fix: update all dependencies #639

renovate-bot · 2025-11-19T00:37:03Z

This PR contains the following updates:

Package	Change	Age	Confidence
Google.Cloud.Spanner.Admin.Database.V1	`5.6.0` -> `5.7.0`
Google.Cloud.Spanner.Data	`5.6.0` -> `5.7.0`
Google.Cloud.Spanner.V1	`5.6.0` -> `5.7.0`
google.golang.org/grpc	`v1.76.0` -> `v1.77.0`
com.google.cloud:google-cloud-spanner-bom	`6.102.1` -> `6.103.0`

Release Notes

grpc/grpc-go (google.golang.org/grpc)

`v1.77.0`: Release 1.77.0

Compare Source

API Changes

mem: Replace the Reader interface with a struct for better performance and maintainability. (#8669)

Behavior Changes

balancer/pickfirst: Remove support for the old pick_first LB policy via the environment variable GRPC_EXPERIMENTAL_ENABLE_NEW_PICK_FIRST=false. The new pick_first has been the default since v1.71.0. (#8672)

Bug Fixes

xdsclient: Fix a race condition in the ADS stream implementation that could result in resource-not-found errors, causing the gRPC client channel to move to TransientFailure. (#8605)
client: Ignore HTTP status header for gRPC streams. (#8548)
client: Set a read deadline when closing a transport to prevent it from blocking indefinitely on a broken connection. (#8534)
- Special Thanks: @jgold2-stripe
client: Fix a bug where default port 443 was not automatically added to addresses without a specified port when sent to a proxy.
- Setting environment variable GRPC_EXPERIMENTAL_ENABLE_DEFAULT_PORT_FOR_PROXY_TARGET=false disables this change; please file a bug if any problems are encountered as we will remove this option soon. (#8613)
balancer/pickfirst: Fix a bug where duplicate addresses were not being ignored as intended. (#8611)
server: Fix a bug that caused overcounting of channelz metrics for successful and failed streams. (#8573)
- Special Thanks: @hugehoo
balancer/pickfirst: When configured, shuffle addresses in resolver updates that lack endpoints. Since gRPC automatically adds endpoints to resolver updates, this bug only affects custom LB policies that delegate to pick_first but don't set endpoints. (#8610)
mem: Clear large buffers before re-using. (#8670)

Performance Improvements

transport: Reduce heap allocations to reduce time spent in garbage collection. (#8624, #8630, #8639, #8668)
transport: Avoid copies when reading and writing Data frames. (#8657, #8667)
mem: Avoid clearing newly allocated buffers. (#8670)

New Features

outlierdetection: Add metrics specified in gRFC A91. (#8644)
- Special Thanks: @davinci26, @PardhuKonakanchi
stats/opentelemetry: Add support for optional label grpc.lb.backend_service in per-call metrics (#8637)
xds: Add support for JWT Call Credentials as specified in gRFC A97. Set environment variable GRPC_EXPERIMENTAL_XDS_BOOTSTRAP_CALL_CREDS=true to enable this feature. (#8536)
- Special Thanks: @dimpavloff
experimental/stats: Add support for up/down counters. (#8581)

googleapis/java-spanner (com.google.cloud:google-cloud-spanner-bom)

`v6.103.0`

Compare Source

Features

Add grpc.xds.resource_type label to xDS client metrics (#4222) (97bed3c)
Exposing AutoscalingConfig in InstancePartition (22edecf)

Bug Fixes

Add env var to allow disabling directpath bound token (#4189) (0ca9541)
Allow DML THEN RETURN with retryAbortsInternally=false (#4225) (f49cc47)
deps: Update the Java code generator (gapic-generator-java) to 2.64.1 (22edecf)
Remove URL encoding in project name (#4188) (abba0c1)

Dependencies

Update actions/checkout action to v5 (#4166) (50a56f7)
Update all tracing and telemetry dependencies (#4230) (d60124c)
Update dependency com.google.api.grpc:proto-google-cloud-trace-v1 to v2.79.0 (#4172) (3a329fd)
Update dependency com.google.auto.value:auto-value-annotations to v1.11.1 (#4216) (84150c7)
Update dependency com.google.cloud:google-cloud-trace to v2.79.0 (#4174) (3e93ca0)
Update dependency com.google.cloud:sdk-platform-java-config to v3.54.1 (#4193) (ad235cf)
Update dependency commons-cli:commons-cli to v1.11.0 (#4218) (33449ba)
Update dependency commons-io:commons-io to v2.21.0 (#4198) (1f31169)
Update dependency net.bytebuddy:byte-buddy to v1.18.1 (#4214) (0c1d843)
Update dependency net.bytebuddy:byte-buddy-agent to v1.18.1 (#4215) (76ce01b)
Update opentelemetry.version to v1.56.0 (#4167) (a24f219)

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

forking-renovate · 2025-11-19T00:37:04Z

ℹ Artifact update notice

File name: benchmarks/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

14 additional dependencies were updated

Details:

Package	Change
`github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp`	`v1.29.0` -> `v1.30.0`
`github.com/cncf/xds/go`	`v0.0.0-20250501225837-2ac532fd4443` -> `v0.0.0-20251022180443-0feb69152e9f`
`github.com/envoyproxy/go-control-plane/envoy`	`v1.32.4` -> `v1.35.0`
`github.com/go-jose/go-jose/v4`	`v4.1.2` -> `v4.1.3`
`github.com/spiffe/go-spiffe/v2`	`v2.5.0` -> `v2.6.0`
`go.opentelemetry.io/auto/sdk`	`v1.1.0` -> `v1.2.1`
`go.opentelemetry.io/contrib/detectors/gcp`	`v1.37.0` -> `v1.38.0`
`go.opentelemetry.io/otel`	`v1.37.0` -> `v1.38.0`
`go.opentelemetry.io/otel/metric`	`v1.37.0` -> `v1.38.0`
`go.opentelemetry.io/otel/sdk`	`v1.37.0` -> `v1.38.0`
`go.opentelemetry.io/otel/sdk/metric`	`v1.37.0` -> `v1.38.0`
`go.opentelemetry.io/otel/trace`	`v1.37.0` -> `v1.38.0`
`golang.org/x/net`	`v0.46.0` -> `v0.46.1-0.20251013234738-63d1a5100f82`
`google.golang.org/genproto/googleapis/api`	`v0.0.0-20250818200422-3122310a409c` -> `v0.0.0-20251022142026-3a174f9686a8`

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

14 additional dependencies were updated

Details:

Package	Change
`github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp`	`v1.29.0` -> `v1.30.0`
`github.com/cncf/xds/go`	`v0.0.0-20250501225837-2ac532fd4443` -> `v0.0.0-20251022180443-0feb69152e9f`
`github.com/envoyproxy/go-control-plane/envoy`	`v1.32.4` -> `v1.35.0`
`github.com/go-jose/go-jose/v4`	`v4.1.2` -> `v4.1.3`
`github.com/spiffe/go-spiffe/v2`	`v2.5.0` -> `v2.6.0`
`go.opentelemetry.io/auto/sdk`	`v1.1.0` -> `v1.2.1`
`go.opentelemetry.io/contrib/detectors/gcp`	`v1.37.0` -> `v1.38.0`
`go.opentelemetry.io/otel`	`v1.37.0` -> `v1.38.0`
`go.opentelemetry.io/otel/metric`	`v1.37.0` -> `v1.38.0`
`go.opentelemetry.io/otel/sdk`	`v1.37.0` -> `v1.38.0`
`go.opentelemetry.io/otel/sdk/metric`	`v1.37.0` -> `v1.38.0`
`go.opentelemetry.io/otel/trace`	`v1.37.0` -> `v1.38.0`
`golang.org/x/net`	`v0.46.0` -> `v0.46.1-0.20251013234738-63d1a5100f82`
`google.golang.org/genproto/googleapis/api`	`v0.0.0-20250818200422-3122310a409c` -> `v0.0.0-20251022142026-3a174f9686a8`

File name: spannerlib/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

13 additional dependencies were updated

Details:

Package	Change
`github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp`	`v1.29.0` -> `v1.30.0`
`github.com/cncf/xds/go`	`v0.0.0-20250501225837-2ac532fd4443` -> `v0.0.0-20251022180443-0feb69152e9f`
`github.com/envoyproxy/go-control-plane/envoy`	`v1.32.4` -> `v1.35.0`
`github.com/go-jose/go-jose/v4`	`v4.1.2` -> `v4.1.3`
`github.com/spiffe/go-spiffe/v2`	`v2.5.0` -> `v2.6.0`
`go.opentelemetry.io/auto/sdk`	`v1.1.0` -> `v1.2.1`
`go.opentelemetry.io/contrib/detectors/gcp`	`v1.37.0` -> `v1.38.0`
`go.opentelemetry.io/otel`	`v1.37.0` -> `v1.38.0`
`go.opentelemetry.io/otel/metric`	`v1.37.0` -> `v1.38.0`
`go.opentelemetry.io/otel/sdk`	`v1.37.0` -> `v1.38.0`
`go.opentelemetry.io/otel/sdk/metric`	`v1.37.0` -> `v1.38.0`
`go.opentelemetry.io/otel/trace`	`v1.37.0` -> `v1.38.0`
`golang.org/x/net`	`v0.46.0` -> `v0.46.1-0.20251013234738-63d1a5100f82`

gemini-code-assist · 2025-11-19T00:37:37Z

Summary of Changes

Hello @renovate-bot, I'm Gemini Code Assist¹! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request performs a comprehensive update of various dependencies across the Go, .NET, and Java components of the project. The updates primarily focus on bringing the Google Cloud Spanner client libraries, gRPC, and related infrastructure components to their latest stable versions, ensuring the project benefits from the most recent bug fixes, performance optimizations, and newly introduced functionalities from these upstream projects.

Highlights

Go Dependencies Updated: Multiple Go dependencies, including google.golang.org/grpc (to v1.77.0), OpenTelemetry components, and xDS related packages, have been updated to their latest versions, bringing various bug fixes, performance improvements, and new features.
.NET Spanner Client Libraries Updated: The .NET Google Cloud Spanner client libraries, specifically Google.Cloud.Spanner.Admin.Database.V1, Google.Cloud.Spanner.Data, and Google.Cloud.Spanner.V1, have been updated from 5.6.0 to 5.7.0.
Java Spanner BOM Updated: The com.google.cloud:google-cloud-spanner-bom for Java has been updated from 6.102.1 to 6.103.0, which includes new features like xDS client metrics and exposing AutoscalingConfig in InstancePartition, along with several bug fixes and internal dependency updates.
gRPC-Go v1.77.0 Enhancements: The grpc-go update includes API changes (replacing the Reader interface), behavior changes (removing old pick_first LB policy support), fixes for race conditions and read deadlines, performance improvements through reduced heap allocations, and new features such as outlier detection metrics and JWT Call Credentials support.

Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature	Command	Description
Code Review	`/gemini review`	Performs a code review for the current pull request in its current state.
Pull Request Summary	`/gemini summary`	Provides a summary of the current pull request in its current state.
Comment	@gemini-code-assist	Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help	`/gemini help`	Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution. ↩

gemini-code-assist

Code Review

This pull request updates several dependencies across Go, .NET, and Java projects. The most significant change is the upgrade of google.golang.org/grpc to v1.77.0, which removes support for an old, experimental load balancing policy configuration. I've added comments to the go.mod files to highlight this potential breaking change. The other dependency updates appear to be minor and non-breaking. Please review the comments and ensure the gRPC update does not adversely affect your services.

gemini-code-assist · 2025-11-19T00:38:48Z

benchmarks/go.mod

 	github.com/googleapis/go-sql-spanner v1.21.0
 	google.golang.org/api v0.256.0
-	google.golang.org/grpc v1.76.0
+	google.golang.org/grpc v1.77.0


The update to google.golang.org/grpc to version v1.77.0 includes a behavior change that removes support for the old pick_first load balancing policy. This was previously configurable via the GRPC_EXPERIMENTAL_ENABLE_NEW_PICK_FIRST=false environment variable. The new pick_first policy has been the default since v1.71.0. Please verify that the project is not relying on the old pick_first policy by setting this environment variable, as it will no longer have any effect.

gemini-code-assist · 2025-11-19T00:38:48Z

go.mod

 	google.golang.org/api v0.256.0
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20251111163417-95abcf5c77ba
-	google.golang.org/grpc v1.76.0
+	google.golang.org/grpc v1.77.0


The update to google.golang.org/grpc to version v1.77.0 includes a behavior change that removes support for the old pick_first load balancing policy. This was previously configurable via the GRPC_EXPERIMENTAL_ENABLE_NEW_PICK_FIRST=false environment variable. The new pick_first policy has been the default since v1.71.0. Please verify that the project is not relying on the old pick_first policy by setting this environment variable, as it will no longer have any effect.

gemini-code-assist · 2025-11-19T00:38:49Z

spannerlib/go.mod

 	github.com/googleapis/go-sql-spanner v1.21.0
 	google.golang.org/genproto/googleapis/api v0.0.0-20251111163417-95abcf5c77ba
-	google.golang.org/grpc v1.76.0
+	google.golang.org/grpc v1.77.0


The update to google.golang.org/grpc to version v1.77.0 includes a behavior change that removes support for the old pick_first load balancing policy. This was previously configurable via the GRPC_EXPERIMENTAL_ENABLE_NEW_PICK_FIRST=false environment variable. The new pick_first policy has been the default since v1.71.0. Please verify that the project is not relying on the old pick_first policy by setting this environment variable, as it will no longer have any effect.

fix: update all dependencies

2208ff6

renovate-bot requested a review from a team as a code owner November 19, 2025 00:37

trusted-contributions-gcf bot added the kokoro:force-run Add this label to force Kokoro to re-run the tests. label Nov 19, 2025

gemini-code-assist bot reviewed Nov 19, 2025

View reviewed changes

chore: go mod tidy

bdd838f

olavloite approved these changes Nov 19, 2025

View reviewed changes

rahul2393 approved these changes Nov 19, 2025

View reviewed changes

rahul2393 merged commit 2311ffb into googleapis:main Nov 19, 2025
38 of 40 checks passed

release-please bot mentioned this pull request Nov 19, 2025

chore(main): release 1.22.0 #590

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix: update all dependencies #639

fix: update all dependencies #639

Uh oh!

renovate-bot commented Nov 19, 2025

Uh oh!

forking-renovate bot commented Nov 19, 2025

Uh oh!

gemini-code-assist bot commented Nov 19, 2025

Uh oh!

gemini-code-assist bot left a comment

Uh oh!

gemini-code-assist bot Nov 19, 2025

Uh oh!

gemini-code-assist bot Nov 19, 2025

Uh oh!

gemini-code-assist bot Nov 19, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

fix: update all dependencies #639

fix: update all dependencies #639

Uh oh!

Conversation

renovate-bot commented Nov 19, 2025

Release Notes

v1.77.0: Release 1.77.0

API Changes

Behavior Changes

Bug Fixes

Performance Improvements

New Features

v6.103.0

Features

Bug Fixes

Dependencies

Configuration

Uh oh!

forking-renovate bot commented Nov 19, 2025

ℹ Artifact update notice

File name: benchmarks/go.mod

File name: go.mod

File name: spannerlib/go.mod

Uh oh!

gemini-code-assist bot commented Nov 19, 2025

Summary of Changes

Highlights

Footnotes

Uh oh!

gemini-code-assist bot left a comment

Choose a reason for hiding this comment

Code Review

Uh oh!

gemini-code-assist bot Nov 19, 2025

Choose a reason for hiding this comment

Uh oh!

gemini-code-assist bot Nov 19, 2025

Choose a reason for hiding this comment

Uh oh!

gemini-code-assist bot Nov 19, 2025

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

`v1.77.0`: Release 1.77.0

`v6.103.0`