fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
@grpc/grpc-js (source)	^1.12.0 -> ^1.12.4					dependencies	patch
Google.Protobuf	3.28.2 -> 3.29.1					nuget	minor
Grpc.Net.Common	2.66.0 -> 2.67.0					nuget	minor
actions/setup-go	v5.0.2 -> v5.1.0					action	minor
actions/setup-node	v4.0.4 -> v4.1.0					action	minor
buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go	v1.34.2-20240717164558-a6c49f84cc0f.2 -> v1.35.2-20241127180247-a33202765966.1					require	minor
bufbuild/buf-setup-action	v1.44.0 -> v1.47.2					action	minor
bytes	1.7.2 -> 1.9.0					dependencies	minor
fixnum (source)	^1.1.0 -> ^1.1.1					dependencies	patch
github.com/go-kratos/kratos/v2	v2.8.0 -> v2.8.2					require	patch
google.golang.org/grpc	v1.67.1 -> v1.68.1					require	minor
google.golang.org/protobuf	v1.34.2 -> v1.35.2					require	minor
prost	0.13.3 -> 0.13.4					dependencies	patch
serde (source)	1.0.210 -> 1.0.215					dependencies	patch

---

Release Notes

grpc/grpc-node (@​grpc/grpc-js)

v1.12.4: @​grpc/grpc-js 1.12.4

Compare Source

• Prioritize reporting UNAVAILABLE status when handing connection drops (#​2862)

v1.12.3: @​grpc/grpc-js 1.12.3

Compare Source

• Report UNAVAILABLE if possible when handling connection drops (#​2861)

v1.12.2: @​grpc/grpc-js 1.12.2

Compare Source

• Use util.promisify instead of fs/promises for Node 12 compatibility (#​2838)

v1.12.1: @​grpc/grpc-js 1.12.1

Compare Source

• Port bugfixes from 1.11.x into 1.12.x (#​2836)

protocolbuffers/protobuf (Google.Protobuf)

v3.29.0

v3.28.3

grpc/grpc-dotnet (Grpc.Net.Common)

v2.67.0

What's Changed

• precompile condition clean by @​Varorbc in https://github.com/grpc/grpc-dotnet/pull/2528
• Log server cancellation errors at info level by @​JamesNK in https://github.com/grpc/grpc-dotnet/pull/2527
• Update logging to use generated logs by @​wabalubdub in https://github.com/grpc/grpc-dotnet/pull/2531
• Bump serve-static from 1.14.2 to 1.16.2 in /examples/Spar/Server/ClientApp by @​dependabot in https://github.com/grpc/grpc-dotnet/pull/2536
• Update to Grpc.Tools 2.67.0-pre1 by @​JamesNK in https://github.com/grpc/grpc-dotnet/pull/2547
• Cleanup gRPC unit testing helpers in tester sample by @​JamesNK in https://github.com/grpc/grpc-dotnet/pull/2548
• Fix UpdateBalancingState not called when address attributes are modified by @​JamesNK in https://github.com/grpc/grpc-dotnet/pull/2553
• Update Grpc.Tools to 2.67.0 by @​JamesNK in https://github.com/grpc/grpc-dotnet/pull/2554
• Fix System.Text.Json vulnerability warning by @​JamesNK in https://github.com/grpc/grpc-dotnet/pull/2556
• Update package dependencies to 9.0 RC2 by @​JamesNK in https://github.com/grpc/grpc-dotnet/pull/2560
• Bump elliptic from 6.5.7 to 6.6.0 in /examples/Spar/Server/ClientApp by @​dependabot in https://github.com/grpc/grpc-dotnet/pull/2567
• Update to .NET 9 RTM by @​JamesNK in https://github.com/grpc/grpc-dotnet/pull/2571

New Contributors

• @​wabalubdub made their first contribution in https://github.com/grpc/grpc-dotnet/pull/2531

Full Changelog: grpc/grpc-dotnet@v2.66.0...v2.67.0

actions/setup-go (actions/setup-go)

v5.1.0

Compare Source

What's Changed

• Add workflow file for publishing releases to immutable action package by @​Jcambass in https://github.com/actions/setup-go/pull/500
• Upgrade IA Publish by @​Jcambass in https://github.com/actions/setup-go/pull/502
• Add architecture to cache key by @​Zxilly in https://github.com/actions/setup-go/pull/493
  This addresses issues with caching by adding the architecture (arch) to the cache key, ensuring that cache keys are accurate to prevent conflicts.
  Note: This change may break previous cache keys as they will no longer be compatible with the new format.
• Enhance workflows and Upgrade micromatch Dependency by @​priyagupta108 in https://github.com/actions/setup-go/pull/510

Bug Fixes

• Revise isGhes logic by @​jww3 in https://github.com/actions/setup-go/pull/511

New Contributors

• @​Zxilly made their first contribution in https://github.com/actions/setup-go/pull/493
• @​Jcambass made their first contribution in https://github.com/actions/setup-go/pull/500
• @​jww3 made their first contribution in https://github.com/actions/setup-go/pull/511
• @​priyagupta108 made their first contribution in https://github.com/actions/setup-go/pull/510

Full Changelog: actions/setup-go@v5...v5.1.0

actions/setup-node (actions/setup-node)

v4.1.0

Compare Source

bufbuild/buf-setup-action (bufbuild/buf-setup-action)

v1.47.2

Compare Source

Release v1.47.2

v1.47.1

Compare Source

Release v1.47.1

v1.47.0

Compare Source

Release v1.47.0

v1.46.0

Compare Source

Release v1.46.0

v1.45.0

Compare Source

Release v1.45.0

tokio-rs/bytes (bytes)

v1.9.0

Compare Source

Added

• Add Bytes::from_owner to enable externally-allocated memory (#​742)

Documented

• Fix typo in Buf::chunk() comment (#​744)

Internal changes

• Replace BufMut::put with BufMut::put_slice in Writer impl (#​745)
• Rename hex_impl! to fmt_impl! and reuse it for fmt::Debug (#​743)

v1.8.0

Compare Source

• Guarantee address in split_off/split_to for empty slices (#​740)

dart-lang/core (fixnum)

v1.1.1

Compare Source

• Require Dart ^3.1.0
• Move to dart-lang/core monorepo.

go-kratos/kratos (github.com/go-kratos/kratos/v2)

v2.8.2

Compare Source

New Features

• feat: create build Group in changelog generate. (#​3448)

Bug Fixes

• fix: unit test Recycle watch resolver tick goroutine (#​3449)
• fix: resolve the issue of metrics and logging code default to zero (#​3447)

Others

• build(deps): bump golang.org/x/sync in /contrib/registry/zookeeper (#​3387)

Full Changelog: go-kratos/kratos@v2.8.1...v2.8.2

v2.8.1

Compare Source

New Features

• feat(middleware/metrics): make DefaultSecondsHistogram simply (#​3385)
• feat: adding stream interceptor for logging middleware (#​3359)
• feat(contrib/log/zap): If disable this level of logging entirely, avoid additional overhead (#​3357)
• feat(resolver/discovery): expose create watcher timeout error (#​3392)

Bug Fixes

• fix: fix errors reported by Lint CI. (#​3435)
• fix: add timeout configuration in grpc dial function (#​3365)
• fix: when entering idle mode, the old resolve-related resources have not been completely processed, and an exception occurs when exiting idle mode immediately. (#​3402)
• fix(registry/polaris): fix concurrent map iteration and map write #​3361 (#​3386)
• fix: fixed typo (#​3395)
• fix: filter redundant endpoints invalid (#​3373)

Chores

• chore: upgrade golangci-lint version to v1.60.3 and fix lint (#​3414)
• chore: remove non-existent test methods (#​2770)
• chore: replace the DisableDebugLog method, which is marked as Deprecated, with the PrintDebugLog method in the discovery test (#​3364)

Others

• faet: add buf config for protoc-gen-go-errors (#​3403)
• perf: optimize the http.ContentType method (#​3363)
• build(deps): bump github/codeql-action from 2 to 3 (#​3119)
• build(deps): bump google.golang.org/protobuf in /cmd/protoc-gen-go-http (#​3237)
• build(deps): bump golang.org/x/net in /contrib/errortracker/sentry (#​3288)
• build(deps): bump golang.org/x/net in /contrib/registry/etcd (#​3289)
• build(deps): bump golang.org/x/net in /contrib/config/kubernetes (#​3291)
• build(deps): bump golang.org/x/net in /contrib/registry/kubernetes (#​3290)
• build(deps): bump golang.org/x/net in /contrib/log/aliyun (#​3292)
• build(deps): bump golang.org/x/net in /contrib/registry/polaris (#​3294)
• build(deps): bump actions/setup-go from 5.0.1 to 5.0.2 (#​3362)

New Contributors

• @​LHyphen made their first contribution in https://github.com/go-kratos/kratos/pull/3373
• @​jarium made their first contribution in https://github.com/go-kratos/kratos/pull/3395
• @​1911860538 made their first contribution in https://github.com/go-kratos/kratos/pull/3363

Full Changelog: go-kratos/kratos@v2.8.0...v2.8.1

grpc/grpc-go (google.golang.org/grpc)

v1.68.1: Release 1.68.1

Compare Source

Bug Fixes

• credentials/alts: avoid SRV and TXT lookups for handshaker service to work around hangs caused by buggy versions of systemd-resolved. (#​7861)

Dependencies

• Relax minimum Go version requirement from go1.22.7 to go1.22. (#​7831)

v1.68.0: Release 1.68.0

Compare Source

Behavior Changes

• stats/opentelemetry/csm: Get mesh_id local label from "CSM_MESH_ID" environment variable, rather than parsing from bootstrap file (#​7740)
• orca (experimental): if using an ORCA listener, it must now be registered only on a READY SubConn, and the listener will automatically be stopped when the connection is lost. (#​7663)
• client: ClientConn.Close() now closes transports simultaneously and waits for transports to be closed before returning. (#​7666)
• credentials: TLS credentials created via NewTLS that use tls.Config.GetConfigForClient will now have CipherSuites, supported TLS versions and ALPN configured automatically. These were previously only set for configs not using the GetConfigForClient option. (#​7709)

Bug Fixes

• transport: prevent deadlock in client transport shutdown when writing the GOAWAY frame hangs. (#​7662)
• mem: reuse buffers more accurately by using slice capacity instead of length (#​7702)
  • Special Thanks: @​PapaCharlie
• status: Fix regression caused by #​6919 in status.Details() causing it to return a wrapped type when getting proto messages generated with protoc-gen-go < v1. (#​7724)

Dependencies

• Bump minimum supported Go version to go1.22.7. (#​7624)

v1.67.2: Release 1.67.2

Compare Source

Bug Fixes

• credentials/alts: avoid SRV and TXT lookups for handshaker service to work around hangs caused by buggy versions of systemd-resolved. (#​7861)

protocolbuffers/protobuf-go (google.golang.org/protobuf)

v1.35.2

Compare Source

Full Changelog: protocolbuffers/protobuf-go@v1.35.1...v1.35.2

Maintenance:

CL/623115: proto: refactor equal_test from explicit table to use makeMessages()
CL/623116: encoding/prototext: use testmessages_test.go approach, too
CL/623117: internal/testprotos/test: add nested message field with [lazy=true]
CL/624415: proto: switch messageset_test to use makeMessages() injection point
CL/624416: internal/impl: fix TestMarshalMessageSetLazyRace (was a no-op!)

User-visible changes:

CL/618395: encoding/protojson: allow missing value for Any of type Empty
CL/618979: all: implement strip_enum_prefix editions feature
CL/622575: testing/protocmp: document behavior when combining Ignore and Sort

v1.35.1

Compare Source

Full Changelog: protocolbuffers/protobuf-go@v1.34.2...v1.35.1

Maintenance:

• CL/606755: all: remove unused purego support
• CL/608316: all: set Go language version to Go 1.21

User-visible changes:

• CL/587536: protojson: include field name in error messages
• CL/597055: compiler/protogen: always report editions support level of the plugin
• CL/596539: all: plumb the lazy option into filedesc.Field and .Extension
• CL/601775: types/known/structpb: add support for more types and json.Number
• CL/607995: proto: extend documentation of GetExtension, SetExtension
• CL/609035: proto: implement proto.Equal fast-path

Bug fixes:

• CL/595337: reflect/protodesc: fix handling of delimited extensions in editions
• CL/602055: internal/cmd/generate-protos: fix pkg check for editions features
• CL/603015: internal: generate extension numbers, fix editions parsing

v1.35.0

Compare Source

tokio-rs/prost (prost)

v0.13.4

Compare Source

PROST! is a Protocol Buffers implementation for the Rust Language. prost generates simple, idiomatic Rust code from proto2 and proto3 files.

Features

• Impl Name for Protobuf well-known wrapper types (#​1174)

Performance

• NonZeroU64 to optimize encoded_len_varint (#​1192)

Dependencies

• Remove unused bytes dependency from prost-build (#​1169)
• Update pulldown-cmark-to-cmark requirement from >=16, <=17 to >=16, <=18 (#​1173)
• Update pulldown-cmark-to-cmark requirement from >=16, <=18 to >=16, <=19 (#​1195)
• Update protobuf to v25.3 (#​1165)
• Update protobuf to v25.4 (#​1176)

Styling

• Remove explicit lifetimes (#​1180)
• Remove unnecessary empty line after document (#​1181)

Testing

• (boxed_field) Confirm Foo::bar is boxed (#​1168)
• Move build.rs to standard location (#​1167)
• (custom_debug) Merge skip_debug into custom_debug (#​1178)
• Rename invalid_doctest to disable_comments (#​1183)
• (custom_attributes) Move module to separate file (#​1187)

Build

• Bump clippy version to 1.82 (#​1182)
• Restrict permissions of GITHUB_TOKEN (#​1189)

serde-rs/serde (serde)

v1.0.215

Compare Source

• Produce warning when multiple fields or variants have the same deserialization name (#​2855, #​2856, #​2857)

v1.0.214

Compare Source

• Implement IntoDeserializer for all Deserializers in serde::de::value module (#​2568, thanks @​Mingun)

v1.0.213

Compare Source

• Fix support for macro-generated with attributes inside a newtype struct (#​2847)

v1.0.212

Compare Source

• Fix hygiene of macro-generated local variable accesses in serde(with) wrappers (#​2845)

v1.0.211

Compare Source

• Improve error reporting about mismatched signature in with and default attributes (#​2558, thanks @​Mingun)
• Show variant aliases in error message when variant deserialization fails (#​2566, thanks @​Mingun)
• Improve binary size of untagged enum and internally tagged enum deserialization by about 12% (#​2821)

---

Configuration

📅 Schedule: Branch creation - "* 0-3 1 * *" in timezone Asia/Singapore, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -d -t ./...
go: -d flag is deprecated. -d=true is a no-op
go: downloading google.golang.org/protobuf v1.35.2
go: downloading google.golang.org/grpc v1.68.1
go: downloading buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go v1.35.2-20241127180247-a33202765966.1
go: downloading github.com/go-kratos/kratos/v2 v2.8.2
go: downloading google.golang.org/genproto/googleapis/rpc v0.0.0-20240903143218-8af14fe29dc1
go: downloading golang.org/x/net v0.29.0
go: downloading golang.org/x/sys v0.25.0
go: downloading golang.org/x/text v0.18.0
go: github.com/tuihub/protos/pkg/buf/validate imports
	buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go/buf/validate/priv: cannot find module providing package buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go/buf/validate/priv

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.