Skip to content

build(deps): bump google.golang.org/grpc from 1.83.0 to 1.83.1 - #277

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/google.golang.org/grpc-1.83.1
Open

build(deps): bump google.golang.org/grpc from 1.83.0 to 1.83.1#277
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/google.golang.org/grpc-1.83.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 24, 2026

Copy link
Copy Markdown
Contributor

Bumps google.golang.org/grpc from 1.83.0 to 1.83.1.

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.83.1

Security

  • xds/rbac: Fix a bug where nested Principal or Permission rules with :scheme or grpc- prefixed header matchers were not rejected, which could cause DENY rules to fail open. (#9258)
  • xds/rbac: Fix a bug where the host header matcher was not being replaced with :authority in nested Principal or Permission rules. (#9258)
  • xds/rbac: Fix a bug where a header matcher whose name was not lowercase, such as X-Role, matched no header, which could cause DENY rules to fail open. (#9332)
  • xds/rbac: Fix a bug where a :scheme or grpc- prefixed header matcher was accepted when its name was not lowercase. (#9332)
  • xds/rbac: Fix a bug where a Host header matcher was not replaced with :authority. (#9332)

Performance

  • transport: Restrict memory overhead of buffering small data frames. (#9331)
Commits

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 24, 2026
Copilot AI lite review requested due to automatic review settings August 24, 2026 16:38
@dependabot dependabot Bot added go Pull requests that update go code dependencies Pull requests that update a dependency file labels Aug 24, 2026

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Warning

Copilot couldn't run its full agentic review because it didn't start before the timeout. Make sure your repository has a runner available, or add a copilot-code-review.yml file specifying one with the runs-on attribute. See the docs for more details.

Updates the vendored and module dependency references for google.golang.org/grpc from v1.83.0 to v1.83.1 (security + performance patch release per upstream notes).

Changes:

  • Bump google.golang.org/grpc to v1.83.1 in go.mod
  • Update go.sum checksums for google.golang.org/grpc v1.83.1
  • Update vendored module metadata in vendor/modules.txt

Reviewed changes

Copilot reviewed 1 out of 12 changed files in this pull request and generated no comments.

File Description
vendor/modules.txt Updates vendored module version marker for gRPC to v1.83.1.
go.sum Replaces v1.83.0 checksums with v1.83.1 checksums for gRPC.
go.mod Updates required gRPC module version to v1.83.1.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.83.0 to 1.83.1.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.83.0...v1.83.1)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.83.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Copilot AI review requested due to automatic review settings August 26, 2026 16:31
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/google.golang.org/grpc-1.83.1 branch from 354c94e to 845eb26 Compare August 26, 2026 16:31

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 1 out of 12 changed files in this pull request and generated no new comments.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants