Skip to content

Bump google.golang.org/grpc from 1.55.0 to 1.58.3 #2159

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 11, 2023

Bumps google.golang.org/grpc from 1.55.0 to 1.58.3.

Release notes

Sourced from google.golang.org/grpc's releases.

Release v1.58.3

Security

  • server: prohibit more than MaxConcurrentStreams handlers from running at once (CVE-2023-44487)

    In addition to this change, applications should ensure they do not leave running tasks behind related to the RPC before returning from method handlers, or should enforce appropriate limits on any such work.

Release 1.58.2

Bug Fixes

  • balancer/weighted_round_robin: fix ticker leak on update

    A new ticker is created every time there is an update of addresses or configuration, but was not properly stopped. This change stops the ticker when it is no longer needed.

Release 1.58.1

Bug Fixes

  • grpc: fix a bug that was decrementing active RPC count too early for streaming RPCs; leading to channel moving to IDLE even though it had open streams
  • grpc: fix a bug where transports were not being closed upon channel entering IDLE

Release 1.58.0

API Changes

See #6472 for details about these changes.

  • balancer: add StateListener to NewSubConnOptions for SubConn state updates and deprecate Balancer.UpdateSubConnState (#6481)
    • UpdateSubConnState will be deleted in the future.
  • balancer: add SubConn.Shutdown and deprecate Balancer.RemoveSubConn (#6493)
    • RemoveSubConn will be deleted in the future.
  • resolver: remove deprecated AddressType (#6451)
    • This was previously used as a signal to enable the "grpclb" load balancing policy, and to pass LB addresses to the policy. Instead, balancer/grpclb/state.Set() should be used to add these addresses to the name resolver's output. The built-in "dns" name resolver already does this.
  • resolver: add new field Endpoints to State and deprecate Addresses (#6471)
    • Addresses will be deleted in the future.

New Features

  • balancer/leastrequest: Add experimental support for least request LB policy and least request configured as a custom xDS policy (#6510, #6517)
    • Set GRPC_EXPERIMENTAL_ENABLE_LEAST_REQUEST=true to enable
  • stats: Add an RPC event for blocking caused by the LB policy's picker (#6422)

Bug Fixes

  • clusterresolver: fix deadlock when dns resolver responds inline with update or error at build time (#6563)
  • grpc: fix a bug where the channel could erroneously report TRANSIENT_FAILURE when actually moving to IDLE (#6497)
  • balancergroup: do not cache closed sub-balancers by default; affects rls, weightedtarget and clustermanager LB policies (#6523)
  • client: fix a bug that prevented detection of RPC status in trailers-only RPC responses when using ClientStream.Header(), and prevented retry of the RPC (#6557)

Performance Improvements

  • client & server: Add experimental [With]SharedWriteBuffer to improve performance by reducing allocations when sending RPC messages. (Disabled by default.) (#6309)

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.55.0 to 1.58.3.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.55.0...v1.58.3)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from StephenButtolph as a code owner October 11, 2023 02:45
@dependabot dependabot bot added the dependencies This primarily focuses on changing a dependency label Oct 11, 2023
@dependabot dependabot bot requested review from gyuho and hexfusion October 11, 2023 02:45
@StephenButtolph StephenButtolph changed the base branch from master to dev October 12, 2023 23:46
@StephenButtolph StephenButtolph added this to the v1.10.13 milestone Oct 13, 2023
@StephenButtolph StephenButtolph added this pull request to the merge queue Oct 13, 2023
Merged via the queue into dev with commit 007f98d Oct 13, 2023
@StephenButtolph StephenButtolph deleted the dependabot/go_modules/google.golang.org/grpc-1.58.3 branch October 13, 2023 05:57
joshua-kim added a commit that referenced this pull request Oct 17, 2023
commit 188f2b2
Author: David Boehm <91908103+dboehm-avalabs@users.noreply.github.com>
Date:   Mon Oct 16 13:10:00 2023 -0400

    MerkleDB Reduce buffer creation/memcopy on path construction (#2124)

    Co-authored-by: Dan Laine <daniel.laine@avalabs.org>

commit 9d44ec2
Author: Alberto Benegiamo <alberto.benegiamo@gmail.com>
Date:   Mon Oct 16 08:53:59 2023 -0700

    Validator Diffs: docs and UTs cleanup (#2037)

    Co-authored-by: Stephen Buttolph <stephen@avalabs.org>

commit 50f131e
Author: Patrick O'Grady <prohb125@gmail.com>
Date:   Thu Oct 12 23:04:02 2023 -0700

    [x/merkledb] `Prefetcher` interface (#2167)

commit 007f98d
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date:   Thu Oct 12 22:33:23 2023 -0700

    Bump google.golang.org/grpc from 1.55.0 to 1.58.3 (#2159)

    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    Co-authored-by: Stephen Buttolph <stephen@avalabs.org>

commit 8d2c4f2
Author: Stephen Buttolph <stephen@avalabs.org>
Date:   Thu Oct 12 19:44:04 2023 -0400

    Use set.Of rather than set.Add (#2164)

commit 9da2e62
Author: Stephen Buttolph <stephen@avalabs.org>
Date:   Thu Oct 12 17:41:27 2023 -0400

    Remove context lock from API VM interface (#2165)

commit 9dbf82a
Author: Stephen Buttolph <stephen@avalabs.org>
Date:   Wed Oct 11 19:48:54 2023 -0400

    Remove write lock option from the avm rpc API (#2156)

commit 2eb6e84
Author: Stephen Buttolph <stephen@avalabs.org>
Date:   Wed Oct 11 19:39:44 2023 -0400

    Remove write lock option from the platformvm API (#2157)

commit 9725095
Author: Dhruba Basu <7675102+dhrubabasu@users.noreply.github.com>
Date:   Wed Oct 11 14:12:29 2023 -0700

    Remove aliasing of `math` standard lib (#2163)

commit 18fbdef
Author: Stephen Buttolph <stephen@avalabs.org>
Date:   Wed Oct 11 16:57:11 2023 -0400

    Remove lock options from the admin API (#2150)

commit aae7260
Author: Stephen Buttolph <stephen@avalabs.org>
Date:   Wed Oct 11 16:56:13 2023 -0400

    Remove lock options from the IPCs api (#2151)

commit 8247f74
Author: Stephen Buttolph <stephen@avalabs.org>
Date:   Wed Oct 11 16:56:05 2023 -0400

    Remove write lock option from the xsvm API (#2152)

commit 1bc63d4
Author: Dhruba Basu <7675102+dhrubabasu@users.noreply.github.com>
Date:   Wed Oct 11 16:34:12 2023 -0400

    Rename `removeSubnetValidatorValidation` to `verifyRemoveSubnetValidatorTx` (#2162)

commit 99fc926
Author: Stephen Buttolph <stephen@avalabs.org>
Date:   Wed Oct 11 12:39:01 2023 -0400

    Fix json marshalling of Sets (#2161)

commit 0f95f13
Author: Stephen Buttolph <stephen@avalabs.org>
Date:   Wed Oct 11 11:37:57 2023 -0400

    Remove write lock option from the avm wallet API (#2155)

commit e6dab5d
Author: Stephen Buttolph <stephen@avalabs.org>
Date:   Wed Oct 11 11:30:41 2023 -0400

    Remove write lock option from the avm static API (#2154)

commit 7f61fee
Author: Stephen Buttolph <stephen@avalabs.org>
Date:   Tue Oct 10 23:17:17 2023 -0400

    Remove lock options from the info api (#2149)

commit c50ea11
Author: Stephen Buttolph <stephen@avalabs.org>
Date:   Tue Oct 10 23:13:19 2023 -0400

    Marshal blocks and transactions inside API calls (#2153)

commit 0ac1937
Author: kyoshisuki <143475866+kyoshisuki@users.noreply.github.com>
Date:   Tue Oct 10 20:12:25 2023 -0700

    Fix typo in block formation logic documentation (#2158)

commit 145dfb0
Author: Stephen Buttolph <stephen@avalabs.org>
Date:   Tue Oct 10 22:18:27 2023 -0400

    Update versions for v1.10.12 (#2139)

commit 6d53e51
Author: Stephen Buttolph <stephen@avalabs.org>
Date:   Fri Oct 6 18:08:15 2023 -0400

    Split Alpha into AlphaPreference and AlphaConfidence (#2125)

commit 1fc8973
Author: Stephen Buttolph <stephen@avalabs.org>
Date:   Thu Oct 5 17:50:20 2023 -0400

    Add additional payload.Hash examples (#2145)

    Signed-off-by: Stephen Buttolph <stephen@avalabs.org>
    Co-authored-by: Dhruba Basu <7675102+dhrubabasu@users.noreply.github.com>

Signed-off-by: Joshua Kim <20001595+joshua-kim@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies This primarily focuses on changing a dependency
Projects
No open projects
Archived in project
Development

Successfully merging this pull request may close these issues.

2 participants