chore(all): update deps

[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/openconfig/kne/third_party/meshnet	v0.3.3 → v0.4.1
google.golang.org/api	v0.290.0 → v0.291.0
google.golang.org/grpc	v1.82.1 → v1.83.0

---

Release Notes

googleapis/google-api-go-client (google.golang.org/api)

v0.291.0

Compare Source

Features

• all: Auto-regenerate discovery clients (#​3666) (e3721ba)
• all: Auto-regenerate discovery clients (#​3670) (4067374)
• all: Auto-regenerate discovery clients (#​3674) (432658c)
• all: Auto-regenerate discovery clients (#​3676) (9998a11)
• all: Auto-regenerate discovery clients (#​3678) (b5c5526)
• all: Auto-regenerate discovery clients (#​3679) (499d9b1)

Bug Fixes

• transport: Use ds.GetUniverseDomain() instead of raw ds.UniverseDomain field (#​3660) (6bad358)

grpc/grpc-go (google.golang.org/grpc)

v1.83.0: Release 1.83.0

Compare Source

Security

• server: Stop reading from connections when flooded by HTTP/2 frames to mitigate resource exhaustion. The default value for this limit is 100 frames, excluding DATA and HEADERS, and may be changed by setting environment variable GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT.
• xds/rbac: Support Metadata and RequestedServerName permissions matcher fields. If present in a DENY rule, previously these would be ignored and fail-open.
• xds/rbac: Fix panic when parsing unsupported fields in NotRule/NotId permissions.
• xds/rbac: Support the deprecated source_ip principal identifier by treating it as equivalent to direct_remote_ip.
• xds: Fix panic when parsing route header matchers configured with empty exact_match, prefix_match, or suffix_match strings. (#​9223)

New Features

• xds/googlec2p: Enable DirectPath over Interconnect support for on-premises clients via the force-xds target URI query parameter. (#​9133)
• xds: Enable xDS configuration to control which fields get propagated from ORCA backend metric reports to LRS load reports. (#​9145)
• authz: Add OnPolicyUpdate callback to FileWatcherOptions to notify when an authz policy is loaded or updated. (#​9142)
  • Special Thanks: @​hnefatl
• xds: Add support for the GCP Authentication HTTP Filter, which automatically fetches and attaches GCP Service Account Identity JWT tokens to outgoing RPCs.
  • This feature can be enabled by setting environment variable GRPC_EXPERIMENTAL_XDS_GCP_AUTHENTICATION_FILTER=true. (#​9119)
• xds: Add support for xDS-based HTTP CONNECT proxies.
  • This feature can be enabled by setting environment variable GRPC_EXPERIMENTAL_XDS_HTTP_CONNECT=true. (#​9151)
• xds: Add support for contains_match in route header matchers. (#​9223)

Bug Fixes

• credentials/alts: Fix panic when processing malformed frames by validating that the message frame length exceeds the message type field size. (#​9197)
• grpc: Fix compilation on Plan 9 targets (GOOS=plan9), broken since v1.81.0. (#​9255)
  • Special Thanks: @​Yusufihsangorgel

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Monday through Friday (* * * * 1-5)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[forking-renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 3 additional dependencies were updated

Details:

Package	Change
cloud.google.com/go/auth	v0.20.0 -> v0.22.0
github.com/googleapis/enterprise-certificate-proxy	v0.3.18 -> v0.3.19
google.golang.org/genproto/googleapis/rpc	v0.0.0-20260706201446-f0a921348800 -> v0.0.0-20260724162435-b2f20204f0df

File name: third_party/meshnet/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 9 additional dependencies were updated

Details:

Package	Change
go.opentelemetry.io/otel	v1.43.0 -> v1.44.0
go.opentelemetry.io/otel/metric	v1.43.0 -> v1.44.0
go.opentelemetry.io/otel/trace	v1.43.0 -> v1.44.0
golang.org/x/mod	v0.34.0 -> v0.35.0
golang.org/x/net	v0.53.0 -> v0.55.0
golang.org/x/sys	v0.43.0 -> v0.45.0
golang.org/x/term	v0.42.0 -> v0.43.0
golang.org/x/text	v0.36.0 -> v0.37.0
golang.org/x/tools	v0.43.0 -> v0.44.0