Skip to content

build(deps): bump the go-minor-and-patch group across 4 directories with 8 updates - #554

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/mock-support-server/go-minor-and-patch-ca33736cbe
Open

build(deps): bump the go-minor-and-patch group across 4 directories with 8 updates#554
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/mock-support-server/go-minor-and-patch-ca33736cbe

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the go-minor-and-patch group with 2 updates in the /mock-support-server directory: github.com/grpc-ecosystem/grpc-gateway/v2 and google.golang.org/protobuf.
Bumps the go-minor-and-patch group with 5 updates in the /openfeature-provider/go directory:

Package From To
google.golang.org/grpc 1.79.3 1.83.2
google.golang.org/protobuf 1.36.11 1.36.12
github.com/open-feature/go-sdk 1.16.0 1.18.0
github.com/tetratelabs/wazero 1.9.0 1.12.0
github.com/prometheus/common 0.67.5 0.70.1

Bumps the go-minor-and-patch group with 2 updates in the /openfeature-provider/go/bench directory: google.golang.org/grpc and github.com/open-feature/go-sdk.
Bumps the go-minor-and-patch group with 1 update in the /openfeature-provider/go/demo directory: github.com/open-feature/go-sdk.

Updates github.com/grpc-ecosystem/grpc-gateway/v2 from 2.22.0 to 2.30.0

Release notes

Sourced from github.com/grpc-ecosystem/grpc-gateway/v2's releases.

v2.30.0

New Features

  • protoc-gen-openapiv3: Brand new minimal OpenAPI v3 generator (#6623), plus follow-ups:
    • Visibility selectors (#6673)
    • disable_default_errors option (#6672)
    • Annotation support (#6681)
    • Improved plugin error surfacing (#6937)
    • field_behavior REQUIRED support for query parameters (#7180) — @​maydietwice
  • openapiv3-merge: New standalone tool for merging OpenAPI v3 documents (#6771) — @​johanbrandhorst
  • protoc-gen-openapiv2 moved to the protoc toolchain (#6988) — @​EliSauder

Fixes

Change PR Contributor
OpenAPI v2: messages sorted before rendering definitions for determinism #6732 @​alliasgher
OpenAPI v2: enum comments now go to description instead of title #6785 @​superShen0916
OpenAPI v2: include field schema metadata on parameters #6894 @​puneetdixit200
OpenAPI v2: omit empty body objects for nested path parameters #7065 @​alliasgher
OpenAPI v3: omit empty body objects for nested path parameters #7068 @​alliasgher
OpenAPI v2: preserve x-nullable when use_allof_for_refs wraps a $ref #7026 @​pkhanaljc
OpenAPI v2: fix path joining for colon-prefixed segments #7191 @​Ritik100-AIT
Prioritize OpenAPI config options over proto options #6973 @​maskedmaxx
Support Service doc comments for OpenAPI/Swagger generation #6200 @​majiayu000
Fix nested body path initialization for oneof fields #6948 @​cyphercodes
Remove redundant enum assignment for nested proto3 fields #7059 @​abhishek-dalbanjan
Drain request only after ParseForm in generated code #7192 @​paskozdilar
Support field extensions with use_allof_for_refs #3100 @​same-id
Ignore M import-path mappings in openapiv3 plugin params #6936 @​johanbrandhorst

Documentation

Tests / CI / Infra

New Contributors

@​alliasgher, @​superShen0916, @​puneetdixit200, @​ketpatil77, @​EliSauder, @​maskedmaxx, @​hawk-roy, @​viniciusmtsantos, @​cyphercodes, @​abhishek-dalbanjan, @​hsdfat, @​ZayanKhan-12, @​dlanov, @​maydietwice, @​pkhanaljc, @​Ritik100-AIT

... (truncated)

Commits
  • 1debdea Fix openapiv2 path joining for colon-prefixed segments (#7191)
  • 561f393 Drain request only after ParseForm in generated code (#7192)
  • a16cad8 fix(openapiv2): preserve x-nullable when use_allof_for_refs wraps $ref (#7026)
  • 544d99d openapiv3: support field_behavior REQUIRED for query parameters (#7180)
  • 89a9e41 chore(deps): update google/oss-fuzz digest to 3ea2a9b (#7195)
  • 42ced5f fix(deps): update opentelemetry-go-contrib monorepo to v0.70.0 (#7194)
  • c63e364 chore(deps): update googleapis digest to 5739471 (#7193)
  • 873f41a chore(deps): update google/oss-fuzz digest to 8d292af (#7190)
  • f56f8ad chore(deps): update googleapis digest to f3ff3a1 (#7189)
  • 3087cc7 build(deps-dev): bump fast-uri in /examples/internal/browser (#7187)
  • Additional commits viewable in compare view

Updates golang.org/x/net from 0.53.0 to 0.57.0

Commits
  • b8f09f6 go.mod: update golang.org/x dependencies
  • f05f21b idna: reject all-ASCII xn-- labels on all Go versions
  • 0f748cf internal/http3: clean up stream I/O methods usages in tests
  • 0bb961e internal/http3: add net/http.ResponseController support
  • 0ca694d webdav: document Dir's lack of defense against filesystem modification
  • bd5f1dc http2: initialize Transport on NewClientConn
  • 488ff63 bpf: add security considerations to package docs
  • 93d1f25 xsrftoken: avoid token collisions
  • 5a3baee internal/http3: prevent panic in QPACK decoder due to overflow
  • 9e7fdbf internal/http3: fix wrong argument being given when validating header value
  • Additional commits viewable in compare view

Updates google.golang.org/genproto/googleapis/api from 0.0.0-20260414002931-afd174a4e478 to 0.0.0-20260803160001-6ac0973c030d

Commits

Updates google.golang.org/grpc from 1.82.1 to 1.83.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.83.2

Security

  • server: Reject requests missing both :authority and Host headers with HTTP 400 and status Internal. (grpc/grpc-go#9365)

Release 1.83.1

Security

  • xds/rbac: Fix a bug where nested Principal or Permission rules with :scheme or grpc- prefixed header matchers were not rejected, which could cause DENY rules to fail open. (#9258)
  • xds/rbac: Fix a bug where the host header matcher was not being replaced with :authority in nested Principal or Permission rules. (#9258)
  • xds/rbac: Fix a bug where a header matcher whose name was not lowercase, such as X-Role, matched no header, which could cause DENY rules to fail open. (#9332)
  • xds/rbac: Fix a bug where a :scheme or grpc- prefixed header matcher was accepted when its name was not lowercase. (#9332)
  • xds/rbac: Fix a bug where a Host header matcher was not replaced with :authority. (#9332)

Performance

  • transport: Restrict memory overhead of buffering small data frames. (#9331)

Release 1.83.0

Security

  • server: Stop reading from connections when flooded by HTTP/2 frames to mitigate resource exhaustion. The default value for this limit is 100 frames, excluding DATA and HEADERS, and may be changed by setting environment variable GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT.
  • xds/rbac: Support Metadata and RequestedServerName permissions matcher fields. If present in a DENY rule, previously these would be ignored and fail-open.
  • xds/rbac: Fix panic when parsing unsupported fields in NotRule/NotId permissions.
  • xds/rbac: Support the deprecated source_ip principal identifier by treating it as equivalent to direct_remote_ip.
  • xds: Fix panic when parsing route header matchers configured with empty exact_match, prefix_match, or suffix_match strings. (#9223)

New Features

  • xds/googlec2p: Enable DirectPath over Interconnect support for on-premises clients via the force-xds target URI query parameter. (#9133)
  • xds: Enable xDS configuration to control which fields get propagated from ORCA backend metric reports to LRS load reports. (#9145)
  • authz: Add OnPolicyUpdate callback to FileWatcherOptions to notify when an authz policy is loaded or updated. (#9142)
  • xds: Add support for the GCP Authentication HTTP Filter, which automatically fetches and attaches GCP Service Account Identity JWT tokens to outgoing RPCs.
    • This feature can be enabled by setting environment variable GRPC_EXPERIMENTAL_XDS_GCP_AUTHENTICATION_FILTER=true. (#9119)
  • xds: Add support for xDS-based HTTP CONNECT proxies.
    • This feature can be enabled by setting environment variable GRPC_EXPERIMENTAL_XDS_HTTP_CONNECT=true. (#9151)
  • xds: Add support for contains_match in route header matchers. (#9223)

Bug Fixes

  • credentials/alts: Fix panic when processing malformed frames by validating that the message frame length exceeds the message type field size. (#9197)
  • grpc: Fix compilation on Plan 9 targets (GOOS=plan9), broken since v1.81.0. (#9255)

... (truncated)

Commits

Updates google.golang.org/protobuf from 1.36.11 to 1.36.12

Updates google.golang.org/grpc from 1.82.1 to 1.83.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.83.2

Security

  • server: Reject requests missing both :authority and Host headers with HTTP 400 and status Internal. (grpc/grpc-go#9365)

Release 1.83.1

Security

  • xds/rbac: Fix a bug where nested Principal or Permission rules with :scheme or grpc- prefixed header matchers were not rejected, which could cause DENY rules to fail open. (#9258)
  • xds/rbac: Fix a bug where the host header matcher was not being replaced with :authority in nested Principal or Permission rules. (#9258)
  • xds/rbac: Fix a bug where a header matcher whose name was not lowercase, such as X-Role, matched no header, which could cause DENY rules to fail open. (#9332)
  • xds/rbac: Fix a bug where a :scheme or grpc- prefixed header matcher was accepted when its name was not lowercase. (#9332)
  • xds/rbac: Fix a bug where a Host header matcher was not replaced with :authority. (#9332)

Performance

  • transport: Restrict memory overhead of buffering small data frames. (#9331)

Release 1.83.0

Security

  • server: Stop reading from connections when flooded by HTTP/2 frames to mitigate resource exhaustion. The default value for this limit is 100 frames, excluding DATA and HEADERS, and may be changed by setting environment variable GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT.
  • xds/rbac: Support Metadata and RequestedServerName permissions matcher fields. If present in a DENY rule, previously these would be ignored and fail-open.
  • xds/rbac: Fix panic when parsing unsupported fields in NotRule/NotId permissions.
  • xds/rbac: Support the deprecated source_ip principal identifier by treating it as equivalent to direct_remote_ip.
  • xds: Fix panic when parsing route header matchers configured with empty exact_match, prefix_match, or suffix_match strings. (#9223)

New Features

  • xds/googlec2p: Enable DirectPath over Interconnect support for on-premises clients via the force-xds target URI query parameter. (#9133)
  • xds: Enable xDS configuration to control which fields get propagated from ORCA backend metric reports to LRS load reports. (#9145)
  • authz: Add OnPolicyUpdate callback to FileWatcherOptions to notify when an authz policy is loaded or updated. (#9142)
  • xds: Add support for the GCP Authentication HTTP Filter, which automatically fetches and attaches GCP Service Account Identity JWT tokens to outgoing RPCs.
    • This feature can be enabled by setting environment variable GRPC_EXPERIMENTAL_XDS_GCP_AUTHENTICATION_FILTER=true. (#9119)
  • xds: Add support for xDS-based HTTP CONNECT proxies.
    • This feature can be enabled by setting environment variable GRPC_EXPERIMENTAL_XDS_HTTP_CONNECT=true. (#9151)
  • xds: Add support for contains_match in route header matchers. (#9223)

Bug Fixes

  • credentials/alts: Fix panic when processing malformed frames by validating that the message frame length exceeds the message type field size. (#9197)
  • grpc: Fix compilation on Plan 9 targets (GOOS=plan9), broken since v1.81.0. (#9255)

... (truncated)

Commits

Updates google.golang.org/protobuf from 1.36.11 to 1.36.12

Updates google.golang.org/grpc from 1.82.1 to 1.83.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.83.2

Security

  • server: Reject requests missing both :authority and Host headers with HTTP 400 and status Internal. (grpc/grpc-go#9365)

Release 1.83.1

Security

  • xds/rbac: Fix a bug where nested Principal or Permission rules with :scheme or grpc- prefixed header matchers were not rejected, which could cause DENY rules to fail open. (#9258)
  • xds/rbac: Fix a bug where the host header matcher was not being replaced with :authority in nested Principal or Permission rules. (#9258)
  • xds/rbac: Fix a bug where a header matcher whose name was not lowercase, such as X-Role, matched no header, which could cause DENY rules to fail open. (#9332)
  • xds/rbac: Fix a bug where a :scheme or grpc- prefixed header matcher was accepted when its name was not lowercase. (#9332)
  • xds/rbac: Fix a bug where a Host header matcher was not replaced with :authority. (#9332)

Performance

  • transport: Restrict memory overhead of buffering small data frames. (#9331)

Release 1.83.0

Security

  • server: Stop reading from connections when flooded by HTTP/2 frames to mitigate resource exhaustion. The default value for this limit is 100 frames, excluding DATA and HEADERS, and may be changed by setting environment variable GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT.
  • xds/rbac: Support Metadata and RequestedServerName permissions matcher fields. If present in a DENY rule, previously these would be ignored and fail-open.
  • xds/rbac: Fix panic when parsing unsupported fields in NotRule/NotId permissions.
  • xds/rbac: Support the deprecated source_ip principal identifier by treating it as equivalent to direct_remote_ip.
  • xds: Fix panic when parsing route header matchers configured with empty exact_match, prefix_match, or suffix_match strings. (#9223)

New Features

  • xds/googlec2p: Enable DirectPath over Interconnect support for on-premises clients via the force-xds target URI query parameter. (#9133)
  • xds: Enable xDS configuration to control which fields get propagated from ORCA backend metric reports to LRS load reports. (#9145)
  • authz: Add OnPolicyUpdate callback to FileWatcherOptions to notify when an authz policy is loaded or updated. (#9142)
  • xds: Add support for the GCP Authentication HTTP Filter, which automatically fetches and attaches GCP Service Account Identity JWT tokens to outgoing RPCs.
    • This feature can be enabled by setting environment variable GRPC_EXPERIMENTAL_XDS_GCP_AUTHENTICATION_FILTER=true. (#9119)
  • xds: Add support for xDS-based HTTP CONNECT proxies.
    • This feature can be enabled by setting environment variable GRPC_EXPERIMENTAL_XDS_HTTP_CONNECT=true. (#9151)
  • xds: Add support for contains_match in route header matchers. (#9223)

Bug Fixes

  • credentials/alts: Fix panic when processing malformed frames by validating that the message frame length exceeds the message type field size. (#9197)
  • grpc: Fix compilation on Plan 9 targets (GOOS=plan9), broken since v1.81.0. (#9255)

... (truncated)

Commits

Updates google.golang.org/grpc from 1.79.3 to 1.83.2

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.83.2

Security

  • server: Reject requests missing both :authority and Host headers with HTTP 400 and status Internal. (grpc/grpc-go#9365)

Release 1.83.1

Security

  • xds/rbac: Fix a bug where nested Principal or Permission rules with :scheme or grpc- prefixed header matchers were not rejected, which could cause DENY rules to fail open. (#9258)
  • xds/rbac: Fix a bug where the host header matcher was not being replaced with :authority in nested Principal or Permission rules. (#9258)
  • xds/rbac: Fix a bug where a header matcher whose name was not lowercase, such as X-Role, matched no header, which could cause DENY rules to fail open. (#9332)
  • xds/rbac: Fix a bug where a :scheme or grpc- prefixed header matcher was accepted when its name was not lowercase. (#9332)
  • xds/rbac: Fix a bug where a Host header matcher was not replaced with :authority. (#9332)

Performance

  • transport: Restrict memory overhead of buffering small data frames. (#9331)

Release 1.83.0

Security

  • server: Stop reading from connections when flooded by HTTP/2 frames to mitigate resource exhaustion. The default value for this limit is 100 frames, excluding DATA and HEADERS, and may be changed by setting environment variable GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT.
  • xds/rbac: Support Metadata and RequestedServerName permissions matcher fields. If present in a DENY rule, previously these would be ignored and fail-open.
  • xds/rbac: Fix panic when parsing unsupported fields in NotRule/NotId permissions.
  • xds/rbac: Support the deprecated source_ip principal identifier by treating it as equivalent to direct_remote_ip.
  • xds: Fix panic when parsing route header matchers configured with empty exact_match, prefix_match, or suffix_match strings. (#9223)

New Features

  • xds/googlec2p: Enable DirectPath over Interconnect support for on-premises clients via the force-xds target URI query parameter. (#9133)
  • xds: Enable xDS configuration to control which fields get propagated from ORCA backend metric reports to LRS load reports. (#9145)
  • authz: Add OnPolicyUpdate callback to FileWatcherOptions to notify when an authz policy is loaded or updated. (#9142)
  • xds: Add support for the GCP Authentication HTTP Filter, which automatically fetches and attaches GCP Service Account Identity JWT tokens to outgoing RPCs.
    • This feature can be enabled by setting environment variable GRPC_EXPERIMENTAL_XDS_GCP_AUTHENTICATION_FILTER=true. (#9119)
  • xds: Add support for xDS-based HTTP CONNECT proxies.
    • This feature can be enabled by setting environment variable GRPC_EXPERIMENTAL_XDS_HTTP_CONNECT=true. (#9151)
  • xds: Add support for contains_match in route header matchers. (#9223)

Bug Fixes

  • credentials/alts: Fix panic when processing malformed frames by validating that the message frame length exceeds the message type field size. (#9197)
  • grpc: Fix compilation on Plan 9 targets (GOOS=plan9), broken since v1.81.0. (#9255)

... (truncated)

Commits

Updates google.golang.org/protobuf from 1.36.11 to 1.36.12

Updates github.com/open-feature/go-sdk from 1.16.0 to 1.18.0

Release notes

Sourced from github.com/open-feature/go-sdk's releases.

v1.18.0

1.18.0 (2026-07-31)

[!WARNING] Breaking change: the long-deprecated github.com/open-feature/go-sdk/pkg/openfeature package (and pkg/openfeature/memprovider) is removed in this release.

It has forwarded to the canonical openfeature package since #232. The APIs are unchanged, so migration is a drop-in import-path change:

- github.com/open-feature/go-sdk/pkg/openfeature
+ github.com/open-feature/go-sdk/openfeature

github.com/open-feature/go-sdk/pkg/openfeature/memprovider


github.com/open-feature/go-sdk/openfeature/memprovider

Migrate a whole module at once (portable; one rule covers both):

grep -rl 'open-feature/go-sdk/pkg/openfeature' --include='*.go' . \
  | xargs perl -i -pe 's{open-feature/go-sdk/pkg/openfeature}{open-feature/go-sdk/openfeature}g'
go mod tidy

🐛 Bug Fixes

  • event_executor: update provider status before invoking API-level handlers (#494) (42d65a5)
  • goroutine leaks in event executor shutdown handling (#508) (703d1f8)
  • guard against nil ContextEvaluator func in memprovider Resolve (#522) (eebb3bd)

✨ New Features

  • export EvaluationAPI and simplify provider/client its surface (#511) (7d09980)
  • implement isolated API instances (#492) (84afdff)

🧹 Chore

  • delete deprecated pkg package (#509) (95d4d71)
  • deps: replace google-github-actions/release-please-action action with googleapis/release-please-action v3 (#496) (981609c)
  • deps: update actions/cache action to v5 (#501) (55795e8)
  • deps: update actions/cache action to v6 (#517) (da4da26)
  • deps: update actions/cache digest to 55cc834 (#519) (10906e9)
  • deps: update actions/checkout action to v6 (#497) (0429a24)
  • deps: update actions/checkout action to v7 (#512) (f868dc0)
  • deps: update actions/checkout digest to 3d3c42e (#524) (300ab7d)
  • deps: update actions/checkout digest to df4cb1c (#504) (ed17a45)

... (truncated)

Changelog

Sourced from github.com/open-feature/go-sdk's changelog.

1.18.0 (2026-07-31)

⚠ BREAKING CHANGES

  • Removed the long-deprecated github.com/open-feature/go-sdk/pkg/openfeature package (and its subpackage pkg/openfeature/memprovider). These were deprecated aliases that forwarded to the canonical packages; they've been marked Deprecated: since #232, when the code moved from pkg/openfeature to the root openfeature package.

    Migration: update your import paths. The APIs are unchanged, so it's a drop-in replacement with no code changes beyond the imports:

    - github.com/open-feature/go-sdk/pkg/openfeature
+ github.com/open-feature/go-sdk/openfeature

github.com/open-feature/go-sdk/pkg/openfeature/memprovider


github.com/open-feature/go-sdk/openfeature/memprovider

To migrate a whole module at once (one rule covers both, since the subpackage shares the prefix):

grep -rl 'open-feature/go-sdk/pkg/openfeature' --include='*.go' . \
  | xargs perl -i -pe 's{open-feature/go-sdk/pkg/openfeature}{open-feature/go-sdk/openfeature}g'
go mod tidy

🐛 Bug Fixes

  • event_executor: update provider status before invoking API-level handlers (#494) (42d65a5)
  • goroutine leaks in event executor shutdown handling (#508) (703d1f8)
  • guard against nil ContextEvaluator func in memprovider Resolve (#522) (eebb3bd)

✨ New Features

  • export EvaluationAPI and simplify provider/client its surface (#511) (7d09980)
  • implement isolated API instances (#492) (84afdff)

🧹 Chore

  • delete deprecated pkg package (#509) (95d4d71)
  • deps: replace google-github-actions/release-please-action action with googleapis/release-please-action v3 (#496) (981609c)
  • deps: update actions/cache action to v5 (#501) (55795e8)
  • deps: update actions/cache action to v6 (#517) (da4da26)
  • deps: update actions/cache digest to 55cc834 (#519) (10906e9)
  • deps: update actions/checkout action to v6 (#497) (0429a24)
  • deps: update actions/checkout action to v7 (#512) (f868dc0)
  • deps: update actions/checkout digest to 3d3c42e (#524) (300ab7d)
  • deps: update actions/checkout digest to df4cb1c (#504) (ed17a45)

... (truncated)

Commits
  • b24095e chore(main): release 1.18.0 (#490)
  • eebb3bd fix: guard against nil ContextEvaluator func in memprovider Resolve (#522)
  • bffe851 docs: correct context-cancellation claim on non-blocking SetProviderWithConte...
  • 0fb6f31 chore(deps): update actions/setup-go action to v7 (#525)
  • 300ab7d chore(deps): update actions/checkout digest to 3d3c42e (#524)
  • e75753b chore(deps): update module golang.org/x/text to v0.39.0 (#520)
  • 10906e9 chore(deps): update actions/cache digest to 55cc834 (#519)
  • da4da26 chore(deps): update actions/cache action to v6 (#517)
  • 389dd22 chore(deps): update actions/setup-go digest to 924ae3a (#516)
  • 7d09980 feat: export EvaluationAPI and simplify provider/client its surface (#511)
  • Additional commits viewable in compare view

Updates github.com/tetratelabs/wazero from 1.9.0 to 1.12.0

Release notes

Sourced from github.com/tetratelabs/wazero's releases.

v1.12.0

Hi wazero friends! The new release of wazero v1.12.0 has arrived.

This release advances us a few more steps towards Wasm 3.0! See wazero/wazero#2426 for where we currently stand.

Behavioral changes...

Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 31, 2026
@dependabot
build(deps): bump the go-minor-and-patch group across 4 directories w…
c88de4d 
…ith 8 updates

Bumps the go-minor-and-patch group with 2 updates in the /mock-support-server directory: [github.com/grpc-ecosystem/grpc-gateway/v2](https://github.com/grpc-ecosystem/grpc-gateway) and google.golang.org/protobuf.
Bumps the go-minor-and-patch group with 5 updates in the /openfeature-provider/go directory:

| Package | From | To |
| --- | --- | --- |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.79.3` | `1.83.2` |
| google.golang.org/protobuf | `1.36.11` | `1.36.12` |
| [github.com/open-feature/go-sdk](https://github.com/open-feature/go-sdk) | `1.16.0` | `1.18.0` |
| [github.com/tetratelabs/wazero](https://github.com/tetratelabs/wazero) | `1.9.0` | `1.12.0` |
| [github.com/prometheus/common](https://github.com/prometheus/common) | `0.67.5` | `0.70.1` |

Bumps the go-minor-and-patch group with 2 updates in the /openfeature-provider/go/bench directory: [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [github.com/open-feature/go-sdk](https://github.com/open-feature/go-sdk).
Bumps the go-minor-and-patch group with 1 update in the /openfeature-provider/go/demo directory: [github.com/open-feature/go-sdk](https://github.com/open-feature/go-sdk).


Updates `github.com/grpc-ecosystem/grpc-gateway/v2` from 2.22.0 to 2.30.0
- [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases)
- [Commits](grpc-ecosystem/grpc-gateway@v2.22.0...v2.30.0)

Updates `golang.org/x/net` from 0.53.0 to 0.57.0
- [Commits](golang/net@v0.53.0...v0.57.0)

Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20260414002931-afd174a4e478 to 0.0.0-20260803160001-6ac0973c030d
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/grpc` from 1.82.1 to 1.83.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.79.3...v1.83.2)

Updates `google.golang.org/protobuf` from 1.36.11 to 1.36.12

Updates `google.golang.org/grpc` from 1.82.1 to 1.83.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.79.3...v1.83.2)

Updates `google.golang.org/protobuf` from 1.36.11 to 1.36.12

Updates `google.golang.org/grpc` from 1.82.1 to 1.83.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.79.3...v1.83.2)

Updates `google.golang.org/grpc` from 1.79.3 to 1.83.2
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.79.3...v1.83.2)

Updates `google.golang.org/protobuf` from 1.36.11 to 1.36.12

Updates `github.com/open-feature/go-sdk` from 1.16.0 to 1.18.0
- [Release notes](https://github.com/open-feature/go-sdk/releases)
- [Changelog](https://github.com/open-feature/go-sdk/blob/main/CHANGELOG.md)
- [Commits](open-feature/go-sdk@v1.16.0...v1.18.0)

Updates `github.com/tetratelabs/wazero` from 1.9.0 to 1.12.0
- [Release notes](https://github.com/tetratelabs/wazero/releases)
- [Commits](wazero/wazero@v1.9.0...v1.12.0)

Updates `github.com/prometheus/common` from 0.67.5 to 0.70.1
- [Release notes](https://github.com/prometheus/common/releases)
- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)
- [Commits](prometheus/common@v0.67.5...v0.70.1)

Updates `google.golang.org/grpc` from 1.79.3 to 1.83.2
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.79.3...v1.83.2)

Updates `google.golang.org/protobuf` from 1.36.11 to 1.36.12

Updates `github.com/open-feature/go-sdk` from 1.16.0 to 1.18.0
- [Release notes](https://github.com/open-feature/go-sdk/releases)
- [Changelog](https://github.com/open-feature/go-sdk/blob/main/CHANGELOG.md)
- [Commits](open-feature/go-sdk@v1.16.0...v1.18.0)

Updates `google.golang.org/grpc` from 1.79.3 to 1.83.2
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.79.3...v1.83.2)

Updates `github.com/open-feature/go-sdk` from 1.16.0 to 1.18.0
- [Release notes](https://github.com/open-feature/go-sdk/releases)
- [Changelog](https://github.com/open-feature/go-sdk/blob/main/CHANGELOG.md)
- [Commits](open-feature/go-sdk@v1.16.0...v1.18.0)

Updates `google.golang.org/grpc` from 1.82.1 to 1.83.2
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.79.3...v1.83.2)

Updates `github.com/open-feature/go-sdk` from 1.16.0 to 1.18.0
- [Release notes](https://github.com/open-feature/go-sdk/releases)
- [Changelog](https://github.com/open-feature/go-sdk/blob/main/CHANGELOG.md)
- [Commits](open-feature/go-sdk@v1.16.0...v1.18.0)

Updates `google.golang.org/grpc` from 1.82.1 to 1.83.2
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.79.3...v1.83.2)

Updates `github.com/open-feature/go-sdk` from 1.16.0 to 1.18.0
- [Release notes](https://github.com/open-feature/go-sdk/releases)
- [Changelog](https://github.com/open-feature/go-sdk/blob/main/CHANGELOG.md)
- [Commits](open-feature/go-sdk@v1.16.0...v1.18.0)

Updates `google.golang.org/grpc` from 1.82.1 to 1.83.2
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.79.3...v1.83.2)

Updates `github.com/open-feature/go-sdk` from 1.16.0 to 1.18.0
- [Release notes](https://github.com/open-feature/go-sdk/releases)
- [Changelog](https://github.com/open-feature/go-sdk/blob/main/CHANGELOG.md)
- [Commits](open-feature/go-sdk@v1.16.0...v1.18.0)

Updates `github.com/open-feature/go-sdk` from 1.16.0 to 1.18.0
- [Release notes](https://github.com/open-feature/go-sdk/releases)
- [Changelog](https://github.com/open-feature/go-sdk/blob/main/CHANGELOG.md)
- [Commits](open-feature/go-sdk@v1.16.0...v1.18.0)

Updates `github.com/open-feature/go-sdk` from 1.16.0 to 1.18.0
- [Release notes](https://github.com/open-feature/go-sdk/releases)
- [Changelog](https://github.com/open-feature/go-sdk/blob/main/CHANGELOG.md)
- [Commits](open-feature/go-sdk@v1.16.0...v1.18.0)

Updates `github.com/open-feature/go-sdk` from 1.16.0 to 1.18.0
- [Release notes](https://github.com/open-feature/go-sdk/releases)
- [Changelog](https://github.com/open-feature/go-sdk/blob/main/CHANGELOG.md)
- [Commits](open-feature/go-sdk@v1.16.0...v1.18.0)

---
updated-dependencies:
- dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2
  dependency-version: 2.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
- dependency-name: github.com/open-feature/go-sdk
  dependency-version: 1.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
- dependency-name: github.com/open-feature/go-sdk
  dependency-version: 1.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
- dependency-name: github.com/open-feature/go-sdk
  dependency-version: 1.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
- dependency-name: github.com/prometheus/common
  dependency-version: 0.70.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
- dependency-name: github.com/tetratelabs/wazero
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
- dependency-name: golang.org/x/net
  dependency-version: 0.57.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
- dependency-name: google.golang.org/genproto/googleapis/api
  dependency-version: 0.0.0-20260803160001-6ac0973c030d
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-and-patch
- dependency-name: google.golang.org/grpc
  dependency-version: 1.83.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
- dependency-name: google.golang.org/grpc
  dependency-version: 1.83.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
- dependency-name: google.golang.org/grpc
  dependency-version: 1.83.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-and-patch
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/mock-support-server/go-minor-and-patch-ca33736cbe branch from aa0a7b8 to c88de4d Compare September 1, 2026 10:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants