pulumiverse / pulumi-concourse

Pulumi provider for Concourse
Apache License 2.0
5 stars 2 forks source link

Update module google.golang.org/grpc to v1.66.2 #90

Open renovate[bot] opened 3 months ago

renovate[bot] commented 3 months ago

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
google.golang.org/grpc v1.56.3 -> v1.66.2 age adoption passing confidence

Release Notes

grpc/grpc-go (google.golang.org/grpc) ### [`v1.66.2`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.66.2): Release 1.66.2 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.66.1...v1.66.2) ### Dependencies - Remove unintentional dependency on the `testing` package ([#​7579](https://redirect.github.com/grpc/grpc-go/issues/7579)) - Remove unintentional dependency on the `flate` package ([#​7595](https://redirect.github.com/grpc/grpc-go/issues/7595)) - Special Thanks: [@​ash2k](https://redirect.github.com/ash2k) ### Bug Fixes - client: fix a bug that prevented memory reuse after handling unary RPCs ([#​7571](https://redirect.github.com/grpc/grpc-go/issues/7571)) - Special Thanks: [@​coxley](https://redirect.github.com/coxley) ### [`v1.66.1`](https://redirect.github.com/grpc/grpc-go/compare/v1.66.0...v1.66.1) [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.66.0...v1.66.1) ### [`v1.66.0`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.66.0): Release 1.66.0 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.65.0...v1.66.0) ### New Features - metadata: stabilize `ValueFromIncomingContext` ([#​7368](https://redirect.github.com/grpc/grpc-go/issues/7368)) - Special Thanks: [@​KarthikReddyPuli](https://redirect.github.com/KarthikReddyPuli) - client: stabilize the `WaitForStateChange` and `GetState` methods, which were previously experimental. ([#​7425](https://redirect.github.com/grpc/grpc-go/issues/7425)) - xds: Implement ADS flow control mechanism ([#​7458](https://redirect.github.com/grpc/grpc-go/issues/7458)) - See [https://github.com/grpc/grpc/issues/34099](https://redirect.github.com/grpc/grpc/issues/34099) for context. - balancer/rls: Add metrics for data cache and picker internals ([#​7484](https://redirect.github.com/grpc/grpc-go/issues/7484), [#​7495](https://redirect.github.com/grpc/grpc-go/issues/7495)) - xds: LRS load reports now include the `total_issued_requests` field. ([#​7544](https://redirect.github.com/grpc/grpc-go/issues/7544)) ### Bug Fixes - grpc: Clients now return status code INTERNAL instead of UNIMPLEMENTED when the server uses an unsupported compressor. This is consistent with the [gRPC compression spec](https://redirect.github.com/grpc/grpc/blob/master/doc/compression.md#compression-method-asymmetry-between-peers). ([#​7461](https://redirect.github.com/grpc/grpc-go/issues/7461)) - Special Thanks: [@​Gayathri625](https://redirect.github.com/Gayathri625) - transport: Fix a bug which could result in writes busy looping when the underlying `conn.Write` returns errors ([#​7394](https://redirect.github.com/grpc/grpc-go/issues/7394)) - Special Thanks: [@​veshij](https://redirect.github.com/veshij) - client: fix race that could lead to orphaned connections and associated resources. ([#​7390](https://redirect.github.com/grpc/grpc-go/issues/7390)) - xds: use locality from the connected address for load reporting with pick_first ([#​7378](https://redirect.github.com/grpc/grpc-go/issues/7378)) - without this fix, if a priority contains multiple localities with pick_first, load was reported for the wrong locality - client: prevent hanging during ClientConn.Close() when the network is unreachable ([#​7540](https://redirect.github.com/grpc/grpc-go/issues/7540)) ### Performance Improvements - transport: double buffering is avoided when using an http connect proxy and the target server waits for client to send the first message. ([#​7424](https://redirect.github.com/grpc/grpc-go/issues/7424)) - codec: Implement a new `Codec` which uses buffer recycling for encoded message ([#​7356](https://redirect.github.com/grpc/grpc-go/issues/7356)) - introduce a `mem` package to facilitate buffer reuse ([#​7432](https://redirect.github.com/grpc/grpc-go/issues/7432)) - Special Thanks: [@​PapaCharlie](https://redirect.github.com/PapaCharlie) ### [`v1.65.0`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.65.0): Release 1.65.0 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.64.1...v1.65.0) ### Dependencies - Change support policy to cover only the latest TWO releases of Go, matching the policy for Go itself. See [#​7249](https://redirect.github.com/grpc/grpc-go/issues/7249) for more information. ([#​7250](https://redirect.github.com/grpc/grpc-go/issues/7250)) - Update x/net/http2 to address [CVE-2023-45288](https://nvd.nist.gov/vuln/detail/CVE-2023-45288) ([#​7282](https://redirect.github.com/grpc/grpc-go/issues/7282)) ### Behavior Changes - credentials/tls: clients and servers will now reject connections that don't support ALPN when environment variable `GRPC_ENFORCE_ALPN_ENABLED` is set to "true" (case insensitive). ([#​7184](https://redirect.github.com/grpc/grpc-go/issues/7184)) - NOTE: this behavior will become the default in a future release. - metadata: remove String method from MD to make printing more consistent ([#​7373](https://redirect.github.com/grpc/grpc-go/issues/7373)) ### New Features - grpc: add `WithMaxCallAttempts` to configure gRPC's retry behavior per-channel. ([#​7229](https://redirect.github.com/grpc/grpc-go/issues/7229)) - Special Thanks: [@​imoore76](https://redirect.github.com/imoore76) ### Bug Fixes - ringhash: properly apply endpoint weights instead of ignoring them ([#​7156](https://redirect.github.com/grpc/grpc-go/issues/7156)) - xds: fix a bug that could cause xds-enabled servers to stop accepting new connections after handshaking errors ([#​7128](https://redirect.github.com/grpc/grpc-go/issues/7128)) - Special Thanks: [@​bozaro](https://redirect.github.com/bozaro) ### [`v1.64.1`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.64.1): Release 1.64.1 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.64.0...v1.64.1) ### Dependencies - Update x/net/http2 to address [CVE-2023-45288](https://nvd.nist.gov/vuln/detail/CVE-2023-45288) ([#​7352](https://redirect.github.com/grpc/grpc-go/issues/7352)) - metadata: remove String method from MD to make printing consistent ([#​7374](https://redirect.github.com/grpc/grpc-go/issues/7374)) ### [`v1.64.0`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.64.0): Release 1.64.0 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.63.3...v1.64.0) ### API Changes - stats: Deprecate `InPayload.Data` and `OutPayload.Data`; they were experimental and will be deleted in the next release ([#​7121](https://redirect.github.com/grpc/grpc-go/issues/7121)) ### Behavior Changes - codec: Remove handling of environment variable `GRPC_GO_ADVERTISE_COMPRESSORS` to suppress setting supported compressors in `grpc-accept-encoding` header. Compressors will always be advertised, as they have been by default for some time ([#​7203](https://redirect.github.com/grpc/grpc-go/issues/7203)) ### New Features - resolver/dns: Add `SetMinResolutionInterval` to set the minimum interval at which DNS re-resolutions may occur ([#​6962](https://redirect.github.com/grpc/grpc-go/issues/6962)) - Special Thanks: [@​HomayoonAlimohammadi](https://redirect.github.com/HomayoonAlimohammadi) - peer/peer: Implement the `fmt.Stringer` interface for pretty printing `Peer`, and - metadata/metadata: Implement the `fmt.Stringer` interface for pretty printing `MD` ([#​7137](https://redirect.github.com/grpc/grpc-go/issues/7137)) - Special Thanks: [@​AnomalRoil](https://redirect.github.com/AnomalRoil) ### Performance Improvements - client: Improve RPC performance by reducing work while holding a lock ([#​7132](https://redirect.github.com/grpc/grpc-go/issues/7132)) ### Bug Fixes - transport/server: Display the proper timeout value when keepalive pings are not ack'd in time ([#​7038](https://redirect.github.com/grpc/grpc-go/issues/7038)) - Special Thanks: [@​BatmanAoD](https://redirect.github.com/BatmanAoD) - channelz: Fix bug that was causing the subchannel's target to be unset ([#​7189](https://redirect.github.com/grpc/grpc-go/issues/7189)) - stats: Fix bug where peer was not set in context when calling stats handler for `OutPayload`, `InPayload`, and `End` ([#​7096](https://redirect.github.com/grpc/grpc-go/issues/7096)) ### Dependencies - deps: Remove dependency on deprecated `github.com/golang/protobuf` module ([#​7122](https://redirect.github.com/grpc/grpc-go/issues/7122)) ### Documentation - grpc: Deprecate `WithBlock`, `WithReturnConnectionError`, `FailOnNonTempDialError` which are ignored by `NewClient` ([#​7097](https://redirect.github.com/grpc/grpc-go/issues/7097)) - Special Thanks: [@​pellared](https://redirect.github.com/pellared) - grpc: Deprecate `Dial` and `DialContext`. These will continue to be supported throughout 1.x, but are deprecated to direct users to `NewClient` (See [#​7090](https://redirect.github.com/grpc/grpc-go/issues/7090) for more information) - examples: Add custom lb example ([#​6691](https://redirect.github.com/grpc/grpc-go/issues/6691)) ### [`v1.63.3`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.63.3): Release 1.63.3 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.63.2...v1.63.3) ### Dependencies - Update x/net/http2 to address [CVE-2023-45288](https://nvd.nist.gov/vuln/detail/CVE-2023-45288) ([#​7352](https://redirect.github.com/grpc/grpc-go/issues/7352)) ### [`v1.63.2`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.63.2): Release 1.63.2 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.63.1...v1.63.2) ### Bugs - Fix the user agent string ### [`v1.63.1`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.63.1): Release 1.63.1 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.63.0...v1.63.1) - grpc: un-deprecate Dial and DialContext and cherry-pick ### [`v1.63.0`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.63.0): Release 1.63.0 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.62.2...v1.63.0) ### Behavior Changes - grpc: Return canonical target string from `resolver.Address.String()` (experimental) ([#​6923](https://redirect.github.com/grpc/grpc-go/issues/6923)) - client & server: when using write buffer pooling, use input value for buffer size instead of size\*2 ([#​6983](https://redirect.github.com/grpc/grpc-go/issues/6983)) - Special Thanks: [@​raghav-stripe](https://redirect.github.com/raghav-stripe) ### New Features - grpc: add `ClientConn.CanonicalTarget()` to return the canonical target string. ([#​7006](https://redirect.github.com/grpc/grpc-go/issues/7006)) - xds: implement LRS named metrics support ([gRFC A64](https://redirect.github.com/grpc/proposal/blob/master/A64-lrs-custom-metrics.md)) ([#​7027](https://redirect.github.com/grpc/grpc-go/issues/7027)) - Special Thanks: [@​danielzhaotongliu](https://redirect.github.com/danielzhaotongliu) - grpc: introduce `grpc.NewClient` to allow users to create new clients in idle mode and with "dns" as the default resolver ([#​7010](https://redirect.github.com/grpc/grpc-go/issues/7010)) - Special Thanks: [@​bruuuuuuuce](https://redirect.github.com/bruuuuuuuce) ### API Changes - grpc: stabilize experimental method `ClientConn.Target()` ([#​7006](https://redirect.github.com/grpc/grpc-go/issues/7006)) ### Bug Fixes - xds: fix an issue that would cause the client to send an empty list of resources for LDS/CDS upon reconnecting with the management server ([#​7026](https://redirect.github.com/grpc/grpc-go/issues/7026)) - server: Fix some errors returned by a server when using a `grpc.Server` as an `http.Handler` with the Go stdlib HTTP server ([#​6989](https://redirect.github.com/grpc/grpc-go/issues/6989)) - resolver/dns: add `SetResolvingTimeout` to allow configuring the DNS resolver's global timeout ([#​6917](https://redirect.github.com/grpc/grpc-go/issues/6917)) - Special Thanks: [@​and1truong](https://redirect.github.com/and1truong) - Set the security level of Windows named pipes to NoSecurity ([#​6956](https://redirect.github.com/grpc/grpc-go/issues/6956)) - Special Thanks: [@​irsl](https://redirect.github.com/irsl) ### [`v1.62.2`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.62.2): Release 1.62.2 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.62.1...v1.62.2) ### Dependencies - Update http2 library to address vulnerability [CVE-2023-45288](https://www.kb.cert.org/vuls/id/421644) ### [`v1.62.1`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.62.1): Release 1.62.1 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.62.0...v1.62.1) ### Bug Fixes - xds: fix a bug that results in `no matching virtual host found` RPC errors due to a difference between the target and LDS resource names ([#​6997](https://redirect.github.com/grpc/grpc-go/issues/6997)) - server: fixed stats handler data `InPayload.Length` for unary RPC calls ([#​6766](https://redirect.github.com/grpc/grpc-go/issues/6766)) - Special Thanks: [@​hueypark](https://redirect.github.com/hueypark) - grpc: the experimental `RecvBufferPool` `DialOption` and `ServerOption` are now active during unary RPCs with compression ([#​6766](https://redirect.github.com/grpc/grpc-go/issues/6766)) - Special Thanks: [@​hueypark](https://redirect.github.com/hueypark) - grpc: trim whitespaces in `accept-encoding` header before determining compressors - Special Thanks: [@​sercand](https://redirect.github.com/sercand) ### [`v1.62.0`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.62.0): Release 1.62.0 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.61.2...v1.62.0) ### New Features - grpc: Add StaticMethod CallOption as a signal to stats handler that a method is safe to use as an instrument key ([#​6986](https://redirect.github.com/grpc/grpc-go/issues/6986)) ### Behavior Changes - grpc: Return canonical target string from ClientConn.Target() and resolver.Address.String() ([#​6923](https://redirect.github.com/grpc/grpc-go/issues/6923)) ### Bug Fixes - server: wait to close connection until incoming socket is drained (with timeout) to prevent data loss on client-side ([#​6977](https://redirect.github.com/grpc/grpc-go/issues/6977)) - Special Thanks: [@​s-matyukevich](https://redirect.github.com/s-matyukevich) for discovering the root cause ### Performance Improvements - \*: Allow building without `x/net/trace` by using `grpcnotrace` to enable dead code elimination ([#​6954](https://redirect.github.com/grpc/grpc-go/issues/6954)) - Special Thanks: [@​hugelgupf](https://redirect.github.com/hugelgupf) - rand: improve performance and simplify implementation of `grpcrand` by adopting `math/rand`'s top-level functions for go version 1.21.0 and newer. ([#​6925](https://redirect.github.com/grpc/grpc-go/issues/6925)) - Special Thanks: [@​kmirzavaziri](https://redirect.github.com/kmirzavaziri) ### Dependencies - \*: Use google.golang.org/protobuf/proto instead of github.com/golang/protobuf. ([#​6919](https://redirect.github.com/grpc/grpc-go/issues/6919)) - Special Thanks: [@​Clement-Jean](https://redirect.github.com/Clement-Jean) > \[!NOTE] > The above change in proto library usage introduces a minor behavior change within those libraries. The old `github.com/golang/protobuf` library would error if given a `nil` message to `Marshal`, while the new `google.golang.org/protobuf` library will successfully output zero bytes in this case. This means server method handlers that did `return nil, nil` will now return an empty message and no error, while it used to return an error. This also affects the client side, where clients sending `nil` messages used to fail without sending the RPC, and now they will send an empty message. ### [`v1.61.2`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.61.2): Release 1.61.2 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.61.1...v1.61.2) ### Dependencies - Update http2 library to address vulnerability [CVE-2023-45288](https://www.kb.cert.org/vuls/id/421644) ### [`v1.61.1`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.61.1): Release 1.61.1 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.61.0...v1.61.1) ### Bug Fixes - server: wait to close connection until incoming socket is drained (with timeout) to prevent data loss on client-side ([#​6977](https://redirect.github.com/grpc/grpc-go/issues/6977)) - Special Thanks: [@​s-matyukevich](https://redirect.github.com/s-matyukevich) for discovering the root cause ### [`v1.61.0`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.61.0): Release 1.61.0 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.60.1...v1.61.0) ### New Features - resolver: provide method, `AuthorityOverrider`, to allow resolver.Builders to override the default authority for a `ClientConn`. (EXPERIMENTAL) ([#​6752](https://redirect.github.com/grpc/grpc-go/issues/6752)) - Special Thanks: [@​Aditya-Sood](https://redirect.github.com/Aditya-Sood) - xds: add support for mTLS Credentials in xDS bootstrap ([gRFC A65](github.com/grpc/proposal/blob/8c31bfedded5f0a51c4933e9e9a8246122f9c41a/A65-xds-mtls-creds-in-bootstrap.md)) ([#​6757](https://redirect.github.com/grpc/grpc-go/issues/6757)) - Special Thanks: [@​atollena](https://redirect.github.com/atollena) - server: add `grpc.WaitForHandlers` `ServerOption` to cause `Server.Stop` to block until method handlers return. (EXPERIMENTAL) ([#​6922](https://redirect.github.com/grpc/grpc-go/issues/6922)) ### Performance Improvements - grpc: skip compression of empty messages as an optimization ([#​6842](https://redirect.github.com/grpc/grpc-go/issues/6842)) - Special Thanks: [@​jroper](https://redirect.github.com/jroper) - orca: use atomic pointer to improve performance in server metrics recorder ([#​6799](https://redirect.github.com/grpc/grpc-go/issues/6799)) - Special Thanks: [@​danielzhaotongliu](https://redirect.github.com/danielzhaotongliu) ### Bug Fixes - client: correctly enable TCP keepalives with OS defaults on windows ([#​6863](https://redirect.github.com/grpc/grpc-go/issues/6863)) - Special Thanks: [@​mmatczuk](https://redirect.github.com/mmatczuk) - server: change some stream operations to return `UNAVAILABLE` instead of `UNKNOWN` when underlying connection is broken ([#​6891](https://redirect.github.com/grpc/grpc-go/issues/6891)) - Special Thanks: [@​mustafasen81](https://redirect.github.com/mustafasen81) - server: fix `GracefulStop` to block until all method handlers return (v1.60 regression). ([#​6922](https://redirect.github.com/grpc/grpc-go/issues/6922)) - server: fix two bugs that could lead to panics at shutdown when using [`NumStreamWorkers`](https://pkg.go.dev/google.golang.org/grpc#NumStreamWorkers) (EXPERIMENTAL). ([#​6856](https://redirect.github.com/grpc/grpc-go/issues/6856)) - reflection: do not send invalid descriptors to clients for files that cannot be fully resolved ([#​6771](https://redirect.github.com/grpc/grpc-go/issues/6771)) - Special Thanks: [@​jhump](https://redirect.github.com/jhump) - xds: don't fail channel/server startup when xds creds is specified, but bootstrap is missing certificate providers ([#​6848](https://redirect.github.com/grpc/grpc-go/issues/6848)) - xds: Atomically read and write xDS security configuration client side ([#​6796](https://redirect.github.com/grpc/grpc-go/issues/6796)) - xds/server: fix RDS handling for non-inline route configs ([#​6915](https://redirect.github.com/grpc/grpc-go/issues/6915)) ### [`v1.60.1`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.60.1) [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.60.0...v1.60.1) ### Bug Fixes - server: fix two bugs that could lead to panics at shutdown when using [NumStreamWorkers](https://pkg.go.dev/google.golang.org/grpc#NumStreamWorkers) (experimental feature). ### [`v1.60.0`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.60.0): Release 1.60.0 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.59.0...v1.60.0) ### Security - credentials/tls: if not set, set TLS MinVersion to 1.2 and CipherSuites according to supported suites not forbidden by RFC7540. - This is a behavior change to bring us into better alignment with RFC 7540. ### API Changes - resolver: remove deprecated and experimental `ClientConn.NewServiceConfig` ([#​6784](https://redirect.github.com/grpc/grpc-go/issues/6784)) - client: remove deprecated `grpc.WithServiceConfig` `DialOption` ([#​6800](https://redirect.github.com/grpc/grpc-go/issues/6800)) ### Bug Fixes - client: fix race that could cause a deadlock while entering idle mode and receiving a name resolver update ([#​6804](https://redirect.github.com/grpc/grpc-go/issues/6804)) - client: always enable TCP keepalives with OS defaults ([#​6834](https://redirect.github.com/grpc/grpc-go/issues/6834)) - credentials/alts: fix a bug preventing ALTS from connecting to the metadata server if the default scheme is overridden ([#​6686](https://redirect.github.com/grpc/grpc-go/issues/6686)) - Special Thanks: [@​mjamaloney](https://redirect.github.com/mjamaloney) ### Behavior Changes - server: Do not return from Stop() or GracefulStop() until all resources are released ([#​6489](https://redirect.github.com/grpc/grpc-go/issues/6489)) - Special Thanks: [@​fho](https://redirect.github.com/fho) ### Documentation - codes: clarify that only codes defined by this package are valid and that users should not cast other values to `codes.Code` ([#​6701](https://redirect.github.com/grpc/grpc-go/issues/6701)) ### [`v1.59.0`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.59.0): Release 1.59.0 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.58.3...v1.59.0) ### Behavior Changes - balancer: grpc will switch to case-sensitive balancer names soon; log a warning if a capital letter is encountered in an LB policy name ([#​6647](https://redirect.github.com/grpc/grpc-go/issues/6647)) - server: allow applications to send arbitrary data in the `grpc-status-details-bin` trailer ([#​6662](https://redirect.github.com/grpc/grpc-go/issues/6662)) - client: validate `grpc-status-details-bin` trailer and pass through the trailer to the application directly ([#​6662](https://redirect.github.com/grpc/grpc-go/issues/6662)) ### New Features - tap (experimental): Add Header metadata to tap handler ([#​6652](https://redirect.github.com/grpc/grpc-go/issues/6652)) - Special Thanks: [@​pstibrany](https://redirect.github.com/pstibrany) - grpc: channel idleness enabled by default with an `idle_timeout` of `30m` ([#​6585](https://redirect.github.com/grpc/grpc-go/issues/6585)) ### Documentation - examples: add an example of flow control behavior ([#​6648](https://redirect.github.com/grpc/grpc-go/issues/6648)) ### Bug Fixes - xds: fix hash policy header to skip "-bin" headers and read content-type header as expected ([#​6609](https://redirect.github.com/grpc/grpc-go/issues/6609)) ### [`v1.58.3`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.58.3) [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.58.2...v1.58.3) ### Security - server: prohibit more than MaxConcurrentStreams handlers from running at once (CVE-2023-44487) In addition to this change, applications should ensure they do not leave running tasks behind related to the RPC before returning from method handlers, or should enforce appropriate limits on any such work. ### [`v1.58.2`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.58.2): Release 1.58.2 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.58.1...v1.58.2) ### Bug Fixes - balancer/weighted_round_robin: fix ticker leak on update A new ticker is created every time there is an update of addresses or configuration, but was not properly stopped. This change stops the ticker when it is no longer needed. ### [`v1.58.1`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.58.1): Release 1.58.1 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.58.0...v1.58.1) ##### Bug Fixes - grpc: fix a bug that was decrementing active RPC count too early for streaming RPCs; leading to channel moving to IDLE even though it had open streams - grpc: fix a bug where transports were not being closed upon channel entering IDLE ### [`v1.58.0`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.58.0): Release 1.58.0 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.57.2...v1.58.0) ### API Changes See [#​6472](https://redirect.github.com/grpc/grpc-go/issues/6472) for details about these changes. - balancer: add `StateListener` to `NewSubConnOptions` for `SubConn` state updates and deprecate `Balancer.UpdateSubConnState` ([#​6481](https://redirect.github.com/grpc/grpc-go/issues/6481)) - `UpdateSubConnState` will be deleted in the future. - balancer: add `SubConn.Shutdown` and deprecate `Balancer.RemoveSubConn` ([#​6493](https://redirect.github.com/grpc/grpc-go/issues/6493)) - `RemoveSubConn` will be deleted in the future. - resolver: remove deprecated `AddressType` ([#​6451](https://redirect.github.com/grpc/grpc-go/issues/6451)) - This was previously used as a signal to enable the "grpclb" load balancing policy, and to pass LB addresses to the policy. Instead, `balancer/grpclb/state.Set()` should be used to add these addresses to the name resolver's output. The built-in "dns" name resolver already does this. - resolver: add new field `Endpoints` to `State` and deprecate `Addresses` ([#​6471](https://redirect.github.com/grpc/grpc-go/issues/6471)) - `Addresses` will be deleted in the future. ### New Features - balancer/leastrequest: Add experimental support for least request LB policy and least request configured as a custom xDS policy ([#​6510](https://redirect.github.com/grpc/grpc-go/issues/6510), [#​6517](https://redirect.github.com/grpc/grpc-go/issues/6517)) - Set `GRPC_EXPERIMENTAL_ENABLE_LEAST_REQUEST=true` to enable - stats: Add an RPC event for blocking caused by the LB policy's picker ([#​6422](https://redirect.github.com/grpc/grpc-go/issues/6422)) ### Bug Fixes - clusterresolver: fix deadlock when dns resolver responds inline with update or error at build time ([#​6563](https://redirect.github.com/grpc/grpc-go/issues/6563)) - grpc: fix a bug where the channel could erroneously report `TRANSIENT_FAILURE` when actually moving to `IDLE` ([#​6497](https://redirect.github.com/grpc/grpc-go/issues/6497)) - balancergroup: do not cache closed sub-balancers by default; affects `rls`, `weightedtarget` and `clustermanager` LB policies ([#​6523](https://redirect.github.com/grpc/grpc-go/issues/6523)) - client: fix a bug that prevented detection of RPC status in trailers-only RPC responses when using `ClientStream.Header()`, and prevented retry of the RPC ([#​6557](https://redirect.github.com/grpc/grpc-go/issues/6557)) ### Performance Improvements - client & server: Add experimental `[With]SharedWriteBuffer` to improve performance by reducing allocations when sending RPC messages. (Disabled by default.) ([#​6309](https://redirect.github.com/grpc/grpc-go/issues/6309)) - Special Thanks: [@​s-matyukevich](https://redirect.github.com/s-matyukevich) ### [`v1.57.2`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.57.2): Release 1.57.2 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.57.1...v1.57.2) ### Bug Fixes - server: fix a bug introduced in v1.57.1 that causes connections to eventually stop processing any RPCs. ### [`v1.57.1`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.57.1): Release 1.57.1 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.57.0...v1.57.1) ### Security - server: prohibit more than MaxConcurrentStreams handlers from running at once (CVE-2023-44487) In addition to this change, applications should ensure they do not leave running tasks behind related to the RPC before returning from method handlers, or should enforce appropriate limits on any such work. ### [`v1.57.0`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.57.0): Release 1.57.0 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.56.3...v1.57.0) ### API Changes - resolver: remove deprecated `Target.Scheme` and `Target.Authority`. Use `URL.Scheme` and `URL.Host` instead, respectively ([#​6363](https://redirect.github.com/grpc/grpc-go/issues/6363)) ### Behavior Changes - client: percent-encode the default authority for the channel ([#​6428](https://redirect.github.com/grpc/grpc-go/issues/6428)) - xds: require EDS service name to be set in a CDS cluster with an 'xdstp' resource name (gRFC A47) ([#​6438](https://redirect.github.com/grpc/grpc-go/issues/6438)) ### New Features - reflection: support the v1 reflection service and update `Register` to register both v1alpha and v1 ([#​6329](https://redirect.github.com/grpc/grpc-go/issues/6329)) - xds: add support for string matcher in RBAC header matching ([#​6419](https://redirect.github.com/grpc/grpc-go/issues/6419)) - alts: add support for `GRPC_ALTS_MAX_CONCURRENT_HANDSHAKES` env var ([#​6267](https://redirect.github.com/grpc/grpc-go/issues/6267)) - balancer/weightedroundrobin: de-experimentalize name of LB policy ([#​6477](https://redirect.github.com/grpc/grpc-go/issues/6477)) ### Bug Fixes - status: `status.FromError` now returns an error with `codes.Unknown` when the error implements the `GRPCStatus()` method, and calling `GRPCStatus()` returns `nil` ([#​6374](https://redirect.github.com/grpc/grpc-go/issues/6374)) - Special Thanks: [@​atollena](https://redirect.github.com/atollena) - server: fix bug preventing TCP user timeout from being set on the connection when TLS is used ([#​6321](https://redirect.github.com/grpc/grpc-go/issues/6321)) - Special Thanks: [@​tobotg](https://redirect.github.com/tobotg) - client: eliminate connection churn during an address update that differs only in balancer attributes ([#​6439](https://redirect.github.com/grpc/grpc-go/issues/6439)) - clusterresolver: handle EDS nacks, resource-not-found errors, and DNS Resolver errors correctly ([#​6436](https://redirect.github.com/grpc/grpc-go/issues/6436), [#​6461](https://redirect.github.com/grpc/grpc-go/issues/6461)) - xds/ringhash: cache connectivity state of subchannels inside picker to avoid rare races ([#​6351](https://redirect.github.com/grpc/grpc-go/issues/6351))

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.



This PR was generated by Mend Renovate. View the repository job log.

renovate[bot] commented 3 months ago

ℹ Artifact update notice

File name: provider/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

Details:

Package Change
go 1.18 -> 1.23.1
google.golang.org/protobuf v1.33.0 -> v1.34.1
cloud.google.com/go/compute/metadata v0.2.3 -> v0.3.0
github.com/golang/glog v1.1.0 -> v1.2.1
github.com/google/go-cmp v0.5.9 -> v0.6.0
github.com/google/uuid v1.3.0 -> v1.6.0
golang.org/x/crypto v0.0.0-20220824171710-5757bc0c5503 -> v0.24.0
golang.org/x/net v0.9.0 -> v0.26.0
golang.org/x/oauth2 v0.7.0 -> v0.21.0
golang.org/x/sync v0.1.0 -> v0.7.0
golang.org/x/sys v0.7.0 -> v0.21.0
golang.org/x/term v0.7.0 -> v0.21.0
golang.org/x/text v0.9.0 -> v0.16.0