fix(deps): update all go dependencies main (v1.31)

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
github.com/envoyproxy/protoc-gen-validate	v1.1.0 -> v1.2.1					require	minor
google.golang.org/genproto/googleapis/api	1a7da9e -> 65684f5					require	digest
google.golang.org/genproto/googleapis/rpc	1a7da9e -> 65684f5					require	digest
google.golang.org/grpc	v1.69.4 -> v1.70.0					require	minor
google.golang.org/protobuf	v1.36.3 -> v1.36.4					require	patch

---

Release Notes

envoyproxy/protoc-gen-validate (github.com/envoyproxy/protoc-gen-validate)

v1.2.1

Compare Source

What's Changed

• Fix Python3.9 build by @​stefanvanburen in https://github.com/bufbuild/protoc-gen-validate/pull/1232

Full Changelog: bufbuild/protoc-gen-validate@v1.2.0...v1.2.1

v1.2.0

Compare Source

What's Changed

• Bump golang.org/x/net from 0.26.0 to 0.27.0 in the go group by @​dependabot in https://github.com/bufbuild/protoc-gen-validate/pull/1144
• Bump golang.org/x/net from 0.27.0 to 0.28.0 in the go group by @​dependabot in https://github.com/bufbuild/protoc-gen-validate/pull/1148
• CI: fix the failure of goreleaser by @​suzuki-shunsuke in https://github.com/bufbuild/protoc-gen-validate/pull/1146
• Bump golang.org/x/net from 0.27.0 to 0.28.0 in /tests in the go-tests group by @​dependabot in https://github.com/bufbuild/protoc-gen-validate/pull/1150
• Add a manually triggered Maven deploy workflow by @​pkwarren in https://github.com/bufbuild/protoc-gen-validate/pull/1154
• Fix Maven release build by @​pkwarren in https://github.com/bufbuild/protoc-gen-validate/pull/1156
• Bump golang.org/x/net from 0.28.0 to 0.30.0 in the go group across 1 directory by @​dependabot in https://github.com/bufbuild/protoc-gen-validate/pull/1171
• Bump the go-tests group across 1 directory with 2 updates by @​dependabot in https://github.com/bufbuild/protoc-gen-validate/pull/1172
• Bump the java group across 1 directory with 17 updates by @​dependabot in https://github.com/bufbuild/protoc-gen-validate/pull/1183
• Update bazel and deps by @​keith in https://github.com/bufbuild/protoc-gen-validate/pull/1111
• Bump the go-tests group across 1 directory with 2 updates by @​dependabot in https://github.com/bufbuild/protoc-gen-validate/pull/1185
• Bump the python group in /python with 2 updates by @​dependabot in https://github.com/bufbuild/protoc-gen-validate/pull/1190
• Bump protobuf from 5.29.0 to 5.29.1 in /python in the python group by @​dependabot in https://github.com/bufbuild/protoc-gen-validate/pull/1193
• Bump golang.org/x/net from 0.31.0 to 0.32.0 in /tests in the go-tests group by @​dependabot in https://github.com/bufbuild/protoc-gen-validate/pull/1195
• Require astunparse for older python versions by @​matejsp in https://github.com/bufbuild/protoc-gen-validate/pull/1198
• Return a provider from a rule instead of a struct by @​mering in https://github.com/bufbuild/protoc-gen-validate/pull/1200
• Update Buf logo in README by @​smallsamantha in https://github.com/bufbuild/protoc-gen-validate/pull/1203
• Bump the go-tests group across 1 directory with 2 updates by @​dependabot in https://github.com/bufbuild/protoc-gen-validate/pull/1212
• Update go deps by @​rodaine in https://github.com/bufbuild/protoc-gen-validate/pull/1215
• Prealloc msgs in multierr.Error by @​apocelipes in https://github.com/bufbuild/protoc-gen-validate/pull/1209
• Update Maven dependencies by @​pkwarren in https://github.com/bufbuild/protoc-gen-validate/pull/1218
• Bump com.google.guava:guava from 33.3.1-android to 33.4.0-android in /java in the java group across 1 directory by @​dependabot in https://github.com/bufbuild/protoc-gen-validate/pull/1219
• Bump the go group with 2 updates by @​dependabot in https://github.com/bufbuild/protoc-gen-validate/pull/1223
• Drop Python 3.8 support by @​stefanvanburen in https://github.com/bufbuild/protoc-gen-validate/pull/1225
• Migrate to cc_proto_library from com_google_protobuf by @​kgreenek in https://github.com/bufbuild/protoc-gen-validate/pull/1226
• Bump google.golang.org/protobuf from 1.36.2 to 1.36.3 in the go group by @​dependabot in https://github.com/bufbuild/protoc-gen-validate/pull/1229

New Contributors

• @​matejsp made their first contribution in https://github.com/bufbuild/protoc-gen-validate/pull/1198
• @​mering made their first contribution in https://github.com/bufbuild/protoc-gen-validate/pull/1200
• @​smallsamantha made their first contribution in https://github.com/bufbuild/protoc-gen-validate/pull/1203
• @​apocelipes made their first contribution in https://github.com/bufbuild/protoc-gen-validate/pull/1209
• @​stefanvanburen made their first contribution in https://github.com/bufbuild/protoc-gen-validate/pull/1225
• @​kgreenek made their first contribution in https://github.com/bufbuild/protoc-gen-validate/pull/1226

Full Changelog: bufbuild/protoc-gen-validate@v1.1.0...v1.2.0

grpc/grpc-go (google.golang.org/grpc)

v1.70.0: Release 1.70.0

Compare Source

Behavior Changes

• client: reject service configs containing an invalid retryPolicy in accordance with gRFCs A21 and A6. (#​7905)
  • Note that this is a potential breaking change for some users using an invalid configuration, but continuing to allow this behavior would violate our cross-language compatibility requirements.

New Features

• xdsclient: fallback to a secondary management server (if specified in the bootstrap configuration) when the primary is down is enabled by default. Can be disabled by setting the environment variable GRPC_EXPERIMENTAL_XDS_FALLBACK to false. (#​7949)
• experimental/credentials: experimental transport credentials are added which don't enforce ALPN. (#​7980)
  • These credentials will be removed in an upcoming grpc-go release. Users must not rely on these credentials directly. Instead, they should either vendor a specific version of gRPC or copy the relevant credentials into their own codebase if absolutely necessary.

Bug Fixes

• xds: fix a possible deadlock that happens when both the client application and the xDS management server (responsible for configuring the client) are using the xds:/// scheme in their target URIs. (#​8011)

Performance

• server: for unary requests, free raw request message data as soon as parsing is finished instead of waiting until the method handler returns. (#​7998)
  • Special Thanks: @​lqs

Documentation

• examples/features/gracefulstop: add example to demonstrate server graceful stop. (#​7865)

protocolbuffers/protobuf-go (google.golang.org/protobuf)

v1.36.4

Compare Source

Full Changelog: protocolbuffers/protobuf-go@v1.36.3...v1.36.4

Bug fixes:
CL/642975: reflect/protodesc: fix panic when working with dynamicpb

Maintenance:
CL/643276: internal_gengo: avoid allocations in rawDescGZIP() accessors
CL/642857: internal_gengo: switch back from string literal to hex byte slice
CL/642055: internal_gengo: use unsafe.StringData() to avoid a descriptor copy
CL/638135: internal_gengo: store raw descriptor in .rodata section

---

Configuration

📅 Schedule: Branch creation - "on monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 2 additional dependencies were updated

Details:

Package	Change
cel.dev/expr	v0.16.2 -> v0.19.0
golang.org/x/net	v0.33.0 -> v0.34.0