Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Aug 12, 2025

This PR contains the following updates:

Package Change Age Confidence
google.golang.org/api v0.246.0v0.259.0 age confidence

Release Notes

googleapis/google-api-go-client (google.golang.org/api)

v0.259.0

Compare Source

⚠ BREAKING CHANGES
  • remove firebaseremoteconfig from package list (#​3422)
Features
Bug Fixes
Miscellaneous Chores

v0.258.0

Compare Source

Features

v0.257.0

Compare Source

Features

v0.256.0

Compare Source

Features

v0.255.0

Compare Source

Features

v0.254.0

Compare Source

Features

v0.253.0

Compare Source

Features

v0.252.0

Compare Source

Features

v0.251.0

Compare Source

Features

v0.250.0

Compare Source

Features

v0.249.0

Compare Source

Features

v0.248.0

Compare Source

Features

v0.247.0

Compare Source

Features

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code minor labels Aug 12, 2025
@renovate renovate bot requested a review from gabe565 as a code owner August 12, 2025 23:25
@renovate renovate bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code minor labels Aug 12, 2025
@renovate
Copy link
Contributor Author

renovate bot commented Aug 12, 2025

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 30 additional dependencies were updated

Details:

Package Change
github.com/stretchr/testify v1.10.0 -> v1.11.1
golang.org/x/sync v0.16.0 -> v0.18.0
golang.org/x/time v0.12.0 -> v0.14.0
cloud.google.com/go/auth v0.16.3 -> v0.17.0
cloud.google.com/go/compute/metadata v0.7.0 -> v0.9.0
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.27.0 -> v1.30.0
github.com/cncf/xds/go v0.0.0-20250501225837-2ac532fd4443 -> v0.0.0-20251022180443-0feb69152e9f
github.com/envoyproxy/go-control-plane/envoy v1.32.4 -> v1.35.0
github.com/go-jose/go-jose/v4 v4.0.5 -> v4.1.3
github.com/googleapis/enterprise-certificate-proxy v0.3.6 -> v0.3.7
github.com/spiffe/go-spiffe/v2 v2.5.0 -> v2.6.0
go.opentelemetry.io/auto/sdk v1.1.0 -> v1.2.1
go.opentelemetry.io/contrib/detectors/gcp v1.36.0 -> v1.38.0
go.opentelemetry.io/otel v1.36.0 -> v1.38.0
go.opentelemetry.io/otel/metric v1.36.0 -> v1.38.0
go.opentelemetry.io/otel/sdk v1.36.0 -> v1.38.0
go.opentelemetry.io/otel/sdk/metric v1.36.0 -> v1.38.0
go.opentelemetry.io/otel/trace v1.36.0 -> v1.38.0
golang.org/x/crypto v0.40.0 -> v0.45.0
golang.org/x/mod v0.26.0 -> v0.29.0
golang.org/x/net v0.42.0 -> v0.47.0
golang.org/x/oauth2 v0.30.0 -> v0.33.0
golang.org/x/sys v0.34.0 -> v0.38.0
golang.org/x/term v0.33.0 -> v0.37.0
golang.org/x/text v0.27.0 -> v0.31.0
golang.org/x/tools v0.35.0 -> v0.38.0
google.golang.org/genproto/googleapis/api v0.0.0-20250721164621-a45f3dfb1074 -> v0.0.0-20251022142026-3a174f9686a8
google.golang.org/genproto/googleapis/rpc v0.0.0-20250728155136-f173205681a0 -> v0.0.0-20251124214823-79d6a2a48846
google.golang.org/grpc v1.74.2 -> v1.77.0
google.golang.org/protobuf v1.36.6 -> v1.36.10

@socket-security
Copy link

socket-security bot commented Aug 12, 2025

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedgoogle.golang.org/​api@​v0.246.0 ⏵ v0.259.079 +1100100100100
Updatedgithub.com/​stretchr/​testify@​v1.10.0 ⏵ v1.11.196 +1100100100100
Updatedgolang.org/​x/​sync@​v0.16.0 ⏵ v0.19.099100100100100
Updatedgolang.org/​x/​time@​v0.12.0 ⏵ v0.14.0100100100100100

View full report

@renovate renovate bot changed the title chore(deps): update module google.golang.org/api to v0.247.0 chore(deps): update module google.golang.org/api to v0.248.0 Aug 19, 2025
@renovate renovate bot force-pushed the renovate/google.golang.org-api-0.x branch from a1e9490 to 1a6bc05 Compare August 19, 2025 20:30
@renovate renovate bot changed the title chore(deps): update module google.golang.org/api to v0.248.0 chore(deps): update module google.golang.org/api to v0.249.0 Sep 8, 2025
@renovate renovate bot force-pushed the renovate/google.golang.org-api-0.x branch from 1a6bc05 to 1223852 Compare September 8, 2025 23:03
@socket-security
Copy link

socket-security bot commented Sep 8, 2025

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: golang go.opentelemetry.io/otel is 98.0% likely obfuscated

Confidence: 0.98

Location: Package overview

From: ?golang/google.golang.org/api@v0.259.0golang/cloud.google.com/go/storage@v1.56.0golang/go.opentelemetry.io/otel@v1.38.0

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore golang/go.opentelemetry.io/otel@v1.38.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: golang golang.org/x/oauth2 is 98.0% likely obfuscated

Confidence: 0.98

Location: Package overview

From: ?golang/google.golang.org/api@v0.259.0golang/k8s.io/client-go@v0.33.3golang/cloud.google.com/go/storage@v1.56.0golang/golang.org/x/oauth2@v0.34.0

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore golang/golang.org/x/oauth2@v0.34.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: golang google.golang.org/grpc is 98.0% likely obfuscated

Confidence: 0.98

Location: Package overview

From: ?golang/google.golang.org/api@v0.259.0golang/cloud.google.com/go/storage@v1.56.0golang/google.golang.org/grpc@v1.78.0

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore golang/google.golang.org/grpc@v1.78.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: golang google.golang.org/grpc is 98.0% likely obfuscated

Confidence: 0.98

Location: Package overview

From: ?golang/google.golang.org/api@v0.259.0golang/cloud.google.com/go/storage@v1.56.0golang/google.golang.org/grpc@v1.78.0

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore golang/google.golang.org/grpc@v1.78.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@renovate renovate bot changed the title chore(deps): update module google.golang.org/api to v0.249.0 chore(deps): update module google.golang.org/api to v0.250.0 Sep 25, 2025
@renovate renovate bot force-pushed the renovate/google.golang.org-api-0.x branch 2 times, most recently from 0234973 to 92b286f Compare September 30, 2025 20:35
@renovate renovate bot changed the title chore(deps): update module google.golang.org/api to v0.250.0 chore(deps): update module google.golang.org/api to v0.251.0 Sep 30, 2025
@renovate renovate bot force-pushed the renovate/google.golang.org-api-0.x branch from 92b286f to 38e4c9d Compare October 7, 2025 17:00
@renovate renovate bot changed the title chore(deps): update module google.golang.org/api to v0.251.0 chore(deps): update module google.golang.org/api to v0.252.0 Oct 7, 2025
@renovate renovate bot force-pushed the renovate/google.golang.org-api-0.x branch from 38e4c9d to ea71fb5 Compare October 9, 2025 11:57
@renovate renovate bot force-pushed the renovate/google.golang.org-api-0.x branch from ea71fb5 to edbaa99 Compare October 22, 2025 23:39
@renovate renovate bot changed the title chore(deps): update module google.golang.org/api to v0.252.0 chore(deps): update module google.golang.org/api to v0.253.0 Oct 22, 2025
@renovate renovate bot changed the title chore(deps): update module google.golang.org/api to v0.253.0 chore(deps): update module google.golang.org/api to v0.254.0 Oct 29, 2025
@renovate renovate bot force-pushed the renovate/google.golang.org-api-0.x branch from edbaa99 to 69df533 Compare October 29, 2025 01:30
@renovate renovate bot changed the title chore(deps): update module google.golang.org/api to v0.254.0 chore(deps): update module google.golang.org/api to v0.255.0 Nov 5, 2025
@renovate renovate bot force-pushed the renovate/google.golang.org-api-0.x branch from 69df533 to 6525198 Compare November 5, 2025 00:17
@renovate renovate bot changed the title chore(deps): update module google.golang.org/api to v0.255.0 chore(deps): update module google.golang.org/api to v0.256.0 Nov 11, 2025
@renovate renovate bot force-pushed the renovate/google.golang.org-api-0.x branch from 6525198 to fcf9948 Compare November 11, 2025 18:49
@renovate renovate bot force-pushed the renovate/google.golang.org-api-0.x branch from fcf9948 to 934fd0d Compare December 3, 2025 04:53
@renovate renovate bot changed the title chore(deps): update module google.golang.org/api to v0.256.0 chore(deps): update module google.golang.org/api to v0.257.0 Dec 3, 2025
@renovate renovate bot force-pushed the renovate/google.golang.org-api-0.x branch from 934fd0d to 016ff6d Compare December 15, 2025 15:17
@renovate
Copy link
Contributor Author

renovate bot commented Dec 15, 2025

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 35 additional dependencies were updated

Details:

Package Change
github.com/stretchr/testify v1.10.0 -> v1.11.1
golang.org/x/sync v0.16.0 -> v0.19.0
golang.org/x/time v0.12.0 -> v0.14.0
cloud.google.com/go v0.121.4 -> v0.121.6
cloud.google.com/go/auth v0.16.3 -> v0.18.0
cloud.google.com/go/compute/metadata v0.7.0 -> v0.9.0
cloud.google.com/go/iam v1.5.2 -> v1.5.3
cloud.google.com/go/monitoring v1.24.2 -> v1.24.3
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.27.0 -> v1.30.0
github.com/cncf/xds/go v0.0.0-20250501225837-2ac532fd4443 -> v0.0.0-20251022180443-0feb69152e9f
github.com/envoyproxy/go-control-plane/envoy v1.32.4 -> v1.35.0
github.com/go-jose/go-jose/v4 v4.0.5 -> v4.1.3
github.com/googleapis/enterprise-certificate-proxy v0.3.6 -> v0.3.7
github.com/googleapis/gax-go/v2 v2.15.0 -> v2.16.0
github.com/spiffe/go-spiffe/v2 v2.5.0 -> v2.6.0
go.opentelemetry.io/auto/sdk v1.1.0 -> v1.2.1
go.opentelemetry.io/contrib/detectors/gcp v1.36.0 -> v1.38.0
go.opentelemetry.io/otel v1.36.0 -> v1.38.0
go.opentelemetry.io/otel/metric v1.36.0 -> v1.38.0
go.opentelemetry.io/otel/sdk v1.36.0 -> v1.38.0
go.opentelemetry.io/otel/sdk/metric v1.36.0 -> v1.38.0
go.opentelemetry.io/otel/trace v1.36.0 -> v1.38.0
golang.org/x/crypto v0.40.0 -> v0.46.0
golang.org/x/mod v0.26.0 -> v0.30.0
golang.org/x/net v0.42.0 -> v0.48.0
golang.org/x/oauth2 v0.30.0 -> v0.34.0
golang.org/x/sys v0.34.0 -> v0.39.0
golang.org/x/term v0.33.0 -> v0.38.0
golang.org/x/text v0.27.0 -> v0.32.0
golang.org/x/tools v0.35.0 -> v0.39.0
google.golang.org/genproto v0.0.0-20250603155806-513f23925822 -> v0.0.0-20251202230838-ff82c1b0f217
google.golang.org/genproto/googleapis/api v0.0.0-20250721164621-a45f3dfb1074 -> v0.0.0-20251202230838-ff82c1b0f217
google.golang.org/genproto/googleapis/rpc v0.0.0-20250728155136-f173205681a0 -> v0.0.0-20251222181119-0a764e51fe1b
google.golang.org/grpc v1.74.2 -> v1.78.0
google.golang.org/protobuf v1.36.6 -> v1.36.11

@renovate renovate bot force-pushed the renovate/google.golang.org-api-0.x branch from 016ff6d to 1c7c723 Compare December 18, 2025 23:07
@renovate renovate bot changed the title chore(deps): update module google.golang.org/api to v0.257.0 chore(deps): update module google.golang.org/api to v0.258.0 Dec 18, 2025
@renovate renovate bot force-pushed the renovate/google.golang.org-api-0.x branch from 1c7c723 to 1fa73f3 Compare January 6, 2026 22:48
@renovate renovate bot changed the title chore(deps): update module google.golang.org/api to v0.258.0 chore(deps): update module google.golang.org/api to v0.259.0 Jan 6, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code minor

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant