Bump the go_modules group across 6 directories with 7 updates #1598

dependabot · 2025-09-01T11:42:47Z

Bumps the go_modules group with 1 update in the /base/cvd/cuttlefish/host/commands/cvd/cli/parser/golang directory: google.golang.org/protobuf.
Bumps the go_modules group with 2 updates in the /e2etests directory: github.com/docker/docker and golang.org/x/crypto.
Bumps the go_modules group with 3 updates in the /frontend/src/host_orchestrator directory: google.golang.org/protobuf, golang.org/x/net and google.golang.org/grpc.
Bumps the go_modules group with 2 updates in the /frontend/src/libhoclient directory: golang.org/x/crypto and golang.org/x/net.
Bumps the go_modules group with 3 updates in the /frontend/src/liboperator directory: google.golang.org/protobuf, golang.org/x/net and google.golang.org/grpc.
Bumps the go_modules group with 3 updates in the /frontend/src/operator directory: google.golang.org/protobuf, golang.org/x/net and google.golang.org/grpc.

Updates google.golang.org/protobuf from 1.32.0 to 1.33.0

Updates github.com/docker/docker from 25.0.7+incompatible to 28.0.0+incompatible

Release notes

Sourced from github.com/docker/docker's releases.

v28.0.0

28.0.0

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

docker/cli, 28.0.0 milestone

moby/moby, 28.0.0 milestone

Deprecated and removed features, see Deprecated Features.

Changes to the Engine API, see API version history.

New

Add ability to mount an image inside a container via --mount type=image. moby/moby#48798

You can also specify --mount type=image,image-subpath=[subpath],... option to mount a specific path from the image. docker/cli#5755

docker images --tree now shows metadata badges. docker/cli#5744

docker load, docker save, and docker history now support a --platform flag allowing you to choose a specific platform for single-platform operations on multi-platform images. docker/cli#5331

Add OOMScoreAdj to docker service create and docker stack. docker/cli#5145

docker buildx prune now supports reserved-space, max-used-space, min-free-space and keep-bytes filters. moby/moby#48720

Windows: Add support for running containerd as a child process of the daemon, instead of using a system-installed containerd. moby/moby#47955

Networking

The docker-proxy binary has been updated, older versions will not work with the updated dockerd. moby/moby#48132

Close a window in which the userland proxy (docker-proxy) could accept TCP connections, that would then fail after iptables NAT rules were set up.

The executable rootlesskit-docker-proxy is no longer used, it has been removed from the build and distribution.

DNS nameservers read from the host's /etc/resolv.conf are now always accessed from the host's network namespace. moby/moby#48290

When the host's /etc/resolv.conf contains no nameservers and there are no --dns overrides, Google's DNS servers are no longer used, apart from by the default bridge network and in build containers.

Container interfaces in bridge and macvlan networks now use randomly generated MAC addresses. moby/moby#48808

Gratuitous ARP / Neighbour Advertisement messages will be sent when the interfaces are started so that, when IP addresses are reused, they're associated with the newly generated MAC address.

IPv6 addresses in the default bridge network are now IPAM-assigned, rather than being derived from the MAC address.

The deprecated OCI prestart hook is now only used by build containers. For other containers, network interfaces are added to the network namespace after task creation is complete, before the container task is started. moby/moby#47406

Add a new gw-priority option to docker run, docker container create, and docker network connect. This option will be used by the Engine to determine which network provides the default gateway for a container. On docker run, this option is only available through the extended --network syntax. docker/cli#5664

Add a new netlabel com.docker.network.endpoint.ifname to customize the interface name used when connecting a container to a network. It's supported by all built-in network drivers on Linux. moby/moby#49155

When a container is created with multiple networks specified, there's no guarantee on the order networks will be connected to the container. So, if a custom interface name uses the same prefix as the auto-generated names, for example eth, the container might fail to start.

The recommended practice is to use a different prefix, for example en0, or a numerical suffix high enough to never collide, for example eth100.

This label can be specified on docker network connect via the --driver-opt flag, for example docker network connect --driver-opt=com.docker.network.endpoint.ifname=foobar ….

Or via the long-form --network flag on docker run, for example docker run --network=name=bridge,driver-opt=com.docker.network.endpoint.ifname=foobar …

If a custom network driver reports capability GwAllocChecker then, before a network is created, it will get a GwAllocCheckerRequest with the network's options. The custom driver may then reply that no gateway IP address should be allocated. moby/moby#49372

Port publishing in bridge networks

dockerd now requires ipset support in the Linux kernel. moby/moby#48596

The iptables and ip6tables rules used to implement port publishing and network isolation have been extensively modified. This enables some of the following functional changes, and is a first step in refactoring to enable native nftables support in a future release. moby/moby#48815

If it becomes necessary to downgrade to an earlier version of the daemon, some manual cleanup of the new rules will be necessary. The simplest and surest approach is to reboot the host, or use iptables -F and ip6tables -F to flush all existing iptables rules from the filter table before starting the older version of the daemon. When that is not possible, run the following commands as root:

iptables -D FORWARD -m set --match-set docker-ext-bridges-v4 dst -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT; ip6tables -D FORWARD -m set --match-set docker-ext-bridges-v6 dst -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT

iptables -D FORWARD -m set --match-set docker-ext-bridges-v4 dst -j DOCKER; ip6tables -D FORWARD -m set --match-set docker-ext-bridges-v6 dst -j DOCKER

If you were previously running with the iptables filter-FORWARD policy set to ACCEPT and need to restore access to unpublished ports, also delete per-bridge-network rules from the DOCKER chains. For example, iptables -D DOCKER ! -i docker0 -o docker0 -j DROP.

Fix a security issue that was allowing remote hosts to connect directly to a container on its published ports. moby/moby#49325

Fix a security issue that was allowing neighbor hosts to connect to ports mapped on a loopback address. moby/moby#49325

... (truncated)

Commits

af898ab Merge pull request #49495 from vvoland/update-buildkit
d67f035 vendor: github.com/moby/buildkit v0.20.0
00ab386 Merge pull request #49491 from vvoland/update-buildkit
1fde8c4 builder-next: fix cdi manager
cde9f07 vendor: github.com/moby/buildkit v0.20.0-rc3
89e1429 Merge pull request #49490 from thaJeztah/dockerfile_linting
b2b5590 Dockerfile: fix linting warnings
62bc597 Merge pull request #49480 from thaJeztah/docs_api_1.48
670cd81 Merge pull request #49485 from vvoland/c8d-list-panic
a3628f3 docs/api: add documentation for API v1.48
Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.35.0 to 0.41.0

Commits

ef5341b go.mod: update golang.org/x dependencies
b999374 acme: fix pebble subprocess output data race
c247dea x509roots/fallback: store bundle certs directly in DER
1fda731 acme: increase pebble test waitForServer attempts
1b4c3d2 x509roots/fallback: update bundle
b903b53 acme: capture pebble test subprocess stdout/stderr
459a9db go.mod: update golang.org/x dependencies
74e709a ssh: add AlgorithmNegotiationError
b3790b8 acme: fix TLSALPN01ChallengeCert for IP address identifiers
1dc4269 acme: add Pebble integration testing
Additional commits viewable in compare view

Updates golang.org/x/net from 0.30.0 to 0.42.0

Commits

See full diff in compare view

Updates golang.org/x/sys from 0.30.0 to 0.35.0

Commits

5b936e1 unix/linux: update to Linux kernel 6.16, Go to 1.24.5
3a82703 unix: remove redundant xnu version check for {p}readv/{p}writev
9920300 unix: add missing nft conntrack constants
ad4e0fc unix: remove redundant word in comment
084ad87 unix: fix //sys decl after CL 548795
751c3c6 unix: add missing NFT_PAYLOAD_* consts on linux
0c740cc unix: update Go to 1.24.3
d62d31c unix: update Linux constants and types to v6.14
3d9a6b8 windows: add WSADuplicateSocket
c0a9559 cpu: add crypto extensions detection for riscv64
Additional commits viewable in compare view

Updates google.golang.org/protobuf from 1.30.0 to 1.33.0

Updates golang.org/x/net from 0.0.0-20200822124328-c89045814202 to 0.38.0

Commits

See full diff in compare view

Updates golang.org/x/sys from 0.0.0-20200323222414-85ca7c5b95cd to 0.31.0

Commits

5b936e1 unix/linux: update to Linux kernel 6.16, Go to 1.24.5
3a82703 unix: remove redundant xnu version check for {p}readv/{p}writev
9920300 unix: add missing nft conntrack constants
ad4e0fc unix: remove redundant word in comment
084ad87 unix: fix //sys decl after CL 548795
751c3c6 unix: add missing NFT_PAYLOAD_* consts on linux
0c740cc unix: update Go to 1.24.3
d62d31c unix: update Linux constants and types to v6.14
3d9a6b8 windows: add WSADuplicateSocket
c0a9559 cpu: add crypto extensions detection for riscv64
Additional commits viewable in compare view

Updates golang.org/x/text from 0.3.0 to 0.23.0

Commits

566b44f go.mod: update golang.org/x dependencies
d5156da collate/build: do not use println in tests
221d88c x/text: fix scientific notation by removing extraneous spaces
b18c107 internal/export/unicode: change C comment to mention unassigned code points
835f8ac language: use a more straightforward return value
ae68efb internal/export/unicode: add CategoryAliases, Cn, and LC
518d9c0 all: upgrade go directive to at least 1.23.0 [generated]
3b64043 go.mod: update golang.org/x dependencies
1e59086 message/pipeline: add two Unalias calls
d42948e go.mod: update golang.org/x dependencies
Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.40.0 to 1.56.3

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.56.3

Security

server: prohibit more than MaxConcurrentStreams handlers from running at once (CVE-2023-44487)

In addition to this change, applications should ensure they do not leave running tasks behind related to the RPC before returning from method handlers, or should enforce appropriate limits on any such work.

Release 1.56.2

status: To fix a panic, status.FromError now returns an error with codes.Unknown when the error implements the GRPCStatus() method, and calling GRPCStatus() returns nil. (#6374)

Release 1.56.1

client: handle empty address lists correctly in addrConn.updateAddrs

Release 1.56.0

New Features

client: support channel idleness using WithIdleTimeout dial option (#6263)

This feature is currently disabled by default, but will be enabled with a 30 minute default in the future.

client: when using pickfirst, keep channel state in TRANSIENT_FAILURE until it becomes READY (gRFC A62) (#6306)

xds: Add support for Custom LB Policies (gRFC A52) (#6224)

xds: support pick_first Custom LB policy (gRFC A62) (#6314) (#6317)

client: add support for pickfirst address shuffling (gRFC A62) (#6311)

xds: Add support for String Matcher Header Matcher in RDS (#6313)

xds/outlierdetection: Add Channelz Logger to Outlier Detection LB (#6145)

Special Thanks: @s-matyukevich

xds: enable RLS in xDS by default (#6343)

orca: add support for application_utilization field and missing range checks on several metrics setters

balancer/weightedroundrobin: add new LB policy for balancing between backends based on their load reports (gRFC A58) (#6241)

authz: add conversion of json to RBAC Audit Logging config (#6192)

authz: add support for stdout logger (#6230 and #6298)

authz: support customizable audit functionality for authorization policy (#6192 #6230 #6298 #6158 #6304 and #6225)

Bug Fixes

orca: fix a race at startup of out-of-band metric subscriptions that would cause the report interval to request 0 (#6245)

xds/xdsresource: Fix Outlier Detection Config Handling and correctly set xDS Defaults (#6361)

xds/outlierdetection: Fix Outlier Detection Config Handling by setting defaults in ParseConfig() (#6361)

API Changes

orca: allow a ServerMetricsProvider to be passed to the ORCA service and ServerOption (#6223)

Release 1.55.1

status: To fix a panic, status.FromError now returns an error with codes.Unknown when the error implements the GRPCStatus() method, and calling GRPCStatus() returns nil. (#6374)

Release 1.55.0

Behavior Changes

xds: enable federation support by default (#6151)

status: status.Code and status.FromError handle wrapped errors (#6031 and #6150)

... (truncated)

Commits

1055b48 Update version.go to 1.56.3 (#6713)
5efd7bd server: prohibit more than MaxConcurrentStreams handlers from running at once...
bd1f038 Upgrade version.go to 1.56.3-dev (#6434)
faab873 Update version.go to v1.56.2 (#6432)
6b0b291 status: fix panic when servers return a wrapped error with status OK (#6374) ...
ed56401 [PSM interop] Don't fail target if sub-target already failed (#6390) (#6405)
cd6a794 Update version.go to v1.56.2-dev (#6387)
5b67e5e Update version.go to v1.56.1 (#6386)
d0f5150 client: handle empty address lists correctly in addrConn.updateAddrs (#6354) ...
997c1ea Change version to 1.56.1-dev (#6345)
Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.21.0 to 0.35.0

Commits

ef5341b go.mod: update golang.org/x dependencies
b999374 acme: fix pebble subprocess output data race
c247dea x509roots/fallback: store bundle certs directly in DER
1fda731 acme: increase pebble test waitForServer attempts
1b4c3d2 x509roots/fallback: update bundle
b903b53 acme: capture pebble test subprocess stdout/stderr
459a9db go.mod: update golang.org/x dependencies
74e709a ssh: add AlgorithmNegotiationError
b3790b8 acme: fix TLSALPN01ChallengeCert for IP address identifiers
1dc4269 acme: add Pebble integration testing
Additional commits viewable in compare view

Updates golang.org/x/net from 0.23.0 to 0.38.0

Commits

See full diff in compare view

Updates golang.org/x/sys from 0.30.0 to 0.31.0

Commits

5b936e1 unix/linux: update to Linux kernel 6.16, Go to 1.24.5
3a82703 unix: remove redundant xnu version check for {p}readv/{p}writev
9920300 unix: add missing nft conntrack constants
ad4e0fc unix: remove redundant word in comment
084ad87 unix: fix //sys decl after CL 548795
751c3c6 unix: add missing NFT_PAYLOAD_* consts on linux
0c740cc unix: update Go to 1.24.3
d62d31c unix: update Linux constants and types to v6.14
3d9a6b8 windows: add WSADuplicateSocket
c0a9559 cpu: add crypto extensions detection for riscv64
Additional commits viewable in compare view

Updates google.golang.org/protobuf from 1.30.0 to 1.33.0

Updates golang.org/x/net from 0.0.0-20200822124328-c89045814202 to 0.38.0

Commits

See full diff in compare view

Updates golang.org/x/sys from 0.0.0-20200323222414-85ca7c5b95cd to 0.31.0

Commits

5b936e1 unix/linux: update to Linux kernel 6.16, Go to 1.24.5
3a82703 unix: remove redundant xnu version check for {p}readv/{p}writev
9920300 unix: add missing nft conntrack constants
ad4e0fc unix: remove redundant word in comment
084ad87 unix: fix //sys decl after CL 548795
751c3c6 unix: add missing NFT_PAYLOAD_* consts on linux
0c740cc unix: update Go to 1.24.3
d62d31c unix: update Linux constants and types to v6.14
3d9a6b8 windows: add WSADuplicateSocket
c0a9559 cpu: add crypto extensions detection for riscv64
Additional commits viewable in compare view

Updates golang.org/x/text from 0.3.0 to 0.23.0

Commits

566b44f go.mod: update golang.org/x dependencies
d5156da collate/build: do not use println in tests
221d88c x/text: fix scientific notation by removing extraneous spaces
b18c107 internal/export/unicode: change C comment to mention unassigned code points
835f8ac language: use a more straightforward return value
ae68efb internal/export/unicode: add CategoryAliases, Cn, and LC
518d9c0 all: upgrade go directive to at least 1.23.0 [generated]
3b64043 go.mod: update golang.org/x dependencies
1e59086 message/pipeline: add two Unalias calls
d42948e go.mod: update golang.org/x dependencies
Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.40.0 to 1.56.3

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.56.3

Security

server: prohibit more than MaxConcurrentStreams handlers from running at once (CVE-2023-44487)

In addition to this change, applications should ensure they do not leave running tasks behind related to the RPC before returning from method handlers, or should enforce appropriate limits on any such work.

Release 1.56.2

status: To fix a panic, status.FromError now returns an error with codes.Unknown when the error implements the GRPCStatus() method, and calling GRPCStatus() returns nil. (#6374)

Release 1.56.1

client: handle empty address lists correctly in addrConn.updateAddrs

Release 1.56.0

New Features

client: support channel idleness using WithIdleTimeout dial option (#6263)

This feature is currently disabled by default, but will be enabled with a 30 minute default in the future.

client: when using pickfirst, keep channel state in TRANSIENT_FAILURE until it becomes READY (gRFC A62) (#6306)

xds: Add support for Custom LB Policies (gRFC A52) (#6224)

xds: support pick_first Custom LB policy (gRFC A62) (#6314) (#6317)

client: add support for pickfirst address shuffling (gRFC A62) (#6311)

xds: Add support for String Matcher Header Matcher in RDS (#6313)

xds/outlierdetection: Add Channelz Logger to Outlier Detection LB (#6145)

Special Thanks: @s-matyukevich

xds: enable RLS in xDS by default (#6343)

orca: add support for application_utilization field and missing range checks on several metrics setters

balancer/weightedroundrobin: add new LB policy for balancing between backends based on their load reports (gRFC A58) (#6241)

authz: add conversion of json to RBAC Audit Logging config (#6192)

authz: add support for stdout logger (#6230 and #6298)

authz: support customizable audit functionality for authorization policy (#6192 #6230 #6298 #6158 #6304 and #6225)

Bug Fixes

orca: fix a race at startup of out-of-band metric subscriptions that would cause the report interval to request 0 (#6245)

xds/xdsresource: Fix Outlier Detection Config Handling and correctly set xDS Defaults (#6361)

xds/outlierdetection: Fix Outlier Detection Config Handling by setting defaults in ParseConfig() (#6361)

API Changes

orca: allow a ServerMetricsProvider to be passed to the ORCA service and ServerOption (#6223)

Release 1.55.1

status: To fix a panic, status.FromError now returns an error with codes.Unknown when the error implements the GRPCStatus() method, and calling GRPCStatus() returns nil. (#6374)

Release 1.55.0

Behavior Changes

xds: enable federation support by default (#6151)

status: status.Code and status.FromError handle wrapped errors (#6031 and #6150)

... (truncated)

Commits

1055b48 Update version.go to 1.56.3 (#6713)
5efd7bd server: prohibit more than MaxConcurrentStreams handlers from running at once...
bd1f038 Upgrade version.go to 1.56.3-dev (#6434)
faab873 Update version.go to v1.56.2 (#6432)
6b0b291 status: fix panic when servers return a wrapped error with status OK (#6374) ...
ed56401 [PSM interop] Don't fail target if sub-target already failed (#6390) (#6405)
cd6a794 Update version.go to v1.56.2-dev (#6387)
5b67e5e Update version.go to v1.56.1 (#6386)
d0f5150 client: handle empty address lists correctly in addrConn.updateAddrs (#6354) ...
997c1ea Change version to 1.56.1-dev (#6345)
Additional commits viewable in compare view

Updates google.golang.org/protobuf from 1.30.0 to 1.33.0

Updates golang.org/x/net from 0.0.0-20200822124328-c89045814202 to 0.38.0

Commits

See full diff in compare view

Updates golang.org/x/sys from 0.0.0-20200323222414-85ca7c5b95cd to 0.31.0

Commits

5b936e1 unix/linux: update to Linux kernel 6.16, Go to 1.24.5
3a82703 unix: remove redundant xnu version check for {p}readv/{p}writev
9920300 unix: add missing nft conntrack constants
ad4e0fc unix: remove redundant word in comment
084ad87 unix: fix //sys decl after CL 548795
751c3c6 unix: add missing NFT_PAYLOAD_* consts on linux
0c740cc unix: update Go to 1.24.3
d62d31c unix: update Linux constants and types to v6.14
3d9a6b8 windows: add WSADuplicateSocket
c0a9559 cpu: add crypto extensions detection for riscv64
Additional commits viewable in compare view

Updates golang.org/x/text from 0.3.0 to 0.23.0

Commits

566b44f go.mod: update golang.org/x dependencies
d5156da collate/build: do not use println in tests
221d88c x/text: fix scientific notation by removing extraneous spaces
b18c107 internal/export/unicode: change C comment to mention unassigned code points
835f8ac language: use a more straightforward return value
ae68efb internal/export/unicode: add CategoryAliases, Cn, and LC
518d9c0 all: upgrade go directive to at least 1.23.0 [generated]
3b64043 go.mod: update golang.org/x dependencies
1e59086 message/pipeline: add two Unalias calls
d42948e go.mod: update golang.org/x dependencies
Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.40.0 to 1.56.3

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.56.3

Security

server: prohibit more than MaxConcurrentStreams handlers from running at once (CVE-2023-44487)

In addition to this change, applications should ensure they do not leave running tasks behind related to the RPC before returning from method handlers, or should enforce appropriate limits on any such work.

Release 1.56.2

status: To fix a panic, status.FromError now returns an error with codes.Unknown when the error implements the GRPCStatus() method, and calling GRPCStatus() returns nil. (#6374)

Release 1.56.1

client: handle empty address lists correctly in addrConn.updateAddrs

Release 1.56.0

New Features

client: support channel idleness using WithIdleTimeout dial option (#6263)

This feature is currently disabled by default, but will be enabled with a 30 minute default in the future.

client: when using pickfirst, keep channel state in TRANSIENT_FAILURE until it becomes READY (gRFC A62) (#6306)

xds: Add support for Custom LB Policies (gRFC A52) (#6224)

xds: support pick_first Custom LB policy (gRFC A62) (#6314) (#6317)

client: add support for pickfirst address shuffling (gRFC A62) (#6311)

xds: Add support for String Matcher Header Matcher in RDS (#6313)

xds/outlierdetection: Add Channelz Logger to Outlier Detection LB (#6145)

Special Thanks: @s-matyukevich

xds: enable RLS in xDS by default (#6343)

orca: add support for application_utilization field and missing range checks on several metrics setters

balancer/weightedroundrobin: add new LB policy for balancing between backends based on their load reports (gRFC A58) (#6241)

authz: add conversion of json to RBAC Audit Logging config (#6192)

authz: add support for stdout logger (#6230 and #6298)

authz: support customizable audit functionality for authorization policy (#6192 #6230 #6298 #6158 #6304 and #6225)

Bug Fixes

orca: fix a race at startup of out-of-band metric subscriptions that would cause the report interval to request 0 (#6245)

xds/xdsresource: Fix Outlier Detection Config Handling and correctly set xDS Defaults (#6361)

xds/outlierdetection: Fix Outlier Detection Config Handling by setting defaults in ParseConfig() (#6361)

API Changes

orca: allow a ServerMetricsProvider to be passed to the ORCA service and ServerOption (#6223)

Release 1.55.1

status: To fix a panic, status.FromError now returns an error with codes.Unknown when the error implements the GRPCStatus() method, and calling GRPCStatus() returns nil. (#6374)

Release 1.55.0

Behavior Changes

xds: enable federation support by default (#6151)

status: status.Code and status.FromError handle wrapped errors (#6031 and #6150)

... (truncated)

Commits

1055b48 Update version.go to 1.56.3 (#6713)
5efd7bd server: prohibit more than MaxConcurrentStreams handlers from running at once...
bd1f038 Upgrade version.go to 1.56.3-dev (#6434)
faab873 Update version.go to v1.56.2 (#6432)
6b0b291 status: fix panic when servers return a wrapped error with status OK (#6374) ...
ed56401 [PSM interop] Don't fail target if sub-target already failed (#6390) (#6405)
cd6a794 Update version.go to v1.56.2-dev (#6387)
5b67e5e Update version.go to v1.56.1 (#6386)
d0f5150 client: handle empty address lists correctly in addrConn.updateAddrs (#6354) ...
997c1ea Change version to 1.56.1-dev (#6345)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the go_modules group with 1 update in the /base/cvd/cuttlefish/host/commands/cvd/cli/parser/golang directory: google.golang.org/protobuf. Bumps the go_modules group with 2 updates in the /e2etests directory: [github.com/docker/docker](https://github.com/docker/docker) and [golang.org/x/crypto](https://github.com/golang/crypto). Bumps the go_modules group with 3 updates in the /frontend/src/host_orchestrator directory: google.golang.org/protobuf, [golang.org/x/net](https://github.com/golang/net) and [google.golang.org/grpc](https://github.com/grpc/grpc-go). Bumps the go_modules group with 2 updates in the /frontend/src/libhoclient directory: [golang.org/x/crypto](https://github.com/golang/crypto) and [golang.org/x/net](https://github.com/golang/net). Bumps the go_modules group with 3 updates in the /frontend/src/liboperator directory: google.golang.org/protobuf, [golang.org/x/net](https://github.com/golang/net) and [google.golang.org/grpc](https://github.com/grpc/grpc-go). Bumps the go_modules group with 3 updates in the /frontend/src/operator directory: google.golang.org/protobuf, [golang.org/x/net](https://github.com/golang/net) and [google.golang.org/grpc](https://github.com/grpc/grpc-go). Updates `google.golang.org/protobuf` from 1.32.0 to 1.33.0 Updates `github.com/docker/docker` from 25.0.7+incompatible to 28.0.0+incompatible - [Release notes](https://github.com/docker/docker/releases) - [Commits](moby/moby@v25.0.7...v28.0.0) Updates `golang.org/x/crypto` from 0.35.0 to 0.41.0 - [Commits](golang/crypto@v0.35.0...v0.41.0) Updates `golang.org/x/net` from 0.30.0 to 0.42.0 - [Commits](https://github.com/golang/net/commits/v0.38.0) Updates `golang.org/x/sys` from 0.30.0 to 0.35.0 - [Commits](golang/sys@v0.30.0...v0.35.0) Updates `google.golang.org/protobuf` from 1.30.0 to 1.33.0 Updates `golang.org/x/net` from 0.0.0-20200822124328-c89045814202 to 0.38.0 - [Commits](https://github.com/golang/net/commits/v0.38.0) Updates `golang.org/x/sys` from 0.0.0-20200323222414-85ca7c5b95cd to 0.31.0 - [Commits](golang/sys@v0.30.0...v0.35.0) Updates `golang.org/x/text` from 0.3.0 to 0.23.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.3.0...v0.23.0) Updates `google.golang.org/grpc` from 1.40.0 to 1.56.3 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.40.0...v1.56.3) Updates `golang.org/x/crypto` from 0.21.0 to 0.35.0 - [Commits](golang/crypto@v0.35.0...v0.41.0) Updates `golang.org/x/net` from 0.23.0 to 0.38.0 - [Commits](https://github.com/golang/net/commits/v0.38.0) Updates `golang.org/x/sys` from 0.30.0 to 0.31.0 - [Commits](golang/sys@v0.30.0...v0.35.0) Updates `google.golang.org/protobuf` from 1.30.0 to 1.33.0 Updates `golang.org/x/net` from 0.0.0-20200822124328-c89045814202 to 0.38.0 - [Commits](https://github.com/golang/net/commits/v0.38.0) Updates `golang.org/x/sys` from 0.0.0-20200323222414-85ca7c5b95cd to 0.31.0 - [Commits](golang/sys@v0.30.0...v0.35.0) Updates `golang.org/x/text` from 0.3.0 to 0.23.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.3.0...v0.23.0) Updates `google.golang.org/grpc` from 1.40.0 to 1.56.3 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.40.0...v1.56.3) Updates `google.golang.org/protobuf` from 1.30.0 to 1.33.0 Updates `golang.org/x/net` from 0.0.0-20200822124328-c89045814202 to 0.38.0 - [Commits](https://github.com/golang/net/commits/v0.38.0) Updates `golang.org/x/sys` from 0.0.0-20200323222414-85ca7c5b95cd to 0.31.0 - [Commits](golang/sys@v0.30.0...v0.35.0) Updates `golang.org/x/text` from 0.3.0 to 0.23.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.3.0...v0.23.0) Updates `google.golang.org/grpc` from 1.40.0 to 1.56.3 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.40.0...v1.56.3) --- updated-dependencies: - dependency-name: google.golang.org/protobuf dependency-version: 1.33.0 dependency-type: direct:production dependency-group: go_modules - dependency-name: github.com/docker/docker dependency-version: 28.0.0+incompatible dependency-type: direct:production dependency-group: go_modules - dependency-name: golang.org/x/crypto dependency-version: 0.41.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/net dependency-version: 0.42.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/sys dependency-version: 0.35.0 dependency-type: indirect dependency-group: go_modules - dependency-name: google.golang.org/protobuf dependency-version: 1.33.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/net dependency-version: 0.38.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/sys dependency-version: 0.31.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/text dependency-version: 0.23.0 dependency-type: indirect dependency-group: go_modules - dependency-name: google.golang.org/grpc dependency-version: 1.56.3 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/crypto dependency-version: 0.35.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/net dependency-version: 0.38.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/sys dependency-version: 0.31.0 dependency-type: indirect dependency-group: go_modules - dependency-name: google.golang.org/protobuf dependency-version: 1.33.0 dependency-type: direct:production dependency-group: go_modules - dependency-name: golang.org/x/net dependency-version: 0.38.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/sys dependency-version: 0.31.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/text dependency-version: 0.23.0 dependency-type: indirect dependency-group: go_modules - dependency-name: google.golang.org/grpc dependency-version: 1.56.3 dependency-type: direct:production dependency-group: go_modules - dependency-name: google.golang.org/protobuf dependency-version: 1.33.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/net dependency-version: 0.38.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/sys dependency-version: 0.31.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/text dependency-version: 0.23.0 dependency-type: indirect dependency-group: go_modules - dependency-name: google.golang.org/grpc dependency-version: 1.56.3 dependency-type: indirect dependency-group: go_modules ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 1, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the go_modules group across 6 directories with 7 updates #1598

Bump the go_modules group across 6 directories with 7 updates #1598

Uh oh!

dependabot bot commented on behalf of github Sep 1, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Bump the go_modules group across 6 directories with 7 updates #1598

Are you sure you want to change the base?

Bump the go_modules group across 6 directories with 7 updates #1598

Uh oh!

Conversation

dependabot bot commented on behalf of github Sep 1, 2025

v28.0.0

28.0.0

New

Networking

Port publishing in bridge networks

Release 1.56.3

Security

Release 1.56.2

Release 1.56.1

Release 1.56.0

New Features

Bug Fixes

API Changes

Release 1.55.1

Release 1.55.0

Behavior Changes

Release 1.56.3

Security

Release 1.56.2

Release 1.56.1

Release 1.56.0

New Features

Bug Fixes

API Changes

Release 1.55.1

Release 1.55.0

Behavior Changes

Release 1.56.3

Security

Release 1.56.2

Release 1.56.1

Release 1.56.0

New Features

Bug Fixes

API Changes

Release 1.55.1

Release 1.55.0

Behavior Changes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant