Update module github.com/grpc-ecosystem/grpc-gateway to v2 by renovate[bot] · Pull Request #47 · ido-namely/docker-protoc

renovate · 2026-08-31T23:11:07Z

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/grpc-ecosystem/grpc-gateway	`v1.16.0` → `v2.33.0`

Release Notes

grpc-ecosystem/grpc-gateway (github.com/grpc-ecosystem/grpc-gateway)

`v2.33.0`

Compare Source

Notice to all users

This release contains a security fix that changes the behavior of header parsing in the gateway. As part of fixing #7281, the decision was made to stop automatically adding client headers with the Grpc-Metadata- prefix into the grpc metadata by default. This behavior can be restored using the new mux option WithLegacyHeaderMatching. See https://grpc-ecosystem.github.io/grpc-gateway/docs/operations/security_considerations/#request-headers-become-grpc-metadata-under-a-prefix for more information.

Changes

reject non-decimal float spellings in query and path params by @itecz26 in #7512
docs: link example repositories in README by @wangyusheng1985 in #7517
docs: update outdated local proxy documentation (#912) by @Asthenia0412 in #7521
reject field[key] syntax for non-map fields in query params by @itecz26 in #7522
keep remote address in x-forwarded-for when a client value is invalid by @itecz26 in #7531
let WithMetadata annotators override client-forwarded metadata by @itecz26 in #7532
try GET first for path length fallback so it isn't lost to map order by @cvas22 in #7535
runtime: make strict deep wildcard matching a ServeMux option by @movsb in #7533
apply middlewares to health endpoint regardless of option order by @cvas22 in #7537
keep the Authorization header first in authorization metadata by @itecz26 in #7540
accept form content types with parameters in the path length fallback by @spicysharkco in #7538
keep matching other patterns when the last segment is a bare verb by @cvas22 in #7539
fix(openapiv3): skip bindings with methods OpenAPI 3.1 can't describe by @LuisFigueroaG in #7505
feat(openapiv3): add allow_delete_body option by @LuisFigueroaG in #7506
openapiv2: allow any item type in google.protobuf.ListValue schema by @cvas22 in #7551
don't add an empty path to the field mask for an empty request body by @cvas22 in #7552
Use the httprule parser for openapiv2 path templates by @anyingiit in #7562
Update dependency node to v24 by @renovate[bot] in #7543
fix(gengateway): quote custom HTTP methods without a net/http constant by @LuisFigueroaG in #7575
fix(openapiv3): emit google.protobuf.NullValue fields as null by @ybai08 in #7541
fix(openapiv3): describe server-streaming responses as stream chunks by @ybai08 in #7577
avoid quadratic path building for nested structs in field masks by @itecz26 in #7544
protoc-gen-openapiv2: keep custom ref targets in the naming cache by @pujitha24 in #7560
fix(gengateway): use the embedded field name for response_body types by @LuisFigueroaG in #7578
reject duplicate map keys in jsonpb non-proto decoder by @itecz26 in #7561
return io.EOF from drained ProtoMarshaller decoder by @itecz26 in #7567
fix(openapiv3): omit oneof siblings of path and body fields from query parameters by @ybai08 in #7579
ignore query keys naming the parent of a path-bound field by @itecz26 in #7582
fix(openapiv2): don't put the schema type in format for json_schema types by @LuisFigueroaG in #7585
fix(runtime): parse an empty FieldMask query parameter as an empty mask by @LuisFigueroaG in #7586
fix(descriptor): skip additional_bindings without an HTTP pattern by @LuisFigueroaG in #7588
fix(openapiv2): apply file-level responses to HEAD and OPTIONS operations by @LuisFigueroaG in #7592
drop Grpc-Metadata forwarding from DefaultHeaderMatcher by @itecz26 in #7590

New Contributors

@wangyusheng1985 made their first contribution in #7517
@Asthenia0412 made their first contribution in #7521
@cvas22 made their first contribution in #7535
@spicysharkco made their first contribution in #7538
@anyingiit made their first contribution in #7562
@ybai08 made their first contribution in #7541

Full Changelog: grpc-ecosystem/grpc-gateway@v2.32.0...v2.33.0

`v2.32.0`

Compare Source

What's Changed

fix(openapiv2): render Any additional properties as true by @Boulea7 in #7215
refuse client headers spoofing gateway x-forwarded-* metadata by @itecz26 in #7418
avoid copying path components per handler in ServeMux.ServeHTTP by @itecz26 in #7426
fix field mask path for nested Any in FieldMaskFromRequestBody by @itecz26 in #7438
fix: handle CRLF line endings in proto comments by @somaz94 in #7419
ci: detect deleted generated files by @Boulea7 in #7420
stop double-unescaping path params in ServeMux.ServeHTTP by @itecz26 in #7449
fix(httprule): reject invalid characters in HTTP path verb by @Sducabbagedog in #7454
fix: preserve empty dynamic objects in field masks by @tianrking in #7450
fix NewDoubleArray dropping path params that share a prefix by @itecz26 in #7452
fix(openapiv2): pick merge leader from openapi_configuration too by @LuisFigueroaG in #7471
fix(runtime): accept unpadded base64 for bytes parameters by @LuisFigueroaG in #7472
treat %2f as a path separator in encodedPathSplitter by @itecz26 in #7486
feat(openapiv3): support security schemes and requirements by @LuisFigueroaG in #7481
feat(openapiv3): add openapiv3_tag service annotation by @LuisFigueroaG in #7495
reject duplicate fields in DefaultQueryParser.Parse by @itecz26 in #7500
fix(openapiv3): don't repeat nested path parameters as query parameters by @LuisFigueroaG in #7501
Gate strict ** matching from #7412 behind strict_deep_wildcard generator flag by @johanbrandhorst in #7527

New Contributors

@Boulea7 made their first contribution in #7215
@somaz94 made their first contribution in #7419
@Sducabbagedog made their first contribution in #7454
@tianrking made their first contribution in #7450
@LuisFigueroaG made their first contribution in #7471
@TonyWu2333 made their first contribution in #7484
@pujitha24 made their first contribution in #7493

Full Changelog: grpc-ecosystem/grpc-gateway@v2.31.0...v2.32.0

`v2.31.0`

Compare Source

What's Changed

Update minimum Go version from 1.25.0 to 1.26.0 by @johanbrandhorst in #7269
fix(openapiv2): omit oneof siblings of path parameters from query parameters by @hsdfat in #7207
fix: import response type package when response_body is set by @MicBun in #7225
openapiv3: add extension (x-*) support by @Abmun in #7237
docs: add a security considerations page by @cleitonaugusto in #7282
fix(openapiv2): emit map key type in query parameter names by @iamrajiv in #7307
Fix template_test format strings by @skitt in #7323
Add edition 2026 support by @printfn in #7352
fix(openapiv2): emit a primitive type for well-known object query parameters by @iamrajiv in #7351
reject out-of-range numeric enum query values in parseField by @itecz26 in #7369
feat(protoc-gen-openapiv3): support response_body binding by @tobiaskohlbau in #7371
clamp overflowing grpc-timeout to max duration by @itecz26 in #7382
validate forwarded header values before adding to grpc metadata by @itecz26 in #7390
reject out-of-range enum numbers in jsonpb non-proto decoder by @itecz26 in #7397
fix(openapiv2): emit minItems and maxItems on query parameters by @wofiporia in #7389
reject grpc-metadata headers mapping into reserved grpcgateway- namespace by @itecz26 in #7401
parse integer and enum path params as base 10 in convert.go by @itecz26 in #7405
protoc-gen-openapiv2: allow proto files without a go_package option by @cipherprofessor in #7409
runtime: deep wildcard (**) must not match zero segments after a preceding literal by @cipherprofessor in #7412

New Contributors

@MicBun made their first contribution in #7225
@Abmun made their first contribution in #7237
@cleitonaugusto made their first contribution in #7282
@skitt made their first contribution in #7323
@itecz26 made their first contribution in #7369
@tobiaskohlbau made their first contribution in #7371
@wofiporia made their first contribution in #7389
@cipherprofessor made their first contribution in #7409

Full Changelog: grpc-ecosystem/grpc-gateway@v2.30.0...v2.31.0

`v2.30.0`

Compare Source

New Features

protoc-gen-openapiv3: Brand new minimal OpenAPI v3 generator (#6623), plus follow-ups:
- Visibility selectors (#6673)
- disable_default_errors option (#6672)
- Annotation support (#6681)
- Improved plugin error surfacing (#6937)
- field_behavior REQUIRED support for query parameters (#7180) — @maydietwice
openapiv3-merge: New standalone tool for merging OpenAPI v3 documents (#6771) — @johanbrandhorst
protoc-gen-openapiv2 moved to the protoc toolchain (#6988) — @EliSauder

Fixes

Change	PR	Contributor
OpenAPI v2: messages sorted before rendering definitions for determinism	#6732	@alliasgher
OpenAPI v2: enum comments now go to `description` instead of `title`	#6785	@superShen0916
OpenAPI v2: include field schema metadata on parameters	#6894	@puneetdixit200
OpenAPI v2: omit empty body objects for nested path parameters	#7065	@alliasgher
OpenAPI v3: omit empty body objects for nested path parameters	#7068	@alliasgher
OpenAPI v2: preserve `x-nullable` when `use_allof_for_refs` wraps a `$ref`	#7026	@pkhanaljc
OpenAPI v2: fix path joining for colon-prefixed segments	#7191	@Ritik100-AIT
Prioritize OpenAPI config options over proto options	#6973	@maskedmaxx
Support Service doc comments for OpenAPI/Swagger generation	#6200	@majiayu000
Fix nested body path initialization for oneof fields	#6948	@cyphercodes
Remove redundant enum assignment for nested proto3 fields	#7059	@abhishek-dalbanjan
Drain request only after `ParseForm` in generated code	#7192	@paskozdilar
Support field extensions with `use_allof_for_refs`	#3100	@same-id
Ignore `M` import-path mappings in openapiv3 plugin params	#6936	@johanbrandhorst

Documentation

Clarify HttpBody download usage (#6904) — @ketpatil77
Clarify Go tool dependency options (#7042) — @hawk-roy
Add a runnable OpenTelemetry tracing example (#7110) — @hsdfat
Fix SLSA link in README (#7149) — @ZayanKhan-12
Explain Buf strategy for shared API config (#7147) — @dlanov

Tests / CI / Infra

Add test coverage for slice converters in convert.go (#7041) — @viniciusmtsantos
Remove Java swagger generator test dependency (#6735) — @johanbrandhorst
CI improvements — go-version-file usage, release workflow tag input, checkout ref fixes, node_test timeouts, Node 22 LTS for browser tests (avoids a Node 24 zlib hang) (#6627, #6632, #6633, #6867, #6868) — @johanbrandhorst
Better Bazel caching; auto-merge job for dependabot PRs (#6667, #6668) — @johanbrandhorst
Run gazelle on openapiv3 files; add missing Bazel files (#6734, #6738) — @johanbrandhorst

New Contributors

@alliasgher, @superShen0916, @puneetdixit200, @ketpatil77, @EliSauder, @maskedmaxx, @hawk-roy, @viniciusmtsantos, @cyphercodes, @abhishek-dalbanjan, @hsdfat, @ZayanKhan-12, @dlanov, @maydietwice, @pkhanaljc, @Ritik100-AIT

Full Changelog: grpc-ecosystem/grpc-gateway@v2.29.0...v2.30.0

`v2.29.0`

Compare Source

What's Changed

fix: use proto.Merge to avoid copylocks with use_opaque_api=true by @emahiro in #6383
fix: allow proto3 optional fields in path parameters by @susanachl in #6416
Add option to disable HTTP method override by @achew22 in #6447
Add Go documentation badge to README by @achew22 in #6448
fix: add missing return statements in error handler paths by @jet-go in #6561
Deprecate fields and methods if file is deprecated by @aidandj in #6613
Add edition 2024 support by @printfn in #6622

New Contributors

@emahiro made their first contribution in #6383
@susanachl made their first contribution in #6416
@jet-go made their first contribution in #6561
@aidandj made their first contribution in #6613
@printfn made their first contribution in #6622

Full Changelog: grpc-ecosystem/grpc-gateway@v2.28.0...v2.29.0

`v2.28.0`

Compare Source

What's Changed

feat: add option to disable chunked headers by @irenarindos in #6354
fix(protoc-gen-openapiv2): fix panic on enum resolution in nested messages by @franchb in #6367

New Contributors

@irenarindos made their first contribution in #6354

Full Changelog: grpc-ecosystem/grpc-gateway@v2.27.8...v2.28.0

`v2.27.8`

Compare Source

What's Changed

Fix opaque missing imports casing by @kellen-miller in #6304
Revert "fix(protoc-gen-openapiv2): prevent panic when generating OpenAPI for multiple files" by @johanbrandhorst in #6309
fix(protoc-gen-openapiv2): fix naming cache for multi-file generation by @franchb in #6315
fix(openapiv2): exclude oneof fields from required with proto3 field semantics by @sessa in #6335

New Contributors

@sessa made their first contribution in #6335

Full Changelog: grpc-ecosystem/grpc-gateway@v2.27.7...v2.27.8

`v2.27.7`

Compare Source

Re-release of v2.26.7 as v2.27.7 for correct semver ordering.

`v2.27.6`

Compare Source

What's Changed

feat(generator): harden opaque imports and fix snake case to go casing by @kellen-miller in #6279
fix(protoc-gen-openapiv2): prevent panic when generating OpenAPI for multiple files by @franchb in #6275

New Contributors

@franchb made their first contribution in #6275

Full Changelog: grpc-ecosystem/grpc-gateway@v2.27.5...v2.27.6

`v2.27.5`

Compare Source

What's Changed

Issue5799 by @rohitlohar45 in #6123
fix: Add example repo in Java to README by @majiayu000 in #6199
fix: Use summary/description instead of title for field comments in openapi gen by @iamrajiv in #6223
fix(gengateway): use pointer for bodyData in OpaqueAPI PATCH requests by @kop in #6246
fix(gengateway): use opaque chain for setting path params by @kellen-miller in #6215

New Contributors

@majiayu000 made their first contribution in #6199
@kellen-miller made their first contribution in #6215

Full Changelog: grpc-ecosystem/grpc-gateway@v2.27.4...v2.27.5

`v2.27.4`

Compare Source

What's Changed

feat: support deprecated field for OpenAPI parameters by @lachlancooper in #6068
fix(openapiv2): Invalid entries in body parameter schema required array when using body: "field_name" by @rdark in #6088
fix(openapiv2): prevent nested required fields hoisting to parent schema by @rdark in #6078
[issue-6080] Fix strict no-$ref-siblings rule violations by @jgreffe in #6099
Dockerfile: upgrade openjdk version by @johanbrandhorst in #6130
fix: Exclude methods without HTTP bindings from OpenAPI definitions by @iamrajiv in #6030
Add note about Authorization header forwarding by @MicahParks in #6185
fix(gengateway): correct body field decoding in opaque API mode by @kop in #6197

New Contributors

@lachlancooper made their first contribution in #6068
@rdark made their first contribution in #6088
@jgreffe made their first contribution in #6099
@MicahParks made their first contribution in #6185

Full Changelog: grpc-ecosystem/grpc-gateway@v2.27.3...v2.27.4

`v2.27.3`

Compare Source

What's Changed

refactor(runtime): using reflect.TypeFor by @cuiweixie in #5868
fix(runtime): annotate context even if no incoming headers by @boolangery in #5887
feat: add Opaque API and Protobuf Editions support by @kop in #5723
fix: annotate healthz endpoint handler by @ZY-Ang in #5914
expand_slash_patterns=true now converts parameters with hyphens correctly by @goulashify in #5938

New Contributors

@cuiweixie made their first contribution in #5868
@boolangery made their first contribution in #5887
@kop made their first contribution in #5723
@ZY-Ang made their first contribution in #5914
@goulashify made their first contribution in #5938

Full Changelog: grpc-ecosystem/grpc-gateway@v2.27.2...v2.27.3

`v2.27.2`

Compare Source

What's Changed

Fix nested schema definition for body parameter (#3058) by @ilyongcho-moloco in #5827
Replace gopkg.in/yaml.v3 with go.yaml.in/yaml/v3 by @MB175 in #5857

New Contributors

@ilyongcho-moloco made their first contribution in #5827
@MB175 made their first contribution in #5857

Full Changelog: grpc-ecosystem/grpc-gateway@v2.27.1...v2.27.2

`v2.27.1`

Compare Source

What's Changed

fix: Use type name instead of full type declaration by @cabeedelhertz in #5679

New Contributors

@cabeedelhertz made their first contribution in #5679

Full Changelog: grpc-ecosystem/grpc-gateway@v2.27.0...v2.27.1

`v2.27.0`

Compare Source

What's Changed

Add docs about Issue #5241 by @WwhdsOne in #5309
feat(protoc-gen-openapiv2/template): updateSwaggerObjectFromFieldBeha… by @Ccheers in #5278
Update devcontainer by @johanbrandhorst in #5336
feat(bazel): surface --preserve_rpc_order in rule def by @lennrt in #5348
protoc-gen-openapiv2: Assign user-defined service name as method tag by @Shaxine in #5339
Add support for x-go-type flag by @rohitlohar45 in #5340
Fix go tool install instructions by @johanbrandhorst in #5426
Make GOBIN instructions explicit by @johanbrandhorst in #5431
Discard unused body of Unary and ClientStream methods by @paskozdilar in #5331
Add the source archive to the release assets by @hharrisd in #5438
Fix response_body by @ndtretyak in #5510
fix(openapi): Convert path params after colon to camelCase by @iamrajiv in #5601
fix(lint,gosec): explicitly ignore errors from discarded HTTP request… by @huin in #5645
protoc-gen-grpc-gateway: guard against nil on drain by @johanbrandhorst in #5668

New Contributors

@Ccheers made their first contribution in #5278
@lennrt made their first contribution in #5348
@Shaxine made their first contribution in #5339
@rohitlohar45 made their first contribution in #5340
@hharrisd made their first contribution in #5438
@ndtretyak made their first contribution in #5510

Full Changelog: grpc-ecosystem/grpc-gateway@v2.26.3...v2.26.4

`v2.26.7`

Compare Source

What's Changed

Revert "feat(generator): ha

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-08-31T23:11:09Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: gwy/templates/go.mod.tmpl

go: cannot find main module, but -modfile was set.
	-modfile cannot be used to set the module root directory.

renovate Bot force-pushed the renovate/github.com-grpc-ecosystem-grpc-gateway-2.x branch from 97cdd52 to 1f104a4 Compare September 25, 2026 21:10

renovate Bot force-pushed the renovate/github.com-grpc-ecosystem-grpc-gateway-2.x branch from 1f104a4 to ea659bd Compare October 15, 2026 05:06

Update module github.com/grpc-ecosystem/grpc-gateway to v2

533e5a0

renovate Bot force-pushed the renovate/github.com-grpc-ecosystem-grpc-gateway-2.x branch from ea659bd to 533e5a0 Compare October 27, 2026 14:49

Navigation Menu

Repository navigation

Update module github.com/grpc-ecosystem/grpc-gateway to v2 - #47

Update module github.com/grpc-ecosystem/grpc-gateway to v2#47
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/github.com-grpc-ecosystem-grpc-gateway-2.x

renovate Bot commented Aug 31, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Aug 31, 2026 •

edited

Loading

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Aug 31, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Notice to all users

Changes

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

New Features

Fixes

Documentation

Tests / CI / Infra

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

Configuration

Uh oh!

renovate Bot commented Aug 31, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: gwy/templates/go.mod.tmpl

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Aug 31, 2026 •

edited

Loading

renovate Bot commented Aug 31, 2026 •

edited

Loading