dependabot[bot] opened a new pull request, #25585: URL: https://github.com/apache/beam/pull/25585
Bumps [grpcio-tools](https://github.com/grpc/grpc) from 1.37.0 to 1.51.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/grpc/grpc/releases";>grpcio-tools's releases</a>.</em></p> <blockquote> <h2>Release v1.51.3</h2> <p>This is release gRPC Core 1.51.3 (galaxy).</p> <p>For gRPC documentation, see <a href="https://grpc.io/";>grpc.io</a>. For previous releases, see <a href="https://github.com/grpc/grpc/releases";>Releases</a>.</p> <p>This release is a Python-only patch to release universal2 Mac OS artifacts compatible with both x86 and arm64.</p> <h2>Python</h2> <ul> <li>Backport of <a href="https://github-redirect.dependabot.com/grpc/grpc/issues/31747";>#31747</a> to v1.51.x (Build native MacOS arm64 artifacts (universal2)) (<a href="https://github-redirect.dependabot.com/grpc/grpc/pull/32424";>#32424</a>)</li> </ul> <h2>Release v1.51.2</h2> <p>This is release gRPC Core 1.51.2 (galaxy).</p> <p>For gRPC documentation, see <a href="https://grpc.io/";>grpc.io</a>. For previous releases, see <a href="https://github.com/grpc/grpc/releases";>Releases</a>.</p> <p>This release contains refinements, improvements, and bug fixes, with highlights listed below.</p> <h2>Core</h2> <ul> <li>Upgraded Boring SSL to address <a href="https://www.openssl.org/news/secadv/20230207.txt";>CVE-2023-0286</a> (<a href="https://github-redirect.dependabot.com/grpc/grpc/issues/32353";>#32353</a>)</li> </ul> <h2>Release v1.51.1</h2> <p>This is release gRPC Core 1.51.1 (galaxy).</p> <p>For gRPC documentation, see <a href="https://grpc.io/";>grpc.io</a>. For previous releases, see <a href="https://github.com/grpc/grpc/releases";>Releases</a>.</p> <p>This release contains refinements, improvements, and bug fixes.</p> <h2>Python</h2> <ul> <li>Revert "Build with System OpenSSL on Mac OS arm64 (<a href="https://github-redirect.dependabot.com/grpc/grpc/issues/31096";>#31096</a>)". (<a href="https://github-redirect.dependabot.com/grpc/grpc/pull/31739";>#31739</a>)</li> </ul> <h2>Release v1.51.0</h2> <p>This is release gRPC Core 1.51.0 (galaxy).</p> <p>For gRPC documentation, see <a href="https://grpc.io/";>grpc.io</a>. For previous releases, see <a href="https://github.com/grpc/grpc/releases";>Releases</a>.</p> <p>This release contains refinements, improvements, and bug fixes.</p> <h2>Core</h2> <ul> <li>Bump core version 202211082118. (<a href="https://github-redirect.dependabot.com/grpc/grpc/pull/31585";>#31585</a>)</li> <li>c-ares DNS resolver: fix logical race between resolution timeout/cancellation and fd readability. (<a href="https://github-redirect.dependabot.com/grpc/grpc/pull/31443";>#31443</a>)</li> <li>[log] Longer space for filenames. (<a href="https://github-redirect.dependabot.com/grpc/grpc/pull/31432";>#31432</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/grpc/grpc/blob/master/doc/grpc_release_schedule.md";>grpcio-tools's changelog</a>.</em></p> <blockquote> <h1>gRPC Release Schedule</h1> <p>Below is the release schedule for gRPC <a href="https://github.com/grpc/grpc-java/releases";>Java</a>, <a href="https://github.com/grpc/grpc-go/releases";>Go</a> and <a href="https://github.com/grpc/grpc/releases";>Core</a> and its dependent languages C++, C#, Objective-C, PHP, Python and Ruby.</p> <p>Releases are scheduled every six weeks on Tuesdays on a best effort basis. In some unavoidable situations a release may be delayed or released early or a language may skip a release altogether and do the next release to catch up with other languages. See the past releases in the links above. A six-week cycle gives us a good balance between delivering new features/fixes quickly and keeping the release overhead low.</p> <p>The gRPC release support policy can be found <a href="https://grpc.io/docs/what-is-grpc/faq/#how-long-are-grpc-releases-supported-for";>here</a>.</p> <p>Releases are cut from release branches. For Core and Java repos, the release branch is cut two weeks before the scheduled release date. For Go, the branch is cut just before the release. An RC (release candidate) is published for Core and its dependent languages just after the branch cut. This RC is later promoted to release version if no further changes are made to the release branch. We do our best to keep head of master branch stable at all times regardless of release schedule. Daily build packages from master branch for C#, PHP, Python, Ruby and Protoc plugins are published on <a href="https://packages.grpc.io/";>packages.grpc.io</a>. If you depend on gRPC in production we recommend to set up your CI system to test the RCs and, if possible, the daily builds.</p> <p>Names of gRPC releases are <a href="https://github.com/grpc/grpc/blob/master/doc/g_stands_for.md";>here</a>.</p> <table> <thead> <tr> <th>Release</th> <th>Scheduled Branch Cut</th> <th>Scheduled Release Date</th> </tr> </thead> <tbody> <tr> <td>v1.17.0</td> <td>Nov 19, 2018</td> <td>Dec 4, 2018</td> </tr> <tr> <td>v1.18.0</td> <td>Jan 2, 2019</td> <td>Jan 15, 2019</td> </tr> <tr> <td>v1.19.0</td> <td>Feb 12, 2019</td> <td>Feb 26, 2019</td> </tr> <tr> <td>v1.20.0</td> <td>Mar 26, 2019</td> <td>Apr 9, 2019</td> </tr> <tr> <td>v1.21.0</td> <td>May 7, 2019</td> <td>May 21, 2019</td> </tr> <tr> <td>v1.22.0</td> <td>Jun 18, 2019</td> <td>Jul 2, 2019</td> </tr> <tr> <td>v1.23.0</td> <td>Jul 30, 2019</td> <td>Aug 13, 2019</td> </tr> <tr> <td>v1.24.0</td> <td>Sept 10, 2019</td> <td>Sept 24, 2019</td> </tr> <tr> <td>v1.25.0</td> <td>Oct 22, 2019</td> <td>Nov 5, 2019</td> </tr> <tr> <td>v1.26.0</td> <td>Dec 3, 2019</td> <td>Dec 17, 2019</td> </tr> <tr> <td>v1.27.0</td> <td>Jan 14, 2020</td> <td>Jan 28, 2020</td> </tr> <tr> <td>v1.28.0</td> <td>Feb 25, 2020</td> <td>Mar 10, 2020</td> </tr> <tr> <td>v1.29.0</td> <td>Apr 7, 2020</td> <td>Apr 21, 2020</td> </tr> <tr> <td>v1.30.0</td> <td>May 19, 2020</td> <td>Jun 2, 2020</td> </tr> <tr> <td>v1.31.0</td> <td>Jul 14, 2020</td> <td>Jul 28, 2020</td> </tr> <tr> <td>v1.32.0</td> <td>Aug 25, 2020</td> <td>Sep 8, 2020</td> </tr> <tr> <td>v1.33.0</td> <td>Oct 6, 2020</td> <td>Oct 20, 2020</td> </tr> <tr> <td>v1.34.0</td> <td>Nov 17, 2020</td> <td>Dec 1, 2020</td> </tr> <tr> <td>v1.35.0</td> <td>Dec 29, 2020</td> <td>Jan 12, 2021</td> </tr> <tr> <td>v1.36.0</td> <td>Feb 9, 2021</td> <td>Feb 23, 2021</td> </tr> </tbody> </table> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/grpc/grpc/commit/0879d3e2e96b5e51dac3c44ed05ddae7b172cd0f";><code>0879d3e</code></a> Bump from v1.51.2 to v1.51.3 (<a href="https://github-redirect.dependabot.com/grpc/grpc/issues/32425";>#32425</a>)</li> <li><a href="https://github.com/grpc/grpc/commit/1141f0458c99bef05a5676baad91d08cdf2e85d8";><code>1141f04</code></a> Backport of <a href="https://github-redirect.dependabot.com/grpc/grpc/issues/31747";>#31747</a> to v1.51.x (Build native MacOS arm64 artifacts (universal2...</li> <li><a href="https://github.com/grpc/grpc/commit/2ee3216df88f21c3d108caa5fdad309585e95354";><code>2ee3216</code></a> Version bump to v1.51.2 (<a href="https://github-redirect.dependabot.com/grpc/grpc/issues/32392";>#32392</a>)</li> <li><a href="https://github.com/grpc/grpc/commit/69c6c2f6a3dfae31f4804fbd325c0d22fb456d3e";><code>69c6c2f</code></a> [backport] xDS Interop: Update tracers (<a href="https://github-redirect.dependabot.com/grpc/grpc/issues/32352";>#32352</a>) (<a href="https://github-redirect.dependabot.com/grpc/grpc/issues/32366";>#32366</a>)</li> <li><a href="https://github.com/grpc/grpc/commit/675f356104864759a91de815569af3a22176eab4";><code>675f356</code></a> [Backport: v1.51.x] Update boringssl to grpc-202302 (<a href="https://github-redirect.dependabot.com/grpc/grpc/issues/32383";>#32383</a>)</li> <li><a href="https://github.com/grpc/grpc/commit/8326882c9a097be6fbbc98db1c8d0821cc1d02b0";><code>8326882</code></a> xds interop: Fix buildscripts not continuing on a failed test suite (<a href="https://github-redirect.dependabot.com/grpc/grpc/issues/32093";>#32093</a>) ...</li> <li><a href="https://github.com/grpc/grpc/commit/684e122c3727eac9745a91225f7f7f01c9c0b7a8";><code>684e122</code></a> xDS interop: resume circuit_breaking test (<a href="https://github-redirect.dependabot.com/grpc/grpc/issues/32038";>#32038</a>) (<a href="https://github-redirect.dependabot.com/grpc/grpc/issues/32050";>#32050</a>)</li> <li><a href="https://github.com/grpc/grpc/commit/0a82c02a9b817a53574994374dcff53f2e961df2";><code>0a82c02</code></a> Bump v1.51.x to 1.51.1 (<a href="https://github-redirect.dependabot.com/grpc/grpc/issues/31740";>#31740</a>)</li> <li><a href="https://github.com/grpc/grpc/commit/27428be7345035a5a5fc55c25a867aa259071732";><code>27428be</code></a> Revert "Build with System OpenSSL on Mac OS arm64 (<a href="https://github-redirect.dependabot.com/grpc/grpc/issues/31096";>#31096</a>)" (<a href="https://github-redirect.dependabot.com/grpc/grpc/issues/31739";>#31739</a>)</li> <li><a href="https://github.com/grpc/grpc/commit/fb01bb12456d015d9e4b7b8ebf2e8a7c803e96ad";><code>fb01bb1</code></a> Bump v1.51.x to v1.51.0 (<a href="https://github-redirect.dependabot.com/grpc/grpc/issues/31705";>#31705</a>)</li> <li>Additional commits viewable in <a href="https://github.com/grpc/grpc/compare/v1.37.0...v1.51.3";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
