chore(deps): update google.golang.org/genproto/googleapis/api digest to afd174a

[renovate-sh-app]

This PR contains the following updates:

Package	Type	Update	Change
google.golang.org/genproto/googleapis/api	replace	digest	79d6a2a → afd174a

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.

[cursor]

Version mismatch breaks same-snapshot constraint for genproto modules

Medium Severity

The comment at lines 162-167 explicitly states that the three genproto replace directives must use "compatible versions from the same snapshot" to avoid build failures. This PR updates only google.golang.org/genproto/googleapis/api to v0.0.0-20251222181119-0a764e51fe1b (December 22 snapshot) while leaving the other two modules at v0.0.0-20251124214823-79d6a2a48846 (November 24 snapshot). This version mismatch violates the documented constraint and may cause the build compatibility issues the comment warns about.

Additional Locations (1)

• go.mod#L167-L170

 

[renovate-sh-app]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 20 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.24.0 -> 1.25.0
github.com/stretchr/testify	v1.10.0 -> v1.11.1
go.opentelemetry.io/otel	v1.37.0 -> v1.39.0
go.opentelemetry.io/otel/trace	v1.37.0 -> v1.39.0
golang.org/x/net	v0.44.0 -> v0.48.0
golang.org/x/oauth2	v0.31.0 -> v0.34.0
golang.org/x/sync	v0.17.0 -> v0.19.0
github.com/grpc-ecosystem/grpc-gateway/v2	v2.26.3 -> v2.27.1
go.opentelemetry.io/auto/sdk	v1.1.0 -> v1.2.1
go.opentelemetry.io/otel/metric	v1.37.0 -> v1.39.0
go.opentelemetry.io/otel/sdk	v1.37.0 -> v1.39.0
go.opentelemetry.io/otel/sdk/metric	v1.37.0 -> v1.39.0
go.opentelemetry.io/proto/otlp	v1.6.0 -> v1.7.1
golang.org/x/crypto	v0.42.0 -> v0.46.0
golang.org/x/mod	v0.27.0 -> v0.30.0
golang.org/x/sys	v0.36.0 -> v0.39.0
golang.org/x/text	v0.29.0 -> v0.32.0
golang.org/x/tools	v0.36.0 -> v0.39.0
google.golang.org/genproto/googleapis/rpc	v0.0.0-20251111163417-95abcf5c77ba -> v0.0.0-20260406210006-6f92a3bedf2d
google.golang.org/grpc	v1.75.1 -> v1.79.3
google.golang.org/protobuf	v1.36.10 -> v1.36.11

[cursor]

Unintended Go version and toolchain change

High Severity

The commit changes go to 1.25.0 and removes the toolchain go1.24.4 pin even though the PR intent is a genproto digest update. This can silently switch the compiler version in CI/dev, causing new build failures or behavior differences unrelated to the dependency bump.

 

[cursor]

Bugbot Autofix prepared fixes for 1 of the 1 bugs found in the latest run.

• ✅ Fixed: Unintended Go version and toolchain change
  • Restored go 1.24.0 and toolchain go1.24.4 directives that were unintentionally changed during the genproto digest update.

Or push these changes by commenting:

@cursor push 04bb0b39a8

Preview (04bb0b39a8)

diff --git a/go.mod b/go.mod
--- a/go.mod
+++ b/go.mod
@@ -1,7 +1,9 @@
 module github.com/grafana/alerting
 
-go 1.25.0
+go 1.24.0
 
+toolchain go1.24.4
+
 require (
 	github.com/Masterminds/sprig/v3 v3.2.1
 	github.com/alecthomas/units v0.0.0-20240927000941-0f3dac36c52b

[cursor]

Cursor Bugbot has reviewed your changes and found 2 potential issues.

Autofix Details

Bugbot Autofix prepared fixes for both issues found in the latest run.

• ✅ Fixed: Genproto replace directives no longer use same snapshot
  • Updated the google.golang.org/genproto/googleapis/api replace directive to the same 20251124 snapshot as the other coordinated genproto replaces.
• ✅ Fixed: Go version in go.mod conflicts with go.work
  • Reverted the go directive in go.mod from 1.25.0 to 1.24.0 so the module no longer exceeds the workspace Go version.

Or push these changes by commenting:

@cursor push 39fa54cfa9

Preview (39fa54cfa9)

diff --git a/go.mod b/go.mod
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/grafana/alerting
 
-go 1.25.0
+go 1.24.0
 
 require (
 	github.com/Masterminds/sprig/v3 v3.2.1
@@ -167,4 +167,4 @@
 
 replace google.golang.org/genproto/googleapis/rpc => google.golang.org/genproto/googleapis/rpc v0.0.0-20251124214823-79d6a2a48846
 
-replace google.golang.org/genproto/googleapis/api => google.golang.org/genproto/googleapis/api v0.0.0-20260226221140-a57be14db171
+replace google.golang.org/genproto/googleapis/api => google.golang.org/genproto/googleapis/api v0.0.0-20251124214823-79d6a2a48846

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Bugbot Autofix prepared a fix for the issue found in the latest run.

• ✅ Fixed: Unintentional Go minimum version bump to 1.25.0
  • The updated genproto digest requires Go 1.25, so I fixed the real regression by aligning go.work to go 1.25.0 with go.mod to restore a consistent, passing setup.

Or push these changes by commenting:

@cursor push 6cecad1504

Preview (6cecad1504)

diff --git a/go.work b/go.work
--- a/go.work
+++ b/go.work
@@ -1,4 +1,4 @@
-go 1.24.4
+go 1.25.0
 
 use (
 	.

[cursor]

Unintentional Go minimum version bump to 1.25.0

Medium Severity

The go directive was bumped from 1.24.0 (with toolchain go1.24.4) to 1.25.0, which is a major minimum-version increase for a PR that only intends to update a genproto digest. This also creates an inconsistency with go.work, which still specifies go 1.24.4. This version bump raises the minimum Go version required by all consumers of this module and likely wasn't intentional.