fix(deps): update module github.com/envoyproxy/go-control-plane to v0.14.0 - autoclosed

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/envoyproxy/go-control-plane	v0.12.0 → v0.14.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

envoyproxy/go-control-plane (github.com/envoyproxy/go-control-plane)

v0.14.0

Compare Source

What's Changed

• Fix go.sum for envoy module with repo released by @​valerian-roche in #​1081
• build(deps): Bump github/codeql-action from 3.27.9 to 3.28.1 by @​dependabot[bot] in #​1087
• build(deps): Bump actions/upload-artifact from 4.4.3 to 4.6.0 by @​dependabot[bot] in #​1086
• build(deps): Bump github.com/go-git/go-git/v5 from 5.12.0 to 5.13.0 in /internal/tools by @​dependabot[bot] in #​1090
• build(deps): Bump google.golang.org/protobuf from 1.36.1 to 1.36.2 in /xdsmatcher by @​dependabot[bot] in #​1084
• build(deps): Bump google.golang.org/grpc from 1.69.2 to 1.69.4 in /examples/dyplomat by @​dependabot[bot] in #​1085
• build(deps): Bump google.golang.org/grpc from 1.67.1 to 1.69.4 by @​dependabot[bot] in #​1089
• build(deps): Bump google.golang.org/protobuf from 1.35.2 to 1.36.3 by @​dependabot[bot] in #​1091
• build(deps): Bump google.golang.org/grpc from 1.69.4 to 1.70.0 in /examples/dyplomat by @​dependabot[bot] in #​1101
• build(deps): Bump google.golang.org/protobuf from 1.36.2 to 1.36.4 in /xdsmatcher by @​dependabot[bot] in #​1100
• build(deps): Bump github/codeql-action from 3.28.1 to 3.28.6 by @​dependabot[bot] in #​1099
• build(deps): Bump actions/stale from 9.0.0 to 9.1.0 by @​dependabot[bot] in #​1098
• build(deps): Bump golangci/golangci-lint-action from 6.1.1 to 6.2.0 by @​dependabot[bot] in #​1095
• build(deps): Bump golang.org/x/net from 0.32.0 to 0.33.0 in /examples/dyplomat by @​dependabot[bot] in #​1104
• build(deps): Bump google.golang.org/grpc from 1.69.4 to 1.70.0 by @​dependabot[bot] in #​1097
• build(deps): Bump golang.org/x/net from 0.30.0 to 0.33.0 by @​dependabot[bot] in #​1102
• build(deps): Bump google.golang.org/protobuf from 1.36.3 to 1.36.4 by @​dependabot[bot] in #​1096
• build(deps): Bump golang.org/x/net from 0.28.0 to 0.33.0 in /ratelimit by @​dependabot[bot] in #​1103
• chore: use testify instead of t.Fatal or t.Error by @​mmorel-35 in #​1040
• [chore]: enable perfsprint linter by @​mmorel-35 in #​1039
• fix: define custom build for codeql workflow by @​mmorel-35 in #​1105
• chore: setup dependabot for internal/tools by @​mmorel-35 in #​1106
• build(deps): Bump github.com/golangci/golangci-lint from 1.62.2 to 1.63.4 in /internal/tools by @​dependabot[bot] in #​1107
• build(deps): Bump go.opentelemetry.io/build-tools/multimod from 0.15.0 to 0.17.0 in /internal/tools by @​dependabot[bot] in #​1108
• chore: setup dependabot for new sub-modules by @​mmorel-35 in #​1110
• build(deps): Bump google.golang.org/grpc from 1.67.1 to 1.70.0 in /envoy by @​dependabot[bot] in #​1120
• build(deps): Bump google.golang.org/protobuf from 1.35.2 to 1.36.4 in /ratelimit by @​dependabot[bot] in #​1116
• build(deps): Bump google.golang.org/protobuf from 1.35.2 to 1.36.4 in /contrib by @​dependabot[bot] in #​1112
• build(deps): Bump github.com/envoyproxy/protoc-gen-validate from 1.1.0 to 1.2.1 in /envoy by @​dependabot[bot] in #​1118
• build(deps): Bump google.golang.org/protobuf from 1.35.2 to 1.36.4 in /envoy by @​dependabot[bot] in #​1115
• build(deps): Bump github.com/prometheus/client_model from 0.6.0 to 0.6.1 in /envoy by @​dependabot[bot] in #​1119
• build(deps): Bump github/codeql-action from 3.28.6 to 3.28.8 by @​dependabot[bot] in #​1122
• build(deps): Bump google.golang.org/protobuf from 1.36.4 to 1.36.5 in /xdsmatcher by @​dependabot[bot] in #​1130
• build(deps): Bump google.golang.org/protobuf from 1.36.4 to 1.36.5 in /contrib by @​dependabot[bot] in #​1129
• build(deps): Bump go.opentelemetry.io/build-tools/multimod from 0.17.0 to 0.18.0 in /internal/tools by @​dependabot[bot] in #​1127
• build(deps): Bump golangci/golangci-lint-action from 6.2.0 to 6.3.2 by @​dependabot[bot] in #​1125
• build(deps): Bump github/codeql-action from 3.28.8 to 3.28.9 by @​dependabot[bot] in #​1124
• build(deps): Bump google.golang.org/protobuf from 1.36.4 to 1.36.5 by @​dependabot[bot] in #​1126
• build(deps): Bump go.opentelemetry.io/proto/otlp from 1.0.0 to 1.5.0 in /envoy by @​dependabot[bot] in #​1113
• build(deps): Bump google.golang.org/protobuf from 1.36.4 to 1.36.5 in /ratelimit by @​dependabot[bot] in #​1131
• build(deps): Bump google.golang.org/protobuf from 1.36.4 to 1.36.5 in /envoy by @​dependabot[bot] in #​1128
• build(deps): Bump golangci/golangci-lint-action from 6.3.2 to 6.5.0 by @​dependabot[bot] in #​1135
• build(deps): Bump github.com/golangci/golangci-lint from 1.63.4 to 1.64.5 in /internal/tools by @​dependabot[bot] in #​1134
• deps: update go version from 1.22.0 to 1.23.0 by @​mmorel-35 in #​1132
• build(deps): Bump the k8s-io group across 1 directory with 2 updates by @​dependabot[bot] in #​1133
• build(deps): Bump sigs.k8s.io/aws-iam-authenticator from 0.6.12 to 0.6.30 in /examples/dyplomat by @​dependabot[bot] in #​1123
• build(deps): Bump actions/upload-artifact from 4.6.0 to 4.6.1 by @​dependabot[bot] in #​1138
• build(deps): Bump github/codeql-action from 3.28.9 to 3.28.10 by @​dependabot[bot] in #​1139
• build(deps): Bump ossf/scorecard-action from 2.4.0 to 2.4.1 by @​dependabot[bot] in #​1140
• build(deps): Bump github.com/google/go-cmp from 0.6.0 to 0.7.0 by @​dependabot[bot] in #​1141
• build(deps): Bump github.com/golangci/golangci-lint from 1.64.5 to 1.64.6 in /internal/tools by @​dependabot[bot] in #​1144
• build(deps): Bump go.opentelemetry.io/build-tools/multimod from 0.18.0 to 0.19.0 in /internal/tools by @​dependabot[bot] in #​1145
• build(deps): Bump google.golang.org/grpc from 1.70.0 to 1.71.0 in /examples/dyplomat by @​dependabot[bot] in #​1147
• build(deps): Bump google.golang.org/grpc from 1.70.0 to 1.71.0 by @​dependabot[bot] in #​1148
• build(deps): Bump go.opentelemetry.io/build-tools/multimod from 0.19.0 to 0.20.0 in /internal/tools by @​dependabot[bot] in #​1149
• build(deps): Bump google.golang.org/grpc from 1.70.0 to 1.71.0 in /contrib by @​dependabot[bot] in #​1151
• build(deps): Bump google.golang.org/grpc from 1.70.0 to 1.71.0 in /ratelimit by @​dependabot[bot] in #​1150
• build(deps): Bump github/codeql-action from 3.28.10 to 3.28.11 by @​dependabot[bot] in #​1153
• build(deps): Bump google.golang.org/grpc from 1.70.0 to 1.71.0 in /envoy by @​dependabot[bot] in #​1152
• dependabot: use directories by @​mmorel-35 in #​1154
• build(deps): Bump golang.org/x/net from 0.35.0 to 0.36.0 in /internal/tools by @​dependabot[bot] in #​1158
• build(deps): Bump golang.org/x/net from 0.34.0 to 0.36.0 by @​dependabot[bot] in #​1157
• build(deps): Bump golangci/golangci-lint-action from 6.5.0 to 6.5.2 by @​dependabot[bot] in #​1159
• build(deps): Bump github.com/golangci/golangci-lint from 1.64.6 to 1.64.8 in /internal/tools by @​dependabot[bot] in #​1160
• build(deps): Bump golang.org/x/net from 0.34.0 to 0.36.0 in /contrib by @​dependabot[bot] in #​1162
• chore: revert toolchain changes by @​mmorel-35 in #​1164
• build(deps): Bump the k8s-io group across 1 directory with 3 updates by @​dependabot[bot] in #​1163
• build(deps): Bump github.com/golangci/golangci-lint from 1.64.6 to 1.64.8 in /internal/tools by @​dependabot[bot] in #​1166
• build(deps): Bump actions/upload-artifact from 4.6.1 to 4.6.2 by @​dependabot[bot] in #​1165
• build(deps): Bump github/codeql-action from 3.28.11 to 3.28.13 by @​dependabot[bot] in #​1170
• build(deps): Bump google.golang.org/protobuf from 1.36.5 to 1.36.6 in /xdsmatcher by @​dependabot[bot] in #​1169
• build(deps): Bump google.golang.org/protobuf from 1.36.5 to 1.36.6 in /contrib by @​dependabot[bot] in #​1171
• build(deps): Bump google.golang.org/protobuf from 1.36.5 to 1.36.6 by @​dependabot[bot] in #​1168
• build(deps): Bump golangci/golangci-lint-action from 6.5.2 to 7.0.0 by @​dependabot[bot] in #​1167
• chore: clean up golangci-lint configuration by @​mmorel-35 in #​1174
• build(deps): Bump google.golang.org/grpc from 1.71.0 to 1.71.1 in /examples/dyplomat by @​dependabot[bot] in #​1181
• build(deps): Bump sigs.k8s.io/aws-iam-authenticator from 0.6.30 to 0.6.31 in /examples/dyplomat by @​dependabot[bot] in #​1179
• build(deps): Bump github/codeql-action from 3.28.13 to 3.28.15 by @​dependabot[bot] in #​1176
• build(deps): Bump google.golang.org/grpc from 1.71.0 to 1.71.1 in /contrib by @​dependabot[bot] in #​1178
• build(deps): Bump google.golang.org/grpc from 1.71.0 to 1.71.1 by @​dependabot[bot] in #​1177
• Fix typo in go-control-plane readme by @​asiawildboar in #​1183
• build(deps): Bump github.com/prometheus/client_model from 0.6.1 to 0.6.2 in /envoy by @​dependabot[bot] in #​1184
• build(deps): Bump github.com/golangci/golangci-lint/v2 from 2.0.2 to 2.1.1 in /internal/tools by @​dependabot[bot] in #​1185
• build(deps): Bump go.opentelemetry.io/build-tools/multimod from 0.20.0 to 0.22.0 in /internal/tools by @​dependabot[bot] in #​1186
• build(deps): Bump golang.org/x/net from 0.36.0 to 0.38.0 in /examples/dyplomat by @​dependabot[bot] in #​1187
• build(deps): Bump golang.org/x/net from 0.36.0 to 0.38.0 in /contrib by @​dependabot[bot] in #​1188
• build(deps): Bump golang.org/x/net from 0.36.0 to 0.38.0 by @​mmorel-35 in #​1189
• build(deps): Bump github.com/golangci/golangci-lint/v2 from 2.1.1 to 2.1.2 in /internal/tools by @​dependabot[bot] in #​1190
• build(deps): Bump google.golang.org/grpc from 1.71.1 to 1.72.0 by @​dependabot[bot] in #​1193
• build(deps): Bump github/codeql-action from 3.28.15 to 3.28.16 by @​dependabot[bot] in #​1200
• build(deps): Bump github.com/golangci/golangci-lint/v2 from 2.1.2 to 2.1.5 in /internal/tools by @​dependabot[bot] in #​1201
• build(deps): Bump golangci/golangci-lint-action from 7.0.0 to 8.0.0 by @​dependabot[bot] in #​1204
• build(deps): Bump github/codeql-action from 3.28.16 to 3.28.17 by @​dependabot[bot] in #​1202
• build(deps): Bump go.opentelemetry.io/proto/otlp from 1.5.0 to 1.6.0 in /envoy by @​dependabot[bot] in #​1205
• build(deps): Bump github.com/golangci/golangci-lint/v2 from 2.1.5 to 2.1.6 in /internal/tools by @​dependabot[bot] in #​1207
• build(deps): Bump go.opentelemetry.io/build-tools/multimod from 0.22.0 to 0.23.1 in /internal/tools by @​dependabot[bot] in #​1206
• build(deps): Bump github/codeql-action from 3.28.17 to 3.28.18 by @​dependabot[bot] in #​1209
• build(deps): Bump google.golang.org/grpc from 1.72.0 to 1.72.1 in /contrib by @​dependabot[bot] in #​1213
• build(deps): Bump google.golang.org/grpc from 1.72.0 to 1.72.1 in /examples/dyplomat by @​dependabot[bot] in #​1214
• build(deps): Bump google.golang.org/grpc from 1.72.0 to 1.72.1 by @​dependabot[bot] in #​1210
• build(deps): Bump google.golang.org/grpc from 1.72.1 to 1.72.2 in /examples/dyplomat by @​dependabot[bot] in #​1219
• build(deps): Bump google.golang.org/grpc from 1.72.1 to 1.72.2 in /contrib by @​dependabot[bot] in #​1217
• build(deps): Bump google.golang.org/grpc from 1.72.1 to 1.72.2 by @​dependabot[bot] in #​1216
• build(deps): Bump google.golang.org/grpc from 1.72.1 to 1.72.2 in /envoy by @​dependabot[bot] in #​1218
• build(deps): Bump ossf/scorecard-action from 2.4.1 to 2.4.2 by @​dependabot[bot] in #​1221
• build(deps): Bump go.opentelemetry.io/proto/otlp from 1.6.0 to 1.7.0 in /envoy by @​dependabot[bot] in #​1222
• build(deps): Bump github/codeql-action from 3.28.18 to 3.28.19 by @​dependabot[bot] in #​1224
• build(deps): Bump google.golang.org/grpc from 1.72.2 to 1.73.0 by @​dependabot[bot] in #​1227
• build(deps): Bump github/codeql-action from 3.28.19 to 3.29.0 by @​dependabot[bot] in #​1234
• update ratelimit config api by @​zhaohuabing in #​1223
• build(deps): Bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 in /internal/tools by @​dependabot[bot] in #​1237
• build(deps): Bump github/codeql-action from 3.29.0 to 3.29.2 by @​dependabot[bot] in #​1238
• build(deps): Bump github.com/golangci/golangci-lint/v2 from 2.1.6 to 2.2.1 in /internal/tools by @​dependabot[bot] in #​1239
• build(deps): Bump go.opentelemetry.io/build-tools/multimod from 0.23.1 to 0.24.0 in /internal/tools by @​dependabot[bot] in #​1240
• build(deps): Bump github.com/golangci/golangci-lint/v2 from 2.2.1 to 2.2.2 in /internal/tools by @​dependabot[bot] in #​1241
• build(deps): Bump github/codeql-action from 3.29.2 to 3.29.3 by @​dependabot[bot] in #​1243
• build(deps): Bump github.com/golangci/golangci-lint/v2 from 2.2.2 to 2.3.1 in /internal/tools by @​dependabot[bot] in #​1249
• build(deps): Bump google.golang.org/grpc from 1.73.0 to 1.74.2 by @​dependabot[bot] in #​1246
• build(deps): Bump github/codeql-action from 3.29.3 to 3.29.5 by @​dependabot[bot] in #​1255
• build(deps): Bump go.opentelemetry.io/build-tools/multimod from 0.24.0 to 0.26.0 in /internal/tools by @​dependabot[bot] in #​1250
• build(deps): Bump go.opentelemetry.io/proto/otlp from 1.7.0 to 1.7.1 in /envoy by @​dependabot[bot] in #​1256
• ignore var-naming on pkg/cache/types by @​mmorel-35 in #​1254
• build(deps): Bump github/codeql-action from 3.29.7 to 3.29.8 by @​dependabot[bot] in #​1257
• build(deps): Bump google.golang.org/protobuf from 1.36.6 to 1.36.7 by @​dependabot[bot] in #​1258
• build(deps): Bump actions/checkout from 4.2.2 to 5.0.0 by @​dependabot[bot] in #​1261
• build(deps): Bump go.opentelemetry.io/build-tools/multimod from 0.26.0 to 0.26.1 in /internal/tools by @​dependabot[bot] in #​1263
• Release Envoy 1.34.4 by @​nezdolik in #​1244
• build(deps): Bump github/codeql-action from 3.29.8 to 3.30.5 by @​dependabot[bot] in #​1297
• build(deps): Bump actions/stale from 9.1.0 to 10.0.0 by @​dependabot[bot] in #​1283
• build(deps): Bump github.com/stretchr/testify from 1.10.0 to 1.11.1 in /xdsmatcher by @​dependabot[bot] in #​1279
• build(deps): Bump github.com/stretchr/testify from 1.10.0 to 1.11.1 by @​dependabot[bot] in #​1280
• build(deps): Bump google.golang.org/grpc from 1.74.2 to 1.75.1 in /examples/dyplomat by @​dependabot[bot] in #​1290
• build(deps): Bump google.golang.org/grpc from 1.74.2 to 1.75.1 in /contrib by @​dependabot[bot] in #​1288
• build(deps): Bump google.golang.org/grpc from 1.74.2 to 1.75.1 by @​dependabot[bot] in #​1287
• build(deps): Bump google.golang.org/grpc from 1.74.2 to 1.75.1 in /ratelimit by @​dependabot[bot] in #​1292
• build(deps): Bump google.golang.org/grpc from 1.74.2 to 1.75.1 in /envoy by @​dependabot[bot] in #​1289
• [sotw][linear] Fix missing watch cleanup in linear cache for sotw watches subscribing to multiple resources by @​valerian-roche in #​1298
• [sotw][issue-540] Return full state when applicable for watches in linear cache by @​valerian-roche in #​1299
• build(deps): Bump github/codeql-action from 3.30.5 to 3.30.6 by @​dependabot[bot] in #​1302
• build(deps): Bump actions/stale from 10.0.0 to 10.1.0 by @​dependabot[bot] in #​1303
• build(deps): Bump ossf/scorecard-action from 2.4.2 to 2.4.3 by @​dependabot[bot] in #​1304
• build(deps): Bump google.golang.org/protobuf from 1.36.7 to 1.36.10 in /contrib by @​dependabot[bot] in #​1307
• build(deps): Bump google.golang.org/protobuf from 1.36.7 to 1.36.10 in /xdsmatcher by @​dependabot[bot] in #​1315
• build(deps): Bump google.golang.org/protobuf from 1.36.7 to 1.36.10 by @​dependabot[bot] in #​1306
• [server][cache] Ensure subscription is properly updated for sotw and delta by @​valerian-roche in #​1300
• [Sotw][Linear cache] Ensure watches are properly considering subscription changes to not miss new resources by @​valerian-roche in #​1301
• build(deps): Bump github/codeql-action from 3.30.6 to 4.30.8 by @​dependabot[bot] in #​1317
• [Simple] Fix request/response loop if a non-wildcard request points to a resource not currently in the cache by @​valerian-roche in #​1319
• [Linear cache] rework watches and storage in the cache to make code more common between delta and sotw by @​valerian-roche in #​1320
• [Linear cache] Increase mutualization between delta and sotw in linear cache to have behavior driven logic instead by @​valerian-roche in #​1322
• [Linear] Ensure a resource is only serialized/hashed at most once to reply it by @​valerian-roche in #​1324
• build(deps): Bump github/codeql-action from 4.30.8 to 4.31.0 by @​dependabot[bot] in #​1327
• build(deps): Bump actions/upload-artifact from 4.6.2 to 5.0.0 by @​dependabot[bot] in #​1328
• Implements Fetch in MuxCache by @​davinci26 in #​1326
• build(deps): Bump github/codeql-action from 4.31.0 to 4.31.2 by @​dependabot[bot] in #​1330
• options to deactivate legacy wildcard by @​zhiyanfoo in #​1323
• Release go-control-plane v0.14.0 by @​valerian-roche in #​1333

New Contributors

• @​asiawildboar made their first contribution in #​1183
• @​nezdolik made their first contribution in #​1244
• @​davinci26 made their first contribution in #​1326

Full Changelog: envoyproxy/go-control-plane@v0.13.4...v0.14.0

v0.13.4

Compare Source

What's Changed

• build(deps): Bump google.golang.org/grpc from 1.67.1 to 1.69.2 in /examples/dyplomat by @​dependabot in #​1071
• build(deps): Bump golang.org/x/crypto from 0.29.0 to 0.31.0 in /internal/tools by @​dependabot in #​1067
• build(deps): Bump github/codeql-action from 3.27.6 to 3.27.9 by @​dependabot in #​1065
• build(deps): Bump google.golang.org/protobuf from 1.35.2 to 1.36.1 in /xdsmatcher by @​dependabot in #​1068
• deps: Remove Go minor version from go.mods by @​mmorel-35 in #​1078
• #​1074: Add imports of previous root package in new subpackages to avoid dependency upgrade issues. by @​valerian-roche in #​1075

Full Changelog: envoyproxy/go-control-plane@v0.13.2...v0.13.4

v0.13.3

Compare Source

v0.13.2

Compare Source

New releasing model

The go-control-plane repository is now released as multiple independent packages:

• github.com/envoyproxy/go-control-plane (this release), including the core components such as cache and server
• github.com/envoyproxy/go-control-plane/envoy and github.com/envoyproxy/go-control-plane/contrib for envoy API go generated files
• github.com/envoyproxy/go-control-plane/ratelimit and github.com/envoyproxy/go-control-plane/xdsmatcher as independent components for specific use-cases

What's Changed

• clean up: use only goimports with golangci-lint by @​mmorel-35 in #​1030
• build(deps): Bump github/codeql-action from 3.26.6 to 3.27.0 by @​dependabot in #​1031
• build(deps): Bump actions/checkout from 4.1.6 to 4.2.2 by @​dependabot in #​1032
• build(deps): Bump actions/upload-artifact from 4.4.0 to 4.4.3 by @​dependabot in #​1024
• build(deps): Bump golangci/golangci-lint-action from 6.1.0 to 6.1.1 by @​dependabot in #​1019
• Fix panic in case the resourceType is not know by the caches by @​alandiegosantos in #​1036
• build(deps): Bump golang from 1.21 to 1.22 by @​dependabot in #​879
• build(deps): Bump google.golang.org/grpc from 1.65.0 to 1.67.1 in /examples/dyplomat by @​dependabot in #​1018
• build(deps): Bump google.golang.org/protobuf from 1.34.2 to 1.35.2 in /xdsmatcher by @​dependabot in #​1048
• build(deps): Bump github/codeql-action from 3.27.0 to 3.27.4 by @​dependabot in #​1047
• build(deps): Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 in /xdsmatcher by @​dependabot in #​1054
• build(deps): Bump github/codeql-action from 3.27.4 to 3.27.5 by @​dependabot in #​1053
• build(deps): Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 by @​dependabot in #​1052
• build(deps): Bump github/codeql-action from 3.27.5 to 3.27.6 by @​dependabot in #​1059
• chore(deps): upgrade golang version to 1.22.8 by @​lukidzi in #​1038
• Support multi-module releases in go-control-plane by @​alecholmez in #​714
• Create releases for go-control-plane (0.13.2) and envoy API (1.32.2) by @​valerian-roche in #​1073

New Contributors

• @​alandiegosantos made their first contribution in #​1036
• @​lukidzi made their first contribution in #​1038

Full Changelog: envoyproxy/go-control-plane@v0.13.1...v0.13.2

v0.13.1

Compare Source

What's Changed

• build(deps): Bump ossf/scorecard-action from 2.3.3 to 2.4.0 by @​dependabot in #​975
• build(deps): Bump github/codeql-action from 3.25.6 to 3.26.5 by @​dependabot in #​990
• build(deps): Bump golangci/golangci-lint-action from 6.0.1 to 6.1.0 by @​dependabot in #​979
• build(deps): Bump actions/upload-artifact from 3.1.0 to 4.3.6 by @​dependabot in #​982
• fix: golangci-lint by @​mmorel-35 in #​993
• Bump google.golang.org/protobuf from 1.33.0 to 1.34.2 in /xdsmatcher by @​dependabot in #​955
• build(deps): Bump github.com/envoyproxy/protoc-gen-validate from 1.0.4 to 1.1.0 by @​dependabot in #​978
• update OSSF Scorecard badge link by @​mmorel-35 in #​857
• build(deps): Bump actions/upload-artifact from 4.3.6 to 4.4.0 by @​dependabot in #​998
• build(deps): Bump github/codeql-action from 3.26.5 to 3.26.6 by @​dependabot in #​997

Full Changelog: envoyproxy/go-control-plane@v0.13.0...v0.13.1

v0.13.0

Compare Source

What's Changed

• Setup Codeql workflow by @​mmorel-35 in #​846
• Improve OSSF score by @​mmorel-35 in #​848
• Fix build after recent protobuf changes by @​howardjohn in #​862
• Add detailed_metric field to ratelimit descriptor by @​akondapuram in #​841
• Enable testifylint linter by @​mmorel-35 in #​842
• build(deps): Bump actions/stale from 7.0.0 to 9.0.0 by @​dependabot in #​881
• build(deps): Bump github/codeql-action from 3.22.12 to 3.24.6 by @​dependabot in #​892
• build(deps): Bump golangci/golangci-lint-action from 3.7.0 to 4.0.0 by @​dependabot in #​880
• Linter fixes required by latest golangci-lint versions by @​sunjayBhatia in #​903
• build(deps): Bump google.golang.org/grpc from 1.58.3 to 1.62.1 by @​dependabot in #​899
• build(deps): Bump github/codeql-action from 3.24.6 to 3.24.8 by @​dependabot in #​906
• build(deps): Bump github.com/golang/protobuf from 1.5.3 to 1.5.4 by @​dependabot in #​898
• build(deps): Bump github.com/stretchr/testify from 1.8.4 to 1.9.0 by @​dependabot in #​891
• build(deps): Bump actions/checkout from 4.1.1 to 4.1.2 by @​dependabot in #​905
• build(deps): Bump github.com/prometheus/client_model from 0.5.0 to 0.6.0 by @​dependabot in #​886
• build(deps): Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 in /xdsmatcher by @​dependabot in #​900
• build(deps): Bump github.com/stretchr/testify from 1.8.4 to 1.9.0 in /xdsmatcher by @​dependabot in #​893
• build(deps): Bump google.golang.org/grpc from 1.59.0 to 1.62.1 in /examples/dyplomat by @​dependabot in #​901
• build(deps): Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 in /examples/dyplomat by @​dependabot in #​902
• Apply 'go mod tidy' after API sync by @​mmorel-35 in #​908
• build(deps): Bump github/codeql-action from 3.24.8 to 3.24.9 by @​dependabot in #​910
• Move go mod tidy to run in sync_protos by @​sunjayBhatia in #​911
• use replace in examples/dyplomat and xdsmatcher modules by @​mmorel-35 in #​912
• Bump vtprotobuf import by @​howardjohn in #​914
• Goroutine leak in DeltaStreamHandler: fix for issue 913: by @​zhiyanfoo in #​916
• build(deps): bump github.com/cncf/xds/go to v0.0.0-20240329184929 by @​mmorel-35 in #​923
• build(deps): Bump golang.org/x/net from 0.20.0 to 0.23.0 in /examples/dyplomat by @​dependabot in #​926
• build(deps): Bump golang.org/x/net from 0.20.0 to 0.23.0 by @​dependabot in #​925
• build(deps): Bump github/codeql-action from 3.24.9 to 3.25.0 by @​dependabot in #​924
• build(deps): bump github.com/cncf/xds/go to v0.0.0-20240329184929 by @​mmorel-35 in #​931
• Linearcache should respond immediately for the first wildcard delta request by @​tnqn in #​927
• build(deps): Bump actions/checkout from 4.1.2 to 4.1.5 by @​dependabot in #​938
• build(deps): Bump golangci/golangci-lint-action from 4.0.0 to 6.0.1 by @​dependabot in #​941
• build(deps): Bump ossf/scorecard-action from 2.3.1 to 2.3.3 by @​dependabot in #​943
• build(deps): Bump actions/checkout from 4.1.5 to 4.1.6 by @​dependabot in #​948
• build(deps): Bump github/codeql-action from 3.25.0 to 3.25.6 by @​dependabot in #​947
• xds server: Update reference/resource checks for DefaultFilterChain by @​sfc-gh-randerson in #​949
• chore: update go version to 1.21 by @​mmorel-35 in #​964
• Bump google.golang.org/grpc from 1.62.1 to 1.65.0 by @​mmorel-35 in #​968

New Contributors

• @​howardjohn made their first contribution in #​862
• @​akondapuram made their first contribution in #​841
• @​zhiyanfoo made their first contribution in #​916
• @​tnqn made their first contribution in #​927
• @​sfc-gh-randerson made their first contribution in #​949

Full Changelog: envoyproxy/go-control-plane@v0.12.0...v0.13.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 14 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.20 -> 1.23.0
google.golang.org/grpc	v1.58.3 -> v1.75.1
google.golang.org/protobuf	v1.32.0 -> v1.36.10
github.com/cncf/xds/go	v0.0.0-20230607035331-e9ce68804cb4 -> v0.0.0-20250501225837-2ac532fd4443
github.com/envoyproxy/protoc-gen-validate	v1.0.2 -> v1.2.1
github.com/go-logr/logr	v1.1.0 -> v1.4.3
github.com/go-logr/stdr	v1.1.0 -> v1.2.2
github.com/golang/protobuf	v1.5.3 -> v1.5.4
github.com/google/uuid	v1.3.0 -> v1.6.0
golang.org/x/crypto	v0.14.0 -> v0.40.0
golang.org/x/net	v0.17.0 -> v0.42.0
golang.org/x/sys	v0.13.0 -> v0.34.0
golang.org/x/text	v0.13.0 -> v0.27.0
google.golang.org/genproto/googleapis/api	v0.0.0-20230711160842-782d3b101e98 -> v0.0.0-20250728155136-f173205681a0
google.golang.org/genproto/googleapis/rpc	v0.0.0-20230711160842-782d3b101e98 -> v0.0.0-20250728155136-f173205681a0