Skip to content

build(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.1 - #654

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/go_modules/google.golang.org/grpc-1.82.1
Aug 28, 2026
Merged

build(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.1#654
github-actions[bot] merged 1 commit into
mainfrom
dependabot/go_modules/google.golang.org/grpc-1.82.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 28, 2026

Copy link
Copy Markdown
Contributor

Bumps google.golang.org/grpc from 1.81.1 to 1.82.1.

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.82.1

Security

  • server: Stop reading from the connection when flooded by HTTP/2 frames. The default value for this limit is 100 frames, excluding DATA and HEADERS, and may be changed by setting environment variable GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT.
  • xds/rbac: Support Metadata and RequestedServerName permissions matcher fields. If present in a DENY rule, previously these would be ignored and fail-open.
  • xds/rbac: Fix panic when parsing unsupported fields in NotRule/NotId permissions.
  • xds/rbac: Support the deprecated source_ip principal identifier by treating it as equivalent to direct_remote_ip.

Release 1.82.0

Behavior Changes

  • server: Remove support for GRPC_GO_EXPERIMENTAL_DISABLE_STRICT_PATH_CHECKING environment varibale. Strict incoming RPC path validation (which has been the default since v1.79.3) can no longer be disabled. (#9112)
  • transport: Add environment variable to change the default max header list size from 16MB to 8KB. This may be enabled by setting GRPC_GO_EXPERIMENTAL_ENABLE_8KB_DEFAULT_HEADER_LIST_SIZE=true. This will be enabled by default in a subsequent release. (#9019)
  • balancer: Load Balancing policy registry is now case-sensitive. Set GRPC_GO_EXPERIMENTAL_CASE_SENSITIVE_BALANCER_REGISTRIES=false (and file an issue) to revert to case-insensitive behavior. (#9017)

New Features

  • experimental/stats: Expose a new API, NewContextWithLabelCallback, to register a callback that is invoked when telemetry labels are added. (#8877)
  • client: Return a portion of the response body in the error message, when the client receives an unexpected non-gRPC HTTP response, to make debugging easier. (#8929)
  • server: Add environment variable GRPC_GO_SERVER_GOROUTINE_LABELS that controls setting runtime/pprof.Labels on goroutines spawned by the server. Set GRPC_GO_SERVER_GOROUTINE_LABELS=grpc.method=true to add the grpc.method label on goroutines spawned to handle incoming requests. (#9082)

Bug Fixes

  • xds/server: Fix a memory leak of HTTP filter instances occurring when route configurations are updated in-place during a Route Discovery Service (RDS) update. (#9138)
  • grpc: In the deprecated gzip Compressor (used via the deprecated WithCompressor dial option), enforce the MaxRecvMsgSize limit on the decompressed message buffer, preventing excessive memory allocation from highly compressed payloads. (#9114)
  • stats/opentelemetry: Record retry attempts, grpc.previous-rpc-attempts, at the call level and not the attempt level. (#8923)
  • encoding: Ensure Close() is always called on readers returned from Compressor.Decompress if possible. (#9135)
  • channelz: Fix the LastMessageSentTimestamp and LastMessageReceivedTimestamp fields in SocketMetrics to ensure they contain correct timestamp values. (#9109)
Commits

@dependabot dependabot Bot added build M-T: Changes to compilation and CI processes semver:patch Use on pull requests to describe the release version increment labels Aug 28, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 28, 2026 22:49
@dependabot dependabot Bot added the build M-T: Changes to compilation and CI processes label Aug 28, 2026
@github-actions github-actions Bot added this to the Next Release milestone Aug 28, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) August 28, 2026 22:49
@codecov

codecov Bot commented Aug 28, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 72.59%. Comparing base (b589377) to head (98b8168).
⚠️ Report is 5 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #654   +/-   ##
=======================================
  Coverage   72.59%   72.59%           
=======================================
  Files         239      239           
  Lines       20228    20228           
=======================================
+ Hits        14684    14685    +1     
+ Misses       4274     4272    -2     
- Partials     1270     1271    +1     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@dependabot
dependabot Bot force-pushed the dependabot/go_modules/google.golang.org/grpc-1.82.1 branch from 6047dc5 to d96bb0c Compare August 28, 2026 22:56
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/google.golang.org/grpc-1.82.1 branch from d96bb0c to 24d29af Compare August 28, 2026 23:02
@dependabot dependabot Bot changed the title build(deps): bump google.golang.org/grpc from 1.80.0 to 1.82.1 build(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.1 Aug 28, 2026
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.81.1 to 1.82.1.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.81.1...v1.82.1)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.82.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/google.golang.org/grpc-1.82.1 branch from 24d29af to 98b8168 Compare August 28, 2026 23:08
@github-actions
github-actions Bot merged commit 777914a into main Aug 28, 2026
12 checks passed
@github-actions
github-actions Bot deleted the dependabot/go_modules/google.golang.org/grpc-1.82.1 branch August 28, 2026 23:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

build M-T: Changes to compilation and CI processes semver:patch Use on pull requests to describe the release version increment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants