Update all non-major dependencies

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
actions/setup-python	action	minor	v5.3.0 -> v5.6.0
bazel		minor	7.4.1 -> 7.7.1
bazel-contrib/setup-bazel	action	minor	0.9.1 -> 0.15.0
bazel_skylib	bazel_dep	minor	1.7.1 -> 1.8.2
cloud.google.com/go/bigquery	require	minor	v1.65.0 -> v1.72.0
cloud.google.com/go/monitoring	require	minor	v1.22.1 -> v1.24.3
cloud.google.com/go/profiler	require	patch	v0.4.2 -> v0.4.3
cloud.google.com/go/storage	require	minor	v1.43.0 -> v1.57.2
cloud.google.com/go/trace	require	patch	v1.11.3 -> v1.11.7
gazelle	bazel_dep	minor	0.40.0 -> 0.47.0
gflags	bazel_dep	patch	2.2.2 -> 2.2.2.bcr.1
github.com/bazelbuild/rules_go	require	minor	v0.51.0 -> v0.59.0
github.com/golang/glog	require	patch	v1.2.4 -> v1.2.5
github.com/google/go-cmp	require	minor	v0.6.0 -> v0.7.0
github.com/pkg/xattr	require	patch	v0.4.10 -> v0.4.12
golang.org/x/mod	require	minor	v0.22.0 -> v0.30.0
golang.org/x/sync	require	minor	v0.11.0 -> v0.18.0
golang.org/x/sys	require	minor	v0.30.0 -> v0.38.0
golang.org/x/tools	require	minor	v0.28.0 -> v0.39.0
google.golang.org/api	require	minor	v0.214.0 -> v0.256.0
google.golang.org/grpc	require	minor	v1.68.0 -> v1.77.0
google.golang.org/protobuf	require	patch	v1.36.4 -> v1.36.10
googletest	bazel_dep	minor	1.15.2 -> 1.17.0.bcr.2
grpc	bazel_dep	minor	1.63.1 -> 1.76.0.bcr.1
llvm_zlib	http_archive	minor	2.0.7 -> 2.3.1
llvm_zstd	http_archive	patch	v1.5.2 -> v1.5.7
platforms	bazel_dep	patch	0.0.10 -> 0.0.11
python	uses-with	minor	3.11 -> 3.14
rules_cc	bazel_dep	minor	0.0.17 -> 0.2.14
rules_foreign_cc	bazel_dep	minor	0.13.0 -> 0.15.1
rules_go	bazel_dep	minor	0.51.0 -> 0.59.0
rules_nodejs	bazel_dep	minor	6.3.2 -> 6.6.2
rules_pkg (source)	bazel_dep	minor	1.0.1 -> 1.1.0
zlib	bazel_dep	patch	1.3.1.bcr.3 -> 1.3.1.bcr.7

---

Release Notes

actions/setup-python (actions/setup-python)

v5.6.0

Compare Source

What's Changed

• Workflow updates related to Ubuntu 20.04 by @​aparnajyothi-y in #​1065
• Fix for Candidate Not Iterable Error by @​aparnajyothi-y in #​1082
• Upgrade semver and @​types/semver by @​dependabot in #​1091
• Upgrade prettier from 2.8.8 to 3.5.3 by @​dependabot in #​1046
• Upgrade ts-jest from 29.1.2 to 29.3.2 by @​dependabot in #​1081

Full Changelog: actions/setup-python@v5...v5.6.0

v5.5.0

Compare Source

What's Changed

Enhancements:

• Support free threaded Python versions like '3.13t' by @​colesbury in #​973
• Enhance Workflows: Include ubuntu-arm runners, Add e2e Testing for free threaded and Upgrade @​action/cache from 4.0.0 to 4.0.3 by @​priya-kinthali in #​1056
• Add support for .tool-versions file in setup-python by @​mahabaleshwars in #​1043

Bug fixes:

• Fix architecture for pypy on Linux ARM64 by @​mayeut in #​1011
  This update maps arm64 to aarch64 for Linux ARM64 PyPy installations.

Dependency updates:

• Upgrade @​vercel/ncc from 0.38.1 to 0.38.3 by @​dependabot in #​1016
• Upgrade @​actions/glob from 0.4.0 to 0.5.0 by @​dependabot in #​1015

New Contributors

• @​colesbury made their first contribution in #​973
• @​mahabaleshwars made their first contribution in #​1043

Full Changelog: actions/setup-python@v5...v5.5.0

v5.4.0

Compare Source

What's Changed

Enhancements:

• Update cache error message by @​aparnajyothi-y in #​968
• Enhance Workflows: Add Ubuntu-24, Remove Python 3.8 by @​priya-kinthali in #​985
• Configure Dependabot settings by @​HarithaVattikuti in #​1008

Documentation changes:

• Readme update - recommended permissions by @​benwells in #​1009
• Improve Advanced Usage examples by @​lrq3000 in #​645

Dependency updates:

• Upgrade undici from 5.28.4 to 5.28.5 by @​dependabot in #​1012
• Upgrade urllib3 from 1.25.9 to 1.26.19 in /tests/data by @​dependabot in #​895
• Upgrade actions/publish-immutable-action from 0.0.3 to 0.0.4 by @​dependabot in #​1014
• Upgrade @actions/http-client from 2.2.1 to 2.2.3 by @​dependabot in #​1020
• Upgrade requests from 2.24.0 to 2.32.2 in /tests/data by @​dependabot in #​1019
• Upgrade @actions/cache to ^4.0.0 by @​priyagupta108 in #​1007

New Contributors

• @​benwells made their first contribution in #​1009
• @​HarithaVattikuti made their first contribution in #​1008
• @​lrq3000 made their first contribution in #​645

Full Changelog: actions/setup-python@v5...v5.4.0

bazelbuild/bazel (bazel)

v7.7.1

Compare Source

Release Notes:

v7.7.0

Compare Source

Release Notes:

v7.6.2

Compare Source

Release Notes:

v7.6.1

Compare Source

Release Notes:

v7.6.0

Compare Source

Release Notes:

v7.5.0

Compare Source

Release Notes:

bazel-contrib/setup-bazel (bazel-contrib/setup-bazel)

v0.15.0

Compare Source

What's Changed

• Update dependency @​actions/cache to v4.0.2 by @​renovate in #​70
• Update dependency @​actions/cache to v4.0.3 by @​renovate in #​74
• Update actions/cache version to 4.2.2 to resolve caching warning by @​yx-altera in #​79
• Revert "Update actions/cache version to 4.2.2 to resolve caching warning" by @​p0deje in #​80
• add .exe on windows by @​kekxv in #​83
• Co-locate Bazel output base with workspace by @​p0deje in #​82

New Contributors

• @​yx-altera made their first contribution in #​79
• @​kekxv made their first contribution in #​83

Full Changelog: bazel-contrib/setup-bazel@0.14.0...0.15.0

v0.14.0

Compare Source

What's Changed

• Update Node.js to v22.14.0 by @​renovate in #​65
• Update dependency @​actions/cache to v4.0.1 by @​renovate in #​66
• Add module-root option for changing module location within the repository by @​calebzulawski in #​69

New Contributors

• @​calebzulawski made their first contribution in #​69

Full Changelog: bazel-contrib/setup-bazel@0.13.0...0.14.0

v0.13.0

Compare Source

What's Changed

• Update Node.js to v22.13.0 by @​renovate in #​61
• Update dependency @​actions/tool-cache to v2.0.2 by @​renovate in #​62
• Update Node.js to v22.13.1 by @​renovate in #​63
• Include repository cache files in the disk cache key. by @​bmclarnon in #​64

New Contributors

• @​bmclarnon made their first contribution in #​64

Full Changelog: bazel-contrib/setup-bazel@0.12.1...0.13.0

v0.12.1

Compare Source

What's Changed

• Fix regression with missing token by @​p0deje in #​60

Full Changelog: bazel-contrib/setup-bazel@0.12.0...0.12.1

v0.12.0

Compare Source

What's Changed

• Enable caches for all Bazel commands, not just build-related ones. by @​phst in #​56

New Contributors

• @​phst made their first contribution in #​56

Full Changelog: bazel-contrib/setup-bazel@0.11.0...0.12.0

v0.11.0

Compare Source

What's Changed

• Update dependency yaml to v2.7.0 by @​renovate in #​55
• Export BAZELISK_GITHUB_TOKEN variable by @​p0deje in #​58

Full Changelog: bazel-contrib/setup-bazel@0.10.0...0.11.0

v0.10.0

Compare Source

What's Changed

• Update dependency @​actions/cache to v3.3.0 by @​renovate in #​49
• Update dependency @​vercel/ncc to v0.38.3 by @​renovate in #​50
• Update dependency yaml to v2.6.1 by @​renovate in #​51
• Update Node.js to v22.12.0 by @​renovate in #​52
• Update dependency @​actions/cache to v4 by @​renovate in #​53
• Allow changing output base path by @​p0deje in #​48

Full Changelog: bazel-contrib/setup-bazel@0.9.1...0.10.0

bazelbuild/bazel-skylib (bazel_skylib)

v1.8.2

Compare Source

New Features

• Introduce repeatable_string_flag (#​593)

Other Changes

• Migrate copy_directory away from deprecated host constraint (#​588)

Contributors

• fmeum@
• susinmotion@

v1.8.1

Compare Source

What's Changed

• Make is_windows public (#​584)

Full Changelog: bazelbuild/bazel-skylib@1.8.0...1.8.1

v1.8.0

Compare Source

What's Changed

• fix: subpackages.all works for root packages by @​kilian-funk in #​531
• Strip compatible_with from bzl_library rules by @​aiuto in #​522
• Make only root test_deps externally visible by @​tetromino in #​508
• Update README.md by @​BoleynSu in #​380
• Add test_deps to rules/private by @​aiuto in #​534
• Fix bazel_skylib with Bazel@​HEAD by @​meteorcloudy in #​538
• Explicitly enable workspace for some tasks by @​meteorcloudy in #​540
• README.md: fix broken directory rule links by @​lukasoyen in #​544
• Remove sh_binary usage for Bazel 8 friendliness by @​tetromino in #​550
• adding scope attributes for starlark flags by @​aranguyen in #​546
• Update common_settings.bzl by @​aranguyen in #​552
• Simplify CI steup and make presubmit green again by @​meteorcloudy in #​557
• fix(gazelle): remove deprecated function call by @​tyler-french in #​556
• Remove obsolete bazel 4.x compat code by @​lukasoyen in #​560
• Add new "env" variable to native_* rules by @​gioachin in #​561
• Replace outdated select() on --cpu with another flag ref by @​gregestren in #​570
• Migrate away from @bazel_tools//src/conditions:host_windows by @​fmeum in #​574
• Use DefaultInfo directly by @​keith in #​577
• Use native.package_relative_label in selects.bzl by @​fmeum in #​576
• Add BCR publishing workflow by @​fmeum in #​581

New Contributors

• @​kilian-funk made their first contribution in #​531
• @​BoleynSu made their first contribution in #​380
• @​lukasoyen made their first contribution in #​544
• @​aranguyen made their first contribution in #​546
• @​tyler-french made their first contribution in #​556
• @​gioachin made their first contribution in #​561

Full Changelog: bazelbuild/bazel-skylib@1.7.1...1.8.0

bazel-contrib/bazel-gazelle (gazelle)

v0.47.0

What's Changed

• Generate dictionary with go tool targets by @​mrdomino in #​2215
• Fix BCR test module with Bazel 9 by @​fmeum in #​2221
• Fix go tools at module roots by @​mrdomino in #​2223

Full Changelog: bazel-contrib/bazel-gazelle@v0.46.0...v0.47.0

v0.46.0

What's Changed

• fix: populate walk cache for all walk modes by @​jbedard in #​2158
• docs: update Swift gazelle plugin reference to correct repository by @​cgrindel in #​2159
• Realign diff mode exit code with other modes. by @​alandonham in #​2165
• Adding unit test to ensure behavior of mode=diff by @​alandonham in #​2166
• ignore godebug directive in go.mod and go.work #​2167 by @​SaurabhDRao in #​2168
• support new ignore directive in go.mod by @​lbcjbb in #​2169
• Add directives to build github.com/thanos-io/thanos/cmd/thanos by @​zecke in #​2086
• perf: populate walk cache in background by @​jbedard in #​2161
• moduleFromPath don't need go mod download by @​xuxife in #​2178
• Stop using deprecated go.new_library() and go.library_to_source() by @​EdSchouten in #​2180
• Invalidate go_repository_cache when host env vars change by @​linzhp in #​2183
• language/proto: implement lazy indexing by @​jayconrod in #​2185
• refactor: remove unreachable code by @​jbedard in #​2160
• language/go: set visibility correctly for nested internal directories by @​jayconrod in #​2187
• docs: document lazy indexing by @​jayconrod in #​2188
• language/bazel/visibility: add to cmd/gazelle and DEFAULT_LANGUAGES by @​jayconrod in #​2190
• Add test coverage for external Go submodules by @​fmeum in #​2191
• README.rst: fix code formatting by @​jayconrod in #​2192
• build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 in /tests/bcr/go_mod by @​dependabot[bot] in #​2193
• Automatically deleting corrupted Go module cache by @​linzhp in #​2194
• README: translate from reStructuredText to Markdown by @​jayconrod in #​2197
• Design: translate from reStructuredText to Markdown by @​jayconrod in #​2198
• chore: update bazelbuild/buildtools, bmatcuk/doublestar by @​jbedard in #​2203
• perf: dont use sprintf for simple string concat by @​jbedard in #​2205
• perf: avoid use of reflection when generating bzl expressions by @​jbedard in #​2204
• config: fix nil pointer exception in update help by @​jayconrod in #​2202
• Commit MODULE.bazel.lock file by @​jayconrod in #​2209
• fix: only return requested dirinfo on GetDirInfo error by @​jbedard in #​2212
• language/go: handle cgo noescape and nocallback directives by @​torin-carey in #​2217
• CI: sync BCR and presubmit tests by @​jayconrod in #​2218
• CI: hopefully fix BCR tests by @​jayconrod in #​2220

New Contributors

• @​SaurabhDRao made their first contribution in #​2168
• @​lbcjbb made their first contribution in #​2169
• @​xuxife made their first contribution in #​2178
• @​dependabot[bot] made their first contribution in #​2193
• @​torin-carey made their first contribution in #​2217

Full Changelog: bazel-contrib/bazel-gazelle@v0.45.0...v0.46.0

v0.45.0

What's Changed

• Test against latest release candidates in BCR presubmit by @​fmeum in #​2112
• docs: add gazelle_cc pointer by @​alexeagle in #​2114
• go.mod 'tool' directive may refer to a package at module-root by @​dzbarsky in #​2115
• Update bazel-skylib in WORKSPACE setup by @​fmeum in #​2116
• Speedup known os/arch checks by @​dzbarsky in #​2100
• Add support for --repo_contents_cache by @​fmeum in #​2119
• Enable Bzlmod for the main repo by @​fmeum in #​2118
• Add special handling for extracting explicit package name from rule name if being part of go_package by @​WojciechMazur in #​2122
• docs: use stardoc for reference documentation only by @​jayconrod in #​2125
• Fix missing go_env when running Gazelle by @​guw in #​2128
• Test with Bazel 8 by @​fmeum in #​2120
• Add default overrides for spicedb support by @​faximan in #​2131
• fix: only pass walked dir content to single callback by @​jbedard in #​2134
• Remove usage of deprecated package_list on Go context by @​dzbarsky in #​2135
• merger: fix symbol assigned by @​hunshcn in #​2136
• refactor: update bazel target for go_features by @​isgj in #​2138
• walk: expose cached GetDirInfo by @​jayconrod in #​2141
• rule: add MatchGlobExpr for parsing glob expressions by @​jayconrod in #​2142
• Fix interfing proto.Mode - taking into account mode module apparent names by @​WojciechMazur in #​2143
• Fix target names when running in package proto mode by @​jgautier-dd in #​2144
• Accept more forms of glob values when parsing bzl.Expr by @​WojciechMazur in #​2145
• fix FixLoads issue with list of symbols by @​tzaman-stripe in #​2147
• Propagate to Gazelle extensions proto_library name achieved after merging with BUILD file by @​WojciechMazur in #​2150
• Upgrade package_metadata to 0.0.5 (was 0.0.2) by @​WojciechMazur in #​2155
• Removing restriction on cgo in go_test by @​linzhp in #​2154
• pathtools: add Prefixes helper function by @​jayconrod in #​2152
• walk: allow GetDirInfo to be called in directories not visited yet by @​jayconrod in #​2153
• Extract either Module/Workspace RepoName in CommonConfigurer by @​WojciechMazur in #​2157

New Contributors

• @​guw made their first contribution in #​2128
• @​isgj made their first contribution in #​2138
• @​jgautier-dd made their first contribution in #​2144
• @​tzaman-stripe made their first contribution in #​2147

Full Changelog: bazel-contrib/bazel-gazelle@v0.44.0...v0.45.0

v0.44.0

What's Changed

• walk: fix BenchmarkWalk by @​jayconrod in #​2072
• walk: refactor and add Walk2 function by @​jayconrod in #​2073
• walk, language: support lazy indexing by @​jayconrod in #​2074
• walk: better error checking in strict mode for RelsToVisit by @​jayconrod in #​2077
• Work around incompatibility between zlib and clang 17 by @​fmeum in #​2082
• go_grpc_compiler: default to go_grpc_v2 by @​sluongng in #​2071
• table fix by @​sluongng in #​2083
• Add package_metadata to REPO.bazel by @​Yannic in #​2081
• Add go_features.proto to list of known protos by @​mrdomino in #​2080
• Cleanup: Just updating comments as I read by @​stefanpenner in #​2087
• language/go: support lazy indexing with go_search directive by @​jayconrod in #​2075
• Keep use_repos needed for tools by @​fmeum in #​2091
• Don't drop -bzlmod arg when args are explicitly provided by @​fmeum in #​2092
• Run buildifier to add explicit loads and update rules_go by @​fmeum in #​2090
• Add build file generation override for cel.dev/expr by @​jasonkuster in #​2096
• language/go: add implicit go_search path when prefix is set by @​jayconrod in #​2095
• fix: correct attribute name in message by @​ash2k in #​2098
• Avoid allocations in fileNameInfo by @​dzbarsky in #​2099
• fix: normalize RelsToVisit by @​jbedard in #​2104
• Add k8s.io/cri-api k8s.io/apiserver default overrides by @​hunshcn in #​2107
• Replace illegal characters in underscores when deriving proto RuleName by @​WojciechMazur in #​2105
• perf: remove extraneous isExcluded(dir) checks by @​jbedard in #​2106
• indexing all parents of visited directories by @​linzhp in #​2109
• language/go: allow clean as argument to -build_file_generation by @​oncilla in #​2111
• Trim BCR versions before comparing them to Go versions by @​fmeum in #​2066
• Avoid duplicates in relToIndex by @​linzhp in #​2110

New Contributors

• @​mrdomino made their first contribution in #​2080
• @​jasonkuster made their first contribution in #​2096
• @​WojciechMazur made their first contribution in #​2105
• @​oncilla made their first contribution in #​2111

Full Changelog: bazel-contrib/bazel-gazelle@v0.43.0...v0.44.0

v0.43.0

What's Changed

• Evaluate build tags as both true and false b

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[forking-renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 21 additional dependencies were updated

Details:

Package	Change
golang.org/x/oauth2	v0.24.0 -> v0.33.0
google.golang.org/genproto	v0.0.0-20250106144421-5f5ef82da422 -> v0.0.0-20250603155806-513f23925822
google.golang.org/genproto/googleapis/rpc	v0.0.0-20250207221924-e9438ea467c6 -> v0.0.0-20251103181224-f26f9409b101
cloud.google.com/go	v0.118.0 -> v0.121.6
cloud.google.com/go/auth	v0.13.0 -> v0.17.0
cloud.google.com/go/auth/oauth2adapt	v0.2.6 -> v0.2.8
cloud.google.com/go/compute/metadata	v0.6.0 -> v0.9.0
cloud.google.com/go/iam	v1.3.1 -> v1.5.2
github.com/go-logr/logr	v1.4.2 -> v1.4.3
github.com/google/pprof	v0.0.0-20240727154555-813a5fbdbec8 -> v0.0.0-20250602020802-c6617b811d0e
github.com/google/s2a-go	v0.1.8 -> v0.1.9
github.com/googleapis/enterprise-certificate-proxy	v0.3.4 -> v0.3.7
github.com/googleapis/gax-go/v2	v2.14.0 -> v2.15.0
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	v0.54.0 -> v0.61.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	v0.54.0 -> v0.61.0
go.opentelemetry.io/otel	v1.29.0 -> v1.38.0
go.opentelemetry.io/otel/metric	v1.29.0 -> v1.38.0
go.opentelemetry.io/otel/trace	v1.29.0 -> v1.38.0
golang.org/x/crypto	v0.35.0 -> v0.44.0
google.golang.org/genproto/googleapis/api	v0.0.0-20250102185135-69823020774d -> v0.0.0-20251022142026-3a174f9686a8
google.golang.org/genproto/googleapis/bytestream	v0.0.0-20241209162323-e6fa225c2576 -> v0.0.0-20251103181224-f26f9409b101