Skip to content

Build(deps): Bump google.golang.org/grpc from 1.79.3 to 1.80.0#1080

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/google.golang.org/grpc-1.80.0
Open

Build(deps): Bump google.golang.org/grpc from 1.79.3 to 1.80.0#1080
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/google.golang.org/grpc-1.80.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 6, 2026

Bumps google.golang.org/grpc from 1.79.3 to 1.80.0.

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.80.0

Behavior Changes

  • balancer: log a warning if a balancer is registered with uppercase letters, as balancer names should be lowercase. In a future release, balancer names will be treated as case-insensitive; see #5288 for details. (#8837)
  • xds: update resource error handling and re-resolution logic (#8907)
    • Re-resolve all LOGICAL_DNS clusters simultaneously when re-resolution is requested.
    • Fail all in-flight RPCs immediately upon receipt of listener or route resource errors, instead of allowing them to complete.

Bug Fixes

  • xds: support the LB policy configured in LOGICAL_DNS cluster resources instead of defaulting to pick_first. (#8733)
  • credentials/tls: perform per-RPC authority validation against the leaf certificate instead of the entire peer certificate chain. (#8831)
  • xds: enabling A76 ring hash endpoint keys no longer causes EDS resources with invalid proxy metadata to be NACKed when HTTP CONNECT (gRFC A86) is disabled. (#8875)
  • xds: validate that the sum of endpoint weights in a locality does not exceed the maximum uint32 value. (#8899)
  • xds: fix incorrect proto field access in the weighted round robin (WRR) configuration where blackout_period was used instead of weight_expiration_period. (#8915)
  • xds/rbac: handle addresses with ports in IP matchers. (#8990)

New Features

  • ringhash: enable gRFC A76 (endpoint hash keys and request hash headers) by default. (#8922)

Performance Improvements

  • credentials/alts: pool write buffers to reduce memory allocations and usage. (#8919)
  • grpc: enable the use of pooled write buffers for buffering HTTP/2 frame writes by default. This reduces memory usage when connections are idle. Use the WithSharedWriteBuffer dial option or the SharedWriteBuffer server option to disable this feature. (#8957)
  • xds/priority: stop caching child LB policies removed from the configuration. This will help reduce memory and cpu usage when localities are constantly switching between priorities. (#8997)
  • mem: add a faster tiered buffer pool; use the experimental mem.NewBinaryTieredBufferPool function to create such pools. (#8775)
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Apr 6, 2026
@openshift-ci
Copy link
Copy Markdown

openshift-ci Bot commented Apr 6, 2026

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign rcampos2029 for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci Bot added the needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. label Apr 6, 2026
@openshift-ci
Copy link
Copy Markdown

openshift-ci Bot commented Apr 6, 2026

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a openshift-online member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@coderabbitai
Copy link
Copy Markdown

coderabbitai Bot commented Apr 6, 2026

Walkthrough

Updated dependency versions in go.mod: google.golang.org/grpc bumped to v1.80.0, github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp to v1.31.0, and indirect google.golang.org/genproto packages advanced to a newer pseudo-version.

Changes

Cohort / File(s) Summary
Dependency Version Updates
go.mod
Bumped google.golang.org/grpc from v1.79.3v1.80.0; upgraded indirect github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp from v1.30.0v1.31.0; updated indirect google.golang.org/genproto/googleapis/api and google.golang.org/genproto/googleapis/rpc from v0.0.0-20251213004720-97cd9d5aeac2v0.0.0-20260120221211-b8f7ae30c516.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

🚥 Pre-merge checks | ✅ 3
✅ Passed checks (3 passed)
Check name Status Explanation
Title check ✅ Passed The title accurately describes the primary change: bumping google.golang.org/grpc from 1.79.3 to 1.80.0, which matches the actual dependency update.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Description check ✅ Passed The pull request description clearly describes the changeset, detailing the bump of google.golang.org/grpc from 1.79.3 to 1.80.0 with comprehensive release notes, behavior changes, bug fixes, and performance improvements.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
📝 Generate docstrings
  • Create stacked PR
  • Commit on current branch
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch dependabot/go_modules/google.golang.org/grpc-1.80.0

Comment @coderabbitai help to get the list of available commands and usage tips.

Copy link
Copy Markdown

@coderabbitai coderabbitai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@go.mod`:
- Line 46: The go.mod entry for module
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp uses a
retracted/nonexistent v1.31.0; replace that version with a valid release (eg.
v0.55.0) or remove the module if it's no longer required, then run go mod tidy
to refresh go.sum and ensure no transitive references remain; update the line
containing
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp
accordingly and verify builds/tests succeed.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 76c88da6-5627-4046-b93e-a0cf9d0da145

📥 Commits

Reviewing files that changed from the base of the PR and between e621c19 and 79dc614.

⛔ Files ignored due to path filters (1)
  • go.sum is excluded by !**/*.sum
📒 Files selected for processing (1)
  • go.mod

Comment thread go.mod
github.com/99designs/go-keychain v0.0.0-20191008050251-8e49817e8af4 // indirect
github.com/99designs/keyring v1.2.2 // indirect
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.30.0 // indirect
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.31.0 // indirect
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🔴 Critical

🧩 Analysis chain

🌐 Web query:

What is the latest version of github.com/GoogleCloudPlatform/opentelemetry-operations-go and are there any known issues with version 1.31.0?

💡 Result:

Latest version of GoogleCloudPlatform/opentelemetry-operations-go

The latest tagged version of the Go module github.com/GoogleCloudPlatform/opentelemetry-operations-go is v0.55.0 (published Jan 16, 2026). [1]

Note: this repo also shows older v1.x tags on pkg.go.dev, but they are marked retracted (e.g., v1.8.0, v1.5.2, …). [1]

Known issues with version 1.31.0

There is no v1.31.0 release/tag of GoogleCloudPlatform/opentelemetry-operations-go, so there aren’t repo-specific “known issues with 1.31.0” for this project version. [1]

If you meant OpenTelemetry-Go (go.opentelemetry.io/otel) v1.31.0 (a dependency you might be using alongside this exporter), tell me and I can look up upstream v1.31.0-specific regressions/patch fixes separately.

Sources: [1]


Remove or update the retracted version.

The version v1.31.0 referenced for github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp does not exist. All v1.x versions of this module are retracted; the latest valid version is v0.55.0 (released Jan 16, 2026). Update go.mod to use a valid version or remove this dependency if no longer needed.

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@go.mod` at line 46, The go.mod entry for module
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp uses a
retracted/nonexistent v1.31.0; replace that version with a valid release (eg.
v0.55.0) or remove the module if it's no longer required, then run go mod tidy
to refresh go.sum and ensure no transitive references remain; update the line
containing
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp
accordingly and verify builds/tests succeed.

@chrisahl
Copy link
Copy Markdown

Does someone know when this of a similar change (gprc >= 1.79.3) will be merged and a new version of ocm released?

@openshift-ci openshift-ci Bot added the needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD. label Apr 16, 2026
@openshift-ci
Copy link
Copy Markdown

openshift-ci Bot commented Apr 16, 2026

rebase

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.77.0 to 1.80.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.77.0...v1.80.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.80.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Build(deps): Bump google.golang.org/grpc from 1.77.0 to 1.80.0 Build(deps): Bump google.golang.org/grpc from 1.79.3 to 1.80.0 Apr 16, 2026
@dependabot dependabot Bot force-pushed the dependabot/go_modules/google.golang.org/grpc-1.80.0 branch from 79dc614 to f19db75 Compare April 16, 2026 15:30
@openshift-ci openshift-ci Bot removed the needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD. label Apr 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant