sozercan / aikit

🏗️ Fine-tune, build, and deploy open-source LLMs easily!
https://sozercan.github.io/aikit/
MIT License
358 stars 27 forks source link

chore(deps): Bump google.golang.org/grpc from 1.63.2 to 1.64.0 #231

Closed dependabot[bot] closed 3 months ago

dependabot[bot] commented 3 months ago

Bumps google.golang.org/grpc from 1.63.2 to 1.64.0.

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.64.0

API Changes

  • stats: Deprecate InPayload.Data and OutPayload.Data; they were experimental and will be deleted in the next release (#7121)

Behavior Changes

  • codec: Remove handling of environment variable GRPC_GO_ADVERTISE_COMPRESSORS to suppress setting supported compressors in grpc-accept-encoding header. Compressors will always be advertised, as they have been by default for some time (#7203)

New Features

  • resolver/dns: Add SetMinResolutionInterval to set the minimum interval at which DNS re-resolutions may occur (#6962)
  • peer/peer: Implement the fmt.Stringer interface for pretty printing Peer, and
  • metadata/metadata: Implement the fmt.Stringer interface for pretty printing MD (#7137)

Performance Improvements

  • client: Improve RPC performance by reducing work while holding a lock (#7132)

Bug Fixes

  • transport/server: Display the proper timeout value when keepalive pings are not ack'd in time (#7038)
  • channelz: Fix bug that was causing the subchannel's target to be unset (#7189)
  • stats: Fix bug where peer was not set in context when calling stats handler for OutPayload, InPayload, and End (#7096)

Dependencies

  • deps: Remove dependency on deprecated github.com/golang/protobuf module (#7122)

Documentation

  • grpc: Deprecate WithBlock, WithReturnConnectionError, FailOnNonTempDialError which are ignored by NewClient (#7097)
  • grpc: Deprecate Dial and DialContext. These will continue to be supported throughout 1.x, but are deprecated to direct users to NewClient (See #7090 for more information)
  • examples: Add custom lb example (#6691)
Commits
  • fa274d7 Change version to 1.64.0 (#7218)
  • 6b413c8 xds: Surround two Infof calls that use pretty.ToJSON with V(2) checks (...
  • 2dbbcef resolver/dns: Add docstring to SetMinResolutionInterval (#7217)
  • 070d9c7 codes: replace %q to %d in error string when invalid code is an integer (#7188)
  • 5d24ee2 xds: store server config for LRS server in xdsresource.ClusterUpdate (#7191)
  • c76f686 advancedTLS: Rename get root certs related pieces (#7207)
  • f591e3b codec: remove option to suppress setting supported compressors in headers (#7...
  • b4f7947 github: remove dependabot (#7208)
  • 0561c78 client: add user-friendly error message of LB policy update timed out (#7206)
  • 9d9c1fb peer: remove change detector test (#7204)
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
socket-security[bot] commented 3 months ago

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@types/express-serve-static-core@4.17.41 None +4 4.05 MB types
npm/@types/express@4.17.21 None +4 4.01 MB types
npm/@types/mime@1.3.5 None 0 3.78 kB types
npm/@types/serve-static@1.15.5 None +2 4 MB types
npm/@webassemblyjs/ast@1.11.6 None +5 341 kB xtuc
npm/@webassemblyjs/wasm-parser@1.11.6 None +7 329 kB xtuc
npm/accepts@1.3.8 None +3 268 kB dougwilson
npm/content-type@1.0.5 None 0 10.5 kB dougwilson
npm/get-stream@6.0.1 None 0 12.2 kB sindresorhus
npm/parseurl@1.3.3 None 0 10.3 kB dougwilson

🚮 Removed packages: npm/resolve@1.22.8, npm/safe-buffer@5.2.1, npm/semver@7.5.4, npm/serialize-javascript@6.0.2, npm/shell-quote@1.8.1, npm/string-width@5.1.2, npm/svgo@2.8.0, npm/tapable@2.2.1, npm/terser-webpack-plugin@5.3.10, npm/terser@5.27.0, npm/tslib@2.6.2, npm/type-fest@2.19.0, npm/unified@11.0.4, npm/unpipe@1.0.0, npm/util-deprecate@1.0.2, npm/vfile@6.0.1, npm/webpack-sources@3.2.3, npm/wrap-ansi@8.1.0, npm/xdg-basedir@5.1.0, npm/yaml@1.10.2

View full report↗︎