chore(all): update deps #13403

renovate-bot · 2025-11-24T00:53:19Z

This PR contains the following updates:

Package	Change	Type	Update
cloud.google.com/go/aiplatform	`v1.109.0` → `v1.112.0`	require	minor
cloud.google.com/go/auth	`v0.17.0` → `v0.18.0`	require	minor
cloud.google.com/go/spanner	`v1.86.1` → `v1.87.0`	require	minor
cloud.google.com/go/storage	`v1.57.2` → `v1.58.0`	require	minor
github.com/GoogleCloudPlatform/grpc-gcp-go/grpcgcp	`v1.5.3` → `v1.6.0`	require	minor
github.com/go-git/go-git/v5	`v5.16.3` → `v5.16.4`	require	patch
github.com/google/pprof	`4902fdd` → `d7df1bf`	require	digest
github.com/googleapis/enterprise-certificate-proxy	`v0.3.7` → `v0.3.9`	require	patch
github.com/googleapis/gax-go/v2	`v2.15.0` → `v2.16.0`	require	minor
go.einride.tech/aip	`v0.74.0` → `v0.78.0`	require	minor
golang.org/x/mod	`v0.30.0` → `v0.31.0`	require	minor
golang.org/x/net	`v0.47.0` → `v0.48.0`	require	minor
golang.org/x/oauth2	`v0.33.0` → `v0.34.0`	require	minor
golang.org/x/sync	`v0.18.0` → `v0.19.0`	require	minor
golang.org/x/sys	`v0.38.0` → `v0.39.0`	require	minor
golang.org/x/text	`v0.31.0` → `v0.32.0`	require	minor
golang.org/x/tools	`v0.39.0` → `v0.40.0`	require	minor
google.golang.org/api	`v0.256.0` → `v0.259.0`	require	minor
google.golang.org/api	`v0.258.0` → `v0.259.0`	require	minor
google.golang.org/genproto/googleapis/api	`95abcf5` → `0a764e5`	require	digest
google.golang.org/genproto/googleapis/api	`79d6a2a` → `0a764e5`	require	digest
google.golang.org/genproto/googleapis/rpc	`95abcf5` → `0a764e5`	require	digest
google.golang.org/grpc	`v1.76.0` → `v1.78.0`	require	minor
google.golang.org/grpc	`v1.77.0` → `v1.78.0`	require	minor
google.golang.org/protobuf	`v1.36.10` → `v1.36.11`	require	patch

Release Notes

googleapis/google-cloud-go (cloud.google.com/go/auth)

`v0.18.0`

Compare Source

bigquery:
- Marked stable.
- Schema inference of nullable fields supported.
- Added TimePartitioning to QueryConfig.
firestore: Data provided to DocumentRef.Set with a Merge option can contain
Delete sentinels.
logging: Clients can accept parent resources other than projects.
pubsub:
- pubsub/pstest: A lighweight fake for pubsub. Experimental; feedback welcome.
- Support updating more subscription metadata: AckDeadline,
  RetainAckedMessages and RetentionDuration.
oslogin/apiv1beta: New client for the Cloud OS Login API.
rpcreplay: A package for recording and replaying gRPC traffic.
spanner:
- Add a ReadWithOptions that supports a row limit, as well as an index.
- Support query plan and execution statistics.
- Added OpenCensus support.
storage: Clarify checksum validation for gzipped files (it is not validated
when the file is served uncompressed).

go-git/go-git (github.com/go-git/go-git/v5)

`v5.16.4`

Compare Source

What's Changed

backport plumbing: format/idxfile, prevent panic by @swills in #1732
[backport] build: test, Fix build on Windows. by @pjbgf in #1734
build: Update module golang.org/x/net to v0.38.0 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in #1742
build: Update module github.com/cloudflare/circl to v1.6.1 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in #1741
build: Update module github.com/go-git/go-git/v5 to v5.13.0 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in #1743

Full Changelog: go-git/go-git@v5.16.3...v5.16.4

googleapis/enterprise-certificate-proxy (github.com/googleapis/enterprise-certificate-proxy)

`v0.3.9`

Compare Source

What's Changed

Revert "feat: Add logging for ECP such that it is enabled/disabled using ENABLE_ENTERPRISE_CERTIFICATE_LOGS flag" by @agrawalradhika-cell in #168
chore: Remove logging from http_proxy to reduce noise for customers, will add them back later. by @agrawalradhika-cell in #169

Full Changelog: googleapis/enterprise-certificate-proxy@v0.3.8...v0.3.9

`v0.3.8`

Compare Source

What's Changed

feat: Add logging for ECP such that it is enabled/disabled using ENABLE_ENTERPRISE_CERTIFICATE_LOGS flag by @agrawalradhika-cell in #164
chore: Update version.txt to update version to v0.3.8 by @agrawalradhika-cell in #167

New Contributors

@agrawalradhika-cell made their first contribution in #164

Full Changelog: googleapis/enterprise-certificate-proxy@v0.3.7...v0.3.8

googleapis/gax-go (github.com/googleapis/gax-go/v2)

`v2.16.0`: v2 2.16.0

Compare Source

Features

add IsFeatureEnabled (#454) (2700b8ab)

einride/aip-go (go.einride.tech/aip)

`v0.78.0`

Compare Source

0.78.0 (2025-12-19)

Feature

filtering: minor changes based on review of #361 (7b69d6c)

`v0.77.0`

Compare Source

0.77.0 (2025-12-19)

Feature

introduce experimental improved filtering (f9461fa)

`v0.76.0`

Compare Source

0.76.0 (2025-12-04)

Feature

TP-69: add ValidateImmutableFieldsNotChanged (8782e16)

`v0.75.0`

Compare Source

0.75.0 (2025-11-19)

Feature

allow optional keyword (972120a)

Tests

resourcename/hasParent: add test case for singleton (f2dbcf2)

googleapis/google-api-go-client (google.golang.org/api)

`v0.259.0`

Compare Source

⚠ BREAKING CHANGES

remove firebaseremoteconfig from package list (#3422)

Features

all: Auto-regenerate discovery clients (#3412) (c7d21a4)
all: Auto-regenerate discovery clients (#3415) (6860a5e)
all: Auto-regenerate discovery clients (#3417) (0a99634)
all: Auto-regenerate discovery clients (#3419) (03d987b)
all: Auto-regenerate discovery clients (#3421) (632ee92)
all: Auto-regenerate discovery clients (#3425) (b599823)
Support write checksums in json resumable uploads (#3405) (6e57e38)

Bug Fixes

option: Remove option.WithAuthCredentials from validation (#3420) (2c33732)
Remove firebaseremoteconfig from package list (#3422) (fd0ce7c)
transport: Remove singleton and restore normal usage of otelgrpc.clientHandler (#3424) (24fbfcb), refs #2321 #2329

Miscellaneous Chores

Correct release version (#3426) (a783dbb)

`v0.258.0`

Compare Source

Features

all: Auto-regenerate discovery clients (#3392) (db6e653)
all: Auto-regenerate discovery clients (#3394) (7a9ae94)
all: Auto-regenerate discovery clients (#3395) (dd93f67)
all: Auto-regenerate discovery clients (#3396) (302ad5f)
all: Auto-regenerate discovery clients (#3398) (5dfcd09)
all: Auto-regenerate discovery clients (#3401) (cd3e656)
all: Auto-regenerate discovery clients (#3402) (9e6446a)
all: Auto-regenerate discovery clients (#3404) (453c04a)
all: Auto-regenerate discovery clients (#3406) (af03509)
all: Auto-regenerate discovery clients (#3407) (41e2f8f)
all: Auto-regenerate discovery clients (#3408) (ba64741)
all: Auto-regenerate discovery clients (#3409) (5d17056)
all: Auto-regenerate discovery clients (#3410) (90b301b)
option: Deprecate unsafe credentials JSON loading options (#3356) (a5426fa)

`v0.257.0`

Compare Source

Features

all: Auto-regenerate discovery clients (#3376) (b0c07d2)
all: Auto-regenerate discovery clients (#3380) (47fcc39)
all: Auto-regenerate discovery clients (#3381) (cf5cf20)
all: Auto-regenerate discovery clients (#3382) (2931d4b)
all: Auto-regenerate discovery clients (#3383) (446402e)
all: Auto-regenerate discovery clients (#3384) (d82a5d0)
all: Auto-regenerate discovery clients (#3386) (6a0b46d)
all: Auto-regenerate discovery clients (#3387) (f3dc8f4)
all: Auto-regenerate discovery clients (#3388) (e3ca7fd)
all: Auto-regenerate discovery clients (#3389) (b78dd96)

grpc/grpc-go (google.golang.org/grpc)

`v1.78.0`: Release 1.78.0

Compare Source

Behavior Changes

client: Reject target URLs containing unbracketed colons in the hostname in Go version 1.26+. (#8716)
- Special Thanks: @neild

New Features

stats/otel: Add backend service label to wrr metrics as part of A89. (#8737)
stats/otel: Add subchannel metrics (without the disconnection reason) to eventually replace the pickfirst metrics. (#8738)
client: Wait for all pending goroutines to complete when closing a graceful switch balancer. (#8746)
- Special Thanks: @twz123

Bug Fixes

transport/client : Return status code Unknown on malformed grpc-status. (#8735)
client: Add experimental.AcceptCompressors so callers can restrict the grpc-accept-encoding header advertised for a call. (#8718)
- Special Thanks: @iblancasa
xds: Fix a bug in StringMatcher where regexes would match incorrectly when ignore_case is set to true. (#8723)
xds/resolver:
- Drop previous route resources and report an error when no matching virtual host is found.
- Only log LDS/RDS configuration errors following a successful update and retain the last valid resource to prevent transient failures. (#8711)
client:
- Change connectivity state to CONNECTING when creating the name resolver (as part of exiting IDLE).
- Change connectivity state to TRANSIENT_FAILURE if name resolver creation fails (as part of exiting IDLE).
- Change connectivity state to IDLE after idle timeout expires even when current state is TRANSIENT_FAILURE.
- Fix a bug that resulted in OnFinish call option not being invoked for RPCs where stream creation failed. (#8710)
xdsclient: Fix a race in the xdsClient that could lead to resource-not-found errors. (#8627)

Performance Improvements

mem: Round up to nearest 4KiB for pool allocations larger than 1MiB. (#8705)
- Special Thanks: @cjc25

`v1.77.0`: Release 1.77.0

Compare Source

API Changes

mem: Replace the Reader interface with a struct for better performance and maintainability. (#8669)

Behavior Changes

balancer/pickfirst: Remove support for the old pick_first LB policy via the environment variable GRPC_EXPERIMENTAL_ENABLE_NEW_PICK_FIRST=false. The new pick_first has been the default since v1.71.0. (#8672)

Bug Fixes

xdsclient: Fix a race condition in the ADS stream implementation that could result in resource-not-found errors, causing the gRPC client channel to move to TransientFailure. (#8605)
client: Ignore HTTP status header for gRPC streams. (#8548)
client: Set a read deadline when closing a transport to prevent it from blocking indefinitely on a broken connection. (#8534)
- Special Thanks: @jgold2-stripe
client: Fix a bug where default port 443 was not automatically added to addresses without a specified port when sent to a proxy.
- Setting environment variable GRPC_EXPERIMENTAL_ENABLE_DEFAULT_PORT_FOR_PROXY_TARGET=false disables this change; please file a bug if any problems are encountered as we will remove this option soon. (#8613)
balancer/pickfirst: Fix a bug where duplicate addresses were not being ignored as intended. (#8611)
server: Fix a bug that caused overcounting of channelz metrics for successful and failed streams. (#8573)
- Special Thanks: @hugehoo
balancer/pickfirst: When configured, shuffle addresses in resolver updates that lack endpoints. Since gRPC automatically adds endpoints to resolver updates, this bug only affects custom LB policies that delegate to pick_first but don't set endpoints. (#8610)
mem: Clear large buffers before re-using. (#8670)

Performance Improvements

transport: Reduce heap allocations to reduce time spent in garbage collection. (#8624, #8630, #8639, #8668)
transport: Avoid copies when reading and writing Data frames. (#8657, #8667)
mem: Avoid clearing newly allocated buffers. (#8670)

New Features

outlierdetection: Add metrics specified in gRFC A91. (#8644)
- Special Thanks: @davinci26, @PardhuKonakanchi
stats/opentelemetry: Add support for optional label grpc.lb.backend_service in per-call metrics (#8637)
xds: Add support for JWT Call Credentials as specified in gRFC A97. Set environment variable GRPC_EXPERIMENTAL_XDS_BOOTSTRAP_CALL_CREDS=true to enable this feature. (#8536)
- Special Thanks: @dimpavloff
experimental/stats: Add support for up/down counters. (#8581)

protocolbuffers/protobuf-go (google.golang.org/protobuf)

`v1.36.11`

Compare Source

Full Changelog: protocolbuffers/protobuf-go@v1.36.10...v1.36.11

User-visible changes:
CL/726780: encoding/prototext: Support URL chars in type URLs in text-format.

Bug fixes:
CL/728680: internal/impl: check recursion limit in lazy decoding validation
CL/711015: reflect/protodesc: fix handling of import options in dynamic builds

Maintenance:
CL/728681: reflect/protodesc: add support for edition unstable
CL/727960: all: add EDITION_UNSTABLE support
CL/727940: types: regenerate using latest protobuf v33.2 release
CL/727140: internal/testprotos/lazy: convert .proto files to editions
CL/723440: cmd/protoc-gen-go: add missing annotations for few generated protobuf symbols.
CL/720980: internal/filedesc: remove duplicative Message.unmarshalOptions
CL/716360: internal/encoding/tag: use proto3 defaults if proto3
CL/716520: proto: un-flake TestHasExtensionNoAlloc
CL/713342: compiler/protogen: properly filter option dependencies in go-protobuf plugin.
CL/711200: proto: add test for oneofs containing messages with required fields
CL/710855: proto: add explicit test for a non-nil but empty byte slice

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

forking-renovate · 2025-11-24T00:53:20Z