chore(all): update deps

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
gazelle	bazel_dep	minor	0.48.0 → 0.50.0
go (source)	toolchain	patch	1.26.1 → 1.26.2
golang (source)		patch	1.26.1 → 1.26.2
golang.org/x/crypto	require	minor	v0.49.0 → v0.50.0
golang.org/x/net	require	minor	v0.52.0 → v0.53.0
google.golang.org/grpc	require	minor	v1.79.3 → v1.80.0

---

Release Notes

bazel-contrib/bazel-gazelle (gazelle)

v0.50.0

What's Changed

• Revert "go_deps: allow local module replacements, with a flag (#​2317)" by @​jayconrod in #​2321
• go_repository_tools: build with -buildvcs=false by @​jayconrod in #​2324
• go_deps: don't print version mismatch messages for go.work modules by @​jayconrod in #​2325

Full Changelog: bazel-contrib/bazel-gazelle@v0.49.0...v0.50.0

v0.49.0

What's Changed

• go_deps: allow local module replacements, with a flag by @​jayconrod in #​2317
• MODULE.bazel: load dependencies from go.work instead of go.mod by @​jayconrod in #​2320
• Add a directive_file directive by @​shs96c in #​2314

Full Changelog: bazel-contrib/bazel-gazelle@v0.48.0...v0.49.0

golang/go (go)

v1.26.2

grpc/grpc-go (google.golang.org/grpc)

v1.80.0: Release 1.80.0

Compare Source

Behavior Changes

• balancer: log a warning if a balancer is registered with uppercase letters, as balancer names should be lowercase. In a future release, balancer names will be treated as case-insensitive; see #​5288 for details. (#​8837)
• xds: update resource error handling and re-resolution logic (#​8907)
  • Re-resolve all LOGICAL_DNS clusters simultaneously when re-resolution is requested.
  • Fail all in-flight RPCs immediately upon receipt of listener or route resource errors, instead of allowing them to complete.

Bug Fixes

• xds: support the LB policy configured in LOGICAL_DNS cluster resources instead of defaulting to pick_first. (#​8733)
• credentials/tls: perform per-RPC authority validation against the leaf certificate instead of the entire peer certificate chain. (#​8831)
• xds: enabling A76 ring hash endpoint keys no longer causes EDS resources with invalid proxy metadata to be NACKed when HTTP CONNECT (gRFC A86) is disabled. (#​8875)
• xds: validate that the sum of endpoint weights in a locality does not exceed the maximum uint32 value. (#​8899)
  • Special Thanks: @​RAVEYUS
• xds: fix incorrect proto field access in the weighted round robin (WRR) configuration where blackout_period was used instead of weight_expiration_period. (#​8915)
  • Special Thanks: @​gregbarasch
• xds/rbac: handle addresses with ports in IP matchers. (#​8990)

New Features

• ringhash: enable gRFC A76 (endpoint hash keys and request hash headers) by default. (#​8922)

Performance Improvements

• credentials/alts: pool write buffers to reduce memory allocations and usage. (#​8919)
• grpc: enable the use of pooled write buffers for buffering HTTP/2 frame writes by default. This reduces memory usage when connections are idle. Use the WithSharedWriteBuffer dial option or the SharedWriteBuffer server option to disable this feature. (#​8957)
• xds/priority: stop caching child LB policies removed from the configuration. This will help reduce memory and cpu usage when localities are constantly switching between priorities. (#​8997)
• mem: add a faster tiered buffer pool; use the experimental mem.NewBinaryTieredBufferPool function to create such pools. (#​8775)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Monday through Friday (* * * * 1-5)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[forking-renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 4 additional dependencies were updated

Details:

Package	Change
golang.org/x/sys	v0.42.0 -> v0.43.0
golang.org/x/term	v0.41.0 -> v0.42.0
golang.org/x/text	v0.35.0 -> v0.36.0
google.golang.org/genproto/googleapis/rpc	v0.0.0-20251202230838-ff82c1b0f217 -> v0.0.0-20260120221211-b8f7ae30c516