genproto dependency-version: 0.0.0-20241015192408-796eee8c2d53 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: google.golang.org/genproto dependency-version: 0.0.0-20241015192408-796eee8c2d53 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: google.golang.org/genproto/googleapis/api dependency-version: 0.0.0-20250818200422-3122310a409c dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: google.golang.org/genproto/googleapis/api dependency-version: 0.0.0-20250818200422-3122310a409c dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: google.golang.org/genproto/googleapis/api dependency-version: 0.0.0-20250818200422-3122310a409c dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: google.golang.org/genproto/googleapis/api dependency-version: 0.0.0-20250818200422-3122310a409c dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: google.golang.org/grpc dependency-version: 1.75.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: google.golang.org/grpc dependency-version: 1.75.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: google.golang.org/grpc dependency-version: 1.75.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: google.golang.org/grpc dependency-version: 1.75.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: google.golang.org/protobuf dependency-version: 1.36.7 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: google.golang.org/protobuf dependency-version: 1.36.7 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: google.golang.org/protobuf dependency-version: 1.36.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: google.golang.org/protobuf dependency-version: 1.36.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: gotest.tools/v3 dependency-version: 3.5.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: gotest.tools/v3 dependency-version: 3.5.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 1, 2025

dependabot Bot requested a review from a team as a code owner October 1, 2025 07:31

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 1, 2025

dependabot Bot force-pushed the dependabot/go_modules/go-dependencies-57e2aa6935 branch 2 times, most recently from b90ac51 to 8eda096 Compare April 1, 2026 09:04

dependabot Bot force-pushed the dependabot/go_modules/go-dependencies-57e2aa6935 branch from 8eda096 to 7f49855 Compare May 18, 2026 12:55

Navigation Menu

Uh oh!

chore(deps): bump the go-dependencies group across 3 directories with 13 updates - #311

chore(deps): bump the go-dependencies group across 3 directories with 13 updates#311
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/go-dependencies-57e2aa6935

dependabot Bot commented on behalf of github Oct 1, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Oct 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v0.7.0

v2.29.0

What's Changed

New Contributors

v2.28.0

What's Changed

New Contributors

v2.27.8

What's Changed

New Contributors

v2.27.7

v2.27.6

What's Changed

v0.86.2

0.86.2 (2026-05-08)

Bug Fixes

v0.86.1

0.86.1 (2026-04-28)

Bug Fixes

v0.86.0

0.86.0 (2026-04-23)

Feature

Chores

v0.85.0

0.85.0 (2026-04-13)

Feature

Chores

v0.84.0

0.84.0 (2026-03-23)

Breaking Changes

v0.14.0

0.14.0 (2025-08-12)

Feature

Chores

v0.13.0

0.13.0 (2025-05-13)

Feature

Documentation

Chores

v0.57.0

0.57.0 (2025-11-28)

Feature

Chores

CI

v0.56.1

0.56.1 (2025-03-25)

Bug Fixes

Chores

CI

v0.56.0

0.56.0 (2024-10-17)

Feature

Release 1.80.0

Behavior Changes

Bug Fixes

New Features

Performance Improvements

Release 1.79.3

Security

Release 1.79.2

Bug Fixes

Release 1.79.1

Bug Fixes

Release 1.79.0

API Changes

v3.5.2

What's Changed

New Contributors

v2.29.0

What's Changed

New Contributors

v2.28.0

What's Changed

New Contributors

v2.27.8

What's Changed

dependabot Bot commented on behalf of github Oct 1, 2025 •

edited

Loading