[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update	Pending
github.com/grpc-ecosystem/grpc-gateway/v2	v2.30.0 → v2.32.0			require	minor	v2.33.0
grpc-ecosystem/grpc-gateway	v2.29.0 → v2.32.0				minor	v2.33.0

---

Release Notes

grpc-ecosystem/grpc-gateway (github.com/grpc-ecosystem/grpc-gateway/v2)

v2.32.0

Compare Source

What's Changed

• fix(openapiv2): render Any additional properties as true by @​Boulea7 in #​7215
• refuse client headers spoofing gateway x-forwarded-* metadata by @​itecz26 in #​7418
• avoid copying path components per handler in ServeMux.ServeHTTP by @​itecz26 in #​7426
• fix field mask path for nested Any in FieldMaskFromRequestBody by @​itecz26 in #​7438
• fix: handle CRLF line endings in proto comments by @​somaz94 in #​7419
• ci: detect deleted generated files by @​Boulea7 in #​7420
• stop double-unescaping path params in ServeMux.ServeHTTP by @​itecz26 in #​7449
• fix(httprule): reject invalid characters in HTTP path verb by @​Sducabbagedog in #​7454
• fix: preserve empty dynamic objects in field masks by @​tianrking in #​7450
• fix NewDoubleArray dropping path params that share a prefix by @​itecz26 in #​7452
• fix(openapiv2): pick merge leader from openapi_configuration too by @​LuisFigueroaG in #​7471
• fix(runtime): accept unpadded base64 for bytes parameters by @​LuisFigueroaG in #​7472
• treat %2f as a path separator in encodedPathSplitter by @​itecz26 in #​7486
• feat(openapiv3): support security schemes and requirements by @​LuisFigueroaG in #​7481
• feat(openapiv3): add openapiv3_tag service annotation by @​LuisFigueroaG in #​7495
• reject duplicate fields in DefaultQueryParser.Parse by @​itecz26 in #​7500
• fix(openapiv3): don't repeat nested path parameters as query parameters by @​LuisFigueroaG in #​7501
• Gate strict ** matching from #​7412 behind strict_deep_wildcard generator flag by @​johanbrandhorst in #​7527

New Contributors

• @​Boulea7 made their first contribution in #​7215
• @​somaz94 made their first contribution in #​7419
• @​Sducabbagedog made their first contribution in #​7454
• @​tianrking made their first contribution in #​7450
• @​LuisFigueroaG made their first contribution in #​7471
• @​TonyWu2333 made their first contribution in #​7484
• @​pujitha24 made their first contribution in #​7493

Full Changelog: grpc-ecosystem/grpc-gateway@v2.31.0...v2.32.0

v2.31.0

Compare Source

What's Changed

• Update minimum Go version from 1.25.0 to 1.26.0 by @​johanbrandhorst in #​7269
• fix(openapiv2): omit oneof siblings of path parameters from query parameters by @​hsdfat in #​7207
• fix: import response type package when response_body is set by @​MicBun in #​7225
• openapiv3: add extension (x-*) support by @​Abmun in #​7237
• docs: add a security considerations page by @​cleitonaugusto in #​7282
• fix(openapiv2): emit map key type in query parameter names by @​iamrajiv in #​7307
• Fix template_test format strings by @​skitt in #​7323
• Add edition 2026 support by @​printfn in #​7352
• fix(openapiv2): emit a primitive type for well-known object query parameters by @​iamrajiv in #​7351
• reject out-of-range numeric enum query values in parseField by @​itecz26 in #​7369
• feat(protoc-gen-openapiv3): support response_body binding by @​tobiaskohlbau in #​7371
• clamp overflowing grpc-timeout to max duration by @​itecz26 in #​7382
• validate forwarded header values before adding to grpc metadata by @​itecz26 in #​7390
• reject out-of-range enum numbers in jsonpb non-proto decoder by @​itecz26 in #​7397
• fix(openapiv2): emit minItems and maxItems on query parameters by @​wofiporia in #​7389
• reject grpc-metadata headers mapping into reserved grpcgateway- namespace by @​itecz26 in #​7401
• parse integer and enum path params as base 10 in convert.go by @​itecz26 in #​7405
• protoc-gen-openapiv2: allow proto files without a go_package option by @​cipherprofessor in #​7409
• runtime: deep wildcard (**) must not match zero segments after a preceding literal by @​cipherprofessor in #​7412

New Contributors

• @​MicBun made their first contribution in #​7225
• @​Abmun made their first contribution in #​7237
• @​cleitonaugusto made their first contribution in #​7282
• @​skitt made their first contribution in #​7323
• @​itecz26 made their first contribution in #​7369
• @​tobiaskohlbau made their first contribution in #​7371
• @​wofiporia made their first contribution in #​7389
• @​cipherprofessor made their first contribution in #​7409

Full Changelog: grpc-ecosystem/grpc-gateway@v2.30.0...v2.31.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "after 8pm every weekday,before 4am every weekday,every weekend"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 35 additional dependencies were updated

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=7 days

Details:

Package	Change
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	v0.70.0 -> v0.72.0
go.opentelemetry.io/otel	v1.46.0 -> v1.47.0
go.opentelemetry.io/otel/exporters/stdout/stdouttrace	v1.46.0 -> v1.47.0
go.opentelemetry.io/otel/sdk	v1.46.0 -> v1.47.0
go.opentelemetry.io/otel/trace	v1.46.0 -> v1.47.0
golang.org/x/exp	v0.0.0-20260218203240-3dfff04db8fa -> v0.0.0-20261014143641-f0251eb4aa3e
golang.org/x/net	v0.58.0 -> v0.61.0
golang.org/x/sync	v0.23.0 -> v0.24.0
google.golang.org/genproto/googleapis/api	v0.0.0-20260819154853-08b0e4226688 -> v0.0.0-20261012220534-4341edf3f941
github.com/go-openapi/jsonpointer	v1.0.0 -> v1.0.1
github.com/go-openapi/jsonreference	v1.0.0 -> v1.0.2
github.com/go-openapi/swag	v0.28.0 -> v0.29.2
github.com/go-openapi/swag/cmdutils	v0.28.0 -> v0.29.2
github.com/go-openapi/swag/conv	v0.28.0 -> v0.29.2
github.com/go-openapi/swag/fileutils	v0.28.0 -> v0.29.2
github.com/go-openapi/swag/jsonutils	v0.28.0 -> v0.29.2
github.com/go-openapi/swag/loading	v0.28.0 -> v0.29.2
github.com/go-openapi/swag/mangling	v0.28.0 -> v0.29.2
github.com/go-openapi/swag/netutils	v0.28.0 -> v0.29.2
github.com/go-openapi/swag/pools	v0.28.0 -> v0.29.2
github.com/go-openapi/swag/stringutils	v0.28.0 -> v0.29.2
github.com/go-openapi/swag/typeutils	v0.28.0 -> v0.29.2
github.com/go-openapi/swag/yamlutils	v0.28.0 -> v0.29.2
github.com/oklog/ulid/v2	v2.1.1 -> v2.1.2
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	v0.70.0 -> v0.72.0
go.opentelemetry.io/otel/metric	v1.46.0 -> v1.47.0
go.opentelemetry.io/otel/sdk/metric	v1.46.0 -> v1.47.0
golang.org/x/crypto	v0.57.0 -> v0.58.0
golang.org/x/mod	v0.41.0 -> v0.42.0
golang.org/x/sys	v0.48.0 -> v0.49.0
golang.org/x/telemetry	v0.0.0-20260811182544-a038080d80e5 -> v0.0.0-20261009151841-97e8ea77aa2a
golang.org/x/term	v0.46.0 -> v0.47.0
golang.org/x/text	v0.42.0 -> v0.43.0
golang.org/x/tools	v0.49.0 -> v0.52.0
google.golang.org/genproto/googleapis/rpc	v0.0.0-20260819154853-08b0e4226688 -> v0.0.0-20261005182115-fad411399dd8

[alwaysmeticulous]

✅ Meticulous spotted 0 visual differences across 14 screens tested: view results.

Meticulous evaluated ~4 hours of user flows against your PR.

_{Expected differences? Click here. Last updated for commit 5465a55 build(deps): update grpc-gateway to v2.32.0. This comment will update as new commits are pushed.}