dependabot[bot] opened a new pull request, #1334: URL: https://github.com/apache/arrow-go/pull/1334
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.83.2 to 1.84.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/grpc/grpc-go/releases";>google.golang.org/grpc's releases</a>.</em></p> <blockquote> <h2>Release 1.84.0</h2> <h1>Behavior Changes</h1> <ul> <li>stats/otel: The <code>grpc.lb.pick_first.*</code> metrics have been removed and replaced with <code>grpc.subchannel.*</code> metrics. See <a href="https://github.com/grpc/proposal/blob/master/A94-subchannel-otel-metrics.md";>gRFC A94</a> for more details. (<a href="https://redirect.github.com/grpc/grpc-go/issues/9215";>#9215</a>)</li> </ul> <h1>New Features</h1> <ul> <li>xds: Add support for <code>contains_match</code> in route header matchers. (<a href="https://redirect.github.com/grpc/grpc-go/issues/9223";>#9223</a>) <ul> <li>Special Thanks: <a href="https://github.com/nvxbug";><code>@nvxbug</code></a></li> </ul> </li> </ul> <h1>Bug Fixes</h1> <ul> <li>client: Fix a bug where a <code>ClientConn</code> could get permanently stuck in IDLE when an RPC was canceled during stream creation. Previously, such cancellations triggered stream cleanup twice, corrupting the channel's idleness state and causing subsequent RPCs to fail with deadline exceeded errors. (<a href="https://redirect.github.com/grpc/grpc-go/issues/9191";>#9191</a>) <ul> <li>Special Thanks: <a href="https://github.com/utkuozdemir";><code>@utkuozdemir</code></a></li> </ul> </li> <li>client: Fix a bug where non-gRPC HTTP responses ending with an empty DATA frame failed the RPC with status code <code>Internal</code> instead of preserving the HTTP-mapped status code and response body. (<a href="https://redirect.github.com/grpc/grpc-go/issues/9217";>#9217</a>) <ul> <li>Special Thanks: <a href="https://github.com/chengxilo";><code>@chengxilo</code></a></li> </ul> </li> <li>credentials: Validate metadata returned by per-RPC credentials, failing the RPC with status code <code>Internal</code> if invalid keys or values are found. Previously, invalid metadata from credentials was sent to the server in outgoing HTTP/2 requests. (<a href="https://redirect.github.com/grpc/grpc-go/issues/9202";>#9202</a>) <ul> <li>Special Thanks: <a href="https://github.com/buger";><code>@buger</code></a></li> </ul> </li> <li>credentials/sts: Prevent potential token leakage by disallowing HTTP redirects during STS token exchange. Previously, 3xx redirects were followed automatically, replaying the request body containing authentication tokens to the redirect destination. (<a href="https://redirect.github.com/grpc/grpc-go/issues/9299";>#9299</a>) <ul> <li>Special Thanks: <a href="https://github.com/nvxbug";><code>@nvxbug</code></a></li> </ul> </li> <li>randomsubsetting: Ignore endpoints that contain no addresses. Previously, this could cause the policy to panic while computing hashes. (<a href="https://redirect.github.com/grpc/grpc-go/issues/9259";>#9259</a>) <ul> <li>Special Thanks: <a href="https://github.com/fallintoplace";><code>@fallintoplace</code></a></li> </ul> </li> <li>stats/otel: Ensure method names are populated in trace spans when metrics are disabled. Previously, running with tracing enabled and metrics disabled resulted in server trace spans lacking the RPC method name (recording only "Recv."). (<a href="https://redirect.github.com/grpc/grpc-go/issues/9262";>#9262</a>)</li> <li>transport: Return <code>io.ErrUnexpectedEOF</code> when EOF is encountered after partial header or message body reads. Previously, partial reads could return a plain <code>io.EOF</code>, failing to distinguish truncated data from a clean end of stream. (<a href="https://redirect.github.com/grpc/grpc-go/issues/9204";>#9204</a>) <ul> <li>Special Thanks: <a href="https://github.com/buger";><code>@buger</code></a></li> </ul> </li> <li>transport: Validate metadata supplied by balancers (in <code>PickResult.Metadata</code>) and resolver addresses, failing the RPC with status code <code>Internal</code> if invalid keys or values are found. Previously, invalid metadata from these sources was sent to the server in outgoing HTTP/2 requests. (<a href="https://redirect.github.com/grpc/grpc-go/issues/9203";>#9203</a>) <ul> <li>Special Thanks: <a href="https://github.com/buger";><code>@buger</code></a></li> </ul> </li> <li>xds: Fix a rare corner case that could prevent a cluster from being removed when it is no longer in use. (<a href="https://redirect.github.com/grpc/grpc-go/issues/9140";>#9140</a>)</li> <li>xds: Fix panic during route matching for routes containing header matchers with empty <code>exact_match</code> strings. (<a href="https://redirect.github.com/grpc/grpc-go/issues/9223";>#9223</a>) <ul> <li>Special Thanks: <a href="https://github.com/nvxbug";><code>@nvxbug</code></a></li> </ul> </li> <li>xds: Reject routes containing header matchers with empty <code>prefix_match</code> or <code>suffix_match</code> strings. Previously, this caused a panic during route matching. (<a href="https://redirect.github.com/grpc/grpc-go/issues/9223";>#9223</a>) <ul> <li>Special Thanks: <a href="https://github.com/nvxbug";><code>@nvxbug</code></a></li> </ul> </li> <li>xds: Fix EDS drop policies being applied at a much lower rate than configured due to an integer overflow. (<a href="https://redirect.github.com/grpc/grpc-go/issues/9257";>#9257</a>) <ul> <li>Special Thanks: <a href="https://github.com/nvxbug";><code>@nvxbug</code></a></li> </ul> </li> <li>xds: Reject EDS resources containing drop policies with unsupported denominators. Previously, such resources caused the client to panic when calculating drop rates. (<a href="https://redirect.github.com/grpc/grpc-go/issues/9218";>#9218</a>) <ul> <li>Special Thanks: <a href="https://github.com/nvxbug";><code>@nvxbug</code></a></li> </ul> </li> <li>xds/rbac: Reject RBAC configurations containing nested <code>Principal</code> or <code>Permission</code> rules with <code>:scheme</code> or <code>grpc-</code> prefixed header matchers. Previously, such configurations could cause DENY policies to fail open. (<a href="https://redirect.github.com/grpc/grpc-go/issues/9258";>#9258</a>) <ul> <li>Special Thanks: <a href="https://github.com/nvxbug";><code>@nvxbug</code></a></li> </ul> </li> <li>xds/rbac: Rewrite <code>host</code> header matchers to <code>:authority</code> in nested <code>Principal</code> and <code>Permission</code> rules. Previously, this rewrite only applied to top-level rules, causing nested <code>host</code> matchers to never match incoming requests and DENY policies to fail open. (<a href="https://redirect.github.com/grpc/grpc-go/issues/9258";>#9258</a>) <ul> <li>Special Thanks: <a href="https://github.com/nvxbug";><code>@nvxbug</code></a></li> </ul> </li> <li>xds/rbac: Reject <code>CidrRanges</code> with an unset prefix length. Previously, an omitted <code>prefix_len</code> field caused a panic during RBAC configuration parsing. (<a href="https://redirect.github.com/grpc/grpc-go/issues/9250";>#9250</a>) <ul> <li>Special Thanks: <a href="https://github.com/nvxbug";><code>@nvxbug</code></a></li> </ul> </li> </ul> <h1>Performance Improvements</h1> <ul> <li>transport: Avoid a heap allocation when flushing shared write buffers. (<a href="https://redirect.github.com/grpc/grpc-go/issues/9233";>#9233</a>) <ul> <li>Special Thanks: <a href="https://github.com/zaidoon1";><code>@zaidoon1</code></a></li> </ul> </li> <li>credentials/alts: Support dynamic frame size negotiation and add the <code>GRPC_GO_EXPERIMENTAL_ALTS_MAX_FRAME_SIZE</code> environment variable (default 4KiB, max 512KiB) to configure the maximum ALTS record frame size. (<a href="https://redirect.github.com/grpc/grpc-go/issues/9268";>#9268</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/grpc/grpc-go/commit/e84aa5ab15d1d2b29d54f838312ad490cb7551a8";><code>e84aa5a</code></a> Change version to 1.84.0 (<a href="https://redirect.github.com/grpc/grpc-go/issues/9324";>#9324</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/c5ae88df420fcc0c24c6267bdf8cdd3b2711ba2c";><code>c5ae88d</code></a> Cherrypick <a href="https://redirect.github.com/grpc/grpc-go/issues/9204";>#9204</a> and <a href="https://redirect.github.com/grpc/grpc-go/issues/9321";>#9321</a> to v1.84.x (<a href="https://redirect.github.com/grpc/grpc-go/issues/9407";>#9407</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/a592f6a8d26237b5476eb18b08ee1203393e27b9";><code>a592f6a</code></a> Cherrypick <a href="https://redirect.github.com/grpc/grpc-go/issues/9351";>#9351</a> and <a href="https://redirect.github.com/grpc/grpc-go/issues/9404";>#9404</a> to v1.84.x (<a href="https://redirect.github.com/grpc/grpc-go/issues/9408";>#9408</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/d5a41119e0e3189ea913cf839586ce34a44f1a3f";><code>d5a4111</code></a> cherry-pick <a href="https://redirect.github.com/grpc/grpc-go/issues/9365";>#9365</a> to v1.84.x (<a href="https://redirect.github.com/grpc/grpc-go/issues/9370";>#9370</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/89d55e04f9f3213a2de543e00df15f1468ea9d9a";><code>89d55e0</code></a> cherry-pick <a href="https://redirect.github.com/grpc/grpc-go/issues/9346";>#9346</a> to v1.84.x (<a href="https://redirect.github.com/grpc/grpc-go/issues/9372";>#9372</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/8a9f866584e36f0adb8c60a779581ab4bb486d1b";><code>8a9f866</code></a> Cherry-pick <a href="https://redirect.github.com/grpc/grpc-go/issues/9332";>#9332</a> to v1.84.x (<a href="https://redirect.github.com/grpc/grpc-go/issues/9338";>#9338</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/f8b54e7c913347537e168f5219d8f6cbaeb8860b";><code>f8b54e7</code></a> Cherry-pick <a href="https://redirect.github.com/grpc/grpc-go/issues/9331";>#9331</a> to v1.84.x (<a href="https://redirect.github.com/grpc/grpc-go/issues/9334";>#9334</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/30ce1d594fa9d7b86ff9d3d7dd7873ef0c161acf";><code>30ce1d5</code></a> xds: support injecting bootstrap and server config into HTTP filter config pa...</li> <li><a href="https://github.com/grpc/grpc-go/commit/54c743e4e9829208f264e092160d2b0768a01bf2";><code>54c743e</code></a> extproc : wait for async RPC to complete in test (<a href="https://redirect.github.com/grpc/grpc-go/issues/9311";>#9311</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/538bb2f7af6e36be46ec1d2ae90f65b972f14083";><code>538bb2f</code></a> endpointsharding: decouple locking, and simplify ChildState API (<a href="https://redirect.github.com/grpc/grpc-go/issues/9290";>#9290</a>)</li> <li>Additional commits viewable in <a href="https://github.com/grpc/grpc-go/compare/v1.83.2...v1.84.0";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
