dependabot[bot] opened a new pull request #1486: URL: https://github.com/apache/dubbo-go/pull/1486
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.38.0 to 1.41.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/grpc/grpc-go/releases";>google.golang.org/grpc's releases</a>.</em></p> <blockquote> <h2>Release 1.41.0</h2> <h1>API Changes</h1> <ul> <li>xds: Promote xds server and creds APIs to stable (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4753";>#4753</a>)</li> <li>balancer: add <code>ExitIdle</code> interface to instruct the balancer to attempt to leave the IDLE state by connecting SubConns if appropriate. (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4673";>#4673</a>) <ul> <li><strong>NOTICE:</strong> This method will be <em>required by the <code>Balancer</code> interface</em> in the future</li> </ul> </li> </ul> <h1>Behavior Changes</h1> <ul> <li>xds: update xdsclient to keep valid resources from the response even if it has invalid responses and is NACK'ed (see <a href="https://github-redirect.dependabot.com/grpc/proposal/pull/260";>gRFC 260</a>) (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4743";>#4743</a>)</li> <li>balancer: SubConns no longer automatically reconnect after READY; instead they transition to IDLE on connection loss (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4613";>#4613</a>)</li> </ul> <h1>New Features</h1> <ul> <li>xds: add support for RINGHASH lb-policy and affinity (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4741";>#4741</a>)</li> <li>xds: add support for retry policy in VirtualHosts and Routes (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4738";>#4738</a>)</li> <li>stats: support stats for all retry attempts; support transparent retry (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4749";>#4749</a>)</li> <li>authz: create interceptors for gRPC security policy API (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4664";>#4664</a>)</li> </ul> <h1>Bug Fixes</h1> <ul> <li>transport: fix race in transport stream accessing s.recvCompress (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4641";>#4641</a>)</li> <li>client: fix transparent retries when per-RPC credentials are in use (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4785";>#4785</a>)</li> <li>server: fix bug that net.Conn is leaked if the connection is closed (io.EOF) immediately with no traffic (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4633";>#4633</a>)</li> <li>oauth: Allow access to Google API regional endpoints via Google Default Credentials (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4713";>#4713</a>)</li> </ul> <h2>Release 1.40.0</h2> <h1>Behavior Changes</h1> <ul> <li>balancer: client channel no longer connects to idle subchannels that are returned by the pickers; LB policy should call SubConn.Connect instead. (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4579";>#4579</a>) <ul> <li>This change is in line with existing documentation stating the balancer must call Connect on idle SubConns in order for them to connect, and is preparation for an upcoming change that transitions SubConns to the idle state when connections are lost. See <a href="https://pkg.go.dev/google.golang.org/grpc/balancer#SubConn";>https://pkg.go.dev/google.golang.org/grpc/balancer#SubConn</a> for more details.</li> </ul> </li> </ul> <h1>Bug Fixes</h1> <ul> <li>transport: fail RPCs without HTTP status 200 (OK), according to the gRPC spec (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4474";>#4474</a>) <ul> <li>Special Thanks: <a href="https://github.com/JNProtzman";><code>@JNProtzman</code></a></li> </ul> </li> <li>binarylog: fail the <code>Write()</code> method if proto marshaling fails (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4582";>#4582</a>) <ul> <li>Special Thanks: <a href="https://github.com/Jille";><code>@Jille</code></a></li> </ul> </li> <li>binarylog: exit the flusher goroutine upon closing the <code>bufferedSink</code> (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4583";>#4583</a>) <ul> <li>Special Thanks: <a href="https://github.com/Jille";><code>@Jille</code></a></li> </ul> </li> </ul> <h1>New Features</h1> <ul> <li>metadata: add Delete method to MD to encapsulate lowercasing (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4549";>#4549</a>) <ul> <li>Special Thanks: <a href="https://github.com/konradreiche";><code>@konradreiche</code></a></li> </ul> </li> <li>xds/cds: support logical DNS cluster and aggregated cluster (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4594";>#4594</a>)</li> <li>stats: add stats.Begin.IsClientStream and IsServerStream to indicate the type of RPC invoked (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4533";>#4533</a>) <ul> <li>Special Thanks: <a href="https://github.com/leviska";><code>@leviska</code></a></li> </ul> </li> </ul> <h1>Performance Improvements</h1> <ul> <li>server: improve performance when multiple interceptors are used (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4524";>#4524</a>) <ul> <li>Special Thanks: <a href="https://github.com/amenzhinsky";><code>@amenzhinsky</code></a></li> </ul> </li> </ul> <h2>Release 1.39.1</h2> <ul> <li>server: fix bug that net.Conn is leaked if the connection is closed (io.EOF) immediately with no traffic (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4642";>#4642</a>)</li> <li>transport: fix race in transport stream accessing s.recvCompress (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4627";>#4627</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/grpc/grpc-go/commit/a671967dfbaab779d37fd7e597d9248f13806087";><code>a671967</code></a> backport PRs to v1.41.x (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4810";>#4810</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/8c8b55ed620f75744b6ea2544f73c0812de7f39b";><code>8c8b55e</code></a> Change version to 1.41.0 (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4791";>#4791</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/4ddf8ceaa7b5de2170b082bfc7162c4887ddaeb5";><code>4ddf8ce</code></a> Revert "transport/server: add :method POST to incoming metadata (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4770";>#4770</a>)" (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4790";>#4790</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/d53469981f2356f7c270d4b3beaafc6d1a653817";><code>d534699</code></a> transport: fix transparent retries when per-RPC credentials are in use (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4785";>#4785</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/5417cf809116a5e3e8ca06b15cb48cbffb946204";><code>5417cf8</code></a> xds/test: delete use of removed types (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4784";>#4784</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/1109452fd118ec20164e859f71c0bb59fd209d21";><code>1109452</code></a> [Backport grpc#27373] add testing_version flag (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4783";>#4783</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/e469f0d5f5bcc1324dc3940c584e0969e2ea1f90";><code>e469f0d</code></a> xds: Add env var protection for RBAC HTTP Filter (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4765";>#4765</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/567da6b86340a83d509467638c91e68168bc1921";><code>567da6b</code></a> tlogger: print log type (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4774";>#4774</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/03b2ebe5080c2b521c742cf6e06bd0824b75fc52";><code>03b2ebe</code></a> xds: enable ringhash and retry by default (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4776";>#4776</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/b186ee8975f3c69bc36333a99fc82d1388977012";><code>b186ee8</code></a> test/bufconn: add Listener.DialContext(context.Context) (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4763";>#4763</a>)</li> <li>Additional commits viewable in <a href="https://github.com/grpc/grpc-go/compare/v1.38.0...v1.41.0";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
