chore: bump cloud.google.com/go/compute/metadata from 0.7.0 to 0.9.0

[dependabot]

Bumps cloud.google.com/go/compute/metadata from 0.7.0 to 0.9.0.

Release notes

Sourced from cloud.google.com/go/compute/metadata's releases.

compute/metadata: v0.9.0

0.9.0 (2025-09-24)

Features

• compute/metadata: Retry on HTTP 429 (#12932) (1e91f5c)

managedkafka: v0.8.1

0.8.1 (2025-09-18)

Bug Fixes

• managedkafka: Upgrade gRPC service registration func (a10ecc9)

compute/metadata: v0.8.4

0.8.4 (2025-09-18)

Bug Fixes

• compute/metadata: Set subClient for UseDefaultClient case (#12911) (9e2646b)

compute/metadata: v0.8.3

0.8.3 (2025-09-17)

Bug Fixes

• compute/metadata: Disable Client timeouts for subscription client (#12910) (187a58a)

compute/metadata: v0.8.2

0.8.2 (2025-09-17)

Bug Fixes

• compute/metadata: Racy test and uninitialized subClient (#12892) (4943ca2), refs #12888

compute/metadata: v0.8.1

0.8.1 (2025-09-16)

Bug Fixes

• compute/metadata: Use separate client for subscribe methods (#12885) (76b80f8)

Changelog

Sourced from cloud.google.com/go/compute/metadata's changelog.

Code changes required from v0.9.0

• pubsub: Replace

  sub.ModifyPushConfig(ctx, pubsub.PushConfig{Endpoint: "https://example.com/push"})
  

  with

  sub.Update(ctx, pubsub.SubscriptionConfigToUpdate{
      PushConfig: &pubsub.PushConfig{Endpoint: "https://example.com/push"},
  })
  

• trace: traceGRPCServerInterceptor will be provided from *trace.Client. Given an initialized *trace.Client named tc, instead of

  s := grpc.NewServer(grpc.UnaryInterceptor(trace.GRPCServerInterceptor(tc)))
  

  write

  s := grpc.NewServer(grpc.UnaryInterceptor(tc.GRPCServerInterceptor()))
  

• trace trace.GRPCClientInterceptor will also provided from *trace.Client. Instead of

  conn, err := grpc.Dial(srv.Addr, grpc.WithUnaryInterceptor(trace.GRPCClientInterceptor()))
  

  write

  conn, err := grpc.Dial(srv.Addr, grpc.WithUnaryInterceptor(tc.GRPCClientInterceptor()))
  

• trace: We removed the deprecated trace.EnableGRPCTracing. Use the gRPC interceptor as a dial option as shown below when initializing Cloud package clients:

  c, err := pubsub.NewClient(ctx, "project-id", option.WithGRPCDialOption(grpc.WithUnaryInterceptor(tc.GRPCClientInterceptor())))
  if err != nil {
      ...
  

... (truncated)

Commits

• d4f8670 BREAKING: all: regenerate toolkit client
• 23179f2 readme: document Trace and Error Reporting clients
• c2e00bb trace: switch to grpc-trace-bin for gRPC calls
• 1de0ed4 rpcreplay: Fprintf functions
• 8878988 bigtable/bttest: Return proper error code when entity already exists
• e432073 bigtable: Don't retry on INTERNAL errors.
• 84bf648 rpcreplay: responses to code review comments from previous CL
• e687f27 rpcreplay: replay of unary RPCs
• 9da216d spanner: more integration tests
• a089e75 logging: document that Close flushes the loggers
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
❌ Deployment failed View logs	codeserver	41e4475	Sep 29 2025, 03:30 PM

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	cloud.google.com/​go/​compute/​metadata@​v0.7.0 ⏵ v0.9.0	+1

View full report

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.