Skip to content

build(deps): bump the examples-ext-authz group across 1 directory with 2 updates - #1359

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/ext_authz/auth/grpc-service/examples-ext-authz-0de1211982
Open

build(deps): bump the examples-ext-authz group across 1 directory with 2 updates#1359
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/ext_authz/auth/grpc-service/examples-ext-authz-0de1211982

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 24, 2026

Copy link
Copy Markdown
Contributor

Bumps the examples-ext-authz group with 2 updates in the /ext_authz/auth/grpc-service directory: github.com/envoyproxy/go-control-plane/envoy and google.golang.org/grpc.

Updates github.com/envoyproxy/go-control-plane/envoy from 1.37.0 to 1.39.0

Release notes

Sourced from github.com/envoyproxy/go-control-plane/envoy's releases.

envoy/v1.39.0

Full Changelog: envoy/v1.38.0...envoy/v1.39.0

envoy/v1.38.0

Full Changelog: envoy/v1.37.0...envoy/v1.38.0

Commits
  • ca8ce17 Mirrored from envoyproxy/envoy @ c7c7b0d009e6006844a31715ddeef62ed5c79c0a
  • 7c0c2c3 Mirrored from envoyproxy/envoy @ 04c2a8607d7c7d46e514e685df67d21f79025c2c
  • 3646432 Mirrored from envoyproxy/envoy @ b4a3bc04a05d0f6af320a909ed1a00ec700174fd
  • 84b538a Mirrored from envoyproxy/envoy @ dd2a9b54f6128d27e49a224588778fb9ec77d130
  • 2e68dcf build(deps): Bump golang.org/x/crypto in /internal/tools (#1518)
  • 673be72 Mirrored from envoyproxy/envoy @ fa68fb65fd52289ba01cd26363a6c17e382a2bb5
  • 1b5055a Mirrored from envoyproxy/envoy @ 223721f2fce6222ceddb02342c642fe448b2bd82
  • 7c8f6f1 Mirrored from envoyproxy/envoy @ 187301f5233356c05fbc3655ffe64ff23f95b80b
  • 375ba04 Mirrored from envoyproxy/envoy @ d6d968b3eedd150ab62e2a54906bf1dd0be27eb8
  • 6747796 Mirrored from envoyproxy/envoy @ b5de3aaa3a38d625c49d051f55e64547072be589
  • Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.83.0 to 1.83.2

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.83.2

Security

  • server: Reject requests missing both :authority and Host headers with HTTP 400 and status Internal. (grpc/grpc-go#9365)

Release 1.83.1

Security

  • xds/rbac: Fix a bug where nested Principal or Permission rules with :scheme or grpc- prefixed header matchers were not rejected, which could cause DENY rules to fail open. (#9258)
  • xds/rbac: Fix a bug where the host header matcher was not being replaced with :authority in nested Principal or Permission rules. (#9258)
  • xds/rbac: Fix a bug where a header matcher whose name was not lowercase, such as X-Role, matched no header, which could cause DENY rules to fail open. (#9332)
  • xds/rbac: Fix a bug where a :scheme or grpc- prefixed header matcher was accepted when its name was not lowercase. (#9332)
  • xds/rbac: Fix a bug where a Host header matcher was not replaced with :authority. (#9332)

Performance

  • transport: Restrict memory overhead of buffering small data frames. (#9331)
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 24, 2026
…h 2 updates

Bumps the examples-ext-authz group with 2 updates in the /ext_authz/auth/grpc-service directory: [github.com/envoyproxy/go-control-plane/envoy](https://github.com/envoyproxy/go-control-plane) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).


Updates `github.com/envoyproxy/go-control-plane/envoy` from 1.37.0 to 1.39.0
- [Release notes](https://github.com/envoyproxy/go-control-plane/releases)
- [Changelog](https://github.com/envoyproxy/go-control-plane/blob/main/CHANGELOG.md)
- [Commits](envoyproxy/go-control-plane@envoy/v1.37.0...envoy/v1.39.0)

Updates `google.golang.org/grpc` from 1.83.0 to 1.83.2
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.83.0...v1.83.2)

---
updated-dependencies:
- dependency-name: github.com/envoyproxy/go-control-plane/envoy
  dependency-version: 1.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: examples-ext-authz
- dependency-name: google.golang.org/grpc
  dependency-version: 1.83.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: examples-ext-authz
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/ext_authz/auth/grpc-service/examples-ext-authz-0de1211982 branch from 7014105 to 38816fe Compare September 1, 2026 06:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants