fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
Google.Protobuf	3.33.5 → 3.34.0			nuget	minor
buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go	v1.36.11-20251209175733-2a1774d88802.1 → v1.36.11-20260209202127-80ab13bee0bf.1			require	patch
futures-core (source)	0.3.31 → 0.3.32			dependencies	patch
google-protobuf	^4.0.1 → ^4.0.2			dependencies	patch
google.golang.org/grpc	v1.78.0 → v1.79.1			require	minor
grpc	^4.2.0 → 4.3.1			dependencies	minor
tonic	0.14.3 → 0.14.5			dependencies	patch
tonic-prost	0.14.3 → 0.14.5			dependencies	patch

---

Release Notes

rust-lang/futures-rs (futures-core)

v0.3.32

Compare Source

• Bump MSRV of utility crates to 1.71. (#​2989)
• Soft-deprecate ready! macro in favor of std::task::ready! added in Rust 1.64 (#​2925)
• Soft-deprecate pin_mut! macro in favor of std::pin::pin! added in Rust 1.68 (#​2929)
• Add FuturesOrdered::clear (#​2927)
• Add mpsc::*Receiver::recv (#​2947)
• Add mpsc::*Receiver::try_recv and deprecate mpsc::*Receiver::::try_next (#​2944)
• Implement FusedStream for sink::With (#​2948)
• Add no_std support for shared (#​2868)
• Make Mutex::new() const (#​2956)
• Add #[clippy::has_significant_drop] to guards (#​2967)
• Remove dependency to pin-utils (#​2929)
• Remove dependency on num_cpus (#​2946)
• Performance improvements (#​2983)
• Documentation improvements (#​2925, #​2926, #​2940, #​2971)

protocolbuffers/protobuf-javascript (google-protobuf)

v4.0.2

Compare Source

• stop hardcoding protoc-gen-js plugin version in download script. This fixes an issue where @​protocolbuffers/protoc-gen-js only downloads v4.0.0, which lacks support for editions 2024

Full Changelog: protocolbuffers/protobuf-javascript@v4.0.1...v4.0.2

EDIT: Feb. 27, 2026: macos and windows releases were mistakenly double-zipped, causing further problems for the @​protocolbuffers/protoc-gen-js's download script. Re-uploading the inner zip files to fix.

grpc/grpc-go (google.golang.org/grpc)

v1.79.1: Release 1.79.1

Compare Source

Bug Fixes

• grpc: Remove the -dev suffix from the User-Agent header. (#​8902)

v1.79.0: Release 1.79.0

Compare Source

API Changes

• mem: Add experimental API SetDefaultBufferPool to change the default buffer pool. (#​8806)
  • Special Thanks: @​vanja-p
• experimental/stats: Update MetricsRecorder to require embedding the new UnimplementedMetricsRecorder (a no-op struct) in all implementations for forward compatibility. (#​8780)

Behavior Changes

• balancer/weightedtarget: Remove handling of Addresses and only handle Endpoints in resolver updates. (#​8841)

New Features

• experimental/stats: Add support for asynchronous gauge metrics through the new AsyncMetricReporter and RegisterAsyncReporter APIs. (#​8780)
• pickfirst: Add support for weighted random shuffling of endpoints, as described in gRFC A113.
  • This is enabled by default, and can be turned off using the environment variable GRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING. (#​8864)
• xds: Implement :authority rewriting, as specified in gRFC A81. (#​8779)
• balancer/randomsubsetting: Implement the random_subsetting LB policy, as specified in gRFC A68. (#​8650)
  • Special Thanks: @​marek-szews
• server: Include status detail headers, if available, when terminating a stream during request header processing. (#​8754)
  • Special Thanks: @​joybestourous

Bug Fixes

• credentials/tls: Fix a bug where the port was not stripped from the authority override before validation. (#​8726)
  • Special Thanks: @​Atul1710
• xds/priority: Fix a bug causing delayed failover to lower-priority clusters when a higher-priority cluster is stuck in CONNECTING state. (#​8813)
• health: Fix a bug where health checks failed for clients using legacy compression options (WithDecompressor or RPCDecompressor). (#​8765)
  • Special Thanks: @​sanki92
• transport: Fix an issue where the HTTP/2 server could skip header size checks when terminating a stream early. (#​8769)
  • Special Thanks: @​joybestourous

Performance Improvements

• credentials/alts: Optimize read buffer alignment to reduce copies. (#​8791)
• mem: Optimize pooling and creation of buffer objects. (#​8784)
• transport: Reduce slice re-allocations by reserving slice capacity. (#​8797)

grpc/grpc-dart (grpc)

v4.3.1

Compare Source

• Downgrade meta dependency to 1.16.0

v4.3.0

Compare Source

• Require package:protobuf 5.0.0

hyperium/tonic (tonic)

v0.14.5

Compare Source

What's Changed

• Add max connections setting

Full Changelog: hyperium/tonic@v0.14.4...v0.14.5

v0.14.4

Compare Source

What's Changed

• chore(doc): Replace doc_auto_cfg config with doc_cfg by @​tottoto in #​2428
• fix(web): allow space after : in grpc-status by @​LucioFranco in #​2506

New Contributors

• @​r0x0d made their first contribution in #​2502

Full Changelog: hyperium/tonic@v0.14.3...v0.14.4

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) in timezone Asia/Singapore, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 5 additional dependencies were updated

Details:

Package	Change
golang.org/x/net	v0.47.0 -> v0.48.0
golang.org/x/sys	v0.38.0 -> v0.39.0
golang.org/x/text	v0.31.0 -> v0.32.0
google.golang.org/genproto/googleapis/api	v0.0.0-20251029180050-ab9386a59fda -> v0.0.0-20251202230838-ff82c1b0f217
google.golang.org/genproto/googleapis/rpc	v0.0.0-20251029180050-ab9386a59fda -> v0.0.0-20251202230838-ff82c1b0f217