Skip to content

deps(go): bump the common-golang group across 1 directory with 5 updates#3980

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/go_modules/common-golang-532bb4223b
Open

deps(go): bump the common-golang group across 1 directory with 5 updates#3980
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/go_modules/common-golang-532bb4223b

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 30, 2026

Bumps the common-golang group with 3 updates in the / directory: github.com/Azure/azure-sdk-for-go/sdk/azcore, golang.org/x/oauth2 and google.golang.org/api.

Updates github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.20.0 to 1.21.0

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azcore's releases.

sdk/azcore/v1.21.0

1.21.0 (2026-01-12)

Features Added

  • Added runtime/datetime package which provides specialized time type wrappers for serializing and deserializing time values in various formats used by Azure services.

Other Changes

  • Aligned cloud.AzureGovernment and cloud.AzureChina audience values with Azure CLI
Commits

Updates golang.org/x/oauth2 from 0.33.0 to 0.36.0

Commits
  • 4d954e6 all: upgrade go directive to at least 1.25.0 [generated]
  • 89ff2e1 google: add safer credentials JSON loading options.
  • acc3815 endpoints: fix %q verb use with wrong type
  • See full diff in compare view

Updates google.golang.org/api from 0.256.0 to 0.273.0

Release notes

Sourced from google.golang.org/api's releases.

v0.273.0

0.273.0 (2026-03-23)

Features

v0.272.0

0.272.0 (2026-03-16)

Features

v0.271.0

0.271.0 (2026-03-10)

Features

v0.270.0

0.270.0 (2026-03-08)

Features

... (truncated)

Changelog

Sourced from google.golang.org/api's changelog.

0.273.0 (2026-03-23)

Features

0.272.0 (2026-03-16)

Features

0.271.0 (2026-03-10)

Features

0.270.0 (2026-03-08)

Features

0.269.0 (2026-02-24)

Features

... (truncated)

Commits

Updates google.golang.org/grpc from 1.76.0 to 1.79.3

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.79.3

Security

  • server: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted "deny" rules in interceptors like grpc/authz. Any request with a non-canonical path is now immediately rejected with an Unimplemented error. (#8981)

Release 1.79.2

Bug Fixes

  • stats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (grpc/grpc-go#8874)

Release 1.79.1

Bug Fixes

Release 1.79.0

API Changes

  • mem: Add experimental API SetDefaultBufferPool to change the default buffer pool. (#8806)
  • experimental/stats: Update MetricsRecorder to require embedding the new UnimplementedMetricsRecorder (a no-op struct) in all implementations for forward compatibility. (#8780)

Behavior Changes

  • balancer/weightedtarget: Remove handling of Addresses and only handle Endpoints in resolver updates. (#8841)

New Features

  • experimental/stats: Add support for asynchronous gauge metrics through the new AsyncMetricReporter and RegisterAsyncReporter APIs. (#8780)
  • pickfirst: Add support for weighted random shuffling of endpoints, as described in gRFC A113.
    • This is enabled by default, and can be turned off using the environment variable GRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING. (#8864)
  • xds: Implement :authority rewriting, as specified in gRFC A81. (#8779)
  • balancer/randomsubsetting: Implement the random_subsetting LB policy, as specified in gRFC A68. (#8650)

Bug Fixes

  • credentials/tls: Fix a bug where the port was not stripped from the authority override before validation. (#8726)
  • xds/priority: Fix a bug causing delayed failover to lower-priority clusters when a higher-priority cluster is stuck in CONNECTING state. (#8813)
  • health: Fix a bug where health checks failed for clients using legacy compression options (WithDecompressor or RPCDecompressor). (#8765)
  • transport: Fix an issue where the HTTP/2 server could skip header size checks when terminating a stream early. (#8769)
  • server: Propagate status detail headers, if available, when terminating a stream during request header processing. (#8754)

Performance Improvements

  • credentials/alts: Optimize read buffer alignment to reduce copies. (#8791)
  • mem: Optimize pooling and creation of buffer objects. (#8784)
  • transport: Reduce slice re-allocations by reserving slice capacity. (#8797)

... (truncated)

Commits

Updates google.golang.org/protobuf from 1.36.10 to 1.36.11

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
google.golang.org/grpc [>= 1.78.a, < 1.79]
golang.org/x/oauth2 [>= 0.35.a, < 0.36]
google.golang.org/grpc [> 1.76.0]

@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Mar 30, 2026
@dependabot dependabot bot changed the title deps(go): bump the common-golang group with 5 updates deps(go): bump the common-golang group across 1 directory with 5 updates Mar 30, 2026
@dependabot dependabot bot force-pushed the dependabot/go_modules/common-golang-532bb4223b branch 4 times, most recently from f48c39b to 2564313 Compare April 6, 2026 22:33
@dependabot dependabot bot force-pushed the dependabot/go_modules/common-golang-532bb4223b branch from 2564313 to 6e90bb0 Compare April 7, 2026 04:35
@PrasadG193
Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot dependabot bot force-pushed the dependabot/go_modules/common-golang-532bb4223b branch from 6e90bb0 to 2c0f653 Compare April 7, 2026 05:10
Bumps the common-golang group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/Azure/azure-sdk-for-go/sdk/azcore](https://github.com/Azure/azure-sdk-for-go) | `1.20.0` | `1.21.0` |
| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.33.0` | `0.36.0` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.256.0` | `0.273.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.76.0` | `1.79.3` |
| google.golang.org/protobuf | `1.36.10` | `1.36.11` |


Updates `github.com/Azure/azure-sdk-for-go/sdk/azcore` from 1.20.0 to 1.21.0
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Commits](Azure/azure-sdk-for-go@sdk/azcore/v1.20.0...sdk/azcore/v1.21.0)

Updates `golang.org/x/oauth2` from 0.33.0 to 0.36.0
- [Commits](golang/oauth2@v0.33.0...v0.36.0)

Updates `google.golang.org/api` from 0.256.0 to 0.273.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.256.0...v0.273.0)

Updates `google.golang.org/grpc` from 1.76.0 to 1.79.3
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.76.0...v1.79.3)

Updates `google.golang.org/protobuf` from 1.36.10 to 1.36.11

---
updated-dependencies:
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azcore
  dependency-version: 1.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common-golang
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common-golang
- dependency-name: google.golang.org/api
  dependency-version: 0.273.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common-golang
- dependency-name: google.golang.org/grpc
  dependency-version: 1.79.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common-golang
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: common-golang
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/go_modules/common-golang-532bb4223b branch from 2c0f653 to 9377909 Compare April 9, 2026 03:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant