Release v19.19.0

Changed

• The Elixir contracts package (cratis_chronicle_contracts) now requires grpc ~> 1.0, mint ~> 1.11 and Elixir 1.18 or later. The generated contracts API is unchanged. If you use the contracts directly (#4214):
  • GRPC.Stub.connect/2 still defaults to the Gun adapter, which is optional in grpc 1.x. Pass adapter: GRPC.Client.Adapters.Mint or add :gun to your dependencies.
  • Remove any {GRPC.Client.Supervisor, []} child; grpc 1.x starts its own client supervisor.
  • Server modules now live in the separate grpc_server package.
• The cratis_chronicle client keeps resolving an earlier contracts release until its own grpc 1.x release. See the grpc changelog.

Security

• Moves past the grpc 0.x advisories CVE-2026-48599, CVE-2026-48853, CVE-2026-48854 and CVE-2026-53430, all patched in grpc 1.0.0, and requires Mint 1.11, which fixes three advisories in Mint 1.10. (#4214)