Skip to content

chore(deps): bump google.golang.org/grpc from 1.83.1 to 1.83.2 - #6860

Merged
devantler merged 2 commits into
mainfrom
dependabot/go_modules/google.golang.org/grpc-1.83.2
Sep 3, 2026
Merged

chore(deps): bump google.golang.org/grpc from 1.83.1 to 1.83.2#6860
devantler merged 2 commits into
mainfrom
dependabot/go_modules/google.golang.org/grpc-1.83.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 3, 2026

Copy link
Copy Markdown
Contributor

Bumps google.golang.org/grpc from 1.83.1 to 1.83.2.

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.83.2

Security

  • server: Reject requests missing both :authority and Host headers with HTTP 400 and status Internal. (grpc/grpc-go#9365)
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.83.1 to 1.83.2.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.83.1...v1.83.2)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.83.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@ksail-bot
ksail-bot Bot enabled auto-merge (squash) September 3, 2026 17:16
@github-actions

github-actions Bot commented Sep 3, 2026

Copy link
Copy Markdown
Contributor

MegaLinter analysis: Success

✅ Linters with no issues

actionlint, bash-exec, git_diff, hadolint, jscpd, jsonlint, lychee, markdown-table-formatter, markdownlint, prettier, prettier, shellcheck, shfmt, stylelint, syft, trivy-sbom, trufflehog, v8r, v8r, yamllint

Notices

⚠️ Your configuration references items that have been removed from MegaLinter and are ignored: REPOSITORY_GITLEAKS. See Removed linters to find their replacements.

See detailed reports in MegaLinter artifacts

MegaLinter is provided by OX Security
Show us your support by starring ⭐ the repository

@devantler
devantler marked this pull request as draft September 3, 2026 18:10
auto-merge was automatically disabled September 3, 2026 18:10

Pull request was converted to draft

The desktop module mirrors the root graph through its indirect pins, so the
root bump leaves it stale and the required Test job fails on
TestClaircoreLinkedPackagesStayInert/desktop (ksail#6862).

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
@devantler

Copy link
Copy Markdown
Contributor

🤖 Generated by the Agentic Engineer

Adaptation commit pushed: 567ddd0ed7b3d1ca77222efd7f424ec965d40a6f — the desktop module tidied for grpc 1.83.2.

At Dependabot's head d2598ce9 the required 🧪 Test job failed on TestClaircoreLinkedPackagesStayInert/desktop (go: updates to go.mod needed), and the 🧩 Desktop App builds failed the same way: desktop/go.mod still pinned google.golang.org/grpc v1.83.1 // indirect. CI detected the drift but, since #6851, no longer pushes it onto Dependabot branches — so nothing could finish this head. The systemic side is tracked in #6862.

The commit is one pin line plus its two go.sum entries. Converted to draft (which dropped auto-merge) before the push, per the dependency-PR adaptation rule; the adapted head now takes the ordinary current-head review gate before promotion and re-arming. Dependabot can no longer rebase this branch (#6832), so it is merged promptly rather than left to age.

@devantler

Copy link
Copy Markdown
Contributor

🤖 Generated by the Agentic Engineer

@coderabbitai review

@coderabbitai

coderabbitai Bot commented Sep 3, 2026

Copy link
Copy Markdown

@devantler: I will review the current pull request head.

⚠️ Action not completed

Review rate limited.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

@coderabbitai

coderabbitai Bot commented Sep 3, 2026

Copy link
Copy Markdown

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Repository YAML (base), Organization UI (inherited)

Review profile: ASSERTIVE

Plan: Team

Run ID: ee56f094-8379-48be-aa91-967c7903d397

📥 Commits

Reviewing files that changed from the base of the PR and between 0a382f9 and 567ddd0.

⛔ Files ignored due to path filters (2)
  • desktop/go.sum is excluded by !**/*.sum
  • go.sum is excluded by !**/*.sum
📒 Files selected for processing (2)
  • desktop/go.mod
  • go.mod

Included review availability: Your plan provides up to 2 included reviews per hour; 0 remain after this review.

📜 Recent review details
🔇 Additional comments (2)
go.mod (1)

108-108: LGTM!

desktop/go.mod (1)

804-804: LGTM!


📝 Walkthrough

Walkthrough

The pull request updates google.golang.org/grpc from v1.83.1 to v1.83.2 in the root and desktop Go modules.

Merge Risk: ⚪ Minimal · up to 567dd

This updates gRPC to v1.83.2 consistently across the root and desktop modules. No current merge-blocking risk remains.

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description check ✅ Passed The description clearly documents the google.golang.org/grpc update and its security fix, matching the changeset.
Title check ✅ Passed The title clearly and concisely identifies the google.golang.org/grpc dependency update from 1.83.1 to 1.83.2.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (2 skipped: 2 unsupported.)


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@devantler

Copy link
Copy Markdown
Contributor

🤖 Generated by the Agentic Engineer

@coderabbitai review

@coderabbitai

coderabbitai Bot commented Sep 3, 2026

Copy link
Copy Markdown

@devantler I will review the current pull request head.

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

@devantler

Copy link
Copy Markdown
Contributor

🤖 Generated by the Agentic Engineer

Green review at 567ddd0ed7b3d1ca77222efd7f424ec965d40a6f, promoting and merging. The 20:18Z CodeRabbit request at the adapted head completed at 20:21Z — head status Review completed, auto-generated summary refreshed after the request and naming this head with no actionable comments, and the command reply carries no refusal marker (the 20:06Z attempt was refused on the included-review window, which had cleared). No review threads exist.

Observed as a user through CI at this head: the adaptation exists to make the desktop module build and test against grpc 1.83.2, and the jobs that failed at Dependabot's own head (🧪 Test on TestClaircoreLinkedPackagesStayInert/desktop, the 🧩 Desktop App builds) now pass on this head alongside every Build, Test and System Test job — 60 successful checks, none failing. That run is the behaviour the pin-line change was made for, read from the run rather than inferred. Direct head-pinned merge follows.

@devantler
devantler marked this pull request as ready for review September 3, 2026 20:24
@devantler
devantler merged commit d155918 into main Sep 3, 2026
78 checks passed
@devantler
devantler deleted the dependabot/go_modules/google.golang.org/grpc-1.83.2 branch September 3, 2026 20:24
@github-project-automation github-project-automation Bot moved this from 🫴 Ready to ✅ Done in 🌊 Project Board Sep 3, 2026
@devantler

Copy link
Copy Markdown
Contributor

🤖 Generated by the Agentic Engineer

@coderabbitai review

@coderabbitai

coderabbitai Bot commented Sep 3, 2026

Copy link
Copy Markdown

@devantler I will review the current pull request head.

⚠️ Action not completed

Pull request is closed.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

Status: ✅ Done

Development

Successfully merging this pull request may close these issues.

1 participant