Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update deps #1571

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

renovate-bot
Copy link
Contributor

@renovate-bot renovate-bot commented Sep 9, 2024

This PR contains the following updates:

Package Type Update Change Age Adoption Passing Confidence
bazel-contrib/setup-bazel action minor 0.8.5 -> 0.9.1 age adoption passing confidence
cloud.google.com/go require minor v0.115.0 -> v0.116.0 age adoption passing confidence
cloud.google.com/go/iam require minor v1.1.11 -> v1.2.2 age adoption passing confidence
cloud.google.com/go/longrunning require minor v0.5.10 -> v0.6.2 age adoption passing confidence
github.com/googleapis/gax-go/v2 require minor v2.13.0 -> v2.14.0 age adoption passing confidence
github.com/jhump/protoreflect require minor v1.16.0 -> v1.17.0 age adoption passing confidence
golang.org/x/text require minor v0.16.0 -> v0.20.0 age adoption passing confidence
google.golang.org/api require minor v0.189.0 -> v0.206.0 age adoption passing confidence
google.golang.org/genproto require digest d784300 -> 65e8d21 age adoption passing confidence
google.golang.org/genproto/googleapis/api require digest d784300 -> 65e8d21 age adoption passing confidence
google.golang.org/genproto/googleapis/rpc require digest d784300 -> 65e8d21 age adoption passing confidence
google.golang.org/grpc require minor v1.64.1 -> v1.68.0 age adoption passing confidence
google.golang.org/protobuf require minor v1.34.2 -> v1.35.2 age adoption passing confidence

Release Notes

bazel-contrib/setup-bazel (bazel-contrib/setup-bazel)

v0.9.1

Compare Source

What's Changed

New Contributors

Full Changelog: bazel-contrib/setup-bazel@0.9.0...0.9.1

v0.9.0

Compare Source

What's Changed

New Contributors

Full Changelog: bazel-contrib/setup-bazel@0.8.5...0.9.0

googleapis/google-cloud-go (cloud.google.com/go)

v0.116.0

Compare Source

Features

v0.115.1

Compare Source

Bug Fixes
googleapis/gax-go (github.com/googleapis/gax-go/v2)

v2.14.0

Compare Source

Features
jhump/protoreflect (github.com/jhump/protoreflect)

v1.17.0

Compare Source

This release deprecates some packages that have newer alternatives in the Protobuf runtime. It also includes some small additions to the grpcreflect and desc/sourceinfo packages. The rest of the changes are bug fixes.

"github.com/jhump/protoreflect/desc"

Changes:

  • This package is now deprecated. Though use of this package is still needed in order to use a handful of other packages in this repo, many usages should instead prefer the "google.golang.org/protobuf/reflect/protoreflect" package in the Protobuf runtime. In a v2 of this repo, this package will no longer be present.
  • A performance improvement was contributed that speeds up the MessageDescriptor.FindFieldByName method.
"github.com/jhump/protoreflect/desc/protoparse"

Changes and bugfixes:

  • This package is now deprecated. Most usages should instead prefer the "github.com/bufbuild/protocompile" package. There are some behavioral differences that we hope to address with additional API and enhancements to protocompile. But the protoparse package here is just a veneer on top of protocompile and we plan to do as little maintenance as possible here. In a v2 of this repo, this package will no longer be present.
  • The protocompile dependency has been updated to use a more recent version of that package. This addresses potential panics when calling Parser.ParseButDontLink.
"github.com/jhump/protoreflect/desc/sourceinfo"

Changes and bugfixes:

  • A possible panic when calling sourceinfo.GlobalFiles.FindDescriptorByName has been fixed.
  • Descriptors returned from the sourceinfo.GlobalFiles registry or from the various Wrap* functions could induce panics in user code if querying for non-existent elements. For example, calling messageDescriptor.Fields().ByNumber(123) could return a typed-nil value on failure, instead of a nil interface. This would result in nil-dereference panics if methods were called on this later. These have been fixed.
  • Descriptors returned from the sourceinfo.GlobalFiles registry and from the various Wrap* functions had concrete types defined in this package, not in the Protobuf runtime. But the protoreflect.Descriptor interface has a "do not implement" marker, indicating that concrete types implementing the interface should not be implemented outside of that module. To avoid future issues with the Protobuf runtime, there are no more implementations in this repo. Instead of wrapping other descriptor implementations (via embedding, and then overriding some methods), this package now builds new descriptors, using the protodesc package in the Protobuf runtime module.
  • The various Wrap* functions are now deprecated. The name is no longer accurate since they no longer return wrapper values. Also the new implementation, which builds new descriptors, can fail (though unlikely), but the existing signature of these functions did not allow for returning an error. So these functions could possibly panic in the face of malformed input descriptors. Users should use the new AddSourceInfoTo* versions of these functions instead.

Additions:

  • Adds AddSourceInfoTo* functions to replace the Wrap* functions. These functions augment the input descriptors by adding source code information to them.
"github.com/jhump/protoreflect/dynamic"

Changes:

  • This package is now deprecated. Most usages should instead prefer the "google.golang.org/protobuf/types/dynamicpb" package in the Protobuf runtime. In a v2 of this repo, this package will no longer be present.
"github.com/jhump/protoreflect/grpcreflect"

Additions:

  • Adds a new NewClientV1 function to return a client that uses v1 of the server reflection service. This fills the gap in the existing factory functions, NewClientV1Alpha and NewClientAuto.
  • Adds a new AllowFallbackResolver method to the *grpcreflect.Client type. This allows the client to be configured with an alternate resolver that can be used as a backup when trying to satisfy dependencies, for cases where the remote server is non-authoritative and unable to provide all of them.
googleapis/google-api-go-client (google.golang.org/api)

v0.206.0

Compare Source

Features

v0.205.0

Compare Source

Features

v0.204.0

Compare Source

Features
Bug Fixes
  • transport/grpc: Pass through cert source to new auth lib (#​2840) (c67e7c0)
Documentation

v0.203.0

Compare Source

Features

v0.202.0

Compare Source

Features

v0.201.0

Compare Source

Features

v0.200.0

Compare Source

Features

v0.199.0

Compare Source

Features

v0.198.0

Compare Source

Features

v0.197.0

Compare Source

Features
Bug Fixes
  • transport: Set UniverseDomain in http.NewClient for new auth (#​2773) (140d0a5)

v0.196.0

Compare Source

Features

v0.195.0

Compare Source

Features

v0.194.0

Compare Source

Features
Bug Fixes

v0.193.0

Compare Source

Features

v0.192.0

Compare Source

Features
Bug Fixes
  • internal/cba: Update credsNewAuth path to use nil oauth2 client (#​2731) (b457582)

v0.191.0

Compare Source

Features
Bug Fixes

v0.190.0

Compare Source

Features
Reverts
grpc/grpc-go (google.golang.org/grpc)

v1.68.0: Release 1.68.0

Compare Source

Behavior Changes

  • stats/opentelemetry/csm: Get mesh_id local label from "CSM_MESH_ID" environment variable, rather than parsing from bootstrap file (#​7740)
  • orca (experimental): if using an ORCA listener, it must now be registered only on a READY SubConn, and the listener will automatically be stopped when the connection is lost. (#​7663)
  • client: ClientConn.Close() now closes transports simultaneously and waits for transports to be closed before returning. (#​7666)
  • credentials: TLS credentials created via NewTLS that use tls.Config.GetConfigForClient will now have CipherSuites, supported TLS versions and ALPN configured automatically. These were previously only set for configs not using the GetConfigForClient option. (#​7709)

Bug Fixes

  • transport: prevent deadlock in client transport shutdown when writing the GOAWAY frame hangs. (#​7662)
  • mem: reuse buffers more accurately by using slice capacity instead of length (#​7702)
  • status: Fix regression caused by #​6919 in status.Details() causing it to return a wrapped type when getting proto messages generated with protoc-gen-go < v1. (#​7724)

Dependencies

  • Bump minimum supported Go version to go1.22.7. (#​7624)

v1.67.1: Release 1.67.1

Compare Source

Bug Fixes

  • transport: Fix a bug causing stream failures due to miscalculation of the flow control window in both clients and servers. (#​7667)
  • xds/server: Fix xDS Server memory leak. (#​7681)

v1.67.0: Release 1.67.0

Compare Source

Bug Fixes

  • ringhash: when used with multiple EDS priorities, fix bug that could prevent a higher priority from recovering from transient failure. (#​7364)

Behavior Changes

  • In accordance with RFC 7540, clients and servers will now reject TLS connections that don't support ALPN. This can be disabled by setting the environment variable GRPC_ENFORCE_ALPN_ENABLED to false (case insensitive). Please file a bug if you encounter any issues with this behavior. The environment variable to revert this behavior will be removed in an upcoming release. (#​7535)

v1.66.3: Release 1.66.3

Compare Source

Bug Fixes

  • transport: Fix a bug causing stream failures due to miscalculation of the flow control window in both clients and servers. (#​7667)
  • xds/server: Fix xDS Server memory leak. (#​7681)

v1.66.2: Release 1.66.2

Compare Source

Dependencies

  • Remove unintentional dependency on the testing package (#​7579)
  • Remove unintentional dependency on the flate package (#​7595)

Bug Fixes

  • client: fix a bug that prevented memory reuse after handling unary RPCs (#​7571)

v1.66.1

Compare Source

v1.66.0: Release 1.66.0

Compare Source

New Features

Bug Fixes

  • grpc: Clients now return status code INTERNAL instead of UNIMPLEMENTED when the server uses an unsupported compressor. This is consistent with the [gRPC compression spec](ht

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate-bot renovate-bot requested review from a team as code owners September 9, 2024 00:05
@forking-renovate forking-renovate bot added the automerge Summon MOG for automerging label Sep 9, 2024
Copy link

forking-renovate bot commented Sep 9, 2024

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 4 additional dependencies were updated

Details:

Package Change
github.com/bufbuild/protocompile v0.10.0 -> v0.14.1
golang.org/x/net v0.27.0 -> v0.30.0
golang.org/x/sys v0.22.0 -> v0.26.0
google.golang.org/grpc v1.64.1 -> v1.67.1
File name: showcase/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 19 additional dependencies were updated

Details:

Package Change
cloud.google.com/go/auth v0.7.2 -> v0.10.1
cloud.google.com/go/auth/oauth2adapt v0.2.3 -> v0.2.5
cloud.google.com/go/compute/metadata v0.5.0 -> v0.5.2
cloud.google.com/go/longrunning v0.5.9 -> v0.6.2
github.com/google/s2a-go v0.1.7 -> v0.1.8
github.com/googleapis/enterprise-certificate-proxy v0.3.2 -> v0.3.4
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.49.0 -> v0.54.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.49.0 -> v0.54.0
go.opentelemetry.io/otel v1.24.0 -> v1.29.0
go.opentelemetry.io/otel/metric v1.24.0 -> v1.29.0
go.opentelemetry.io/otel/trace v1.24.0 -> v1.29.0
golang.org/x/crypto v0.25.0 -> v0.28.0
golang.org/x/net v0.27.0 -> v0.30.0
golang.org/x/oauth2 v0.21.0 -> v0.23.0
golang.org/x/sync v0.7.0 -> v0.8.0
golang.org/x/sys v0.22.0 -> v0.26.0
golang.org/x/text v0.16.0 -> v0.19.0
golang.org/x/time v0.5.0 -> v0.7.0
google.golang.org/genproto/googleapis/api v0.0.0-20240711142825-46eb208f015d -> v0.0.0-20241021214115-324edc3d5d38

@trusted-contributions-gcf trusted-contributions-gcf bot added the kokoro:force-run Add this label to force Kokoro to re-run the tests. label Sep 9, 2024
@quartzmo
Copy link
Member

quartzmo commented Sep 9, 2024

lint is failing:

Error: internal/gencli/flag.go:24:2: "github.com/jhump/protoreflect/desc" is deprecated: This module was created for use with the older "v1" Protobuf API in github.com/golang/protobuf. However, much of this module is no longer necessary as the newer "v2" API in google.golang.org/protobuf provides similar capabilities. Instead of using this github.com/jhump/protoreflect/desc package, see [google.golang.org/protobuf/reflect/protoreflect]. (SA1019)

Copy link
Contributor

Merge-on-green attempted to merge your PR for 6 hours, but it was not mergeable because either one of your required status checks failed, one of your required reviews was not approved, or there is a do not merge label. Learn more about your required status checks here: https://help.github.com/en/github/administering-a-repository/enabling-required-status-checks. You can remove and reapply the label to re-run the bot.

@gcf-merge-on-green gcf-merge-on-green bot removed the automerge Summon MOG for automerging label Sep 10, 2024
@renovate-bot renovate-bot force-pushed the renovate/deps branch 4 times, most recently from e7157c8 to a0e18d5 Compare September 12, 2024 20:00
@renovate-bot renovate-bot force-pushed the renovate/deps branch 5 times, most recently from de72264 to 1946cdb Compare September 26, 2024 00:39
@renovate-bot renovate-bot force-pushed the renovate/deps branch 4 times, most recently from cfb8429 to b0d432a Compare October 7, 2024 15:34
@renovate-bot renovate-bot force-pushed the renovate/deps branch 4 times, most recently from c04ceb9 to 5eaaed1 Compare October 10, 2024 01:05
@renovate-bot renovate-bot force-pushed the renovate/deps branch 2 times, most recently from 027ae28 to 7052552 Compare October 21, 2024 22:17
@renovate-bot renovate-bot force-pushed the renovate/deps branch 2 times, most recently from 7207fca to 44c2954 Compare October 23, 2024 18:25
@renovate-bot renovate-bot force-pushed the renovate/deps branch 3 times, most recently from 8244b4f to d8e832c Compare October 30, 2024 22:21
@renovate-bot renovate-bot force-pushed the renovate/deps branch 2 times, most recently from 1245d3e to 9615f83 Compare November 4, 2024 18:17
@renovate-bot renovate-bot force-pushed the renovate/deps branch 3 times, most recently from dabb864 to edbd5e8 Compare November 7, 2024 19:12
Copy link

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: showcase/go.sum
Command failed: go get -d -t ./...
go: module google.golang.org/[email protected] requires go >= 1.22.7; switching to go1.22.9
go: downloading go1.22.9 (linux/amd64)
go: download go1.22.9: golang.org/[email protected]: verifying module: checksum database disabled by GOSUMDB=off

@renovate-bot renovate-bot force-pushed the renovate/deps branch 7 times, most recently from 59a122d to ed1cfdd Compare November 14, 2024 21:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kokoro:force-run Add this label to force Kokoro to re-run the tests.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants