Skip to content

rebase: bump google.golang.org/grpc from 1.81.0 to 1.81.1#6284

Open
dependabot[bot] wants to merge 1 commit into
develfrom
dependabot/go_modules/google.golang.org/grpc-1.81.1
Open

rebase: bump google.golang.org/grpc from 1.81.0 to 1.81.1#6284
dependabot[bot] wants to merge 1 commit into
develfrom
dependabot/go_modules/google.golang.org/grpc-1.81.1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 19, 2026

Bumps google.golang.org/grpc from 1.81.0 to 1.81.1.

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.81.1

Security

  • xds/rbac: Fix a potential authorization bypass caused by incorrectly falling through URI/DNS SANs to Subject Distinguished Name (DN) when matching the authenticated principal name. With this fix, only the first non-empty identity source will be used, as per gRFC A41. (#9111)

Bug Fixes

  • otel: Segregate client and server RPC information used for metrics and traces, to avoid one overwriting the other. (#9081)
Commits

@dependabot dependabot Bot added the rebase update the version of an external component label May 19, 2026
@nixpanic
Copy link
Copy Markdown
Member

@dependabot recreate

@dependabot dependabot Bot changed the title rebase: bump google.golang.org/grpc from 1.80.0 to 1.81.1 rebase: bump google.golang.org/grpc from 1.81.0 to 1.81.1 May 27, 2026
@dependabot dependabot Bot force-pushed the dependabot/go_modules/google.golang.org/grpc-1.81.1 branch from e8e6191 to 6fe32fd Compare May 27, 2026 06:48
@nixpanic
Copy link
Copy Markdown
Member

@dependabot recreate

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.81.0 to 1.81.1.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.81.0...v1.81.1)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.81.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/go_modules/google.golang.org/grpc-1.81.1 branch from 6fe32fd to fe82fc3 Compare May 28, 2026 12:29
Copy link
Copy Markdown
Member

@nixpanic nixpanic left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Metadata/version change only, no need for e2e.

@nixpanic nixpanic added the ci/skip/e2e skip running e2e CI jobs label May 29, 2026
@nixpanic nixpanic requested a review from a team May 29, 2026 14:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ci/skip/e2e skip running e2e CI jobs rebase update the version of an external component

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant