This is an automated email from the ASF dual-hosted git repository.
jbonofre pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/arrow-java.git
The following commit(s) were added to refs/heads/main by this push:
new 3c9e49b35 MINOR: Bump io.grpc:grpc-bom from 1.84.2 to 1.85.1 (#1431)
3c9e49b35 is described below
commit 3c9e49b35fb692ee35602b778649a10277234b8f
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Mon Nov 2 14:45:18 2026 +0100
MINOR: Bump io.grpc:grpc-bom from 1.84.2 to 1.85.1 (#1431)
Bumps [io.grpc:grpc-bom](https://github.com/grpc/grpc-java) from 1.84.2
to 1.85.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/grpc/grpc-java/releases";>io.grpc:grpc-bom's
releases</a>.</em></p>
<blockquote>
<h2>v1.85.1</h2>
<h2>What's Changed</h2>
<ul>
<li>netty: Include pseudo-headers in GrpcHttp2RequestHeaders.iterator()
(v1.85.x backport) by <a
href="https://github.com/AgraVator";><code>@AgraVator</code></a> in <a
href="https://redirect.github.com/grpc/grpc-java/pull/13120";>grpc/grpc-java#13120</a></li>
<li>core: Delayed deserialization for unary/server-streaming calls
(v1.85.x backport) by <a
href="https://github.com/kannanjgithub";><code>@kannanjgithub</code></a>
in <a
href="https://redirect.github.com/grpc/grpc-java/pull/13132";>grpc/grpc-java#13132</a></li>
<li>xDS: fix DistributorWatcher thread safety in CertificateProvider
(v1.85.x backport) by <a
href="https://github.com/kannanjgithub";><code>@kannanjgithub</code></a>
in <a
href="https://redirect.github.com/grpc/grpc-java/pull/13133";>grpc/grpc-java#13133</a></li>
</ul>
<h2>v1.85.0</h2>
<h2>gRPC Java 1.85.0 Release Notes</h2>
<h3>API Changes</h3>
<ul>
<li>netty: Support never-indexed metadata keys (<a
href="https://redirect.github.com/grpc/grpc-java/issues/12976";>#12976</a>)
(e9a8c2bf83). High-cardinality metadata values provide little
compression benefit and can churn the server's dynamic HPACK table. Adds
<code>NettyChannelBuilder.neverIndexMetadataKey()</code> and
<code>neverIndexMetadataKeys(</code>) so callers can mark selected
outbound metadata keys for HPACK's never-indexed literal
representation.</li>
<li>binder: Add Context-based <code>hasPermissions()</code> to
<code>SecurityPolicies</code> and deprecate the
<code>PackageManager</code> version.</li>
</ul>
<h3>Behavior Changes</h3>
<ul>
<li>xds: allow wildcard listener port in LDS (5fda0c7c35). It now
accepts a port of 0 in the LDS listener address as matching any port.<br
/>
</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li> xds: Make RawMessageClientInterceptor conditional on ext_proc flags
(<a
href="https://redirect.github.com/grpc/grpc-java/issues/13015";>#13015</a>)
(e58489ffa0). Fixes a bug that caused empty payloads on retry attempts
for regular xDS channels.</li>
<li>core: Reset configSelector on realChannel while entering IDLE state
(<a
href="https://redirect.github.com/grpc/grpc-java/issues/12832";>#12832</a>)
(fc4314419d). Because of a bug in the config selector, when
ManagedChannel entered IDLE state due to resource deletion on the xDS
control plane, the channel stayed stuck in IDLE state even after the
resource came back online and a new rpc was executed.</li>
<li>core: Gracefully handle GOAWAY frames with unrecognized error codes
(<a
href="https://redirect.github.com/grpc/grpc-java/issues/13035";>#13035</a>)
(b3ae8010c9). When a server or proxy sent a GOAWAY with an unrecognized
HTTP/2 error code, such as 70007 from Apache httpd, Netty transport
clients logged <code>NullPointerException: Http2Error cannot be null for
GOAWAY</code> and RPCs could hang until their deadline. Such codes are
now treated as INTERNAL_ERROR, so the transport shuts down cleanly.</li>
</ul>
<h3>Improvements</h3>
<ul>
<li>netty: make hostname verification configurable (<a
href="https://redirect.github.com/grpc/grpc-java/issues/13002";>#13002</a>)
(2858db2862). This configures HTTPS endpoint identification in
GrpcSslContexts and updates ClientTlsHandler to preserve an explicit
empty-string opt-out. A null algorithm still falls back to HTTPS,
retaining hostname verification for custom contexts that do not select
an algorithm.</li>
<li>bazel: Adopt proto_lang_toolchain for java_grpc_library() (<a
href="https://redirect.github.com/grpc/grpc-java/issues/12994";>#12994</a>)
(c9ee3f8a79). <code>java_grpc_library</code> and
<code>java_lite_grpc_library</code> now invoke protoc through Protobuf's
<code>proto_lang_toolchain</code> instead of always using
<code>@com_google_protobuf//:protoc</code>. They now use the same protoc
and protoc options as <code>java_proto_library</code>.</li>
</ul>
<h3>New Features</h3>
<ul>
<li>api: Implement custom events framework in gRPC-Java server (<a
href="https://redirect.github.com/grpc/grpc-java/issues/12980";>#12980</a>)
(dd00881a6e). This adds triggerEvent/onEvent APIs to
<code>ServerCall</code> and <code>ServerCall.Listener</code>. This
allows events to be triggered on the <code>ServerCall</code> and be
delivered as a listener callback.</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li>Upgrade protobuf for bazel from 36.0 to 36.0.bcr.1 (<a
href="https://redirect.github.com/grpc/grpc-java/issues/13013";>#13013</a>)
(9799887b74)</li>
<li>netty: Upgrade Netty to 4.2.17 (<a
href="https://redirect.github.com/grpc/grpc-java/issues/13036";>#13036</a>)
(61b910bb43). netty-tcnative remains at 2.0.81.</li>
</ul>
<h3>Documentation</h3>
<ul>
<li>stub: Clarify flow control javadoc (<a
href="https://redirect.github.com/grpc/grpc-java/issues/12977";>#12977</a>)
(893eb70807)</li>
</ul>
<p> </p>
<h3>Thanks to</h3>
<p><a href="https://github.com/kkalin68";><code>@kkalin68</code></a></p>
<p><a
href="https://github.com/petedmarsh";><code>@petedmarsh</code></a></p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/grpc/grpc-java/commit/54c634aed4b5c78a29d0fa51d9282e9538722543";><code>54c634a</code></a>
Bump version to 1.85.1</li>
<li><a
href="https://github.com/grpc/grpc-java/commit/fcedb647ed739850ad6b85975928abc1771d01c2";><code>fcedb64</code></a>
Update README etc to reference 1.85.1</li>
<li><a
href="https://github.com/grpc/grpc-java/commit/a523900b2662f779b01e3ea7d7d28d6f9d2181bf";><code>a523900</code></a>
xDS: fix DistributorWatcher thread safety in CertificateProvider
(v1.85.x bac...</li>
<li><a
href="https://github.com/grpc/grpc-java/commit/f1ba10e10886e379435b293f469f4db36b8f7bc6";><code>f1ba10e</code></a>
core: Delayed deserialization for unary/server-streaming calls (v1.85.x
backp...</li>
<li><a
href="https://github.com/grpc/grpc-java/commit/ca2f8c1ed71ad5cfab435485b422549128b464d6";><code>ca2f8c1</code></a>
netty: Include pseudo-headers in GrpcHttp2RequestHeaders.iterator()
(v1.85.x ...</li>
<li><a
href="https://github.com/grpc/grpc-java/commit/af34f7f008b4ebbf462bffd772dc79794bc2ec0c";><code>af34f7f</code></a>
Bump version to 1.85.1-SNAPSHOT</li>
<li><a
href="https://github.com/grpc/grpc-java/commit/73a9039966d1e3e84f139585ae7b835b4c1b338f";><code>73a9039</code></a>
Bump version to 1.85.0</li>
<li><a
href="https://github.com/grpc/grpc-java/commit/44ef493e8434de02aa6d960c87d06d3ac4f3816e";><code>44ef493</code></a>
Update README etc to reference 1.85.0</li>
<li><a
href="https://github.com/grpc/grpc-java/commit/4d0d548ea050d002c66573a30785f14bdfd41bea";><code>4d0d548</code></a>
api: move ATTR_ADDRESS_NAME to EquivalentAddressGroup (<a
href="https://redirect.github.com/grpc/grpc-java/issues/13072";>#13072</a>)</li>
<li><a
href="https://github.com/grpc/grpc-java/commit/9e0ff283e9a727546c46d889e02a9376c36ab411";><code>9e0ff28</code></a>
xds: fix TSAN data race in ext_proc client interceptor test cleanup (<a
href="https://redirect.github.com/grpc/grpc-java/issues/13071";>#13071</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/grpc/grpc-java/compare/v1.84.2...v1.85.1";>compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
---
pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/pom.xml b/pom.xml
index 90ee23932..721007a45 100644
--- a/pom.xml
+++ b/pom.xml
@@ -99,7 +99,7 @@ under the License.
<dep.slf4j.version>2.0.20</dep.slf4j.version>
<dep.guava-bom.version>33.7.2-jre</dep.guava-bom.version>
<dep.netty-bom.version>4.2.19.Final</dep.netty-bom.version>
- <dep.grpc-bom.version>1.84.2</dep.grpc-bom.version>
+ <dep.grpc-bom.version>1.85.1</dep.grpc-bom.version>
<dep.protobuf-bom.version>4.36.2</dep.protobuf-bom.version>
<dep.jackson-bom.version>2.22.4</dep.jackson-bom.version>
<dep.hadoop.version>3.5.0</dep.hadoop.version>
