Skip to content

Bump google.golang.org/grpc from 1.81.0 to 1.81.1#410

Merged
mmb merged 1 commit into
mainfrom
dependabot/go_modules/google.golang.org/grpc-1.81.1
May 15, 2026
Merged

Bump google.golang.org/grpc from 1.81.0 to 1.81.1#410
mmb merged 1 commit into
mainfrom
dependabot/go_modules/google.golang.org/grpc-1.81.1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 14, 2026

Bumps google.golang.org/grpc from 1.81.0 to 1.81.1.

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.81.1

Security

  • xds/rbac: Fix a potential authorization bypass caused by incorrectly falling through URI/DNS SANs to Subject Distinguished Name (DN) when matching the authenticated principal name. With this fix, only the first non-empty identity source will be used, as per gRFC A41. (#9111)

Bug Fixes

  • otel: Segregate client and server RPC information used for metrics and traces, to avoid one overwriting the other. (#9081)
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels May 14, 2026
@mmb
Copy link
Copy Markdown
Owner

mmb commented May 15, 2026

@dependabot rebase

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.81.0 to 1.81.1.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.81.0...v1.81.1)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.81.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/go_modules/google.golang.org/grpc-1.81.1 branch from 795fda7 to 339e4ed Compare May 15, 2026 01:38
@mmb mmb merged commit 84a6349 into main May 15, 2026
30 of 31 checks passed
@mmb mmb deleted the dependabot/go_modules/google.golang.org/grpc-1.81.1 branch May 15, 2026 01:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant