Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 23, 2021

Bumps grpc-core from 1.40.1 to 1.41.0.

Release notes

Sourced from grpc-core's releases.

v1.41.0

API Changes

  • stub: Mark Stub-based MetadataUtils methods deprecated (#8395). The interceptor-based versions have been stable for a long time and are preferred

Bug Fixes

  • census: Fixed a data race in CensusStatsModule which in rare cases may cause NullPointerException (#8459)
  • xds: Fixed a bug in SharedCallCounterMap which in rare cases may cause NullPointerException (#8397)
  • core: ServerCall.isCancelled() and ServerCallStreamObserver.isCancelled() implementations no longer incorrectly return true at the end of every RPC (#8408)
  • core: ManagedChannel no longer immediately exits idle mode after an enterIdle() call when it has any calls in progress
  • netty-shaded: Modify the shading operation to transform native-image resources so they correctly reference shaded class names (#7540)
  • netty-shaded: Rename native-image resources to avoid collisions with Netty’s copy, which were modified starting in 1.39.0
  • rls: avoid NullPointerException in RLS in certain circumstances when calling channel.getState(true) or if a parent load balancer requests a connection (#8379)

New Features

  • xds: xDS-based TLS security (gRFC 29) is now stable
  • util: Added new classes AdvancedTlsX509TrustManager and AdvancedTlsX509KeyManager, which support reloading keys and trust roots as they change. They also can make custom verification easier by handling the hostname verification. (#8175)
  • xds: Added XdsNameResolverProvider.createForTest() to allow using a different bootstrap configuration in tests (#8358)

Behavior Changes

  • rls: migrated the deprecated server and path fields in RouteLookupRequest to using the new extra_keys field in RLS config

Improvements

  • api: Document that NameResolvers shouldn’t block within their methods (#8398). The offload executor should be used for blocking operations
  • stub: Document StreamObserver is an async API, and how it internally may buffer (#8449)

Dependencies

  • Upgraded error_prone_annotations to 2.9.0
  • cronet: Cronet upgraded to version 92.4515.131
Commits
  • d291594 Bump version to 1.41.0
  • 227961e Update README etc to reference 1.41.0
  • 6951048 xds: disable rbac by default (#8541)
  • 733ab98 xds: implement RBAC gRFC misc cases (1.41.x backport) (#8540)
  • 0b8b33d xds, rbac: build per route serverInterceptor for httpConfig (#8524) (#8539)
  • 4d5a19c xds: Drain old server connections on Listener updates
  • 8b6e0e5 netty: Allow protocol negotiators to shut down transport, with grace period
  • cc7c55e xds: The xdsClient uses equals() for duplicate detection/suppression so a pro...
  • 0741c4e xds: apply valid resources while NACKing update (#8506)
  • dbf9202 xds: populate envoy RetryPolicy with no retryOn to resolver (#8511)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will merge this PR once CI passes on it, as requested by @joakime.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [grpc-core](https://github.com/grpc/grpc-java) from 1.40.1 to 1.41.0.
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.40.1...v1.41.0)

---
updated-dependencies:
- dependency-name: io.grpc:grpc-core
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Sep 23, 2021
@dependabot dependabot bot added this to the 9.4.x milestone Sep 23, 2021
Copy link
Contributor

@joakime joakime left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@dependabot merge

@dependabot dependabot bot merged commit 7791a92 into jetty-9.4.x Sep 23, 2021
@dependabot dependabot bot deleted the dependabot/maven/jetty-9.4.x/io.grpc-grpc-core-1.41.0 branch September 23, 2021 10:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant