build(deps): bump google.golang.org/grpc from 1.83.1 to 1.83.2 - #1590
Conversation
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.83.1 to 1.83.2. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.83.1...v1.83.2) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-version: 1.83.2 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
✅ Deploy Preview for agent-sandbox canceled.
|
kubernetes-prow
Bot
added
the
cncf-cla: yes
|
Hi @dependabot[bot]. Thanks for your PR. I'm waiting for a kubernetes-sigs member to verify that this patch is reasonable to test. If it is, they should reply with Regular contributors should join the org to skip this step. Once the patch is verified, the new status will be reflected by the I understand the commands that are listed here. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
kubernetes-prow
Bot
added
the
size/XS
There was a problem hiding this comment.
🟢 Approval recommended
This is a straightforward patch-level dependency bump with consistent go.mod and go.sum updates and no additional behavioral changes introduced in-repo.
Pull request overview
This PR updates the repository’s Go module dependency on google.golang.org/grpc from v1.83.1 to v1.83.2, incorporating the upstream patch release (including a server-side security hardening change per the PR description).
Changes:
- Bump
google.golang.org/grpctov1.83.2ingo.mod. - Update
go.sumchecksums to match the newgrpcmodule version.
File summaries
| File | Description |
|---|---|
| go.mod | Updates the required google.golang.org/grpc module version to v1.83.2. |
| go.sum | Updates module sums to reflect the google.golang.org/grpc v1.83.2 resolution. |
Review details
- Files reviewed: 1/2 changed files
- Comments generated: 0
- Review effort level: Lite
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
aditya-shantanu
left a comment
aditya-shantanu
left a comment
There was a problem hiding this comment.
Patch-level grpc bump carrying the :authority/Host header security fix (grpc/grpc-go#9365); go.mod/go.sum consistent, all presubmits green. Note the same bump is included in #1588, which is currently blocked on unrelated CI breakage — merging this first is fine; dependabot will reconcile.
|
/lgtm |
kubernetes-prow
Bot
added
the
lgtm
|
/approve |
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: barney-s, dependabot[bot] The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
kubernetes-prow
Bot
added
the
approved
Bumps google.golang.org/grpc from 1.83.1 to 1.83.2.
Release notes
Sourced from google.golang.org/grpc's releases.
Commits
030ee8bUpdate version to 1.83.2 (#9375)8668b69cherry-pick #9365 to v1.83.x (#9366)a3e952dcherry-pick #9346 to v1.83.x and update x/net dependency (#9369)58f8fd9Change version to 1.83.2-dev (#9337)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.