Skip to content

fix(deps): update go-libraries - #6295

Open
renovate-bot wants to merge 1 commit into
google:masterfrom
renovate-bot:renovate/go-libraries
Open

renovate-bot wants to merge 1 commit into
google:masterfrom
renovate-bot:renovate/go-libraries

Conversation

@renovate-bot

@renovate-bot renovate-bot commented Nov 3, 2026 •

Copy link
Copy Markdown
Collaborator

This PR contains the following updates:

Package Change Age Confidence
charm.land/bubbletea/v2 v2.1.0 → v2.1.1 age confidence
cloud.google.com/go/datastore v1.27.1 → v1.28.1 age confidence
cloud.google.com/go/monitoring v1.31.0 → v1.32.1 age confidence
cloud.google.com/go/pubsub/v2 v2.7.0 → v2.8.0 age confidence
cloud.google.com/go/storage v1.69.0 → v1.70.0 age confidence
github.com/jackc/pgx/v5 v5.11.0 → v5.12.0 age confidence
github.com/yuin/goldmark/v2 v2.1.6 → v2.1.13 age confidence
go.yaml.in/yaml/v4 v4.0.0-rc.6 → v4.0.0-rc.8 age confidence
google.golang.org/api v0.306.0 → v0.310.0 age confidence
google.golang.org/grpc v1.84.0 → v1.85.0 age confidence
k8s.io/apimachinery v0.37.1 → v0.37.2 age confidence

Release Notes

charmbracelet/bubbletea (charm.land/bubbletea/v2)

v2.1.1

Compare Source

Terminal size query vulnerability

This patch version fixes a vulnerability reported by @​Reload3d. You can find the details of the exploit here.

Best regards,
Charm XX 💫

Changelog

Fixed
Other stuff

The Charm logo

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

googleapis/google-cloud-go (cloud.google.com/go/datastore)

v1.28.1: speech: v1.28.1

Bug Fixes
  • speech: Upgrade gRPC service registration func (bc93e83)

v1.28.0: video: v1.28.0

v1.28.0 (2026-04-02)

jackc/pgx (github.com/jackc/pgx/v5)

v5.12.0

Compare Source

yuin/goldmark (github.com/yuin/goldmark/v2)

v2.1.13

Compare Source

  • refactor(parse): Value.Str and Value.Bytes should return raw data
  • fix(util): fix #​623
  • fix(extension): fix #​620, fix #​621
  • fix(parser): fix #​619

v2.1.12

Compare Source

  • chore: adjust linkify spe
  • fix(parser): fix #​618
  • fix(extension): fix #​617

v2.1.11

Compare Source

v2.1.10

Compare Source

  • refactor(parser,extension): simplify linkify parser
  • fix(parser): fix #​615
  • docs(README): update benchmark results

v2.1.9

Compare Source

  • fix(extension): fix footnotes in other footnotes
  • perf: cache closing tag result
  • fix: fail to parse unclosed html blocks(6)
  • perf: limit email local-part length
  • perf: limit footnote label length
  • perf: cache isThematicBreak result
  • fix(extension): fix table parsing when a delimiter-like row follows a table

v2.1.8

Compare Source

v2.1.7

Compare Source

  • fix(parser): fix the fast path for emphasis parsing to handle linkify prefixes correctly
yaml/go-yaml (go.yaml.in/yaml/v4)

v4.0.0-rc.8

Compare Source

v4.0.0-rc.7

Compare Source

googleapis/google-api-go-client (google.golang.org/api)

v0.310.0

Compare Source

Features

v0.309.0

Compare Source

Features

v0.308.0

Compare Source

Features

v0.307.0

Compare Source

Features
grpc/grpc-go (google.golang.org/grpc)

v1.85.0: Release 1.85.0

Compare Source

New Features

  • stats: Expose the effective client authority (sent on the wire as the HTTP/2 :authority header) in client stats.OutHeader events. (#​9296)
  • metadata: Add ValueFromOutgoingContext, which reads a single metadata value from outgoing context without copying the entire outgoing metadata into a new map. (#​9282)

Bug Fixes

  • transport: Refine control buffer throttling to only count peer-induced control frames, raise the default GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT from 100 to 10,000, and close client connections if reads remain throttled for 10s. (#​9563)
  • server: Ensure Stop() forcefully terminates the server while GracefulStop() is waiting for active handlers to complete. (#​9394)
  • server: Unconditionally increment the highest-seen stream ID on when handling HEADERS frames to comply with RFC 7540 §5.1.1. Previously, truncated HEADERS frames left the connection in an inconsistent state and allowed stream IDs to be reused by clients without resulting in a protocol error. (#​9414)
  • server: Terminate streams immediately when a HEADERS frame includes the EndStream bit. Previously, this caused server handlers to hang when reading a message. (#​9391)
  • server: Reject requests missing both :authority and Host headers with HTTP 400 and status Internal. (#​9365)
  • xds: Fix a bug where route header matchers with non-lowercase names failed to match routes. (#​9353)
  • client: Ensure retried RPCs use the correct :authority value specified by the LB policy instead of inheriting it from a previous attempt. (#​9277)
  • transport: Fail streams with io.ErrUnexpectedEOF instead of io.EOF upon receiving truncated message headers or bodies after partial data has already been received. (#​9204)
kubernetes/apimachinery (k8s.io/apimachinery)

v0.37.2

Compare Source


Configuration

📅 Schedule: (in timezone Australia/Sydney)

  • Branch creation
    • "before 6am on wednesday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@forking-renovate forking-renovate Bot added the dependencies Pull requests that update a dependency file label Nov 3, 2026
@forking-renovate

forking-renovate Bot commented Nov 3, 2026 •

Copy link
Copy Markdown

ℹ️ Artifact update notice

File name: bindings/go/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 2 additional dependencies were updated

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=7 days

Details:

Package Change
google.golang.org/genproto/googleapis/api v0.0.0-20260706201446-f0a921348800 -> v0.0.0-20260817212433-ac3dfec99bb1
google.golang.org/genproto/googleapis/rpc v0.0.0-20260706201446-f0a921348800 -> v0.0.0-20260817212433-ac3dfec99bb1
File name: go/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 9 additional dependencies were updated

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=7 days

Details:

Package Change
google.golang.org/genproto/googleapis/api v0.0.0-20260928230214-8a89bd6388cc -> v0.0.0-20261012220534-4341edf3f941
cel.dev/expr v0.25.2 -> v0.25.3
cloud.google.com/go/auth v0.24.1-0.20261001053825-dbc26066f70a -> v0.24.1
cloud.google.com/go/iam v1.12.0 -> v1.14.0
github.com/envoyproxy/go-control-plane/envoy v1.37.0 -> v1.39.1-0.20260819172001-e6e3fd93e4be
github.com/googleapis/enterprise-certificate-proxy v0.3.23 -> v0.3.24
github.com/googleapis/gax-go/v2 v2.26.2 -> v2.27.0
github.com/jackc/puddle/v2 v2.2.2 -> v2.2.3
google.golang.org/genproto v0.0.0-20260715232425-e75dac1f907d -> v0.0.0-20261012220534-4341edf3f941

@renovate-bot
renovate-bot force-pushed the renovate/go-libraries branch 8 times, most recently from 18bbe0b to fce5a32 Compare November 7, 2026 20:46
@renovate-bot
renovate-bot force-pushed the renovate/go-libraries branch from fce5a32 to 3bf50ac Compare November 9, 2026 05:47

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant