search

meshery / meshery-cpx

Meshery adapter for Citrix Service Mesh
https://meshery.layer5.io/docs/service-meshes/adapters/cpx
Apache License 2.0
33 stars 19 forks source link

Bump google.golang.org/grpc from 1.37.1 to 1.52.0 #94

Closed dependabot[bot] closed 1 year ago

dependabot[bot] commented 1 year ago

Bumps google.golang.org/grpc from 1.37.1 to 1.52.0.

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.52.0

New Features

  • xdsclient: log node ID with verbosity INFO (#5860)
  • ringhash: impose cap on max_ring_size to reduce possibility of OOMs (#5801)

Behavior Changes

  • client: return an error from Dial if an empty target is passed and no custom dialer is present; the ClientConn would otherwise be unable to connect and perform RPCs (#5732)

Bug Fixes

  • transport (net/http server handler): respond to bad HTTP requests with status 400 (Bad Request) instead of 500 (Internal Server Error). (#5804)
  • transport: Fixed closing a closed channel panic in handlePing (#5854)
  • server: fix ChainUnaryInterceptor and ChainStreamInterceptor to allow retrying handlers (#5666)
  • transport: ensure value of :authority header matches server name used in TLS handshake when the latter is overridden by the name resolver (#5748)

Documentation

  • examples: add an example to illustrate the usage of stats handler (#5657)
  • examples: add new example to show updating metadata in interceptors (#5788)

Release 1.51.0

Behavior Changes

  • xds: NACK EDS resources with duplicate addresses in accordance with a recent spec change (#5715)
  • grpc: restrict status codes that can be generated by the control plane (gRFC A54) (#5653)

New Features

  • client: set grpc-accept-encoding header with all registered compressors (#5541)
  • xds/weightedtarget: return a more meaningful error when all child policies are in TRANSIENT_FAILURE (#5711)
  • gcp/observability: add "started rpcs" metric (#5768)
  • xds: de-experimentalize the google-c2p-resolver (#5707)
  • balancer: add experimental Producer types and methods (#5669)
  • orca: provide a way for LB policies to receive OOB load reports (#5669)

Bug Fixes

  • go.mod: upgrade x/text dependency to address CVE 2022-32149 (#5769)
  • client: fix race that could lead to an incorrect connection state if it was closed immediately after the server's HTTP/2 preface was received (#5714)

... (truncated)

Commits
  • ce56cef Change version to 1.52.0 (#5870)
  • a0e8eb9 test: rename race.go to race_test.go (#5869)
  • ae86ff4 benchmark: fix typo in ClientReadBufferSize feature name (#5867)
  • e53d28f xdsclient: log node ID with verbosity INFO (#5860)
  • 9373e5c transport: Fix closing a closed channel panic in handlePing (#5854)
  • 2f413c4 transport/http2: use HTTP 400 for bad requests instead of 500 (#5804)
  • 5003029 testutils: do a better job of verifying pick_first in tests (#5850)
  • 3e27f89 binarylog: Account for key in metadata truncation (#5851)
  • f54bba9 test/xds: minor cleanup in xDS e2e test (#5843)
  • a9709c3 Added logs for reasons causing connection and transport close (#5840)
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
dependabot[bot] commented 1 year ago

Superseded by #95.