Skip to content

Bump google.golang.org/grpc from 1.81.0 to 1.81.1#329

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/google.golang.org/grpc-1.81.1
Open

Bump google.golang.org/grpc from 1.81.0 to 1.81.1#329
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/google.golang.org/grpc-1.81.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 15, 2026

Copy link
Copy Markdown
Contributor

Bumps google.golang.org/grpc from 1.81.0 to 1.81.1.

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.81.1

Security

  • xds/rbac: Fix a potential authorization bypass caused by incorrectly falling through URI/DNS SANs to Subject Distinguished Name (DN) when matching the authenticated principal name. With this fix, only the first non-empty identity source will be used, as per gRFC A41. (#9111)

Bug Fixes

  • otel: Segregate client and server RPC information used for metrics and traces, to avoid one overwriting the other. (#9081)
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels May 15, 2026
@dependabot dependabot Bot requested a review from azdagron as a code owner May 15, 2026 04:41
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label May 15, 2026
@dependabot dependabot Bot requested a review from MarcosDY as a code owner May 15, 2026 04:41
@dependabot dependabot Bot added the go Pull requests that update Go code label May 15, 2026
@amartinezfayo

Copy link
Copy Markdown
Member

@dependabot recreate

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.81.0 to 1.81.1.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.81.0...v1.81.1)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.81.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/go_modules/google.golang.org/grpc-1.81.1 branch from de327b8 to 53224b0 Compare June 19, 2026 00:19
@dependabot dependabot Bot requested a review from amartinezfayo as a code owner June 19, 2026 00:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant