chore(all): update deps

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
actions/cache (changelog)	action	digest	9255dc7 → cdf6c1f
actions/checkout (changelog)	action	digest	1af3b93 → de0fac2
bazel		minor	8.4.2 → 8.6.0
go (source)	toolchain	minor	1.25.4 → 1.26.1
golang (source)		minor	1.25.4 → 1.26.1
google.golang.org/grpc	require	minor	v1.77.0 → v1.79.2
google.golang.org/grpc/cmd/protoc-gen-go-grpc	require	minor	v1.5.1 → v1.6.1
google.golang.org/protobuf	require	patch	v1.36.10 → v1.36.11
grpc	bazel_dep	minor	1.76.0.bcr.1 → 1.78.0
rules_go	bazel_dep	minor	0.59.0 → 0.60.0
super-linter/super-linter (changelog)	action	digest	2bdd90e → 61abc07

---

Release Notes

bazelbuild/bazel (bazel)

v8.6.0

Compare Source

Release Notes:

v8.5.1

Compare Source

Release Notes:

v8.5.0

Compare Source

Release Notes:

golang/go (go)

v1.26.1

v1.26.0

v1.25.8

v1.25.7

v1.25.6

v1.25.5

grpc/grpc-go (google.golang.org/grpc)

v1.79.2: Release 1.79.2

Compare Source

Bug Fixes

• stats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (#​8874)

v1.79.1: Release 1.79.1

Compare Source

Bug Fixes

• grpc: Remove the -dev suffix from the User-Agent header. (#​8902)

v1.79.0: Release 1.79.0

Compare Source

API Changes

• mem: Add experimental API SetDefaultBufferPool to change the default buffer pool. (#​8806)
  • Special Thanks: @​vanja-p
• experimental/stats: Update MetricsRecorder to require embedding the new UnimplementedMetricsRecorder (a no-op struct) in all implementations for forward compatibility. (#​8780)

Behavior Changes

• balancer/weightedtarget: Remove handling of Addresses and only handle Endpoints in resolver updates. (#​8841)

New Features

• experimental/stats: Add support for asynchronous gauge metrics through the new AsyncMetricReporter and RegisterAsyncReporter APIs. (#​8780)
• pickfirst: Add support for weighted random shuffling of endpoints, as described in gRFC A113.
  • This is enabled by default, and can be turned off using the environment variable GRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING. (#​8864)
• xds: Implement :authority rewriting, as specified in gRFC A81. (#​8779)
• balancer/randomsubsetting: Implement the random_subsetting LB policy, as specified in gRFC A68. (#​8650)
  • Special Thanks: @​marek-szews
• server: Include status detail headers, if available, when terminating a stream during request header processing. (#​8754)
  • Special Thanks: @​joybestourous

Bug Fixes

• credentials/tls: Fix a bug where the port was not stripped from the authority override before validation. (#​8726)
  • Special Thanks: @​Atul1710
• xds/priority: Fix a bug causing delayed failover to lower-priority clusters when a higher-priority cluster is stuck in CONNECTING state. (#​8813)
• health: Fix a bug where health checks failed for clients using legacy compression options (WithDecompressor or RPCDecompressor). (#​8765)
  • Special Thanks: @​sanki92
• transport: Fix an issue where the HTTP/2 server could skip header size checks when terminating a stream early. (#​8769)
  • Special Thanks: @​joybestourous

Performance Improvements

• credentials/alts: Optimize read buffer alignment to reduce copies. (#​8791)
• mem: Optimize pooling and creation of buffer objects. (#​8784)
• transport: Reduce slice re-allocations by reserving slice capacity. (#​8797)

v1.78.0: Release 1.78.0

Compare Source

Behavior Changes

• client: Reject target URLs containing unbracketed colons in the hostname in Go version 1.26+. (#​8716)
  • Special Thanks: @​neild

New Features

• stats/otel: Add backend service label to wrr metrics as part of A89. (#​8737)
• stats/otel: Add subchannel metrics (without the disconnection reason) to eventually replace the pickfirst metrics. (#​8738)
• client: Wait for all pending goroutines to complete when closing a graceful switch balancer. (#​8746)
  • Special Thanks: @​twz123

Bug Fixes

• transport/client : Return status code Unknown on malformed grpc-status. (#​8735)
• client: Add experimental.AcceptCompressors so callers can restrict the grpc-accept-encoding header advertised for a call. (#​8718)
  • Special Thanks: @​iblancasa
• xds: Fix a bug in StringMatcher where regexes would match incorrectly when ignore_case is set to true. (#​8723)
• xds/resolver:
  • Drop previous route resources and report an error when no matching virtual host is found.
  • Only log LDS/RDS configuration errors following a successful update and retain the last valid resource to prevent transient failures. (#​8711)
• client:
  • Change connectivity state to CONNECTING when creating the name resolver (as part of exiting IDLE).
  • Change connectivity state to TRANSIENT_FAILURE if name resolver creation fails (as part of exiting IDLE).
  • Change connectivity state to IDLE after idle timeout expires even when current state is TRANSIENT_FAILURE.
  • Fix a bug that resulted in OnFinish call option not being invoked for RPCs where stream creation failed. (#​8710)
• xdsclient: Fix a race in the xdsClient that could lead to resource-not-found errors. (#​8627)

Performance Improvements

• mem: Round up to nearest 4KiB for pool allocations larger than 1MiB. (#​8705)
  • Special Thanks: @​cjc25

protocolbuffers/protobuf-go (google.golang.org/protobuf)

v1.36.11

Compare Source

Full Changelog: protocolbuffers/protobuf-go@v1.36.10...v1.36.11

User-visible changes:
CL/726780: encoding/prototext: Support URL chars in type URLs in text-format.

Bug fixes:
CL/728680: internal/impl: check recursion limit in lazy decoding validation
CL/711015: reflect/protodesc: fix handling of import options in dynamic builds

Maintenance:
CL/728681: reflect/protodesc: add support for edition unstable
CL/727960: all: add EDITION_UNSTABLE support
CL/727940: types: regenerate using latest protobuf v33.2 release
CL/727140: internal/testprotos/lazy: convert .proto files to editions
CL/723440: cmd/protoc-gen-go: add missing annotations for few generated protobuf symbols.
CL/720980: internal/filedesc: remove duplicative Message.unmarshalOptions
CL/716360: internal/encoding/tag: use proto3 defaults if proto3
CL/716520: proto: un-flake TestHasExtensionNoAlloc
CL/713342: compiler/protogen: properly filter option dependencies in go-protobuf plugin.
CL/711200: proto: add test for oneofs containing messages with required fields
CL/710855: proto: add explicit test for a non-nil but empty byte slice

grpc/grpc (grpc)

v1.78.0

This is release 1.78.0 (gutsy) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

C++

• adding address_sorting dep in naming test build. (#​41045)

Objective-C

• [Backport][v1.78.x][Fix][Compiler] Plugins fall back to the edition 2023 for older protobuf. (#​41358)

Python

• [python] aio: fix race condition causing asyncio.run() to hang forever during the shutdown process. (#​40989)
• [Python] Migrate to pyproject.toml build system from setup.py builds. (#​40833)
• [Python] Log error details when ExecuteBatchError occurs (at DEBUG level). (#​40921)
• [Python] Update setuptools min version to 77.0.1 . (#​40931)

Ruby

• [ruby] Fix version comparison for the ruby_abi_version symbol for ruby 4 compatibility. (#​41061)

bazelbuild/rules_go (rules_go)

v0.60.0

MODULE.bazel code

bazel_dep(name = "rules_go", version = "0.60.0")

go_sdk = use_extension("@​rules_go//go:extensions.bzl", "go_sdk")
go_sdk.from_file(go_mod = "//:go.mod")

WORKSPACE code

load("@​bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "io_bazel_rules_go",
    sha256 = "86d3dc8f59d253524f933aaf2f3c05896cb0b605fc35b460c0b4b039996124c6",
    urls = [
        "https://mirror.bazel.build/github.com/bazel-contrib/rules_go/releases/download/v0.60.0/rules_go-v0.60.0.zip",
        "https://github.com/bazel-contrib/rules_go/releases/download/v0.60.0/rules_go-v0.60.0.zip",
    ],
)

load("@​io_bazel_rules_go//go:deps.bzl", "go_register_toolchains", "go_rules_dependencies")

go_rules_dependencies()

go_register_toolchains(version = "1.25.7")

# Create the host platform repository transitively required by rules_go.
load("@​bazel_tools//tools/build_defs/repo:utils.bzl", "maybe")
load("@​platforms//host:extension.bzl", "host_platform_repo")

maybe(
    host_platform_repo,
    name = "host_platform",
)

What's Changed

• Document Gazelle go_tools.bzl functionality by @​mrdomino in bazel-contrib#4496
• Transition request_nogo to False for cgo_context_data by @​cerisier in bazel-contrib#4512
• proto: Pass in the plugin as tools to preserve runfiles by @​DolceTriade in bazel-contrib#4514
• Default link mode to PIE on supported platforms by @​alextercete in bazel-contrib#4481
• go/tools/gopackagesdriver: don't filter GoFiles for tags by @​fionera in bazel-contrib#4519
• Update Coverage link in README.rst by @​bluec0re in bazel-contrib#4523
• Exclude cgotest from stdlib build by @​dzbarsky in bazel-contrib#4524
• Rename host_go{arch,os} to exec_ by @​dzbarsky in bazel-contrib#4525
• Start migrating rules_go workspace to bzlmod by @​dzbarsky in bazel-contrib#4526
• refactor: Remove more workspace content by @​dzbarsky in bazel-contrib#4529
• refactor: Remove next batch of WORKSPACE content by @​dzbarsky in bazel-contrib#4531
• expand make variables in x_defs by @​pjjw in bazel-contrib#4533
• Bump golang.org/x/net from 0.34.0 to 0.38.0 in /examples/basic_gazelle by @​dependabot[bot] in bazel-contrib#4530
• fix(releaser): add MODULE.bazel boilerplate by @​tyler-french in bazel-contrib#4225
• fix(gopackagesdriver): Improve wildcard package query matching by @​Aaronkala in bazel-contrib#4288
• Update BCR test module deps and Bazel version by @​fmeum in bazel-contrib#4537
• Replace html linebreaks with newlines. by @​katre in bazel-contrib#4541
• Replace HTML with Markdown in docs by @​katre in bazel-contrib#4542
• chore: Mark go_download_sdk as reproducible by @​mortenmj in bazel-contrib#4543
• Revert "Issue 1486: cgo: fix C++ dynamic initialization of static variables when using alwayslink = True (#​4438)" by @​fmeum in bazel-contrib#4551

New Contributors

• @​mrdomino made their first contribution in bazel-contrib#4496
• @​cerisier made their first contribution in bazel-contrib#4512
• @​alextercete made their first contribution in bazel-contrib#4481
• @​dependabot[bot] made their first contribution in bazel-contrib#4530
• @​Aaronkala made their first contribution in bazel-contrib#4288
• @​mortenmj made their first contribution in bazel-contrib#4543

Full Changelog: bazel-contrib/rules_go@v0.59.0...v0.60.0

---

Configuration

📅 Schedule: Branch creation - Monday through Friday ( * * * * 1-5 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[forking-renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 4 additional dependencies were updated

Details:

Package	Change
golang.org/x/net	v0.47.0 -> v0.48.0
golang.org/x/sys	v0.38.0 -> v0.39.0
golang.org/x/text	v0.31.0 -> v0.32.0
google.golang.org/genproto/googleapis/rpc	v0.0.0-20251111163417-95abcf5c77ba -> v0.0.0-20251202230838-ff82c1b0f217