fix(deps): update go dependencies (non-major) by renovate[bot] · Pull Request #102 · usetero/policy-go

renovate · 2026-07-31T07:02:39Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/usetero/policy-go/policy	`v1.12.0` → `v1.12.1`
github.com/usetero/policy-go/proto	`v1.11.0` → `v1.11.1`
go.opentelemetry.io/proto/otlp	`v1.11.0` → `v1.11.1`
go.opentelemetry.io/proto/otlp/profiles/v1development	`v0.4.0` → `v0.4.1`
google.golang.org/grpc	`v1.83.2` → `v1.84.0`

Release Notes

usetero/policy-go (github.com/usetero/policy-go/policy)

`v1.12.1`: policy: v1.12.1

Bug Fixes

deps: update grpc to v1.83.2 and consolidate dependency updates (#108) (f5d3f6e)

open-telemetry/opentelemetry-proto-go (go.opentelemetry.io/proto/otlp)

`v1.11.1`: /v0.4.1

Compare Source

Generated Go code for the v1.11.1 version of the OTLP.

What's Changed

chore(deps): update module github.com/go-git/go-billy/v5 to v5.9.1 by @renovate[bot] in #664
chore(deps): update ossf/scorecard-action action to v2.4.4 by @renovate[bot] in #663
chore(deps): update googleapis to 3fe39f3 by @renovate[bot] in #662
chore(deps): update googleapis to b2f2020 by @renovate[bot] in #665
chore(deps): update module go.yaml.in/yaml/v3 to v3.0.5 by @renovate[bot] in #666
chore(deps): update googleapis to 6c54ddd by @renovate[bot] in #667
chore(deps): update google.golang.org/genproto/googleapis/api digest to 8efbd57 by @renovate[bot] in #670
chore(deps): update module github.com/go-git/go-git/v5 to v5.19.2 by @renovate[bot] in #669
chore(deps): update google.golang.org/genproto/googleapis/rpc digest to 8efbd57 by @renovate[bot] in #671
chore(deps): update github/codeql-action action to v4.37.4 by @renovate[bot] in #673
fix(deps): update module google.golang.org/grpc to v1.83.0 by @renovate[bot] in #672
chore: Change Renovate configuration to best practices by @thompson-tomo in #674
chore(deps): pin dependencies by @renovate[bot] in #677
chore(deps): update github/codeql-action action to v4.37.5 by @renovate[bot] in #676
chore(deps): update googleapis to 6ac0973 by @renovate[bot] in #678
chore(deps): update github/codeql-action action to v4.37.6 by @renovate[bot] in #679
ci: add shared security scanning workflow by @opentelemetrybot in #675
chore(deps): update open-telemetry/shared-workflows action to v0.5.0 by @renovate[bot] in #682
chore(deps): update module github.com/cloudflare/circl to v1.6.5 by @renovate[bot] in #681
fix(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2 to v2.30.0 by @renovate[bot] in #680
chore(deps): update googleapis to c8921c7 by @renovate[bot] in #684
chore(deps): update open-telemetry/shared-workflows action to v0.6.0 by @renovate[bot] in #683
chore(deps): update googleapis to ec0a776 by @renovate[bot] in #685
fix(deps): update module google.golang.org/protobuf to v1.36.12 by @renovate[bot] in #686
chore(deps): update module golang.org/x/mod to v0.39.0 by @renovate[bot] in #687
ci: use shared OSSF Scorecard workflow by @opentelemetrybot in #688
chore(deps): update all golang.org/x packages by @renovate[bot] in #689
chore(deps): update otel/build-protobuf docker tag to v0.26.0 by @renovate[bot] in #668
chore(deps): update module golang.org/x/mod to v0.40.0 by @renovate[bot] in #690
chore(deps): update open-telemetry/shared-workflows action to v0.7.0 by @renovate[bot] in #691
chore(deps): update googleapis to ac3dfec by @renovate[bot] in #692
chore(deps): update googleapis to 1b09341 by @renovate[bot] in #693
fix(deps): update module google.golang.org/grpc to v1.83.1 by @renovate[bot] in #694
chore(deps): update googleapis to 08b0e42 by @renovate[bot] in #695
chore(deps): update open-telemetry/shared-workflows action to v0.8.0 by @renovate[bot] in #696
chore(deps): update open-telemetry/shared-workflows action to v0.10.0 by @renovate[bot] in #697
chore(deps): update open-telemetry/shared-workflows action to v0.11.0 by @renovate[bot] in #698
chore(deps): update googleapis to da73d73 by @renovate[bot] in #700
fix(deps): update module google.golang.org/grpc to v1.83.2 by @renovate[bot] in #699
chore(deps): update module github.com/skeema/knownhosts to v1.3.3 by @renovate[bot] in #702
chore(deps): update open-telemetry/shared-workflows action to v0.12.0 by @renovate[bot] in #701
chore(deps): update googleapis to 18b4a75 by @renovate[bot] in #703
chore(deps): update open-telemetry/shared-workflows action to v0.13.0 by @renovate[bot] in #704
chore(deps): update googleapis to f8649dd by @renovate[bot] in #706
chore(deps): update googleapis to f61a6ca by @renovate[bot] in #708
Make slim OTLP descriptors coexist with canonical OTLP by @pellared in #707
chore(deps): update open-telemetry/shared-workflows action to v0.14.0 by @renovate[bot] in #710
Drop support for Go 1.25 by @pellared in #711
chore(deps): update all golang.org/x packages by @renovate[bot] in #709
chore(deps): update googleapis to eeb232e by @renovate[bot] in #713
fix(deps): update module google.golang.org/grpc to v1.84.0 by @renovate[bot] in #712
chore(deps): update googleapis to cecb647 by @renovate[bot] in #714
chore(deps): update googleapis to b142276 by @renovate[bot] in #715
chore(deps): update open-telemetry/shared-workflows action to v0.15.0 by @renovate[bot] in #716
chore(deps): update open-telemetry/shared-workflows action to v0.16.0 by @renovate[bot] in #717
chore(deps): update module github.com/protonmail/go-crypto to v1.5.0 by @renovate[bot] in #718
chore(deps): update module github.com/protonmail/go-crypto to v1.5.1 by @renovate[bot] in #719
fix(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2 to v2.31.0 by @renovate[bot] in #720
chore(deps): update googleapis to 8a89bd6 by @renovate[bot] in #723
chore(deps): update open-telemetry/shared-workflows action to v0.17.0 by @renovate[bot] in #722
chore(deps): update module github.com/protonmail/go-crypto to v1.5.2 by @renovate[bot] in #721
Release v1.11.1 by @pellared in #724

New Contributors

@thompson-tomo made their first contribution in #674

Full Changelog: open-telemetry/opentelemetry-proto-go@v1.11.0...v1.11.1

grpc/grpc-go (google.golang.org/grpc)

`v1.84.0`: Release 1.84.0

Compare Source

Behavior Changes

stats/otel: The grpc.lb.pick_first.* metrics have been removed and replaced with grpc.subchannel.* metrics. See gRFC A94 for more details. (#9215)

New Features

xds: Add support for contains_match in route header matchers. (#9223)
- Special Thanks: @nvxbug

Bug Fixes

client: Fix a bug where a ClientConn could get permanently stuck in IDLE when an RPC was canceled during stream creation. Previously, such cancellations triggered stream cleanup twice, corrupting the channel's idleness state and causing subsequent RPCs to fail with deadline exceeded errors. (#9191)
- Special Thanks: @utkuozdemir
client: Fix a bug where non-gRPC HTTP responses ending with an empty DATA frame failed the RPC with status code Internal instead of preserving the HTTP-mapped status code and response body. (#9217)
- Special Thanks: @chengxilo
credentials: Validate metadata returned by per-RPC credentials, failing the RPC with status code Internal if invalid keys or values are found. Previously, invalid metadata from credentials was sent to the server in outgoing HTTP/2 requests. (#9202)
- Special Thanks: @buger
credentials/sts: Prevent potential token leakage by disallowing HTTP redirects during STS token exchange. Previously, 3xx redirects were followed automatically, replaying the request body containing authentication tokens to the redirect destination. (#9299)
- Special Thanks: @nvxbug
randomsubsetting: Ignore endpoints that contain no addresses. Previously, this could cause the policy to panic while computing hashes. (#9259)
- Special Thanks: @fallintoplace
stats/otel: Ensure method names are populated in trace spans when metrics are disabled. Previously, running with tracing enabled and metrics disabled resulted in server trace spans lacking the RPC method name (recording only "Recv."). (#9262)
transport: Return io.ErrUnexpectedEOF when EOF is encountered after partial header or message body reads. Previously, partial reads could return a plain io.EOF, failing to distinguish truncated data from a clean end of stream. (#9204)
- Special Thanks: @buger
transport: Validate metadata supplied by balancers (in PickResult.Metadata) and resolver addresses, failing the RPC with status code Internal if invalid keys or values are found. Previously, invalid metadata from these sources was sent to the server in outgoing HTTP/2 requests. (#9203)
- Special Thanks: @buger
xds: Fix a rare corner case that could prevent a cluster from being removed when it is no longer in use. (#9140)
xds: Fix panic during route matching for routes containing header matchers with empty exact_match strings. (#9223)
- Special Thanks: @nvxbug
xds: Reject routes containing header matchers with empty prefix_match or suffix_match strings. Previously, this caused a panic during route matching. (#9223)
- Special Thanks: @nvxbug
xds: Fix EDS drop policies being applied at a much lower rate than configured due to an integer overflow. (#9257)
- Special Thanks: @nvxbug
xds: Reject EDS resources containing drop policies with unsupported denominators. Previously, such resources caused the client to panic when calculating drop rates. (#9218)
- Special Thanks: @nvxbug
xds/rbac: Reject RBAC configurations containing nested Principal or Permission rules with :scheme or grpc- prefixed header matchers. Previously, such configurations could cause DENY policies to fail open. (#9258)
- Special Thanks: @nvxbug
xds/rbac: Rewrite host header matchers to :authority in nested Principal and Permission rules. Previously, this rewrite only applied to top-level rules, causing nested host matchers to never match incoming requests and DENY policies to fail open. (#9258)
- Special Thanks: @nvxbug
xds/rbac: Reject CidrRanges with an unset prefix length. Previously, an omitted prefix_len field caused a panic during RBAC configuration parsing. (#9250)
- Special Thanks: @nvxbug

Performance Improvements

transport: Avoid a heap allocation when flushing shared write buffers. (#9233)
- Special Thanks: @zaidoon1
credentials/alts: Support dynamic frame size negotiation and add the GRPC_GO_EXPERIMENTAL_ALTS_MAX_FRAME_SIZE environment variable (default 4KiB, max 512KiB) to configure the maximum ALTS record frame size. (#9268)

Configuration

📅 Schedule: (in timezone America/New_York)

Branch creation
- "after 10pm every weekday,before 6am every weekday,every weekend"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

macroscopeapp · 2026-07-31T07:03:30Z

Approvability

Verdict: Would Approve

Macroscope's review found this PR approvable — This is an automated non-major dependency update confined to repository-ignored dependency/lock/generated paths, with no non-ignored production logic or sensitive configuration changes in scope. Its reviewable runtime impact is therefore limited to dependency resolution and generated artifacts.

Not approved because:

Credit balance exhausted. Approvability relies on correctness review in order to determine eligibility

^{Review your spending limits in Billing settings. You can add or adjust custom eligibility rules. Learn more.}

renovate · 2026-10-03T20:56:03Z

ℹ️ Artifact update notice

File name: policy/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

5 additional dependencies were updated
The go directive was updated for compatibility reasons

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=3 days

Details:

Package	Change
`go`	`1.25.0` -> `1.26.0`
`google.golang.org/genproto/googleapis/api`	`v0.0.0-20260911204522-f61a6ca850bd` -> `v0.0.0-20260928230214-8a89bd6388cc`
`golang.org/x/net`	`v0.58.0` -> `v0.59.0`
`golang.org/x/sys`	`v0.47.0` -> `v0.48.0`
`golang.org/x/text`	`v0.41.0` -> `v0.42.0`
`google.golang.org/genproto/googleapis/rpc`	`v0.0.0-20260904194346-d0f1323225a4` -> `v0.0.0-20260928230214-8a89bd6388cc`

File name: proto/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

5 additional dependencies were updated
The go directive was updated for compatibility reasons

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=3 days

Details:

Package	Change
`go`	`1.25.0` -> `1.26.0`
`google.golang.org/genproto/googleapis/api`	`v0.0.0-20260911204522-f61a6ca850bd` -> `v0.0.0-20260928230214-8a89bd6388cc`
`golang.org/x/net`	`v0.58.0` -> `v0.59.0`
`golang.org/x/sys`	`v0.47.0` -> `v0.48.0`
`golang.org/x/text`	`v0.41.0` -> `v0.42.0`
`google.golang.org/genproto/googleapis/rpc`	`v0.0.0-20260904194346-d0f1323225a4` -> `v0.0.0-20260928230214-8a89bd6388cc`

macroscopeapp Bot previously approved these changes Jul 31, 2026

View reviewed changes

renovate Bot dismissed macroscopeapp[bot]’s stale review via 7efb0e4 August 2, 2026 05:47

renovate Bot force-pushed the renovate/go-dependencies-(non-major) branch from 7cf70ea to 7efb0e4 Compare August 2, 2026 05:47

macroscopeapp Bot previously approved these changes Aug 2, 2026

View reviewed changes

renovate Bot force-pushed the renovate/go-dependencies-(non-major) branch 2 times, most recently from f10a5b8 to f855cb0 Compare August 5, 2026 19:45

renovate Bot dismissed macroscopeapp[bot]’s stale review via 1b97a21 August 8, 2026 21:38

renovate Bot force-pushed the renovate/go-dependencies-(non-major) branch from f855cb0 to 1b97a21 Compare August 8, 2026 21:38

macroscopeapp Bot previously approved these changes Aug 8, 2026

View reviewed changes

renovate Bot dismissed macroscopeapp[bot]’s stale review via e5bbd12 August 13, 2026 17:42

renovate Bot force-pushed the renovate/go-dependencies-(non-major) branch from 1b97a21 to e5bbd12 Compare August 13, 2026 17:42

macroscopeapp Bot previously approved these changes Aug 13, 2026

View reviewed changes

renovate Bot dismissed macroscopeapp[bot]’s stale review via 5048744 August 17, 2026 11:45

renovate Bot force-pushed the renovate/go-dependencies-(non-major) branch from e5bbd12 to 5048744 Compare August 17, 2026 11:45

macroscopeapp Bot previously approved these changes Aug 17, 2026

View reviewed changes

renovate Bot dismissed macroscopeapp[bot]’s stale review via 4e9e423 August 18, 2026 15:03

renovate Bot force-pushed the renovate/go-dependencies-(non-major) branch from 5048744 to 4e9e423 Compare August 18, 2026 15:03

macroscopeapp Bot previously approved these changes Aug 18, 2026

View reviewed changes

renovate Bot dismissed macroscopeapp[bot]’s stale review via c86dbb2 August 20, 2026 10:41

renovate Bot force-pushed the renovate/go-dependencies-(non-major) branch 2 times, most recently from c86dbb2 to 0fd1f6c Compare August 22, 2026 10:02

macroscopeapp Bot previously approved these changes Aug 22, 2026

View reviewed changes

renovate Bot dismissed macroscopeapp[bot]’s stale review via 1c6b4e1 August 22, 2026 15:03

renovate Bot force-pushed the renovate/go-dependencies-(non-major) branch from 0fd1f6c to 1c6b4e1 Compare August 22, 2026 15:03

macroscopeapp Bot previously approved these changes Aug 22, 2026

View reviewed changes

renovate Bot dismissed macroscopeapp[bot]’s stale review via 89ed76a August 28, 2026 21:00

renovate Bot force-pushed the renovate/go-dependencies-(non-major) branch 2 times, most recently from 89ed76a to 22cd0ac Compare August 30, 2026 04:35

macroscopeapp Bot previously approved these changes Aug 30, 2026

View reviewed changes

renovate Bot dismissed macroscopeapp[bot]’s stale review via 31a4d2b August 31, 2026 15:00

renovate Bot force-pushed the renovate/go-dependencies-(non-major) branch from 7b7fcc4 to 31a4d2b Compare August 31, 2026 15:00

macroscopeapp Bot previously approved these changes Aug 31, 2026

View reviewed changes

renovate Bot dismissed macroscopeapp[bot]’s stale review via 4ccb809 August 31, 2026 17:41

renovate Bot force-pushed the renovate/go-dependencies-(non-major) branch from 31a4d2b to 4ccb809 Compare August 31, 2026 17:41

macroscopeapp Bot previously approved these changes Aug 31, 2026

View reviewed changes

renovate Bot dismissed macroscopeapp[bot]’s stale review via 57820fd September 1, 2026 00:29

renovate Bot force-pushed the renovate/go-dependencies-(non-major) branch from 4ccb809 to 57820fd Compare September 1, 2026 00:29

macroscopeapp Bot previously approved these changes Sep 1, 2026

View reviewed changes

renovate Bot dismissed macroscopeapp[bot]’s stale review via 27f1ee3 September 1, 2026 10:14

renovate Bot force-pushed the renovate/go-dependencies-(non-major) branch from 57820fd to 27f1ee3 Compare September 1, 2026 10:14

macroscopeapp Bot previously approved these changes Sep 1, 2026

View reviewed changes

renovate Bot dismissed macroscopeapp[bot]’s stale review via ea4ac9e September 1, 2026 17:05

renovate Bot force-pushed the renovate/go-dependencies-(non-major) branch from 27f1ee3 to ea4ac9e Compare September 1, 2026 17:05

macroscopeapp Bot previously approved these changes Sep 1, 2026

View reviewed changes

renovate Bot dismissed macroscopeapp[bot]’s stale review via 0657c15 September 2, 2026 01:38

renovate Bot force-pushed the renovate/go-dependencies-(non-major) branch from ea4ac9e to 0657c15 Compare September 2, 2026 01:38

macroscopeapp Bot previously approved these changes Sep 2, 2026

View reviewed changes

renovate Bot dismissed macroscopeapp[bot]’s stale review via 681f3d4 September 2, 2026 05:06

renovate Bot force-pushed the renovate/go-dependencies-(non-major) branch 2 times, most recently from 681f3d4 to b67dfba Compare September 2, 2026 09:12

jaronoff97 mentioned this pull request Sep 22, 2026

fix(deps): update grpc to v1.83.2 and consolidate dependency updates #108

Merged

3 tasks done

renovate Bot force-pushed the renovate/go-dependencies-(non-major) branch from b67dfba to 9a21fa1 Compare September 22, 2026 22:56

renovate Bot changed the title ~~fix(deps): update go dependencies (non-major)~~ fix(deps): update module google.golang.org/grpc to v1.84.0 Sep 22, 2026

renovate Bot force-pushed the renovate/go-dependencies-(non-major) branch 2 times, most recently from 9eac634 to b9d8a8e Compare September 26, 2026 02:41

renovate Bot changed the title ~~fix(deps): update module google.golang.org/grpc to v1.84.0~~ fix(deps): update go dependencies (non-major) Sep 26, 2026

fix(deps): update go dependencies (non-major)

2a6b380

renovate Bot force-pushed the renovate/go-dependencies-(non-major) branch from b9d8a8e to 2a6b380 Compare October 3, 2026 20:55

Navigation Menu

Repository navigation

fix(deps): update go dependencies (non-major) - #102

fix(deps): update go dependencies (non-major)#102
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/go-dependencies-(non-major)

renovate Bot commented Jul 31, 2026 •

edited

Loading

Uh oh!

macroscopeapp Bot commented Jul 31, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Oct 3, 2026

Uh oh!

Reviewers

Assignees

Labels

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Jul 31, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v1.12.1: policy: v1.12.1

Bug Fixes

v1.11.1: /v0.4.1

What's Changed

New Contributors

v1.84.0: Release 1.84.0

Behavior Changes

New Features

Bug Fixes

Performance Improvements

Configuration

Uh oh!

macroscopeapp Bot commented Jul 31, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Approvability

Uh oh!

renovate Bot commented Oct 3, 2026

ℹ️ Artifact update notice

File name: policy/go.mod

File name: proto/go.mod

Uh oh!

Reviewers

Assignees

Labels

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Jul 31, 2026 •

edited

Loading

`v1.12.1`: policy: v1.12.1

`v1.11.1`: /v0.4.1

`v1.84.0`: Release 1.84.0

macroscopeapp Bot commented Jul 31, 2026 •

edited

Loading