Skip to content

chore(deps): bump google.golang.org/grpc from 1.83.0 to 1.83.2 in the go_modules group across 1 directory - #456

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go_modules-4d54e058aa
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go_modules-4d54e058aa

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 2, 2026

Copy link
Copy Markdown
Contributor

Bumps the go_modules group with 1 update in the / directory: google.golang.org/grpc.

Updates google.golang.org/grpc from 1.83.0 to 1.83.2

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.83.2

Security

  • server: Reject requests missing both :authority and Host headers with HTTP 400 and status Internal. (grpc/grpc-go#9365)

Release 1.83.1

Security

  • xds/rbac: Fix a bug where nested Principal or Permission rules with :scheme or grpc- prefixed header matchers were not rejected, which could cause DENY rules to fail open. (#9258)
  • xds/rbac: Fix a bug where the host header matcher was not being replaced with :authority in nested Principal or Permission rules. (#9258)
  • xds/rbac: Fix a bug where a header matcher whose name was not lowercase, such as X-Role, matched no header, which could cause DENY rules to fail open. (#9332)
  • xds/rbac: Fix a bug where a :scheme or grpc- prefixed header matcher was accepted when its name was not lowercase. (#9332)
  • xds/rbac: Fix a bug where a Host header matcher was not replaced with :authority. (#9332)

Performance

  • transport: Restrict memory overhead of buffering small data frames. (#9331)
Commits

Summary by CodeRabbit

  • Chores
    • Updated the application’s Go runtime and supporting libraries to newer versions.
    • Included dependency updates for cryptography, networking, and remote procedure call functionality.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 2, 2026
@dependabot dependabot Bot changed the title chore(deps): bump google.golang.org/grpc from 1.83.0 to 1.83.1 in the go_modules group across 1 directory chore(deps): bump google.golang.org/grpc from 1.83.0 to 1.83.2 in the go_modules group across 1 directory Sep 15, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/go_modules-4d54e058aa branch from 2256cdb to 886ca18 Compare September 15, 2026 17:51
@coderabbitai

coderabbitai Bot commented Sep 15, 2026

Copy link
Copy Markdown

Review Change StackReview Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 9a6ff651-4f5f-41e1-88ff-73048b905368

📥 Commits

Reviewing files that changed from the base of the PR and between 886ca18 and e220a1a.

📒 Files selected for processing (1)
  • go.mod

Included review availability: Your plan provides up to 10 included reviews per hour; 9 remain after this review.


📝 Walkthrough

Walkthrough

The PR updates three indirect Go dependency versions in go.mod: golang.org/x/crypto, golang.org/x/net, and google.golang.org/grpc.

Changes

Dependency updates

Layer / File(s) Summary
Update indirect dependency versions
go.mod
Updates golang.org/x/crypto to v0.55.0, golang.org/x/net to v0.58.0, and google.golang.org/grpc to v1.83.2.

Priority: ➖ Normal

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to e220a

No merge-blocking issue is established by the available evidence.

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly identifies the primary change: upgrading google.golang.org/grpc from 1.83.0 to 1.83.2. It matches the stated PR objective and uses a specific dependency-update description.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch dependabot/go_modules/go_modules-4d54e058aa

Warning

Git: CodeRabbit could not clone the repository, so clone-backed analysis was skipped and this review may be incomplete. Verify repository clone access, such as SSH credentials, before requesting another full review. If clone access is intentionally unavailable, use path_filters to narrow the review scope.


Comment @coderabbitai help to get the list of available commands.

Bumps the go_modules group with 1 update in the / directory: [google.golang.org/grpc](https://github.com/grpc/grpc-go).


Updates `google.golang.org/grpc` from 1.83.0 to 1.83.2
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.83.0...v1.83.2)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.83.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/go_modules-4d54e058aa branch from 886ca18 to e220a1a Compare September 16, 2026 07:56
@dependabot @github

dependabot Bot commented on behalf of github Sep 16, 2026

Copy link
Copy Markdown
Contributor Author

Looks like google.golang.org/grpc is no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 16, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/go_modules-4d54e058aa branch September 16, 2026 09:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants