Skip to content

Bump the dependencies group with 6 updates #125

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Apr 22, 2025
Merged

Bump the dependencies group with 6 updates #125

merged 1 commit into from
Apr 22, 2025

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Apr 21, 2025

Bumps the dependencies group with 6 updates:

Package From To
info.picocli:picocli 4.7.6 4.7.7
io.grpc:protoc-gen-grpc-java 1.71.0 1.72.0
io.grpc:grpc-stub 1.71.0 1.72.0
io.grpc:grpc-netty 1.71.0 1.72.0
io.grpc:grpc-protobuf 1.71.0 1.72.0
io.grpc:grpc-services 1.71.0 1.72.0

Updates info.picocli:picocli from 4.7.6 to 4.7.7

Release notes

Sourced from info.picocli:picocli's releases.

Picocli 4.7.7

Picocli 4.7.7

The picocli community is pleased to announce picocli 4.7.7.

This release includes bugfixes and enhancements.

Many thanks to the picocli community for raising these issues and providing the pull requests to address them!

This is the eighty-sixth public release. Picocli follows semantic versioning. Artifacts in this release are signed by Remko Popma (6601 E5C0 8DCC BB96).

Table of Contents

  • New and noteworthy
  • Fixed issues
  • Deprecations
  • Potential breaking changes

New and Noteworthy

This release fixes a problem that was introduced in the previous release (4.7.6), where using an ArgGroup in a Mixin would result in options being added twice, or DuplicateOptionAnnotationsException.

The built-in picocli.CommandLine.HelpCommand subcommand now implements Callable<Integer> and returns the exit code of the subcommand's exitCodeOnUsageHelp value for the subcommand whose help was requested.

From this release, if a command implements both Callable and Runnable, then the default execution strategy will invoke the call method instead of the run method.

Fixed issues

  • #2353 Enhancement: picocli.shell.jline3.PicocliCommands::invoke now returns ParseResult instead of null. Thanks to Paul for raising this.
  • #2336 Enhancement: Avoid syntax error in auto-completion script for invalid option names and paramLabel values starting with a digit. Thanks to Ruud Senden and Tobias Knerr for raising this.
  • #2281 Enhancement: Variable interpolation should work for ArgGroup.heading attribute. Thanks to Marc Philipp for raising this.
  • #2355 Bugfix: The built-in help subcommand should return the exit code of the subcommand's exitCodeOnUsageHelp value for the subcommand whose help was requested. Thanks to marco-brandizi for raising this.
  • #2335 Bugfix: Module info missing in all jars except the main picocli jar file. Thanks to Oliver B. Fischer for raising this.
  • #2331 Bugfix: AutoComplete with jline3 was showing hidden commands. Thanks to clebertsuconic for raising this.
  • #2291 Bugfix: NullPointerException when using PropertiesDefaultProvider. Thanks to JessHolle for raising this.
  • #2344 Bugfix: negatable=true option in an ArgGroup should not add negated option twice. Thanks to Robin Fritz for raising this.
  • #2309 Bugfix: Duplicate help output for ArgGroup from a Mixin. Thanks to s-falke for raising this. Thanks to Simon Gamma for providing a pull request for this.
  • #2341 Bugfix: Options get doubled in non validating ArgGroup when used in Mixin. Thanks to Selene Feigl for raising this.
  • #2349 Bugfix: Incorrect results when using ArgGroup + defaultValue + split + List/Set. Thanks to Mithun Josalyn Gonsalvez for raising this.
  • #2292 Bugfix: DuplicateOptionAnnotationsException on using negatable option in ArgGroup. Thanks to Bhavik Patel for raising this.
  • #2380 Bugfix: boolean with arity=0 and defaultValue=false behaved unexpectedly. Thanks to Leonard Brünings for raising this.
  • #2290 DOC: User guide, CDI 2.0 (JSR 365) section: fix example and add warning about dynamic proxies. Thanks to Mert Zeybekler for the pull request.
  • #2347 DOC: Fix line-endings in generated asciidoc HTML. Thanks to Fridrich Štrba for the pull request.
  • #2367 DOC: Fix broken link. Thanks to yeoleobun for the pull request.
  • #2370 DOC: Add at least a link to how to use the CodeGen APT under Bazel. Thanks to Michael Vorburger for the pull request.
  • #2302 DEP: Bump actions/checkout from 4.1.4 to 4.1.7
  • #2391 DEP: Bump actions/checkout from 4.1.7 to 4.2.2
  • #2388 DEP: Bump actions/setup-java from 4.2.1 to 4.7.1

... (truncated)

Changelog

Sourced from info.picocli:picocli's changelog.

Picocli 4.7.7

The picocli community is pleased to announce picocli 4.7.7.

This release includes bugfixes and enhancements.

Many thanks to the picocli community for raising these issues and providing the pull requests to address them!

This is the eighty-sixth public release. Picocli follows semantic versioning. Artifacts in this release are signed by Remko Popma (6601 E5C0 8DCC BB96).

Table of Contents

  • New and noteworthy
  • Fixed issues
  • Deprecations
  • Potential breaking changes

New and Noteworthy

This release fixes a problem that was introduced in the previous release (4.7.6), where using an ArgGroup in a Mixin would result in options being added twice, or DuplicateOptionAnnotationsException.

The built-in picocli.CommandLine.HelpCommand subcommand now implements Callable<Integer> and returns the exit code of the subcommand's exitCodeOnUsageHelp value for the subcommand whose help was requested.

From this release, if a command implements both Callable and Runnable, then the default execution strategy will invoke the call method instead of the run method.

Fixed issues

  • #2353 Enhancement: picocli.shell.jline3.PicocliCommands::invoke now returns ParseResult instead of null. Thanks to Paul for raising this.
  • #2336 Enhancement: Avoid syntax error in auto-completion script for invalid option names and paramLabel values starting with a digit. Thanks to Ruud Senden and Tobias Knerr for raising this.
  • #2281 Enhancement: Variable interpolation should work for ArgGroup.heading attribute. Thanks to Marc Philipp for raising this.
  • #2355 Bugfix: The built-in help subcommand should return the exit code of the subcommand's exitCodeOnUsageHelp value for the subcommand whose help was requested. Thanks to marco-brandizi for raising this.
  • #2335 Bugfix: Module info missing in all jars except the main picocli jar file. Thanks to Oliver B. Fischer for raising this.
  • #2331 Bugfix: AutoComplete with jline3 was showing hidden commands. Thanks to clebertsuconic for raising this.
  • #2291 Bugfix: NullPointerException when using PropertiesDefaultProvider. Thanks to JessHolle for raising this.
  • #2344 Bugfix: negatable=true option in an ArgGroup should not add negated option twice. Thanks to Robin Fritz for raising this.
  • #2309 Bugfix: Duplicate help output for ArgGroup from a Mixin. Thanks to s-falke for raising this. Thanks to Simon Gamma for providing a pull request for this.
  • #2341 Bugfix: Options get doubled in non validating ArgGroup when used in Mixin. Thanks to Selene Feigl for raising this.
  • #2349 Bugfix: Incorrect results when using ArgGroup + defaultValue + split + List/Set. Thanks to Mithun Josalyn Gonsalvez for raising this.
  • #2292 Bugfix: DuplicateOptionAnnotationsException on using negatable option in ArgGroup. Thanks to Bhavik Patel for raising this.
  • #2380 Bugfix: boolean with arity=0 and defaultValue=false behaved unexpectedly. Thanks to Leonard Brünings for raising this.
  • #2290 DOC: User guide, CDI 2.0 (JSR 365) section: fix example and add warning about dynamic proxies. Thanks to Mert Zeybekler for the pull request.
  • #2347 DOC: Fix line-endings in generated asciidoc HTML. Thanks to Fridrich Štrba for the pull request.
  • #2367 DOC: Fix broken link. Thanks to yeoleobun for the pull request.
  • #2370 DOC: Add at least a link to how to use the CodeGen APT under Bazel. Thanks to Michael Vorburger for the pull request.
  • #2302 DEP: Bump actions/checkout from 4.1.4 to 4.1.7
  • #2391 DEP: Bump actions/checkout from 4.1.7 to 4.2.2
  • #2388 DEP: Bump actions/setup-java from 4.2.1 to 4.7.1
  • #2390 DEP: Bump actions/upload-artifact from 4.3.3 to 4.6.2

... (truncated)

Commits
  • 5fcd441 BUILD: use JReleaser for publishing to Maven Central
  • 7f14deb Release picocli version 4.7.7
  • feae94e Bump net.ltgt.gradle:gradle-errorprone-plugin from 4.1.0 to 4.2.0
  • cacb0e7 Bump org.jetbrains.kotlin:kotlin-script-runtime from 2.0.0 to 2.1.20
  • 44de141 Bump org.jetbrains.kotlin:kotlin-gradle-plugin from 2.0.0 to 2.1.20
  • 8440061 Bump jakarta.validation:jakarta.validation-api from 3.1.0 to 3.1.1
  • f5b9590 Bump org.jline:jline from 3.26.1 to 3.29.0
  • 9d94fa6 DOC update RELEASE-NOTES for dependency updates
  • 5bfb673 Revert "Bump org.hamcrest:hamcrest-core from 2.2 to 3.0"
  • 1afa344 Bump org.hibernate.validator:hibernate-validator
  • Additional commits viewable in compare view

Updates io.grpc:protoc-gen-grpc-java from 1.71.0 to 1.72.0

Release notes

Sourced from io.grpc:protoc-gen-grpc-java's releases.

V1.72.0

API Changes

  • util: Remove deprecated method GracefulSwitchLb.switchTo() (f207be39a). It is rarely used outside of gRPC. The configuration is passed as lb policy configuration instead
  • xds: Add support for custom per-target credentials on the transport (#11951) (1958e4237)
  • xds: Explicitly set request hash key for the ring hash LB policy (892144dca)

Bug Fixes

  • core: Apply ManagedChannelImpl's updateBalancingState() immediately (ca4819ac6)
  • xds: Fix cluster selection races when updating config selector (d82613a74)
  • otel: Fix span names as per the A72 gRFC changes (#11974) (94f8e9369)
  • xds: ClusterResolverLoadBalancer handle update for both resolved addresses and errors via ResolutionResult (#11997) (868178651)

Improvements

  • netty: Avoid allocating an exception on transport shutdown. This reduces allocation rate for connection-heavy workloads/load testing (a57c14a51)
  • servlet: Set an explicit description for CANCELLED status (#11927) (fca1d3cf4)
  • xds: gRFC A74 xDS Config Tears implementation in the XdsNameResolver (e80c19745). While there is more remaining, users may already see reduced latency when resources are replaced. For example, if changing a route from one backend service to another, RPCs may see less latency during the transition
  • core: Log any exception during channel panic because of exception (3961a923a). This prevents the exception from propagating up the stack on an arbitrary thread. Such exceptions are rarely interesting. Instead, the exception that caused the channel panic is the important one, and RPCs will still fail with its details
  • util: Graceful switch to new LB when leaving CONNECTING (2e260a4bb). Previously when using xDS and the configuration changes the LB policy, the old LB policy is used until the new one is READY. Now the old LB policy is used until the new policy becomes READY, TRANSIENT_FAILURE, or IDLE
  • core: Use java.time.Time.getNano directly in InstantTimeProvider. Previously reflection was used which would confuse R8 full mode (#11977) (7507a9ec0)
  • core: Avoid cancellation exceptions when notifying watchers that already have their connections cancelled (#11934) (350f90e1a)
  • rls: allow maxAge in RLS config to exceed 5 minutes if staleAge is set. Previously, the limit was 5 minutes, which isn't enough for some gRPC clients (#11931) (c340f4a2f)
  • xds: avoid unnecessary dns lookup for CIDR addresses (#11932) (602aece08)
  • netty: Swap to UniformStreamByteDistributor (#11954) (2f52a0036). gRPC will no longer observe the HTTP/2 priorities, which were not used directly by gRPC and deprecated in RFC 9113
  • core: Avoid Set.removeAll() when passing a possibly-large List (#11994) (666136b4b)
  • stub: trailersFromThrowable() metadata should be copied (#11979) (a6e1c1f09)

New Features

  • xds: xDS-based HTTP CONNECT configuration (#11861) (12197065f)
  • netty: Per-rpc authority verification against peer cert subject names. Overriding transport authority at rpc time is only allowed when using TlsChannelCredentials. The per-rpc authority verification feature is guarded by the environment variable GRPC_ENABLE_PER_RPC_AUTHORITY_CHECK in this release. When this is false or not set, the rpc will not fail when the authority verification fails but a warning will be logged. In a subsequent release the usage of this environment variable will be removed and RPCs will start failing if the authority doesn't match the peer certificate names. The environment variable is temporary; if you are depending on the existing insecure behavior, please file an issue (#11724) (cdab410b8)

Thanks to

@​panchenko @​emmanuel-ferdman @​JoeCqupt

Commits
  • b0794e4 Bump version to 1.72.0
  • a2b642c Update README etc to reference 1.72.0
  • b4e635d stub: Utility method StreamObservers.nextAndComplete() that does both onNext ...
  • a6e1c1f stub: trailersFromThrowable() metadata should be copied (#11979) (#12008)
  • 8681786 xds: ClusterResolverLoadBalancer handle update for both resolved addresses an...
  • 666136b core: Avoid Set.removeAll() when passing a possibly-large List (#11994) (#12000)
  • 2448c8b util: Replace BUFFER_PICKER with FixedResultPicker
  • 2e260a4 util: Graceful switch to new LB when leaving CONNECTING
  • 7507a9e core: Use java.time.Time.getNano in InstantTimeProvider without reflection (#...
  • a332edd fix: cleans up FileWatcherCertificateProvider in XdsSecurityClientServerTest
  • Additional commits viewable in compare view

Updates io.grpc:grpc-stub from 1.71.0 to 1.72.0

Release notes

Sourced from io.grpc:grpc-stub's releases.

V1.72.0

API Changes

  • util: Remove deprecated method GracefulSwitchLb.switchTo() (f207be39a). It is rarely used outside of gRPC. The configuration is passed as lb policy configuration instead
  • xds: Add support for custom per-target credentials on the transport (#11951) (1958e4237)
  • xds: Explicitly set request hash key for the ring hash LB policy (892144dca)

Bug Fixes

  • core: Apply ManagedChannelImpl's updateBalancingState() immediately (ca4819ac6)
  • xds: Fix cluster selection races when updating config selector (d82613a74)
  • otel: Fix span names as per the A72 gRFC changes (#11974) (94f8e9369)
  • xds: ClusterResolverLoadBalancer handle update for both resolved addresses and errors via ResolutionResult (#11997) (868178651)

Improvements

  • netty: Avoid allocating an exception on transport shutdown. This reduces allocation rate for connection-heavy workloads/load testing (a57c14a51)
  • servlet: Set an explicit description for CANCELLED status (#11927) (fca1d3cf4)
  • xds: gRFC A74 xDS Config Tears implementation in the XdsNameResolver (e80c19745). While there is more remaining, users may already see reduced latency when resources are replaced. For example, if changing a route from one backend service to another, RPCs may see less latency during the transition
  • core: Log any exception during channel panic because of exception (3961a923a). This prevents the exception from propagating up the stack on an arbitrary thread. Such exceptions are rarely interesting. Instead, the exception that caused the channel panic is the important one, and RPCs will still fail with its details
  • util: Graceful switch to new LB when leaving CONNECTING (2e260a4bb). Previously when using xDS and the configuration changes the LB policy, the old LB policy is used until the new one is READY. Now the old LB policy is used until the new policy becomes READY, TRANSIENT_FAILURE, or IDLE
  • core: Use java.time.Time.getNano directly in InstantTimeProvider. Previously reflection was used which would confuse R8 full mode (#11977) (7507a9ec0)
  • core: Avoid cancellation exceptions when notifying watchers that already have their connections cancelled (#11934) (350f90e1a)
  • rls: allow maxAge in RLS config to exceed 5 minutes if staleAge is set. Previously, the limit was 5 minutes, which isn't enough for some gRPC clients (#11931) (c340f4a2f)
  • xds: avoid unnecessary dns lookup for CIDR addresses (#11932) (602aece08)
  • netty: Swap to UniformStreamByteDistributor (#11954) (2f52a0036). gRPC will no longer observe the HTTP/2 priorities, which were not used directly by gRPC and deprecated in RFC 9113
  • core: Avoid Set.removeAll() when passing a possibly-large List (#11994) (666136b4b)
  • stub: trailersFromThrowable() metadata should be copied (#11979) (a6e1c1f09)

New Features

  • xds: xDS-based HTTP CONNECT configuration (#11861) (12197065f)
  • netty: Per-rpc authority verification against peer cert subject names. Overriding transport authority at rpc time is only allowed when using TlsChannelCredentials. The per-rpc authority verification feature is guarded by the environment variable GRPC_ENABLE_PER_RPC_AUTHORITY_CHECK in this release. When this is false or not set, the rpc will not fail when the authority verification fails but a warning will be logged. In a subsequent release the usage of this environment variable will be removed and RPCs will start failing if the authority doesn't match the peer certificate names. The environment variable is temporary; if you are depending on the existing insecure behavior, please file an issue (#11724) (cdab410b8)

Thanks to

@​panchenko @​emmanuel-ferdman @​JoeCqupt

Commits
  • b0794e4 Bump version to 1.72.0
  • a2b642c Update README etc to reference 1.72.0
  • b4e635d stub: Utility method StreamObservers.nextAndComplete() that does both onNext ...
  • a6e1c1f stub: trailersFromThrowable() metadata should be copied (#11979) (#12008)
  • 8681786 xds: ClusterResolverLoadBalancer handle update for both resolved addresses an...
  • 666136b core: Avoid Set.removeAll() when passing a possibly-large List (#11994) (#12000)
  • 2448c8b util: Replace BUFFER_PICKER with FixedResultPicker
  • 2e260a4 util: Graceful switch to new LB when leaving CONNECTING
  • 7507a9e core: Use java.time.Time.getNano in InstantTimeProvider without reflection (#...
  • a332edd fix: cleans up FileWatcherCertificateProvider in XdsSecurityClientServerTest
  • Additional commits viewable in compare view

Updates io.grpc:grpc-netty from 1.71.0 to 1.72.0

Release notes

Sourced from io.grpc:grpc-netty's releases.

V1.72.0

API Changes

  • util: Remove deprecated method GracefulSwitchLb.switchTo() (f207be39a). It is rarely used outside of gRPC. The configuration is passed as lb policy configuration instead
  • xds: Add support for custom per-target credentials on the transport (#11951) (1958e4237)
  • xds: Explicitly set request hash key for the ring hash LB policy (892144dca)

Bug Fixes

  • core: Apply ManagedChannelImpl's updateBalancingState() immediately (ca4819ac6)
  • xds: Fix cluster selection races when updating config selector (d82613a74)
  • otel: Fix span names as per the A72 gRFC changes (#11974) (94f8e9369)
  • xds: ClusterResolverLoadBalancer handle update for both resolved addresses and errors via ResolutionResult (#11997) (868178651)

Improvements

  • netty: Avoid allocating an exception on transport shutdown. This reduces allocation rate for connection-heavy workloads/load testing (a57c14a51)
  • servlet: Set an explicit description for CANCELLED status (#11927) (fca1d3cf4)
  • xds: gRFC A74 xDS Config Tears implementation in the XdsNameResolver (e80c19745). While there is more remaining, users may already see reduced latency when resources are replaced. For example, if changing a route from one backend service to another, RPCs may see less latency during the transition
  • core: Log any exception during channel panic because of exception (3961a923a). This prevents the exception from propagating up the stack on an arbitrary thread. Such exceptions are rarely interesting. Instead, the exception that caused the channel panic is the important one, and RPCs will still fail with its details
  • util: Graceful switch to new LB when leaving CONNECTING (2e260a4bb). Previously when using xDS and the configuration changes the LB policy, the old LB policy is used until the new one is READY. Now the old LB policy is used until the new policy becomes READY, TRANSIENT_FAILURE, or IDLE
  • core: Use java.time.Time.getNano directly in InstantTimeProvider. Previously reflection was used which would confuse R8 full mode (#11977) (7507a9ec0)
  • core: Avoid cancellation exceptions when notifying watchers that already have their connections cancelled (#11934) (350f90e1a)
  • rls: allow maxAge in RLS config to exceed 5 minutes if staleAge is set. Previously, the limit was 5 minutes, which isn't enough for some gRPC clients (#11931) (c340f4a2f)
  • xds: avoid unnecessary dns lookup for CIDR addresses (#11932) (602aece08)
  • netty: Swap to UniformStreamByteDistributor (#11954) (2f52a0036). gRPC will no longer observe the HTTP/2 priorities, which were not used directly by gRPC and deprecated in RFC 9113
  • core: Avoid Set.removeAll() when passing a possibly-large List (#11994) (666136b4b)
  • stub: trailersFromThrowable() metadata should be copied (#11979) (a6e1c1f09)

New Features

  • xds: xDS-based HTTP CONNECT configuration (#11861) (12197065f)
  • netty: Per-rpc authority verification against peer cert subject names. Overriding transport authority at rpc time is only allowed when using TlsChannelCredentials. The per-rpc authority verification feature is guarded by the environment variable GRPC_ENABLE_PER_RPC_AUTHORITY_CHECK in this release. When this is false or not set, the rpc will not fail when the authority verification fails but a warning will be logged. In a subsequent release the usage of this environment variable will be removed and RPCs will start failing if the authority doesn't match the peer certificate names. The environment variable is temporary; if you are depending on the existing insecure behavior, please file an issue (#11724) (cdab410b8)

Thanks to

@​panchenko @​emmanuel-ferdman @​JoeCqupt

Commits
  • b0794e4 Bump version to 1.72.0
  • a2b642c Update README etc to reference 1.72.0
  • b4e635d stub: Utility method StreamObservers.nextAndComplete() that does both onNext ...
  • a6e1c1f stub: trailersFromThrowable() metadata should be copied (#11979) (#12008)
  • 8681786 xds: ClusterResolverLoadBalancer handle update for both resolved addresses an...
  • 666136b core: Avoid Set.removeAll() when passing a possibly-large List (#11994) (#12000)
  • 2448c8b util: Replace BUFFER_PICKER with FixedResultPicker
  • 2e260a4 util: Graceful switch to new LB when leaving CONNECTING
  • 7507a9e core: Use java.time.Time.getNano in InstantTimeProvider without reflection (#...
  • a332edd fix: cleans up FileWatcherCertificateProvider in XdsSecurityClientServerTest
  • Additional commits viewable in compare view

Updates io.grpc:grpc-protobuf from 1.71.0 to 1.72.0

Release notes

Sourced from io.grpc:grpc-protobuf's releases.

V1.72.0

API Changes

  • util: Remove deprecated method GracefulSwitchLb.switchTo() (f207be39a). It is rarely used outside of gRPC. The configuration is passed as lb policy configuration instead
  • xds: Add support for custom per-target credentials on the transport (#11951) (1958e4237)
  • xds: Explicitly set request hash key for the ring hash LB policy (892144dca)

Bug Fixes

  • core: Apply ManagedChannelImpl's updateBalancingState() immediately (ca4819ac6)
  • xds: Fix cluster selection races when updating config selector (d82613a74)
  • otel: Fix span names as per the A72 gRFC changes (#11974) (94f8e9369)
  • xds: ClusterResolverLoadBalancer handle update for both resolved addresses and errors via ResolutionResult (#11997) (868178651)

Improvements

  • netty: Avoid allocating an exception on transport shutdown. This reduces allocation rate for connection-heavy workloads/load testing (a57c14a51)
  • servlet: Set an explicit description for CANCELLED status (#11927) (fca1d3cf4)
  • xds: gRFC A74 xDS Config Tears implementation in the XdsNameResolver (e80c19745). While there is more remaining, users may already see reduced latency when resources are replaced. For example, if changing a route from one backend service to another, RPCs may see less latency during the transition
  • core: Log any exception during channel panic because of exception (3961a923a). This prevents the exception from propagating up the stack on an arbitrary thread. Such exceptions are rarely interesting. Instead, the exception that caused the channel panic is the important one, and RPCs will still fail with its details
  • util: Graceful switch to new LB when leaving CONNECTING (2e260a4bb). Previously when using xDS and the configuration changes the LB policy, the old LB policy is used until the new one is READY. Now the old LB policy is used until the new policy becomes READY, TRANSIENT_FAILURE, or IDLE
  • core: Use java.time.Time.getNano directly in InstantTimeProvider. Previously reflection was used which would confuse R8 full mode (#11977) (7507a9ec0)
  • core: Avoid cancellation exceptions when notifying watchers that already have their connections cancelled (#11934) (350f90e1a)
  • rls: allow maxAge in RLS config to exceed 5 minutes if staleAge is set. Previously, the limit was 5 minutes, which isn't enough for some gRPC clients (#11931) (c340f4a2f)
  • xds: avoid unnecessary dns lookup for CIDR addresses (#11932) (602aece08)
  • netty: Swap to UniformStreamByteDistributor (#11954) (2f52a0036). gRPC will no longer observe the HTTP/2 priorities, which were not used directly by gRPC and deprecated in RFC 9113
  • core: Avoid Set.removeAll() when passing a possibly-large List (#11994) (666136b4b)
  • stub: trailersFromThrowable() metadata should be copied (#11979) (a6e1c1f09)

New Features

  • xds: xDS-based HTTP CONNECT configuration (#11861) (12197065f)
  • netty: Per-rpc authority verification against peer cert subject names. Overriding transport authority at rpc time is only allowed when using TlsChannelCredentials. The per-rpc authority verification feature is guarded by the environment variable GRPC_ENABLE_PER_RPC_AUTHORITY_CHECK in this release. When this is false or not set, the rpc will not fail when the authority verification fails but a warning will be logged. In a subsequent release the usage of this environment variable will be removed and RPCs will start failing if the authority doesn't match the peer certificate names. The environment variable is temporary; if you are depending on the existing insecure behavior, please file an issue (#11724) (cdab410b8)

Thanks to

@​panchenko @​emmanuel-ferdman @​JoeCqupt

Commits
  • b0794e4 Bump version to 1.72.0
  • a2b642c Update README etc to reference 1.72.0
  • b4e635d stub: Utility method StreamObservers.nextAndComplete() that does both onNext ...
  • a6e1c1f stub: trailersFromThrowable() metadata should be copied (#11979) (#12008)
  • 8681786 xds: ClusterResolverLoadBalancer handle update for both resolved addresses an...
  • 666136b core: Avoid Set.removeAll() when passing a possibly-large List (#11994) (#12000)
  • 2448c8b util: Replace BUFFER_PICKER with FixedResultPicker
  • 2e260a4 util: Graceful switch to new LB when leaving CONNECTING
  • 7507a9e core: Use java.time.Time.getNano in InstantTimeProvider without reflection (#...
  • a332edd fix: cleans up FileWatcherCertificateProvider in XdsSecurityClientServerTest
  • Additional commits viewable in compare view

Updates io.grpc:grpc-services from 1.71.0 to 1.72.0

Release notes

Sourced from io.grpc:grpc-services's releases.

V1.72.0

API Changes

  • util: Remove deprecated method GracefulSwitchLb.switchTo() (f207be39a). It is rarely used outside of gRPC. The configuration is passed as lb policy configuration instead
  • xds: Add support for custom per-target credentials on the transport (#11951) (1958e4237)
  • xds: Explicitly set request hash key for the ring hash LB policy (892144dca)

Bug Fixes

  • core: Apply ManagedChannelImpl's updateBalancingState() immediately (ca4819ac6)
  • xds: Fix cluster selection races when updating config selector (d82613a74)
  • otel: Fix span names as per the A72 gRFC changes (#11974) (94f8e9369)
  • xds: ClusterResolverLoadBalancer handle update for both resolved addresses and errors via ResolutionResult (#11997) (868178651)

Improvements

  • netty: Avoid allocating an exception on transport shutdown. This reduces allocation rate for connection-heavy workloads/load testing (a57c14a51)
  • servlet: Set an explicit description for CANCELLED status (#11927) (fca1d3cf4)
  • xds: gRFC A74 xDS Config Tears implementation in the XdsNameResolver (e80c19745). While there is more remaining, users may already see reduced latency when resources are replaced. For example, if changing a route from one backend service to another, RPCs may see less latency during the transition
  • core: Log any exception during channel panic because of exception (3961a923a). This prevents the exception from propagating up the stack on an arbitrary thread. Such exceptions are rarely interesting. Instead, the exception that caused the channel panic is the important one, and RPCs will still fail with its details
  • util: Graceful switch to new LB when leaving CONNECTING (2e260a4bb). Previously when using xDS and the configuration changes the LB policy, the old LB policy is used until the new one is READY. Now the old LB policy is used until the new policy becomes READY, TRANSIENT_FAILURE, or IDLE
  • core: Use java.time.Time.getNano directly in InstantTimeProvider. Previously reflection was used which would confuse R8 full mode (#11977) (7507a9ec0)
  • core: Avoid cancellation exceptions when notifying watchers that already have their connections cancelled (#11934) (350f90e1a)
  • rls: allow maxAge in RLS config to exceed 5 minutes if staleAge is set. Previously, the limit was 5 minutes, which isn't enough for some gRPC clients (#11931) (c340f4a2f)
  • xds: avoid unnecessary dns lookup for CIDR addresses (#11932) (602aece08)
  • netty: Swap to UniformStreamByteDistributor (#11954) (2f52a0036). gRPC will no longer observe the HTTP/2 priorities, which were not used directly by gRPC and deprecated in RFC 9113
  • core: Avoid Set.removeAll() when passing a possibly-large List (#11994) (666136b4b)
  • stub: trailersFromThrowable() metadata should be copied (#11979) (a6e1c1f09)

New Features

  • xds: xDS-based HTTP CONNECT configuration (#11861) (12197065f)
  • netty: Per-rpc authority verification against peer cert subject names. Overriding transport authority at rpc time is only allowed when using TlsChannelCredentials. The per-rpc authority verification feature is guarded by the environment variable GRPC_ENABLE_PER_RPC_AUTHORITY_CHECK in this release. When this is false or not set, the rpc will not fail when the authority verification fails but a warning will be logged. In a subsequent release the usage of this environment variable will be removed and RPCs will start failing if the authority doesn't match the peer certificate names. The environment variable is temporary; if you are depending on the existing insecure behavior, please file an issue (#11724) (cdab410b8)

Thanks to

@​panchenko @​emmanuel-ferdman @​JoeCqupt

Commits
  • b0794e4 Bump version to 1.72.0
  • a2b642c Update README etc to reference 1.72.0
  • b4e635d stub: Utility method StreamObservers.nextAndComplete() that does both onNext ...
  • a6e1c1f stub: trailersFromThrowable() metadata should be copied (#11979) (#12008)
  • 8681786 xds: ClusterResolverLoadBalancer handle update for both resolved addresses an...
  • 666136b core: Avoid Set.removeAll() when passing a possibly-large List (#11994) (#12000)
  • 2448c8b util: Replace BUFFER_PICKER with FixedResultPicker
  • 2e260a4 util: Graceful switch to new LB when leaving CONNECTING
  • 7507a9e core: Use java.time.Time.getNano in InstantTimeProvider without reflection (#...
  • a332edd fix: cleans up FileWatcherCertificateProvider in XdsSecurityClientServerTest
  • Additional commits viewable in compare view

Updates io.grpc:grpc-stub from 1.71.0 to 1.72.0

Release notes

Sourced from io.grpc:grpc-stub's releases.

V1.72.0

API Changes

  • util: Remove deprecated method GracefulSwitchLb.switchTo() (f207be39a). It is rarely used outside of gRPC. The configuration is passed as lb policy configuration instead
  • xds: Add support for custom per-target credentials on the transport (#11951) (1958e4237)
  • xds: Explicitly set request hash key for the ring hash LB policy (892144dca)

Bug Fixes

  • core: Apply ManagedChannelImpl's updateBalancingState() immediately (ca4819ac6)
  • xds: Fix cluster selection races when updating config selector (d82613a74)
  • otel: Fix span names as per the A72 gRFC changes (#11974) (94f8e9369)
  • xds: ClusterResolverLoadBalancer handle update for both resolved addresses and errors via ResolutionResult (#11997) (868178651)

Improvements

  • netty: Avoid allocating an exception on transport shutdown. This reduces allocation rate for connection-heavy workloads/load testing (a57c14a51)
  • servlet: Set an explicit description for CANCELLED status (#11927) (fca1d3cf4)
  • xds: gRFC A74 xDS Config Tears implementation in the XdsNameResolver (e80c19745). While there is more remaining, users may already see reduced latency when resources are replaced. For example, if changing a route from one backend service to another, RPCs may see less latency during the transition
  • core: Log any exception during channel panic because of exception (3961a923a). This prevents the exception from propagating up the stack on an arbitrary thread. Such exceptions are rarely interesting. Instead, the exception that caused the channel panic is the important one, and RPCs will still fail with its details
  • util: Graceful switch to new LB when leaving CONNECTING (2e260a4bb). Previously when using xDS and the configuration changes the LB policy, the old LB policy is used until the new one is READY. Now the old LB policy is used until the new policy becomes READY, TRANSIENT_FAILURE, or IDLE
  • core: Use java.time.Time.getNano directly in InstantTimeProvider. Previously reflection was used which would confuse R8 full mode (#11977) (7507a9ec0)
  • core: Avoid cancellation exceptions when notifying watchers that already have their connections cancelled (#11934) (350f90e1a)
  • rls: allow maxAge in RLS config to exceed 5 minutes if staleAge is set. Previously, the limit was 5 minutes, which isn't enough for some gRPC clients (#11931) (c340f4a2f)
  • xds: avoid unnecessary dns lookup for CIDR addresses (#11932) (602aece08)
  • netty: Swap to UniformStreamByteDistributor (#11954) (2f52a0036). gRPC will no longer observe the HTTP/2 priorities, which were not used directly by gRPC and deprecated in RFC 9113
  • core: Avoid Set.removeAll() when passing a possibly-large List (#11994) (666136b4b)
  • stub: trailersFromThrowable() metadata should be copied (#11979) (a6e1c1f09)

New Features

  • xds: xDS-based HTTP CONNECT configuration (#11861) (12197065f)
  • netty: Per-rpc authority verification against peer cert subject names. Overriding transport authority at rpc time is only allowed when using TlsChannelCredentials. The per-rpc authority verification feature is guarded by the environment variable GRPC_ENABLE_PER_RPC_AUTHORITY_CHECK in this release. When this is false or not set, the rpc will not fail when the authority verification fails but a warning will be logged. In a subsequent release the usage of this environment variable will be removed and RPCs will start failing if the authority doesn't match the peer certificate names. The environment variable is temporary; if you are depending on the existing insecure behavior, please file an issue (#11724) (cdab410b8)

Thanks to

@​panchenko @​emmanuel-ferdman @​JoeCqupt

Commits
  • b0794e4 Bump version to 1.72.0
  • a2b642c Update README etc to reference 1.72.0
  • b4e635d stub: Utility method StreamObservers.nextAndComplete() that does both onNext ...
  • a6e1c1f stub: trailersFromThrowable() metadata should be copied (#11979) (#12008)
  • 8681786 xds: ClusterResolverLoadBalancer handle update for both resolved addresses an...
  • 666136b core: Avoid Set.removeAll() when passing a possibly-large List (#11994) (#12000)
  • 2448c8b util: Replace BUFFER_PICKER with FixedResultPicker
  • 2e260a4 util: Graceful switch to new LB when leaving CONNECTING
  • 7507a9e core: Use java.time.Time.getNano in InstantTimeProvider without reflection (#...
  • a332edd fix: cleans up FileWatcherCertificateProvider in XdsSecurityClientServerTest
  • Additional commits viewable in compare view

Updates io.grpc:grpc-netty from 1.71.0 to 1.72.0

Release notes

Sourced from io.grpc:grpc-netty's releases.

V1.72.0

API Changes

  • util: Remove deprecated method GracefulSwitchLb.switchTo() (f207be39a). It is rarely used outside of gRPC. The configuration is passed as lb policy configuration instead
  • xds: Add support for custom per-target credentials on the transport (#11951) (1958e4237)
  • xds: Explicitly set request hash key for the ring hash LB policy (892144dca)

Bug Fixes

  • core: Apply ManagedChannelImpl's updateBalancingState() immediately (ca4819ac6)
  • xds: Fix cluster selection races when updating config selector (d82613a74)
  • otel: Fix span names as per the A72 gRFC changes (#11974) (94f8e9369)
  • xds: ClusterResolverLoadBalancer handle update for both resolved addresses and errors via ResolutionResult (#11997) (868178651)

Improvements

  • netty: Avoid allocating an exception on transport shutdown. This reduces allocation rate for connection-heavy workloads/load testing (a57c14a51)
  • servlet: Set an explicit description for CANCELLED status (#11927) (fca1d3cf4)
  • xds: gRFC A74 xDS Config Tears implementation in the XdsNameResolver (e80c19745). While there is more remaining, users may already see reduced latency when resources are replaced. For example, if changing a route from one backend service to another, RPCs may see less latency during the transition
  • core: Log any exception during channel panic because of exception (3961a923a). This prevents the exception from propagating up the stack on an arbitrary thread. Such exceptions are rarely interesting. Instead, the excepti...

    Description has been truncated

@dependabot
Bump the dependencies group with 6 updates
bd0eeac 
Bumps the dependencies group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [info.picocli:picocli](https://github.com/remkop/picocli) | `4.7.6` | `4.7.7` |
| [io.grpc:protoc-gen-grpc-java](https://github.com/grpc/grpc-java) | `1.71.0` | `1.72.0` |
| [io.grpc:grpc-stub](https://github.com/grpc/grpc-java) | `1.71.0` | `1.72.0` |
| [io.grpc:grpc-netty](https://github.com/grpc/grpc-java) | `1.71.0` | `1.72.0` |
| [io.grpc:grpc-protobuf](https://github.com/grpc/grpc-java) | `1.71.0` | `1.72.0` |
| [io.grpc:grpc-services](https://github.com/grpc/grpc-java) | `1.71.0` | `1.72.0` |


Updates `info.picocli:picocli` from 4.7.6 to 4.7.7
- [Release notes](https://github.com/remkop/picocli/releases)
- [Changelog](https://github.com/remkop/picocli/blob/main/RELEASE-NOTES.md)
- [Commits](remkop/picocli@v4.7.6...v4.7.7)

Updates `io.grpc:protoc-gen-grpc-java` from 1.71.0 to 1.72.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.71.0...v1.72.0)

Updates `io.grpc:grpc-stub` from 1.71.0 to 1.72.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.71.0...v1.72.0)

Updates `io.grpc:grpc-netty` from 1.71.0 to 1.72.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.71.0...v1.72.0)

Updates `io.grpc:grpc-protobuf` from 1.71.0 to 1.72.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.71.0...v1.72.0)

Updates `io.grpc:grpc-services` from 1.71.0 to 1.72.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.71.0...v1.72.0)

Updates `io.grpc:grpc-stub` from 1.71.0 to 1.72.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.71.0...v1.72.0)

Updates `io.grpc:grpc-netty` from 1.71.0 to 1.72.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.71.0...v1.72.0)

Updates `io.grpc:grpc-protobuf` from 1.71.0 to 1.72.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.71.0...v1.72.0)

Updates `io.grpc:grpc-services` from 1.71.0 to 1.72.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.71.0...v1.72.0)

---
updated-dependencies:
- dependency-name: info.picocli:picocli
  dependency-version: 4.7.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.grpc:protoc-gen-grpc-java
  dependency-version: 1.72.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.grpc:grpc-stub
  dependency-version: 1.72.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.grpc:grpc-netty
  dependency-version: 1.72.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.grpc:grpc-protobuf
  dependency-version: 1.72.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.grpc:grpc-services
  dependency-version: 1.72.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.grpc:grpc-stub
  dependency-version: 1.72.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.grpc:grpc-netty
  dependency-version: 1.72.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.grpc:grpc-protobuf
  dependency-version: 1.72.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.grpc:grpc-services
  dependency-version: 1.72.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested review from a team, choplin, feeblefakie, supl and jnmt and removed request for a team April 21, 2025 05:33
@dependabot dependabot bot added dependencies java Pull requests that update Java code labels Apr 21, 2025
@jnmt jnmt added improvement and removed java Pull requests that update Java code labels Apr 22, 2025
@jnmt jnmt merged commit 999eb14 into master Apr 22, 2025
5 checks passed
@dependabot dependabot bot deleted the dependabot/gradle/dependencies-d241e5394a branch April 22, 2025 00:56
feeblefakie pushed a commit that referenced this pull request Apr 22, 2025
@dependabot
Bump the dependencies group with 6 updates (#125)
d519c41 
Bumps the dependencies group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [info.picocli:picocli](https://github.com/remkop/picocli) | `4.7.6` | `4.7.7` |
| [io.grpc:protoc-gen-grpc-java](https://github.com/grpc/grpc-java) | `1.71.0` | `1.72.0` |
| [io.grpc:grpc-stub](https://github.com/grpc/grpc-java) | `1.71.0` | `1.72.0` |
| [io.grpc:grpc-netty](https://github.com/grpc/grpc-java) | `1.71.0` | `1.72.0` |
| [io.grpc:grpc-protobuf](https://github.com/grpc/grpc-java) | `1.71.0` | `1.72.0` |
| [io.grpc:grpc-services](https://github.com/grpc/grpc-java) | `1.71.0` | `1.72.0` |


Updates `info.picocli:picocli` from 4.7.6 to 4.7.7
- [Release notes](https://github.com/remkop/picocli/releases)
- [Changelog](https://github.com/remkop/picocli/blob/main/RELEASE-NOTES.md)
- [Commits](remkop/picocli@v4.7.6...v4.7.7)

Updates `io.grpc:protoc-gen-grpc-java` from 1.71.0 to 1.72.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.71.0...v1.72.0)

Updates `io.grpc:grpc-stub` from 1.71.0 to 1.72.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.71.0...v1.72.0)

Updates `io.grpc:grpc-netty` from 1.71.0 to 1.72.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.71.0...v1.72.0)

Updates `io.grpc:grpc-protobuf` from 1.71.0 to 1.72.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.71.0...v1.72.0)

Updates `io.grpc:grpc-services` from 1.71.0 to 1.72.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.71.0...v1.72.0)

Updates `io.grpc:grpc-stub` from 1.71.0 to 1.72.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.71.0...v1.72.0)

Updates `io.grpc:grpc-netty` from 1.71.0 to 1.72.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.71.0...v1.72.0)

Updates `io.grpc:grpc-protobuf` from 1.71.0 to 1.72.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.71.0...v1.72.0)

Updates `io.grpc:grpc-services` from 1.71.0 to 1.72.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.71.0...v1.72.0)

---
updated-dependencies:
- dependency-name: info.picocli:picocli
  dependency-version: 4.7.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.grpc:protoc-gen-grpc-java
  dependency-version: 1.72.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.grpc:grpc-stub
  dependency-version: 1.72.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.grpc:grpc-netty
  dependency-version: 1.72.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.grpc:grpc-protobuf
  dependency-version: 1.72.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.grpc:grpc-services
  dependency-version: 1.72.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.grpc:grpc-stub
  dependency-version: 1.72.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.grpc:grpc-netty
  dependency-version: 1.72.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.grpc:grpc-protobuf
  dependency-version: 1.72.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.grpc:grpc-services
  dependency-version: 1.72.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@feeblefakie feeblefakie mentioned this pull request Apr 22, 2025
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@choplin choplin choplin approved these changes

@jnmt jnmt jnmt approved these changes

@feeblefakie feeblefakie Awaiting requested review from feeblefakie feeblefakie was automatically assigned from scalar-labs/scalardl

@supl supl Awaiting requested review from supl supl was automatically assigned from scalar-labs/scalardl

Assignees
No one assigned
Labels
dependencies improvement
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@choplin @jnmt