Update dependency io.grpc:grpc-protobuf to v1.53.0 - autoclosed #19
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![mend-for-github-com[bot]](https://avatars.githubusercontent.com/in/30796?s=60&v=4){kind=small}
mend-for-github-com
bot
changed the title
mend-for-github-com
bot
deleted the
whitesource-remediate/io.grpc-grpc-protobuf-1.x
branch
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
1.4.0->1.53.0By merging this PR, the issue #52 will be automatically resolved and closed:
Release Notes
grpc/grpc-java (io.grpc:grpc-protobuf)
v1.53.0Compare Source
New Features
RouteConfiguration(#9845)grpc-previous-rpc-attemptsto the initial response metadata (#9686)Examples
Bug Fixes
RejectedExecutionException. (#9754)MessageProducerinRetriableStream(#9853), fixing a Netty buffer memory leak for cancelled RPCsNullPointerExceptionwhen a Metadata.Marshaller returns null bytes (#9781). This would previously cause aNullPointerExceptionlater during the RPC. Now the return value of the Marshaller is checked immediately, to help find the broken MarshallerBehavior Changes
Dependencies
@Generatedas used by autovalue (#9762). Necessary for building xds and rls on Java 9+runtime_depsto discourage their use by Bazel users, but that could cause compilation failures from lack of hjars. These targets now useexportsAcknowledgement
@cpovirk
@niloc132
@stephenh
@olderwei
@pandaapo
@panxuefeng
v1.52.1Compare Source
Bug Fixes
v1.52.0Compare Source
gRPC Java 1.52.0 Release Notes
grpc-xds starting with 1.51.0 had a regression where resources might stop receiving updates. The trigger could happen hours or days after the binary had started. xDS users should avoid this release and use 1.50.x until patch releases with the fix are available. https://github.com/grpc/grpc-java/pull/9809
API Changes
@Immutable(#9689)New Features
Examples
Bug Fixes
Behavior Changes
RingHashOptions.setRingSizeCap()can increase the limitBinderChannelBuilder.strictLifecycleManagement()which disables idle timeout and prevents it from being changed (#9486). Disabling idle timeout can be useful to find bugs in applications that fail to promptly shut down the channel and are particularly sensitive to keeping Binder instances alive.Dependencies
Acknowledgement
@RapperCL
@Smityz
@pandaapo
v1.51.3Compare Source
Bug Fixes
v1.51.1Compare Source
grpc-xds starting with 1.51.0 had a regression where resources might stop receiving updates. The trigger could happen hours or days after the binary had started. xDS users should avoid this release and use 1.50.x until patch releases with the fix are available. https://github.com/grpc/grpc-java/pull/9809
Bug Fixes
v1.51.0Compare Source
grpc-xds starting with 1.51.0 had a regression where resources might stop receiving updates. The trigger could happen hours or days after the binary had started. xDS users should avoid this release and use 1.50.x until patch releases with the fix are available. https://github.com/grpc/grpc-java/pull/9809
Bug Fixes
New Features
Behavior Changes
Acknowledgements
@TrevorEdwards
v1.50.3Compare Source
Bug Fixes
v1.50.2Compare Source
Bug fixes
gcp-observability: Supports period(.) in the service name part of regular expression for a fully-qualified method to accept "package.service"
v1.50.1Compare Source
gcp-observability: support new configuration defined in grpc-gcp-observability public preview user guide
v1.50.0Compare Source
New Features
SecurityPoliciesfor checking device owner/profile owner (#9428)API Changes
handleResolvedAddresses()but returns abooleanof whether the addresses and configuration were accepted. Not accepting the update triggers the NameResolver to retry after a delay. We are not yet encouraging migration to this method, as there is still a second future API changeBug Fixes
Dependencies
Acknowledgements
@cpovirk
@prateek-0
@sai-sunder-s
v1.49.2Compare Source
Dependencies
v1.49.1Compare Source
Bug Fixes
TRANSIENT_FAILUREstate, it might cause unnecessary internal connection requests onsubchannels. (#9537)Behavior Changes
v1.49.0Compare Source
New Features
OkHttpServerBuilder. The server can be used directly, but is not yet available viaServerBuilder.forPort()andGrpc.newServerBuilderForPort(). It passes our tests, but has seen no real-world use. It is also lacking connection management featuresBug Fixes
no such target '@​io_grpc_grpc_java//services:services'for services and missing ORCA classes for xds. The wrong target names were introduced in 1.47.0Behavior Changes
Acknowledgement
@benjaminp
@j-min5u
v1.48.2Compare Source
Bug Fixes
Dependencies
v1.48.1Compare Source
New Features
ORCA provides APIs to inject custom metrics at a gRPC server, and consume them at a gRPC client. It implements A51: Custom Backend Metrics Support. We changed the ORCA APIs; they had broken shading and couldn't really be used, so we fixed them in the patch release.
Bug Fixes
INTERNAL, desc: Half-closed without a requestat server call. (#9362)v1.48.0Compare Source
Bug Fixes
New Features
Improvements
Attributes.Keys to reference the API of the key. This should make it easier to find the API the key is exposed when usingattributes.toString()Attributes.Keyuses reference equality. This is to make it clear the behavior is on purpose, and mirrors other Key types in the APIEquivalentAddressGroup.ATTR_AUTHORITY_OVERRIDE, to avoid misuse byNameResolvers (#9281)GrpcCleanupRulenow extendsExternalResource. This makes it usable with JUnit 5Dependencies
com.google.api.grpc:proto-google-common-protosto 2.9.0Acknowledgements
@mirlord
@zhangwenlong8911
@adilansari
@amirhadadi
@jader-eero
@jvolkman
@sumitd2
v1.47.1Compare Source
Bug Fixes
Behavior Changes
OnNotServingonStatusListenerwhen the delegated server initial start fails. (#9276, #9279)Dependencies
v1.47.0Compare Source
Bug Fixes
ClassCastExceptionsfor hard-coded providers on Android (#9174). This avoidsServiceConfigurationErrorin certain cases when an “SDK” includes a copy of gRPC that was renamed with Proguard-like tools that do precise class name rewriting (versus something like Maven Shade Plugin which uses coarse pattern matching)asAndroidAppUri()(#9169)ScheduledExecutorServicefor keepalive if provided. Previously the user-provided executor was used for deadlines, but not keepalive. Keepalive always used the default executor (#9073)libgrpclb.jarproduced by bazel//grpclb:grpclbtarget (#9156)TRANSIENT_FAILUREstatus. (#9085)New Features
ServerBuilder(#9176). This includes methods for keepalive, max connection age, and max connection idle. These APIs have been available on NettyServerBuilder since v1.4.0NameResolverto influence which transport to use (#9076)NameResolverforunix:scheme, as defined in gRPC Name Resolution (#9113)allOfsecurity policy, which allows access iff ALL given security policies allow access. (#9125)anyOfsecurity policy, which allows access if ANY given security policy allows access. (#9147)hasPermissionssecurity policy, which checks that a caller has all of the given package permissions. (#9117)IO_GRPC_GRPC_JAVA_OVERRIDE_TARGETSso maven_install will not use the artifacts from Maven Central (#9172)Cluster.load_balancing_policyfield. This implements gRFC A52: gRPC xDS Custom Load Balancer Configuration. (#9141)is_optionallogic in Cluster Specifier Plugins: if an unsupported Cluster Specifier Plugin is optional, don't NACK, and skip any routes that point to it. (#9168)Behavior Changes
ring_hashLB aggregation rule to better handle transient_failure channel status (#9084, #9093)Dependencies
Acknowledgements
@caseyduquettesc
@cfredri4
@jvolkman
@mirlord
@ovidiutirla
v1.46.1Compare Source
Behavior Changes
OnNotServingonStatusListenerwhen the delegated server initial start fails. (#9278, #9280)Dependencies
v1.46.0Compare Source
Bug Fixes
Behavior Changes
xds.config.resource-in-sotwclient capability. Resources wrapped in aio.envoyproxy.envoy.service.discovery.v3.Resourcemessage are now supported (#8997)New Features
Dependencies
Acknowledgements
@jesseschalken
@kluever
@beatrausch
v1.45.4Compare Source
Bug Fixes
v1.45.3Compare Source
Bug Fixes
v1.45.2Compare Source
Bug Fixes
TRANSIENT_FAILUREstatus. (#9085)Behavior Changes
ring_hashLB aggregation rule to better handle transient_failure channel status (#9084)Dependencies
v1.45.1Compare Source
Bug Fixes
v1.45.0Compare Source
gRPC Java 1.45.0 Release Notes
Bug Fixes
Behavior Changes
Dependencies
v1.44.2Compare Source
Bug Fixes
TRANSIENT_FAILUREstatus. (#9085)Behavior Changes
ring_hashLB aggregation rule to better handle transient_failure channel status (#9084)Dependencies
v1.44.1Compare Source
Bug Fixes
v1.44.0Compare Source
gRPC Java 1.44.0 Release Notes
Java 7 is no longer supported. This release uses Java 8 bytecode, except for grpc-context which remains on Java 7 bytecode. Users requiring Java 7 are encouraged to use the v1.41.x branch. See gRFC P5. Android support remains API level 19+. If this is expected to cause undue hardship or community issues, please contact us via a GitHub issue or grpc-io@googlegroups.com.
Java 8 users pay note: per gRFC P5, gRPC may drop Java 8 support as soon as March this year. If this is expected to cause undue hardship or community issues, please contact us via a GitHub issue or grpc-io@googlegroups.com.
API Changes
Bug Fixes
ring_hashLB Policy toring_hash_experimentalto comply with gRPC A42: xDS Ring Hash LB Policy (#8776)Behavior Changes
Dependencies
Acknowledgement
v1.43.3Compare Source
Bugfixes
Dependencies
v1.43.2Compare Source
Dependencies
v1.43.1Compare Source
Bug Fixes
Dependencies
v1.43.0Compare Source
API Changes
Bug Fixes
recordFinishedAttempt(). Users not enabling grpc-census are not impacted by this bug (#8706)New Features
-Dio.grpc.netty.disableConnectionHeaderCheck=falseto disable HTTP Connection header check. This is a temporary workaround to allow fixing out-of-spec HTTP/2 clients (#8683)Dependencies
Acknowledgement
@beatrausch
@benjaminp Benjamin Peterson
@cfredri4
@kdubb Kevin Wooten
v1.42.3Compare Source
Dependencies
v1.42.2Compare Source
Bug Fixes
recordFinishedAttempt(). Users not enabling grpc-census are not impacted by this bug (#8706)ManagedChannel.enterIdle()(#8746)Dependencies
v1.42.1Compare Source
Bug fixes:
XdsServerfrom noticing when a control plane sent a needless duplicate update, causingXdsServerto drain all its existing connections to use the “new” configuration #8688New feature:
-Dio.grpc.netty.disableConnectionHeaderCheck=falseto disable HTTP Connection header check. This is a temporary workaround to allow fixing out-of-spec HTTP/2 clients #8683v1.42.0Compare Source
In this release we drop support for Android API level 18 or lower (Jelly Bean or earlier), following Google Play Service’s discontinued updates for Jelly Bean (API levels 16, 17 & 18).
API Changes
XdsServerBuilder.overrideBootstrapForTest()to provide bootstrap override for testing purposes. This way, the test does not need to use the shared environment variable for bootstrap injection. (#8575)Status.asException(Metadata)method. (#8520)CallCredentials2(#8572).CallCredentials2was introduced in 1.16.0 to ease migration ofCallCredentialsto an abstract class.CallCredentialshas been preferred overCallCredentials2since 1.19.0Bug Fixes
New Features
ServerCallStreamObserver.setOnCloseHandler(Runnable). Notified when gRPC has completed processing the RPC. (#8452)Behavior Changes
Dependencies
4.1.63.Finaland tcnative to2.0.38.Final. (#8167)Improvements
io.grpc.util.AdvancedTlsX509KeyManagerandAdvancedTlsX509TrustManagersupport loading configuration from static files. (#8525)io.grpc.util.CertificateUtils.getPrivateKey()now supports RSA and EC key algorithmsv1.41.3Compare Source
Dependencies
v1.41.2Compare Source
Bug Fixes
ManagedChannel.enterIdle()(#8763)XdsServerfrom noticing when a control plane sent a needless duplicate update, causingXdsServerto drain all its existing connections to use the “new” configuration #8736Dependencies