Skip to content

Build(deps): Bump google.golang.org/grpc from 1.83.1 to 1.83.2 in /samples/container-build/ginapp - #1917

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/samples/container-build/ginapp/google.golang.org/grpc-1.83.1
Closed

Build(deps): Bump google.golang.org/grpc from 1.83.1 to 1.83.2 in /samples/container-build/ginapp#1917
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/samples/container-build/ginapp/google.golang.org/grpc-1.83.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 2, 2026

Copy link
Copy Markdown
Contributor

Bumps google.golang.org/grpc from 1.83.1 to 1.83.2.

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.83.2

Security

  • server: Reject requests missing both :authority and Host headers with HTTP 400 and status Internal. (grpc/grpc-go#9365)
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 2, 2026
Copilot AI lite review requested due to automatic review settings September 2, 2026 07:32
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 2, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

The dependency version updates are consistent between go.mod and go.sum, and the only concern is a documentation/scope mismatch with the PR description.

Pull request overview

This PR updates Go module dependencies for the samples/container-build/ginapp sample, primarily bumping google.golang.org/grpc and regenerating module metadata accordingly.

Changes:

  • Bump google.golang.org/grpc from v1.82.1 to v1.83.1.
  • Update related module versions and checksums in go.mod/go.sum (including OpenTelemetry and genproto entries).
File summaries
File Description
samples/container-build/ginapp/go.mod Updates required module versions, including gRPC (and additional dependency bumps).
samples/container-build/ginapp/go.sum Updates checksums and adds/removes entries consistent with the new dependency graph.
Review details
  • Files reviewed: 1/2 changed files
  • Comments generated: 1
  • Review effort level: Lite

💡 Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.

Comment thread samples/container-build/ginapp/go.mod Outdated
Comment on lines +6 to +18
github.com/gin-gonic/gin v1.12.0
go.opentelemetry.io/contrib/bridges/otelslog v0.18.0
go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin v0.68.0
go.opentelemetry.io/otel v1.43.0
go.opentelemetry.io/otel v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc v0.19.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.43.0
go.opentelemetry.io/otel/log v0.19.0
go.opentelemetry.io/otel/metric v1.43.0
go.opentelemetry.io/otel/sdk v1.43.0
go.opentelemetry.io/otel/metric v1.44.0
go.opentelemetry.io/otel/sdk v1.44.0
go.opentelemetry.io/otel/sdk/log v0.19.0
go.opentelemetry.io/otel/sdk/metric v1.43.0
google.golang.org/grpc v1.82.1
go.opentelemetry.io/otel/sdk/metric v1.44.0
google.golang.org/grpc v1.83.1
@IEvangelist

Copy link
Copy Markdown
Member

Tracked/superseded by #1782 - the canonical [auto-sec] security consolidation PR that clears all 86 open Dependabot alerts in this repo (this package/manifest included). Keeping this open until #1782 is green; it will be closed then per the automation's closure gate.

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.83.1 to 1.83.2.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.83.1...v1.83.2)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.83.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump google.golang.org/grpc from 1.82.1 to 1.83.1 in /samples/container-build/ginapp Build(deps): Bump google.golang.org/grpc from 1.83.1 to 1.83.2 in /samples/container-build/ginapp Sep 10, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/samples/container-build/ginapp/google.golang.org/grpc-1.83.1 branch from 8a44c98 to 0db011e Compare September 10, 2026 14:37
@IEvangelist

Copy link
Copy Markdown
Member

Tracked/superseded by #1945 - the canonical [auto-sec] PR performing the same google.golang.org/grpc 1.83.1 -> 1.83.2 bump to clear the new go alert in ginapp. Will be closed once #1945 is green.

@IEvangelist

Copy link
Copy Markdown
Member

Superseded by #1945, the canonical [auto-sec] PR performing the same google.golang.org/grpc 1.83.1 -> 1.83.2 bump. #1945 is open, mergeable, conflict-free, and CI-green (Build & Test Samples ubuntu + windows + CI Gate all pass). Closing per the automation closure gate.

@dependabot @github

dependabot Bot commented on behalf of github Sep 10, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/go_modules/samples/container-build/ginapp/google.golang.org/grpc-1.83.1 branch September 10, 2026 15:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

auto-merge dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants