grpc-ecosystem / grpc-spring

Spring Boot starter module for gRPC framework.
https://grpc-ecosystem.github.io/grpc-spring/
Apache License 2.0
3.48k stars 812 forks source link

Update dependency io.grpc:grpc-bom to v1.58.0 #942

Closed renovate[bot] closed 11 months ago

renovate[bot] commented 1 year ago

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
io.grpc:grpc-bom 1.56.1 -> 1.58.0 age adoption passing confidence

Release Notes

grpc/grpc-java (io.grpc:grpc-bom) ### [`v1.58.0`](https://togithub.com/grpc/grpc-java/releases/tag/v1.58.0) ##### API Changes - xds: Add missing ExperimentalApi to OrcaServiceImpl - stub: Removed deprecated methods attachHeaders and captureMetadata from MetadataUtils ([#​10443](https://togithub.com/grpc/grpc-java/issues/10443)) - api: Stabilized ServerCall.getAuthority() by removing experimental annotation ([#​10498](https://togithub.com/grpc/grpc-java/issues/10498)) - api: Stabilized `ServerCall#setMessageCompression()` and `PartialForwardingServerCall#setMessageCompression()` ([#​10393](https://togithub.com/grpc/grpc-java/issues/10393)) - protobuf: Stabilize `ProtoUtils.setExtensionRegistry()` and `ProtoLiteUtils.setExtensionRegistry()` ([#​10392](https://togithub.com/grpc/grpc-java/issues/10392)) - testing: Stabilize `GrpcCleanupRule`, `GrpcServerRule` ([#​10494](https://togithub.com/grpc/grpc-java/issues/10494)) - api: Stabilized ServerBuilder.handshakeTimeout ([#​10499](https://togithub.com/grpc/grpc-java/issues/10499)) - api: Removed Context.Storage deprecated method attach(), made doAttach() abstract ([#​10379](https://togithub.com/grpc/grpc-java/issues/10379)) - api : Stabilized methodDescriptor getRequestMarshaller, getResponseMarshaller ([#​10495](https://togithub.com/grpc/grpc-java/issues/10495)) ##### Behavior Changes - rls: Have RLS's LRU Cache rely on cleanup process to remove expired entries ([#​10400](https://togithub.com/grpc/grpc-java/issues/10400)) - core, inprocess, util: 2 new artifacts grpc-inprocess and grpc-util have been created by moving code from grpc-core to facilitate Java module support ([#​10362](https://togithub.com/grpc/grpc-java/issues/10362), [#​10390](https://togithub.com/grpc/grpc-java/issues/10390)) - all: Automatic module name support added to all artifacts ([#​10413](https://togithub.com/grpc/grpc-java/issues/10413)) - xds: Encode the service authority in XdsNameResolver ([#​10207](https://togithub.com/grpc/grpc-java/issues/10207)) ##### Improvements - api: In Javadoc, link to gRFCs A8/A9 for keepalive and related settings - okhttp: Enable support for being returned by `Grpc.newServerBuilderForPort()`. At present, Netty always has higher priority than OkHttp, if they are both available, because `ServerBuilder.forPort()` is not supported in the OkHttp transport but is supported in the Netty transport - bazel: Enhance java_grpc_library.bzl to allow toolchain to use annotation processors - examples: Add pre-serialized-message example ([#​10112](https://togithub.com/grpc/grpc-java/issues/10112)) - examples: Android examples to use AGP 7.4.0 ([#​10497](https://togithub.com/grpc/grpc-java/issues/10497)) ##### Bug Fixes - Fix compatibility with Java 8. This fixes the `NoSuchMethodError` for `ByteBuffer` methods present in 1.57.0 ([#​10441](https://togithub.com/grpc/grpc-java/issues/10441)) - xds: Remove debug assert in WeightedRoundRobinLoadBalancer. The assert was to detect breakages in the static stride algorithm causing too much looping. However, with multithreading it is possible to trigger even in legitimate scenarios ([#​10437](https://togithub.com/grpc/grpc-java/issues/10437)) - util: Outlier detection tracer delegation ([#​10459](https://togithub.com/grpc/grpc-java/issues/10459)) - Handle header with errors and endStream = true. Was filling logs with NPEs. ([#​10384](https://togithub.com/grpc/grpc-java/issues/10384)) - core: Fix a retriablestream bug that may cause deadlock with OkHttp ([#​10386](https://togithub.com/grpc/grpc-java/issues/10386)) - stub: Remove ThreadlessExecutor from BlockingServerStream to eliminate the problem where sometimes the iterator’s next() method would get stuck. ([#​10496](https://togithub.com/grpc/grpc-java/issues/10496)) - compiler: Fix aarch\_64 macs not being able to build the compiler module. ([#​10516](https://togithub.com/grpc/grpc-java/issues/10516)) - okhttp: Use padded length for flow control in both client and server transport ([#​10422](https://togithub.com/grpc/grpc-java/issues/10422)) - xds: Fix locality logging information in bootstrap ([#​10423](https://togithub.com/grpc/grpc-java/issues/10423)) ##### Dependencies - Upgraded protobuf to 3.24.0 - android: Min SDK level to 21 ([#​10505](https://togithub.com/grpc/grpc-java/issues/10505)) - Various dependency upgrades ([#​10359](https://togithub.com/grpc/grpc-java/issues/10359)): androidx.core:core 1.10.0 -> 1.10.1 com.google.api.grpc:proto-google-common-protos 2.17.0 -> 2.22.0 com.google.cloud:google-cloud-logging 3.14.5 -> 3.15.5 com.google.errorprone:error_prone_annotations 2.18.0 -> 2.20.0 com.squareup.okio:okio 1.17.5 -> 2.10.0 ##### Acknowledgements Halvard Skogsrud ### [`v1.57.2`](https://togithub.com/grpc/grpc-java/releases/tag/v1.57.2) ### Bug Fixes - util: Outlier detection tracer delegation ([#​10459](https://togithub.com/grpc/grpc-java/issues/10459)) ([#​10483](https://togithub.com/grpc/grpc-java/issues/10483)) ### [`v1.57.1`](https://togithub.com/grpc/grpc-java/releases/tag/v1.57.1) ### Bug fixes - Fix compatibility with Java 8. This fixes the `NoSuchMethodError` for `ByteBuffer` methods present in 1.57.0 ([#​10441](https://togithub.com/grpc/grpc-java/issues/10441)) - xds: Remove debug assert in WeightedRoundRobinLoadBalancer. The assert was to detect breakages in the static stride algorithm causing too much looping. However, with multithreading it is possible to trigger even in legitimate scenarios ([#​10437](https://togithub.com/grpc/grpc-java/issues/10437)) ### [`v1.57.0`](https://togithub.com/grpc/grpc-java/releases/tag/v1.57.0) ##### gRPC Java 1.57.0 Release Notes This release accidentally broke Java 8: `NoSuchMethodError` for some ByteBuffer methods. The issue is tracked in [https://github.com/grpc/grpc-java/issues/10432](https://togithub.com/grpc/grpc-java/issues/10432) and fixed in 1.57.1. ##### API Changes - Use fully qualified java.lang.String in all cases in generated code. This fixes compilation if a protobuf message is named “String”. - Stabilize io.grpc.Status.asRuntimeException(Metadata) and trailersFromThrowable - Stabilize io.grpc.ManagedChannelBuilder.useTransportSecurity ([#​10244](https://togithub.com/grpc/grpc-java/issues/10244)) - Stabilize io.grpc.util.MutableHandlerRegistry ([#​10348](https://togithub.com/grpc/grpc-java/issues/10348)) ##### Behavior Changes - api: CheckedForwardingClientCall now passes trailers from the caught exception - context, api: Package io.grpc is now consolidated into a single artifact grpc-api by moving classes from grpc-context to grpc-api. grpc-context now has a dependency on grpc-api (but excludes other dependencies of grpc-api) so any application previously using only grpc-context will now also bring in grpc-api. This fixes [#​3522](https://togithub.com/grpc/grpc-java/issues/3522) which was the major issue preventing support of Java modules. We are not done fixing support, as some artifacts need to be split and Automatic-Module-Name needs to be added. The next release is likely to be more stable for modules. - core: Change delay for hedging retry after a non-fatal error to be 0 to match the gRFC ([A6](https://togithub.com/grpc/proposal/blob/master/A6-client-retries.md)). - core: Wrap other name resolver types in a RetryingNameResolver . Previously, if authority was not overridden, then some name resolvers (such as grpclb) had no retry. - xds: Handle loops and duplicates in xds Aggregate clusters - xds: require EDS service name in CDS resources with an xdstp name - xds: Use Rule order instead of RuleChain - xds: Environment variable "GRPC_XDS_EXPERIMENTAL_SECURITY_SUPPORT" is no longer respected, so xDS security cannot be disabled any more ([#​10243](https://togithub.com/grpc/grpc-java/issues/10243)) ##### New Features - binder: Add `UserHandle` and `BinderChannelCredentials` to support cross-user communication ([#​10197](https://togithub.com/grpc/grpc-java/issues/10197)) - xds,orca: LRS named metrics support ##### Improvements - core: Resolve isAndroid only once on class loading. This can improve channel creation performance on Android. - xds: Pick a subchannel with new static stride scheduler in WeightedRoundRobinLoadBalancer ##### Bug Fixes - xds: Fix the server sending a GOAWAY when an LDS update with no changes other than ordering is received. - netty: Fix NPE when a header with errors is received with endStream=true. This was causing logs to be filled with errors when health checkers didn’t specify a content type. - okhttp: Fix the Socket data race when shutdown/closed during connecting that was causing a significant delay ##### Dependencies - Upgraded Netty to 4.1.93-Final - Update guava dependency to 32.0.1 to address CVE-2023-2976 ##### Acknowledgements - Benjamin Peterson - Masakuni Oishi - Philip K. Warren - Stephane Landelle

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.



This PR has been generated by Mend Renovate. View repository job log here.

whiskeysierra commented 1 year ago

Build is failing because the io.grpc:grpc-inprocess dependency is set to scope test by default now and only available transitively when using io.grpc:grpc-testing. The easy fix would be to add an explicit dependency to this artifact in compile scope.

marcindabrowski commented 1 year ago

I'm not sure but also io.grpc:grpc-util was extracted from io.grpc:grpc-core in v1.58.0 and should be also added as implementation dependency.

renovate[bot] commented 11 months ago

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

Warning: custom changes will be lost.