chore(deps): update checkoutservice

[elastic-renovate-prod]

This PR contains the following updates:

Package	Type	Update	Change
github.com/IBM/sarama	require	minor	v1.43.3 -> v1.45.0
go (source)	toolchain	minor	1.22.9 -> 1.23.5
golang		minor	1.22-alpine -> 1.23-alpine
golang	final	minor	1.22-alpine -> 1.23-alpine
golang	stage	minor	1.22-alpine -> 1.23-alpine
google.golang.org/grpc	require	patch	v1.69.0 -> v1.69.4
google.golang.org/protobuf	require	minor	v1.35.2 -> v1.36.3

---

Release Notes

IBM/sarama (github.com/IBM/sarama)

v1.45.0: Version 1.45.0 (2025-01-07)

Compare Source

[!NOTE]
The go.mod directive has been bumped to 1.21 as the minimum version of Go required for the module. This was necessary to continue to receive updates from some of the third party dependencies that Sarama makes use of for compression.

What's Changed

🐛 Fixes

• fix(admin): add retries for GroupCoordinator errors by @​dnwe in https://github.com/IBM/sarama/pull/3053

📦 Dependency updates

• chore(deps): bump github.com/klauspost/compress from 1.17.9 to 1.17.11 by @​dependabot in https://github.com/IBM/sarama/pull/2999
• chore(deps): bump golang.org/x/net from 0.33.0 to 0.34.0 in the golang-org-x group by @​dependabot in https://github.com/IBM/sarama/pull/3054

🔧 Maintenance

• chore: bump minimum go to 1.21 by @​dnwe in https://github.com/IBM/sarama/pull/3048
• chore(test): tag all unittests as !integration by @​dnwe in https://github.com/IBM/sarama/pull/3047
• chore(test): include kafka 4.0.0 in FV testing by @​dnwe in https://github.com/IBM/sarama/pull/3045
• fix(ci): restore the Kafka 4.0.0 FV by @​dnwe in https://github.com/IBM/sarama/pull/3055

Full Changelog: IBM/sarama@v1.44.0...v1.45.0

v1.44.0: Version 1.44.0 (2024-12-27)

Compare Source

[!NOTE]
The go.mod directive has been bumped to 1.20 as the minimum version of Go required for the module. This was necessary to continue to receive updates from some of the third party dependencies that Sarama makes use of for compression.

What's Changed

🎉 New Features / Improvements

• feat: update go directive to 1.20 by @​mauri870 in https://github.com/IBM/sarama/pull/2933
• feat(producer): add retry buffer tuning option to prevent OOM by @​wanwenli in https://github.com/IBM/sarama/pull/3026
• feat(admin): implement leader election api by @​chengjoey in https://github.com/IBM/sarama/pull/3030

🐛 Fixes

• fix: log SASL connection and handshake errors by @​pierDipi in https://github.com/IBM/sarama/pull/2995

📦 Dependency updates

• chore(deps): bump the golang-org-x group across 1 directory with 2 updates by @​dependabot in https://github.com/IBM/sarama/pull/3010
• chore(deps): bump golang.org/x/crypto from 0.28.0 to 0.31.0 in the go_modules group by @​dependabot in https://github.com/IBM/sarama/pull/3041
• chore(deps): bump the golang-org-x group across 1 directory with 2 updates by @​dependabot in https://github.com/IBM/sarama/pull/3040
• chore(deps): bump github.com/pierrec/lz4/v4 from 4.1.21 to 4.1.22 by @​dependabot in https://github.com/IBM/sarama/pull/3038
• chore(deps): bump the go_modules group across 2 directories with 1 update by @​dependabot in https://github.com/IBM/sarama/pull/3035
• chore(deps): bump golang.org/x/crypto from 0.22.0 to 0.31.0 in /examples/consumergroup in the go_modules group by @​dependabot in https://github.com/IBM/sarama/pull/3033
• chore(deps): bump golang.org/x/crypto from 0.22.0 to 0.31.0 in /examples/txn_producer in the go_modules group by @​dependabot in https://github.com/IBM/sarama/pull/3034
• chore(deps): bump golang.org/x/crypto from 0.22.0 to 0.31.0 in /examples/interceptors in the go_modules group by @​dependabot in https://github.com/IBM/sarama/pull/3032
• chore(deps): bump golang.org/x/crypto from 0.22.0 to 0.31.0 in /examples/exactly_once in the go_modules group by @​dependabot in https://github.com/IBM/sarama/pull/3031
• chore(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0 by @​dependabot in https://github.com/IBM/sarama/pull/3020

🔧 Maintenance

• chore: add newer kafka versions and bump Go in CI by @​dnwe in https://github.com/IBM/sarama/pull/2969
• fix(lint): resolve IDENTICAL_BRANCHES issue in broker by @​frzifus in https://github.com/IBM/sarama/pull/2992
• chore: add version consts for 3.8.1+3.9.0 by @​dnwe in https://github.com/IBM/sarama/pull/3011
• fix(client): refactor duplicated replica+partition logic by @​Trinoooo in https://github.com/IBM/sarama/pull/2925
• chore(deps): bump golang.org/x/net to v0.33.0 by @​dnwe in https://github.com/IBM/sarama/pull/3044

New Contributors

• @​mauri870 made their first contribution in https://github.com/IBM/sarama/pull/2933
• @​frzifus made their first contribution in https://github.com/IBM/sarama/pull/2992
• @​pierDipi made their first contribution in https://github.com/IBM/sarama/pull/2995
• @​wanwenli made their first contribution in https://github.com/IBM/sarama/pull/3026
• @​Trinoooo made their first contribution in https://github.com/IBM/sarama/pull/2925
• @​chengjoey made their first contribution in https://github.com/IBM/sarama/pull/3030

Full Changelog: IBM/sarama@v1.43.3...v1.44.0

grpc/grpc-go (google.golang.org/grpc)

v1.69.4: Release 1.69.4

Compare Source

Bug Fixes

• rbac: fix support for :path header matchers, which would previously never successfully match (#​7965).

Documentation

• examples/features/csm_observability: update example client and server to use the helloworld service instead of echo service (#​7945).

v1.69.2: Release 1.69.2

Compare Source

Bug Fixes

• stats/experimental: add type aliases for symbols (Metrics/etc) that were moved to the stats package (#​7929).
• client: set user-agent string to the correct version.

protocolbuffers/protobuf-go (google.golang.org/protobuf)

v1.36.3

Compare Source

Full Changelog: protocolbuffers/protobuf-go@v1.36.2...v1.36.3

Bug fixes:
CL/642575: reflect/protodesc: fix panic when working with dynamicpb
CL/641036: cmd/protoc-gen-go: remove json struct tags from unexported fields

User-visible changes:
CL/641876: proto: add example for GetExtension, SetExtension
CL/642015: runtime/protolazy: replace internal doc link with external link

Maintenance:
CL/641635: all: split flags.ProtoLegacyWeak out of flags.ProtoLegacy
CL/641019: internal/impl: remove unused exporter parameter
CL/641018: internal/impl: switch to reflect.Value.IsZero
CL/641035: internal/impl: clean up unneeded Go<1.12 MapRange() alternative
CL/641017: types/dynamicpb: switch atomicExtFiles to atomic.Uint64 type

v1.36.2

Compare Source

Full Changelog: protocolbuffers/protobuf-go@v1.36.1...v1.36.2

Bug fixes:
CL/638515: internal/impl: fix WhichOneof() to work with synthetic oneofs

v1.36.1

Compare Source

Full Changelog: protocolbuffers/protobuf-go@v1.36.0...v1.36.1

Bug fixes:
CL/638495: internal/impl: revert IsSynthetic() check to fix panic

Maintenance:
CL/637475: internal/errors: delete compatibility code for Go before 1.13

v1.36.0

Compare Source

Full Changelog: protocolbuffers/protobuf-go@v1.35.2...v1.36.0

User-visible changes:

CL/635139: src/google/protobuf: document UnmarshalJSON / API level behavior
CL/635138: reflect/protoreflect: use [] syntax to reference method
CL/635137: proto: add reference to size semantics with lazy decoding to comment
CL/634818: compiler/protogen: allow overriding API level from --go_opt
CL/634817: cmd/protoc-gen-go: generate _protoopaque variant for hybrid
CL/634816: all: regenerate.bash for Opaque API
CL/634815: all: Release the Opaque API
CL/634015: types/descriptorpb: regenerate using latest protobuf v29.1 release
CL/632735: internal/impl: skip synthetic oneofs in messageInfo
CL/627876: all: start v1.35.2-devel

---

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[elastic-renovate-prod]

ℹ Artifact update notice

File name: src/checkoutservice/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 5 additional dependencies were updated

Details:

Package	Change
github.com/klauspost/compress	v1.17.9 -> v1.17.11
github.com/pierrec/lz4/v4	v4.1.21 -> v4.1.22
golang.org/x/crypto	v0.30.0 -> v0.32.0
golang.org/x/net	v0.32.0 -> v0.34.0
golang.org/x/sys	v0.28.0 -> v0.29.0