8000 chore(deps): bump the go-dependencies group across 1 directory with 3 updates by dependabot[bot] · Pull Request #482 · fosrl/newt · GitHub
[go: up one dir, main page]
Skip to content

chore(deps): bump the go-dependencies group across 1 directory with 3 updates - #482

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-fc6bc20c87
Open

chore(deps): bump the go-dependencies group across 1 directory with 3 updates#482
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-fc6bc20c87

Conversation

@dependabot
@dependabot dependabot Bot commented on behalf of github Nov 10, 2026 •
edited
Loading
Copy link
Copy Markdown
Contributor

Bumps the go-dependencies group with 3 updates in the / directory: golang.org/x/net, golang.org/x/sys and google.golang.org/grpc.

Updates golang.org/x/net from 0.60.0 to 0.62.0

Commits
  • 3de643d html: check all ancestor namespace transitions when rendering raw text
  • 05c76ee ipv4, ipv6: avoid slice bounds panics on empty batch or BPF filter
  • dad306f ipv6: avoid out-of-bounds panic in ICMPFilter
  • 9c0565a ipv4: fix TTL control message parsing on big-endian Linux and Solaris
  • 9425eb3 internal/socket, ipv4, ipv6: avoid panic on empty control message on non-Unix
  • 4b10404 ipv4, ipv6: avoid nil parse function call in ControlMessage.Parse
  • afcf8cd ipv4: fix several missing bounds checks
  • 4af4fce html: avoid quadratic complexity when coalescing text nodes
  • 7e56200 quic: per-path connection ids
  • c1d31df go.mod: update golang.org/x dependencies
  • Additional commits viewable in compare view

Updates golang.org/x/sys from 0.49.0 to 0.50.0

Commits
  • 00227f1 unix: avoid using stale written count from sendfile on freebsd/386 after EINVAL
  • aa1b965 unix: don't skip directory entries with zero inodes on Linux
  • 37845fb unix: reject a short SCM_CREDENTIALS payload in ParseUnixCredentials
  • 313c631 unix: add IoctlGetUint64
  • 4a36a34 cpu: add wasm32 "architecture"
  • 908ab59 windows: use SyscallN consistently for Windows system calls
  • f5cb030 unix: set R12 before the ppc64x syscall branch
  • 0e9e10f windows: remove MemoryBasicInformation.PartitionId field on windows/386
  • 9b24ac0 windows: fix PSAPI_WORKING_SET_EX_BLOCK bit accessors
  • 69a6691 windows/mkwinsyscall: read 32-bit results from the low half of the return reg...
  • See full diff in compare view

Updates google.golang.org/grpc from 1.84.0 to 1.85.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.85.0

New Features

  • stats: Expose the effective client authority (sent on the wire as the HTTP/2 :authority header) in client stats.OutHeader events. (#9296)
  • metadata: Add ValueFromOutgoingContext, which reads a single metadata value from outgoing context without copying the entire outgoing metadata into a new map. (#9282)

Bug Fixes

  • transport: Refine control buffer throttling to only count peer-induced control frames, raise the default GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT from 100 to 10,000, and close client connections if reads remain throttled for 10s. (#9563)
  • server: Ensure Stop() forcefully terminates the server while GracefulStop() is waiting for active handlers to complete. (#9394)
  • server: Unconditionally increment the highest-seen stream ID on when handling HEADERS frames to comply with RFC 7540 §5.1.1. Previously, truncated HEADERS frames left the connection in an inconsistent state and allowed stream IDs to be reused by clients without resulting in a protocol error. (#9414)
  • server: Terminate streams immediately when a HEADERS frame includes the EndStream bit. Previously, this caused server handlers to hang when reading a message. (#9391)
  • server: Reject requests missing both :authority and Host headers with HTTP 400 and status Internal. (#9365)
  • xds: Fix a bug where route header matchers with non-lowercase names failed to match routes. (#9353)
  • client: Ensure retried RPCs use the correct :authority value specified by the LB policy instead of inheriting it from a previous attempt. (#9277)
  • transport: Fail streams with io.ErrUnexpectedEOF instead of io.EOF upon receiving truncated message headers or bodies after partial data has already been received. (#9204)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the go-dependencies group across 1 directory with 3…
40005dd 
… updates

Bumps the go-dependencies group with 3 updates in the / directory: [golang.org/x/net](https://github.com/golang/net), [golang.org/x/sys](https://github.com/golang/sys) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).


Updates `golang.org/x/net` from 0.60.0 to 0.62.0
- [Commits](golang/net@v0.60.0...v0.62.0)

Updates `golang.org/x/sys` from 0.49.0 to 0.50.0
- [Commits](golang/sys@v0.49.0...v0.50.0)

Updates `google.golang.org/grpc` from 1.84.0 to 1.85.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.84.0...v1.85.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.62.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: golang.org/x/sys
  dependency-version: 0.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: google.golang.org/grpc
  dependency-version: 1.85.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Nov 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@oschwartz10612 oschwartz10612 Awaiting requested review from oschwartz10612 oschwartz10612 is a code owner
@miloschwartz miloschwartz Awaiting requested review from miloschwartz miloschwartz is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants

0