chore(all): update deps

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
bazel		minor	8.6.0 → 8.7.0
gazelle	bazel_dep	minor	0.48.0 → 0.51.0
github.com/protocolbuffers/txtpbfmt	require	digest	a481f6a → c39628b
go (source)	toolchain	patch	1.26.1 → 1.26.3
golang (source)		patch	1.26.1 → 1.26.3
golang.org/x/crypto	require	minor	v0.49.0 → v0.52.0
golang.org/x/net	require	minor	v0.52.0 → v0.55.0
google.golang.org/grpc	require	minor	v1.79.3 → v1.81.1
google.golang.org/grpc/cmd/protoc-gen-go-grpc	require	patch	v1.6.1 → v1.6.2

---

Release Notes

bazelbuild/bazel (bazel)

v8.7.0

Compare Source

Release Notes:

bazel-contrib/bazel-gazelle (gazelle)

v0.51.0

What's Changed

• go_deps: allow inheriting host env vars by @​sluongng in #​2328
• fix(language/go): use rules_go apparent name in proto compilers by @​rdesgroppes in #​2326
• Move and forward basic packages to v2 by @​jayconrod in #​2311
• Respect caller GOAUTH when building content by @​yabberyabber in #​2335
• fix: make language agnostic kinds generic by @​jbedard in #​2053
• go_deps: don't declare use_repo dependency on module from go.work by @​jayconrod in #​2337
• Allow placement of go.work in a nested (non-root) package by @​kberezin-nshl in #​2333
• Prefer @​repo over @​repo//:repo by @​gg-sr in #​2343

New Contributors

• @​rdesgroppes made their first contribution in #​2326
• @​yabberyabber made their first contribution in #​2335
• @​kberezin-nshl made their first contribution in #​2333
• @​gg-sr made their first contribution in #​2343

Full Changelog: bazel-contrib/bazel-gazelle@v0.50.0...v0.51.0

v0.50.0

What's Changed

• Revert "go_deps: allow local module replacements, with a flag (#​2317)" by @​jayconrod in #​2321
• go_repository_tools: build with -buildvcs=false by @​jayconrod in #​2324
• go_deps: don't print version mismatch messages for go.work modules by @​jayconrod in #​2325

Full Changelog: bazel-contrib/bazel-gazelle@v0.49.0...v0.50.0

v0.49.0

What's Changed

• go_deps: allow local module replacements, with a flag by @​jayconrod in #​2317
• MODULE.bazel: load dependencies from go.work instead of go.mod by @​jayconrod in #​2320
• Add a directive_file directive by @​shs96c in #​2314

Full Changelog: bazel-contrib/bazel-gazelle@v0.48.0...v0.49.0

golang/go (go)

v1.26.3

v1.26.2

grpc/grpc-go (google.golang.org/grpc)

v1.81.1: Release 1.81.1

Compare Source

Security

• xds/rbac: Fix a potential authorization bypass caused by incorrectly falling through URI/DNS SANs to Subject Distinguished Name (DN) when matching the authenticated principal name. With this fix, only the first non-empty identity source will be used, as per gRFC A41. (#​9111)
  • Special Thanks: @​al4an444

v1.81.0: Release 1.81.0

Compare Source

Behavior Changes

• balancer/rls: Switch gauge metrics to asynchronous emission (once per collection cycle) to reduce telemetry noise and align with other gRPC language implementations. (#​8808)

Dependencies

• Minimum supported Go version is now 1.25. (#​8969)

Bug Fixes

• xds: Use the leaf cluster's security config for the TLS handshake instead of the aggregate cluster's config. (#​8956)
• transport: Send a RST_STREAM when receiving an END_STREAM when the stream is not already half-closed. (#​8832)
• xds: Fix ADS resource name validation to prevent a panic. (#​8970)

New Features

• grpc/stats: Add support for custom labels in per-call metrics (gRFC A108). (#​9008)
• xds: Add support for Server Name Indication (SNI) and SAN validation (gRFC A101). Disabled by default. To enable, set GRPC_EXPERIMENTAL_XDS_SNI=true environment variable. (#​9016)
• xds: Add support to control which fields get propagated from ORCA backend metric reports to LRS load reports (gRFC A85). Disabled by default. To enable, set GRPC_EXPERIMENTAL_XDS_ORCA_LRS_PROPAGATION=true. (#​9005)
• xds: Add metrics to track xDS client connectivity and cached resource state (gRFC A78). (#​8807)
• stats/otel: Enhance grpc.subchannel.disconnections metric by adding disconnection reason to the grpc.disconnect_error label (gRFC A94). This provides granular insights into why subchannels are closing. (#​8973)
• mem: Add mem.Buffer.Slice() API to slice the buffer like a slice. (#​8977)
  • Special Thanks: @​ash2k

Performance Improvements

• alts: Pool read buffers to lower memory utilization when sockets are unreadable. (#​8964)
• transport: Pool HTTP/2 framer read buffers to reduce idle memory consumption. Currently limited to Linux for ALTS and non-encrypted transports (TCP, Unix). To disable, set GRPC_GO_EXPERIMENTAL_HTTP_FRAMER_READ_BUFFER_POOLING=false and report any issues. (#​9032)

v1.80.0

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Monday through Friday (* * * * 1-5)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[forking-renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 4 additional dependencies were updated

Details:

Package	Change
golang.org/x/sys	v0.42.0 -> v0.45.0
golang.org/x/term	v0.41.0 -> v0.43.0
golang.org/x/text	v0.35.0 -> v0.37.0
google.golang.org/genproto/googleapis/rpc	v0.0.0-20251202230838-ff82c1b0f217 -> v0.0.0-20260226221140-a57be14db171