fix(deps): update go-libraries

[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update	Pending
cloud.google.com/go/datastore	v1.22.0 → v1.23.0			require	minor
cloud.google.com/go/monitoring	v1.27.0 → v1.29.0			require	minor
github.com/klauspost/compress	v1.18.5 → v1.18.6			require	patch
github.com/package-url/packageurl-go	v0.1.5 → v0.1.6			require	patch
go (source)	1.26.2 → 1.26.3			golang	patch
google.golang.org/api	v0.276.0 → v0.278.0			require	minor	v0.279.0
google.golang.org/grpc	v1.80.0 → v1.81.0			require	minor	v1.81.1
k8s.io/apimachinery	v0.35.4 → v0.36.0			require	minor	v0.36.1

---

Release Notes

klauspost/compress (github.com/klauspost/compress)

v1.18.6

Compare Source

What's Changed

• s2: Fix amd64 stack frame corruption by @​klauspost in #​1145
• gzhttp: Canonicalize ETag header by @​justinmayhew in #​1139
• perf: pool hash tables in Go encode paths to reduce allocations by @​huynhanx03 in #​1143

New Contributors

• @​justinmayhew made their first contribution in #​1139
• @​huynhanx03 made their first contribution in #​1143
• @​thaJeztah made their first contribution in #​1144

Full Changelog: klauspost/compress@v1.18.5...v1.18.6

package-url/packageurl-go (github.com/package-url/packageurl-go)

v0.1.6

Compare Source

golang/go (go)

v1.26.3

googleapis/google-api-go-client (google.golang.org/api)

v0.278.0

Compare Source

Features

• all: Auto-regenerate discovery clients (#​3582) (76b1187)
• all: Auto-regenerate discovery clients (#​3584) (e36c883)

v0.277.0

Compare Source

Features

• all: Auto-regenerate discovery clients (#​3567) (3958295)
• all: Auto-regenerate discovery clients (#​3571) (ca9851e)
• all: Auto-regenerate discovery clients (#​3574) (8efb1af)
• all: Auto-regenerate discovery clients (#​3575) (de49bb5)
• all: Auto-regenerate discovery clients (#​3577) (ce68c87)
• all: Auto-regenerate discovery clients (#​3578) (8be033e)
• all: Auto-regenerate discovery clients (#​3579) (bc6990e)
• all: Auto-regenerate discovery clients (#​3580) (2de1a5a)
• all: Auto-regenerate discovery clients (#​3581) (0c219d9)

Bug Fixes

• idtoken: Avoid double impersonation in tokenSourceFromBytes (#​3576) (75172cf), refs #​2301

grpc/grpc-go (google.golang.org/grpc)

v1.81.0: Release 1.81.0

Compare Source

Behavior Changes

• balancer/rls: Switch gauge metrics to asynchronous emission (once per collection cycle) to reduce telemetry noise and align with other gRPC language implementations. (#​8808)

Dependencies

• Minimum supported Go version is now 1.25. (#​8969)

Bug Fixes

• xds: Use the leaf cluster's security config for the TLS handshake instead of the aggregate cluster's config. (#​8956)
• transport: Send a RST_STREAM when receiving an END_STREAM when the stream is not already half-closed. (#​8832)
• xds: Fix ADS resource name validation to prevent a panic. (#​8970)

New Features

• grpc/stats: Add support for custom labels in per-call metrics (gRFC A108). (#​9008)
• xds: Add support for Server Name Indication (SNI) and SAN validation (gRFC A101). Disabled by default. To enable, set GRPC_EXPERIMENTAL_XDS_SNI=true environment variable. (#​9016)
• xds: Add support to control which fields get propagated from ORCA backend metric reports to LRS load reports (gRFC A85). Disabled by default. To enable, set GRPC_EXPERIMENTAL_XDS_ORCA_LRS_PROPAGATION=true. (#​9005)
• xds: Add metrics to track xDS client connectivity and cached resource state (gRFC A78). (#​8807)
• stats/otel: Enhance grpc.subchannel.disconnections metric by adding disconnection reason to the grpc.disconnect_error label (gRFC A94). This provides granular insights into why subchannels are closing. (#​8973)
• mem: Add mem.Buffer.Slice() API to slice the buffer like a slice. (#​8977)
  • Special Thanks: @​ash2k

Performance Improvements

• alts: Pool read buffers to lower memory utilization when sockets are unreadable. (#​8964)
• transport: Pool HTTP/2 framer read buffers to reduce idle memory consumption. Currently limited to Linux for ALTS and non-encrypted transports (TCP, Unix). To disable, set GRPC_GO_EXPERIMENTAL_HTTP_FRAMER_READ_BUFFER_POOLING=false and report any issues. (#​9032)

kubernetes/apimachinery (k8s.io/apimachinery)

v0.36.0

Compare Source

v0.35.5

Compare Source

---

Configuration

📅 Schedule: (in timezone Australia/Sydney)

• Branch creation
  • "before 6am on wednesday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[forking-renovate]

ℹ️ Artifact update notice

File name: bindings/go/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 3 additional dependencies were updated

Details:

Package	Change
golang.org/x/net	v0.49.0 -> v0.51.0
golang.org/x/sys	v0.40.0 -> v0.42.0
golang.org/x/text	v0.33.0 -> v0.34.0

File name: go/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 4 additional dependencies were updated

Details:

Package	Change
google.golang.org/protobuf	v1.36.11 -> v1.36.12-0.20260120151049-f2248ac996af
github.com/googleapis/enterprise-certificate-proxy	v0.3.14 -> v0.3.15
github.com/googleapis/gax-go/v2	v2.21.0 -> v2.22.0
google.golang.org/genproto/googleapis/rpc	v0.0.0-20260401024825-9d38bb4040a9 -> v0.0.0-20260427160629-7cedc36a6bc4