[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Confidence
cloud.google.com/go/secretmanager	v1.22.0 → v1.23.1
cloud.google.com/go/storage	v1.69.0 → v1.70.0
github.com/gkampitakis/go-snaps	v0.5.23 → v0.5.25
google.golang.org/api	v0.306.0 → v0.310.0
google.golang.org/grpc	v1.84.0 → v1.85.0

---

Release Notes

googleapis/google-cloud-go (cloud.google.com/go/secretmanager)

v1.23.1: speech: v1.23.1

Bug Fixes

• speech: Bump x/net to v0.24.0 (ba31ed5)

v1.23.0: cloudbuild: v1.23.0

Features

• cloudbuild/apiv1: Add option to enable nested virtualization if available (#​12720) (f45b222)

Documentation

• cloudbuild/apiv1: Update comments for machine_type and disk_size_gb (f45b222)

gkampitakis/go-snaps (github.com/gkampitakis/go-snaps)

v0.5.25

Compare Source

What's Changed

• fix: recognise snapshot labels that contain " - " by @​youdie006 in #​163

New Contributors

• @​youdie006 made their first contribution in #​163

Full Changelog: gkampitakis/go-snaps@v0.5.24...v0.5.25

v0.5.24

Compare Source

googleapis/google-api-go-client (google.golang.org/api)

v0.310.0

Compare Source

Features

• all: Auto-regenerate discovery clients (#​3795) (2a636ad)
• all: Auto-regenerate discovery clients (#​3797) (df2d2b0)

v0.309.0

Compare Source

Features

• all: Auto-regenerate discovery clients (#​3789) (e05cb39)
• all: Auto-regenerate discovery clients (#​3791) (0aad672)
• all: Auto-regenerate discovery clients (#​3792) (7a3948f)

v0.308.0

Compare Source

Features

• all: Auto-regenerate discovery clients (#​3787) (527f9a3)

v0.307.0

Compare Source

Features

• all: Auto-regenerate discovery clients (#​3785) (b2487a4)

grpc/grpc-go (google.golang.org/grpc)

v1.85.0: Release 1.85.0

Compare Source

New Features

• stats: Expose the effective client authority (sent on the wire as the HTTP/2 :authority header) in client stats.OutHeader events. (#​9296)
  • Special Thanks: @​aryansk
• metadata: Add ValueFromOutgoingContext, which reads a single metadata value from outgoing context without copying the entire outgoing metadata into a new map. (#​9282)
  • Special Thanks: @​yuyangguo42

Bug Fixes

• transport: Refine control buffer throttling to only count peer-induced control frames, raise the default GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT from 100 to 10,000, and close client connections if reads remain throttled for 10s. (#​9563)
• server: Ensure Stop() forcefully terminates the server while GracefulStop() is waiting for active handlers to complete. (#​9394)
  • Special Thanks: @​stanhu
• server: Unconditionally increment the highest-seen stream ID on when handling HEADERS frames to comply with RFC 7540 §5.1.1. Previously, truncated HEADERS frames left the connection in an inconsistent state and allowed stream IDs to be reused by clients without resulting in a protocol error. (#​9414)
• server: Terminate streams immediately when a HEADERS frame includes the EndStream bit. Previously, this caused server handlers to hang when reading a message. (#​9391)
• server: Reject requests missing both :authority and Host headers with HTTP 400 and status Internal. (#​9365)
• xds: Fix a bug where route header matchers with non-lowercase names failed to match routes. (#​9353)
  • Special Thanks: @​winklemad
• client: Ensure retried RPCs use the correct :authority value specified by the LB policy instead of inheriting it from a previous attempt. (#​9277)
  • Special Thanks: @​nvxbug
• transport: Fail streams with io.ErrUnexpectedEOF instead of io.EOF upon receiving truncated message headers or bodies after partial data has already been received. (#​9204)
  • Special Thanks: @​buger

---

Configuration

📅 Schedule: (in timezone Australia/Sydney)

• Branch creation
  • "before 6am on wednesday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[forking-renovate]

ℹ️ Artifact update notice

File name: vulnfeeds/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 8 additional dependencies were updated

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=7 days

Details:

Package	Change
cel.dev/expr	v0.25.2 -> v0.25.3
cloud.google.com/go/auth	v0.24.1-0.20261001053825-dbc26066f70a -> v0.24.1
cloud.google.com/go/iam	v1.12.0 -> v1.14.0
github.com/envoyproxy/go-control-plane/envoy	v1.37.0 -> v1.39.1-0.20260819172001-e6e3fd93e4be
github.com/googleapis/enterprise-certificate-proxy	v0.3.23 -> v0.3.24
github.com/googleapis/gax-go/v2	v2.26.2 -> v2.27.0
google.golang.org/genproto	v0.0.0-20260715232425-e75dac1f907d -> v0.0.0-20261012220534-4341edf3f941
google.golang.org/genproto/googleapis/api	v0.0.0-20260928230214-8a89bd6388cc -> v0.0.0-20261012220534-4341edf3f941