[dependabot]

Bumps the go group with 1 update: github.com/google/cel-go.

Updates github.com/google/cel-go from 0.29.2 to 0.30.0

Release notes

Sourced from github.com/google/cel-go's releases.

Release v0.30.0

What's Changed

• Add cost tracking for encoders by @​TristonianJones in cel-expr/cel-go#1354
• Fix syntax error at head by @​stanleyycheung in cel-expr/cel-go#1362
• Prevent indexing on sentinel json field '-' by @​TristonianJones in cel-expr/cel-go#1349
• Async function execution internals by @​TristonianJones in cel-expr/cel-go#1355
• reject non-RFC3339 timestamp strings in timestamp() conversion by @​alhudz in cel-expr/cel-go#1338
• Add depth validation for ASTs loaded through ParsedExprToAst / Checke... by @​wilyan09007 in cel-expr/cel-go#1334
• Fix non-determinism in json encoding, add dummy 'infinite' costs by @​TristonianJones in cel-expr/cel-go#1365
• Update lists library cost computations for improved accuracy by @​TristonianJones in cel-expr/cel-go#1352
• Cost library for ext/network by @​TristonianJones in cel-expr/cel-go#1345
• Introduce async DrainStrategy, DrainAction, Observer, and Call types by @​TristonianJones in cel-expr/cel-go#1364
• Graceful NaN ordering by @​TristonianJones in cel-expr/cel-go#1370
• Fix constant folding and local variable resolution by @​TristonianJones in cel-expr/cel-go#1371
• Concurrent Eval with context.Context bound functions by @​TristonianJones in cel-expr/cel-go#1369
• Async timeout and retry wrappers by @​TristonianJones in cel-expr/cel-go#1367
• Add runnable examples for all expressions in celbyexample.com by @​TristonianJones in cel-expr/cel-go#1373
• Ensure logical operator fold expressions are bool by @​TristonianJones in cel-expr/cel-go#1380
• Fix unsound constant folding of x in [x] for NaN values by @​pranit0808 in cel-expr/cel-go#1374
• copy operands in Bytes.Add to avoid aliasing the receiver by @​pranit0808 in cel-expr/cel-go#1381
• Validation of cel.bind() nesting limits by @​TristonianJones in cel-expr/cel-go#1378
• Allow validators to be reconfigured by @​TristonianJones in cel-expr/cel-go#1379
• Add cost tracking to ext/math.go by @​TristonianJones in cel-expr/cel-go#1353
• Expression node limits for parser and checker by @​TristonianJones in cel-expr/cel-go#1386

New Contributors

• @​stanleyycheung made their first contribution in cel-expr/cel-go#1362
• @​wilyan09007 made their first contribution in cel-expr/cel-go#1334
• @​pranit0808 made their first contribution in cel-expr/cel-go#1374

Full Changelog: cel-expr/cel-go@v0.29.2...v0.29.3

Commits

• a492a70 Expression node limits for parser and checker (#1386)
• b85d3bc Add cost tracking to ext/math.go (#1353)
• 6f3625d Allow validators to be reconfigured (#1379)
• e15d3ca Introduce cel.bind nesting limit (#1378)
• 36ff97d copy operands in Bytes.Add to avoid aliasing the receiver (#1381)
• af38f75 Fix unsound constant folding of x in [x] for NaN values (#1374)
• 0175dbb Ensure logical operator fold expressions are bool (#1380)
• 7ff0141 Add runnable examples for all expressions in celbyexample.com (#1373)
• 270df17 async: Introduce Timeout and Retry wrappers (#1367)
• 94b0cce Concurrent Eval with context.Context bound functions (#1369)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

The latest Buf updates on your PR. Results from workflow Buf / validate-protos (pull_request).

Build	Format	Lint	Breaking	Updated (UTC)
✅ passed	✅ passed	✅ passed	⏩ skipped	Jul 27, 2026, 4:09 PM