Skip to content

chore(deps): update deps - #1794

Open
renovate-bot wants to merge 1 commit into
googleapis:mainfrom
renovate-bot:renovate/deps
Open

chore(deps): update deps#1794
renovate-bot wants to merge 1 commit into
googleapis:mainfrom
renovate-bot:renovate/deps

Conversation

@renovate-bot

@renovate-bot renovate-bot commented Aug 10, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change Age Confidence
actions/checkout action patch v7.0.0v7.0.1 age confidence
bazel_skylib http_archive patch 1.9.01.9.2 age confidence
cloud.google.com/go/iam require minor v1.12.0v1.13.0 age confidence
debian stage digest 328d1641710bde
github.com/googleapis/gapic-showcase require minor v0.41.1v0.43.0 age confidence
google.golang.org/api require minor v0.288.0v0.293.0 age confidence
google.golang.org/genproto require digest bcc9394ec0a776 age confidence
google.golang.org/genproto/googleapis/api require digest bcc9394ec0a776 age confidence
google.golang.org/genproto/googleapis/rpc require digest bcc9394ec0a776 age confidence
google.golang.org/protobuf require patch v1.36.11v1.36.12 age confidence
rules_java http_archive minor 9.7.09.8.0 age confidence
rules_python http_archive minor 2.2.02.3.1 age confidence

Release Notes

actions/checkout (actions/checkout)

v7.0.1

Compare Source

bazelbuild/bazel-skylib (bazel_skylib)

v1.9.2

Compare Source

What's Changed

  • Revert allow_symlink = True by default for non-executables
  • Change from stamp to some other boolean flag
  • Update Bazel versions in CI: drop Bazel 6, add Bazel 9
  • Change Starlark flag default propagation from "universal" to "target"

Contributors:
@​gzm0, @​kotlaja, @​susinmotion, @​justinhorvitz

googleapis/gapic-showcase (github.com/googleapis/gapic-showcase)

v0.43.0

Compare Source

Features
  • Support --tls-groups flag to restrict allowed TLS key-exchange groups (#​1662) (6147736)

v0.42.0

Compare Source

Features
googleapis/google-api-go-client (google.golang.org/api)

v0.293.0

Compare Source

Features

v0.292.0

Compare Source

Features

v0.291.0

Compare Source

Features
Bug Fixes
  • transport: Use ds.GetUniverseDomain() instead of raw ds.UniverseDomain field (#​3660) (6bad358)

v0.290.0

Compare Source

Features

v0.289.0

Compare Source

Features
bazelbuild/rules_java (rules_java)

v9.8.0

Compare Source

Changes since 9.7.2
e88b808 Update java_tools to v20.0
4e79508 Update Azul remotejdk versions (#​370)

MODULE.bazel setup

bazel_dep(name = "rules_java", version = "9.8.0")

WORKSPACE setup

With Bazel 8.0.0 and before 8.3.0, add the following to your file:


### https://github.com/bazelbuild/bazel/pull/26119
common --repositories_without_autoloads=bazel_features_version,bazel_features_globals

In all cases, add the following to your file:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
http_archive(
    name = "rules_java",
    urls = [
        "https://github.com/bazelbuild/rules_java/releases/download/9.8.0/rules_java-9.8.0.tar.gz",
    ],
    sha256 = "88537048d7d07589ff4939c99889300c7063e43480ddd3cfa94d6c2cc899aa2e",
)

http_archive(
    name = "bazel_features",
    sha256 = "a660027f5a87f13224ab54b8dc6e191693c554f2692fcca46e8e29ee7dabc43b",
    strip_prefix = "bazel_features-1.30.0",
    url = "https://github.com/bazel-contrib/bazel_features/releases/download/v1.30.0/bazel_features-v1.30.0.tar.gz",
)

load("@bazel_features//:deps.bzl", "bazel_features_deps")
bazel_features_deps()

load("@rules_java//java:rules_java_deps.bzl", "rules_java_dependencies")
rules_java_dependencies()

### note that the following line is what is minimally required from protobuf for the java rules
### consider using the protobuf_deps() public API from @com_google_protobuf//:protobuf_deps.bzl
load("@com_google_protobuf//bazel/private:proto_bazel_features.bzl", "proto_bazel_features")  # buildifier: disable=bzl-visibility
proto_bazel_features(name = "proto_bazel_features")

### register toolchains
load("@rules_java//java:repositories.bzl", "rules_java_toolchains")
rules_java_toolchains()

Using the rules
See the source.

Full Changelog: bazelbuild/rules_java@9.7.2...9.8.0

v9.7.2

Compare Source

Changes since 9.7.1
526b170 Remove usages of the Turbine graal native image for darwin_x86_64

MODULE.bazel setup

bazel_dep(name = "rules_java", version = "9.7.2")

WORKSPACE setup

With Bazel 8.0.0 and before 8.3.0, add the following to your file:


### https://github.com/bazelbuild/bazel/pull/26119
common --repositories_without_autoloads=bazel_features_version,bazel_features_globals

In all cases, add the following to your file:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
http_archive(
    name = "rules_java",
    urls = [
        "https://github.com/bazelbuild/rules_java/releases/download/9.7.2/rules_java-9.7.2.tar.gz",
    ],
    sha256 = "4061f0cbfd556ff885243c600b69be452e26c81ed5b9e5c67d555bf95d37a973",
)

http_archive(
    name = "bazel_features",
    sha256 = "a660027f5a87f13224ab54b8dc6e191693c554f2692fcca46e8e29ee7dabc43b",
    strip_prefix = "bazel_features-1.30.0",
    url = "https://github.com/bazel-contrib/bazel_features/releases/download/v1.30.0/bazel_features-v1.30.0.tar.gz",
)

load("@bazel_features//:deps.bzl", "bazel_features_deps")
bazel_features_deps()

load("@rules_java//java:rules_java_deps.bzl", "rules_java_dependencies")
rules_java_dependencies()

### note that the following line is what is minimally required from protobuf for the java rules
### consider using the protobuf_deps() public API from @com_google_protobuf//:protobuf_deps.bzl
load("@com_google_protobuf//bazel/private:proto_bazel_features.bzl", "proto_bazel_features")  # buildifier: disable=bzl-visibility
proto_bazel_features(name = "proto_bazel_features")

### register toolchains
load("@rules_java//java:repositories.bzl", "rules_java_toolchains")
rules_java_toolchains()

Using the rules
See the source.

Full Changelog: bazelbuild/rules_java@9.7.1...9.7.2

v9.7.1

Compare Source

Changes since 9.7.0
1ccc4be Pass Java version in Windows launch info.

MODULE.bazel setup

bazel_dep(name = "rules_java", version = "9.7.1")

WORKSPACE setup

With Bazel 8.0.0 and before 8.3.0, add the following to your file:


### https://github.com/bazelbuild/bazel/pull/26119
common --repositories_without_autoloads=bazel_features_version,bazel_features_globals

In all cases, add the following to your file:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
http_archive(
    name = "rules_java",
    urls = [
        "https://github.com/bazelbuild/rules_java/releases/download/9.7.1/rules_java-9.7.1.tar.gz",
    ],
    sha256 = "2ec42a8b57608bd0f07b111b5e114e464930adca790a6e61bec5cb3109cd7c65",
)

http_archive(
    name = "bazel_features",
    sha256 = "a660027f5a87f13224ab54b8dc6e191693c554f2692fcca46e8e29ee7dabc43b",
    strip_prefix = "bazel_features-1.30.0",
    url = "https://github.com/bazel-contrib/bazel_features/releases/download/v1.30.0/bazel_features-v1.30.0.tar.gz",
)

load("@bazel_features//:deps.bzl", "bazel_features_deps")
bazel_features_deps()

load("@rules_java//java:rules_java_deps.bzl", "rules_java_dependencies")
rules_java_dependencies()

### note that the following line is what is minimally required from protobuf for the java rules
### consider using the protobuf_deps() public API from @com_google_protobuf//:protobuf_deps.bzl
load("@com_google_protobuf//bazel/private:proto_bazel_features.bzl", "proto_bazel_features")  # buildifier: disable=bzl-visibility
proto_bazel_features(name = "proto_bazel_features")

### register toolchains
load("@rules_java//java:repositories.bzl", "rules_java_toolchains")
rules_java_toolchains()

Using the rules
See the source.

Full Changelog: bazelbuild/rules_java@9.7.0...9.7.1

bazelbuild/rules_python (rules_python)

v2.3.1

Compare Source

For more detailed setup instructions, see https://rules-python.readthedocs.io/en/latest/getting-started.html

For the user-facing changelog see here

Using Bzlmod

Add to your MODULE.bazel file:

bazel_dep(name = "rules_python", version = "2.3.1")

python = use_extension("@rules_python//python/extensions:python.bzl", "python")
python.toolchain(
    python_version = "3.13",
)

pip = use_extension("@rules_python//python/extensions:pip.bzl", "pip")
pip.parse(
    hub_name = "pypi",
    python_version = "3.13",
    requirements_lock = "//:requirements_lock.txt",
)

use_repo(pip, "pypi")

Using WORKSPACE

Paste this snippet into your WORKSPACE file:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_python",
    sha256 = "678358df0f4ae7f00a33ce33cced97c301f3c523bdd71cb2573d20a93efbf6c6",
    strip_prefix = "rules_python-2.3.1",
    url = "https://github.com/bazel-contrib/rules_python/releases/download/2.3.1/rules_python-2.3.1.tar.gz",
)

load("@rules_python//python:repositories.bzl", "py_repositories")

py_repositories()
Gazelle plugin

Paste this snippet into your WORKSPACE file:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
http_archive(
    name = "rules_python_gazelle_plugin",
    sha256 = "678358df0f4ae7f00a33ce33cced97c301f3c523bdd71cb2573d20a93efbf6c6",
    strip_prefix = "rules_python-2.3.1/gazelle",
    url = "https://github.com/bazel-contrib/rules_python/releases/download/2.3.1/rules_python-2.3.1.tar.gz",
)

# To compile the rules_python gazelle extension from source,

# we must fetch some third-party go dependencies that it uses.

load("@rules_python_gazelle_plugin//:deps.bzl", _py_gazelle_deps = "gazelle_deps")

_py_gazelle_deps()

Full Changelog: bazel-contrib/rules_python@2.3.0...2.3.1

v2.3.0

Compare Source

{#v2-3-0-changed}

Changed
  • (gazelle) BREAKING rules_python 1.5.0 or higher is now required. The Python
    extension selects its standard library list on is_python_3.14, which earlier
    versions do not define.

{#v2-3-0-fixed}

Fixed
  • Fixed py_binary_rule_builder() / py_test_rule_builder() (from python/api/executables.bzl)
    failing at analysis time with a visibility error when used to construct a custom rule from an
    external module.
  • (compile_pip_requirements) Add the explicit data attribute and forward it
    directly to the generated py_binary, so files passed via data can be
    referenced from extra_args using $(location ...).
  • (coverage) The warning about a missing bundled coverage.py wheel is no longer
    emitted as we are now falling back to a pure python wheel
    (#​3950).
  • (gazelle) The Python extension now uses the correct standard library module list for
    python_version 3.13 and 3.14; previously both fell back to the 3.11 list, so modules
    added or removed since then (e.g. compression.zstd, telnetlib) were misclassified. The
    fallback list for unrecognized versions is now the newest available one rather than 3.11
    (#​3978).
  • (pypi) Allow uv_lock to be specified in pip.parse without requiring
    requirements_lock (or other os-specific requirement file attributes) to be
    set.
  • (pypi) Requirement --hash=<algo>:<digest> pins and Simple API
    #<algo>=<digest> URL fragments are now parsed for all hash algorithms
    instead of silently dropping everything except sha256. Non-sha256 pins are
    matched against the digests advertised by the index and downloads are verified
    using the corresponding Subresource Integrity value, and the pins are kept in
    the requirement line when falling back to pip
    (#​3972).
    As part of this, whl_library repos created by pip.parse now always pass
    the digest via the integrity attribute (SRI format) instead of sha256,
    and the lock file facts store digests as <algo>:<digest> values (the facts
    version was bumped, so cached index information is refreshed once).
  • (pypi) pip.parse(uv_lock = ...) no longer exposes uv workspace/root members
    that resolve to no wheel or sdist (e.g. source = { virtual = "." } or editable
    installs). Previously these source-less packages were added to the hub's
    all_requirements / all_whl_requirements with an alias to a subpackage that
    does not exist, breaking analysis for anything enumerating the full set such as
    modules_mapping(wheels = all_whl_requirements)
    (#​3934).
  • (pypi) correctly parse the index_url for each wheel so that the source registry is forwarded to
    the {obj}whl_library. This is so that the purl for package_metadata can be correctly
    constructed.
  • (pypi) fixed the URL normalization function to correctly handle local paths
    enabling wheel sources files to point to an absolute path. Currently it supports
    the file://<absolute_path> for linux and windows like paths. We also support
    envsubst for the said paths from now on.

{#v2-3-0-added}

Added
  • (bzlmod) Added MODULE.bazel flag aliases for Starlark-defined flags:
    build_python_zip, incompatible_default_to_explicit_init_py,
    python_path, and experimental_python_import_all_repositories.
  • (cc) Added experimental {obj}py_extension macro for creating C/C++ Python
    extension modules
    (#​3283).
    (cc) Added libc, platform_machine, platform_tag, soabi, and
    sys_platform attributes and info fields to {obj}py_cc_toolchain /
    {obj}PyCcToolchainInfo.
  • (pip,python) Added pyproject_toml attribute to {obj}pip.default, {obj}pip.parse and {obj}python.defaults to read the default Python version from the requires-python field of pyproject.toml.
  • (py_test) Added an opt-in safeguard against py_test targets that silently
    pass without running any tests. Set
    {obj}--@rules_python//python/config_settings:validate_test_main=enabled to
    fail the build when a test's main module only contains inert top-level
    statements (definitions, imports, assignments) and never invokes a test
    runner (#​3824).

{#v2-2-0}


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@forking-renovate forking-renovate Bot added the automerge Summon MOG for automerging label Aug 10, 2026
@renovate-bot
renovate-bot requested review from a team as code owners August 10, 2026 01:56
@renovate-bot renovate-bot added the automerge Summon MOG for automerging label Aug 10, 2026
@forking-renovate

forking-renovate Bot commented Aug 10, 2026

Copy link
Copy Markdown

ℹ️ Artifact update notice

File name: showcase/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 6 additional dependencies were updated

Details:

Package Change
google.golang.org/grpc v1.82.0 -> v1.83.0
cloud.google.com/go/auth v0.20.0 -> v0.23.0
github.com/googleapis/enterprise-certificate-proxy v0.3.17 -> v0.3.20
golang.org/x/crypto v0.53.0 -> v0.54.0
golang.org/x/net v0.56.0 -> v0.57.0
google.golang.org/genproto/googleapis/api v0.0.0-20260630182238-925bb5da69e7 -> v0.0.0-20260807164820-c8921c73eeea

@trusted-contributions-gcf trusted-contributions-gcf Bot added the kokoro:force-run Add this label to force Kokoro to re-run the tests. label Aug 10, 2026
@renovate-bot
renovate-bot force-pushed the renovate/deps branch 2 times, most recently from 680e920 to 66a1d5b Compare August 10, 2026 17:04
@shollyman

Copy link
Copy Markdown
Contributor

apidiff is related to changes in showcase for resumable uploads. Marking okay to have diffs.

@shollyman shollyman added the breaking change allowed Disables apidiff check label Aug 10, 2026
@gcf-merge-on-green

Copy link
Copy Markdown
Contributor

Merge-on-green attempted to merge your PR for 6 hours, but it was not mergeable because either one of your required status checks failed, one of your required reviews was not approved, or there is a do not merge label. Learn more about your required status checks here: https://help.github.com/en/github/administering-a-repository/enabling-required-status-checks. You can remove and reapply the label to re-run the bot.

@gcf-merge-on-green gcf-merge-on-green Bot removed the automerge Summon MOG for automerging label Aug 11, 2026
@renovate-bot
renovate-bot force-pushed the renovate/deps branch 3 times, most recently from 8b6860c to 074349b Compare August 14, 2026 06:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

breaking change allowed Disables apidiff check kokoro:force-run Add this label to force Kokoro to re-run the tests.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants