Skip to content

build(deps): bump google.golang.org/grpc from 1.83.0 to 1.83.1 in the production-dependencies group across 1 directory - #4578

Merged
kyleconroy merged 1 commit into
mainfrom
dependabot/go_modules/production-dependencies-4d54e058aa
Aug 26, 2026
Merged

build(deps): bump google.golang.org/grpc from 1.83.0 to 1.83.1 in the production-dependencies group across 1 directory#4578
kyleconroy merged 1 commit into
mainfrom
dependabot/go_modules/production-dependencies-4d54e058aa

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 24, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 1 update in the / directory: google.golang.org/grpc.

Updates google.golang.org/grpc from 1.83.0 to 1.83.1

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.83.1

Security

  • xds/rbac: Fix a bug where nested Principal or Permission rules with :scheme or grpc- prefixed header matchers were not rejected, which could cause DENY rules to fail open. (#9258)
  • xds/rbac: Fix a bug where the host header matcher was not being replaced with :authority in nested Principal or Permission rules. (#9258)
  • xds/rbac: Fix a bug where a header matcher whose name was not lowercase, such as X-Role, matched no header, which could cause DENY rules to fail open. (#9332)
  • xds/rbac: Fix a bug where a :scheme or grpc- prefixed header matcher was accepted when its name was not lowercase. (#9332)
  • xds/rbac: Fix a bug where a Host header matcher was not replaced with :authority. (#9332)

Performance

  • transport: Restrict memory overhead of buffering small data frames. (#9331)
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 24, 2026
Bumps the production-dependencies group with 1 update in the / directory: [google.golang.org/grpc](https://github.com/grpc/grpc-go).


Updates `google.golang.org/grpc` from 1.83.0 to 1.83.1
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.83.0...v1.83.1)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.83.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): bump google.golang.org/grpc from 1.83.0 to 1.83.1 in the production-dependencies group build(deps): bump google.golang.org/grpc from 1.83.0 to 1.83.1 in the production-dependencies group across 1 directory Aug 26, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/production-dependencies-4d54e058aa branch from 9f982b9 to ee63329 Compare August 26, 2026 10:03
@kyleconroy
kyleconroy merged commit 5d460e0 into main Aug 26, 2026
13 checks passed
@kyleconroy
kyleconroy deleted the dependabot/go_modules/production-dependencies-4d54e058aa branch August 26, 2026 19:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant