fix(deps): update module google.golang.org/protobuf to v1.36.10

[renovate[bot]]

This PR contains the following updates:

Package	Change	Age	Confidence
google.golang.org/protobuf	v1.27.1 -> v1.36.10

---

Release Notes

protocolbuffers/protobuf-go (google.golang.org/protobuf)

v1.36.10

Compare Source

v1.36.9

Compare Source

Full Changelog: https://github.com/protocolbuffers/protobuf-go/compare/v1.36.8...v1.36.9

User-visible changes: CL/699715: cmd/protoc-gen-go: add test for "import option" directive CL/699115: internal/editionssupport: declare support for edition 2024 CL/697595: editions: Fix spelling mistake in panic message

v1.36.8

Compare Source

Maintenance:

CL/696316: all: set Go language version to Go 1.23 CL/696315: types: regenerate using latest protobuf v32 release

v1.36.7

Compare Source

Maintenance / optimizations:

CL/683955: encoding/protowire: micro-optimize SizeVarint (-20% on Intel) CL/674055: internal/impl: remove unnecessary atomic access for non-lazy lists CL/674015: impl: remove unnecessary nil check from presence.Present CL/673495: types/descriptorpb: regenerate using latest protobuf v31 release CL/670516: cmd/protoc-gen-go: centralize presence and lazy logic into filedesc CL/670515: internal: move usePresenceForField to internal/filedesc CL/670275: internal/impl: clean up usePresenceForField() (no-op)

v1.36.6

Compare Source

Full Changelog: https://github.com/protocolbuffers/protobuf-go/compare/v1.36.5...v1.36.6

User-visible changes: CL/657895: internal_gengo: generate a const string literal for the raw descriptor CL/653536: proto: Add CloneOf[M Message](m M) M

Maintenance: CL/649135: all: set Go language version to Go 1.22 CL/654955: types/descriptorpb: regenerate using latest protobuf v30 release

v1.36.5

Compare Source

Full Changelog: https://github.com/protocolbuffers/protobuf-go/compare/v1.36.4...v1.36.5

Bug fixes: CL/644437: protogen: fix name mangling for fields with identical GoCamelCase

Maintenance: CL/641655: all: remove weak field support

v1.36.4

Compare Source

Full Changelog: https://github.com/protocolbuffers/protobuf-go/compare/v1.36.3...v1.36.4

Bug fixes: CL/642975: reflect/protodesc: fix panic when working with dynamicpb

Maintenance: CL/643276: internal_gengo: avoid allocations in rawDescGZIP() accessors CL/642857: internal_gengo: switch back from string literal to hex byte slice CL/642055: internal_gengo: use unsafe.StringData() to avoid a descriptor copy CL/638135: internal_gengo: store raw descriptor in .rodata section

v1.36.3

Compare Source

Full Changelog: https://github.com/protocolbuffers/protobuf-go/compare/v1.36.2...v1.36.3

Bug fixes: CL/642575: reflect/protodesc: fix panic when working with dynamicpb CL/641036: cmd/protoc-gen-go: remove json struct tags from unexported fields

User-visible changes: CL/641876: proto: add example for GetExtension, SetExtension CL/642015: runtime/protolazy: replace internal doc link with external link

Maintenance: CL/641635: all: split flags.ProtoLegacyWeak out of flags.ProtoLegacy CL/641019: internal/impl: remove unused exporter parameter CL/641018: internal/impl: switch to reflect.Value.IsZero CL/641035: internal/impl: clean up unneeded Go<1.12 MapRange() alternative CL/641017: types/dynamicpb: switch atomicExtFiles to atomic.Uint64 type

v1.36.2

Compare Source

Full Changelog: https://github.com/protocolbuffers/protobuf-go/compare/v1.36.1...v1.36.2

Bug fixes: CL/638515: internal/impl: fix WhichOneof() to work with synthetic oneofs

v1.36.1

Compare Source

Full Changelog: https://github.com/protocolbuffers/protobuf-go/compare/v1.36.0...v1.36.1

Bug fixes: CL/638495: internal/impl: revert IsSynthetic() check to fix panic

Maintenance: CL/637475: internal/errors: delete compatibility code for Go before 1.13

v1.36.0

Compare Source

Full Changelog: https://github.com/protocolbuffers/protobuf-go/compare/v1.35.2...v1.36.0

User-visible changes:

CL/635139: src/google/protobuf: document UnmarshalJSON / API level behavior CL/635138: reflect/protoreflect: use [] syntax to reference method CL/635137: proto: add reference to size semantics with lazy decoding to comment CL/634818: compiler/protogen: allow overriding API level from --go_opt CL/634817: cmd/protoc-gen-go: generate _protoopaque variant for hybrid CL/634816: all: regenerate.bash for Opaque API CL/634815: all: Release the Opaque API CL/634015: types/descriptorpb: regenerate using latest protobuf v29.1 release CL/632735: internal/impl: skip synthetic oneofs in messageInfo CL/627876: all: start v1.35.2-devel

v1.35.2

Compare Source

Full Changelog: https://github.com/protocolbuffers/protobuf-go/compare/v1.35.1...v1.35.2

Maintenance:

CL/623115: proto: refactor equal_test from explicit table to use makeMessages() CL/623116: encoding/prototext: use testmessages_test.go approach, too CL/623117: internal/testprotos/test: add nested message field with [lazy=true] CL/624415: proto: switch messageset_test to use makeMessages() injection point CL/624416: internal/impl: fix TestMarshalMessageSetLazyRace (was a no-op!)

User-visible changes:

CL/618395: encoding/protojson: allow missing value for Any of type Empty CL/618979: all: implement strip_enum_prefix editions feature CL/622575: testing/protocmp: document behavior when combining Ignore and Sort

v1.35.1

Compare Source

Full Changelog: https://github.com/protocolbuffers/protobuf-go/compare/v1.34.2...v1.35.1

Maintenance:

• CL/606755: all: remove unused purego support
• CL/608316: all: set Go language version to Go 1.21

User-visible changes:

• CL/587536: protojson: include field name in error messages
• CL/597055: compiler/protogen: always report editions support level of the plugin
• CL/596539: all: plumb the lazy option into filedesc.Field and .Extension
• CL/601775: types/known/structpb: add support for more types and json.Number
• CL/607995: proto: extend documentation of GetExtension, SetExtension
• CL/609035: proto: implement proto.Equal fast-path

Bug fixes:

• CL/595337: reflect/protodesc: fix handling of delimited extensions in editions
• CL/602055: internal/cmd/generate-protos: fix pkg check for editions features
• CL/603015: internal: generate extension numbers, fix editions parsing

v1.35.0

Compare Source

v1.34.2

Compare Source

Minor feature:

• CL/589336: gofeatures: allow setting legacy_unmarshal_json_enum feature at file level

Minor bug fixes:

• CL/588875: types/descriptorpb: regenerate using latest protobuf v27.0 release
• CL/586396: internal/impl: fix size cache semantics with lazy decoding
• CL/585736: reflect/protodesc: remove obsolete JSON name check from desc validator
• CL/588976: reflect/protoreflect: FieldDescriptor.Kind should never be GroupKind for maps or fields of map entry

v1.34.1

Compare Source

Minor fixes for editions compliance:

• CL/582635: all: update to protobuf 27.0-rc1 and regenerate protos
• CL/582755: encoding/proto[json|text]: accept lower case names for group-like fields

v1.34.0

Compare Source

Notable changes

New Features Protobuf editions are fully supported. You can now use edition = "2023" in .proto files together with the proto-gen-go. Edition2023 does not introduce any new features but can be used to replace syntax "proto2/3". Future editions might introduce new features. See https://protobuf.dev/editions/overview/ for more details on protobuf editions.

Documentation Various smaller changes to improve existing documentation and to add more examples.

• CL/574455: proto: extend Marshal documentation, include an example
• CL/574635: proto: extend Unmarshal documentation, include an example
• CL/574836: protogen: update Options documentation.
• CL/573361: proto: add examples for Size, MarshalAppend (regarding allocations)
• CL/579895: encoding/{protojson,prototext}: strengthen wording on stability

Extensions These are mostly performance improvements or preparations for performance improvements.

• CL/575035: internal/impl: ensure proto.HasExtension does not allocate
• CL/576315: [encoding/{protojson,prototext}: strengthen wording on stability](proto: CSE ProtoReflect() and TypeDescriptor() in proto.HasExtension
• CL/576316: internal/impl: pass ExtensionTypeDescriptor to extensionMap
• CL/579275: [proto] use the correct parent when resolving features for extensions
• CL/579595: proto: return an error instead of producing invalid wire format

v1.33.0

Compare Source

This release contains one security fix:

• encoding/protojson: Unmarshal could enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set. Unmarshal now correctly returns an error when handling these inputs. This is CVE-2024-24786.

v1.32.0

Compare Source

Full Changelog: https://github.com/protocolbuffers/protobuf-go/compare/v1.31.0...v1.32.0

This release contains commit bfcd647, which fixes a denial of service vulnerability by preventing a stack overflow through a default maximum recursion limit. See golang/protobuf#1583 and golang/protobuf#1584 for details.

v1.31.0

Compare Source

Notable changes

New Features

• CL/489316: types/dynamicpb: add NewTypes
  • Add a function to construct a dynamic type registry from a protoregistry.Files
• CL/489615: encoding: add MarshalAppend to protojson and prototext

Minor performance improvements

• CL/491596: encoding/protodelim: If UnmarshalFrom gets a bufio.Reader, try to reuse its buffer instead of creating a new one
• CL/500695: proto: store the size of tag to avoid multiple calculations

Bug fixes

• CL/497935: internal/order: fix sorting of synthetic oneofs to be deterministic
• CL/505555: encoding/protodelim: fix handling of io.EOF

v1.30.0

Compare Source

• Notable changes

Announcement In the previous two releases, v1.29.0 and v1.29.1, we associated the tags with the wrong commits and thus the tags do not reference any commit in this repository. This tag, v1.30.0, refers to an existing commit again. Sorry for the inconvenience.

Notable changes

New Features

• CL/449576: protoadapt: helper functions to convert v1 or v2 message to either v1 or v2 message.

v1.29.1

Compare Source

• Notable changes

Notable changes

Bug fixes

• CL/475995: internal/encoding/text: fix parsing of incomplete numbers

v1.29.0

Compare Source

• Overview
• Notable changes

Overview

This version introduces a new package protodelim to marshal and unmarshal size-delimited messages. It also brings the implementation up to date with the latest protobuf features.

Notable changes

New Features

• CL/419254: encoding: add protodelim package
• CL/450775: reflect/protoreflect: add Value.Equal method
• CL/462315: cmd/protoc-gen-go: make deprecated messages more descriptive
• CL/473015: encoding/prototext: allow whitespace and comments between minus sign and number in negative numeric literal

Alignment with protobuf

• CL/426054: types/descriptorpb: update *.pb.go to use latest protoc release, 21.5
• CL/425554: encoding/protojson: fix parsing of google.protobuf.Timestamp
• CL/461238: protobuf: remove the check for reserved field numbers
• CL/469255: types/descriptorpb: regenerate using latest protobuf v22.0 release
• CL/472696: cmd/protoc-gen-go: support protobuf retention feature

Documentation improvements:

• CL/464275: proto: document Equal behavior of invalid messages
• CL/466375: all: update links to Protocol Buffer documentation

Minor performance improvements

• CL/460215: types/known/structpb: preallocate map in AsMap
• CL/465115: internal/strs: avoid unnecessary allocations in Builder

Breaking changes

• CL/461238: protobuf: remove the check for reserved field numbers
  • protowire.(Number).IsValid() no longer returns false for reserved fields because reserved fields are considered semantically valid by the protobuf spec.

v1.28.1

Compare Source

This release contains protoc-gen-go binaries for arm64.

Notable changes since v1.28.0:

• CL/418677: internal/impl: improve MessageInfo.New performance
• CL/411377: proto: short-circuit Equal when inputs are identical
• CL/419714: all: Add prebuild binaries for arm64

v1.28.0

Compare Source

• Overview
• Notable changes
  • UnmarshalOption RecursionLimit
• Upcoming breakage changes

Overview

The release provides a new unmarshal option for limiting the recursion depth when unmarshalling nested messages to prevent stack overflows. (UnmarshalOptions.RecursionLimit).

Notable changes

New features:

• CL/340489: testing/protocmp: add Message.Unwrap

Documentation improvements:

• CL/339569: reflect/protoreflect: add more docs on Value aliasing

Updated supported versions:

• CL/370055: all: update supported versions

UnmarshalOption RecursionLimit

• CL/385854: all: implement depth limit for unmarshalling

The new UnmarshalOptions.RecursionLimit limits the maximum recursion depth when unmarshalling messages. The limit is applied for nested messages. When messages are nested deeper than the specified limit the unmarshalling will fail. If unspecified, a default limit of 10,000 is applied.

In addition to the configurable limit for message nesting a non-configurable recursion limit for group nesting of 10,000 was introduced.

Upcoming breakage changes

The default recursion limit of 10,000 introduced in the release is subject to change. We want to align this limit with implementations for other languages in the long term. C++ and Java use a limit of 100 which is also the target for the Go implementation.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• [ ] If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate[bot]]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.16 -> 1.23