chore(deps): update go patches

[agntcy-automation]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/grpc-ecosystem/go-grpc-middleware/v2	v2.3.3 → v2.3.4
github.com/sigstore/protobuf-specs	v0.5.1 → v0.5.2
github.com/stretchr/testify	v1.12.0 → v1.12.1
google.golang.org/grpc	v1.83.1 → v1.83.2

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

grpc-ecosystem/go-grpc-middleware (github.com/grpc-ecosystem/go-grpc-middleware/v2)

v2.3.4

Compare Source

What's Changed

• simplify Level type and align with slog.Level by @​rashmi-tondare in #​818
• fix: avoid logging io.EOF as error level in PostMsgSend and PostMsgReceive by @​dbeneker in #​822

Full Changelog: grpc-ecosystem/go-grpc-middleware@v2.3.3...v2.3.4

sigstore/protobuf-specs (github.com/sigstore/protobuf-specs)

v0.5.2

Compare Source

• Add monitor configuration protobuf definition (#​907)
• Add custom java_package to envelope.proto (#​923)

stretchr/testify (github.com/stretchr/testify)

v1.12.1

Compare Source

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

• Change yaml library to go.yaml.in/yaml/v3 by @​harryzcy in #​1935
• change yaml library to go.yaml.in/yaml/v3 by @​boekkooi-impossiblecloud in #​1772

New Contributors

• @​harryzcy made their first contribution in #​1935
• @​boekkooi-impossiblecloud made their first contribution in #​1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed

• Change yaml library to go.yaml.in/yaml/v3 by @​harryzcy in #​1935
• change yaml library to go.yaml.in/yaml/v3 by @​boekkooi-impossiblecloud in #​1772

New Contributors

• @​harryzcy made their first contribution in #​1935
• @​boekkooi-impossiblecloud made their first contribution in #​1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

grpc/grpc-go (google.golang.org/grpc)

v1.83.2: Release 1.83.2

Compare Source

Security

• server: Reject requests missing both :authority and Host headers with HTTP 400 and status Internal. (#​9365)
  • Special Thanks: @​winklemad

[agntcy-automation]

ℹ️ Artifact update notice

File name: api/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 1 additional dependency was updated

Details:

Package	Change
golang.org/x/net	v0.57.0 -> v0.58.0

File name: client/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 1 additional dependency was updated

Details:

Package	Change
golang.org/x/net	v0.57.0 -> v0.58.0

File name: reconciler/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 1 additional dependency was updated

Details:

Package	Change
github.com/sigstore/protobuf-specs	v0.5.1 -> v0.5.2

File name: utils/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 2 additional dependencies were updated

Details:

Package	Change
go.yaml.in/yaml/v3	v3.0.4 -> v3.0.5
golang.org/x/net	v0.57.0 -> v0.58.0

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!