Skip to content

chore: bump google.golang.org/grpc from 1.82.2 to 1.83.2 - #4810

Merged
JaydipGabani merged 1 commit into
masterfrom
dependabot/go_modules/google.golang.org/grpc-1.83.1
Sep 16, 2026
Merged

chore: bump google.golang.org/grpc from 1.82.2 to 1.83.2#4810
JaydipGabani merged 1 commit into
masterfrom
dependabot/go_modules/google.golang.org/grpc-1.83.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 2, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps google.golang.org/grpc from 1.82.2 to 1.83.2.

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.83.2

Security

Release 1.83.1

Security

  • xds/rbac: Fix a bug where nested Principal or Permission rules with :scheme or grpc- prefixed header matchers were not rejected, which could cause DENY rules to fail open. (#9258)
  • xds/rbac: Fix a bug where the host header matcher was not being replaced with :authority in nested Principal or Permission rules. (#9258)
  • xds/rbac: Fix a bug where a header matcher whose name was not lowercase, such as X-Role, matched no header, which could cause DENY rules to fail open. (#9332)
  • xds/rbac: Fix a bug where a :scheme or grpc- prefixed header matcher was accepted when its name was not lowercase. (#9332)
  • xds/rbac: Fix a bug where a Host header matcher was not replaced with :authority. (#9332)

Performance

  • transport: Restrict memory overhead of buffering small data frames. (#9331)

Release 1.83.0

Security

  • server: Stop reading from connections when flooded by HTTP/2 frames to mitigate resource exhaustion. The default value for this limit is 100 frames, excluding DATA and HEADERS, and may be changed by setting environment variable GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT.
  • xds/rbac: Support Metadata and RequestedServerName permissions matcher fields. If present in a DENY rule, previously these would be ignored and fail-open.
  • xds/rbac: Fix panic when parsing unsupported fields in NotRule/NotId permissions.
  • xds/rbac: Support the deprecated source_ip principal identifier by treating it as equivalent to direct_remote_ip.
  • xds: Fix panic when parsing route header matchers configured with empty exact_match, prefix_match, or suffix_match strings. (#9223)

New Features

  • xds/googlec2p: Enable DirectPath over Interconnect support for on-premises clients via the force-xds target URI query parameter. (#9133)
  • xds: Enable xDS configuration to control which fields get propagated from ORCA backend metric reports to LRS load reports. (#9145)
  • authz: Add OnPolicyUpdate callback to FileWatcherOptions to notify when an authz policy is loaded or updated. (#9142)
  • xds: Add support for the GCP Authentication HTTP Filter, which automatically fetches and attaches GCP Service Account Identity JWT tokens to outgoing RPCs.
    • This feature can be enabled by setting environment variable GRPC_EXPERIMENTAL_XDS_GCP_AUTHENTICATION_FILTER=true. (#9119)
  • xds: Add support for xDS-based HTTP CONNECT proxies.
    • This feature can be enabled by setting environment variable GRPC_EXPERIMENTAL_XDS_HTTP_CONNECT=true. (#9151)
  • xds: Add support for contains_match in route header matchers. (#9223)

Bug Fixes

  • credentials/alts: Fix panic when processing malformed frames by validating that the message frame length exceeds the message type field size. (#9197)
  • grpc: Fix compilation on Plan 9 targets (GOOS=plan9), broken since v1.81.0. (#9255)

... (truncated)

Commits

@dependabot
dependabot Bot requested a review from a team as a code owner September 2, 2026 08:27
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 2, 2026
@JaydipGabani

JaydipGabani commented Sep 2, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/go_modules/google.golang.org/grpc-1.83.1 branch from 327160e to 06a3f9d Compare September 2, 2026 18:56
@JaydipGabani

JaydipGabani commented Sep 14, 2026

Copy link
Copy Markdown
Contributor

@dependabot recreate

@dependabot dependabot Bot changed the title chore: bump google.golang.org/grpc from 1.82.2 to 1.83.1 chore: bump google.golang.org/grpc from 1.82.2 to 1.83.2 Sep 14, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/google.golang.org/grpc-1.83.1 branch from 06a3f9d to 6bac862 Compare September 14, 2026 22:50
@JaydipGabani

JaydipGabani commented Sep 16, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot
chore: bump google.golang.org/grpc from 1.82.2 to 1.83.2
315b94f 
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.82.2 to 1.83.2.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.82.2...v1.83.2)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.83.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/google.golang.org/grpc-1.83.1 branch from 6bac862 to 315b94f Compare September 16, 2026 20:59
@JaydipGabani
JaydipGabani merged commit abe653e into master Sep 16, 2026
46 of 48 checks passed
@JaydipGabani
JaydipGabani deleted the dependabot/go_modules/google.golang.org/grpc-1.83.1 branch September 16, 2026 22:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@JaydipGabani JaydipGabani JaydipGabani approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@JaydipGabani