fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
@grpc/grpc-js (source)	^1.12.4 -> ^1.12.5					dependencies	patch
Google.Protobuf	3.29.1 -> 3.29.2					nuget	patch
actions/setup-go	v5.1.0 -> v5.2.0					action	minor
buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go	v1.34.2-20240717164558-a6c49f84cc0f.2 -> v1.36.1-20241127180247-a33202765966.1					require	minor
bufbuild/buf-setup-action	v1.47.2 -> v1.48.0					action	minor
github.com/go-kratos/kratos/v2	v2.8.2 -> v2.8.3					require	patch
google.golang.org/grpc	v1.68.1 -> v1.69.2					require	minor
google.golang.org/protobuf	v1.35.2 -> v1.36.1					require	minor
serde (source)	1.0.215 -> 1.0.217					dependencies	patch

---

Release Notes

grpc/grpc-node (@​grpc/grpc-js)

v1.12.5: @​grpc/grpc-js 1.12.5

Compare Source

• Prioritize HTTP status errors over message decoding errors (#​2873)

protocolbuffers/protobuf (Google.Protobuf)

v3.29.2

actions/setup-go (actions/setup-go)

v5.2.0

Compare Source

What's Changed

• Leveraging the raw API to retrieve the version-manifest, as it does not impose a rate limit and hence facilitates unrestricted consumption without the need for a token for Github Enterprise Servers by @​Shegox in https://github.com/actions/setup-go/pull/496

New Contributors

• @​Shegox made their first contribution in https://github.com/actions/setup-go/pull/496

Full Changelog: actions/setup-go@v5...v5.2.0

bufbuild/buf-setup-action (bufbuild/buf-setup-action)

v1.48.0

Compare Source

Release v1.48.0

go-kratos/kratos (github.com/go-kratos/kratos/v2)

v2.8.3

Compare Source

New Features

• feat(log): add Logger() method for Helper (#​3443)

Bug Fixes

• fix(registry): add timeout validation (#​3492)
• fix k8s headless service miss namespace (#​3407)
• fix: Return inner Logger from GetLogger for log.WithContext reuse (#​3455)
• fix: various typos (#​3454)

Others

• build(deps): bump golang.org/x/net in /contrib/opensergo (#​3434)
• build(deps): bump actions/setup-go from 5.0.2 to 5.1.0 (#​3450)

New Contributors

• @​NathanBaulch made their first contribution in https://github.com/go-kratos/kratos/pull/3454
• @​guangxuewu made their first contribution in https://github.com/go-kratos/kratos/pull/3455
• @​dagehuifei made their first contribution in https://github.com/go-kratos/kratos/pull/3407
• @​DCjanus made their first contribution in https://github.com/go-kratos/kratos/pull/3443
• @​lftk made their first contribution in https://github.com/go-kratos/kratos/pull/3492

Full Changelog: go-kratos/kratos@v2.8.2...v2.8.3

grpc/grpc-go (google.golang.org/grpc)

v1.69.2: Release 1.69.2

Compare Source

Bug Fixes

• stats/experimental: add type aliases for symbols (Metrics/etc) that were moved to the stats package (#​7929).
• client: set user-agent string to the correct version.

v1.69.0: Release 1.69.0

Compare Source

Known Issues

• The recently added grpc.NewClient function is incompatible with forward proxies, because it resolves the target hostname on the client instead of passing the hostname to the proxy. A fix is expected to be a part of grpc-go v1.70. (#​7556)

New Features

• stats/opentelemetry: Introduce new APIs to enable OpenTelemetry instrumentation for metrics on servers and clients (#​7874)
• xdsclient: add support to fallback to lower priority servers when higher priority ones are down (#​7701)
• dns: Add support for link local IPv6 addresses (#​7889)
• The new experimental pickfirst LB policy (disabled by default) supports Happy Eyeballs, interleaving IPv4 and IPv6 address as described in RFC-8305 section 4, to attempt connections to multiple backends concurrently. The experimental pickfirst policy can be enabled by setting the environment variable GRPC_EXPERIMENTAL_ENABLE_NEW_PICK_FIRST to true. (#​7725, #​7742)
• balancer/pickfirst: Emit metrics from the pick_first load balancing policy (#​7839)
• grpc: export MethodHandler, which is the type of an already-exported field in MethodDesc (#​7796)
  • Special Thanks: @​mohdjishin

Bug Fixes

• credentials/google: set scope for application default credentials (#​7887)
  • Special Thanks: @​halvards
• xds: fix edge-case issues where some clients or servers would not initialize correctly or would not receive errors when resources are invalid or unavailable if another channel or server with the same target was already in use . (#​7851, #​7853)
• examples: fix the debugging example, which was broken by a recent change (#​7833)

Behavior Changes

• client: update retry attempt backoff to apply jitter per updates to gRFC A6. (#​7869)
  • Special Thanks: @​isgj
• balancer/weightedroundrobin: use the pick_first LB policy to manage connections (#​7826)

API Changes

• balancer: An internal method is added to the balancer.SubConn interface to force implementors to embed a delegate implementation. This requirement is present in the interface documentation, but wasn't enforced earlier. (#​7840)

Performance Improvements

• mem: implement a ReadAll() method for more efficient io.Reader consumption (#​7653)
  • Special Thanks: @​ash2k
• mem: use slice capacity instead of length to determine whether to pool buffers or directly allocate them (#​7702)
  • Special Thanks: @​PapaCharlie

Documentation

• examples/csm_observability: Add xDS Credentials and switch server to be xDS enabled (#​7875)

v1.68.2: Release 1.68.2

Compare Source

Dependencies

• Remove the experimental stats/opentelemetry module and instead add the experimental packages it contains directly into the main google.golang.org/grpc module (#​7936)

protocolbuffers/protobuf-go (google.golang.org/protobuf)

v1.36.1

Compare Source

Full Changelog: protocolbuffers/protobuf-go@v1.36.0...v1.36.1

Bug fixes:
CL/638495: internal/impl: revert IsSynthetic() check to fix panic

Maintenance:
CL/637475: internal/errors: delete compatibility code for Go before 1.13

v1.36.0

Compare Source

Full Changelog: protocolbuffers/protobuf-go@v1.35.2...v1.36.0

User-visible changes:

CL/635139: src/google/protobuf: document UnmarshalJSON / API level behavior
CL/635138: reflect/protoreflect: use [] syntax to reference method
CL/635137: proto: add reference to size semantics with lazy decoding to comment
CL/634818: compiler/protogen: allow overriding API level from --go_opt
CL/634817: cmd/protoc-gen-go: generate _protoopaque variant for hybrid
CL/634816: all: regenerate.bash for Opaque API
CL/634815: all: Release the Opaque API
CL/634015: types/descriptorpb: regenerate using latest protobuf v29.1 release
CL/632735: internal/impl: skip synthetic oneofs in messageInfo
CL/627876: all: start v1.35.2-devel

serde-rs/serde (serde)

v1.0.217

Compare Source

• Support serializing externally tagged unit variant inside flattened field (#​2786, thanks @​Mingun)

v1.0.216

Compare Source

• Mark all generated impls with #[automatically_derived] to exclude from code coverage (#​2866, #​2868, thanks @​tdittr)

---

Configuration

📅 Schedule: Branch creation - "* 0-3 1 * *" in timezone Asia/Singapore, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -d -t ./...
go: -d flag is deprecated. -d=true is a no-op
go: downloading buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go v1.36.1-20241127180247-a33202765966.1
go: downloading google.golang.org/protobuf v1.36.1
go: downloading google.golang.org/grpc v1.69.2
go: downloading github.com/go-kratos/kratos/v2 v2.8.3
go: downloading golang.org/x/net v0.30.0
go: downloading google.golang.org/genproto/googleapis/rpc v0.0.0-20241015192408-796eee8c2d53
go: downloading golang.org/x/sys v0.26.0
go: downloading golang.org/x/text v0.19.0
go: github.com/tuihub/protos/pkg/buf/validate imports
	buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go/buf/validate/priv: cannot find module providing package buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go/buf/validate/priv

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.