renovate[bot]
commented
3 months ago ā¹ Artifact update notice
File name: go.mod
In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):
- 11 additional dependencies were updated
Details:
| Package | Change |
|---|---|
google.golang.org/protobuf |
v1.31.0 -> v1.34.2 |
github.com/cespare/xxhash/v2 |
v2.2.0 -> v2.3.0 |
github.com/golang/glog |
v1.1.2 -> v1.2.2 |
golang.org/x/crypto |
v0.21.0 -> v0.26.0 |
golang.org/x/net |
v0.23.0 -> v0.28.0 |
golang.org/x/sync |
v0.6.0 -> v0.8.0 |
golang.org/x/sys |
v0.18.0 -> v0.24.0 |
golang.org/x/term |
v0.18.0 -> v0.23.0 |
golang.org/x/text |
v0.14.0 -> v0.17.0 |
google.golang.org/genproto/googleapis/api |
v0.0.0-20231106174013-bbf56f31fb17 -> v0.0.0-20240814211410-ddb44dafa142 |
google.golang.org/genproto/googleapis/rpc |
v0.0.0-20231120223509-83a465c0220f -> v0.0.0-20240814211410-ddb44dafa142 |
This PR contains the following updates:
v1.60.0->v1.67.1Release Notes
grpc/grpc-go (google.golang.org/grpc)
### [`v1.67.1`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.67.1): Release 1.67.1 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.67.0...v1.67.1) ### Bug Fixes - transport: Fix a bug causing stream failures due to miscalculation of the flow control window in both clients and servers. ([#7667](https://redirect.github.com/grpc/grpc-go/issues/7667)) - xds/server: Fix xDS Server memory leak. ([#7681](https://redirect.github.com/grpc/grpc-go/issues/7681)) ### [`v1.67.0`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.67.0): Release 1.67.0 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.66.3...v1.67.0) ### Bug Fixes - ringhash: when used with multiple EDS priorities, fix bug that could prevent a higher priority from recovering from transient failure. ([#7364](https://redirect.github.com/grpc/grpc-go/issues/7364)) - Special Thanks: [@atollena](https://redirect.github.com/atollena) ### Behavior Changes - In accordance with [RFC 7540](https://tools.ietf.org/html/rfc7540#section-3.3), clients and servers will now reject TLS connections that don't support ALPN. This can be disabled by setting the environment variable `GRPC_ENFORCE_ALPN_ENABLED` to `false` (case insensitive). Please file a bug if you encounter any issues with this behavior. The environment variable to revert this behavior will be removed in an upcoming release. ([#7535](https://redirect.github.com/grpc/grpc-go/issues/7535)) ### [`v1.66.3`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.66.3): Release 1.66.3 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.66.2...v1.66.3) ### Bug Fixes - transport: Fix a bug causing stream failures due to miscalculation of the flow control window in both clients and servers. ([#7667](https://redirect.github.com/grpc/grpc-go/issues/7667)) - xds/server: Fix xDS Server memory leak. ([#7681](https://redirect.github.com/grpc/grpc-go/issues/7681)) ### [`v1.66.2`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.66.2): Release 1.66.2 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.66.1...v1.66.2) ### Dependencies - Remove unintentional dependency on the `testing` package ([#7579](https://redirect.github.com/grpc/grpc-go/issues/7579)) - Remove unintentional dependency on the `flate` package ([#7595](https://redirect.github.com/grpc/grpc-go/issues/7595)) - Special Thanks: [@ash2k](https://redirect.github.com/ash2k) ### Bug Fixes - client: fix a bug that prevented memory reuse after handling unary RPCs ([#7571](https://redirect.github.com/grpc/grpc-go/issues/7571)) - Special Thanks: [@coxley](https://redirect.github.com/coxley) ### [`v1.66.1`](https://redirect.github.com/grpc/grpc-go/compare/v1.66.0...v1.66.1) [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.66.0...v1.66.1) ### [`v1.66.0`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.66.0): Release 1.66.0 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.65.0...v1.66.0) ### New Features - metadata: stabilize `ValueFromIncomingContext` ([#7368](https://redirect.github.com/grpc/grpc-go/issues/7368)) - Special Thanks: [@KarthikReddyPuli](https://redirect.github.com/KarthikReddyPuli) - client: stabilize the `WaitForStateChange` and `GetState` methods, which were previously experimental. ([#7425](https://redirect.github.com/grpc/grpc-go/issues/7425)) - xds: Implement ADS flow control mechanism ([#7458](https://redirect.github.com/grpc/grpc-go/issues/7458)) - See [https://github.com/grpc/grpc/issues/34099](https://redirect.github.com/grpc/grpc/issues/34099) for context. - balancer/rls: Add metrics for data cache and picker internals ([#7484](https://redirect.github.com/grpc/grpc-go/issues/7484), [#7495](https://redirect.github.com/grpc/grpc-go/issues/7495)) - xds: LRS load reports now include the `total_issued_requests` field. ([#7544](https://redirect.github.com/grpc/grpc-go/issues/7544)) ### Bug Fixes - grpc: Clients now return status code INTERNAL instead of UNIMPLEMENTED when the server uses an unsupported compressor. This is consistent with the [gRPC compression spec](https://redirect.github.com/grpc/grpc/blob/master/doc/compression.md#compression-method-asymmetry-between-peers). ([#7461](https://redirect.github.com/grpc/grpc-go/issues/7461)) - Special Thanks: [@Gayathri625](https://redirect.github.com/Gayathri625) - transport: Fix a bug which could result in writes busy looping when the underlying `conn.Write` returns errors ([#7394](https://redirect.github.com/grpc/grpc-go/issues/7394)) - Special Thanks: [@veshij](https://redirect.github.com/veshij) - client: fix race that could lead to orphaned connections and associated resources. ([#7390](https://redirect.github.com/grpc/grpc-go/issues/7390)) - xds: use locality from the connected address for load reporting with pick_first ([#7378](https://redirect.github.com/grpc/grpc-go/issues/7378)) - without this fix, if a priority contains multiple localities with pick_first, load was reported for the wrong locality - client: prevent hanging during ClientConn.Close() when the network is unreachable ([#7540](https://redirect.github.com/grpc/grpc-go/issues/7540)) ### Performance Improvements - transport: double buffering is avoided when using an http connect proxy and the target server waits for client to send the first message. ([#7424](https://redirect.github.com/grpc/grpc-go/issues/7424)) - codec: Implement a new `Codec` which uses buffer recycling for encoded message ([#7356](https://redirect.github.com/grpc/grpc-go/issues/7356)) - introduce a `mem` package to facilitate buffer reuse ([#7432](https://redirect.github.com/grpc/grpc-go/issues/7432)) - Special Thanks: [@PapaCharlie](https://redirect.github.com/PapaCharlie) ### [`v1.65.0`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.65.0): Release 1.65.0 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.64.1...v1.65.0) ### Dependencies - Change support policy to cover only the latest TWO releases of Go, matching the policy for Go itself. See [#7249](https://redirect.github.com/grpc/grpc-go/issues/7249) for more information. ([#7250](https://redirect.github.com/grpc/grpc-go/issues/7250)) - Update x/net/http2 to address [CVE-2023-45288](https://nvd.nist.gov/vuln/detail/CVE-2023-45288) ([#7282](https://redirect.github.com/grpc/grpc-go/issues/7282)) ### Behavior Changes - credentials/tls: clients and servers will now reject connections that don't support ALPN when environment variable `GRPC_ENFORCE_ALPN_ENABLED` is set to "true" (case insensitive). ([#7184](https://redirect.github.com/grpc/grpc-go/issues/7184)) - NOTE: this behavior will become the default in a future release. - metadata: remove String method from MD to make printing more consistent ([#7373](https://redirect.github.com/grpc/grpc-go/issues/7373)) ### New Features - grpc: add `WithMaxCallAttempts` to configure gRPC's retry behavior per-channel. ([#7229](https://redirect.github.com/grpc/grpc-go/issues/7229)) - Special Thanks: [@imoore76](https://redirect.github.com/imoore76) ### Bug Fixes - ringhash: properly apply endpoint weights instead of ignoring them ([#7156](https://redirect.github.com/grpc/grpc-go/issues/7156)) - xds: fix a bug that could cause xds-enabled servers to stop accepting new connections after handshaking errors ([#7128](https://redirect.github.com/grpc/grpc-go/issues/7128)) - Special Thanks: [@bozaro](https://redirect.github.com/bozaro) ### [`v1.64.1`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.64.1): Release 1.64.1 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.64.0...v1.64.1) ### Dependencies - Update x/net/http2 to address [CVE-2023-45288](https://nvd.nist.gov/vuln/detail/CVE-2023-45288) ([#7352](https://redirect.github.com/grpc/grpc-go/issues/7352)) - metadata: remove String method from MD to make printing consistent ([#7374](https://redirect.github.com/grpc/grpc-go/issues/7374)) ### [`v1.64.0`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.64.0): Release 1.64.0 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.63.3...v1.64.0) ### API Changes - stats: Deprecate `InPayload.Data` and `OutPayload.Data`; they were experimental and will be deleted in the next release ([#7121](https://redirect.github.com/grpc/grpc-go/issues/7121)) ### Behavior Changes - codec: Remove handling of environment variable `GRPC_GO_ADVERTISE_COMPRESSORS` to suppress setting supported compressors in `grpc-accept-encoding` header. Compressors will always be advertised, as they have been by default for some time ([#7203](https://redirect.github.com/grpc/grpc-go/issues/7203)) ### New Features - resolver/dns: Add `SetMinResolutionInterval` to set the minimum interval at which DNS re-resolutions may occur ([#6962](https://redirect.github.com/grpc/grpc-go/issues/6962)) - Special Thanks: [@HomayoonAlimohammadi](https://redirect.github.com/HomayoonAlimohammadi) - peer/peer: Implement the `fmt.Stringer` interface for pretty printing `Peer`, and - metadata/metadata: Implement the `fmt.Stringer` interface for pretty printing `MD` ([#7137](https://redirect.github.com/grpc/grpc-go/issues/7137)) - Special Thanks: [@AnomalRoil](https://redirect.github.com/AnomalRoil) ### Performance Improvements - client: Improve RPC performance by reducing work while holding a lock ([#7132](https://redirect.github.com/grpc/grpc-go/issues/7132)) ### Bug Fixes - transport/server: Display the proper timeout value when keepalive pings are not ack'd in time ([#7038](https://redirect.github.com/grpc/grpc-go/issues/7038)) - Special Thanks: [@BatmanAoD](https://redirect.github.com/BatmanAoD) - channelz: Fix bug that was causing the subchannel's target to be unset ([#7189](https://redirect.github.com/grpc/grpc-go/issues/7189)) - stats: Fix bug where peer was not set in context when calling stats handler for `OutPayload`, `InPayload`, and `End` ([#7096](https://redirect.github.com/grpc/grpc-go/issues/7096)) ### Dependencies - deps: Remove dependency on deprecated `github.com/golang/protobuf` module ([#7122](https://redirect.github.com/grpc/grpc-go/issues/7122)) ### Documentation - grpc: Deprecate `WithBlock`, `WithReturnConnectionError`, `FailOnNonTempDialError` which are ignored by `NewClient` ([#7097](https://redirect.github.com/grpc/grpc-go/issues/7097)) - Special Thanks: [@pellared](https://redirect.github.com/pellared) - grpc: Deprecate `Dial` and `DialContext`. These will continue to be supported throughout 1.x, but are deprecated to direct users to `NewClient` (See [#7090](https://redirect.github.com/grpc/grpc-go/issues/7090) for more information) - examples: Add custom lb example ([#6691](https://redirect.github.com/grpc/grpc-go/issues/6691)) ### [`v1.63.3`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.63.3): Release 1.63.3 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.63.2...v1.63.3) ### Dependencies - Update x/net/http2 to address [CVE-2023-45288](https://nvd.nist.gov/vuln/detail/CVE-2023-45288) ([#7352](https://redirect.github.com/grpc/grpc-go/issues/7352)) ### [`v1.63.2`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.63.2): Release 1.63.2 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.63.1...v1.63.2) ### Bugs - Fix the user agent string ### [`v1.63.1`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.63.1): Release 1.63.1 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.63.0...v1.63.1) - grpc: un-deprecate Dial and DialContext and cherry-pick ### [`v1.63.0`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.63.0): Release 1.63.0 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.62.2...v1.63.0) ### Behavior Changes - grpc: Return canonical target string from `resolver.Address.String()` (experimental) ([#6923](https://redirect.github.com/grpc/grpc-go/issues/6923)) - client & server: when using write buffer pooling, use input value for buffer size instead of size\*2 ([#6983](https://redirect.github.com/grpc/grpc-go/issues/6983)) - Special Thanks: [@raghav-stripe](https://redirect.github.com/raghav-stripe) ### New Features - grpc: add `ClientConn.CanonicalTarget()` to return the canonical target string. ([#7006](https://redirect.github.com/grpc/grpc-go/issues/7006)) - xds: implement LRS named metrics support ([gRFC A64](https://redirect.github.com/grpc/proposal/blob/master/A64-lrs-custom-metrics.md)) ([#7027](https://redirect.github.com/grpc/grpc-go/issues/7027)) - Special Thanks: [@danielzhaotongliu](https://redirect.github.com/danielzhaotongliu) - grpc: introduce `grpc.NewClient` to allow users to create new clients in idle mode and with "dns" as the default resolver ([#7010](https://redirect.github.com/grpc/grpc-go/issues/7010)) - Special Thanks: [@bruuuuuuuce](https://redirect.github.com/bruuuuuuuce) ### API Changes - grpc: stabilize experimental method `ClientConn.Target()` ([#7006](https://redirect.github.com/grpc/grpc-go/issues/7006)) ### Bug Fixes - xds: fix an issue that would cause the client to send an empty list of resources for LDS/CDS upon reconnecting with the management server ([#7026](https://redirect.github.com/grpc/grpc-go/issues/7026)) - server: Fix some errors returned by a server when using a `grpc.Server` as an `http.Handler` with the Go stdlib HTTP server ([#6989](https://redirect.github.com/grpc/grpc-go/issues/6989)) - resolver/dns: add `SetResolvingTimeout` to allow configuring the DNS resolver's global timeout ([#6917](https://redirect.github.com/grpc/grpc-go/issues/6917)) - Special Thanks: [@and1truong](https://redirect.github.com/and1truong) - Set the security level of Windows named pipes to NoSecurity ([#6956](https://redirect.github.com/grpc/grpc-go/issues/6956)) - Special Thanks: [@irsl](https://redirect.github.com/irsl) ### [`v1.62.2`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.62.2): Release 1.62.2 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.62.1...v1.62.2) ### Dependencies - Update http2 library to address vulnerability [CVE-2023-45288](https://www.kb.cert.org/vuls/id/421644) ### [`v1.62.1`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.62.1): Release 1.62.1 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.62.0...v1.62.1) ### Bug Fixes - xds: fix a bug that results in `no matching virtual host found` RPC errors due to a difference between the target and LDS resource names ([#6997](https://redirect.github.com/grpc/grpc-go/issues/6997)) - server: fixed stats handler data `InPayload.Length` for unary RPC calls ([#6766](https://redirect.github.com/grpc/grpc-go/issues/6766)) - Special Thanks: [@hueypark](https://redirect.github.com/hueypark) - grpc: the experimental `RecvBufferPool` `DialOption` and `ServerOption` are now active during unary RPCs with compression ([#6766](https://redirect.github.com/grpc/grpc-go/issues/6766)) - Special Thanks: [@hueypark](https://redirect.github.com/hueypark) - grpc: trim whitespaces in `accept-encoding` header before determining compressors - Special Thanks: [@sercand](https://redirect.github.com/sercand) ### [`v1.62.0`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.62.0): Release 1.62.0 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.61.2...v1.62.0) ### New Features - grpc: Add StaticMethod CallOption as a signal to stats handler that a method is safe to use as an instrument key ([#6986](https://redirect.github.com/grpc/grpc-go/issues/6986)) ### Behavior Changes - grpc: Return canonical target string from ClientConn.Target() and resolver.Address.String() ([#6923](https://redirect.github.com/grpc/grpc-go/issues/6923)) ### Bug Fixes - server: wait to close connection until incoming socket is drained (with timeout) to prevent data loss on client-side ([#6977](https://redirect.github.com/grpc/grpc-go/issues/6977)) - Special Thanks: [@s-matyukevich](https://redirect.github.com/s-matyukevich) for discovering the root cause ### Performance Improvements - \*: Allow building without `x/net/trace` by using `grpcnotrace` to enable dead code elimination ([#6954](https://redirect.github.com/grpc/grpc-go/issues/6954)) - Special Thanks: [@hugelgupf](https://redirect.github.com/hugelgupf) - rand: improve performance and simplify implementation of `grpcrand` by adopting `math/rand`'s top-level functions for go version 1.21.0 and newer. ([#6925](https://redirect.github.com/grpc/grpc-go/issues/6925)) - Special Thanks: [@kmirzavaziri](https://redirect.github.com/kmirzavaziri) ### Dependencies - \*: Use google.golang.org/protobuf/proto instead of github.com/golang/protobuf. ([#6919](https://redirect.github.com/grpc/grpc-go/issues/6919)) - Special Thanks: [@Clement-Jean](https://redirect.github.com/Clement-Jean) > \[!NOTE] > The above change in proto library usage introduces a minor behavior change within those libraries. The old `github.com/golang/protobuf` library would error if given a `nil` message to `Marshal`, while the new `google.golang.org/protobuf` library will successfully output zero bytes in this case. This means server method handlers that did `return nil, nil` will now return an empty message and no error, while it used to return an error. This also affects the client side, where clients sending `nil` messages used to fail without sending the RPC, and now they will send an empty message. ### [`v1.61.2`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.61.2): Release 1.61.2 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.61.1...v1.61.2) ### Dependencies - Update http2 library to address vulnerability [CVE-2023-45288](https://www.kb.cert.org/vuls/id/421644) ### [`v1.61.1`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.61.1): Release 1.61.1 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.61.0...v1.61.1) ### Bug Fixes - server: wait to close connection until incoming socket is drained (with timeout) to prevent data loss on client-side ([#6977](https://redirect.github.com/grpc/grpc-go/issues/6977)) - Special Thanks: [@s-matyukevich](https://redirect.github.com/s-matyukevich) for discovering the root cause ### [`v1.61.0`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.61.0): Release 1.61.0 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.60.1...v1.61.0) ### New Features - resolver: provide method, `AuthorityOverrider`, to allow resolver.Builders to override the default authority for a `ClientConn`. (EXPERIMENTAL) ([#6752](https://redirect.github.com/grpc/grpc-go/issues/6752)) - Special Thanks: [@Aditya-Sood](https://redirect.github.com/Aditya-Sood) - xds: add support for mTLS Credentials in xDS bootstrap ([gRFC A65](github.com/grpc/proposal/blob/8c31bfedded5f0a51c4933e9e9a8246122f9c41a/A65-xds-mtls-creds-in-bootstrap.md)) ([#6757](https://redirect.github.com/grpc/grpc-go/issues/6757)) - Special Thanks: [@atollena](https://redirect.github.com/atollena) - server: add `grpc.WaitForHandlers` `ServerOption` to cause `Server.Stop` to block until method handlers return. (EXPERIMENTAL) ([#6922](https://redirect.github.com/grpc/grpc-go/issues/6922)) ### Performance Improvements - grpc: skip compression of empty messages as an optimization ([#6842](https://redirect.github.com/grpc/grpc-go/issues/6842)) - Special Thanks: [@jroper](https://redirect.github.com/jroper) - orca: use atomic pointer to improve performance in server metrics recorder ([#6799](https://redirect.github.com/grpc/grpc-go/issues/6799)) - Special Thanks: [@danielzhaotongliu](https://redirect.github.com/danielzhaotongliu) ### Bug Fixes - client: correctly enable TCP keepalives with OS defaults on windows ([#6863](https://redirect.github.com/grpc/grpc-go/issues/6863)) - Special Thanks: [@mmatczuk](https://redirect.github.com/mmatczuk) - server: change some stream operations to return `UNAVAILABLE` instead of `UNKNOWN` when underlying connection is broken ([#6891](https://redirect.github.com/grpc/grpc-go/issues/6891)) - Special Thanks: [@mustafasen81](https://redirect.github.com/mustafasen81) - server: fix `GracefulStop` to block until all method handlers return (v1.60 regression). ([#6922](https://redirect.github.com/grpc/grpc-go/issues/6922)) - server: fix two bugs that could lead to panics at shutdown when using [`NumStreamWorkers`](https://pkg.go.dev/google.golang.org/grpc#NumStreamWorkers) (EXPERIMENTAL). ([#6856](https://redirect.github.com/grpc/grpc-go/issues/6856)) - reflection: do not send invalid descriptors to clients for files that cannot be fully resolved ([#6771](https://redirect.github.com/grpc/grpc-go/issues/6771)) - Special Thanks: [@jhump](https://redirect.github.com/jhump) - xds: don't fail channel/server startup when xds creds is specified, but bootstrap is missing certificate providers ([#6848](https://redirect.github.com/grpc/grpc-go/issues/6848)) - xds: Atomically read and write xDS security configuration client side ([#6796](https://redirect.github.com/grpc/grpc-go/issues/6796)) - xds/server: fix RDS handling for non-inline route configs ([#6915](https://redirect.github.com/grpc/grpc-go/issues/6915)) ### [`v1.60.1`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.60.1) [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.60.0...v1.60.1) ### Bug Fixes - server: fix two bugs that could lead to panics at shutdown when using [NumStreamWorkers](https://pkg.go.dev/google.golang.org/grpc#NumStreamWorkers) (experimental feature).Configuration
š Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
š¦ Automerge: Disabled by config. Please merge this manually once you are satisfied.
ā» Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
š Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.