Skip to content

chore(deps): bump google.golang.org/grpc from 1.79.3 to 1.83.1 in /helpers/eab-deployer - #658

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/helpers/eab-deployer/google.golang.org/grpc-1.79.3
Open

chore(deps): bump google.golang.org/grpc from 1.79.3 to 1.83.1 in /helpers/eab-deployer#658
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/helpers/eab-deployer/google.golang.org/grpc-1.79.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 19, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps google.golang.org/grpc from 1.79.3 to 1.83.1.

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.83.1

Security

  • xds/rbac: Fix a bug where nested Principal or Permission rules with :scheme or grpc- prefixed header matchers were not rejected, which could cause DENY rules to fail open. (#9258)
  • xds/rbac: Fix a bug where the host header matcher was not being replaced with :authority in nested Principal or Permission rules. (#9258)
  • xds/rbac: Fix a bug where a header matcher whose name was not lowercase, such as X-Role, matched no header, which could cause DENY rules to fail open. (#9332)
  • xds/rbac: Fix a bug where a :scheme or grpc- prefixed header matcher was accepted when its name was not lowercase. (#9332)
  • xds/rbac: Fix a bug where a Host header matcher was not replaced with :authority. (#9332)

Performance

  • transport: Restrict memory overhead of buffering small data frames. (#9331)

Release 1.83.0

Security

  • server: Stop reading from connections when flooded by HTTP/2 frames to mitigate resource exhaustion. The default value for this limit is 100 frames, excluding DATA and HEADERS, and may be changed by setting environment variable GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT.
  • xds/rbac: Support Metadata and RequestedServerName permissions matcher fields. If present in a DENY rule, previously these would be ignored and fail-open.
  • xds/rbac: Fix panic when parsing unsupported fields in NotRule/NotId permissions.
  • xds/rbac: Support the deprecated source_ip principal identifier by treating it as equivalent to direct_remote_ip.
  • xds: Fix panic when parsing route header matchers configured with empty exact_match, prefix_match, or suffix_match strings. (#9223)

New Features

  • xds/googlec2p: Enable DirectPath over Interconnect support for on-premises clients via the force-xds target URI query parameter. (#9133)
  • xds: Enable xDS configuration to control which fields get propagated from ORCA backend metric reports to LRS load reports. (#9145)
  • authz: Add OnPolicyUpdate callback to FileWatcherOptions to notify when an authz policy is loaded or updated. (#9142)
  • xds: Add support for the GCP Authentication HTTP Filter, which automatically fetches and attaches GCP Service Account Identity JWT tokens to outgoing RPCs.
    • This feature can be enabled by setting environment variable GRPC_EXPERIMENTAL_XDS_GCP_AUTHENTICATION_FILTER=true. (#9119)
  • xds: Add support for xDS-based HTTP CONNECT proxies.
    • This feature can be enabled by setting environment variable GRPC_EXPERIMENTAL_XDS_HTTP_CONNECT=true. (#9151)
  • xds: Add support for contains_match in route header matchers. (#9223)

Bug Fixes

  • credentials/alts: Fix panic when processing malformed frames by validating that the message frame length exceeds the message type field size. (#9197)
  • grpc: Fix compilation on Plan 9 targets (GOOS=plan9), broken since v1.81.0. (#9255)

Release 1.82.2

Security

  • server: Reject requests missing both :authority and Host headers with HTTP 400 and status Internal. (grpc/grpc-go#9365)

... (truncated)

Commits

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Mar 19, 2026
@dependabot
dependabot Bot requested review from a team, apeabody, sleighton2022 and yliaog as code owners March 19, 2026 02:41
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Mar 19, 2026
@dpebot

dpebot commented Mar 19, 2026

Copy link
Copy Markdown
Collaborator

/gcbrun

@amandakarina
amandakarina force-pushed the dependabot/go_modules/helpers/eab-deployer/google.golang.org/grpc-1.79.3 branch from adca674 to 2662a94 Compare April 29, 2026 19:23
@dpebot

dpebot commented Apr 29, 2026

Copy link
Copy Markdown
Collaborator

/gcbrun

1 similar comment
@dpebot

dpebot commented May 4, 2026

Copy link
Copy Markdown
Collaborator

/gcbrun

@amandakarina
amandakarina force-pushed the dependabot/go_modules/helpers/eab-deployer/google.golang.org/grpc-1.79.3 branch from 15c5884 to 53dc195 Compare July 10, 2026 11:50
@dpebot

dpebot commented Jul 10, 2026

Copy link
Copy Markdown
Collaborator

/gcbrun

@amandakarina

amandakarina commented Aug 6, 2026

Copy link
Copy Markdown
Collaborator

@renovate-bot recreate

@amandakarina
amandakarina force-pushed the dependabot/go_modules/helpers/eab-deployer/google.golang.org/grpc-1.79.3 branch from 53dc195 to 05445cb Compare August 31, 2026 11:49
@dpebot

dpebot commented Aug 31, 2026

Copy link
Copy Markdown
Collaborator

/gcbrun

@apeabody apeabody mentioned this pull request Sep 1, 2026
Merged
apeabody added a commit that referenced this pull request Sep 1, 2026
@apeabody
chore(deps): bump dependencies in helpers/eab-deployer
da97bc9 
Combines the following Dependabot PRs:
- #725: bump golang.org/x/crypto from 0.42.0 to 0.52.0
- #719: bump golang.org/x/net from 0.44.0 to 0.55.0
- #698: bump go.opentelemetry.io/otel from 1.38.0 to 1.41.0
- #658: bump google.golang.org/grpc from 1.75.1 to 1.79.3
amandakarina pushed a commit that referenced this pull request Sep 1, 2026
@apeabody @amandakarina
chore(deps): bump dependencies in helpers/eab-deployer
ff4a972 
Combines the following Dependabot PRs:
- #725: bump golang.org/x/crypto from 0.42.0 to 0.52.0
- #719: bump golang.org/x/net from 0.44.0 to 0.55.0
- #698: bump go.opentelemetry.io/otel from 1.38.0 to 1.41.0
- #658: bump google.golang.org/grpc from 1.75.1 to 1.79.3
amandakarina pushed a commit that referenced this pull request Sep 2, 2026
@apeabody @amandakarina
chore(deps): bump dependencies in helpers/eab-deployer
8bf5941 
Combines the following Dependabot PRs:
- #725: bump golang.org/x/crypto from 0.42.0 to 0.52.0
- #719: bump golang.org/x/net from 0.44.0 to 0.55.0
- #698: bump go.opentelemetry.io/otel from 1.38.0 to 1.41.0
- #658: bump google.golang.org/grpc from 1.75.1 to 1.79.3
@apeabody

apeabody commented Sep 4, 2026

Copy link
Copy Markdown
Collaborator

@dependabot recreate

@dependabot dependabot Bot changed the title chore(deps): bump google.golang.org/grpc from 1.75.1 to 1.79.3 in /helpers/eab-deployer chore(deps): bump google.golang.org/grpc from 1.79.3 to 1.83.1 in /helpers/eab-deployer Sep 4, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/helpers/eab-deployer/google.golang.org/grpc-1.79.3 branch from 05445cb to 6965e6a Compare September 4, 2026 15:42
@dpebot

dpebot commented Sep 4, 2026

Copy link
Copy Markdown
Collaborator

/gcbrun

@amandakarina

amandakarina commented Sep 4, 2026

Copy link
Copy Markdown
Collaborator

@dpebot recreate

@apeabody

apeabody commented Sep 4, 2026

Copy link
Copy Markdown
Collaborator

@dependabot recreate

@dependabot
dependabot Bot force-pushed the dependabot/go_modules/helpers/eab-deployer/google.golang.org/grpc-1.79.3 branch from 6965e6a to a374536 Compare September 4, 2026 21:25
@dpebot

dpebot commented Sep 4, 2026

Copy link
Copy Markdown
Collaborator

/gcbrun

@apeabody

apeabody commented Sep 4, 2026

Copy link
Copy Markdown
Collaborator

@dependabot recreate

@dependabot
chore(deps): bump google.golang.org/grpc in /helpers/eab-deployer
cc94e84 
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.79.3 to 1.83.1.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.79.3...v1.83.1)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.79.3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/helpers/eab-deployer/google.golang.org/grpc-1.79.3 branch from a374536 to cc94e84 Compare September 4, 2026 21:52
@dpebot

dpebot commented Sep 4, 2026

Copy link
Copy Markdown
Collaborator

/gcbrun

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@apeabody apeabody apeabody approved these changes
@sleighton2022 sleighton2022 Awaiting requested review from sleighton2022 sleighton2022 is a code owner
@yliaog yliaog Awaiting requested review from yliaog yliaog is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@dpebot @amandakarina @apeabody