Update golang-packages

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/fsnotify/fsnotify	v1.10.0 → v1.10.1
gitlab.com/gitlab-org/api/client-go/v2	v2.21.0 → v2.24.0
google.golang.org/grpc	v1.80.0 → v1.81.0

---

Release Notes

fsnotify/fsnotify (github.com/fsnotify/fsnotify)

v1.10.1

Compare Source

Changes and fixes

• inotify: don't remove sibling watches sharing a path prefix (#​754)

• inotify, windows: don't rename sibling watches sharing a path prefix
  (#​755)

gitlab-org/api/client-go (gitlab.com/gitlab-org/api/client-go/v2)

v2.24.0

Compare Source

2.24.0

🚀 Features

• feat: Add search_type as attribute to search endpoints (!2851) by Heidi Berry

2.24.0 (2026-05-04)

Features

• Add search_type as attribute to search endpoints (4d345e9)

v2.23.0

Compare Source

2.23.0

🚀 Features

• feat: add OrbitService for Knowledge Graph endpoints (!2870) by Dmitry Gruzd

🔄 Other Changes

• chore(deps): update module buf.build/go/protovalidate to v1.2.0 (!2865) by GitLab Dependency Bot

2.23.0 (2026-05-04)

Features

• add OrbitService for Knowledge Graph endpoints (2ff460f)

v2.22.0

Compare Source

2.22.0

🚀 Features

• Add package pipeline data. (!2834) by Jimmy Spagnola

🔄 Other Changes

• chore(deps): update module golang.org/x/text to v0.36.0 (!2874) by GitLab Dependency Bot
• chore(deps): update golang docker tag (!2873) by GitLab Dependency Bot
• chore(deps): update docker docker tag to v29.4.1 (!2869) by GitLab Dependency Bot
• refactor(no-release): use HTTP status code constants (!2868) by Oleksandr Redko

2.22.0 (2026-05-04)

grpc/grpc-go (google.golang.org/grpc)

v1.81.0: Release 1.81.0

Compare Source

Behavior Changes

• balancer/rls: Switch gauge metrics to asynchronous emission (once per collection cycle) to reduce telemetry noise and align with other gRPC language implementations. (#​8808)

Dependencies

• Minimum supported Go version is now 1.25. (#​8969)

Bug Fixes

• xds: Use the leaf cluster's security config for the TLS handshake instead of the aggregate cluster's config. (#​8956)
• transport: Send a RST_STREAM when receiving an END_STREAM when the stream is not already half-closed. (#​8832)
• xds: Fix ADS resource name validation to prevent a panic. (#​8970)

New Features

• grpc/stats: Add support for custom labels in per-call metrics (gRFC A108). (#​9008)
• xds: Add support for Server Name Indication (SNI) and SAN validation (gRFC A101). Disabled by default. To enable, set GRPC_EXPERIMENTAL_XDS_SNI=true environment variable. (#​9016)
• xds: Add support to control which fields get propagated from ORCA backend metric reports to LRS load reports (gRFC A85). Disabled by default. To enable, set GRPC_EXPERIMENTAL_XDS_ORCA_LRS_PROPAGATION=true. (#​9005)
• xds: Add metrics to track xDS client connectivity and cached resource state (gRFC A78). (#​8807)
• stats/otel: Enhance grpc.subchannel.disconnections metric by adding disconnection reason to the grpc.disconnect_error label (gRFC A94). This provides granular insights into why subchannels are closing. (#​8973)
• mem: Add mem.Buffer.Slice() API to slice the buffer like a slice. (#​8977)
  • Special Thanks: @​ash2k

Performance Improvements

• alts: Pool read buffers to lower memory utilization when sockets are unreadable. (#​8964)
• transport: Pool HTTP/2 framer read buffers to reduce idle memory consumption. Currently limited to Linux for ALTS and non-encrypted transports (TCP, Unix). To disable, set GRPC_GO_EXPERIMENTAL_HTTP_FRAMER_READ_BUFFER_POOLING=false and report any issues. (#​9032)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
• Automerge
  • Between 12:00 AM and 03:59 AM (* 0-3 * * *)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 1 additional dependency was updated

Details:

Package	Change
google.golang.org/genproto/googleapis/rpc	v0.0.0-20260128011058-8636f8732409 -> v0.0.0-20260226221140-a57be14db171

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 41.45%. Comparing base (110592e) to head (3d98b10).
⚠️ Report is 4 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #6542      +/-   ##
==========================================
+ Coverage   41.42%   41.45%   +0.02%     
==========================================
  Files         431      431              
  Lines       28696    28696              
==========================================
+ Hits        11888    11896       +8     
+ Misses      15736    15729       -7     
+ Partials     1072     1071       -1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.