deps: Update Non-major dependency updates

[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Confidence
cloud.google.com/go/auth	v0.17.0 → v0.18.0
github.com/jackc/pgx/v5	v5.7.6 → v5.8.0
google.golang.org/api	v0.257.0 → v0.258.0
google.golang.org/grpc	v1.77.0 → v1.78.0
google.golang.org/protobuf	v1.36.10 → v1.36.11

---

Release Notes

googleapis/google-cloud-go (cloud.google.com/go/auth)

v0.18.0

Compare Source

• bigquery:

  • Marked stable.
  • Schema inference of nullable fields supported.
  • Added TimePartitioning to QueryConfig.

• firestore: Data provided to DocumentRef.Set with a Merge option can contain
  Delete sentinels.

• logging: Clients can accept parent resources other than projects.

• pubsub:

  • pubsub/pstest: A lighweight fake for pubsub. Experimental; feedback welcome.
  • Support updating more subscription metadata: AckDeadline,
    RetainAckedMessages and RetentionDuration.

• oslogin/apiv1beta: New client for the Cloud OS Login API.

• rpcreplay: A package for recording and replaying gRPC traffic.

• spanner:

  • Add a ReadWithOptions that supports a row limit, as well as an index.
  • Support query plan and execution statistics.
  • Added OpenCensus support.

• storage: Clarify checksum validation for gzipped files (it is not validated
  when the file is served uncompressed).

jackc/pgx (github.com/jackc/pgx/v5)

v5.8.0

Compare Source

googleapis/google-api-go-client (google.golang.org/api)

v0.258.0

Compare Source

Features

• all: Auto-regenerate discovery clients (#​3392) (db6e653)
• all: Auto-regenerate discovery clients (#​3394) (7a9ae94)
• all: Auto-regenerate discovery clients (#​3395) (dd93f67)
• all: Auto-regenerate discovery clients (#​3396) (302ad5f)
• all: Auto-regenerate discovery clients (#​3398) (5dfcd09)
• all: Auto-regenerate discovery clients (#​3401) (cd3e656)
• all: Auto-regenerate discovery clients (#​3402) (9e6446a)
• all: Auto-regenerate discovery clients (#​3404) (453c04a)
• all: Auto-regenerate discovery clients (#​3406) (af03509)
• all: Auto-regenerate discovery clients (#​3407) (41e2f8f)
• all: Auto-regenerate discovery clients (#​3408) (ba64741)
• all: Auto-regenerate discovery clients (#​3409) (5d17056)
• all: Auto-regenerate discovery clients (#​3410) (90b301b)
• option: Deprecate unsafe credentials JSON loading options (#​3356) (a5426fa)

grpc/grpc-go (google.golang.org/grpc)

v1.78.0: Release 1.78.0

Compare Source

Behavior Changes

• client: Reject target URLs containing unbracketed colons in the hostname in Go version 1.26+. (#​8716)
  • Special Thanks: @​neild

New Features

• stats/otel: Add backend service label to wrr metrics as part of A89. (#​8737)
• stats/otel: Add subchannel metrics (without the disconnection reason) to eventually replace the pickfirst metrics. (#​8738)
• client: Wait for all pending goroutines to complete when closing a graceful switch balancer. (#​8746)
  • Special Thanks: @​twz123

Bug Fixes

• transport/client : Return status code Unknown on malformed grpc-status. (#​8735)
• client: Add experimental.AcceptCompressors so callers can restrict the grpc-accept-encoding header advertised for a call. (#​8718)
  • Special Thanks: @​iblancasa
• xds: Fix a bug in StringMatcher where regexes would match incorrectly when ignore_case is set to true. (#​8723)
• xds/resolver:
  • Drop previous route resources and report an error when no matching virtual host is found.
  • Only log LDS/RDS configuration errors following a successful update and retain the last valid resource to prevent transient failures. (#​8711)
• client:
  • Change connectivity state to CONNECTING when creating the name resolver (as part of exiting IDLE).
  • Change connectivity state to TRANSIENT_FAILURE if name resolver creation fails (as part of exiting IDLE).
  • Change connectivity state to IDLE after idle timeout expires even when current state is TRANSIENT_FAILURE.
  • Fix a bug that resulted in OnFinish call option not being invoked for RPCs where stream creation failed. (#​8710)
• xdsclient: Fix a race in the xdsClient that could lead to resource-not-found errors. (#​8627)

Performance Improvements

• mem: Round up to nearest 4KiB for pool allocations larger than 1MiB. (#​8705)
  • Special Thanks: @​cjc25

protocolbuffers/protobuf-go (google.golang.org/protobuf)

v1.36.11

Compare Source

Full Changelog: protocolbuffers/protobuf-go@v1.36.10...v1.36.11

User-visible changes:
CL/726780: encoding/prototext: Support URL chars in type URLs in text-format.

Bug fixes:
CL/728680: internal/impl: check recursion limit in lazy decoding validation
CL/711015: reflect/protodesc: fix handling of import options in dynamic builds

Maintenance:
CL/728681: reflect/protodesc: add support for edition unstable
CL/727960: all: add EDITION_UNSTABLE support
CL/727940: types: regenerate using latest protobuf v33.2 release
CL/727140: internal/testprotos/lazy: convert .proto files to editions
CL/723440: cmd/protoc-gen-go: add missing annotations for few generated protobuf symbols.
CL/720980: internal/filedesc: remove duplicative Message.unmarshalOptions
CL/716360: internal/encoding/tag: use proto3 defaults if proto3
CL/716520: proto: un-flake TestHasExtensionNoAlloc
CL/713342: compiler/protogen: properly filter option dependencies in go-protobuf plugin.
CL/711200: proto: add test for oneofs containing messages with required fields
CL/710855: proto: add explicit test for a non-nil but empty byte slice

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[forking-renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 1 additional dependency was updated

Details:

Package	Change
google.golang.org/genproto/googleapis/rpc	v0.0.0-20251202230838-ff82c1b0f217 -> v0.0.0-20251213004720-97cd9d5aeac2

[dpebot]

/gcbrun

[dpebot]

/gcbrun