[chore] : Bump the go group across 1 directory with 4 updates by dependabot[bot] · Pull Request #371 · hashicorp/go-plugin

dependabot · 2026-01-25T15:52:36Z

Added lint fix by changing grpc.Dial to grpc.NewClient. The changes were verified with unit test cases

Bumps the go group with 2 updates in the / directory: github.com/jhump/protoreflect and github.com/oklog/run.

Updates github.com/jhump/protoreflect from 1.17.0 to 1.18.0

Release notes

Sourced from github.com/jhump/protoreflect's releases.

v1.18.0

This is expected to be the final release of this module with a v1.x version. (All subsequent releases are expected to be v2.x.)

The main change here is to insulate users from any future backwards-incompatible changes in bufbuild/protocompile. Previous releases (between 1.15 and 1.17, inclusive) depended on this module, but it hasn't yet released a stable v1.0 version, so it has occasionally been a turbulent dependency. More breaking changes are expected since it is expected to get a totally new compiler and API before it reaches v1.0. So anyone still using v1 of this repo should update to this new release before then to avoid being broken when that happens.

"github.com/jhump/protoreflect/desc/builder"

Changes/fixes:

If resolving custom options and extensions resulted in a generated extension description created by the older v1 of protoc-gen-go, a nil-dereference panic could occur. This has been fixed. Instead, the legacy extension that would otherwise have caused a panic will now either be ignored or, if BuilderOptions.RequireInterpretedOptions is set to true, result in an error that not all options could be interpreted.

The older v1 has import path "github.com/golang/protobuf/protoc-gen-go". It was replaced in 2020 by the v2, which is at path "google.golang.org/protobuf/cmd/protoc-gen-go".

"github.com/jhump/protoreflect/desc/protoparse"

Changes/fixes:

The internal compiler no longer comes from a separate Go module. Instead, this module now contains a fork of bufbuild/protocompile, which will maintain stability even when the upstream repo diverges with unstable/breaking changes. The only user-visible changes would be related to Editions support, thanks to unreleased changes in upstream that were included in this repo's fork. (See more below.)

Additions:

This adds a field named AllowExperimentalEditions to the protoparse.Parser struct. When set to true, the parser will accept and return descriptors for files that use Edition 2024 (the only experimental edition at this time). It is experimental because it does not implement all of the rules and semantics of Edition 2024. But it does provide the ability to parse and compile files that include new language features in Edition 2024, such as visibility modifiers (export and local) as well as the option import modifier.

"github.com/jhump/protoreflect/desc/protoprint"

Changes/fixes:

If resolving custom options and extensions resulted in a generated extension description created by the older v1 of protoc-gen-go, a nil-dereference panic could occur. This has been fixed. Instead, the legacy extension that would otherwise have caused a panic is ignored and will not be included in the printed output (since it would result in an invalid source file that could not be compiled).

Commits

19645dd Add a test case to make sure experimental Edition 2024 support is usable (#648)
3297f00 Fixes for one last (🤞) v1 release (#646)
225aff8 Update README to mention purpose of this branch (#625)
9d27593 update to same CI config as main (v2) (#624)
8f5fd1d share source code info store w/ v2
See full diff in compare view

Updates github.com/oklog/run from 1.1.0 to 1.2.0

Release notes

Sourced from github.com/oklog/run's releases.

v1.2.0

This long-overdue release includes correctness fixes to the SignalHandler helper, and a new ContextHandler helper. The minimum Go version in the go.mod file has been bumped from 1.13 to 1.20. As always, please test with your code before deploying to production, and file issues for any problems you encounter.

What's Changed

Deregister signal channel by @alindeman in oklog/run#16

SignalError fixes, ContextHandler by @peterbourgon in oklog/run#25

Fix bug in SignalHandler by @peterbourgon in oklog/run#27

Update GitHub Actions test.yaml workflow by @peterbourgon in oklog/run#38

New Contributors

@alindeman made their first contribution in oklog/run#16

Full Changelog: oklog/run@v1.1.0...v1.2.0

Commits

c769e58 Update GitHub Actions test.yaml workflow (#38)
eee6e04 Fix bug in SignalHandler (#27)
145e764 Update README.md
df79bd8 Update README.md
f5dcbf4 Update test.yaml
daf88ed SignalError fixes, ContextHandler (#25)
c709688 Deregister signal channel (#16)
0c58000 LICENSE: properly date/attribute
See full diff in compare view

Updates google.golang.org/grpc from 1.61.0 to 1.66.2

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.66.2

Dependencies

Remove unintentional dependency on the testing package (#7579)

Remove unintentional dependency on the flate package (#7595)

Special Thanks: @ash2k

Bug Fixes

client: fix a bug that prevented memory reuse after handling unary RPCs (#7571)

Special Thanks: @coxley

Release 1.66.0

New Features

metadata: stabilize ValueFromIncomingContext (#7368)

Special Thanks: @KarthikReddyPuli

client: stabilize the WaitForStateChange and GetState methods, which were previously experimental. (#7425)

xds: Implement ADS flow control mechanism (#7458)

See grpc/grpc#34099 for context.

balancer/rls: Add metrics for data cache and picker internals (#7484, #7495)

xds: LRS load reports now include the total_issued_requests field. (#7544)

Bug Fixes

grpc: Clients now return status code INTERNAL instead of UNIMPLEMENTED when the server uses an unsupported compressor. This is consistent with the gRPC compression spec. (#7461)

Special Thanks: @Gayathri625

transport: Fix a bug which could result in writes busy looping when the underlying conn.Write returns errors (#7394)

Special Thanks: @veshij

client: fix race that could lead to orphaned connections and associated resources. (#7390)

xds: use locality from the connected address for load reporting with pick_first (#7378)

without this fix, if a priority contains multiple localities with pick_first, load was reported for the wrong locality

client: prevent hanging during ClientConn.Close() when the network is unreachable (#7540)

Performance Improvements

transport: double buffering is avoided when using an http connect proxy and the target server waits for client to send the first message. (#7424)

codec: Implement a new Codec which uses buffer recycling for encoded message (#7356)

introduce a mem package to facilitate buffer reuse (#7432)

Special Thanks: @PapaCharlie

Release 1.65.1

Bug Fixes

xds/server: Fix xDS Server memory leak. (grpc/grpc-go#7664)

Release 1.65.0

Dependencies

Change support policy to cover only the latest TWO releases of Go, matching the policy for Go itself. See #7249 for more information. (#7250)

... (truncated)

Commits

d0bf90a Change version to 1.66.2 (#7620)
c84da66 Cherry pick #7595 to v1.66.x release branch (#7621)
12487c8 Cherry pick #7571 and #7579 to v1.66.x release branch (#7616)
7185cf4 Change to version 1.66.2-dev (#7615)
cb81df6 Change to patch release 1.66.1 (#7603)
ecb3e1a Change version to 1.66.1-dev (#7519)
00d3ec8 Change version to 1.66.0 (#7518)
973e3dc xdsclient: Populate total_issued_requests count in LRS load reports (#7544) (...
8e3596c cherry-pick #7557 to v1.66.x branch (#7564)
62baa5f cherry-pick #7356 to v1.66.x branch (#7546)
Additional commits viewable in compare view

Updates google.golang.org/protobuf from 1.36.6 to 1.36.11

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go group with 2 updates in the / directory: [github.com/jhump/protoreflect](https://github.com/jhump/protoreflect) and [github.com/oklog/run](https://github.com/oklog/run). Updates `github.com/jhump/protoreflect` from 1.17.0 to 1.18.0 - [Release notes](https://github.com/jhump/protoreflect/releases) - [Commits](jhump/protoreflect@v1.17.0...v1.18.0) Updates `github.com/oklog/run` from 1.1.0 to 1.2.0 - [Release notes](https://github.com/oklog/run/releases) - [Commits](oklog/run@v1.1.0...v1.2.0) Updates `google.golang.org/grpc` from 1.61.0 to 1.66.2 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.61.0...v1.66.2) Updates `google.golang.org/protobuf` from 1.36.6 to 1.36.11 --- updated-dependencies: - dependency-name: github.com/jhump/protoreflect dependency-version: 1.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/oklog/run dependency-version: 1.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: google.golang.org/grpc dependency-version: 1.66.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: google.golang.org/protobuf dependency-version: 1.36.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go ... Signed-off-by: dependabot[bot] <support@github.com>

sonamtenzin2

Changed grpc.Dial to grpc.NewClient becuase of depreciation errors

sonamtenzin2 · 2026-01-30T09:29:25Z

grpc_client.go

 	// Connect. Note the first parameter is unused because we use a custom
 	// dialer that has the state to see the address.
-	conn, err := grpc.Dial("unused", opts...)
+	conn, err := grpc.NewClient("passthrough:///unused", opts...)


grpc.Dial is depreciated and it is recommended to use NewClient instead. Both the methods are pretty much similar based on the godocs, with only a minor difference described below.

NewClient requires passthrough:/// to be added in the address in order to let the custom dialer do its work. This is not required in Dial or DialContext because the passthrough parameter is already defined inside those methods

sonamtenzin2 · 2026-01-30T09:31:04Z

testing.go

-	conn, err := grpc.Dial(
+	conn, err := grpc.NewClient(
 		l.Addr().String(),
-		grpc.WithBlock(),


grpc.WithBlock() is not supported as a parameter for grpc.NewClient

sonamtenzin2 · 2026-01-30T09:41:58Z

testing.go

+		if !conn.WaitForStateChange(ctx, state) {
+			t.Fatalf("failed to establish connection, final state: %v", conn.GetState())
+		}
+	}


The NewClient has the property that it will stay idle unless a connection is explicitly established. conn.Connect() establishes this connection.

A new logic for blocking was added for it because otherwise the listener was closing before the connection was completed. The above logic is inspired by the existing code present in grpc library for Dial method. Although we have added a for loop, the code is not busy waiting because WaitForStateChange method is blocking in nature.

A better way will be to pass the listener as a parmeter in TestGRPCConn and then the listener should be closed later by the calling function. This will prevent the connection and waiting logic. But, the method has been used in other code bases as an external function so chose this approach

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jan 25, 2026

dependabot bot requested a review from a team as a code owner January 25, 2026 15:52

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jan 25, 2026

Changed from grpc.Dial to grpc.NewClient

e9b3d26

sonamtenzin2 force-pushed the dependabot/go_modules/go-0b56bd2ef3 branch from 55fb88c to e9b3d26 Compare January 30, 2026 09:27

sonamtenzin2 reviewed Jan 30, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[chore] : Bump the go group across 1 directory with 4 updates#371

[chore] : Bump the go group across 1 directory with 4 updates#371
dependabot[bot] wants to merge 2 commits intomainfrom
dependabot/go_modules/go-0b56bd2ef3

dependabot bot commented on behalf of github Jan 25, 2026 •

edited

Loading

Uh oh!

sonamtenzin2 left a comment

Uh oh!

sonamtenzin2 Jan 30, 2026

Uh oh!

sonamtenzin2 Jan 30, 2026

Uh oh!

sonamtenzin2 Jan 30, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot bot commented on behalf of github Jan 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.18.0

"github.com/jhump/protoreflect/desc/builder"

"github.com/jhump/protoreflect/desc/protoparse"

"github.com/jhump/protoreflect/desc/protoprint"

v1.2.0

What's Changed

New Contributors

Release 1.66.2

Dependencies

Bug Fixes

Release 1.66.0

New Features

Bug Fixes

Performance Improvements

Release 1.65.1

Bug Fixes

Release 1.65.0

Dependencies

Uh oh!

sonamtenzin2 left a comment

Choose a reason for hiding this comment

Uh oh!

sonamtenzin2 Jan 30, 2026

Choose a reason for hiding this comment

Uh oh!

sonamtenzin2 Jan 30, 2026

Choose a reason for hiding this comment

Uh oh!

sonamtenzin2 Jan 30, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Jan 25, 2026 •

edited

Loading