Skip to content

Bump google.golang.org/grpc from 1.82.1 to 1.83.2 in /tests/e2e/activationapp - #1024

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/tests/e2e/activationapp/google.golang.org/grpc-1.83.1
Closed

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/tests/e2e/activationapp/google.golang.org/grpc-1.83.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 2, 2026 •

Copy link
Copy Markdown
Contributor

Bumps google.golang.org/grpc from 1.82.1 to 1.83.2.

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.83.2

Security

  • server: Reject requests missing both :authority and Host headers with HTTP 400 and status Internal. (grpc/grpc-go#9365)

Release 1.83.1

Security

  • xds/rbac: Fix a bug where nested Principal or Permission rules with :scheme or grpc- prefixed header matchers were not rejected, which could cause DENY rules to fail open. (#9258)
  • xds/rbac: Fix a bug where the host header matcher was not being replaced with :authority in nested Principal or Permission rules. (#9258)
  • xds/rbac: Fix a bug where a header matcher whose name was not lowercase, such as X-Role, matched no header, which could cause DENY rules to fail open. (#9332)
  • xds/rbac: Fix a bug where a :scheme or grpc- prefixed header matcher was accepted when its name was not lowercase. (#9332)
  • xds/rbac: Fix a bug where a Host header matcher was not replaced with :authority. (#9332)

Performance

  • transport: Restrict memory overhead of buffering small data frames. (#9331)

Release 1.83.0

Security

  • server: Stop reading from connections when flooded by HTTP/2 frames to mitigate resource exhaustion. The default value for this limit is 100 frames, excluding DATA and HEADERS, and may be changed by setting environment variable GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT.
  • xds/rbac: Support Metadata and RequestedServerName permissions matcher fields. If present in a DENY rule, previously these would be ignored and fail-open.
  • xds/rbac: Fix panic when parsing unsupported fields in NotRule/NotId permissions.
  • xds/rbac: Support the deprecated source_ip principal identifier by treating it as equivalent to direct_remote_ip.
  • xds: Fix panic when parsing route header matchers configured with empty exact_match, prefix_match, or suffix_match strings. (#9223)

New Features

  • xds/googlec2p: Enable DirectPath over Interconnect support for on-premises clients via the force-xds target URI query parameter. (#9133)
  • xds: Enable xDS configuration to control which fields get propagated from ORCA backend metric reports to LRS load reports. (#9145)
  • authz: Add OnPolicyUpdate callback to FileWatcherOptions to notify when an authz policy is loaded or updated. (#9142)
  • xds: Add support for the GCP Authentication HTTP Filter, which automatically fetches and attaches GCP Service Account Identity JWT tokens to outgoing RPCs.
    • This feature can be enabled by setting environment variable GRPC_EXPERIMENTAL_XDS_GCP_AUTHENTICATION_FILTER=true. (#9119)
  • xds: Add support for xDS-based HTTP CONNECT proxies.
    • This feature can be enabled by setting environment variable GRPC_EXPERIMENTAL_XDS_HTTP_CONNECT=true. (#9151)
  • xds: Add support for contains_match in route header matchers. (#9223)

Bug Fixes

  • credentials/alts: Fix panic when processing malformed frames by validating that the message frame length exceeds the message type field size. (#9197)
  • grpc: Fix compilation on Plan 9 targets (GOOS=plan9), broken since v1.81.0. (#9255)

... (truncated)

Commits

@dependabot
dependabot Bot requested a review from mfordjody as a code owner September 2, 2026 07:56
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 2, 2026
@github-actions github-actions Bot added the testing Tests and test infrastructure related label Sep 2, 2026
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.82.1 to 1.83.2.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.82.1...v1.83.2)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.83.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump google.golang.org/grpc from 1.82.1 to 1.83.1 in /tests/e2e/activationapp Bump google.golang.org/grpc from 1.82.1 to 1.83.2 in /tests/e2e/activationapp Sep 11, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/tests/e2e/activationapp/google.golang.org/grpc-1.83.1 branch from df85fa8 to b0e4ac9 Compare September 11, 2026 16:01
@codecov-commenter

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 22.50%. Comparing base (4c62a53) to head (b0e4ac9).

Additional details and impacted files
@@            Coverage Diff             @@
##           master    #1024      +/-   ##
==========================================
- Coverage   22.51%   22.50%   -0.01%     
==========================================
  Files         327      327              
  Lines       32454    32454              
==========================================
- Hits         7307     7305       -2     
- Misses      24357    24360       +3     
+ Partials      790      789       -1     
Flag Coverage Δ
unittests 22.50% <ø> (-0.01%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@dependabot @github

dependabot Bot commented on behalf of github Sep 24, 2026

Copy link
Copy Markdown
Contributor Author

Looks like google.golang.org/grpc is no longer a dependency, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 24, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/tests/e2e/activationapp/google.golang.org/grpc-1.83.1 branch September 24, 2026 02:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code testing Tests and test infrastructure related

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant