dependabot[bot] opened a new pull request #1420: URL: https://github.com/apache/avro/pull/1420
Bumps `grpc.version` from 1.40.1 to 1.42.1. Updates `grpc-core` from 1.40.1 to 1.42.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/grpc/grpc-java/releases";>grpc-core's releases</a>.</em></p> <blockquote> <h2>v1.42.1</h2> <p>Bug fixes:</p> <ul> <li>xds: fix a bug that invalid resources from the control plane was internally classified as missing configuration, but instead it should be classified as a transient error. This will change load balancing states on failure handling behavior: for example, missing LDS at xDS server would make it enter “not serving” mode but a transient error does not affect serving status. <a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8690";>#8690</a></li> <li>xds: fix a bug where XdsServer didn’t block start() when configuration is missing, and instead errored. <a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8690";>#8690</a></li> <li>xds: stop generating UUIDs for filter chains that lack them. The UUID was preventing the <code>XdsServer</code> from noticing when a control plane sent a needless duplicate update, causing <code>XdsServer</code> to drain all its existing connections to use the “new” configuration <a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8688";>#8688</a></li> </ul> <p>New feature:</p> <ul> <li>netty: Add ability to set system property <code>-Dio.grpc.netty.disableConnectionHeaderCheck=false</code> to disable HTTP Connection header check. This is a temporary workaround to allow fixing out-of-spec HTTP/2 clients <a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8683";>#8683</a></li> <li>compiler: Protoc plugin for macOS x86 is duplicated to be used on the aarch architecture, to ease use on arm64 macs. The plugin is not actually ARM64, just named as such. Future work will need to compile it appropriately <a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8680";>#8680</a></li> </ul> <h2>v1.42.0</h2> <p>In this release we drop support for Android API level 18 or lower (Jelly Bean or earlier), following Google Play Service’s <a href="https://android-developers.googleblog.com/2021/07/google-play-services-discontinuing-jelly-bean.html";>discontinued updates for Jelly Bean (API levels 16, 17 & 18)</a>.</p> <h3>API Changes</h3> <ul> <li>xds: Added <code>XdsServerBuilder.overrideBootstrapForTest()</code> to provide bootstrap override for testing purposes. This way, the test does not need to use the shared environment variable for bootstrap injection. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8575";>#8575</a>)</li> <li>api: Stabilize the <code>Status.asException(Metadata)</code> method. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8520";>#8520</a>)</li> <li>core/auth: Remove <code>CallCredentials2</code> (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8572";>#8572</a>). <code>CallCredentials2</code> was introduced in 1.16.0 to ease migration of <code>CallCredentials</code> to an abstract class. <code>CallCredentials</code> has been preferred over <code>CallCredentials2</code> since 1.19.0</li> </ul> <h3>Bug Fixes</h3> <ul> <li>netty: Requests with Connection header are malformed. This is required per HTTP/2. The server now rejects such requests. To improve debuggability for clients, Metadata.Key will log if creating a key for “Connection”</li> <li>grpclb: Fix “IllegalStateException: already in fallback” channel panic, by not starting fallback timer if already in fallback (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8646";>#8646</a>). This builds on the fix in 1.38.1. The bug was introduced in 1.38.0.</li> <li>core, netty, okhttp: Fix AbstractManagedChannelImplBuilder#maxInboundMessageSize(int) ABI (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8607";>#8607</a>). Solves the issue with NettyChannelBuilder.maxInboundMessageSize(int) and OkHttpChannelBuilder.maxInboundMessageSize(int) not working in rare cases when pre-1.33 builds combined with post-1.33. See issue <a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8313";>#8313</a> for the details.</li> </ul> <h3>New Features</h3> <ul> <li>binder: A new transport with channel and server builders which support cross-process and cross-application communication on Android. BinderChannel is production ready and in use by several Google applications, though the APIs are still experimental and subject to change. It does not currently support rpc-level flow control for streaming RPCs. See <a href="https://github.com/grpc/proposal/blob/master/L73-java-binderchannel.md";>gRFC L73</a> for background.</li> <li>xds: implemented rbac filter per <a href="https://github.com/grpc/proposal/blob/master/A41-xds-rbac.md";>A41 xDS RBAC</a>. This is the first HTTP filter supported on server-side.</li> <li>stub: add <code>ServerCallStreamObserver.setOnCloseHandler(Runnable)</code>. Notified when gRPC has completed processing the RPC. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8452";>#8452</a>)</li> </ul> <h3>Behavior Changes</h3> <ul> <li>core: gRPC-Java library discards any Content-Length header set by the application because in most cases this header is blindly forwarded from some other source and is incorrect for gRPC payload.</li> <li>netty: Use Host header on server-side if :authority is not present</li> <li>rls: the cache_size in route lookup config is limited to 5M</li> <li>core: changed the level mapping ChannelLogger uses for java.util.logging.Level (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8531";>#8531</a>). It is now possible to enable Java logging for Channelz’s INFO without also enabling DEBUG (previously they were both FINEST).</li> </ul> <h3>Dependencies</h3> <ul> <li>Compatibility with the upcoming Bazel 5 added. This required dropping support for Bazel 1-3. Bazel 4 or later is required (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/7598";>#7598</a>)</li> <li>netty: bump netty to <code>4.1.63.Final</code> and tcnative to <code>2.0.38.Final</code>. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8167";>#8167</a>)</li> </ul> <h3>Improvements</h3> <ul> <li>core: <code>io.grpc.util.AdvancedTlsX509KeyManager</code> and <code>AdvancedTlsX509TrustManager</code> support loading configuration from static files. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8525";>#8525</a>)</li> <li>core: <code>io.grpc.util.CertificateUtils.getPrivateKey()</code> now supports RSA and EC key algorithms</li> </ul> <h2>v1.41.1</h2> <h3>Bug Fixes</h3> <ul> <li>grpclb: Fix “IllegalStateException: already in fallback” channel panic, by not starting fallback timer if already in fallback (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8646";>#8646</a>). This builds on the fix in 1.38.1. The bug was introduced in 1.38.0.</li> </ul> <h2>v1.41.0</h2> <h3>API Changes</h3> <ul> <li>stub: Mark Stub-based MetadataUtils methods deprecated (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8395";>#8395</a>). The interceptor-based versions have been stable for a long time and are preferred</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/grpc/grpc-java/commit/408ffe86b0414b8dede350b86be9d53a7785a449";><code>408ffe8</code></a> Bump version to 1.42.1</li> <li><a href="https://github.com/grpc/grpc-java/commit/09dad1ef5f45ea5e8d80a395c2e08b2e450a4d2f";><code>09dad1e</code></a> Update README etc to reference 1.42.1</li> <li><a href="https://github.com/grpc/grpc-java/commit/96068a19147be89a900e8a23262fcbdbed6c70fd";><code>96068a1</code></a> Copy macOS x86 artifacts to aarch during upload (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8680";>#8680</a>)</li> <li><a href="https://github.com/grpc/grpc-java/commit/a25472e69d94e2347201fe583453da435764dd65";><code>a25472e</code></a> xds: fix xdsClient resource not exist for invalid resource, fix xdsServerWrap...</li> <li><a href="https://github.com/grpc/grpc-java/commit/c8182898e53b133eb556264949c889e47be52b4e";><code>c818289</code></a> xds: remove filter chain uuid name generator (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8663";>#8663</a>) (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8688";>#8688</a>)</li> <li><a href="https://github.com/grpc/grpc-java/commit/f1e4898973b61dff2d9fb2b3146018d7507cdcbb";><code>f1e4898</code></a> netty: Add system property to disable Connection header check</li> <li><a href="https://github.com/grpc/grpc-java/commit/e05685990357f3a87359dfce62c609306fde8bd2";><code>e056859</code></a> kokoro: Increase xds-k8s timeout to 3 hours</li> <li><a href="https://github.com/grpc/grpc-java/commit/6c5ad5919991a425db99b34c6c6f9cc38c73533b";><code>6c5ad59</code></a> kokoro: Enable xds authz_test</li> <li><a href="https://github.com/grpc/grpc-java/commit/c95bc8324d4de9f524c56dc8a33da1fe1b67c1f6";><code>c95bc83</code></a> Bump version to 1.42.1-SNAPSHOT</li> <li><a href="https://github.com/grpc/grpc-java/commit/b9b370652254fc4add89a457bd05be9ef3dbd235";><code>b9b3706</code></a> Bump version to 1.42.0</li> <li>Additional commits viewable in <a href="https://github.com/grpc/grpc-java/compare/v1.40.1...v1.42.1";>compare view</a></li> </ul> </details> <br /> Updates `grpc-stub` from 1.40.1 to 1.42.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/grpc/grpc-java/releases";>grpc-stub's releases</a>.</em></p> <blockquote> <h2>v1.42.1</h2> <p>Bug fixes:</p> <ul> <li>xds: fix a bug that invalid resources from the control plane was internally classified as missing configuration, but instead it should be classified as a transient error. This will change load balancing states on failure handling behavior: for example, missing LDS at xDS server would make it enter “not serving” mode but a transient error does not affect serving status. <a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8690";>#8690</a></li> <li>xds: fix a bug where XdsServer didn’t block start() when configuration is missing, and instead errored. <a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8690";>#8690</a></li> <li>xds: stop generating UUIDs for filter chains that lack them. The UUID was preventing the <code>XdsServer</code> from noticing when a control plane sent a needless duplicate update, causing <code>XdsServer</code> to drain all its existing connections to use the “new” configuration <a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8688";>#8688</a></li> </ul> <p>New feature:</p> <ul> <li>netty: Add ability to set system property <code>-Dio.grpc.netty.disableConnectionHeaderCheck=false</code> to disable HTTP Connection header check. This is a temporary workaround to allow fixing out-of-spec HTTP/2 clients <a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8683";>#8683</a></li> <li>compiler: Protoc plugin for macOS x86 is duplicated to be used on the aarch architecture, to ease use on arm64 macs. The plugin is not actually ARM64, just named as such. Future work will need to compile it appropriately <a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8680";>#8680</a></li> </ul> <h2>v1.42.0</h2> <p>In this release we drop support for Android API level 18 or lower (Jelly Bean or earlier), following Google Play Service’s <a href="https://android-developers.googleblog.com/2021/07/google-play-services-discontinuing-jelly-bean.html";>discontinued updates for Jelly Bean (API levels 16, 17 & 18)</a>.</p> <h3>API Changes</h3> <ul> <li>xds: Added <code>XdsServerBuilder.overrideBootstrapForTest()</code> to provide bootstrap override for testing purposes. This way, the test does not need to use the shared environment variable for bootstrap injection. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8575";>#8575</a>)</li> <li>api: Stabilize the <code>Status.asException(Metadata)</code> method. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8520";>#8520</a>)</li> <li>core/auth: Remove <code>CallCredentials2</code> (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8572";>#8572</a>). <code>CallCredentials2</code> was introduced in 1.16.0 to ease migration of <code>CallCredentials</code> to an abstract class. <code>CallCredentials</code> has been preferred over <code>CallCredentials2</code> since 1.19.0</li> </ul> <h3>Bug Fixes</h3> <ul> <li>netty: Requests with Connection header are malformed. This is required per HTTP/2. The server now rejects such requests. To improve debuggability for clients, Metadata.Key will log if creating a key for “Connection”</li> <li>grpclb: Fix “IllegalStateException: already in fallback” channel panic, by not starting fallback timer if already in fallback (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8646";>#8646</a>). This builds on the fix in 1.38.1. The bug was introduced in 1.38.0.</li> <li>core, netty, okhttp: Fix AbstractManagedChannelImplBuilder#maxInboundMessageSize(int) ABI (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8607";>#8607</a>). Solves the issue with NettyChannelBuilder.maxInboundMessageSize(int) and OkHttpChannelBuilder.maxInboundMessageSize(int) not working in rare cases when pre-1.33 builds combined with post-1.33. See issue <a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8313";>#8313</a> for the details.</li> </ul> <h3>New Features</h3> <ul> <li>binder: A new transport with channel and server builders which support cross-process and cross-application communication on Android. BinderChannel is production ready and in use by several Google applications, though the APIs are still experimental and subject to change. It does not currently support rpc-level flow control for streaming RPCs. See <a href="https://github.com/grpc/proposal/blob/master/L73-java-binderchannel.md";>gRFC L73</a> for background.</li> <li>xds: implemented rbac filter per <a href="https://github.com/grpc/proposal/blob/master/A41-xds-rbac.md";>A41 xDS RBAC</a>. This is the first HTTP filter supported on server-side.</li> <li>stub: add <code>ServerCallStreamObserver.setOnCloseHandler(Runnable)</code>. Notified when gRPC has completed processing the RPC. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8452";>#8452</a>)</li> </ul> <h3>Behavior Changes</h3> <ul> <li>core: gRPC-Java library discards any Content-Length header set by the application because in most cases this header is blindly forwarded from some other source and is incorrect for gRPC payload.</li> <li>netty: Use Host header on server-side if :authority is not present</li> <li>rls: the cache_size in route lookup config is limited to 5M</li> <li>core: changed the level mapping ChannelLogger uses for java.util.logging.Level (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8531";>#8531</a>). It is now possible to enable Java logging for Channelz’s INFO without also enabling DEBUG (previously they were both FINEST).</li> </ul> <h3>Dependencies</h3> <ul> <li>Compatibility with the upcoming Bazel 5 added. This required dropping support for Bazel 1-3. Bazel 4 or later is required (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/7598";>#7598</a>)</li> <li>netty: bump netty to <code>4.1.63.Final</code> and tcnative to <code>2.0.38.Final</code>. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8167";>#8167</a>)</li> </ul> <h3>Improvements</h3> <ul> <li>core: <code>io.grpc.util.AdvancedTlsX509KeyManager</code> and <code>AdvancedTlsX509TrustManager</code> support loading configuration from static files. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8525";>#8525</a>)</li> <li>core: <code>io.grpc.util.CertificateUtils.getPrivateKey()</code> now supports RSA and EC key algorithms</li> </ul> <h2>v1.41.1</h2> <h3>Bug Fixes</h3> <ul> <li>grpclb: Fix “IllegalStateException: already in fallback” channel panic, by not starting fallback timer if already in fallback (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8646";>#8646</a>). This builds on the fix in 1.38.1. The bug was introduced in 1.38.0.</li> </ul> <h2>v1.41.0</h2> <h3>API Changes</h3> <ul> <li>stub: Mark Stub-based MetadataUtils methods deprecated (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8395";>#8395</a>). The interceptor-based versions have been stable for a long time and are preferred</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/grpc/grpc-java/commit/408ffe86b0414b8dede350b86be9d53a7785a449";><code>408ffe8</code></a> Bump version to 1.42.1</li> <li><a href="https://github.com/grpc/grpc-java/commit/09dad1ef5f45ea5e8d80a395c2e08b2e450a4d2f";><code>09dad1e</code></a> Update README etc to reference 1.42.1</li> <li><a href="https://github.com/grpc/grpc-java/commit/96068a19147be89a900e8a23262fcbdbed6c70fd";><code>96068a1</code></a> Copy macOS x86 artifacts to aarch during upload (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8680";>#8680</a>)</li> <li><a href="https://github.com/grpc/grpc-java/commit/a25472e69d94e2347201fe583453da435764dd65";><code>a25472e</code></a> xds: fix xdsClient resource not exist for invalid resource, fix xdsServerWrap...</li> <li><a href="https://github.com/grpc/grpc-java/commit/c8182898e53b133eb556264949c889e47be52b4e";><code>c818289</code></a> xds: remove filter chain uuid name generator (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8663";>#8663</a>) (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8688";>#8688</a>)</li> <li><a href="https://github.com/grpc/grpc-java/commit/f1e4898973b61dff2d9fb2b3146018d7507cdcbb";><code>f1e4898</code></a> netty: Add system property to disable Connection header check</li> <li><a href="https://github.com/grpc/grpc-java/commit/e05685990357f3a87359dfce62c609306fde8bd2";><code>e056859</code></a> kokoro: Increase xds-k8s timeout to 3 hours</li> <li><a href="https://github.com/grpc/grpc-java/commit/6c5ad5919991a425db99b34c6c6f9cc38c73533b";><code>6c5ad59</code></a> kokoro: Enable xds authz_test</li> <li><a href="https://github.com/grpc/grpc-java/commit/c95bc8324d4de9f524c56dc8a33da1fe1b67c1f6";><code>c95bc83</code></a> Bump version to 1.42.1-SNAPSHOT</li> <li><a href="https://github.com/grpc/grpc-java/commit/b9b370652254fc4add89a457bd05be9ef3dbd235";><code>b9b3706</code></a> Bump version to 1.42.0</li> <li>Additional commits viewable in <a href="https://github.com/grpc/grpc-java/compare/v1.40.1...v1.42.1";>compare view</a></li> </ul> </details> <br /> Updates `grpc-netty` from 1.40.1 to 1.42.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/grpc/grpc-java/releases";>grpc-netty's releases</a>.</em></p> <blockquote> <h2>v1.42.1</h2> <p>Bug fixes:</p> <ul> <li>xds: fix a bug that invalid resources from the control plane was internally classified as missing configuration, but instead it should be classified as a transient error. This will change load balancing states on failure handling behavior: for example, missing LDS at xDS server would make it enter “not serving” mode but a transient error does not affect serving status. <a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8690";>#8690</a></li> <li>xds: fix a bug where XdsServer didn’t block start() when configuration is missing, and instead errored. <a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8690";>#8690</a></li> <li>xds: stop generating UUIDs for filter chains that lack them. The UUID was preventing the <code>XdsServer</code> from noticing when a control plane sent a needless duplicate update, causing <code>XdsServer</code> to drain all its existing connections to use the “new” configuration <a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8688";>#8688</a></li> </ul> <p>New feature:</p> <ul> <li>netty: Add ability to set system property <code>-Dio.grpc.netty.disableConnectionHeaderCheck=false</code> to disable HTTP Connection header check. This is a temporary workaround to allow fixing out-of-spec HTTP/2 clients <a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8683";>#8683</a></li> <li>compiler: Protoc plugin for macOS x86 is duplicated to be used on the aarch architecture, to ease use on arm64 macs. The plugin is not actually ARM64, just named as such. Future work will need to compile it appropriately <a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8680";>#8680</a></li> </ul> <h2>v1.42.0</h2> <p>In this release we drop support for Android API level 18 or lower (Jelly Bean or earlier), following Google Play Service’s <a href="https://android-developers.googleblog.com/2021/07/google-play-services-discontinuing-jelly-bean.html";>discontinued updates for Jelly Bean (API levels 16, 17 & 18)</a>.</p> <h3>API Changes</h3> <ul> <li>xds: Added <code>XdsServerBuilder.overrideBootstrapForTest()</code> to provide bootstrap override for testing purposes. This way, the test does not need to use the shared environment variable for bootstrap injection. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8575";>#8575</a>)</li> <li>api: Stabilize the <code>Status.asException(Metadata)</code> method. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8520";>#8520</a>)</li> <li>core/auth: Remove <code>CallCredentials2</code> (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8572";>#8572</a>). <code>CallCredentials2</code> was introduced in 1.16.0 to ease migration of <code>CallCredentials</code> to an abstract class. <code>CallCredentials</code> has been preferred over <code>CallCredentials2</code> since 1.19.0</li> </ul> <h3>Bug Fixes</h3> <ul> <li>netty: Requests with Connection header are malformed. This is required per HTTP/2. The server now rejects such requests. To improve debuggability for clients, Metadata.Key will log if creating a key for “Connection”</li> <li>grpclb: Fix “IllegalStateException: already in fallback” channel panic, by not starting fallback timer if already in fallback (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8646";>#8646</a>). This builds on the fix in 1.38.1. The bug was introduced in 1.38.0.</li> <li>core, netty, okhttp: Fix AbstractManagedChannelImplBuilder#maxInboundMessageSize(int) ABI (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8607";>#8607</a>). Solves the issue with NettyChannelBuilder.maxInboundMessageSize(int) and OkHttpChannelBuilder.maxInboundMessageSize(int) not working in rare cases when pre-1.33 builds combined with post-1.33. See issue <a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8313";>#8313</a> for the details.</li> </ul> <h3>New Features</h3> <ul> <li>binder: A new transport with channel and server builders which support cross-process and cross-application communication on Android. BinderChannel is production ready and in use by several Google applications, though the APIs are still experimental and subject to change. It does not currently support rpc-level flow control for streaming RPCs. See <a href="https://github.com/grpc/proposal/blob/master/L73-java-binderchannel.md";>gRFC L73</a> for background.</li> <li>xds: implemented rbac filter per <a href="https://github.com/grpc/proposal/blob/master/A41-xds-rbac.md";>A41 xDS RBAC</a>. This is the first HTTP filter supported on server-side.</li> <li>stub: add <code>ServerCallStreamObserver.setOnCloseHandler(Runnable)</code>. Notified when gRPC has completed processing the RPC. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8452";>#8452</a>)</li> </ul> <h3>Behavior Changes</h3> <ul> <li>core: gRPC-Java library discards any Content-Length header set by the application because in most cases this header is blindly forwarded from some other source and is incorrect for gRPC payload.</li> <li>netty: Use Host header on server-side if :authority is not present</li> <li>rls: the cache_size in route lookup config is limited to 5M</li> <li>core: changed the level mapping ChannelLogger uses for java.util.logging.Level (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8531";>#8531</a>). It is now possible to enable Java logging for Channelz’s INFO without also enabling DEBUG (previously they were both FINEST).</li> </ul> <h3>Dependencies</h3> <ul> <li>Compatibility with the upcoming Bazel 5 added. This required dropping support for Bazel 1-3. Bazel 4 or later is required (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/7598";>#7598</a>)</li> <li>netty: bump netty to <code>4.1.63.Final</code> and tcnative to <code>2.0.38.Final</code>. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8167";>#8167</a>)</li> </ul> <h3>Improvements</h3> <ul> <li>core: <code>io.grpc.util.AdvancedTlsX509KeyManager</code> and <code>AdvancedTlsX509TrustManager</code> support loading configuration from static files. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8525";>#8525</a>)</li> <li>core: <code>io.grpc.util.CertificateUtils.getPrivateKey()</code> now supports RSA and EC key algorithms</li> </ul> <h2>v1.41.1</h2> <h3>Bug Fixes</h3> <ul> <li>grpclb: Fix “IllegalStateException: already in fallback” channel panic, by not starting fallback timer if already in fallback (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8646";>#8646</a>). This builds on the fix in 1.38.1. The bug was introduced in 1.38.0.</li> </ul> <h2>v1.41.0</h2> <h3>API Changes</h3> <ul> <li>stub: Mark Stub-based MetadataUtils methods deprecated (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8395";>#8395</a>). The interceptor-based versions have been stable for a long time and are preferred</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/grpc/grpc-java/commit/408ffe86b0414b8dede350b86be9d53a7785a449";><code>408ffe8</code></a> Bump version to 1.42.1</li> <li><a href="https://github.com/grpc/grpc-java/commit/09dad1ef5f45ea5e8d80a395c2e08b2e450a4d2f";><code>09dad1e</code></a> Update README etc to reference 1.42.1</li> <li><a href="https://github.com/grpc/grpc-java/commit/96068a19147be89a900e8a23262fcbdbed6c70fd";><code>96068a1</code></a> Copy macOS x86 artifacts to aarch during upload (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8680";>#8680</a>)</li> <li><a href="https://github.com/grpc/grpc-java/commit/a25472e69d94e2347201fe583453da435764dd65";><code>a25472e</code></a> xds: fix xdsClient resource not exist for invalid resource, fix xdsServerWrap...</li> <li><a href="https://github.com/grpc/grpc-java/commit/c8182898e53b133eb556264949c889e47be52b4e";><code>c818289</code></a> xds: remove filter chain uuid name generator (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8663";>#8663</a>) (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8688";>#8688</a>)</li> <li><a href="https://github.com/grpc/grpc-java/commit/f1e4898973b61dff2d9fb2b3146018d7507cdcbb";><code>f1e4898</code></a> netty: Add system property to disable Connection header check</li> <li><a href="https://github.com/grpc/grpc-java/commit/e05685990357f3a87359dfce62c609306fde8bd2";><code>e056859</code></a> kokoro: Increase xds-k8s timeout to 3 hours</li> <li><a href="https://github.com/grpc/grpc-java/commit/6c5ad5919991a425db99b34c6c6f9cc38c73533b";><code>6c5ad59</code></a> kokoro: Enable xds authz_test</li> <li><a href="https://github.com/grpc/grpc-java/commit/c95bc8324d4de9f524c56dc8a33da1fe1b67c1f6";><code>c95bc83</code></a> Bump version to 1.42.1-SNAPSHOT</li> <li><a href="https://github.com/grpc/grpc-java/commit/b9b370652254fc4add89a457bd05be9ef3dbd235";><code>b9b3706</code></a> Bump version to 1.42.0</li> <li>Additional commits viewable in <a href="https://github.com/grpc/grpc-java/compare/v1.40.1...v1.42.1";>compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
