fix(deps): update bump-dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
buf	uses-with	minor	1.71.0 → 1.73.0
connectrpc.com/connect	require	minor	v1.20.0 → v1.21.0
go	uses-with	minor	1.26.5 → 1.27.1
google.golang.org/protobuf	require	patch	v1.36.11 → v1.36.12

---

Release Notes

bufbuild/buf (buf)

v1.73.0

Compare Source

• Fix buf format dropping comments next to commas or semicolons in message literals.
• Fix compilation failing to resolve symbols re-exported through import public when the
  re-exporting file also reaches those symbols through a non-public import.
• Fix LSP go to definition not resolving across files inside dependency and well-known-type
  files, and release workspaces when their last open file closes to free resources.
• Fix LSP finding only a subset of references to symbols declared in
  dependencies, including well-known types.
• Fix buf format non-idempotent trailing comment formatting.
• Update built-in Well-Known Types to Protobuf v35.1.
• Fix managed mode setting java_multiple_files on Edition 2024 files, which is not
  allowed and causes code generation to fail.

v1.72.0

Compare Source

• Fix buf beta registry webhook create and buf beta registry webhook list to emit proto JSON output.
• Fix HTTPS Basic authentication for remote inputs to use BUF_INPUT_HTTPS_USERNAME for the username.
• Fix IMPORT_USED lint rule silently reporting no unused imports when
  google/protobuf/descriptor.proto is in the transitive dependency graph.

connectrpc/connect-go (connectrpc.com/connect)

v1.21.0

Compare Source

What's Changed

[!IMPORTANT]

This release adds a security-related feature for servers. The new handler option WithRequestGate runs after the request headers are available and before any message is received. Use this new option to register checks (e.g. authentication) that should happen before the request is decompressed or unmarshaled, and before any interceptors are run. See the documentation for details.

Governance

• Add pkwarren as a maintainer by @​bufdev in #​929 🎉

Enhancements

• Add WithRequestGate handler option by @​emcfarlane in #​962
• Create release binary for protoc-gen-connect-go by @​emcfarlane in #​966

Bugfixes

• Fix issue with user-agent getting inappropriately injected into request headers by @​jhump in #​934
• Fix client streaming operations blocking indefinitely after context cancellation by @​haru0017 in #​937
• Fix flaky HTTP2 testcase assertion by @​emcfarlane in #​940
• Fix data race and connection leak in duplexHTTPCall by @​emcfarlane in #​938
• Fix off-by-one in WithHTTPGetMaxURLSize URL length check by @​fchimpan in #​955
• Fix connect.WithGRPC typo in the missing client option error by @​NotAFlightRisk in #​956
• Only send a 304 when the request was a GET by @​NotAFlightRisk in #​957
• Fix panic in stream Spec and Peer when client construction failed by @​NotAFlightRisk in #​959
• Fix dropped headers on errStreamingClientConn by @​mohit-bhandari45 in #​964

New Contributors

• @​haru0017 made their first contribution in #​937
• @​dongjiang1989 made their first contribution in #​945
• @​fchimpan made their first contribution in #​955
• @​NotAFlightRisk made their first contribution in #​956
• @​mohit-bhandari45 made their first contribution in #​964

Full Changelog: connectrpc/connect-go@v1.20.0...v1.21.0

actions/go-versions (go)

v1.27.1: 1.27.1

Compare Source

Go 1.27.1

v1.27.0: 1.27.0

Compare Source

Go 1.27.0

v1.26.8: 1.26.8

Compare Source

Go 1.26.8

v1.26.7: 1.26.7

Compare Source

Go 1.26.7

v1.26.6: 1.26.6

Compare Source

Go 1.26.6

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Only on Wednesday (* * * * 3)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.