Skip to content

build(deps): batch of pick-me dependency updates - #1575

Closed
phlax wants to merge 17 commits into
mainfrom
deps/pick-me-batch
Closed

phlax wants to merge 17 commits into
mainfrom
deps/pick-me-batch

Conversation

@phlax

@phlax phlax commented Oct 28, 2026

Copy link
Copy Markdown
Member

Cherry-picks (with -x) commits from open pick-me dep PRs, applied in descending order of lines changed to minimise conflicts.

Included: #1561 #1564 #1538 #1537 #1562 #1545 #1542 #1565 #1554 #1536 #1569 #1563 #1559 #1558 #1557 #1556 #1546

Skipped (conflict, for next pass): #1552 #1548 #1533

dependabot Bot added 17 commits October 28, 2026 10:28
Bumps the examples-grpc-bridge group in /grpc-bridge/client with 2 updates: [grpcio](https://github.com/grpc/grpc) and [grpcio-tools](https://github.com/grpc/grpc).

Updates `grpcio` from 1.84.0 to 1.84.1
- [Release notes](https://github.com/grpc/grpc/releases)
- [Commits](grpc/grpc@v1.84.0...v1.84.1)

Updates `grpcio-tools` from 1.84.0 to 1.84.1
- [Release notes](https://github.com/grpc/grpc/releases)
- [Commits](grpc/grpc@v1.84.0...v1.84.1)

---
updated-dependencies:
- dependency-name: grpcio
  dependency-version: 1.84.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: examples-grpc-bridge
- dependency-name: grpcio-tools
  dependency-version: 1.84.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: examples-grpc-bridge
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit 1fa2b93)
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 8.3.4 to 8.3.5.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.3.5/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 8.3.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit 55918df)
Bumps the examples-golang-network group with 1 update in the /golang-network/simple directory: [github.com/envoyproxy/envoy](https://github.com/envoyproxy/envoy).

Updates `github.com/envoyproxy/envoy` from 1.39.3 to 1.40.1
- [Release notes](https://github.com/envoyproxy/envoy/releases)
- [Changelog](https://github.com/envoyproxy/envoy/blob/main/RELEASES.md)
- [Commits](envoyproxy/envoy@v1.39.3...v1.40.1)

---
updated-dependencies:
- dependency-name: github.com/envoyproxy/envoy
  dependency-version: 1.39.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: examples-golang-network
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit 7ea91f5)
Bumps the examples-golang-http group with 1 update in the /golang-http/simple directory: [github.com/envoyproxy/envoy](https://github.com/envoyproxy/envoy).

Updates `github.com/envoyproxy/envoy` from 1.39.3 to 1.40.1
- [Release notes](https://github.com/envoyproxy/envoy/releases)
- [Changelog](https://github.com/envoyproxy/envoy/blob/main/RELEASES.md)
- [Commits](envoyproxy/envoy@v1.39.3...v1.40.1)

---
updated-dependencies:
- dependency-name: github.com/envoyproxy/envoy
  dependency-version: 1.39.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: examples-golang-http
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit 47c0e36)
Bumps [framer-motion](https://github.com/motiondivision/motion) from 14.0.0 to 14.6.0.
- [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md)
- [Commits](motiondivision/motion@v14.0.0...v14.6.0)

---
updated-dependencies:
- dependency-name: framer-motion
  dependency-version: 14.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit 8802002)
Bumps the examples-load-reporting group with 1 update in the /load-reporting-service directory: [github.com/envoyproxy/go-control-plane/envoy](https://github.com/envoyproxy/go-control-plane).

Updates `github.com/envoyproxy/go-control-plane/envoy` from 1.39.0 to 1.40.0
- [Release notes](https://github.com/envoyproxy/go-control-plane/releases)
- [Changelog](https://github.com/envoyproxy/go-control-plane/blob/main/CHANGELOG.md)
- [Commits](envoyproxy/go-control-plane@envoy/v1.39.0...envoy/v1.40.0)

---
updated-dependencies:
- dependency-name: github.com/envoyproxy/go-control-plane/envoy
  dependency-version: 1.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: examples-load-reporting
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit de055e8)
…h 2 updates

Bumps the examples-ext-authz group with 2 updates in the /ext_authz/auth/grpc-service directory: [github.com/envoyproxy/go-control-plane/envoy](https://github.com/envoyproxy/go-control-plane) and [google.golang.org/genproto/googleapis/rpc](https://github.com/googleapis/go-genproto).

Updates `github.com/envoyproxy/go-control-plane/envoy` from 1.39.0 to 1.40.0
- [Release notes](https://github.com/envoyproxy/go-control-plane/releases)
- [Changelog](https://github.com/envoyproxy/go-control-plane/blob/main/CHANGELOG.md)
- [Commits](envoyproxy/go-control-plane@envoy/v1.39.0...envoy/v1.40.0)

Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20260706201446-f0a921348800 to 0.0.0-20260720211330-0afa2a65878a
- [Commits](https://github.com/googleapis/go-genproto/commits)

---
updated-dependencies:
- dependency-name: github.com/envoyproxy/go-control-plane/envoy
  dependency-version: 1.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: examples-ext-authz
- dependency-name: google.golang.org/genproto/googleapis/rpc
  dependency-version: 0.0.0-20260720211330-0afa2a65878a
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: examples-ext-authz
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit 26d80b1)
Bumps [setuptools](https://github.com/pypa/setuptools) from 83.0.0 to 84.1.0.
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v83.0.0...v84.1.0)

---
updated-dependencies:
- dependency-name: setuptools
  dependency-version: 84.1.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit e253564)
Bumps [certifi](https://github.com/certifi/python-certifi) from 2024.7.4 to 2026.10.19.
- [Commits](certifi/python-certifi@2024.07.04...2026.10.19)

---
updated-dependencies:
- dependency-name: certifi
  dependency-version: 2026.10.19
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit 0e6d418)
Bumps the examples-dynamic-mod-rust group with 1 update in the /dynamic-mod-rust directory: [serde_json](https://github.com/serde-rs/json).

Updates `serde_json` from 1.0.151 to 1.0.154
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.151...v1.0.154)

---
updated-dependencies:
- dependency-name: serde_json
  dependency-version: 1.0.154
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: examples-dynamic-mod-rust
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit a3e5e97)
Bumps the examples-kafka-mesh group with 1 update in the /kafka-mesh directory: confluentinc/cp-zookeeper.

Updates `confluentinc/cp-zookeeper` from `3a5f014` to `7610a50`

---
updated-dependencies:
- dependency-name: confluentinc/cp-zookeeper
  dependency-version: latest
  dependency-type: direct:production
  dependency-group: examples-kafka-mesh
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit 179e7d3)
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 7.0.0 to 7.1.0.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@5fda3b9...6d4fd22)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit e39d2fe)
Bumps alpine from `294b683` to `be26560`.

---
updated-dependencies:
- dependency-name: alpine
  dependency-version: '3.24'
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit 5aa692f)
Bumps the examples-local-ratelimit group in /local_ratelimit with 1 update: nginx.

Updates `nginx` from 1.31.6 to 1.31.8

---
updated-dependencies:
- dependency-name: nginx
  dependency-version: 1.31.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: examples-local-ratelimit
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit 38d9daa)
Bumps envoyproxy/envoy-build from ci-v0.2.4 to ci-v0.2.5.

---
updated-dependencies:
- dependency-name: envoyproxy/envoy-build
  dependency-version: ci-v0.2.5
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit d414163)
Bumps mysql from 26.7.0 to 26.10.0.

---
updated-dependencies:
- dependency-name: mysql
  dependency-version: 26.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit d58f506)
Bumps the examples-ext-authz group with 1 update in the /ext_authz directory: openpolicyagent/opa.

Updates `openpolicyagent/opa` from 1.21.1-envoy-1-static to 1.21.2-envoy-4-static

---
updated-dependencies:
- dependency-name: openpolicyagent/opa
  dependency-version: 1.21.2-envoy-4-static
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: examples-ext-authz
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit b247b97)
@phlax phlax closed this Oct 28, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant