chore(all): update deps (preview)

[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
google.golang.org/api	v0.276.0 → v0.278.0			require	minor
google.golang.org/genproto/googleapis/api	e10c466 → 60b97b3			require	digest
google.golang.org/grpc	v1.80.0 → v1.81.0			require	minor

---

Release Notes

googleapis/google-api-go-client (google.golang.org/api)

v0.278.0

Compare Source

Features

• all: Auto-regenerate discovery clients (#​3582) (76b1187)
• all: Auto-regenerate discovery clients (#​3584) (e36c883)

v0.277.0

Compare Source

Features

• all: Auto-regenerate discovery clients (#​3567) (3958295)
• all: Auto-regenerate discovery clients (#​3571) (ca9851e)
• all: Auto-regenerate discovery clients (#​3574) (8efb1af)
• all: Auto-regenerate discovery clients (#​3575) (de49bb5)
• all: Auto-regenerate discovery clients (#​3577) (ce68c87)
• all: Auto-regenerate discovery clients (#​3578) (8be033e)
• all: Auto-regenerate discovery clients (#​3579) (bc6990e)
• all: Auto-regenerate discovery clients (#​3580) (2de1a5a)
• all: Auto-regenerate discovery clients (#​3581) (0c219d9)

Bug Fixes

• idtoken: Avoid double impersonation in tokenSourceFromBytes (#​3576) (75172cf), refs #​2301

grpc/grpc-go (google.golang.org/grpc)

v1.81.0: Release 1.81.0

Compare Source

Behavior Changes

• balancer/rls: Switch gauge metrics to asynchronous emission (once per collection cycle) to reduce telemetry noise and align with other gRPC language implementations. (#​8808)

Dependencies

• Minimum supported Go version is now 1.25. (#​8969)

Bug Fixes

• xds: Use the leaf cluster's security config for the TLS handshake instead of the aggregate cluster's config. (#​8956)
• transport: Send a RST_STREAM when receiving an END_STREAM when the stream is not already half-closed. (#​8832)
• xds: Fix ADS resource name validation to prevent a panic. (#​8970)

New Features

• grpc/stats: Add support for custom labels in per-call metrics (gRFC A108). (#​9008)
• xds: Add support for Server Name Indication (SNI) and SAN validation (gRFC A101). Disabled by default. To enable, set GRPC_EXPERIMENTAL_XDS_SNI=true environment variable. (#​9016)
• xds: Add support to control which fields get propagated from ORCA backend metric reports to LRS load reports (gRFC A85). Disabled by default. To enable, set GRPC_EXPERIMENTAL_XDS_ORCA_LRS_PROPAGATION=true. (#​9005)
• xds: Add metrics to track xDS client connectivity and cached resource state (gRFC A78). (#​8807)
• stats/otel: Enhance grpc.subchannel.disconnections metric by adding disconnection reason to the grpc.disconnect_error label (gRFC A94). This provides granular insights into why subchannels are closing. (#​8973)
• mem: Add mem.Buffer.Slice() API to slice the buffer like a slice. (#​8977)
  • Special Thanks: @​ash2k

Performance Improvements

• alts: Pool read buffers to lower memory utilization when sockets are unreadable. (#​8964)
• transport: Pool HTTP/2 framer read buffers to reduce idle memory consumption. Currently limited to Linux for ALTS and non-encrypted transports (TCP, Unix). To disable, set GRPC_GO_EXPERIMENTAL_HTTP_FRAMER_READ_BUFFER_POOLING=false and report any issues. (#​9032)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[forking-renovate]

ℹ️ Artifact update notice

File name: compute/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 6 additional dependencies were updated

Details:

Package	Change
github.com/googleapis/enterprise-certificate-proxy	v0.3.14 -> v0.3.15
golang.org/x/crypto	v0.49.0 -> v0.50.0
golang.org/x/net	v0.52.0 -> v0.53.0
golang.org/x/sys	v0.42.0 -> v0.43.0
golang.org/x/text	v0.35.0 -> v0.36.0
google.golang.org/genproto/googleapis/rpc	v0.0.0-20260414002931-afd174a4e478 -> v0.0.0-20260427160629-7cedc36a6bc4

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 7 additional dependencies were updated

Details:

Package	Change
github.com/googleapis/enterprise-certificate-proxy	v0.3.14 -> v0.3.15
github.com/googleapis/gax-go/v2	v2.21.0 -> v2.22.0
golang.org/x/crypto	v0.49.0 -> v0.50.0
golang.org/x/net	v0.52.0 -> v0.53.0
golang.org/x/sys	v0.42.0 -> v0.43.0
golang.org/x/text	v0.35.0 -> v0.36.0
google.golang.org/genproto/googleapis/rpc	v0.0.0-20260401024825-9d38bb4040a9 -> v0.0.0-20260427160629-7cedc36a6bc4

[gemini-code-assist]

Code Review

This pull request updates several Go dependencies, including upgrading google.golang.org/api to v0.277.0 and refreshing various golang.org/x packages in both the root and compute modules. The reviewer identified version mismatches within the genproto suite and inconsistencies between the modules, suggesting that these dependencies be synchronized and that go mod tidy be executed to maintain project-wide consistency.

[gemini-code-assist]

The version of google.golang.org/genproto/googleapis/api is being updated to 20260427160629-7cedc36a6bc4, but the base google.golang.org/genproto package (line 9) remains at the older version 20260319201613-d00831a3d3e7. While these future-dated pseudo-versions are valid, it is recommended to keep all genproto related packages on the same version/commit to ensure compatibility and avoid potential issues with shared types.

References

1. Go pseudo-versions with future dates are valid and should not be flagged as non-existent dependencies.

[gemini-code-assist]

The google.golang.org/genproto/googleapis/rpc package is updated to version 20260427160629-7cedc36a6bc4, but google.golang.org/genproto/googleapis/api in the root go.sum remains at 20260319201613-d00831a3d3e7. This is inconsistent with the compute module where both are updated to the newer version. Running go mod tidy in the root directory should bring these into sync across the project. Note that these future-dated pseudo-versions are valid; the concern is project-wide consistency.

References

1. Go pseudo-versions with future dates are valid and should not be flagged as non-existent dependencies.