Skip to content

chore(deps): bump the go-mod group across 1 directory with 2 updates - #417

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-mod-6d8667c972
Closed

chore(deps): bump the go-mod group across 1 directory with 2 updates#417
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-mod-6d8667c972

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 11, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-mod group with 2 updates in the / directory: github.com/magefile/mage and google.golang.org/grpc.

Updates github.com/magefile/mage from 1.17.1 to 1.17.2

Release notes

Sourced from github.com/magefile/mage's releases.

v1.17.2 - Tab Completion

What's New

Tab completion is now available by running mage -install <shell> where the currently supported shells are zsh, bash, fish, and powershell. This was a long-requested feature that always made me nervous because it presumes a lot about your local machine... but I guess we're in for it now. Please report any issues you see.... it's rather a hard feature to test. But... it works on my machine? 😬

Fixed a backtick bug in comments and mage -l and mage -h no longer require compiling a binary, so they're way faster now.

Changelog

  • 0953947c1673fd745a51c032aadeb3c63f9f3368 make -h no long require compiling (#552)
  • 791a5b40794d4bcdd840f7e7523d886ac25b2a96 Support Tab Completion (#551)
  • cff82a6fab83f756a382e841029a537714bd9a02 fix bug #537 - backticks in comments break output (#544)
Commits

Updates google.golang.org/grpc from 1.80.0 to 1.81.1

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.81.1

Security

  • xds/rbac: Fix a potential authorization bypass caused by incorrectly falling through URI/DNS SANs to Subject Distinguished Name (DN) when matching the authenticated principal name. With this fix, only the first non-empty identity source will be used, as per gRFC A41. (#9111)

Bug Fixes

  • otel: Segregate client and server RPC information used for metrics and traces, to avoid one overwriting the other. (#9081)

Release 1.81.0

Behavior Changes

  • balancer/rls: Switch gauge metrics to asynchronous emission (once per collection cycle) to reduce telemetry noise and align with other gRPC language implementations. (#8808)

Dependencies

  • Minimum supported Go version is now 1.25. (#8969)

Bug Fixes

  • xds: Use the leaf cluster's security config for the TLS handshake instead of the aggregate cluster's config. (#8956)
  • transport: Send a RST_STREAM when receiving an END_STREAM when the stream is not already half-closed. (#8832)
  • xds: Fix ADS resource name validation to prevent a panic. (#8970)

New Features

  • grpc/stats: Add support for custom labels in per-call metrics (gRFC A108). (#9008)
  • xds: Add support for Server Name Indication (SNI) and SAN validation (gRFC A101). Disabled by default. To enable, set GRPC_EXPERIMENTAL_XDS_SNI=true environment variable. (#9016)
  • xds: Add support to control which fields get propagated from ORCA backend metric reports to LRS load reports (gRFC A85). Disabled by default. To enable, set GRPC_EXPERIMENTAL_XDS_ORCA_LRS_PROPAGATION=true. (#9005)
  • xds: Add metrics to track xDS client connectivity and cached resource state (gRFC A78). (#8807)
  • stats/otel: Enhance grpc.subchannel.disconnections metric by adding disconnection reason to the grpc.disconnect_error label (gRFC A94). This provides granular insights into why subchannels are closing. (#8973)
  • mem: Add mem.Buffer.Slice() API to slice the buffer like a slice. (#8977)

Performance Improvements

  • alts: Pool read buffers to lower memory utilization when sockets are unreadable. (#8964)
  • transport: Pool HTTP/2 framer read buffers to reduce idle memory consumption. Currently limited to Linux for ALTS and non-encrypted transports (TCP, Unix). To disable, set GRPC_GO_EXPERIMENTAL_HTTP_FRAMER_READ_BUFFER_POOLING=false and report any issues. (#9032)
Commits

@dependabot dependabot Bot added the area/dependencies Affects dependencies label May 11, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner May 11, 2026 02:53
Bumps the go-mod group with 2 updates in the / directory: [github.com/magefile/mage](https://github.com/magefile/mage) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).


Updates `github.com/magefile/mage` from 1.17.1 to 1.17.2
- [Release notes](https://github.com/magefile/mage/releases)
- [Commits](magefile/mage@v1.17.1...v1.17.2)

Updates `google.golang.org/grpc` from 1.80.0 to 1.81.1
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.80.0...v1.81.1)

---
updated-dependencies:
- dependency-name: github.com/magefile/mage
  dependency-version: 1.17.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-mod
- dependency-name: google.golang.org/grpc
  dependency-version: 1.81.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-mod
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/go-mod-6d8667c972 branch from 4b24295 to b81ae72 Compare May 25, 2026 03:14
@dependabot @github

dependabot Bot commented on behalf of github Jun 15, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jun 15, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/go-mod-6d8667c972 branch June 15, 2026 02:52
@github-actions github-actions Bot locked and limited conversation to collaborators Jun 15, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

area/dependencies Affects dependencies

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants