Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore(deps): update deps #1571

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore(deps): update deps #1571

wants to merge 1 commit into from

Conversation

renovate-bot
Copy link
Contributor

@renovate-bot renovate-bot commented Sep 9, 2024 •
edited
Loading

This PR contains the following updates:

Package Type Update Change Age Adoption Passing Confidence
bazel-contrib/setup-bazel action minor 0.8.5 -> 0.9.0 age adoption passing confidence
cloud.google.com/go require patch v0.115.0 -> v0.115.1 age adoption passing confidence
cloud.google.com/go/iam require minor v1.1.11 -> v1.2.1 age adoption passing confidence
cloud.google.com/go/longrunning require minor v0.5.10 -> v0.6.1 age adoption passing confidence
github.com/jhump/protoreflect require minor v1.16.0 -> v1.17.0 age adoption passing confidence
golang.org/x/text require minor v0.16.0 -> v0.19.0 age adoption passing confidence
google.golang.org/api require minor v0.189.0 -> v0.199.0 age adoption passing confidence
google.golang.org/genproto require digest d784300 -> af27646 age adoption passing confidence
google.golang.org/genproto/googleapis/api require digest d784300 -> af27646 age adoption passing confidence
google.golang.org/genproto/googleapis/rpc require digest d784300 -> af27646 age adoption passing confidence
google.golang.org/grpc require minor v1.64.1 -> v1.67.1 age adoption passing confidence

Release Notes

bazel-contrib/setup-bazel (bazel-contrib/setup-bazel)

v0.9.0

Compare Source

What's Changed
New Contributors

Full Changelog: bazel-contrib/setup-bazel@0.8.5...0.9.0

googleapis/google-cloud-go (cloud.google.com/go)

v0.115.1

Compare Source

Bug Fixes
jhump/protoreflect (github.com/jhump/protoreflect)

v1.17.0

Compare Source

This release deprecates some packages that have newer alternatives in the Protobuf runtime. It also includes some small additions to the grpcreflect and desc/sourceinfo packages. The rest of the changes are bug fixes.

"github.com/jhump/protoreflect/desc"

Changes:

  • This package is now deprecated. Though use of this package is still needed in order to use a handful of other packages in this repo, many usages should instead prefer the "google.golang.org/protobuf/reflect/protoreflect" package in the Protobuf runtime. In a v2 of this repo, this package will no longer be present.
  • A performance improvement was contributed that speeds up the MessageDescriptor.FindFieldByName method.
"github.com/jhump/protoreflect/desc/protoparse"

Changes and bugfixes:

  • This package is now deprecated. Most usages should instead prefer the "github.com/bufbuild/protocompile" package. There are some behavioral differences that we hope to address with additional API and enhancements to protocompile. But the protoparse package here is just a veneer on top of protocompile and we plan to do as little maintenance as possible here. In a v2 of this repo, this package will no longer be present.
  • The protocompile dependency has been updated to use a more recent version of that package. This addresses potential panics when calling Parser.ParseButDontLink.
"github.com/jhump/protoreflect/desc/sourceinfo"

Changes and bugfixes:

  • A possible panic when calling sourceinfo.GlobalFiles.FindDescriptorByName has been fixed.
  • Descriptors returned from the sourceinfo.GlobalFiles registry or from the various Wrap* functions could induce panics in user code if querying for non-existent elements. For example, calling messageDescriptor.Fields().ByNumber(123) could return a typed-nil value on failure, instead of a nil interface. This would result in nil-dereference panics if methods were called on this later. These have been fixed.
  • Descriptors returned from the sourceinfo.GlobalFiles registry and from the various Wrap* functions had concrete types defined in this package, not in the Protobuf runtime. But the protoreflect.Descriptor interface has a "do not implement" marker, indicating that concrete types implementing the interface should not be implemented outside of that module. To avoid future issues with the Protobuf runtime, there are no more implementations in this repo. Instead of wrapping other descriptor implementations (via embedding, and then overriding some methods), this package now builds new descriptors, using the protodesc package in the Protobuf runtime module.
  • The various Wrap* functions are now deprecated. The name is no longer accurate since they no longer return wrapper values. Also the new implementation, which builds new descriptors, can fail (though unlikely), but the existing signature of these functions did not allow for returning an error. So these functions could possibly panic in the face of malformed input descriptors. Users should use the new AddSourceInfoTo* versions of these functions instead.

Additions:

  • Adds AddSourceInfoTo* functions to replace the Wrap* functions. These functions augment the input descriptors by adding source code information to them.
"github.com/jhump/protoreflect/dynamic"

Changes:

  • This package is now deprecated. Most usages should instead prefer the "google.golang.org/protobuf/types/dynamicpb" package in the Protobuf runtime. In a v2 of this repo, this package will no longer be present.
"github.com/jhump/protoreflect/grpcreflect"

Additions:

  • Adds a new NewClientV1 function to return a client that uses v1 of the server reflection service. This fills the gap in the existing factory functions, NewClientV1Alpha and NewClientAuto.
  • Adds a new AllowFallbackResolver method to the *grpcreflect.Client type. This allows the client to be configured with an alternate resolver that can be used as a backup when trying to satisfy dependencies, for cases where the remote server is non-authoritative and unable to provide all of them.
googleapis/google-api-go-client (google.golang.org/api)

v0.199.0

Compare Source

Features

v0.198.0

Compare Source

Features

v0.197.0

Compare Source

Features
Bug Fixes
  • transport: Set UniverseDomain in http.NewClient for new auth (#​2773) (140d0a5)

v0.196.0

Compare Source

Features

v0.195.0

Compare Source

Features

v0.194.0

Compare Source

Features
Bug Fixes

v0.193.0

Compare Source

Features

v0.192.0

Compare Source

Features
Bug Fixes
  • internal/cba: Update credsNewAuth path to use nil oauth2 client (#​2731) (b457582)

v0.191.0

Compare Source

Features
Bug Fixes

v0.190.0

Compare Source

Features
Reverts
grpc/grpc-go (google.golang.org/grpc)

v1.67.1: Release 1.67.1

Compare Source

Bug Fixes

  • transport: Fix a bug causing stream failures due to miscalculation of the flow control window in both clients and servers. (#​7667)
  • xds/server: Fix xDS Server memory leak. (#​7681)

v1.67.0: Release 1.67.0

Compare Source

Bug Fixes

  • ringhash: when used with multiple EDS priorities, fix bug that could prevent a higher priority from recovering from transient failure. (#​7364)

Behavior Changes

  • In accordance with RFC 7540, clients and servers will now reject TLS connections that don't support ALPN. This can be disabled by setting the environment variable GRPC_ENFORCE_ALPN_ENABLED to false (case insensitive). Please file a bug if you encounter any issues with this behavior. The environment variable to revert this behavior will be removed in an upcoming release. (#​7535)

v1.66.3: Release 1.66.3

Compare Source

Bug Fixes

  • transport: Fix a bug causing stream failures due to miscalculation of the flow control window in both clients and servers. (#​7667)
  • xds/server: Fix xDS Server memory leak. (#​7681)

v1.66.2: Release 1.66.2

Compare Source

Dependencies

  • Remove unintentional dependency on the testing package (#​7579)
  • Remove unintentional dependency on the flate package (#​7595)

Bug Fixes

  • client: fix a bug that prevented memory reuse after handling unary RPCs (#​7571)

v1.66.1

Compare Source

v1.66.0: Release 1.66.0

Compare Source

New Features

Bug Fixes

  • grpc: Clients now return status code INTERNAL instead of UNIMPLEMENTED when the server uses an unsupported compressor. This is consistent with the gRPC compression spec. (#​7461)
  • transport: Fix a bug which could result in writes busy looping when the underlying conn.Write returns errors (#​7394)
  • client: fix race that could lead to orphaned connections and associated resources. (#​7390)
  • xds: use locality from the connected address for load reporting with pick_first (#​7378)
    • without this fix, if a priority contains multiple localities with pick_first, load was reported for the wrong locality
  • client: prevent hanging during ClientConn.Close() when the network is unreachable (#​7540)

Performance Improvements

  • transport: double buffering is avoided when using an http connect proxy and the target server waits for client to send the first message. (#​7424)
  • codec: Implement a new Codec which uses buffer recycling for encoded message (#​7356)

v1.65.0: Release 1.65.0

Compare Source

Dependencies

  • Change support policy to cover only the latest TWO releases of Go, matching the policy for Go itself. See #​7249 for more information. (#​7250)
  • Update x/net/http2 to address CVE-2023-45288 (#​7282)

Behavior Changes

  • credentials/tls: clients and servers will now reject connections that don't support ALPN when environment variable GRPC_ENFORCE_ALPN_ENABLED is set to "true" (case insensitive). (#​7184)
    • NOTE: this behavior will become the default in a future release.
  • metadata: remove String method from MD to make printing more consistent (#​7373)

New Features

  • grpc: add WithMaxCallAttempts to configure gRPC's retry behavior per-channel. (#​7229)

Bug Fixes

  • ringhash: properly apply endpoint weights instead of ignoring them (#​7156)
  • xds: fix a bug that could cause xds-enabled servers to stop accepting new connections after handshaking errors (#​7128)

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate-bot renovate-bot requested review from a team as code owners September 9, 2024 00:05
@forking-renovate forking-renovate bot added the automerge Summon MOG for automerging label Sep 9, 2024
@forking-renovate Forking Renovate
Copy link

forking-renovate bot commented Sep 9, 2024 •
edited
Loading

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 4 additional dependencies were updated

Details:

Package Change
github.com/bufbuild/protocompile v0.10.0 -> v0.14.1
golang.org/x/net v0.27.0 -> v0.29.0
golang.org/x/sys v0.22.0 -> v0.25.0
google.golang.org/grpc v1.64.1 -> v1.67.0
File name: showcase/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 19 additional dependencies were updated

Details:

Package Change
cloud.google.com/go/auth v0.7.2 -> v0.9.5
cloud.google.com/go/auth/oauth2adapt v0.2.3 -> v0.2.4
cloud.google.com/go/compute/metadata v0.5.0 -> v0.5.2
cloud.google.com/go/longrunning v0.5.9 -> v0.6.1
github.com/google/s2a-go v0.1.7 -> v0.1.8
github.com/googleapis/enterprise-certificate-proxy v0.3.2 -> v0.3.4
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.49.0 -> v0.54.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.49.0 -> v0.54.0
go.opentelemetry.io/otel v1.24.0 -> v1.29.0
go.opentelemetry.io/otel/metric v1.24.0 -> v1.29.0
go.opentelemetry.io/otel/trace v1.24.0 -> v1.29.0
golang.org/x/crypto v0.25.0 -> v0.27.0
golang.org/x/net v0.27.0 -> v0.29.0
golang.org/x/oauth2 v0.21.0 -> v0.23.0
golang.org/x/sync v0.7.0 -> v0.8.0
golang.org/x/sys v0.22.0 -> v0.25.0
golang.org/x/text v0.16.0 -> v0.18.0
golang.org/x/time v0.5.0 -> v0.6.0
google.golang.org/genproto/googleapis/api v0.0.0-20240711142825-46eb208f015d -> v0.0.0-20240924160255-9d4c2d233b61

@trusted-contributions-gcf trusted-contributions-gcf bot added the kokoro:force-run Add this label to force Kokoro to re-run the tests. label Sep 9, 2024
@quartzmo
Copy link
Member

quartzmo commented Sep 9, 2024

lint is failing:

Error: internal/gencli/flag.go:24:2: "github.com/jhump/protoreflect/desc" is deprecated: This module was created for use with the older "v1" Protobuf API in github.com/golang/protobuf. However, much of this module is no longer necessary as the newer "v2" API in google.golang.org/protobuf provides similar capabilities. Instead of using this github.com/jhump/protoreflect/desc package, see [google.golang.org/protobuf/reflect/protoreflect]. (SA1019)

@gcf-merge-on-green GCF Merge on Green
Copy link
Contributor

Merge-on-green attempted to merge your PR for 6 hours, but it was not mergeable because either one of your required status checks failed, one of your required reviews was not approved, or there is a do not merge label. Learn more about your required status checks here: https://help.github.com/en/github/administering-a-repository/enabling-required-status-checks. You can remove and reapply the label to re-run the bot.

@gcf-merge-on-green gcf-merge-on-green bot removed the automerge Summon MOG for automerging label Sep 10, 2024
@renovate-bot renovate-bot force-pushed the renovate/deps branch 4 times, most recently from e7157c8 to a0e18d5 Compare September 12, 2024 20:00
@renovate-bot renovate-bot force-pushed the renovate/deps branch 5 times, most recently from de72264 to 1946cdb Compare September 26, 2024 00:39
@renovate-bot renovate-bot force-pushed the renovate/deps branch 2 times, most recently from a99fcd6 to 8a1a99f Compare October 1, 2024 20:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
kokoro:force-run Add this label to force Kokoro to re-run the tests.
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@renovate-bot @quartzmo