xds/rbac: Fix a potential authorization bypass caused by incorrectly falling through URI/DNS SANs to Subject Distinguished Name (DN) when matching the authenticated principal name. With this fix, only the first non-empty identity source will be used, as per gRFC A41. (#9111)
Updates software.sslmate.com/src/go-pkcs12 from 0.7.0 to 0.7.1
���� This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.
## 📋 Pull Request Information
**Original PR:** https://github.com/fosrl/newt/pull/356
**Author:** [@dependabot[bot]](https://github.com/apps/dependabot)
**Created:** 5/15/2026
**Status:** 🔄 Open
**Base:** `main` ← **Head:** `dependabot/go_modules/prod-patch-updates-d9ad24fc58`
---
### 📝 Commits (2)
- [`1defbf0`](https://github.com/fosrl/newt/commit/1defbf0b4f9812d72c924e9289c622fc7ab2957b) chore(deps): bump the prod-patch-updates group across 1 directory with 2 updates
- [`deb5997`](https://github.com/fosrl/newt/commit/deb599793e5b2f0bb328d2337716391eee80e8d4) chore(nix): fix hash for updated go dependencies
### 📊 Changes
**3 files changed** (+7 additions, -7 deletions)
<details>
<summary>View changed files</summary>
📝 `flake.nix` (+1 -1)
📝 `go.mod` (+2 -2)
📝 `go.sum` (+4 -4)
</details>
### 📄 Description
Bumps the prod-patch-updates group with 2 updates in the / directory: [google.golang.org/grpc](https://github.com/grpc/grpc-go) and software.sslmate.com/src/go-pkcs12.
Updates `google.golang.org/grpc` from 1.81.0 to 1.81.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/grpc/grpc-go/releases">google.golang.org/grpc's releases</a>.</em></p>
<blockquote>
<h2>Release 1.81.1</h2>
<h1>Security</h1>
<ul>
<li>xds/rbac: Fix a potential authorization bypass caused by incorrectly falling through URI/DNS SANs to Subject Distinguished Name (DN) when matching the authenticated principal name. With this fix, only the first non-empty identity source will be used, as per <a href="https://github.com/grpc/proposal/blob/master/A41-xds-rbac.md">gRFC A41</a>. (<a href="https://redirect.github.com/grpc/grpc-go/issues/9111">#9111</a>)
<ul>
<li>Special Thanks: <a href="https://github.com/al4an444"><code>@al4an444</code></a></li>
</ul>
</li>
</ul>
<h1>Bug Fixes</h1>
<ul>
<li>otel: Segregate client and server RPC information used for metrics and traces, to avoid one overwriting the other. (<a href="https://redirect.github.com/grpc/grpc-go/issues/9081">#9081</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/grpc/grpc-go/commit/caf0772c2bcb8bc15d43eb53448e921f34f0b7e8"><code>caf0772</code></a> Change version from 1.81.1-dev to 1.81.1 (<a href="https://redirect.github.com/grpc/grpc-go/issues/9122">#9122</a>)</li>
<li><a href="https://github.com/grpc/grpc-go/commit/6ccbeebf058ede71e43a5ac28fada2a736573215"><code>6ccbeeb</code></a> Cherry-pick <a href="https://redirect.github.com/grpc/grpc-go/issues/9111">#9111</a> into v1.81.x (<a href="https://redirect.github.com/grpc/grpc-go/issues/9121">#9121</a>)</li>
<li><a href="https://github.com/grpc/grpc-go/commit/b33c29e41b438e371c8504de9bdf64a80098cc29"><code>b33c29e</code></a> Cherry-pick <a href="https://redirect.github.com/grpc/grpc-go/issues/9081">#9081</a> into v1.81.x (<a href="https://redirect.github.com/grpc/grpc-go/issues/9102">#9102</a>)</li>
<li><a href="https://github.com/grpc/grpc-go/commit/c45fae6d06a5c192b7b96418a2bc26a96b856834"><code>c45fae6</code></a> Change version to 1.81.1-dev (<a href="https://redirect.github.com/grpc/grpc-go/issues/9063">#9063</a>)</li>
<li>See full diff in <a href="https://github.com/grpc/grpc-go/compare/v1.81.0...v1.81.1">compare view</a></li>
</ul>
</details>
<br />
Updates `software.sslmate.com/src/go-pkcs12` from 0.7.0 to 0.7.1
---
<sub>���� This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
📋 Pull Request Information
Original PR: https://github.com/fosrl/newt/pull/356
Author: @dependabot[bot]
Created: 5/15/2026
Status: 🔄 Open
Base:
main← Head:dependabot/go_modules/prod-patch-updates-d9ad24fc58📝 Commits (2)
1defbf0chore(deps): bump the prod-patch-updates group across 1 directory with 2 updatesdeb5997chore(nix): fix hash for updated go dependencies📊 Changes
3 files changed (+7 additions, -7 deletions)
View changed files
📝
flake.nix(+1 -1)📝
go.mod(+2 -2)📝
go.sum(+4 -4)📄 Description
Bumps the prod-patch-updates group with 2 updates in the / directory: google.golang.org/grpc and software.sslmate.com/src/go-pkcs12.
Updates
google.golang.org/grpcfrom 1.81.0 to 1.81.1Release notes
Sourced from google.golang.org/grpc's releases.
Commits
caf0772Change version from 1.81.1-dev to 1.81.1 (#9122)6ccbeebCherry-pick #9111 into v1.81.x (#9121)b33c29eCherry-pick #9081 into v1.81.x (#9102)c45fae6Change version to 1.81.1-dev (#9063)Updates
software.sslmate.com/src/go-pkcs12from 0.7.0 to 0.7.1���� This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.