v1.50.0

New Features

• okhttp: Added connection management features to okhttp server, including maxConnectionIdle(), permitKeepAliveTime(), and permitKeepAliveWithoutCalls() (#9494, #9544)
• binder: Add SecurityPolicies for checking device owner/profile owner (#9428)

API Changes

• api: Add LoadBalancer.acceptResolvedAddresses() (#9498). The method is like handleResolvedAddresses() but returns a boolean of whether the addresses and configuration were accepted. Not accepting the update triggers the NameResolver to retry after a delay. We are not yet encouraging migration to this method, as there is still a second future API change
• core: add CallOptions to CallCredentials.RequestInfo (#9538)

Bug Fixes

• auth: Fix AppEngine failing while retrieving access token when instantiating a blocking stub using AppEngineCredentials (#9504)
• core: Ensure that context cancellationCause is set (#9501)
• core: Update outlier detection max ejection logic to allow exceeding the limit by one, to match Envoy. (#9489, #9492)
• core: outlier detection to honor min host request volume (#9490)
• okhttp: Add timeout for HTTP CONNECT proxy handshake (#9586)
• xds: ringhash policy in TRANSIENT_FAILURE should not attempt connecting when already in connecting (#9535). With workloads where most requests have the same hash, ring hash should behave more like pick-first of slowly trying backends

Dependencies

• netty: upgrade netty from 4.1.77.Final to 4.1.79.Final and tcnative from 2.0.53 to 2.0.54 (#9451)

Acknowledgements

@cpovirk
@prateek-0
@sai-sunder-s