chore(deps): Update go minor and patch (main)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
github.com/dgraph-io/dgo/v250	require	digest	4a519e5 -> d609f43
github.com/dgraph-io/ristretto/v2	require	minor	v2.2.0 -> v2.3.0
github.com/golang/geo	require	digest	247f399 -> ecfc33a
github.com/graph-gophers/graphql-go	require	minor	v1.6.0 -> v1.7.0
github.com/mark3labs/mcp-go	require	minor	v0.37.0 -> v0.38.0
github.com/stretchr/testify	require	minor	v1.10.0 -> v1.11.0
golang.org/x/exp	require	digest	42675ad -> 8b4c13b
google.golang.org/grpc	require	minor	v1.74.2 -> v1.75.0
google.golang.org/protobuf	require	patch	v1.36.7 -> v1.36.8

---

Release Notes

dgraph-io/ristretto (github.com/dgraph-io/ristretto/v2)

v2.3.0: Ristretto v2.3.0

Compare Source

What's Changed

• chore(deps): Update go minor and patch by @​renovate[bot] in hypermodeinc#447
• Add public Cache.RemainingCost() method by @​xl-s in hypermodeinc#448
• chore(deps): Update module golang.org/x/sys to v0.33.0 by @​renovate[bot] in hypermodeinc#449
• chore(deps): Update dependency go to v1.24.3 by @​renovate[bot] in hypermodeinc#450
• chore(deps): Update dependency go to v1.24.4 by @​renovate[bot] in hypermodeinc#453
• Fix assertion in TestDropUpdates and trunk upgrade by @​mangalaman93 in hypermodeinc#452
• trunk upgrade by @​mangalaman93 in hypermodeinc#454
• Fix typo: ffor → for by @​maximal in hypermodeinc#456
• chore(deps): Update module golang.org/x/sys to v0.34.0 by @​renovate[bot] in hypermodeinc#457
• chore(deps): Update dependency go to v1.24.5 by @​renovate[bot] in hypermodeinc#458
• fix: correct grammar in error message by @​Fungx in hypermodeinc#461
• feat: Support uint Keys by @​jcalabro in hypermodeinc#463
• chore(deps): Update go minor and patch by @​renovate[bot] in hypermodeinc#462

New Contributors

• @​xl-s made their first contribution in hypermodeinc#448
• @​maximal made their first contribution in hypermodeinc#456
• @​Fungx made their first contribution in hypermodeinc#461
• @​jcalabro made their first contribution in hypermodeinc#463

Full Changelog: hypermodeinc/ristretto@v2.2.0...v2.3.0

graph-gophers/graphql-go (github.com/graph-gophers/graphql-go)

v1.7.0

Compare Source

What's Changed

• chore: update golangci-lint ver by @​pavelnikolov in #​664
• test: fuzz test schema exec by @​pavelnikolov in #​666
• ci(github): use GitHub actions by @​pavelnikolov in #​668
• feat(log): add panic logger func by @​pavelnikolov in #​669
• feat: allow immediate child selected fields introspection in resolvers by @​pavelnikolov in #​673

Important

The default branch of the repository is now main. The previous default branch (i.e. master) is still present but will not be updated anymore.

Full Changelog: graph-gophers/graphql-go@v1.6.0...v1.7.0

mark3labs/mcp-go (github.com/mark3labs/mcp-go)

v0.38.0

Compare Source

What's Changed

• fix: resolve stdio transport race condition for concurrent tool calls by @​ezynda3 in #​529
• fix CallToolResult json marshaling and unmarshaling: need structuredC… by @​sunfuze in #​523
• feat: refactor constants for resource content types by @​CocaineCong in #​489
• feat: add missing SetPrompts, DeleteResources, and SetResources methods by @​vasayxtx in #​445
• feat: support creating tools using go-struct-style input schema by @​Grivn in #​534
• fix: remove duplicate methods server.SetPrompts & server.SetResources by @​matthisholleville in #​542

New Contributors

• @​sunfuze made their first contribution in #​523
• @​Grivn made their first contribution in #​534
• @​matthisholleville made their first contribution in #​542

Full Changelog: mark3labs/mcp-go@v0.37.0...v0.38.0

stretchr/testify (github.com/stretchr/testify)

v1.11.0

Compare Source

What's Changed

Functional Changes

v1.11.0 Includes a number of performance improvements.

• Call stack perf change for CallerInfo by @​mikeauclair in #​1614
• Lazily render mock diff output on successful match by @​mikeauclair in #​1615
• assert: check early in Eventually, EventuallyWithT, and Never by @​cszczepaniak in #​1427
• assert: add IsNotType by @​bartventer in #​1730
• assert.JSONEq: shortcut if same strings by @​dolmen in #​1754
• assert.YAMLEq: shortcut if same strings by @​dolmen in #​1755
• assert: faster and simpler isEmpty using reflect.Value.IsZero by @​dolmen in #​1761
• suite: faster methods filtering (internal refactor) by @​dolmen in #​1758

Fixes

• assert.ErrorAs: log target type by @​craig65535 in #​1345
• Fix failure message formatting for Positive and Negative asserts in #​1062
• Improve ErrorIs message when error is nil but an error was expected by @​tsioftas in #​1681
• fix Subset/NotSubset when calling with mixed input types by @​siliconbrain in #​1729
• Improve ErrorAs failure message when error is nil by @​ccoVeille in #​1734
• mock.AssertNumberOfCalls: improve error msg by @​3scalation in #​1743

Documentation, Build & CI

• docs: Fix typo in README by @​alexandear in #​1688
• Replace deprecated io/ioutil with io and os by @​alexandear in #​1684
• Document consequences of calling t.FailNow() by @​greg0ire in #​1710
• chore: update docs for Unset #​1621 by @​techfg in #​1709
• README: apply gofmt to examples by @​alexandear in #​1687
• refactor: use %q and %T to simplify fmt.Sprintf by @​alexandear in #​1674
• Propose Christophe Colombier (ccoVeille) as approver by @​brackendawson in #​1716
• Update documentation for the Error function in assert or require package by @​architagr in #​1675
• assert: remove deprecated build constraints by @​alexandear in #​1671
• assert: apply gofumpt to internal test suite by @​ccoVeille in #​1739
• CI: fix shebang in .ci.*.sh scripts by @​dolmen in #​1746
• assert,require: enable parallel testing on (almost) all top tests by @​dolmen in #​1747
• suite.Passed: add one more status test report by @​Ararsa-Derese in #​1706
• Add Helper() method in internal mocks and assert.CollectT by @​dolmen in #​1423
• assert.Same/NotSame: improve usage of Sprintf by @​ccoVeille in #​1742
• mock: enable parallel testing on internal testsuite by @​dolmen in #​1756
• suite: cleanup use of 'testing' internals at runtime by @​dolmen in #​1751
• assert: check test failure message for Empty and NotEmpty by @​ccoVeille in #​1745
• deps: fix dependency cycle with objx (again) by @​dolmen in #​1567
• assert.Empty: comprehensive doc of "Empty"-ness rules by @​dolmen in #​1753
• doc: improve godoc of top level 'testify' package by @​dolmen in #​1760
• assert.ErrorAs: simplify retrieving the type name by @​ccoVeille in #​1740
• assert.EqualValues: improve test coverage to 100% by @​dolmen in #​1763
• suite.Run: simplify running of Setup/TeardownSuite by @​renzoarreaza in #​1769
• assert.CallerInfo: micro optimization by using LastIndexByte by @​dolmen in #​1767
• assert.CallerInfo: micro cleanup by @​dolmen in #​1768
• assert: refactor TestFileExists and TestDirExists tests to enable parallel testing by @​dolmen in #​1766
• suite.Run: refactor handling of stats for improved readability by @​dolmen in #​1764
• tests: improve captureTestingT helper by @​ccoVeille in #​1741
• build(deps): bump actions/checkout from 4 to 5 by @​dependabot[bot] in #​1778

New Contributors

• @​greg0ire made their first contribution in #​1710
• @​techfg made their first contribution in #​1709
• @​mikeauclair made their first contribution in #​1614
• @​cszczepaniak made their first contribution in #​1427
• @​architagr made their first contribution in #​1675
• @​tsioftas made their first contribution in #​1681
• @​siliconbrain made their first contribution in #​1729
• @​bartventer made their first contribution in #​1730
• @​Ararsa-Derese made their first contribution in #​1706
• @​renzoarreaza made their first contribution in #​1769
• @​3scalation made their first contribution in #​1743

Full Changelog: stretchr/testify@v1.10.0...v1.11.0

grpc/grpc-go (google.golang.org/grpc)

v1.75.0: Release 1.75.0

Compare Source

Behavior Changes

• xds: Remove support for GRPC_EXPERIMENTAL_XDS_FALLBACK environment variable. Fallback support can no longer be disabled. (#​8482)
• stats: Introduce DelayedPickComplete event, a type alias of PickerUpdated. (#​8465)
  • This (combined) event will now be emitted only once per call, when a transport is successfully selected for the attempt.
  • OpenTelemetry metrics will no longer have multiple "Delayed LB pick complete" events in Go, matching other gRPC languages.
  • A future release will delete the PickerUpdated symbol.
• credentials: Properly apply grpc.WithAuthority as the highest-priority option for setting authority, above the setting in the credentials themselves. (#​8488)
  • Now that this WithAuthority is available, the credentials should not be used to override the authority.
• round_robin: Randomize the order in which addresses are connected to in order to spread out initial RPC load between clients. (#​8438)
• server: Return status code INTERNAL when a client sends more than one request in unary and server streaming RPC. (#​8385)
  • This is a behavior change but also a bug fix to bring gRPC-Go in line with the gRPC spec.

New Features

• dns: Add an environment variable (GRPC_ENABLE_TXT_SERVICE_CONFIG) to provide a way to disable TXT lookups in the DNS resolver (by setting it to false). By default, TXT lookups are enabled, as they were previously. (#​8377)

Bug Fixes

• xds: Fix regression preventing empty node IDs in xDS bootstrap configuration. (#​8476)
  • Special Thanks: @​davinci26
• xds: Fix possible panic when certain invalid resources are encountered. (#​8412)
  • Special Thanks: @​wooffie
• xdsclient: Fix a rare panic caused by processing a response from a closed server. (#​8389)
• stats: Fix metric unit formatting by enclosing non-standard units like call and endpoint in curly braces to comply with UCUM and gRPC OpenTelemetry guidelines. (#​8481)
• xds: Fix possible panic when clusters are removed from the xds configuration. (#​8428)
• xdsclient: Fix a race causing "resource doesn not exist" when rapidly subscribing and unsubscribing to the same resource. (#​8369)
• client: When determining the authority, properly percent-encode (if needed, which is unlikely) when the target string omits the hostname and only specifies a port (grpc.NewClient(":<port-number-or-name>")). (#​8488)

protocolbuffers/protobuf-go (google.golang.org/protobuf)

v1.36.8

Compare Source

Maintenance:

CL/696316: all: set Go language version to Go 1.23
CL/696315: types: regenerate using latest protobuf v32 release

---

Configuration

📅 Schedule: Branch creation - "on Wednesday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 2 additional dependencies were updated

Details:

Package	Change
google.golang.org/genproto/googleapis/api	v0.0.0-20250603155806-513f23925822 -> v0.0.0-20250707201910-8d1bb00bc6a7
google.golang.org/genproto/googleapis/rpc	v0.0.0-20250603155806-513f23925822 -> v0.0.0-20250707201910-8d1bb00bc6a7