build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.0 by dependabot[bot] · Pull Request #14008 · docker/compose

dependabot · 2026-08-06T09:02:56Z

Bumps google.golang.org/grpc from 1.82.1 to 1.83.0.

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.83.0

Security

server: Stop reading from connections when flooded by HTTP/2 frames to mitigate resource exhaustion. The default value for this limit is 100 frames, excluding DATA and HEADERS, and may be changed by setting environment variable GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT.

xds/rbac: Support Metadata and RequestedServerName permissions matcher fields. If present in a DENY rule, previously these would be ignored and fail-open.

xds/rbac: Fix panic when parsing unsupported fields in NotRule/NotId permissions.

xds/rbac: Support the deprecated source_ip principal identifier by treating it as equivalent to direct_remote_ip.

xds: Fix panic when parsing route header matchers configured with empty exact_match, prefix_match, or suffix_match strings. (#9223)

New Features

xds/googlec2p: Enable DirectPath over Interconnect support for on-premises clients via the force-xds target URI query parameter. (#9133)

xds: Enable xDS configuration to control which fields get propagated from ORCA backend metric reports to LRS load reports. (#9145)

authz: Add OnPolicyUpdate callback to FileWatcherOptions to notify when an authz policy is loaded or updated. (#9142)

Special Thanks: @hnefatl

xds: Add support for the GCP Authentication HTTP Filter, which automatically fetches and attaches GCP Service Account Identity JWT tokens to outgoing RPCs.

This feature can be enabled by setting environment variable GRPC_EXPERIMENTAL_XDS_GCP_AUTHENTICATION_FILTER=true. (#9119)

xds: Add support for xDS-based HTTP CONNECT proxies.

This feature can be enabled by setting environment variable GRPC_EXPERIMENTAL_XDS_HTTP_CONNECT=true. (#9151)

xds: Add support for contains_match in route header matchers. (#9223)

Bug Fixes

credentials/alts: Fix panic when processing malformed frames by validating that the message frame length exceeds the message type field size. (#9197)

grpc: Fix compilation on Plan 9 targets (GOOS=plan9), broken since v1.81.0. (#9255)

Special Thanks: @Yusufihsangorgel

Commits

4c226da Change version to 1.83.0 (#9228)
c198988 Cherrypick 9223 into v1.83.x (#9279)
8ce3ebf Cherrypick PR 9255 into v1.83.x (#9263)
e393849 Cherry-pick recent changes from master (#9240)
2a112a8 authz: add onPolicyUpdate callback to authz file watcher (#9142)
1a80fca vet: adds a check to disallow usage of regex.Compile in xDS code (#9216)
26ffdb3 [tls] Add safety check in custom cert verification that peer cert chain is no...
5013974 internal/grpcsync: add ScheduleAndWait to CallbackSerializer (#9162)
bd58bc0 internal/transport: increase test timeout locally in TestAccountCheckWindowSi...
484f150 httpfilter/extproc: add check to ensure that response trailer mode must be SE...
Additional commits viewable in compare view

glours · 2026-08-13T13:15:29Z

@dependabot rebase

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.82.1 to 1.83.0. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.82.1...v1.83.0) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-version: 1.83.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

This MR contains the following updates: | Package | Update | Change | |---|---|---| | [docker/compose](https://github.com/docker/compose) | minor | `v5.4.0` → `v5.5.0` | MR created with the help of [el-capitano/tools/renovate-bot](https://gitlab.com/el-capitano/tools/renovate-bot). **Proposed changes to behavior should be submitted there as MRs.** --- ### Release Notes <details> <summary>docker/compose (docker/compose)</summary> ### [`v5.5.0`](https://github.com/docker/compose/releases/tag/v5.5.0) [Compare Source](docker/compose@v5.4.0...v5.5.0) #### What's Changed > ℹ️ This release overhauls image digest reconciliation to prevent unnecessary container recreation.\ > Existing containers may be recreated the first time you run `compose up` after upgrading, as image digests are re-evaluated using the new logic. > > `compose pull` now honors `pull_policy` refresh windows (`daily`, `weekly`, `every_N`). ##### ✨ Improvements - New image digest reconciliation process by [@glours](https://github.com/glours) & [@ndeloof](https://github.com/ndeloof) [#14011](docker/compose#14011) [#14041](docker/compose#14041) ##### 🐛 Fixes - Fix(bridge): skip pulling default image references for build-only ser… by [@ericwyles](https://github.com/ericwyles) in [#14010](docker/compose#14010) - Fix(watch): stop pruning every dangling image of the project by [@glours](https://github.com/glours) in [#14012](docker/compose#14012) - Fix(config): resolve service environment when computing --hash by [@glours](https://github.com/glours) in [#14002](docker/compose#14002) - Fix(watch): skip unreadable directories instead of failing the watch by [@Endika](https://github.com/Endika) in [#13992](docker/compose#13992) - Fix: ignore one-off container events in up monitor by [@brano-osif](https://github.com/brano-osif) in [#14038](docker/compose#14038) - Fix(bridge): validate arguments of bridge subcommands by [@glours](https://github.com/glours) in [#14003](docker/compose#14003) - Fix(images): tolerate containers whose image record is gone by [@ndeloof](https://github.com/ndeloof) in [#14028](docker/compose#14028) ##### 🔧 Internal - Test: Set stop\_signal to SIGTERM in nginx-based services by [@ricardobranco777](https://github.com/ricardobranco777) in [#13881](docker/compose#13881) - Chore: inline needlessly extracted single-use helpers by [@ndeloof](https://github.com/ndeloof) in [#14048](docker/compose#14048) - Add ENGINE column driven by label by [@nicksieger](https://github.com/nicksieger) in [#13959](docker/compose#13959) ##### ⚙️ Dependencies - Build(deps): bump github.com/moby/moby/client from 0.5.0 to 0.5.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#13999](docker/compose#13999) - Build(deps): bump github/codeql-action/upload-sarif from 4.37.3 to 4.37.4 by [@dependabot](https://github.com/dependabot)\[bot] in [#14009](docker/compose#14009) - Build(deps): bump github/codeql-action/upload-sarif from 4.37.4 to 4.37.5 by [@dependabot](https://github.com/dependabot)\[bot] in [#14019](docker/compose#14019) - Build(deps): bump github.com/moby/buildkit from 0.32.1 to 0.32.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#14033](docker/compose#14033) - Build(deps): bump github.com/docker/buildx from 0.36.0 to 0.36.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#14034](docker/compose#14034) - Build(deps): bump docker/github-builder/.github/workflows/bake.yml from 1.15.0 to 1.16.0 in the docker-actions group by [@dependabot](https://github.com/dependabot)\[bot] in [#14035](docker/compose#14035) - Build(deps): bump github.com/moby/go-archive from 0.3.2 to 0.3.3 by [@dependabot](https://github.com/dependabot)\[bot] in [#14043](docker/compose#14043) - Build(deps): bump github/codeql-action/upload-sarif from 4.37.5 to 4.37.6 by [@dependabot](https://github.com/dependabot)\[bot] in [#14022](docker/compose#14022) - Build(deps): bump github.com/docker/cli from 29.6.2+incompatible to 29.7.2+incompatible by [@dependabot](https://github.com/dependabot)\[bot] in [#14042](docker/compose#14042) - Build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#14008](docker/compose#14008) - Bump golang to version 1.26.6 by [@glours](https://github.com/glours) in [#14045](docker/compose#14045) #### New Contributors - [@ericwyles](https://github.com/ericwyles) made their first contribution in [#14010](docker/compose#14010) - [@Endika](https://github.com/Endika) made their first contribution in [#13992](docker/compose#13992) - [@brano-osif](https://github.com/brano-osif) made their first contribution in [#14038](docker/compose#14038) **Full Changelog**: <docker/compose@v5.4.0...v5.5.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this MR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this MR, check this box --- This MR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 6, 2026

dependabot Bot requested review from a team as code owners August 6, 2026 09:02

dependabot Bot requested a review from ndeloof August 6, 2026 09:02

dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 6, 2026

dependabot Bot requested a review from glours August 6, 2026 09:02

dependabot Bot added the go Pull requests that update go code label Aug 6, 2026

dependabot Bot force-pushed the dependabot/go_modules/google.golang.org/grpc-1.83.0 branch from e67f212 to 19ae0b0 Compare August 13, 2026 13:16

glours approved these changes Aug 13, 2026

View reviewed changes

glours merged commit 7cbcc76 into main Aug 13, 2026
47 checks passed

dependabot Bot deleted the dependabot/go_modules/google.golang.org/grpc-1.83.0 branch August 13, 2026 14:35

BrewTestBot mentioned this pull request Aug 17, 2026

docker-compose 5.5.0 Homebrew/homebrew-core#299231

Merged

rancherbot mentioned this pull request Aug 18, 2026

rddepman: bump dockerCompose from 5.3.1 to 5.5.0 rancher-sandbox/rancher-desktop#10829

Merged

Navigation Menu

Uh oh!

build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.0 - #14008

build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.0#14008
glours merged 1 commit into
mainfrom
dependabot/go_modules/google.golang.org/grpc-1.83.0

dependabot Bot commented on behalf of github Aug 6, 2026 •

edited

Loading

Uh oh!

glours commented Aug 13, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release 1.83.0

Security

New Features

Bug Fixes

Uh oh!

glours commented Aug 13, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Aug 6, 2026 •

edited

Loading