chore(deps): update deps

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
bazel-contrib/setup-bazel	action	minor	0.8.5 -> 0.9.1
cloud.google.com/go/iam	require	minor	v1.2.2 -> v1.3.0
cloud.google.com/go/iam	require	minor	v1.1.11 -> v1.3.0
cloud.google.com/go/longrunning	require	minor	v0.5.10 -> v0.6.3
github.com/jhump/protoreflect	require	minor	v1.16.0 -> v1.17.0
golang.org/x/text	require	minor	v0.16.0 -> v0.21.0
google.golang.org/api	require	minor	v0.209.0 -> v0.210.0
google.golang.org/genproto	require	digest	e639e21 -> a4fef06
google.golang.org/genproto	require	digest	d784300 -> a4fef06
google.golang.org/genproto/googleapis/api	require	digest	d784300 -> a4fef06
google.golang.org/genproto/googleapis/rpc	require	digest	e639e21 -> a4fef06
google.golang.org/genproto/googleapis/rpc	require	digest	d784300 -> a4fef06
google.golang.org/grpc	require	minor	v1.67.1 -> v1.68.1
google.golang.org/protobuf	require	minor	v1.34.2 -> v1.35.2

---

Release Notes

bazel-contrib/setup-bazel (bazel-contrib/setup-bazel)

v0.9.1

Compare Source

What's Changed

• Update dependency @​actions/core to v1.11.0 by @​renovate in https://github.com/bazel-contrib/setup-bazel/pull/39
• Update dependency node to v20.18.0 by @​renovate in https://github.com/bazel-contrib/setup-bazel/pull/40
• Update dependency @​actions/core to v1.11.1 by @​renovate in https://github.com/bazel-contrib/setup-bazel/pull/41
• Update dependency yaml to v2.6.0 by @​renovate in https://github.com/bazel-contrib/setup-bazel/pull/43
• Update Node.js to v22 by @​renovate in https://github.com/bazel-contrib/setup-bazel/pull/45
• Fix google_credentials by @​aaylward in https://github.com/bazel-contrib/setup-bazel/pull/47

New Contributors

• @​aaylward made their first contribution in https://github.com/bazel-contrib/setup-bazel/pull/47

Full Changelog: bazel-contrib/setup-bazel@0.9.0...0.9.1

v0.9.0

Compare Source

What's Changed

• Update dependency yaml to v2.4.4 by @​renovate in https://github.com/bazel-contrib/setup-bazel/pull/26
• Update dependency yaml to v2.4.5 by @​renovate in https://github.com/bazel-contrib/setup-bazel/pull/27
• Update dependency node to v20.15.0 by @​renovate in https://github.com/bazel-contrib/setup-bazel/pull/29
• Update dependency node to v20.15.1 by @​renovate in https://github.com/bazel-contrib/setup-bazel/pull/30
• Update dependency yaml to v2.5.0 by @​renovate in https://github.com/bazel-contrib/setup-bazel/pull/31
• Update dependency node to v20.16.0 - autoclosed by @​renovate in https://github.com/bazel-contrib/setup-bazel/pull/32
• Update dependency @​actions/glob to ^0.5.0 by @​renovate in https://github.com/bazel-contrib/setup-bazel/pull/33
• Update dependency node to v20.17.0 by @​renovate in https://github.com/bazel-contrib/setup-bazel/pull/34
• Update dependency yaml to v2.5.1 by @​renovate in https://github.com/bazel-contrib/setup-bazel/pull/35
• Add a process.exit after storing caches by @​chrismgrayftsinc in https://github.com/bazel-contrib/setup-bazel/pull/37
• Update dependency @​vercel/ncc to v0.38.2 - autoclosed by @​renovate in https://github.com/bazel-contrib/setup-bazel/pull/38

New Contributors

• @​chrismgrayftsinc made their first contribution in https://github.com/bazel-contrib/setup-bazel/pull/37

Full Changelog: bazel-contrib/setup-bazel@0.8.5...0.9.0

googleapis/google-cloud-go (cloud.google.com/go/longrunning)

v0.6.0

• Beta release of BigQuery, DataStore, Logging and Storage. See the
  blog post.

• bigquery:

  • struct support. Read a row directly into a struct with
    RowIterator.Next, and upload a row directly from a struct with Uploader.Put.
    You can also use field tags. See the [package documentation][cloud-bigquery-ref]
    for details.

  • The ValueList type was removed. It is no longer necessary. Instead of

  var v ValueList
  ... it.Next(&v) ..

  use

  var v []Value
  ... it.Next(&v) ...

  • Previously, repeatedly calling RowIterator.Next on the same []Value or
    ValueList would append to the slice. Now each call resets the size to zero first.

  • Schema inference will infer the SQL type BYTES for a struct field of
    type []byte. Previously it inferred STRING.

  • The types uint, uint64 and uintptr are no longer supported in schema
    inference. BigQuery's integer type is INT64, and those types may hold values
    that are not correctly represented in a 64-bit signed integer.

jhump/protoreflect (github.com/jhump/protoreflect)

v1.17.0

Compare Source

This release deprecates some packages that have newer alternatives in the Protobuf runtime. It also includes some small additions to the grpcreflect and desc/sourceinfo packages. The rest of the changes are bug fixes.

"github.com/jhump/protoreflect/desc"

Changes:

• This package is now deprecated. Though use of this package is still needed in order to use a handful of other packages in this repo, many usages should instead prefer the "google.golang.org/protobuf/reflect/protoreflect" package in the Protobuf runtime. In a v2 of this repo, this package will no longer be present.
• A performance improvement was contributed that speeds up the MessageDescriptor.FindFieldByName method.

"github.com/jhump/protoreflect/desc/protoparse"

Changes and bugfixes:

• This package is now deprecated. Most usages should instead prefer the "github.com/bufbuild/protocompile" package. There are some behavioral differences that we hope to address with additional API and enhancements to protocompile. But the protoparse package here is just a veneer on top of protocompile and we plan to do as little maintenance as possible here. In a v2 of this repo, this package will no longer be present.
• The protocompile dependency has been updated to use a more recent version of that package. This addresses potential panics when calling Parser.ParseButDontLink.

"github.com/jhump/protoreflect/desc/sourceinfo"

Changes and bugfixes:

• A possible panic when calling sourceinfo.GlobalFiles.FindDescriptorByName has been fixed.
• Descriptors returned from the sourceinfo.GlobalFiles registry or from the various Wrap* functions could induce panics in user code if querying for non-existent elements. For example, calling messageDescriptor.Fields().ByNumber(123) could return a typed-nil value on failure, instead of a nil interface. This would result in nil-dereference panics if methods were called on this later. These have been fixed.
• Descriptors returned from the sourceinfo.GlobalFiles registry and from the various Wrap* functions had concrete types defined in this package, not in the Protobuf runtime. But the protoreflect.Descriptor interface has a "do not implement" marker, indicating that concrete types implementing the interface should not be implemented outside of that module. To avoid future issues with the Protobuf runtime, there are no more implementations in this repo. Instead of wrapping other descriptor implementations (via embedding, and then overriding some methods), this package now builds new descriptors, using the protodesc package in the Protobuf runtime module.
• The various Wrap* functions are now deprecated. The name is no longer accurate since they no longer return wrapper values. Also the new implementation, which builds new descriptors, can fail (though unlikely), but the existing signature of these functions did not allow for returning an error. So these functions could possibly panic in the face of malformed input descriptors. Users should use the new AddSourceInfoTo* versions of these functions instead.

Additions:

• Adds AddSourceInfoTo* functions to replace the Wrap* functions. These functions augment the input descriptors by adding source code information to them.

"github.com/jhump/protoreflect/dynamic"

Changes:

• This package is now deprecated. Most usages should instead prefer the "google.golang.org/protobuf/types/dynamicpb" package in the Protobuf runtime. In a v2 of this repo, this package will no longer be present.

"github.com/jhump/protoreflect/grpcreflect"

Additions:

• Adds a new NewClientV1 function to return a client that uses v1 of the server reflection service. This fills the gap in the existing factory functions, NewClientV1Alpha and NewClientAuto.
• Adds a new AllowFallbackResolver method to the *grpcreflect.Client type. This allows the client to be configured with an alternate resolver that can be used as a backup when trying to satisfy dependencies, for cases where the remote server is non-authoritative and unable to provide all of them.

googleapis/google-api-go-client (google.golang.org/api)

v0.210.0

Compare Source

Features

• all: Auto-regenerate discovery clients (#​2886) (f446504)
• all: Auto-regenerate discovery clients (#​2888) (a990614)
• all: Auto-regenerate discovery clients (#​2892) (22e0d11)
• all: Auto-regenerate discovery clients (#​2893) (2657039)
• all: Auto-regenerate discovery clients (#​2895) (46fab24)
• all: Auto-regenerate discovery clients (#​2896) (efded92)
• Async refresh dry run in parallel with sync refresh (#​2849) (acd2581)
• option/internaloption: Add AuthCreds helper (#​2891) (6ee8349)

Bug Fixes

• gensupport: Context cancel error check (#​2890) (f57c82d)

grpc/grpc-go (google.golang.org/grpc)

v1.68.1: Release 1.68.1

Compare Source

Bug Fixes

• credentials/alts: avoid SRV and TXT lookups for handshaker service to work around hangs caused by buggy versions of systemd-resolved. (#​7861)

Dependencies

• Relax minimum Go version requirement from go1.22.7 to go1.22. (#​7831)

v1.68.0: Release 1.68.0

Compare Source

Behavior Changes

• stats/opentelemetry/csm: Get mesh_id local label from "CSM_MESH_ID" environment variable, rather than parsing from bootstrap file (#​7740)
• orca (experimental): if using an ORCA listener, it must now be registered only on a READY SubConn, and the listener will automatically be stopped when the connection is lost. (#​7663)
• client: ClientConn.Close() now closes transports simultaneously and waits for transports to be closed before returning. (#​7666)
• credentials: TLS credentials created via NewTLS that use tls.Config.GetConfigForClient will now have CipherSuites, supported TLS versions and ALPN configured automatically. These were previously only set for configs not using the GetConfigForClient option. (#​7709)

Bug Fixes

• transport: prevent deadlock in client transport shutdown when writing the GOAWAY frame hangs. (#​7662)
• mem: reuse buffers more accurately by using slice capacity instead of length (#​7702)
  • Special Thanks: @​PapaCharlie
• status: Fix regression caused by #​6919 in status.Details() causing it to return a wrapped type when getting proto messages generated with protoc-gen-go < v1. (#​7724)

Dependencies

• Bump minimum supported Go version to go1.22.7. (#​7624)

v1.67.2: Release 1.67.2

Compare Source

Bug Fixes

• credentials/alts: avoid SRV and TXT lookups for handshaker service to work around hangs caused by buggy versions of systemd-resolved. (#​7861)

protocolbuffers/protobuf-go (google.golang.org/protobuf)

v1.35.2

Compare Source

Full Changelog: protocolbuffers/protobuf-go@v1.35.1...v1.35.2

Maintenance:

CL/623115: proto: refactor equal_test from explicit table to use makeMessages()
CL/623116: encoding/prototext: use testmessages_test.go approach, too
CL/623117: internal/testprotos/test: add nested message field with [lazy=true]
CL/624415: proto: switch messageset_test to use makeMessages() injection point
CL/624416: internal/impl: fix TestMarshalMessageSetLazyRace (was a no-op!)

User-visible changes:

CL/618395: encoding/protojson: allow missing value for Any of type Empty
CL/618979: all: implement strip_enum_prefix editions feature
CL/622575: testing/protocmp: document behavior when combining Ignore and Sort

v1.35.1

Compare Source

Full Changelog: protocolbuffers/protobuf-go@v1.34.2...v1.35.1

Maintenance:

• CL/606755: all: remove unused purego support
• CL/608316: all: set Go language version to Go 1.21

User-visible changes:

• CL/587536: protojson: include field name in error messages
• CL/597055: compiler/protogen: always report editions support level of the plugin
• CL/596539: all: plumb the lazy option into filedesc.Field and .Extension
• CL/601775: types/known/structpb: add support for more types and json.Number
• CL/607995: proto: extend documentation of GetExtension, SetExtension
• CL/609035: proto: implement proto.Equal fast-path

Bug fixes:

• CL/595337: reflect/protodesc: fix handling of delimited extensions in editions
• CL/602055: internal/cmd/generate-protos: fix pkg check for editions features
• CL/603015: internal: generate extension numbers, fix editions parsing

v1.35.0

Compare Source

---

Configuration

📅 Schedule: Branch creation - "* 0-3 * * 1" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[forking-renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 4 additional dependencies were updated

Details:

Package	Change
github.com/bufbuild/protocompile	v0.10.0 -> v0.14.1
golang.org/x/net	v0.27.0 -> v0.30.0
golang.org/x/sys	v0.22.0 -> v0.26.0
google.golang.org/grpc	v1.64.1 -> v1.67.1

File name: showcase/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 19 additional dependencies were updated

Details:

Package	Change
cloud.google.com/go/auth	v0.7.2 -> v0.10.1
cloud.google.com/go/auth/oauth2adapt	v0.2.3 -> v0.2.5
cloud.google.com/go/compute/metadata	v0.5.0 -> v0.5.2
cloud.google.com/go/longrunning	v0.5.9 -> v0.6.2
github.com/google/s2a-go	v0.1.7 -> v0.1.8
github.com/googleapis/enterprise-certificate-proxy	v0.3.2 -> v0.3.4
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	v0.49.0 -> v0.54.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	v0.49.0 -> v0.54.0
go.opentelemetry.io/otel	v1.24.0 -> v1.29.0
go.opentelemetry.io/otel/metric	v1.24.0 -> v1.29.0
go.opentelemetry.io/otel/trace	v1.24.0 -> v1.29.0
golang.org/x/crypto	v0.25.0 -> v0.28.0
golang.org/x/net	v0.27.0 -> v0.30.0
golang.org/x/oauth2	v0.21.0 -> v0.23.0
golang.org/x/sync	v0.7.0 -> v0.8.0
golang.org/x/sys	v0.22.0 -> v0.26.0
golang.org/x/text	v0.16.0 -> v0.19.0
golang.org/x/time	v0.5.0 -> v0.7.0
google.golang.org/genproto/googleapis/api	v0.0.0-20240711142825-46eb208f015d -> v0.0.0-20241021214115-324edc3d5d38

[quartzmo]

lint is failing:

Error: internal/gencli/flag.go:24:2: "github.com/jhump/protoreflect/desc" is deprecated: This module was created for use with the older "v1" Protobuf API in github.com/golang/protobuf. However, much of this module is no longer necessary as the newer "v2" API in google.golang.org/protobuf provides similar capabilities. Instead of using this github.com/jhump/protoreflect/desc package, see [google.golang.org/protobuf/reflect/protoreflect]. (SA1019)

[gcf-merge-on-green]

Merge-on-green attempted to merge your PR for 6 hours, but it was not mergeable because either one of your required status checks failed, one of your required reviews was not approved, or there is a do not merge label. Learn more about your required status checks here: https://help.github.com/en/github/administering-a-repository/enabling-required-status-checks. You can remove and reapply the label to re-run the bot.

[forking-renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: showcase/go.sum

Command failed: go get -d -t ./...
go: module google.golang.org/grpc@v1.68.1 requires go >= 1.22; switching to go1.22.10
go: downloading go1.22.10 (linux/amd64)
go: download go1.22.10: golang.org/toolchain@v0.0.1-go1.22.10.linux-amd64: verifying module: checksum database disabled by GOSUMDB=off

[codyoss]

This is quite old now, lets get a new one next week and go with that.