chore: update dependencies

[renovate]

Update Request | Renovate Bot

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
actions/stale	action	minor	v10.0.0 -> v10.1.0
github.com/grpc-ecosystem/go-grpc-middleware/v2	require	patch	v2.3.2 -> v2.3.3
github.com/planetscale/vtprotobuf	require	digest	6f2963f -> ba97887
github.com/siderolabs/gen	require	patch	v0.8.5 -> v0.8.6
github.com/siderolabs/go-debug	require	patch	v0.6.0 -> v0.6.1
go.uber.org/zap	require	patch	v1.27.0 -> v1.27.1
golang.org/x/net	require	minor	v0.44.0 -> v0.47.0
golang.org/x/sync	require	minor	v0.17.0 -> v0.18.0
golang.org/x/time	require	minor	v0.13.0 -> v0.14.0
google.golang.org/grpc	require	minor	v1.75.1 -> v1.77.0
google.golang.org/protobuf	require	patch	v1.36.9 -> v1.36.10

---

Release Notes

actions/stale (actions/stale)

v10.1.0

Compare Source

What's Changed

• Add only-issue-types option to filter issues by type by @​Bibo-Joshi in #​1255

New Contributors

• @​Bibo-Joshi made their first contribution in #​1255

Full Changelog: actions/stale@v10...v10.1.0

grpc-ecosystem/go-grpc-middleware (github.com/grpc-ecosystem/go-grpc-middleware/v2)

v2.3.3

Compare Source

What's Changed

• add WithLabelsFromContext prometheus interceptor option by @​benjibuiltit in #​758
• fix: correct comment typo in StreamServerInterceptor function by @​haru-256 in #​760
• Minor refactor to remove duplication by @​nwnt in #​761
• chore: migrate golangci-lint to v2.3.0 by @​mmorel-35 in #​765
• chore: enable misspell linter with golangci-lint by @​mmorel-35 in #​768
• chore: enable errorlint by @​mmorel-35 in #​774
• chore: update buf to v1.55.1 by @​mmorel-35 in #​767
• chore: update dependabot configuration for gomod and github-actions by @​mmorel-35 in #​775
• chore: enable testifylint linter by @​mmorel-35 in #​769
• chore: enable several rules from go-critic by @​mmorel-35 in #​766
• chore: enable several rules from govet by @​mmorel-35 in #​773
• chore: enable contextcheck and fatcontext linters by @​mmorel-35 in #​770
• chore: enable usestdlibvars linter by @​mmorel-35 in #​772
• chore: enable promlinter linter by @​mmorel-35 in #​771
• chore: enable usetesting linter by @​mmorel-35 in #​784
• build(deps): bump google.golang.org/grpc from 1.67.1 to 1.74.2 by @​mmorel-35 in #​785
• chore: enable hugeParam rule from go-critic by @​mmorel-35 in #​786
• chore: use actions/setup-go native cache by @​mmorel-35 in #​787
• fix(#​794): Wrapping codes.OK should not cause panic by @​floppyzedolfin in #​795
• feat(prometheus): add ContextLabels to ClientMetrics by @​ArtARTs36 in #​798
• fix(ci): tidy module before linting by @​manute in #​808
• [Prometheus] Fix pre-registration of handled metrics with context labels by @​t-bowcock in #​810
• avoid unnecessary logging field creation when payload logging is disabled by @​dbeneker in #​809

New Contributors

• @​benjibuiltit made their first contribution in #​758
• @​haru-256 made their first contribution in #​760
• @​nwnt made their first contribution in #​761
• @​mmorel-35 made their first contribution in #​765
• @​floppyzedolfin made their first contribution in #​795
• @​ArtARTs36 made their first contribution in #​798
• @​manute made their first contribution in #​808
• @​t-bowcock made their first contribution in #​810
• @​dbeneker made their first contribution in #​809

Full Changelog: grpc-ecosystem/go-grpc-middleware@v2.3.2...v2.3.3

siderolabs/gen (github.com/siderolabs/gen)

v0.8.6

Compare Source

gen 0.8.6 (2025-11-03)

Welcome to the v0.8.6 release of gen!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/gen/issues.

Contributors

• Dmitriy Matrenichev
• Artem Chernyshev
• Utku Ozdemir
• Andrey Smirnov
• Andrey Smirnov
• Dmitriy Matrenichev
• Mateusz Urbanek

Changes

27 commits

• 4c7388b chore: update Go modules, replace YAML library
• 044d921 feat: add xslices.Deduplicate
• dcb2b74 feat: add panicsafe package
• b36ee43 feat: make xyaml.CheckUnknownKeys public
• 3e319e7 feat: implement xyaml.UnmarshalStrict
• 7c0324f chore: future-proof HashTrieMap
• 5ae3afe chore: update hashtriemap implementation from the latest upstream
• e847d2a chore: add more utilities to xiter
• f3c5a2b chore: add Empty and Empty2 iterators
• c53b90b chore: add packages xiter/xstrings/xbytes
• 7654108 chore: add hashtriemap implementation
• 8485864 chore: optimize maps.Values and maps.Keys
• 238baf9 chore: add typesafe SyncMap and bump stuff
• efca710 chore: add FilterInPlace method to maps and update module
• 36a3ae3 feat: update module
• f9f5805 chore: bump rekres and add functions from exp
• b968d21 feat: add TryRecv and RecvWithContext functions
• 476dfea feat: add foreach and clear to lazymap
• 214c1ef chore: set slice.Filter result slice cap to len
• 8e89b1e feat: add GetOrCreate and GetOrCall methods
• 7c7ccc3 feat: introduce channel SendWithContext
• b3b6db8 fix: fix Copy documentation and implementation
• 521f737 feat: add xerrors package which contains additions to the std errors
• 726e066 fix: rename tuples.go to pair.go and set proper package name
• d8d7d25 chore: minor additions
• 338a650 chore: add initial implementation and documentation
• 4fd8667 Initial commit

Changes since v0.8.5

1 commit

• 4c7388b chore: update Go modules, replace YAML library

Dependency Changes

This release has no dependency changes

siderolabs/go-debug (github.com/siderolabs/go-debug)

v0.6.1

Compare Source

go-debug 0.6.1 (2025-10-08)

Welcome to the v0.6.1 release of go-debug!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/go-debug/issues.

Contributors

• Alexey Palazhchenko
• Dmitriy Matrenichev
• Oguz Kilcan
• Andrey Smirnov
• Artem Chernyshev

Changes

12 commits

• d51e25a chore: rekres, bump deps and go
• e21721b chore: add support for Go 1.25
• ea108ca chore: add support for Go 1.24
• c8f9b12 chore: add support for Go 1.23
• 0c2be80 chore: run rekres (update to Go 1.22)
• 43d9100 chore: allow enabling pprof manually
• c1bc4bf chore: rekres, rename, etc
• 3d0a6e1 feat: race build tag flag detector
• 5b292e5 feat: disable memory profiling by default
• c6d0ae2 fix: linters and CI
• d969f95 feat: initial implementation
• b2044b7 Initial commit

Changes since v0.6.0

1 commit

• d51e25a chore: rekres, bump deps and go

Dependency Changes

This release has no dependency changes

uber-go/zap (go.uber.org/zap)

v1.27.1

Compare Source

Enhancements:

• #​1501: prevent Object from panicking on nils
• #​1511: Fix a race condition in WithLazy.

Thanks to @​rabbbit, @​alshopov, @​jquirke, @​arukiidou for their contributions to this release.

grpc/grpc-go (google.golang.org/grpc)

v1.77.0: Release 1.77.0

Compare Source

API Changes

• mem: Replace the Reader interface with a struct for better performance and maintainability. (#​8669)

Behavior Changes

• balancer/pickfirst: Remove support for the old pick_first LB policy via the environment variable GRPC_EXPERIMENTAL_ENABLE_NEW_PICK_FIRST=false. The new pick_first has been the default since v1.71.0. (#​8672)

Bug Fixes

• xdsclient: Fix a race condition in the ADS stream implementation that could result in resource-not-found errors, causing the gRPC client channel to move to TransientFailure. (#​8605)
• client: Ignore HTTP status header for gRPC streams. (#​8548)
• client: Set a read deadline when closing a transport to prevent it from blocking indefinitely on a broken connection. (#​8534)
  • Special Thanks: @​jgold2-stripe
• client: Fix a bug where default port 443 was not automatically added to addresses without a specified port when sent to a proxy.
  • Setting environment variable GRPC_EXPERIMENTAL_ENABLE_DEFAULT_PORT_FOR_PROXY_TARGET=false disables this change; please file a bug if any problems are encountered as we will remove this option soon. (#​8613)
• balancer/pickfirst: Fix a bug where duplicate addresses were not being ignored as intended. (#​8611)
• server: Fix a bug that caused overcounting of channelz metrics for successful and failed streams. (#​8573)
  • Special Thanks: @​hugehoo
• balancer/pickfirst: When configured, shuffle addresses in resolver updates that lack endpoints. Since gRPC automatically adds endpoints to resolver updates, this bug only affects custom LB policies that delegate to pick_first but don't set endpoints. (#​8610)
• mem: Clear large buffers before re-using. (#​8670)

Performance Improvements

• transport: Reduce heap allocations to reduce time spent in garbage collection. (#​8624, #​8630, #​8639, #​8668)
• transport: Avoid copies when reading and writing Data frames. (#​8657, #​8667)
• mem: Avoid clearing newly allocated buffers. (#​8670)

New Features

• outlierdetection: Add metrics specified in gRFC A91. (#​8644)
  • Special Thanks: @​davinci26, @​PardhuKonakanchi
• stats/opentelemetry: Add support for optional label grpc.lb.backend_service in per-call metrics (#​8637)
• xds: Add support for JWT Call Credentials as specified in gRFC A97. Set environment variable GRPC_EXPERIMENTAL_XDS_BOOTSTRAP_CALL_CREDS=true to enable this feature. (#​8536)
  • Special Thanks: @​dimpavloff
• experimental/stats: Add support for up/down counters. (#​8581)

v1.76.0: Release 1.76.0

Compare Source

Dependencies

• Minimum supported Go version is now 1.24 (#​8509)
  • Special Thanks: @​kevinGC

Bug Fixes

• client: Return status INTERNAL when a server sends zero response messages for a unary or client-streaming RPC. (#​8523)
• client: Fail RPCs with status INTERNAL instead of UNKNOWN upon receiving http headers with status 1xx and END_STREAM flag set. (#​8518)
  • Special Thanks: @​vinothkumarr227
• pick_first: Fix race condition that could cause pick_first to get stuck in IDLE state on backend address change. (#​8615)

New Features

• credentials: Add credentials/jwt package providing file-based JWT PerRPCCredentials (A97). (#​8431)
  • Special Thanks: @​dimpavloff

Performance Improvements

• client: Improve HTTP/2 header size estimate to reduce re-allocations. (#​8547)
• encoding/proto: Avoid redundant message size calculation when marshaling. (#​8569)
  • Special Thanks: @​rs-unity

protocolbuffers/protobuf-go (google.golang.org/protobuf)

v1.36.10

Compare Source

Full Changelog: protocolbuffers/protobuf-go@v1.36.9...v1.36.10

Bug fixes:
CL/704415: reflect/protodesc: edition-2024-specific properties should not be lost when converting FileDescriptorProto to protoreflect.FileDescriptor

Maintenance:
CL/708555: internal/race_test: add missing impl.LazyEnabled() t.Skip
CL/703295: proto: add more invalid group encoding test cases
CL/703276: internal/impl: verify lazy unmarshal on Deterministic encoding
CL/703275: internal/impl: stop using deprecated .Field in lazy_test.go
CL/702795: all: update to latest github.com/google/go-cmp

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -t ./...
go: module github.com/siderolabs/[email protected] requires go >= 1.25.2; switching to go1.25.4
go: downloading go1.25.4 (linux/amd64)
go: download go1.25.4: golang.org/[email protected]: verifying module: checksum database disabled by GOSUMDB=off