Skip to content

build(deps): Bump the gomod group across 4 directories with 6 updates - #64

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/proto-clients/spicedb-go-proto/gomod-4472b4d4bd
Open

build(deps): Bump the gomod group across 4 directories with 6 updates#64
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/proto-clients/spicedb-go-proto/gomod-4472b4d4bd

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 26, 2026

Copy link
Copy Markdown
Contributor

Bumps the gomod group with 2 updates in the /proto-clients/spicedb-go-proto directory: github.com/grpc-ecosystem/grpc-gateway/v2 and github.com/stretchr/testify.
Bumps the gomod group with 2 updates in the /spicedb-gen directory: github.com/stretchr/testify and github.com/authzed/spicedb.
Bumps the gomod group with 1 update in the /spicedb-gen/testdata/go directory: github.com/stretchr/testify.
Bumps the gomod group with 2 updates in the /spicedb-go directory: github.com/stretchr/testify and google.golang.org/grpc.

Updates github.com/grpc-ecosystem/grpc-gateway/v2 from 2.29.0 to 2.30.0

Release notes

Sourced from github.com/grpc-ecosystem/grpc-gateway/v2's releases.

v2.30.0

New Features

  • protoc-gen-openapiv3: Brand new minimal OpenAPI v3 generator (#6623), plus follow-ups:
    • Visibility selectors (#6673)
    • disable_default_errors option (#6672)
    • Annotation support (#6681)
    • Improved plugin error surfacing (#6937)
    • field_behavior REQUIRED support for query parameters (#7180) — @​maydietwice
  • openapiv3-merge: New standalone tool for merging OpenAPI v3 documents (#6771) — @​johanbrandhorst
  • protoc-gen-openapiv2 moved to the protoc toolchain (#6988) — @​EliSauder

Fixes

Change PR Contributor
OpenAPI v2: messages sorted before rendering definitions for determinism #6732 @​alliasgher
OpenAPI v2: enum comments now go to description instead of title #6785 @​superShen0916
OpenAPI v2: include field schema metadata on parameters #6894 @​puneetdixit200
OpenAPI v2: omit empty body objects for nested path parameters #7065 @​alliasgher
OpenAPI v3: omit empty body objects for nested path parameters #7068 @​alliasgher
OpenAPI v2: preserve x-nullable when use_allof_for_refs wraps a $ref #7026 @​pkhanaljc
OpenAPI v2: fix path joining for colon-prefixed segments #7191 @​Ritik100-AIT
Prioritize OpenAPI config options over proto options #6973 @​maskedmaxx
Support Service doc comments for OpenAPI/Swagger generation #6200 @​majiayu000
Fix nested body path initialization for oneof fields #6948 @​cyphercodes
Remove redundant enum assignment for nested proto3 fields #7059 @​abhishek-dalbanjan
Drain request only after ParseForm in generated code #7192 @​paskozdilar
Support field extensions with use_allof_for_refs #3100 @​same-id
Ignore M import-path mappings in openapiv3 plugin params #6936 @​johanbrandhorst

Documentation

Tests / CI / Infra

New Contributors

@​alliasgher, @​superShen0916, @​puneetdixit200, @​ketpatil77, @​EliSauder, @​maskedmaxx, @​hawk-roy, @​viniciusmtsantos, @​cyphercodes, @​abhishek-dalbanjan, @​hsdfat, @​ZayanKhan-12, @​dlanov, @​maydietwice, @​pkhanaljc, @​Ritik100-AIT

... (truncated)

Commits
  • 1debdea Fix openapiv2 path joining for colon-prefixed segments (#7191)
  • 561f393 Drain request only after ParseForm in generated code (#7192)
  • a16cad8 fix(openapiv2): preserve x-nullable when use_allof_for_refs wraps $ref (#7026)
  • 544d99d openapiv3: support field_behavior REQUIRED for query parameters (#7180)
  • 89a9e41 chore(deps): update google/oss-fuzz digest to 3ea2a9b (#7195)
  • 42ced5f fix(deps): update opentelemetry-go-contrib monorepo to v0.70.0 (#7194)
  • c63e364 chore(deps): update googleapis digest to 5739471 (#7193)
  • 873f41a chore(deps): update google/oss-fuzz digest to 8d292af (#7190)
  • f56f8ad chore(deps): update googleapis digest to f3ff3a1 (#7189)
  • 3087cc7 build(deps-dev): bump fast-uri in /examples/internal/browser (#7187)
  • Additional commits viewable in compare view

Updates github.com/stretchr/testify from 1.12.0 to 1.12.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.12.1

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

New Contributors

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed

New Contributors

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

Commits

Updates google.golang.org/genproto/googleapis/api from 0.0.0-20260414002931-afd174a4e478 to 0.0.0-20260803160001-6ac0973c030d

Commits

Updates google.golang.org/genproto/googleapis/rpc from 0.0.0-20260414002931-afd174a4e478 to 0.0.0-20260803160001-6ac0973c030d

Commits

Updates google.golang.org/grpc from 1.80.0 to 1.83.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.83.1

Security

  • xds/rbac: Fix a bug where nested Principal or Permission rules with :scheme or grpc- prefixed header matchers were not rejected, which could cause DENY rules to fail open. (#9258)
  • xds/rbac: Fix a bug where the host header matcher was not being replaced with :authority in nested Principal or Permission rules. (#9258)
  • xds/rbac: Fix a bug where a header matcher whose name was not lowercase, such as X-Role, matched no header, which could cause DENY rules to fail open. (#9332)
  • xds/rbac: Fix a bug where a :scheme or grpc- prefixed header matcher was accepted when its name was not lowercase. (#9332)
  • xds/rbac: Fix a bug where a Host header matcher was not replaced with :authority. (#9332)

Performance

  • transport: Restrict memory overhead of buffering small data frames. (#9331)
Commits

Updates github.com/stretchr/testify from 1.12.0 to 1.12.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.12.1

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

New Contributors

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed

New Contributors

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

Commits

Updates github.com/authzed/spicedb from 1.56.0 to 1.56.1

Release notes

Sourced from github.com/authzed/spicedb's releases.

v1.56.1

Changed

Fixed

  • Postgres: read replicas no longer intermittently return object definition not found under load. The strict read-replica guard now verifies that the replica's snapshot has caught up to the revision being read (snapshot domination) instead of checking a single transaction id, and raises from within the read itself rather than from a trailing assertion, so a replica that catches up mid-query can no longer let an incomplete read through. In both cases the read correctly falls back to the primary. (authzed/spicedb#3243)
  • Prevent ReadRelationships from doing work that's immediately discarded when the optional_limit parameter is used (authzed/spicedb#3253)
  • MemDB: overlapping write transactions could violate every snapshot-consistency invariant of the datastore — a committed write could be invisible at its own returned revision (breaking read-your-writes, e.g. an at-exact-snapshot Check right after WriteRelationships), a later commit could leak into reads at an earlier revision, a write visible at one revision could be missing at a later one (including head), and two concurrent transactions could be assigned the same revision. Revisions are now assigned at write-transaction acquisition, where writer serialization makes the two orders identical. (authzed/spicedb#3239)
  • All datastores now answer Ready (or not) within a bounded time (authzed/spicedb#3262)

What's Changed

New Contributors

Full Changelog: authzed/spicedb@v1.56.0...v1.56.1

Docker Images

This release is available at authzed/spicedb:v1.56.1, quay.io/authzed/spicedb:v1.56.1, ghcr.io/authzed/spicedb:v1.56.1

Changelog

Sourced from github.com/authzed/spicedb's changelog.

[1.56.1] - 2026-08-26

Changed

Fixed

  • Postgres: read replicas no longer intermittently return object definition not found under load. The strict read-replica guard now verifies that the replica's snapshot has caught up to the revision being read (snapshot domination) instead of checking a single transaction id, and raises from within the read itself rather than from a trailing assertion, so a replica that catches up mid-query can no longer let an incomplete read through. In both cases the read correctly falls back to the primary. (authzed/spicedb#3243)
  • Prevent ReadRelationships from doing work that's immediately discarded when the optional_limit parameter is used (authzed/spicedb#3253)
  • MemDB: overlapping write transactions could violate every snapshot-consistency invariant of the datastore — a committed write could be invisible at its own returned revision (breaking read-your-writes, e.g. an at-exact-snapshot Check right after WriteRelationships), a later commit could leak into reads at an earlier revision, a write visible at one revision could be missing at a later one (including head), and two concurrent transactions could be assigned the same revision. Revisions are now assigned at write-transaction acquisition, where writer serialization makes the two orders identical. (authzed/spicedb#3239)
  • All datastores now answer Ready (or not) within a bounded time (authzed/spicedb#3262)
Commits

Updates github.com/stretchr/testify from 1.12.0 to 1.12.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.12.1

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

New Contributors

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed

New Contributors

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

Commits

Updates github.com/stretchr/testify from 1.12.0 to 1.12.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.12.1

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

New Contributors

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed

New Contributors

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

Commits

Updates google.golang.org/grpc from 1.83.0 to 1.83.1

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.83.1

Security

  • xds/rbac: Fix a bug where nested Principal or Permission rules with :scheme or grpc- prefixed header matchers were not rejected, which could cause DENY rules to fail open. (#9258)
  • xds/rbac: Fix a bug where the host header matcher was not being replaced with :authority in nested Principal or Permission rules. (#9258)
  • xds/rbac: Fix a bug where a header matcher whose name was not lowercase, such as X-Role, matched no header, which could cause DENY rules to fail open. (#9332)
  • xds/rbac: Fix a bug where a :scheme or grpc- prefixed header matcher was accepted when its name was not lowercase. (#9332)
  • xds/rbac: Fix a bug where a Host header matcher was not replaced with :authority. (#9332)

Performance

  • transport: Restrict memory overhead of buffering small data frames. (#9331)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): Bump the gomod group across 4 directories with 6 updates
f961fd7 
Bumps the gomod group with 2 updates in the /proto-clients/spicedb-go-proto directory: [github.com/grpc-ecosystem/grpc-gateway/v2](https://github.com/grpc-ecosystem/grpc-gateway) and [github.com/stretchr/testify](https://github.com/stretchr/testify).
Bumps the gomod group with 2 updates in the /spicedb-gen directory: [github.com/stretchr/testify](https://github.com/stretchr/testify) and [github.com/authzed/spicedb](https://github.com/authzed/spicedb).
Bumps the gomod group with 1 update in the /spicedb-gen/testdata/go directory: [github.com/stretchr/testify](https://github.com/stretchr/testify).
Bumps the gomod group with 2 updates in the /spicedb-go directory: [github.com/stretchr/testify](https://github.com/stretchr/testify) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).


Updates `github.com/grpc-ecosystem/grpc-gateway/v2` from 2.29.0 to 2.30.0
- [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases)
- [Commits](grpc-ecosystem/grpc-gateway@v2.29.0...v2.30.0)

Updates `github.com/stretchr/testify` from 1.12.0 to 1.12.1
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.12.0...v1.12.1)

Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20260414002931-afd174a4e478 to 0.0.0-20260803160001-6ac0973c030d
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20260414002931-afd174a4e478 to 0.0.0-20260803160001-6ac0973c030d
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/grpc` from 1.80.0 to 1.83.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.83.0...v1.83.1)

Updates `github.com/stretchr/testify` from 1.12.0 to 1.12.1
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.12.0...v1.12.1)

Updates `github.com/authzed/spicedb` from 1.56.0 to 1.56.1
- [Release notes](https://github.com/authzed/spicedb/releases)
- [Changelog](https://github.com/authzed/spicedb/blob/main/CHANGELOG.md)
- [Commits](authzed/spicedb@v1.56.0...v1.56.1)

Updates `github.com/stretchr/testify` from 1.12.0 to 1.12.1
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.12.0...v1.12.1)

Updates `github.com/stretchr/testify` from 1.12.0 to 1.12.1
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.12.0...v1.12.1)

Updates `google.golang.org/grpc` from 1.83.0 to 1.83.1
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.83.0...v1.83.1)

---
updated-dependencies:
- dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2
  dependency-version: 2.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: google.golang.org/genproto/googleapis/api
  dependency-version: 0.0.0-20260803160001-6ac0973c030d
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: google.golang.org/genproto/googleapis/rpc
  dependency-version: 0.0.0-20260803160001-6ac0973c030d
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: google.golang.org/grpc
  dependency-version: 1.83.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/authzed/spicedb
  dependency-version: 1.56.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: google.golang.org/grpc
  dependency-version: 1.83.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants