Skip to content

CLOUD-727: Bump google.golang.org/grpc from 1.81.0 to 1.81.1#1602

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/google.golang.org/grpc-1.81.1
Closed

CLOUD-727: Bump google.golang.org/grpc from 1.81.0 to 1.81.1#1602
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/google.golang.org/grpc-1.81.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 19, 2026

Copy link
Copy Markdown
Contributor

Bumps google.golang.org/grpc from 1.81.0 to 1.81.1.

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.81.1

Security

  • xds/rbac: Fix a potential authorization bypass caused by incorrectly falling through URI/DNS SANs to Subject Distinguished Name (DN) when matching the authenticated principal name. With this fix, only the first non-empty identity source will be used, as per gRFC A41. (#9111)

Bug Fixes

  • otel: Segregate client and server RPC information used for metrics and traces, to avoid one overwriting the other. (#9081)
Commits

@dependabot dependabot Bot force-pushed the dependabot/go_modules/google.golang.org/grpc-1.81.1 branch 2 times, most recently from bca8bcd to 495734e Compare June 4, 2026 09:44
@dependabot dependabot Bot force-pushed the dependabot/go_modules/google.golang.org/grpc-1.81.1 branch 3 times, most recently from 43e84b2 to 947ab88 Compare June 9, 2026 16:42
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.81.0 to 1.81.1.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.81.0...v1.81.1)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.81.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/go_modules/google.golang.org/grpc-1.81.1 branch from 947ab88 to ee27b19 Compare June 9, 2026 17:23
@dependabot @github

dependabot Bot commented on behalf of github Jun 9, 2026

Copy link
Copy Markdown
Contributor Author

Looks like google.golang.org/grpc is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Jun 9, 2026
@dependabot dependabot Bot deleted the dependabot/go_modules/google.golang.org/grpc-1.81.1 branch June 9, 2026 17:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants