fix(deps): update module github.com/envoyproxy/go-control-plane to v0.14.0 - autoclosed

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/envoyproxy/go-control-plane	v0.13.4 → v0.14.0

---

Release Notes

envoyproxy/go-control-plane (github.com/envoyproxy/go-control-plane)

v0.14.0

Compare Source

What's Changed

• Fix go.sum for envoy module with repo released by @​valerian-roche in #​1081
• build(deps): Bump github/codeql-action from 3.27.9 to 3.28.1 by @​dependabot[bot] in #​1087
• build(deps): Bump actions/upload-artifact from 4.4.3 to 4.6.0 by @​dependabot[bot] in #​1086
• build(deps): Bump github.com/go-git/go-git/v5 from 5.12.0 to 5.13.0 in /internal/tools by @​dependabot[bot] in #​1090
• build(deps): Bump google.golang.org/protobuf from 1.36.1 to 1.36.2 in /xdsmatcher by @​dependabot[bot] in #​1084
• build(deps): Bump google.golang.org/grpc from 1.69.2 to 1.69.4 in /examples/dyplomat by @​dependabot[bot] in #​1085
• build(deps): Bump google.golang.org/grpc from 1.67.1 to 1.69.4 by @​dependabot[bot] in #​1089
• build(deps): Bump google.golang.org/protobuf from 1.35.2 to 1.36.3 by @​dependabot[bot] in #​1091
• build(deps): Bump google.golang.org/grpc from 1.69.4 to 1.70.0 in /examples/dyplomat by @​dependabot[bot] in #​1101
• build(deps): Bump google.golang.org/protobuf from 1.36.2 to 1.36.4 in /xdsmatcher by @​dependabot[bot] in #​1100
• build(deps): Bump github/codeql-action from 3.28.1 to 3.28.6 by @​dependabot[bot] in #​1099
• build(deps): Bump actions/stale from 9.0.0 to 9.1.0 by @​dependabot[bot] in #​1098
• build(deps): Bump golangci/golangci-lint-action from 6.1.1 to 6.2.0 by @​dependabot[bot] in #​1095
• build(deps): Bump golang.org/x/net from 0.32.0 to 0.33.0 in /examples/dyplomat by @​dependabot[bot] in #​1104
• build(deps): Bump google.golang.org/grpc from 1.69.4 to 1.70.0 by @​dependabot[bot] in #​1097
• build(deps): Bump golang.org/x/net from 0.30.0 to 0.33.0 by @​dependabot[bot] in #​1102
• build(deps): Bump google.golang.org/protobuf from 1.36.3 to 1.36.4 by @​dependabot[bot] in #​1096
• build(deps): Bump golang.org/x/net from 0.28.0 to 0.33.0 in /ratelimit by @​dependabot[bot] in #​1103
• chore: use testify instead of t.Fatal or t.Error by @​mmorel-35 in #​1040
• [chore]: enable perfsprint linter by @​mmorel-35 in #​1039
• fix: define custom build for codeql workflow by @​mmorel-35 in #​1105
• chore: setup dependabot for internal/tools by @​mmorel-35 in #​1106
• build(deps): Bump github.com/golangci/golangci-lint from 1.62.2 to 1.63.4 in /internal/tools by @​dependabot[bot] in #​1107
• build(deps): Bump go.opentelemetry.io/build-tools/multimod from 0.15.0 to 0.17.0 in /internal/tools by @​dependabot[bot] in #​1108
• chore: setup dependabot for new sub-modules by @​mmorel-35 in #​1110
• build(deps): Bump google.golang.org/grpc from 1.67.1 to 1.70.0 in /envoy by @​dependabot[bot] in #​1120
• build(deps): Bump google.golang.org/protobuf from 1.35.2 to 1.36.4 in /ratelimit by @​dependabot[bot] in #​1116
• build(deps): Bump google.golang.org/protobuf from 1.35.2 to 1.36.4 in /contrib by @​dependabot[bot] in #​1112
• build(deps): Bump github.com/envoyproxy/protoc-gen-validate from 1.1.0 to 1.2.1 in /envoy by @​dependabot[bot] in #​1118
• build(deps): Bump google.golang.org/protobuf from 1.35.2 to 1.36.4 in /envoy by @​dependabot[bot] in #​1115
• build(deps): Bump github.com/prometheus/client_model from 0.6.0 to 0.6.1 in /envoy by @​dependabot[bot] in #​1119
• build(deps): Bump github/codeql-action from 3.28.6 to 3.28.8 by @​dependabot[bot] in #​1122
• build(deps): Bump google.golang.org/protobuf from 1.36.4 to 1.36.5 in /xdsmatcher by @​dependabot[bot] in #​1130
• build(deps): Bump google.golang.org/protobuf from 1.36.4 to 1.36.5 in /contrib by @​dependabot[bot] in #​1129
• build(deps): Bump go.opentelemetry.io/build-tools/multimod from 0.17.0 to 0.18.0 in /internal/tools by @​dependabot[bot] in #​1127
• build(deps): Bump golangci/golangci-lint-action from 6.2.0 to 6.3.2 by @​dependabot[bot] in #​1125
• build(deps): Bump github/codeql-action from 3.28.8 to 3.28.9 by @​dependabot[bot] in #​1124
• build(deps): Bump google.golang.org/protobuf from 1.36.4 to 1.36.5 by @​dependabot[bot] in #​1126
• build(deps): Bump go.opentelemetry.io/proto/otlp from 1.0.0 to 1.5.0 in /envoy by @​dependabot[bot] in #​1113
• build(deps): Bump google.golang.org/protobuf from 1.36.4 to 1.36.5 in /ratelimit by @​dependabot[bot] in #​1131
• build(deps): Bump google.golang.org/protobuf from 1.36.4 to 1.36.5 in /envoy by @​dependabot[bot] in #​1128
• build(deps): Bump golangci/golangci-lint-action from 6.3.2 to 6.5.0 by @​dependabot[bot] in #​1135
• build(deps): Bump github.com/golangci/golangci-lint from 1.63.4 to 1.64.5 in /internal/tools by @​dependabot[bot] in #​1134
• deps: update go version from 1.22.0 to 1.23.0 by @​mmorel-35 in #​1132
• build(deps): Bump the k8s-io group across 1 directory with 2 updates by @​dependabot[bot] in #​1133
• build(deps): Bump sigs.k8s.io/aws-iam-authenticator from 0.6.12 to 0.6.30 in /examples/dyplomat by @​dependabot[bot] in #​1123
• build(deps): Bump actions/upload-artifact from 4.6.0 to 4.6.1 by @​dependabot[bot] in #​1138
• build(deps): Bump github/codeql-action from 3.28.9 to 3.28.10 by @​dependabot[bot] in #​1139
• build(deps): Bump ossf/scorecard-action from 2.4.0 to 2.4.1 by @​dependabot[bot] in #​1140
• build(deps): Bump github.com/google/go-cmp from 0.6.0 to 0.7.0 by @​dependabot[bot] in #​1141
• build(deps): Bump github.com/golangci/golangci-lint from 1.64.5 to 1.64.6 in /internal/tools by @​dependabot[bot] in #​1144
• build(deps): Bump go.opentelemetry.io/build-tools/multimod from 0.18.0 to 0.19.0 in /internal/tools by @​dependabot[bot] in #​1145
• build(deps): Bump google.golang.org/grpc from 1.70.0 to 1.71.0 in /examples/dyplomat by @​dependabot[bot] in #​1147
• build(deps): Bump google.golang.org/grpc from 1.70.0 to 1.71.0 by @​dependabot[bot] in #​1148
• build(deps): Bump go.opentelemetry.io/build-tools/multimod from 0.19.0 to 0.20.0 in /internal/tools by @​dependabot[bot] in #​1149
• build(deps): Bump google.golang.org/grpc from 1.70.0 to 1.71.0 in /contrib by @​dependabot[bot] in #​1151
• build(deps): Bump google.golang.org/grpc from 1.70.0 to 1.71.0 in /ratelimit by @​dependabot[bot] in #​1150
• build(deps): Bump github/codeql-action from 3.28.10 to 3.28.11 by @​dependabot[bot] in #​1153
• build(deps): Bump google.golang.org/grpc from 1.70.0 to 1.71.0 in /envoy by @​dependabot[bot] in #​1152
• dependabot: use directories by @​mmorel-35 in #​1154
• build(deps): Bump golang.org/x/net from 0.35.0 to 0.36.0 in /internal/tools by @​dependabot[bot] in #​1158
• build(deps): Bump golang.org/x/net from 0.34.0 to 0.36.0 by @​dependabot[bot] in #​1157
• build(deps): Bump golangci/golangci-lint-action from 6.5.0 to 6.5.2 by @​dependabot[bot] in #​1159
• build(deps): Bump github.com/golangci/golangci-lint from 1.64.6 to 1.64.8 in /internal/tools by @​dependabot[bot] in #​1160
• build(deps): Bump golang.org/x/net from 0.34.0 to 0.36.0 in /contrib by @​dependabot[bot] in #​1162
• chore: revert toolchain changes by @​mmorel-35 in #​1164
• build(deps): Bump the k8s-io group across 1 directory with 3 updates by @​dependabot[bot] in #​1163
• build(deps): Bump github.com/golangci/golangci-lint from 1.64.6 to 1.64.8 in /internal/tools by @​dependabot[bot] in #​1166
• build(deps): Bump actions/upload-artifact from 4.6.1 to 4.6.2 by @​dependabot[bot] in #​1165
• build(deps): Bump github/codeql-action from 3.28.11 to 3.28.13 by @​dependabot[bot] in #​1170
• build(deps): Bump google.golang.org/protobuf from 1.36.5 to 1.36.6 in /xdsmatcher by @​dependabot[bot] in #​1169
• build(deps): Bump google.golang.org/protobuf from 1.36.5 to 1.36.6 in /contrib by @​dependabot[bot] in #​1171
• build(deps): Bump google.golang.org/protobuf from 1.36.5 to 1.36.6 by @​dependabot[bot] in #​1168
• build(deps): Bump golangci/golangci-lint-action from 6.5.2 to 7.0.0 by @​dependabot[bot] in #​1167
• chore: clean up golangci-lint configuration by @​mmorel-35 in #​1174
• build(deps): Bump google.golang.org/grpc from 1.71.0 to 1.71.1 in /examples/dyplomat by @​dependabot[bot] in #​1181
• build(deps): Bump sigs.k8s.io/aws-iam-authenticator from 0.6.30 to 0.6.31 in /examples/dyplomat by @​dependabot[bot] in #​1179
• build(deps): Bump github/codeql-action from 3.28.13 to 3.28.15 by @​dependabot[bot] in #​1176
• build(deps): Bump google.golang.org/grpc from 1.71.0 to 1.71.1 in /contrib by @​dependabot[bot] in #​1178
• build(deps): Bump google.golang.org/grpc from 1.71.0 to 1.71.1 by @​dependabot[bot] in #​1177
• Fix typo in go-control-plane readme by @​asiawildboar in #​1183
• build(deps): Bump github.com/prometheus/client_model from 0.6.1 to 0.6.2 in /envoy by @​dependabot[bot] in #​1184
• build(deps): Bump github.com/golangci/golangci-lint/v2 from 2.0.2 to 2.1.1 in /internal/tools by @​dependabot[bot] in #​1185
• build(deps): Bump go.opentelemetry.io/build-tools/multimod from 0.20.0 to 0.22.0 in /internal/tools by @​dependabot[bot] in #​1186
• build(deps): Bump golang.org/x/net from 0.36.0 to 0.38.0 in /examples/dyplomat by @​dependabot[bot] in #​1187
• build(deps): Bump golang.org/x/net from 0.36.0 to 0.38.0 in /contrib by @​dependabot[bot] in #​1188
• build(deps): Bump golang.org/x/net from 0.36.0 to 0.38.0 by @​mmorel-35 in #​1189
• build(deps): Bump github.com/golangci/golangci-lint/v2 from 2.1.1 to 2.1.2 in /internal/tools by @​dependabot[bot] in #​1190
• build(deps): Bump google.golang.org/grpc from 1.71.1 to 1.72.0 by @​dependabot[bot] in #​1193
• build(deps): Bump github/codeql-action from 3.28.15 to 3.28.16 by @​dependabot[bot] in #​1200
• build(deps): Bump github.com/golangci/golangci-lint/v2 from 2.1.2 to 2.1.5 in /internal/tools by @​dependabot[bot] in #​1201
• build(deps): Bump golangci/golangci-lint-action from 7.0.0 to 8.0.0 by @​dependabot[bot] in #​1204
• build(deps): Bump github/codeql-action from 3.28.16 to 3.28.17 by @​dependabot[bot] in #​1202
• build(deps): Bump go.opentelemetry.io/proto/otlp from 1.5.0 to 1.6.0 in /envoy by @​dependabot[bot] in #​1205
• build(deps): Bump github.com/golangci/golangci-lint/v2 from 2.1.5 to 2.1.6 in /internal/tools by @​dependabot[bot] in #​1207
• build(deps): Bump go.opentelemetry.io/build-tools/multimod from 0.22.0 to 0.23.1 in /internal/tools by @​dependabot[bot] in #​1206
• build(deps): Bump github/codeql-action from 3.28.17 to 3.28.18 by @​dependabot[bot] in #​1209
• build(deps): Bump google.golang.org/grpc from 1.72.0 to 1.72.1 in /contrib by @​dependabot[bot] in #​1213
• build(deps): Bump google.golang.org/grpc from 1.72.0 to 1.72.1 in /examples/dyplomat by @​dependabot[bot] in #​1214
• build(deps): Bump google.golang.org/grpc from 1.72.0 to 1.72.1 by @​dependabot[bot] in #​1210
• build(deps): Bump google.golang.org/grpc from 1.72.1 to 1.72.2 in /examples/dyplomat by @​dependabot[bot] in #​1219
• build(deps): Bump google.golang.org/grpc from 1.72.1 to 1.72.2 in /contrib by @​dependabot[bot] in #​1217
• build(deps): Bump google.golang.org/grpc from 1.72.1 to 1.72.2 by @​dependabot[bot] in #​1216
• build(deps): Bump google.golang.org/grpc from 1.72.1 to 1.72.2 in /envoy by @​dependabot[bot] in #​1218
• build(deps): Bump ossf/scorecard-action from 2.4.1 to 2.4.2 by @​dependabot[bot] in #​1221
• build(deps): Bump go.opentelemetry.io/proto/otlp from 1.6.0 to 1.7.0 in /envoy by @​dependabot[bot] in #​1222
• build(deps): Bump github/codeql-action from 3.28.18 to 3.28.19 by @​dependabot[bot] in #​1224
• build(deps): Bump google.golang.org/grpc from 1.72.2 to 1.73.0 by @​dependabot[bot] in #​1227
• build(deps): Bump github/codeql-action from 3.28.19 to 3.29.0 by @​dependabot[bot] in #​1234
• update ratelimit config api by @​zhaohuabing in #​1223
• build(deps): Bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 in /internal/tools by @​dependabot[bot] in #​1237
• build(deps): Bump github/codeql-action from 3.29.0 to 3.29.2 by @​dependabot[bot] in #​1238
• build(deps): Bump github.com/golangci/golangci-lint/v2 from 2.1.6 to 2.2.1 in /internal/tools by @​dependabot[bot] in #​1239
• build(deps): Bump go.opentelemetry.io/build-tools/multimod from 0.23.1 to 0.24.0 in /internal/tools by @​dependabot[bot] in #​1240
• build(deps): Bump github.com/golangci/golangci-lint/v2 from 2.2.1 to 2.2.2 in /internal/tools by @​dependabot[bot] in #​1241
• build(deps): Bump github/codeql-action from 3.29.2 to 3.29.3 by @​dependabot[bot] in #​1243
• build(deps): Bump github.com/golangci/golangci-lint/v2 from 2.2.2 to 2.3.1 in /internal/tools by @​dependabot[bot] in #​1249
• build(deps): Bump google.golang.org/grpc from 1.73.0 to 1.74.2 by @​dependabot[bot] in #​1246
• build(deps): Bump github/codeql-action from 3.29.3 to 3.29.5 by @​dependabot[bot] in #​1255
• build(deps): Bump go.opentelemetry.io/build-tools/multimod from 0.24.0 to 0.26.0 in /internal/tools by @​dependabot[bot] in #​1250
• build(deps): Bump go.opentelemetry.io/proto/otlp from 1.7.0 to 1.7.1 in /envoy by @​dependabot[bot] in #​1256
• ignore var-naming on pkg/cache/types by @​mmorel-35 in #​1254
• build(deps): Bump github/codeql-action from 3.29.7 to 3.29.8 by @​dependabot[bot] in #​1257
• build(deps): Bump google.golang.org/protobuf from 1.36.6 to 1.36.7 by @​dependabot[bot] in #​1258
• build(deps): Bump actions/checkout from 4.2.2 to 5.0.0 by @​dependabot[bot] in #​1261
• build(deps): Bump go.opentelemetry.io/build-tools/multimod from 0.26.0 to 0.26.1 in /internal/tools by @​dependabot[bot] in #​1263
• Release Envoy 1.34.4 by @​nezdolik in #​1244
• build(deps): Bump github/codeql-action from 3.29.8 to 3.30.5 by @​dependabot[bot] in #​1297
• build(deps): Bump actions/stale from 9.1.0 to 10.0.0 by @​dependabot[bot] in #​1283
• build(deps): Bump github.com/stretchr/testify from 1.10.0 to 1.11.1 in /xdsmatcher by @​dependabot[bot] in #​1279
• build(deps): Bump github.com/stretchr/testify from 1.10.0 to 1.11.1 by @​dependabot[bot] in #​1280
• build(deps): Bump google.golang.org/grpc from 1.74.2 to 1.75.1 in /examples/dyplomat by @​dependabot[bot] in #​1290
• build(deps): Bump google.golang.org/grpc from 1.74.2 to 1.75.1 in /contrib by @​dependabot[bot] in #​1288
• build(deps): Bump google.golang.org/grpc from 1.74.2 to 1.75.1 by @​dependabot[bot] in #​1287
• build(deps): Bump google.golang.org/grpc from 1.74.2 to 1.75.1 in /ratelimit by @​dependabot[bot] in #​1292
• build(deps): Bump google.golang.org/grpc from 1.74.2 to 1.75.1 in /envoy by @​dependabot[bot] in #​1289
• [sotw][linear] Fix missing watch cleanup in linear cache for sotw watches subscribing to multiple resources by @​valerian-roche in #​1298
• [sotw][issue-540] Return full state when applicable for watches in linear cache by @​valerian-roche in #​1299
• build(deps): Bump github/codeql-action from 3.30.5 to 3.30.6 by @​dependabot[bot] in #​1302
• build(deps): Bump actions/stale from 10.0.0 to 10.1.0 by @​dependabot[bot] in #​1303
• build(deps): Bump ossf/scorecard-action from 2.4.2 to 2.4.3 by @​dependabot[bot] in #​1304
• build(deps): Bump google.golang.org/protobuf from 1.36.7 to 1.36.10 in /contrib by @​dependabot[bot] in #​1307
• build(deps): Bump google.golang.org/protobuf from 1.36.7 to 1.36.10 in /xdsmatcher by @​dependabot[bot] in #​1315
• build(deps): Bump google.golang.org/protobuf from 1.36.7 to 1.36.10 by @​dependabot[bot] in #​1306
• [server][cache] Ensure subscription is properly updated for sotw and delta by @​valerian-roche in #​1300
• [Sotw][Linear cache] Ensure watches are properly considering subscription changes to not miss new resources by @​valerian-roche in #​1301
• build(deps): Bump github/codeql-action from 3.30.6 to 4.30.8 by @​dependabot[bot] in #​1317
• [Simple] Fix request/response loop if a non-wildcard request points to a resource not currently in the cache by @​valerian-roche in #​1319
• [Linear cache] rework watches and storage in the cache to make code more common between delta and sotw by @​valerian-roche in #​1320
• [Linear cache] Increase mutualization between delta and sotw in linear cache to have behavior driven logic instead by @​valerian-roche in #​1322
• [Linear] Ensure a resource is only serialized/hashed at most once to reply it by @​valerian-roche in #​1324
• build(deps): Bump github/codeql-action from 4.30.8 to 4.31.0 by @​dependabot[bot] in #​1327
• build(deps): Bump actions/upload-artifact from 4.6.2 to 5.0.0 by @​dependabot[bot] in #​1328
• Implements Fetch in MuxCache by @​davinci26 in #​1326
• build(deps): Bump github/codeql-action from 4.31.0 to 4.31.2 by @​dependabot[bot] in #​1330
• options to deactivate legacy wildcard by @​zhiyanfoo in #​1323
• Release go-control-plane v0.14.0 by @​valerian-roche in #​1333

New Contributors

• @​asiawildboar made their first contribution in #​1183
• @​nezdolik made their first contribution in #​1244
• @​davinci26 made their first contribution in #​1326

Full Changelog: envoyproxy/go-control-plane@v0.13.4...v0.14.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 15 additional dependencies were updated

Details:

Package	Change
github.com/go-logr/logr	v1.4.2 -> v1.4.3
google.golang.org/grpc	v1.71.1 -> v1.75.1
github.com/envoyproxy/go-control-plane/envoy	v1.32.4 -> v1.36.0
cel.dev/expr	v0.19.1 -> v0.24.0
github.com/prometheus/client_model	v0.6.1 -> v0.6.2
golang.org/x/mod	v0.24.0 -> v0.25.0
golang.org/x/net	v0.38.0 -> v0.42.0
golang.org/x/oauth2	v0.25.0 -> v0.30.0
golang.org/x/sync	v0.12.0 -> v0.16.0
golang.org/x/sys	v0.32.0 -> v0.34.0
golang.org/x/term	v0.30.0 -> v0.33.0
golang.org/x/text	v0.23.0 -> v0.27.0
golang.org/x/tools	v0.31.0 -> v0.34.0
google.golang.org/genproto/googleapis/api	v0.0.0-20250106144421-5f5ef82da422 -> v0.0.0-20250728155136-f173205681a0
google.golang.org/genproto/googleapis/rpc	v0.0.0-20250115164207-1a7da9e5054f -> v0.0.0-20250728155136-f173205681a0