dependabot[bot] opened a new pull request, #40943:
URL: https://github.com/apache/beam/pull/40943

   Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.84.0 
to 1.85.0.
   <details>
   <summary>Release notes</summary>
   <p><em>Sourced from <a 
href="https://github.com/grpc/grpc-go/releases";>google.golang.org/grpc's 
releases</a>.</em></p>
   <blockquote>
   <h2>Release 1.85.0</h2>
   <h1>New Features</h1>
   <ul>
   <li>stats: Expose the effective client authority (sent on the wire as the 
HTTP/2 <code>:authority</code> header) in client <code>stats.OutHeader</code> 
events. (<a 
href="https://redirect.github.com/grpc/grpc-go/issues/9296";>#9296</a>)
   <ul>
   <li>Special Thanks: <a 
href="https://github.com/aryansk";><code>@​aryansk</code></a></li>
   </ul>
   </li>
   <li>metadata: Add <code>ValueFromOutgoingContext</code>, which reads a 
single metadata value from outgoing context without copying the entire outgoing 
metadata into a new map. (<a 
href="https://redirect.github.com/grpc/grpc-go/issues/9282";>#9282</a>)
   <ul>
   <li>Special Thanks: <a 
href="https://github.com/yuyangguo42";><code>@​yuyangguo42</code></a></li>
   </ul>
   </li>
   </ul>
   <h1>Bug Fixes</h1>
   <ul>
   <li>transport: Refine control buffer throttling to only count peer-induced 
control frames, raise the default 
<code>GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT</code> from 100 to 
10,000, and close client connections if reads remain throttled for 
<code>10s</code>. (<a 
href="https://redirect.github.com/grpc/grpc-go/issues/9563";>#9563</a>)</li>
   <li>server: Ensure <code>Stop()</code> forcefully terminates the server 
while <code>GracefulStop()</code> is waiting for active handlers to complete. 
(<a href="https://redirect.github.com/grpc/grpc-go/issues/9394";>#9394</a>)
   <ul>
   <li>Special Thanks: <a 
href="https://github.com/stanhu";><code>@​stanhu</code></a></li>
   </ul>
   </li>
   <li>server: Unconditionally increment the highest-seen stream ID on when 
handling <code>HEADERS</code> frames to comply with <a 
href="https://www.rfc-editor.org/rfc/rfc7540.html#section-5.1.1";>RFC 7540 
§5.1.1</a>. Previously, truncated <code>HEADERS</code> frames left the 
connection in an inconsistent state and allowed stream IDs to be reused by 
clients without resulting in a protocol error. (<a 
href="https://redirect.github.com/grpc/grpc-go/issues/9414";>#9414</a>)</li>
   <li>server: Terminate streams immediately when a <code>HEADERS</code> frame 
includes the <code>EndStream</code> bit. Previously, this caused server 
handlers to hang when reading a message. (<a 
href="https://redirect.github.com/grpc/grpc-go/issues/9391";>#9391</a>)</li>
   <li>server: Reject requests missing both <code>:authority</code> and 
<code>Host</code> headers with HTTP 400 and status <code>Internal</code>. (<a 
href="https://redirect.github.com/grpc/grpc-go/issues/9365";>#9365</a>)</li>
   <li>xds: Fix a bug where route header matchers with non-lowercase names 
failed to match routes. (<a 
href="https://redirect.github.com/grpc/grpc-go/issues/9353";>#9353</a>)
   <ul>
   <li>Special Thanks: <a 
href="https://github.com/winklemad";><code>@​winklemad</code></a></li>
   </ul>
   </li>
   <li>client: Ensure retried RPCs use the correct <code>:authority</code> 
value specified by the LB policy instead of inheriting it from a previous 
attempt. (<a 
href="https://redirect.github.com/grpc/grpc-go/issues/9277";>#9277</a>)
   <ul>
   <li>Special Thanks: <a 
href="https://github.com/nvxbug";><code>@​nvxbug</code></a></li>
   </ul>
   </li>
   <li>transport: Fail streams with <code>io.ErrUnexpectedEOF</code> instead of 
<code>io.EOF</code> upon receiving truncated  message headers or bodies after 
partial data has already been received. (<a 
href="https://redirect.github.com/grpc/grpc-go/issues/9204";>#9204</a>)
   <ul>
   <li>Special Thanks: <a 
href="https://github.com/buger";><code>@​buger</code></a></li>
   </ul>
   </li>
   </ul>
   </blockquote>
   </details>
   <details>
   <summary>Commits</summary>
   <ul>
   <li><a 
href="https://github.com/grpc/grpc-go/commit/c9ab42cdb0a2b3e7b9d5510ebbc999638ee41eb7";><code>c9ab42c</code></a>
 Change version to 1.85.0 (<a 
href="https://redirect.github.com/grpc/grpc-go/issues/9434";>#9434</a>)</li>
   <li><a 
href="https://github.com/grpc/grpc-go/commit/bfb7561f110090903d9b48438efe6801164ad5d5";><code>bfb7561</code></a>
 cherry pick (<a 
href="https://redirect.github.com/grpc/grpc-go/issues/9433";>#9433</a>) and (<a 
href="https://redirect.github.com/grpc/grpc-go/issues/9563";>#9563</a>) (<a 
href="https://redirect.github.com/grpc/grpc-go/issues/9566";>#9566</a>)</li>
   <li><a 
href="https://github.com/grpc/grpc-go/commit/46a2db23cd663ecfd4444ecd43e057ec1a5cc07e";><code>46a2db2</code></a>
 *: update dockerfiles to build using go1.26 to match go.mod (<a 
href="https://redirect.github.com/grpc/grpc-go/issues/9548";>#9548</a>)</li>
   <li><a 
href="https://github.com/grpc/grpc-go/commit/076bb1cc5c11bb14262fb6b06d7597311c813593";><code>076bb1c</code></a>
 Cherrypick <a 
href="https://redirect.github.com/grpc/grpc-go/issues/9533";>#9533</a> to 
v1.85.x. (<a 
href="https://redirect.github.com/grpc/grpc-go/issues/9534";>#9534</a>)</li>
   <li><a 
href="https://github.com/grpc/grpc-go/commit/baaf0833fb0c3d31f86040cf97ecbf6ee19aca27";><code>baaf083</code></a>
 *: update the net package and go version (<a 
href="https://redirect.github.com/grpc/grpc-go/issues/9506";>#9506</a>)</li>
   <li><a 
href="https://github.com/grpc/grpc-go/commit/678b9b34f381a6d34fd10bd45aec3c223555bd53";><code>678b9b3</code></a>
 Cherrypick <a 
href="https://redirect.github.com/grpc/grpc-go/issues/9385";>#9385</a> to 
v1.85.x (<a 
href="https://redirect.github.com/grpc/grpc-go/issues/9504";>#9504</a>)</li>
   <li><a 
href="https://github.com/grpc/grpc-go/commit/705f9b9716d46c8b63a2aa40ea27ad0f852c048b";><code>705f9b9</code></a>
 Cherry-pick <a 
href="https://redirect.github.com/grpc/grpc-go/issues/9425";>#9425</a> into 
v1.85.x (<a 
href="https://redirect.github.com/grpc/grpc-go/issues/9438";>#9438</a>)</li>
   <li><a 
href="https://github.com/grpc/grpc-go/commit/1648161c2f6c1fbbaaa579e8320630abd4656bb3";><code>1648161</code></a>
 transport: stop read throttling due to controlBuf size, on the client (<a 
href="https://redirect.github.com/grpc/grpc-go/issues/9431";>#9431</a>)</li>
   <li><a 
href="https://github.com/grpc/grpc-go/commit/1863b598b62e623f8d58305da7b068d8fee32d7b";><code>1863b59</code></a>
 protoc-gen-go-grpc: Update supported Edition to 2026 (<a 
href="https://redirect.github.com/grpc/grpc-go/issues/9426";>#9426</a>)</li>
   <li><a 
href="https://github.com/grpc/grpc-go/commit/d331f110832063845e0ec79482b338e86f195661";><code>d331f11</code></a>
 server: release mutex while waiting for handlers in stop() (<a 
href="https://redirect.github.com/grpc/grpc-go/issues/9394";>#9394</a>)</li>
   <li>Additional commits viewable in <a 
href="https://github.com/grpc/grpc-go/compare/v1.84.0...v1.85.0";>compare 
view</a></li>
   </ul>
   </details>
   <br />
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=google.golang.org/grpc&package-manager=go_modules&previous-version=1.84.0&new-version=1.85.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   <details>
   <summary>Dependabot commands and options</summary>
   <br />
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot show <dependency name> ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   </details>


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to