Commit b170227
fix(deps): update osv-scanner minor (#2763)
This PR contains the following updates:
| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) | Type |
Update | Pending |
|---|---|---|---|---|---|---|
| [deps.dev/api/v3](https://redirect.github.com/google/deps.dev) |
`v3.0.0-20260225225317-765e10b45d5b` →
`v3.0.0-20260422013440-90c27f84dd6f` |

|

| require | patch | |
| [deps.dev/api/v3alpha](https://redirect.github.com/google/deps.dev) |
`765e10b` → `90c27f8` |

|

| require | digest | |
|
[github.com/ianlancetaylor/demangle](https://redirect.github.com/ianlancetaylor/demangle)
| `96ee002` → `1ff4bf4` |

|

| require | digest | |
|
[github.com/jedib0t/go-pretty/v6](https://redirect.github.com/jedib0t/go-pretty)
| `v6.7.9` → `v6.7.10` |

|

| require | patch | |
|
[github.com/modelcontextprotocol/go-sdk](https://redirect.github.com/modelcontextprotocol/go-sdk)
| `v1.5.0` → `v1.6.0` |

|

| require | minor | |
|
[github.com/package-url/packageurl-go](https://redirect.github.com/package-url/packageurl-go)
| `v0.1.5` → `v0.1.6` |

|

| require | patch | |
| [google.golang.org/grpc](https://redirect.github.com/grpc/grpc-go) |
`v1.80.0` → `v1.81.0` |

|

| require | minor | `v1.81.1` |
---
### Release Notes
<details>
<summary>jedib0t/go-pretty (github.com/jedib0t/go-pretty/v6)</summary>
###
[`v6.7.10`](https://redirect.github.com/jedib0t/go-pretty/releases/tag/v6.7.10)
[Compare
Source](https://redirect.github.com/jedib0t/go-pretty/compare/v6.7.9...v6.7.10)
#### What's Changed
- Fix panic on text align with unicode by
[@​edznux-dd](https://redirect.github.com/edznux-dd) in
[#​404](https://redirect.github.com/jedib0t/go-pretty/pull/404)
#### New Contributors
- [@​edznux-dd](https://redirect.github.com/edznux-dd) made their
first contribution in
[#​404](https://redirect.github.com/jedib0t/go-pretty/pull/404)
**Full Changelog**:
<jedib0t/go-pretty@v6.7.9...v6.7.10>
</details>
<details>
<summary>modelcontextprotocol/go-sdk
(github.com/modelcontextprotocol/go-sdk)</summary>
###
[`v1.6.0`](https://redirect.github.com/modelcontextprotocol/go-sdk/compare/v1.5.0...v1.6.0)
[Compare
Source](https://redirect.github.com/modelcontextprotocol/go-sdk/compare/v1.5.0...v1.6.0)
</details>
<details>
<summary>package-url/packageurl-go
(github.com/package-url/packageurl-go)</summary>
###
[`v0.1.6`](https://redirect.github.com/package-url/packageurl-go/compare/v0.1.5...v0.1.6)
[Compare
Source](https://redirect.github.com/package-url/packageurl-go/compare/v0.1.5...v0.1.6)
</details>
<details>
<summary>grpc/grpc-go (google.golang.org/grpc)</summary>
###
[`v1.81.0`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.81.0):
Release 1.81.0
[Compare
Source](https://redirect.github.com/grpc/grpc-go/compare/v1.80.0...v1.81.0)
### Behavior Changes
- balancer/rls: Switch gauge metrics to asynchronous emission (once per
collection cycle) to reduce telemetry noise and align with other gRPC
language implementations.
([#​8808](https://redirect.github.com/grpc/grpc-go/issues/8808))
### Dependencies
- Minimum supported Go version is now 1.25.
([#​8969](https://redirect.github.com/grpc/grpc-go/issues/8969))
### Bug Fixes
- xds: Use the leaf cluster's security config for the TLS handshake
instead of the aggregate cluster's config.
([#​8956](https://redirect.github.com/grpc/grpc-go/issues/8956))
- transport: Send a `RST_STREAM` when receiving an `END_STREAM` when the
stream is not already half-closed.
([#​8832](https://redirect.github.com/grpc/grpc-go/issues/8832))
- xds: Fix ADS resource name validation to prevent a panic.
([#​8970](https://redirect.github.com/grpc/grpc-go/issues/8970))
### New Features
- grpc/stats: Add support for custom labels in per-call metrics ([gRFC
A108](https://redirect.github.com/grpc/proposal/blob/master/A108-otel-custom-per-call-label.md)).
([#​9008](https://redirect.github.com/grpc/grpc-go/issues/9008))
- xds: Add support for Server Name Indication (SNI) and SAN validation
([gRFC
A101](https://redirect.github.com/grpc/proposal/blob/master/A101-SNI-setting-and-SNI-SAN-validation.md)).
Disabled by default. To enable, set `GRPC_EXPERIMENTAL_XDS_SNI=true`
environment variable.
([#​9016](https://redirect.github.com/grpc/grpc-go/issues/9016))
- xds: Add support to control which fields get propagated from ORCA
backend metric reports to LRS load reports ([gRFC
A85](https://redirect.github.com/grpc/proposal/blob/master/A85-lrs-custom-metrics-changes.md)).
Disabled by default. To enable, set
`GRPC_EXPERIMENTAL_XDS_ORCA_LRS_PROPAGATION=true`.
([#​9005](https://redirect.github.com/grpc/grpc-go/issues/9005))
- xds: Add metrics to track xDS client connectivity and cached resource
state ([gRFC
A78](https://redirect.github.com/grpc/proposal/blob/master/A78-grpc-metrics-wrr-pf-xds.md)).
([#​8807](https://redirect.github.com/grpc/grpc-go/issues/8807))
- stats/otel: Enhance `grpc.subchannel.disconnections` metric by adding
disconnection reason to the `grpc.disconnect_error` label ([gRFC
A94](https://redirect.github.com/grpc/proposal/blob/master/A94-subchannel-otel-metrics.md)).
This provides granular insights into why subchannels are closing.
([#​8973](https://redirect.github.com/grpc/grpc-go/issues/8973))
- mem: Add `mem.Buffer.Slice()` API to slice the buffer like a slice.
([#​8977](https://redirect.github.com/grpc/grpc-go/issues/8977))
- Special Thanks: [@​ash2k](https://redirect.github.com/ash2k)
### Performance Improvements
- alts: Pool read buffers to lower memory utilization when sockets are
unreadable.
([#​8964](https://redirect.github.com/grpc/grpc-go/issues/8964))
- transport: Pool HTTP/2 framer read buffers to reduce idle memory
consumption. Currently limited to Linux for ALTS and non-encrypted
transports (TCP, Unix). To disable, set
`GRPC_GO_EXPERIMENTAL_HTTP_FRAMER_READ_BUFFER_POOLING=false` and report
any issues.
([#​9032](https://redirect.github.com/grpc/grpc-go/issues/9032))
</details>
---
### Configuration
📅 **Schedule**: (in timezone Australia/Sydney)
- Branch creation
- "before 6am on monday"
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/google/osv-scanner).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTkuMiIsInVwZGF0ZWRJblZlciI6IjQzLjE3OS4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->
---------
Co-authored-by: Rex P <rexpan@google.com>1 parent 9648d34 commit b170227
2 files changed
Lines changed: 43 additions & 43 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
5 | 5 | | |
6 | 6 | | |
7 | 7 | | |
8 | | - | |
9 | | - | |
| 8 | + | |
| 9 | + | |
10 | 10 | | |
11 | 11 | | |
12 | 12 | | |
13 | 13 | | |
14 | 14 | | |
15 | 15 | | |
16 | 16 | | |
17 | | - | |
18 | | - | |
19 | | - | |
| 17 | + | |
| 18 | + | |
| 19 | + | |
20 | 20 | | |
21 | 21 | | |
22 | 22 | | |
23 | | - | |
| 23 | + | |
24 | 24 | | |
25 | 25 | | |
26 | 26 | | |
| |||
30 | 30 | | |
31 | 31 | | |
32 | 32 | | |
33 | | - | |
| 33 | + | |
34 | 34 | | |
35 | 35 | | |
36 | 36 | | |
| |||
125 | 125 | | |
126 | 126 | | |
127 | 127 | | |
128 | | - | |
| 128 | + | |
129 | 129 | | |
130 | 130 | | |
131 | 131 | | |
| |||
206 | 206 | | |
207 | 207 | | |
208 | 208 | | |
209 | | - | |
210 | | - | |
211 | | - | |
| 209 | + | |
| 210 | + | |
| 211 | + | |
212 | 212 | | |
213 | 213 | | |
214 | 214 | | |
| |||
218 | 218 | | |
219 | 219 | | |
220 | 220 | | |
221 | | - | |
| 221 | + | |
222 | 222 | | |
223 | 223 | | |
224 | 224 | | |
225 | 225 | | |
226 | 226 | | |
227 | 227 | | |
228 | 228 | | |
229 | | - | |
| 229 | + | |
230 | 230 | | |
231 | 231 | | |
232 | 232 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
11 | 11 | | |
12 | 12 | | |
13 | 13 | | |
14 | | - | |
15 | | - | |
16 | | - | |
17 | | - | |
| 14 | + | |
| 15 | + | |
| 16 | + | |
| 17 | + | |
18 | 18 | | |
19 | 19 | | |
20 | 20 | | |
| |||
271 | 271 | | |
272 | 272 | | |
273 | 273 | | |
274 | | - | |
275 | | - | |
| 274 | + | |
| 275 | + | |
276 | 276 | | |
277 | 277 | | |
278 | 278 | | |
| |||
286 | 286 | | |
287 | 287 | | |
288 | 288 | | |
289 | | - | |
290 | | - | |
| 289 | + | |
| 290 | + | |
291 | 291 | | |
292 | 292 | | |
293 | 293 | | |
294 | 294 | | |
295 | | - | |
296 | | - | |
| 295 | + | |
| 296 | + | |
297 | 297 | | |
298 | 298 | | |
299 | 299 | | |
| |||
355 | 355 | | |
356 | 356 | | |
357 | 357 | | |
358 | | - | |
359 | | - | |
| 358 | + | |
| 359 | + | |
360 | 360 | | |
361 | 361 | | |
362 | 362 | | |
| |||
385 | 385 | | |
386 | 386 | | |
387 | 387 | | |
388 | | - | |
389 | | - | |
| 388 | + | |
| 389 | + | |
390 | 390 | | |
391 | 391 | | |
392 | 392 | | |
| |||
520 | 520 | | |
521 | 521 | | |
522 | 522 | | |
523 | | - | |
524 | | - | |
| 523 | + | |
| 524 | + | |
525 | 525 | | |
526 | 526 | | |
527 | 527 | | |
528 | 528 | | |
529 | | - | |
530 | | - | |
531 | | - | |
532 | | - | |
533 | | - | |
534 | | - | |
535 | | - | |
536 | | - | |
| 529 | + | |
| 530 | + | |
| 531 | + | |
| 532 | + | |
| 533 | + | |
| 534 | + | |
| 535 | + | |
| 536 | + | |
537 | 537 | | |
538 | 538 | | |
539 | 539 | | |
| |||
584 | 584 | | |
585 | 585 | | |
586 | 586 | | |
587 | | - | |
588 | | - | |
| 587 | + | |
| 588 | + | |
589 | 589 | | |
590 | 590 | | |
591 | 591 | | |
| |||
664 | 664 | | |
665 | 665 | | |
666 | 666 | | |
667 | | - | |
668 | | - | |
| 667 | + | |
| 668 | + | |
669 | 669 | | |
670 | 670 | | |
671 | 671 | | |
672 | 672 | | |
673 | 673 | | |
674 | | - | |
675 | | - | |
| 674 | + | |
| 675 | + | |
676 | 676 | | |
677 | 677 | | |
678 | 678 | | |
| |||
0 commit comments