Update Go deps

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
buf.build/go/protovalidate	v1.2.0 → v1.3.0
github.com/cerbos/cerbos/api/genpb	v0.54.0 → v0.55.0
github.com/vektra/mockery/v3	v3.7.2 → v3.7.3
golang.org/x/crypto	v0.54.0 → v0.55.0
golang.org/x/tools	v0.48.0 → v0.49.0
google.golang.org/protobuf	v1.36.11 → v1.36.12

---

Release Notes

bufbuild/protovalidate-go (buf.build/go/protovalidate)

v1.3.0

Compare Source

This release adds support for Native standard validation rules which greatly improve evaluation performance. See #​316 for more details.

What's Changed

• Implement native rules for the predefined protovalidate rules by @​jonbodner-buf in #​316
• Fix error message for string.not_contains in native rules by @​jonbodner-buf in #​319
• Improve formatting, NaN handling, and header validation by @​jonbodner-buf in #​320
• Fix regression in Violation.RuleValue for native rules by @​pkwarren in #​325
• Exclude the trailing dot from the hostname 253-character limit by @​LordAizen1 in #​332
• Use CEL PartialVars during AST pruning by @​TristonianJones in #​333

New Contributors

• @​jonbodner-buf made their first contribution in #​317
• @​LordAizen1 made their first contribution in #​332
• @​TristonianJones made their first contribution in #​333

Full Changelog: bufbuild/protovalidate-go@v1.2.0...v1.3.0

cerbos/cerbos (github.com/cerbos/cerbos/api/genpb)

v0.55.0

Compare Source

Cerbos 0.55.0

View the full release notes at https://docs.cerbos.dev/cerbos/latest/releases/v0.55.0.html

Changelog

• 2f4bb25 Add missing build tags (#​3323)
• d7e5883 Add v0.55.0 release notes (#​3325)
• f8e167b Bump body-parser from 1.20.5 to 1.20.6 in /npm/test/registry (#​3293)
• 0fdc6f5 Bump brace-expansion from 5.0.8 to 5.0.9 in /npm/test/registry (#​3313)
• e5c7ffd Bump fast-uri from 3.1.2 to 3.1.4 in /npm/test/registry (#​3290)
• 5826462 Bump fast-uri from 3.1.4 to 3.1.5 in /npm/test/registry (#​3314)
• c925516 Bump google.golang.org/grpc from 1.81.0 to 1.82.1 in /hack/loadtest (#​3286)
• 82bbb66 Bump google.golang.org/grpc from 1.82.0 to 1.82.1 in /api/genpb (#​3288)
• ee46565 Bump google.golang.org/grpc from 1.82.0 to 1.82.1 in /tools (#​3289)
• 0e5ff37 Bump js-yaml and verdaccio in /npm/test/registry (#​3294)
• 459cd46 Enable constant folding in CEL expressions (#​3316)
• c1d466d Fix inconsistent behaviour of CEL functions 'except', 'hasIntersection', 'intersect' and 'isSubset' (#​3306)
• 85b6551 Handle YAML block scalar syntax in test fixture attributes (#​3305)
• a1f8f8a Plan API log clear error when optional type is retained in residual expression (#​3324)
• 8301e92 Refactor engine tests (#​3317)
• 2b47665 Remove stargazers section from README (#​3321)
• 17a7c12 Replace gsutil with gcloud storage (#​3284)
• 3b26a1e Set log level to error for CI performance regression test (#​3304)
• 69bed7f Strict evaluation mode (#​3312)
• 91dd560 Support multiple JWTs (#​3283)
• 317b9b6 Update GitHub Actions deps (#​3292)
• a9b1034 Update GitHub Actions deps (#​3309)
• 2b49097 Update GitHub Actions deps to v7 (#​3301)
• 65d0c38 Update Go deps (#​3298)
• 285c529 Update Go deps (#​3311)
• 48c32d0 Update Go deps (#​3319)
• 10ebc7c Update Helm release seaweedfs to v4.40.0 (#​3299)
• d166fdd Update Node.js deps (#​3297)
• 4d6cf52 Update actions/cache action to v6 (#​3300)
• 4d40ced Update cerbos/actions to 120749e (#​3318)
• 03a0e72 Update cerbos/actions to 7df6503 (#​3291)
• 22e2197 Update cerbos/actions to cb30b08 (#​3310)
• c088d49 Update dependency node to v24.18.1 (#​3308)
• ad7fecc Update module github.com/cenkalti/backoff/v5 to v7 (#​3302)
• 7368d7f Update module google.golang.org/grpc to v1.82.1 [SECURITY] (#​3287)
• c861c26 Update npm to v12 (#​3303)
• 4962984 Update to Go 1.26 (#​3322)
• fa056fa Upgrade to CEL 0.30.0 and enable new extensions (#​3296)
• 2901f64 chore(release): Prepare release 0.55.0
• d9019a5 chore(version): Bump version to 0.55.0

vektra/mockery (github.com/vektra/mockery/v3)

v3.7.3

Compare Source

What's Changed

• chore(tools): Update dependencies for licensing by @​LandonTClipp in #​1169
• v3: avoid in-package import collisions with package-scope declarations by @​dgollahon-plaid in #​1170

New Contributors

• @​dgollahon-plaid made their first contribution in #​1170

Full Changelog: vektra/mockery@v3.7.2...v3.7.3

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 4 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.25.11 -> 1.26.4
github.com/planetscale/vtprotobuf	v0.6.1-0.20250313105119-ba97887b0a25 -> v0.6.1-0.20260702190614-8ae5a48058df
buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go	v1.36.11-20260415201107-50325440f8f2.1 -> v1.36.11-20260709200747-435963d16310.1
github.com/google/cel-go	v0.29.0 -> v0.30.0
golang.org/x/text	v0.40.0 -> v0.41.0

[github-actions]

The latest Buf updates on your PR. Results from workflow Pull Request / buf (pull_request).

Build	Format	Lint	Breaking	Updated (UTC)
✅ passed	✅ passed	✅ passed	✅ passed	Aug 21, 2026, 7:36 AM

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.