dependabot[bot] opened a new pull request #1108: URL: https://github.com/apache/avro/pull/1108
Bumps `grpc.version` from 1.35.0 to 1.36.0. Updates `grpc-core` from 1.35.0 to 1.36.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/grpc/grpc-java/releases";>grpc-core's releases</a>.</em></p> <blockquote> <h2>v1.36.0</h2> <h2>API Changes</h2> <ul> <li>Added .class file hack to ease removal of internal ABIs (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/pull/7834";>grpc/grpc-java#7834</a>). This does not impact source code (API); it only impacts code compiled with a different version of gRPC than it runs with (ABI). Users of the transport-specific and experimental channel/server builders (<code>NettyChannelBuilder</code>, <code>NettyServerBuilder</code>, <code>OkHttpChannelBuilder</code>, <code>InProcessChannelBuilder</code>, <code>CronetChannelBuilder</code>) are commonly referencing internal ABIs due to overly-specific generics in gRPC. There is now a .class file hack in place which preserves ABI compatibility for old builds while causing javac to use the intended public API for new builds. In a future release we will remove the internal ABI for these experimental APIs (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/7211";>grpc/grpc-java#7211</a>) which may cause runtime failures. Reco mpiling with this release or later will prevent your code from using those ABIs and so you will not be impacted by the ABI removal. This is related to the temporary ABI breakage in v1.33.0.</li> <li>Deleted deprecated <code>LoadBalancer.Helper</code> APIs as they had been deprecated since v1.22 release (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/7793";>#7793</a>).</li> <li>Deprecated <code>LoadBalancer.Helper.createResolvingOobChannelBuilder(String target)</code> in favor of the new experimental API <code>createResolvingOobChannelBuilder(String target, ChannelCredentials creds)</code>. The two APIs differ not only in signature but also in the default authority of the returned builder. See their javadoc for more detail.</li> </ul> <h2>Behavior Changes</h2> <ul> <li><code>ManagedChannelBuilder.overrideAuthority()</code> is now used even if the NameResolver uses <code>EquivalentAddressGroup.ATTR_AUTHORITY_OVERRIDE</code>. Previously the NameResolver’s override would be used</li> <li>grpclb: keep RR Subchannel state in TRANSIENT_FAILURE until becoming READY (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/7816";>#7816</a>). This enhancement was previously made to the round_robin policy, but now also applies to grpclb</li> <li>netty: On server-side, stop logging expected STREAM_CLOSED exceptions. This reduces log pollution</li> </ul> <h2>New Features</h2> <ul> <li>services: Add support for <code>grpc.channelz.v1.Channelz.GetServer</code>, as defined in <a href="https://github.com/grpc/grpc-proto/blob/f5c9cf6eecbe948b8744bd0398a1ddc937ec5237/grpc/channelz/v1/channelz.proto#L429-L430";><code>channelz.proto</code></a></li> <li>xds: support reading bootstrap config directly from env var (<code>GRPC_XDS_BOOTSTRAP_CONFIG</code>) or system property (<code>io.grpc.xds.bootstrapValue</code>) values</li> <li>alts: Introduce <code>AltsContext</code> to allow outside packages access to ALTS peer information</li> </ul> <h2>Bug Fixes</h2> <ul> <li>core: Fixed a bug where RPCs queued waiting for a connection can use user-provided executors after the ManagedChannel is terminated (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/6283";>#6283</a>)</li> <li>core: Fixed a bug where RPCs queued waiting on CallCredentials can use user-provided executors after the ManagedChannel is terminated (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/7813";>#7813</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>api: add nullable annotation to <code>Status.trailersFromThrowable</code> (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/7856";>#7856</a>). The annotation doesn’t change behavior, it just makes the behavior more clear</li> </ul> <h2>Dependencies</h2> <ul> <li>alts: Remove dependency on Apache Commons Lang</li> </ul> <h2>Acknowledgements</h2> <p><a href="https://github.com/elharo";><code>@elharo</code></a> Elliotte Rusty Harold <a href="https://github.com/lriuui0x0";><code>@lriuui0x0</code></a> Rui Liu <a href="https://github.com/martin-schaub";><code>@martin-schaub</code></a> Martin Schaub <a href="https://github.com/njhill";><code>@njhill</code></a> Nick Hill <a href="https://github.com/ReginFell";><code>@ReginFell</code></a> Serhii Zabelnykov</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/grpc/grpc-java/commit/a5323492654dfeaf7de2fca06bc72be60b31c1e0";><code>a532349</code></a> Bump version to 1.36.0</li> <li><a href="https://github.com/grpc/grpc-java/commit/0c799d94192a9fa0252498cbd0d031a7f4db58ef";><code>0c799d9</code></a> Update README etc to reference 1.36.0</li> <li><a href="https://github.com/grpc/grpc-java/commit/e8705844e2d8b1e680cf7a77823054c4181e8503";><code>e870584</code></a> xds: gate HttpFilter parsing by env flag</li> <li><a href="https://github.com/grpc/grpc-java/commit/da86eea19093c2963c85742c212fd9c324d274a9";><code>da86eea</code></a> rls: fix rls oobChannel grpclb config service name</li> <li><a href="https://github.com/grpc/grpc-java/commit/f60a072af9b81d163a676665e849438674fdddea";><code>f60a072</code></a> interop-testing: fix atls test service race (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/7897";>#7897</a>)</li> <li><a href="https://github.com/grpc/grpc-java/commit/7d9ee8f051dc358e7a4699b7b8d46401470da90b";><code>7d9ee8f</code></a> rls: fix wrong server field in lookup request again</li> <li><a href="https://github.com/grpc/grpc-java/commit/7f7821c616598ce4e33d2045c5641b2348728cb8";><code>7f7821c</code></a> interop-testing: add fake altsHandshakerService for test (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/7847";>#7847</a>)</li> <li><a href="https://github.com/grpc/grpc-java/commit/514101d90c5ad1daec526012d1d7ce4a8b9c44eb";><code>514101d</code></a> alts: Introduce AltsContext to allow outside packages accessing ALTS information</li> <li><a href="https://github.com/grpc/grpc-java/commit/9ba419adc0a60c1cd9584ca5f2f9a33adb7341de";><code>9ba419a</code></a> api: add nullable annotation to trailersFromThrowable (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/7856";>#7856</a>)</li> <li><a href="https://github.com/grpc/grpc-java/commit/23bb2ebf310db004fb110f60e0db9cb29849719e";><code>23bb2eb</code></a> all: publish grpc-rls</li> <li>Additional commits viewable in <a href="https://github.com/grpc/grpc-java/compare/v1.35.0...v1.36.0";>compare view</a></li> </ul> </details> <br /> Updates `grpc-stub` from 1.35.0 to 1.36.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/grpc/grpc-java/releases";>grpc-stub's releases</a>.</em></p> <blockquote> <h2>v1.36.0</h2> <h2>API Changes</h2> <ul> <li>Added .class file hack to ease removal of internal ABIs (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/pull/7834";>grpc/grpc-java#7834</a>). This does not impact source code (API); it only impacts code compiled with a different version of gRPC than it runs with (ABI). Users of the transport-specific and experimental channel/server builders (<code>NettyChannelBuilder</code>, <code>NettyServerBuilder</code>, <code>OkHttpChannelBuilder</code>, <code>InProcessChannelBuilder</code>, <code>CronetChannelBuilder</code>) are commonly referencing internal ABIs due to overly-specific generics in gRPC. There is now a .class file hack in place which preserves ABI compatibility for old builds while causing javac to use the intended public API for new builds. In a future release we will remove the internal ABI for these experimental APIs (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/7211";>grpc/grpc-java#7211</a>) which may cause runtime failures. Reco mpiling with this release or later will prevent your code from using those ABIs and so you will not be impacted by the ABI removal. This is related to the temporary ABI breakage in v1.33.0.</li> <li>Deleted deprecated <code>LoadBalancer.Helper</code> APIs as they had been deprecated since v1.22 release (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/7793";>#7793</a>).</li> <li>Deprecated <code>LoadBalancer.Helper.createResolvingOobChannelBuilder(String target)</code> in favor of the new experimental API <code>createResolvingOobChannelBuilder(String target, ChannelCredentials creds)</code>. The two APIs differ not only in signature but also in the default authority of the returned builder. See their javadoc for more detail.</li> </ul> <h2>Behavior Changes</h2> <ul> <li><code>ManagedChannelBuilder.overrideAuthority()</code> is now used even if the NameResolver uses <code>EquivalentAddressGroup.ATTR_AUTHORITY_OVERRIDE</code>. Previously the NameResolver’s override would be used</li> <li>grpclb: keep RR Subchannel state in TRANSIENT_FAILURE until becoming READY (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/7816";>#7816</a>). This enhancement was previously made to the round_robin policy, but now also applies to grpclb</li> <li>netty: On server-side, stop logging expected STREAM_CLOSED exceptions. This reduces log pollution</li> </ul> <h2>New Features</h2> <ul> <li>services: Add support for <code>grpc.channelz.v1.Channelz.GetServer</code>, as defined in <a href="https://github.com/grpc/grpc-proto/blob/f5c9cf6eecbe948b8744bd0398a1ddc937ec5237/grpc/channelz/v1/channelz.proto#L429-L430";><code>channelz.proto</code></a></li> <li>xds: support reading bootstrap config directly from env var (<code>GRPC_XDS_BOOTSTRAP_CONFIG</code>) or system property (<code>io.grpc.xds.bootstrapValue</code>) values</li> <li>alts: Introduce <code>AltsContext</code> to allow outside packages access to ALTS peer information</li> </ul> <h2>Bug Fixes</h2> <ul> <li>core: Fixed a bug where RPCs queued waiting for a connection can use user-provided executors after the ManagedChannel is terminated (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/6283";>#6283</a>)</li> <li>core: Fixed a bug where RPCs queued waiting on CallCredentials can use user-provided executors after the ManagedChannel is terminated (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/7813";>#7813</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>api: add nullable annotation to <code>Status.trailersFromThrowable</code> (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/7856";>#7856</a>). The annotation doesn’t change behavior, it just makes the behavior more clear</li> </ul> <h2>Dependencies</h2> <ul> <li>alts: Remove dependency on Apache Commons Lang</li> </ul> <h2>Acknowledgements</h2> <p><a href="https://github.com/elharo";><code>@elharo</code></a> Elliotte Rusty Harold <a href="https://github.com/lriuui0x0";><code>@lriuui0x0</code></a> Rui Liu <a href="https://github.com/martin-schaub";><code>@martin-schaub</code></a> Martin Schaub <a href="https://github.com/njhill";><code>@njhill</code></a> Nick Hill <a href="https://github.com/ReginFell";><code>@ReginFell</code></a> Serhii Zabelnykov</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/grpc/grpc-java/commit/a5323492654dfeaf7de2fca06bc72be60b31c1e0";><code>a532349</code></a> Bump version to 1.36.0</li> <li><a href="https://github.com/grpc/grpc-java/commit/0c799d94192a9fa0252498cbd0d031a7f4db58ef";><code>0c799d9</code></a> Update README etc to reference 1.36.0</li> <li><a href="https://github.com/grpc/grpc-java/commit/e8705844e2d8b1e680cf7a77823054c4181e8503";><code>e870584</code></a> xds: gate HttpFilter parsing by env flag</li> <li><a href="https://github.com/grpc/grpc-java/commit/da86eea19093c2963c85742c212fd9c324d274a9";><code>da86eea</code></a> rls: fix rls oobChannel grpclb config service name</li> <li><a href="https://github.com/grpc/grpc-java/commit/f60a072af9b81d163a676665e849438674fdddea";><code>f60a072</code></a> interop-testing: fix atls test service race (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/7897";>#7897</a>)</li> <li><a href="https://github.com/grpc/grpc-java/commit/7d9ee8f051dc358e7a4699b7b8d46401470da90b";><code>7d9ee8f</code></a> rls: fix wrong server field in lookup request again</li> <li><a href="https://github.com/grpc/grpc-java/commit/7f7821c616598ce4e33d2045c5641b2348728cb8";><code>7f7821c</code></a> interop-testing: add fake altsHandshakerService for test (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/7847";>#7847</a>)</li> <li><a href="https://github.com/grpc/grpc-java/commit/514101d90c5ad1daec526012d1d7ce4a8b9c44eb";><code>514101d</code></a> alts: Introduce AltsContext to allow outside packages accessing ALTS information</li> <li><a href="https://github.com/grpc/grpc-java/commit/9ba419adc0a60c1cd9584ca5f2f9a33adb7341de";><code>9ba419a</code></a> api: add nullable annotation to trailersFromThrowable (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/7856";>#7856</a>)</li> <li><a href="https://github.com/grpc/grpc-java/commit/23bb2ebf310db004fb110f60e0db9cb29849719e";><code>23bb2eb</code></a> all: publish grpc-rls</li> <li>Additional commits viewable in <a href="https://github.com/grpc/grpc-java/compare/v1.35.0...v1.36.0";>compare view</a></li> </ul> </details> <br /> Updates `grpc-netty` from 1.35.0 to 1.36.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/grpc/grpc-java/releases";>grpc-netty's releases</a>.</em></p> <blockquote> <h2>v1.36.0</h2> <h2>API Changes</h2> <ul> <li>Added .class file hack to ease removal of internal ABIs (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/pull/7834";>grpc/grpc-java#7834</a>). This does not impact source code (API); it only impacts code compiled with a different version of gRPC than it runs with (ABI). Users of the transport-specific and experimental channel/server builders (<code>NettyChannelBuilder</code>, <code>NettyServerBuilder</code>, <code>OkHttpChannelBuilder</code>, <code>InProcessChannelBuilder</code>, <code>CronetChannelBuilder</code>) are commonly referencing internal ABIs due to overly-specific generics in gRPC. There is now a .class file hack in place which preserves ABI compatibility for old builds while causing javac to use the intended public API for new builds. In a future release we will remove the internal ABI for these experimental APIs (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/7211";>grpc/grpc-java#7211</a>) which may cause runtime failures. Reco mpiling with this release or later will prevent your code from using those ABIs and so you will not be impacted by the ABI removal. This is related to the temporary ABI breakage in v1.33.0.</li> <li>Deleted deprecated <code>LoadBalancer.Helper</code> APIs as they had been deprecated since v1.22 release (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/7793";>#7793</a>).</li> <li>Deprecated <code>LoadBalancer.Helper.createResolvingOobChannelBuilder(String target)</code> in favor of the new experimental API <code>createResolvingOobChannelBuilder(String target, ChannelCredentials creds)</code>. The two APIs differ not only in signature but also in the default authority of the returned builder. See their javadoc for more detail.</li> </ul> <h2>Behavior Changes</h2> <ul> <li><code>ManagedChannelBuilder.overrideAuthority()</code> is now used even if the NameResolver uses <code>EquivalentAddressGroup.ATTR_AUTHORITY_OVERRIDE</code>. Previously the NameResolver’s override would be used</li> <li>grpclb: keep RR Subchannel state in TRANSIENT_FAILURE until becoming READY (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/7816";>#7816</a>). This enhancement was previously made to the round_robin policy, but now also applies to grpclb</li> <li>netty: On server-side, stop logging expected STREAM_CLOSED exceptions. This reduces log pollution</li> </ul> <h2>New Features</h2> <ul> <li>services: Add support for <code>grpc.channelz.v1.Channelz.GetServer</code>, as defined in <a href="https://github.com/grpc/grpc-proto/blob/f5c9cf6eecbe948b8744bd0398a1ddc937ec5237/grpc/channelz/v1/channelz.proto#L429-L430";><code>channelz.proto</code></a></li> <li>xds: support reading bootstrap config directly from env var (<code>GRPC_XDS_BOOTSTRAP_CONFIG</code>) or system property (<code>io.grpc.xds.bootstrapValue</code>) values</li> <li>alts: Introduce <code>AltsContext</code> to allow outside packages access to ALTS peer information</li> </ul> <h2>Bug Fixes</h2> <ul> <li>core: Fixed a bug where RPCs queued waiting for a connection can use user-provided executors after the ManagedChannel is terminated (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/6283";>#6283</a>)</li> <li>core: Fixed a bug where RPCs queued waiting on CallCredentials can use user-provided executors after the ManagedChannel is terminated (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/7813";>#7813</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>api: add nullable annotation to <code>Status.trailersFromThrowable</code> (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/7856";>#7856</a>). The annotation doesn’t change behavior, it just makes the behavior more clear</li> </ul> <h2>Dependencies</h2> <ul> <li>alts: Remove dependency on Apache Commons Lang</li> </ul> <h2>Acknowledgements</h2> <p><a href="https://github.com/elharo";><code>@elharo</code></a> Elliotte Rusty Harold <a href="https://github.com/lriuui0x0";><code>@lriuui0x0</code></a> Rui Liu <a href="https://github.com/martin-schaub";><code>@martin-schaub</code></a> Martin Schaub <a href="https://github.com/njhill";><code>@njhill</code></a> Nick Hill <a href="https://github.com/ReginFell";><code>@ReginFell</code></a> Serhii Zabelnykov</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/grpc/grpc-java/commit/a5323492654dfeaf7de2fca06bc72be60b31c1e0";><code>a532349</code></a> Bump version to 1.36.0</li> <li><a href="https://github.com/grpc/grpc-java/commit/0c799d94192a9fa0252498cbd0d031a7f4db58ef";><code>0c799d9</code></a> Update README etc to reference 1.36.0</li> <li><a href="https://github.com/grpc/grpc-java/commit/e8705844e2d8b1e680cf7a77823054c4181e8503";><code>e870584</code></a> xds: gate HttpFilter parsing by env flag</li> <li><a href="https://github.com/grpc/grpc-java/commit/da86eea19093c2963c85742c212fd9c324d274a9";><code>da86eea</code></a> rls: fix rls oobChannel grpclb config service name</li> <li><a href="https://github.com/grpc/grpc-java/commit/f60a072af9b81d163a676665e849438674fdddea";><code>f60a072</code></a> interop-testing: fix atls test service race (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/7897";>#7897</a>)</li> <li><a href="https://github.com/grpc/grpc-java/commit/7d9ee8f051dc358e7a4699b7b8d46401470da90b";><code>7d9ee8f</code></a> rls: fix wrong server field in lookup request again</li> <li><a href="https://github.com/grpc/grpc-java/commit/7f7821c616598ce4e33d2045c5641b2348728cb8";><code>7f7821c</code></a> interop-testing: add fake altsHandshakerService for test (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/7847";>#7847</a>)</li> <li><a href="https://github.com/grpc/grpc-java/commit/514101d90c5ad1daec526012d1d7ce4a8b9c44eb";><code>514101d</code></a> alts: Introduce AltsContext to allow outside packages accessing ALTS information</li> <li><a href="https://github.com/grpc/grpc-java/commit/9ba419adc0a60c1cd9584ca5f2f9a33adb7341de";><code>9ba419a</code></a> api: add nullable annotation to trailersFromThrowable (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/7856";>#7856</a>)</li> <li><a href="https://github.com/grpc/grpc-java/commit/23bb2ebf310db004fb110f60e0db9cb29849719e";><code>23bb2eb</code></a> all: publish grpc-rls</li> <li>Additional commits viewable in <a href="https://github.com/grpc/grpc-java/compare/v1.35.0...v1.36.0";>compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually </details> ---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected]
