dependabot[bot] opened a new pull request #1399:
URL: https://github.com/apache/dubbo-go/pull/1399


   Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.38.0 
to 1.40.0.
   <details>
   <summary>Release notes</summary>
   <p><em>Sourced from <a 
href="https://github.com/grpc/grpc-go/releases";>google.golang.org/grpc's 
releases</a>.</em></p>
   <blockquote>
   <h2>Release 1.40.0</h2>
   <h1>Behavior Changes</h1>
   <ul>
   <li>balancer: client channel no longer connects to idle subchannels that are 
returned by the pickers; LB policy should call SubConn.Connect instead. (<a 
href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4579";>#4579</a>)
   <ul>
   <li>This change is in line with existing documentation stating the balancer 
must call Connect on idle SubConns in order for them to connect, and is 
preparation for an upcoming change that transitions SubConns to the idle state 
when connections are lost.  See <a 
href="https://pkg.go.dev/google.golang.org/grpc/balancer#SubConn";>https://pkg.go.dev/google.golang.org/grpc/balancer#SubConn</a>
 for more details.</li>
   </ul>
   </li>
   </ul>
   <h1>Bug Fixes</h1>
   <ul>
   <li>transport: fail RPCs without HTTP status 200 (OK), according to the gRPC 
spec (<a 
href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4474";>#4474</a>)
   <ul>
   <li>Special Thanks: <a 
href="https://github.com/JNProtzman";><code>@​JNProtzman</code></a></li>
   </ul>
   </li>
   <li>binarylog: fail the <code>Write()</code> method if proto marshaling 
fails (<a 
href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4582";>#4582</a>)
   <ul>
   <li>Special Thanks: <a 
href="https://github.com/Jille";><code>@​Jille</code></a></li>
   </ul>
   </li>
   <li>binarylog: exit the flusher goroutine upon closing the 
<code>bufferedSink</code> (<a 
href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4583";>#4583</a>)
   <ul>
   <li>Special Thanks: <a 
href="https://github.com/Jille";><code>@​Jille</code></a></li>
   </ul>
   </li>
   </ul>
   <h1>New Features</h1>
   <ul>
   <li>metadata: add Delete method to MD to encapsulate lowercasing (<a 
href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4549";>#4549</a>)
   <ul>
   <li>Special Thanks: <a 
href="https://github.com/konradreiche";><code>@​konradreiche</code></a></li>
   </ul>
   </li>
   <li>xds/cds: support logical DNS cluster and aggregated cluster (<a 
href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4594";>#4594</a>)</li>
   <li>stats: add stats.Begin.IsClientStream and IsServerStream to indicate the 
type of RPC invoked (<a 
href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4533";>#4533</a>)
   <ul>
   <li>Special Thanks: <a 
href="https://github.com/leviska";><code>@​leviska</code></a></li>
   </ul>
   </li>
   </ul>
   <h1>Performance Improvements</h1>
   <ul>
   <li>server: improve performance when multiple interceptors are used (<a 
href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4524";>#4524</a>)
   <ul>
   <li>Special Thanks: <a 
href="https://github.com/amenzhinsky";><code>@​amenzhinsky</code></a></li>
   </ul>
   </li>
   </ul>
   <h2>Release 1.39.1</h2>
   <ul>
   <li>server: fix bug that net.Conn is leaked if the connection is closed 
(io.EOF) immediately with no traffic (<a 
href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4642";>#4642</a>)</li>
   <li>transport: fix race in transport stream accessing s.recvCompress (<a 
href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4627";>#4627</a>)</li>
   </ul>
   <h2>Release 1.39.0</h2>
   <h1>Behavior Changes</h1>
   <ul>
   <li>csds: return empty response if xds client is not set (<a 
href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4505";>#4505</a>)</li>
   <li>metadata: convert keys to lowercase in FromContext() (<a 
href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4416";>#4416</a>)</li>
   </ul>
   <h1>New Features</h1>
   <ul>
   <li>xds: add GetServiceInfo to GRPCServer (<a 
href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4507";>#4507</a>)
   <ul>
   <li>Special Thanks: <a 
href="https://github.com/amenzhinsky";><code>@​amenzhinsky</code></a></li>
   </ul>
   </li>
   <li>xds: add test-only injection of xds config to client and server (<a 
href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4476";>#4476</a>)</li>
   <li>server: allow PreparedMsgs to work for server streams (<a 
href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/3480";>#3480</a>)
   <ul>
   <li>Special Thanks: <a 
href="https://github.com/eafzali";><code>@​eafzali</code></a></li>
   </ul>
   </li>
   </ul>
   <h1>Performance Improvements</h1>
   <ul>
   <li>transport: remove decodeState from client &amp; server to reduce 
allocations (<a 
href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4423";>#4423</a>)
   <ul>
   <li>Special Thanks: <a 
href="https://github.com/JNProtzman";><code>@​JNProtzman</code></a></li>
   </ul>
   </li>
   </ul>
   <h1>Bug Fixes</h1>
   <ul>
   <li>server: return UNIMPLEMENTED on receipt of malformed method name (<a 
href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4464";>#4464</a>)</li>
   <li>xds/rds: use 100 as default weighted cluster totalWeight instead of 0 
(<a 
href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4439";>#4439</a>)
   <ul>
   <li>Special Thanks: <a 
href="https://github.com/alpha-baby";><code>@​alpha-baby</code></a></li>
   </ul>
   </li>
   <li>transport: unblock read throttling when controlbuf exits (<a 
href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4447";>#4447</a>)</li>
   </ul>
   <!-- raw HTML omitted -->
   </blockquote>
   <p>... (truncated)</p>
   </details>
   <details>
   <summary>Commits</summary>
   <ul>
   <li><a 
href="https://github.com/grpc/grpc-go/commit/41e044e1c82fcf6a5801d6cbd7ecf952505eecb1";><code>41e044e</code></a>
 server: fix leaked net.Conn (<a 
href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4644";>#4644</a>)
 (<a 
href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4670";>#4670</a>)</li>
   <li><a 
href="https://github.com/grpc/grpc-go/commit/1634fd3fc38c505906f929b1f1f73a24571a042e";><code>1634fd3</code></a>
 Change version to 1.40.0 (<a 
href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4623";>#4623</a>)</li>
   <li><a 
href="https://github.com/grpc/grpc-go/commit/b1a15ac3703c03e1a01607360e8b835a28b02369";><code>b1a15ac</code></a>
 server: fix leaked net.Conn (<a 
href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4644";>#4644</a>)</li>
   <li><a 
href="https://github.com/grpc/grpc-go/commit/00edd8c13a7a27bc25c8de2a68cf6de35f88bd7e";><code>00edd8c</code></a>
 Add xDS k8s url-map test Kokoro job (<a 
href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4614";>#4614</a>)</li>
   <li><a 
href="https://github.com/grpc/grpc-go/commit/1ddab338690a578975747239ad4ecd2ae63b1965";><code>1ddab33</code></a>
 client: fix detection of whether IO was performed in NewStream (<a 
href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4611";>#4611</a>)</li>
   <li><a 
href="https://github.com/grpc/grpc-go/commit/582ef458c6d8174087877ee83bb514abc16650a5";><code>582ef45</code></a>
 cluster_resolver: move balancer config types into cluster_resolver package 
an...</li>
   <li><a 
href="https://github.com/grpc/grpc-go/commit/c513103bee39e1ebc3793e7128941794667779de";><code>c513103</code></a>
 Add extra layer on top of RBAC Engine (<a 
href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4576";>#4576</a>)</li>
   <li><a 
href="https://github.com/grpc/grpc-go/commit/a0bed723f1c00c8b07c6ceaf1f6ac2cb42ec0b35";><code>a0bed72</code></a>
 xds: add http filters to FilterChain matching (<a 
href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4595";>#4595</a>)</li>
   <li><a 
href="https://github.com/grpc/grpc-go/commit/0a8c63739a87bee6ff6097d272b63727659f4503";><code>0a8c637</code></a>
 grpclb: propagate the most recent connection error when grpclb enters 
transie...</li>
   <li><a 
href="https://github.com/grpc/grpc-go/commit/8332d5b997af9e1554418167860351696d35e628";><code>8332d5b</code></a>
 test: fix possible goroutine leaks in unit tests (<a 
href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4570";>#4570</a>)</li>
   <li>Additional commits viewable in <a 
href="https://github.com/grpc/grpc-go/compare/v1.38.0...v1.40.0";>compare 
view</a></li>
   </ul>
   </details>
   <br />
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=google.golang.org/grpc&package-manager=go_modules&previous-version=1.38.0&new-version=1.40.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   <details>
   <summary>Dependabot commands and options</summary>
   <br />
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   </details>


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]



---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to