chore(all): update all

[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
github.com/go-git/go-git/v5	v5.19.0 → v5.19.1			require	patch
golang.org/x/net	v0.53.0 → v0.54.0			require	minor
google.golang.org/genproto/googleapis/bytestream	7cedc36 → 3700d41			require	digest
google.golang.org/genproto/googleapis/rpc	7cedc36 → 3700d41			require	digest
google.golang.org/grpc	v1.80.0 → v1.81.1			require	minor

---

Release Notes

go-git/go-git (github.com/go-git/go-git/v5)

v5.19.1

Compare Source

What's Changed

• v5: plumbing: transport/ssh, Shell-quote path by @​hiddeco in #​2068
• v5: git: submodule, Fix relative URL resolution by @​hiddeco in #​2070
• v5: git: submodule, canonical remote for relative URLs by @​hiddeco in #​2074
• v5: git: submodule, error on remote without URLs by @​hiddeco in #​2078
• v5: plumbing: format/idxfile, Validate offset64 indices by @​hiddeco in #​2084
• v5: *: Reject malformed variable-length integers by @​hiddeco in #​2092
• v5: plumbing: format/packfile, Tighten delta validation by @​hiddeco in #​2091
• v5: Add worktreeFilesystem wrapper for worktree and hardening by @​hiddeco in #​2100
• v5: config: validate submodule names by @​hiddeco in #​2082
• build: Update module github.com/go-git/go-git/v5 to v5.19.0 [SECURITY] (releases/v5.x) by @​go-git-renovate[bot] in #​2111
• v5: git: Allow MkdirAll on worktree-root paths by @​hiddeco in #​2117
• v5: git: Stop validating symlink target paths by @​pjbgf in #​2116
• v5: plumbing: format decoder input bounds and contracts by @​hiddeco in #​2125
• plumbing: format/packfile, cap delta chain depth in parser by @​pjbgf in #​2137

Full Changelog: go-git/go-git@v5.19.0...v5.19.1

grpc/grpc-go (google.golang.org/grpc)

v1.81.1: Release 1.81.1

Compare Source

Security

• xds/rbac: Fix a potential authorization bypass caused by incorrectly falling through URI/DNS SANs to Subject Distinguished Name (DN) when matching the authenticated principal name. With this fix, only the first non-empty identity source will be used, as per gRFC A41. (#​9111)
  • Special Thanks: @​al4an444

v1.81.0: Release 1.81.0

Compare Source

Behavior Changes

• balancer/rls: Switch gauge metrics to asynchronous emission (once per collection cycle) to reduce telemetry noise and align with other gRPC language implementations. (#​8808)

Dependencies

• Minimum supported Go version is now 1.25. (#​8969)

Bug Fixes

• xds: Use the leaf cluster's security config for the TLS handshake instead of the aggregate cluster's config. (#​8956)
• transport: Send a RST_STREAM when receiving an END_STREAM when the stream is not already half-closed. (#​8832)
• xds: Fix ADS resource name validation to prevent a panic. (#​8970)

New Features

• grpc/stats: Add support for custom labels in per-call metrics (gRFC A108). (#​9008)
• xds: Add support for Server Name Indication (SNI) and SAN validation (gRFC A101). Disabled by default. To enable, set GRPC_EXPERIMENTAL_XDS_SNI=true environment variable. (#​9016)
• xds: Add support to control which fields get propagated from ORCA backend metric reports to LRS load reports (gRFC A85). Disabled by default. To enable, set GRPC_EXPERIMENTAL_XDS_ORCA_LRS_PROPAGATION=true. (#​9005)
• xds: Add metrics to track xDS client connectivity and cached resource state (gRFC A78). (#​8807)
• stats/otel: Enhance grpc.subchannel.disconnections metric by adding disconnection reason to the grpc.disconnect_error label (gRFC A94). This provides granular insights into why subchannels are closing. (#​8973)
• mem: Add mem.Buffer.Slice() API to slice the buffer like a slice. (#​8977)
  • Special Thanks: @​ash2k

Performance Improvements

• alts: Pool read buffers to lower memory utilization when sockets are unreadable. (#​8964)
• transport: Pool HTTP/2 framer read buffers to reduce idle memory consumption. Currently limited to Linux for ALTS and non-encrypted transports (TCP, Unix). To disable, set GRPC_GO_EXPERIMENTAL_HTTP_FRAMER_READ_BUFFER_POOLING=false and report any issues. (#​9032)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[forking-renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 3 additional dependencies were updated

Details:

Package	Change
golang.org/x/crypto	v0.50.0 -> v0.51.0
golang.org/x/sys	v0.43.0 -> v0.44.0
golang.org/x/text	v0.36.0 -> v0.37.0