This is an automated email from the ASF dual-hosted git repository.
zeroshade pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/arrow-go.git
The following commit(s) were added to refs/heads/main by this push:
new d939135c chore: Bump google.golang.org/grpc from 1.83.2 to 1.84.0
(#1334)
d939135c is described below
commit d939135c478c1283b46a25fadcc522f4ae258221
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Wed Sep 23 13:41:03 2026 -0400
chore: Bump google.golang.org/grpc from 1.83.2 to 1.84.0 (#1334)
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from
1.83.2 to 1.84.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/grpc/grpc-go/releases">google.golang.org/grpc's
releases</a>.</em></p>
<blockquote>
<h2>Release 1.84.0</h2>
<h1>Behavior Changes</h1>
<ul>
<li>stats/otel: The <code>grpc.lb.pick_first.*</code> metrics have been
removed and replaced with <code>grpc.subchannel.*</code> metrics. See <a
href="https://github.com/grpc/proposal/blob/master/A94-subchannel-otel-metrics.md">gRFC
A94</a> for more details. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/9215">#9215</a>)</li>
</ul>
<h1>New Features</h1>
<ul>
<li>xds: Add support for <code>contains_match</code> in route header
matchers. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/9223">#9223</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/nvxbug"><code>@nvxbug</code></a></li>
</ul>
</li>
</ul>
<h1>Bug Fixes</h1>
<ul>
<li>client: Fix a bug where a <code>ClientConn</code> could get
permanently stuck in IDLE when an RPC was canceled during stream
creation. Previously, such cancellations triggered stream cleanup twice,
corrupting the channel's idleness state and causing subsequent RPCs to
fail with deadline exceeded errors. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/9191">#9191</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/utkuozdemir"><code>@utkuozdemir</code></a></li>
</ul>
</li>
<li>client: Fix a bug where non-gRPC HTTP responses ending with an empty
DATA frame failed the RPC with status code <code>Internal</code> instead
of preserving the HTTP-mapped status code and response body. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/9217">#9217</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/chengxilo"><code>@chengxilo</code></a></li>
</ul>
</li>
<li>credentials: Validate metadata returned by per-RPC credentials,
failing the RPC with status code <code>Internal</code> if invalid keys
or values are found. Previously, invalid metadata from credentials was
sent to the server in outgoing HTTP/2 requests. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/9202">#9202</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/buger"><code>@buger</code></a></li>
</ul>
</li>
<li>credentials/sts: Prevent potential token leakage by disallowing HTTP
redirects during STS token exchange. Previously, 3xx redirects were
followed automatically, replaying the request body containing
authentication tokens to the redirect destination. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/9299">#9299</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/nvxbug"><code>@nvxbug</code></a></li>
</ul>
</li>
<li>randomsubsetting: Ignore endpoints that contain no addresses.
Previously, this could cause the policy to panic while computing hashes.
(<a
href="https://redirect.github.com/grpc/grpc-go/issues/9259">#9259</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/fallintoplace"><code>@fallintoplace</code></a></li>
</ul>
</li>
<li>stats/otel: Ensure method names are populated in trace spans when
metrics are disabled. Previously, running with tracing enabled and
metrics disabled resulted in server trace spans lacking the RPC method
name (recording only "Recv."). (<a
href="https://redirect.github.com/grpc/grpc-go/issues/9262">#9262</a>)</li>
<li>transport: Return <code>io.ErrUnexpectedEOF</code> when EOF is
encountered after partial header or message body reads. Previously,
partial reads could return a plain <code>io.EOF</code>, failing to
distinguish truncated data from a clean end of stream. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/9204">#9204</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/buger"><code>@buger</code></a></li>
</ul>
</li>
<li>transport: Validate metadata supplied by balancers (in
<code>PickResult.Metadata</code>) and resolver addresses, failing the
RPC with status code <code>Internal</code> if invalid keys or values are
found. Previously, invalid metadata from these sources was sent to the
server in outgoing HTTP/2 requests. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/9203">#9203</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/buger"><code>@buger</code></a></li>
</ul>
</li>
<li>xds: Fix a rare corner case that could prevent a cluster from being
removed when it is no longer in use. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/9140">#9140</a>)</li>
<li>xds: Fix panic during route matching for routes containing header
matchers with empty <code>exact_match</code> strings. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/9223">#9223</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/nvxbug"><code>@nvxbug</code></a></li>
</ul>
</li>
<li>xds: Reject routes containing header matchers with empty
<code>prefix_match</code> or <code>suffix_match</code> strings.
Previously, this caused a panic during route matching. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/9223">#9223</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/nvxbug"><code>@nvxbug</code></a></li>
</ul>
</li>
<li>xds: Fix EDS drop policies being applied at a much lower rate than
configured due to an integer overflow. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/9257">#9257</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/nvxbug"><code>@nvxbug</code></a></li>
</ul>
</li>
<li>xds: Reject EDS resources containing drop policies with unsupported
denominators. Previously, such resources caused the client to panic when
calculating drop rates. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/9218">#9218</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/nvxbug"><code>@nvxbug</code></a></li>
</ul>
</li>
<li>xds/rbac: Reject RBAC configurations containing nested
<code>Principal</code> or <code>Permission</code> rules with
<code>:scheme</code> or <code>grpc-</code> prefixed header matchers.
Previously, such configurations could cause DENY policies to fail open.
(<a
href="https://redirect.github.com/grpc/grpc-go/issues/9258">#9258</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/nvxbug"><code>@nvxbug</code></a></li>
</ul>
</li>
<li>xds/rbac: Rewrite <code>host</code> header matchers to
<code>:authority</code> in nested <code>Principal</code> and
<code>Permission</code> rules. Previously, this rewrite only applied to
top-level rules, causing nested <code>host</code> matchers to never
match incoming requests and DENY policies to fail open. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/9258">#9258</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/nvxbug"><code>@nvxbug</code></a></li>
</ul>
</li>
<li>xds/rbac: Reject <code>CidrRanges</code> with an unset prefix
length. Previously, an omitted <code>prefix_len</code> field caused a
panic during RBAC configuration parsing. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/9250">#9250</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/nvxbug"><code>@nvxbug</code></a></li>
</ul>
</li>
</ul>
<h1>Performance Improvements</h1>
<ul>
<li>transport: Avoid a heap allocation when flushing shared write
buffers. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/9233">#9233</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/zaidoon1"><code>@zaidoon1</code></a></li>
</ul>
</li>
<li>credentials/alts: Support dynamic frame size negotiation and add the
<code>GRPC_GO_EXPERIMENTAL_ALTS_MAX_FRAME_SIZE</code> environment
variable (default 4KiB, max 512KiB) to configure the maximum ALTS record
frame size. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/9268">#9268</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/grpc/grpc-go/commit/e84aa5ab15d1d2b29d54f838312ad490cb7551a8"><code>e84aa5a</code></a>
Change version to 1.84.0 (<a
href="https://redirect.github.com/grpc/grpc-go/issues/9324">#9324</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/c5ae88df420fcc0c24c6267bdf8cdd3b2711ba2c"><code>c5ae88d</code></a>
Cherrypick <a
href="https://redirect.github.com/grpc/grpc-go/issues/9204">#9204</a>
and <a
href="https://redirect.github.com/grpc/grpc-go/issues/9321">#9321</a> to
v1.84.x (<a
href="https://redirect.github.com/grpc/grpc-go/issues/9407">#9407</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/a592f6a8d26237b5476eb18b08ee1203393e27b9"><code>a592f6a</code></a>
Cherrypick <a
href="https://redirect.github.com/grpc/grpc-go/issues/9351">#9351</a>
and <a
href="https://redirect.github.com/grpc/grpc-go/issues/9404">#9404</a> to
v1.84.x (<a
href="https://redirect.github.com/grpc/grpc-go/issues/9408">#9408</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/d5a41119e0e3189ea913cf839586ce34a44f1a3f"><code>d5a4111</code></a>
cherry-pick <a
href="https://redirect.github.com/grpc/grpc-go/issues/9365">#9365</a> to
v1.84.x (<a
href="https://redirect.github.com/grpc/grpc-go/issues/9370">#9370</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/89d55e04f9f3213a2de543e00df15f1468ea9d9a"><code>89d55e0</code></a>
cherry-pick <a
href="https://redirect.github.com/grpc/grpc-go/issues/9346">#9346</a> to
v1.84.x (<a
href="https://redirect.github.com/grpc/grpc-go/issues/9372">#9372</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/8a9f866584e36f0adb8c60a779581ab4bb486d1b"><code>8a9f866</code></a>
Cherry-pick <a
href="https://redirect.github.com/grpc/grpc-go/issues/9332">#9332</a> to
v1.84.x (<a
href="https://redirect.github.com/grpc/grpc-go/issues/9338">#9338</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/f8b54e7c913347537e168f5219d8f6cbaeb8860b"><code>f8b54e7</code></a>
Cherry-pick <a
href="https://redirect.github.com/grpc/grpc-go/issues/9331">#9331</a> to
v1.84.x (<a
href="https://redirect.github.com/grpc/grpc-go/issues/9334">#9334</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/30ce1d594fa9d7b86ff9d3d7dd7873ef0c161acf"><code>30ce1d5</code></a>
xds: support injecting bootstrap and server config into HTTP filter
config pa...</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/54c743e4e9829208f264e092160d2b0768a01bf2"><code>54c743e</code></a>
extproc : wait for async RPC to complete in test (<a
href="https://redirect.github.com/grpc/grpc-go/issues/9311">#9311</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/538bb2f7af6e36be46ec1d2ae90f65b972f14083"><code>538bb2f</code></a>
endpointsharding: decouple locking, and simplify ChildState API (<a
href="https://redirect.github.com/grpc/grpc-go/issues/9290">#9290</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/grpc/grpc-go/compare/v1.83.2...v1.84.0">compare
view</a></li>
</ul>
</details>
<br />
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
---
go.mod | 4 ++--
go.sum | 24 ++++--------------------
2 files changed, 6 insertions(+), 22 deletions(-)
diff --git a/go.mod b/go.mod
index 032f904a..d1181a1c 100644
--- a/go.mod
+++ b/go.mod
@@ -49,7 +49,7 @@ require (
golang.org/x/sync v0.23.0
golang.org/x/sys v0.48.0
gonum.org/v1/gonum v0.17.0
- google.golang.org/grpc v1.83.2
+ google.golang.org/grpc v1.84.0
google.golang.org/protobuf v1.36.12
modernc.org/sqlite v1.59.0
)
@@ -93,7 +93,7 @@ require (
golang.org/x/term v0.45.0 // indirect
golang.org/x/text v0.41.0 // indirect
golang.org/x/tools v0.48.0 // indirect
- google.golang.org/genproto/googleapis/rpc
v0.0.0-20260526163538-3dc84a4a5aaa // indirect
+ google.golang.org/genproto/googleapis/rpc
v0.0.0-20260706201446-f0a921348800 // indirect
modernc.org/libc v1.75.7 // indirect
modernc.org/mathutil v1.7.1 // indirect
modernc.org/memory v1.12.1 // indirect
diff --git a/go.sum b/go.sum
index 25a8bd5c..d2c6d4f9 100644
--- a/go.sum
+++ b/go.sum
@@ -41,10 +41,6 @@ github.com/davecgh/go-spew
v1.1.2-0.20180830191138-d8f796af33cc h1:U9qPSI2PIWSS1
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc/go.mod
h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
github.com/dustin/go-humanize v1.0.1
h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkpeCY=
github.com/dustin/go-humanize v1.0.1/go.mod
h1:Mu1zIs6XwVuF/gI1OepvI0qD18qycQx+mFykh5fBlto=
-github.com/go-logr/logr v1.4.3 h1:CjnDlHq8ikf6E492q6eKboGOC0T8CDaOvkHCIg8idEI=
-github.com/go-logr/logr v1.4.3/go.mod
h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY=
-github.com/go-logr/stdr v1.2.2 h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag=
-github.com/go-logr/stdr v1.2.2/go.mod
h1:mMo/vtBO5dYbehREoey6XUKy/eSumjCCveDpRre4VKE=
github.com/go-viper/mapstructure/v2 v2.4.0
h1:EBsztssimR/CONLSZZ04E8qAkxNYq4Qp9LvH92wZUgs=
github.com/go-viper/mapstructure/v2 v2.4.0/go.mod
h1:oJDH3BJKyqBA2TXFhDsKDGDTlndYOZ6rGS0BRZIxGhM=
github.com/goccy/go-json v0.10.6
h1:p8HrPJzOakx/mn/bQtjgNjdTcN+/S6FcG2CTtQOrHVU=
@@ -165,18 +161,6 @@ github.com/zeebo/assert v1.3.0
h1:g7C04CbJuIDKNPFHmsk4hwZDO5O+kntRxzaUoNXj+IQ=
github.com/zeebo/assert v1.3.0/go.mod
h1:Pq9JiuJQpG8JLJdtkwrJESF0Foym2/D9XMU5ciN/wJ0=
github.com/zeebo/xxh3 v1.1.0 h1:s7DLGDK45Dyfg7++yxI0khrfwq9661w9EN78eP/UZVs=
github.com/zeebo/xxh3 v1.1.0/go.mod
h1:IisAie1LELR4xhVinxWS5+zf1lA4p0MW4T+w+W07F5s=
-go.opentelemetry.io/auto/sdk v1.2.1
h1:jXsnJ4Lmnqd11kwkBV2LgLoFMZKizbCi5fNZ/ipaZ64=
-go.opentelemetry.io/auto/sdk v1.2.1/go.mod
h1:KRTj+aOaElaLi+wW1kO/DZRXwkF4C5xPbEe3ZiIhN7Y=
-go.opentelemetry.io/otel v1.44.0
h1:JjwHmHpA4iZ3wBxluu2fbbE7j4kqlE8jXyAyPXH7HqU=
-go.opentelemetry.io/otel v1.44.0/go.mod
h1:BMgjTHL9WPRlRjL2oZCBTL4whCGtXch2H4BhOPIAyYc=
-go.opentelemetry.io/otel/metric v1.44.0
h1:1w0gILTcHdr3YI+ixLyjemwrVnsMURbTZFrSYCdDdmc=
-go.opentelemetry.io/otel/metric v1.44.0/go.mod
h1:8O7hanEPBNgEMmybD3s2VBKcgWOCsA6tzHBPODAiquo=
-go.opentelemetry.io/otel/sdk v1.44.0
h1:nHYwb9lK+fJPU/dnT6s7W7Z8itMWyqrnVfbheVYrZ58=
-go.opentelemetry.io/otel/sdk v1.44.0/go.mod
h1:Osuydd3Se74nqjAKxid74N5eC+jfEqfTegHRnq58oK0=
-go.opentelemetry.io/otel/sdk/metric v1.44.0
h1:3LlKgI+VjbVsjNRFZJZAJ30WjXC5VkNRks6si09iEfI=
-go.opentelemetry.io/otel/sdk/metric v1.44.0/go.mod
h1:5B5pMARnXxKhltooO4xUuCBorl65a4EpnTalObqOigA=
-go.opentelemetry.io/otel/trace v1.44.0
h1:jxF5CsGYCe74MCRx2X4g7WsY/VBKRqqpNvXlX/6gtIk=
-go.opentelemetry.io/otel/trace v1.44.0/go.mod
h1:oLl1jrMQAVo6v3GAggN+1VH9VIz9iUSvW53sW1Q8PIE=
go.yaml.in/yaml/v3 v3.0.5 h1:N6y/pJk8buWs9NY5ERU2HSMfm+IuD/OtfdAnq6kESPw=
go.yaml.in/yaml/v3 v3.0.5/go.mod
h1:HVTZu1O7/Vkt2N+BFy8Zza+lnLsABggaTM2ZpNIGuKg=
golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod
h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
@@ -236,10 +220,10 @@ golang.org/x/tools v0.48.0/go.mod
h1:08xX0orndb/F7jJxGDicx061tyd5pcMto75YMAXr6lk
golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod
h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
gonum.org/v1/gonum v0.17.0 h1:VbpOemQlsSMrYmn7T2OUvQ4dqxQXU+ouZFQsZOx50z4=
gonum.org/v1/gonum v0.17.0/go.mod
h1:El3tOrEuMpv2UdMrbNlKEh9vd86bmQ6vqIcDwxEOc1E=
-google.golang.org/genproto/googleapis/rpc v0.0.0-20260526163538-3dc84a4a5aaa
h1:mZHHdPZl0dbGHCflZgAq/Q468DWVFcU2whhB2KAo8fk=
-google.golang.org/genproto/googleapis/rpc
v0.0.0-20260526163538-3dc84a4a5aaa/go.mod
h1:4Hqkh8ycfw05ld/3BWL7rJOSfebL2Q+DVDeRgYgxUU8=
-google.golang.org/grpc v1.83.2 h1:EManeRomTObA0BU7I8vXgg/78uE5MJ9M8B39EX2WscU=
-google.golang.org/grpc v1.83.2/go.mod
h1:YPI1hK3kDked6iHvgX3tR0y+nX/qpMFKhPgFsokw1S8=
+google.golang.org/genproto/googleapis/rpc v0.0.0-20260706201446-f0a921348800
h1:qEHAMpSaUhtD0p3NbEEI83HwNGFxEwaSJ1G9PLnCBZE=
+google.golang.org/genproto/googleapis/rpc
v0.0.0-20260706201446-f0a921348800/go.mod
h1:4Hqkh8ycfw05ld/3BWL7rJOSfebL2Q+DVDeRgYgxUU8=
+google.golang.org/grpc v1.84.0 h1:soMyaPJ8pAak5PIQ0DGBUir0XRo2fRoMqhNWMLlLxO0=
+google.golang.org/grpc v1.84.0/go.mod
h1:ljCht0DrxQrXBDRTZp52Qxh3Ffk8CdYm2sj4O2QN2C0=
google.golang.org/protobuf v1.36.12
h1:pJOKDDOyeXErUroCihFAd5LQuwXBSpVnKGrj5o/fwxc=
google.golang.org/protobuf v1.36.12/go.mod
h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco=
gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod
h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=