chore(deps): update dependency io.grpc:grpc-netty to v1.67.1 #187
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![mend-for-github-com[bot]](https://avatars.githubusercontent.com/in/30796?s=60&v=4){kind=small}
mend-for-github-com
bot
requested review from
ps48,
kavithacm,
derek-ho,
joshuali925,
dai-chen,
YANG-DB,
rupal-bq and
mengweieric
as code owners
mend-for-github-com
bot
requested review from
vmmusings and
Swiddis
as code owners
mend-for-github-com
bot
assigned derek-ho, joshuali925, kavithacm, mengweieric, ps48, rupal-bq, Swiddis, vmmusings and YANG-DB
Swiddis
approved these changes
Nov 6, 2024
mend-for-github-com
bot
deleted the
whitesource-remediate/frauddetectionservice
branch
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
1.60.0->1.67.1By merging this PR, the issue #182 will be automatically resolved and closed:
Release Notes
grpc/grpc-java (io.grpc:grpc-netty)
v1.67.1gRPC Java 1.67.1 Release Notes
There was no 1.67.0 release. There was a problem making the release and it went to Maven Central as 1.68.0 instead. This is a version-corrected release.
Improvements
90d0fab)e821d5e). This makes it clearer whether a leak is a gRPC leak or an application leak when the Detachable API is being used6a9bc3b)72a977b)6dbd1b9)d034a56)96a788a)0017c98)c29763d)10d6002). Previously, RLS configuration would not have been updatedBug Fixes
cc1cbe9)c63e354)f866c80). This change applies to all petiole load balancing policies. For regular usages that use dns name resolution, this is unlikely to matter as the default dns name resolver returns consistent addresses. But this might improve LB behavior for some custom load balancers1dae144)448ec4f)Dependencies
70ae832)75012a5)ff8e413)Thanks to
@Juneezee
@lujiajing1126
@JarvisCraft
@sunpe
v1.66.0gRPC Java 1.66.0 Release Notes
API Changes
25a8b7c)AdvancedTlsX509TrustManager, anX509ExtendedTrustManagerthat allows users to configure advanced TLS features, such as root certificate reloading and peer cert custom verification. (658cbf6)GracefulSwitchLoadBalancerconfig (ebed047) and mark switchTo() deprecated. (85e0a01).GracefulSwitchLoadBalancernow receives its configuration like a regular load balancer.AllowSecurityPolicyto allow calling code to not have to wait on async/slow implementations.BinderTransportnow submits async implementations to an executor. (#11272) (7fee6a3)ServerBuilderfor adding a list of service implementations to the handler registry together. (#11285) (85ed053)Improvements
5ec0187)36e687f). There are now examples for both non-bzlmod and bzlmod.PickFirstLeafLoadBalancer062ebb4)NettyAdaptiveCumulatorif Netty is on version 4.1.111 or later. (#11367)21dec30)BinderServerownServerAuthInterceptor's executor that helps avoid leaks. (#11293) (15ad9f5)ProtoReflectionServiceV1for the v1 reflection protocol. The preexistingProtoReflectionServiceimplements the v1alpha reflection protocol. (#11237) (0aa976c)Bug Fixes
14fd81f)AdvancedTlsX509TrustManagervalidation on servers when using SSLSocket. Previously it would try to use a null SSLEngine . (dcb1c01)Dependencies
71eb5fb). This adds a runtime dependency on libstdc++a977385)a977385)a977385)a977385)a977385)a977385)a977385)a977385)a977385)e7c3803)@com_github_cncf_udpausage with preexisting@com_github_cncf_xds; delete@com_github_cncf_udparepo alias for xds (6dd6ca9)1611a73(c540993). The version used by Gradle had been updated in 1.62.0 (68334a0), but the bazel version had not7a25e68). Bazel’s protobuf rules no longer use the old com_google_protobuf_javalite repository named3c2f5a). Protobuf’s targets are generally just used directly; this fixed the only place that used maven’sartifact()syntaxThanks to
@hlx502
@erm-g
@jdcormie
@JoaoVitorStein
@cfredri4
v1.65.1What's Changed
v1.65.0grpc-netty in this release is compatible with Netty 4.1.111; it fixes the incompatibility that caused data corruption. grpc-netty-shaded is still using Netty 4.1.100.
New Features
df8cfe9)Improvements
ClientStreamTracer.inboundHeaders(Metadata)(960012d). This is the same as the existinginboundHeaders(), but is provided the Metadata6ec744f)8844cf7). This could be viewed as a small performance optimization, but mainly reduces the amount of race-handling code781b4c4) This change shows@ExperimentalApibeing removed, but it was re-added in3c97245before the releasec31dbf4)791f894)Bug fixes
fea577c). This was a long-standing race that could cause RPCs to hang, but was very unlikely to be hit. Avoiding the double-picking (8844cf7) made the race more visible0fea7dd). The previous behavior easily caused data corruptiona28357e). Previously, shutting down when a new connection was being established could result in the server never becoming terminatede4e7f3a). This issue was unlikely to be hit outside of specialized testsd57f271). This fixes a regression introduced in 1.62.234ee600)1670e97)f995c12)Thanks to
@hakusai22
@firov
@mateusazis
@Mir3605
@niloc132
v1.64.2What's Changed
v1.64.1What's Changed
v1.64.0Avoid upgrading your application to Netty 4.1.111, with this version as there is a possible corruption. For Netty 4.1.111 compatibility, it is best to use 1.63.2, 1.64.2, 1.65.1, and later. See https://github.com/grpc/grpc-java/issues/11284 .
API Changes
jakarta_omitwas renamed@generated=omit(#11086) (8a21afc)New Features
4561bb5)5ba1a55). The feature is still missing documentation and an example. It only supports metrics; tracing and logs will be future enhancements. See gRFC A66d1890c0)@maventargets (0064991)8050723)06df25b,35a171b,2897b39), to be exported by grpc-opentelemetry if explicitly enabled in GrpcOpenTelemetry. See gRFC A78a9fb272,a1d1932,8133318), to be exported by grpc-opentelemetry if explicitly enabled in GrpcOpenTelemetryImprovements
58de563)e036b1b). This will greatly improve the debuggability of certain server errors in particular cases. Instead of the client seeing “CANCELLED: RST_STREAM closed stream. HTTP/2 error code: CANCEL”, they could see “RESOURCE_EXHAUSTED: gRPC message exceeds maximum size4194304:6144592”f7ee5f3)e36f099)10cb4a3)537dbe8)load()statements for the Bazel builtin top-level java symbols (#11105) (add8c37)StatusProto.toStatusExceptionoverload to acceptThrowable(#11083) (5c9b492)Bug fixes
bdb6230)2c5f0c2). Previously the visible state change fromchannel.getState()was delayed until the name resolver returned results. This had no impact to RPC behaviore630593)6e97b18). These races had not been witnessed in practicef9b6e5f). This fixes a regression introduced by6e97b18that could hang RPCs instead of using fallback, but fixes a pre-existing bug that could greatly delay RPCs from using fallback.da619e2). This could have caused backoff entries to improperly be considered expired097a46b). The credential does its own verification and the default needs to be disabled for SPIFFEfb9a108)d21fe32)Dependencies
5a8da19)c703a1e)163efa3)77e59b2)Acknowledgements
@panchenko
@Ashok-Varma
@benjaminp
@AutomatedTester
@hypnoce
@keith
@laglangyue
@rostik404
@ryanpbrewster
@abtom
@hvadehra
@rtadepalli
v1.63.2What's Changed
v1.63.1Bug fixes
fb9a108)v1.63.0API Changes
0d749c5)ff34d51)257d1c2)2c83ef0)New Features
xds, dual stack, happy eyeballs: Support dual stack in xds, change list includes:
8a9ce99)38f968f)c61fe69)51f811d)Improvements
eba699a)ce2adcc)3abab95). When the deadline triggered and the deadline was set on the RPC via the stub or CallOptions, gRPC would gather additional debugging information to help understand where the RPC took so long. However if the deadline came from io.grpc.Context the error was simply “context timed out.” Now the debugging information is provided in both casese19f1f1)0d39c2c). Pass the optionjakarta_omitto protoc-gen-grpc-java when generating codefeab4e5).grpc-xdsjar size has decreased by 35%.867e469)a68399a)0b82f01)Bug Fixes
f4cc166). This fixes a possible regression introduced in 1.60.0. Auditing the buggy code showed it unlikely to cause problems in practice, but that was more by happenstance than by designd7628a3)aa90768). The remote race could cause an RPC to hang until its deadline. It had been seen in practice when the client was severely CPU under-provisioned78b3972)Dependencies
Acknowledgement
Alex Panchenko
Benjamin Peterson
David Ankin
Prashanth Swaminathan
Touko Vainio-Kaila
v1.62.2gRPC Java 1.62.2 Release Notes
Note that this is the initial 1.62.x release
API Changes
io.grpc.services.BinaryLogs, which was deprecated since 2021.io.grpc.protobuf.services.BinaryLogsshould be used instead (#10832).6d96e65)New Features
Improvements
cb03bd2). This is mostly a behind-the-scenes change to adjust to the newer way Bazel operates65a6b3b). Neither binary uses runfiles, but the task will be ready if they need to in the future100d5a5)7ba0718)Bug Fixes
Dependencies
Acknowledgements
v1.61.1Bug Fixes
xds: Fix a bug in
WeightedRoundRobinLoadBalancerpolicy that could raiseNullPointerExceptionand further cause channel panic when picking a subchannel. This bug can only be triggered when connection can not be established and the channel reportsTRANSIENT_FAILUREstate. (#10868)v1.61.0API Changes
860b5cb)New Features
Improvements
201893f)round_robinpickers (dca89b2). This makes its implementation more similar toweighted_round_robin.Bug Fixes
8ac43dd). The Gradle test fixtures are for use by grpc-java's internal tests.Dependencies
55a9c01). Bazel 7 is available, and Protobuf has already dropped support for Bazel 5.d6830d7). This reduces the transitive classes "leaked" into the compile classpath. In particular, grpc-core (io.grpc.internal) will be less frequently included transitively at compile time.c985797)Acknowledgements
v1.60.2Bug Fixes
xds: Fix a bug in
WeightedRoundRobinLoadBalancerpolicy that could raiseNullPointerExceptionand further cause channel panic when picking a subchannel. This bug can only be triggered when connection can not be established and the channel reportsTRANSIENT_FAILUREstate. (#10868)v1.60.1Bug Fixes