Skip to content

Bump grpcVersion from 1.68.0 to 1.71.0 #5189

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Bump grpcVersion from 1.68.0 to 1.71.0 #5189

wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Apr 1, 2025

Bumps grpcVersion from 1.68.0 to 1.71.0.
Updates io.grpc:grpc-core from 1.68.0 to 1.71.0

Release notes

Sourced from io.grpc:grpc-core's releases.

V1.71.0

API Changes

  • xds: Enable Xds Client Fallback by default. This allows having a backup xDS server as described in gRFC A71-xds-fallback.md (#11817) (176f3eed1)
  • protobuf: Experimental API marshallerWithRecursionLimit in ProtoUtils is now stabilized (#11884) (90b1c4fe9)

Bug Fixes

  • xds: Cluster weights should be uint32 (199a7ea3e). They were previously processed as int32, although the sum of weights was checked to be positive. So this would have caused a very large weight to never be selected and to reduce the chances of immediately-following clusters to be selected. There have been no reports of control planes using such large weights
  • xds: Fix an unlikely infinite loop triggered by route update (199a7ea3e). Triggering required the old cluster to no longer be used, an RPC processing when the update arrived, and for a RPC to not match any route in the new config. There have been no reports of this actually happening
  • core: Release data frame if it is received before the headers (dc316f7fd)

Improvements

  • Replace jsr305's CheckReturnValue with Error Prone's (#11811) (7b5d0692c)
  • core: optimize number of buffer allocations for message sizes larger than 1 MB (#11879) (5a7f35053)
  • core: Update the retry backoff range from [0, 1] to [0.8, 1.2] as per the A6 redefinition (#11858) (44e92e2c2)
  • core: include last pick status in status message when wait-for-ready RPC’s deadline expires (#11851) (7585b1607). This makes it much easier to debug connectivity issues when using wait-for-ready RPCs
  • xds: Include max concurrent request limit in the error status for concurrent connections limit exceeded (#11845) (0f5503ebb)
  • netty, servlet: Remove 4096 min write buffer size because MessageFramer.flush() is being called between every message, so messages are never combined and the larger allocation just wastes memory. (4a10a3816, 7153ff852)
  • core: When ClientStreamObserver closes the response observer log the error message if this operation fails (#11880) (302342cfc)
  • bom: use gradle java-platform to build pom instead of custom xml generation (#11875) (3142928fa)
  • xds: Reuse filter interceptors on client-side across RPCs (c506190b0, b3db8c248). This was an internal refactor that should have no user-visible change
  • alts: Enhance AltsContextUtil to allow getting the AltsContext on client-side (b1bc0a9d2)
  • xds: Envoy proto sync to 2024-11-11 (#11816) (b44ebce45)

Documentation

  • examples: Update HelloWorldServer to use Executor (#11850) (16edf7ac4)
  • examples: Add README for all examples lacking it (#11676) (9e8629914)

Dependencies

  • Version upgrades (#11874) (fc8571a0e)
  • Upgrade netty-tcnative to 2.0.70 (122b68371)

Thanks to

@​benjamin @​panchenko @​harshagoo94 @​NaveenPrasannaV

v1.70.0

Bug Fixes

  • Re-enable animalsniffer, fixing most violations (8ea362937). Violations would only have triggered on API level 23 and earlier, and the violations fixed here were highly unlikely to be triggered
  • api: Fix Android API level 23 and earlier compatibility for StatusRuntimeException without stacktrace (#11072) (ebe2b4867). This fixes a regression introduced in 1.64.0. The regression should have caused failures on API level 23 and earlier when a StatusRuntimeException or StatusException was created. However, for unknown reasons tests on old devices didn’t notice issues
  • okhttp: Improve certificate handling by rejecting non-ASCII subject alternative names and hostnames as seen in CVE-2021-0341 (#11749) (a0982ca0a). Hostnames are considered trusted and CAs are required to use punycode for non-ASCII hostnames, so this is expected to provide defense-in-depth. See also the related GoSecure blog post and the AOSP fix
  • okhttp: Fix for ipv6 link local with scope (#11725) (65b32e60e)
  • xds: Preserve nonce when unsubscribing last watcher of a particular type so that new discovery requests of that type are handled correctly (1cf1927d1). This (along with 6c12c2bd2) fixes a nonce-handling regression introduced in 1.66.0 that could cause resources to appear to not exist until re-creating the ADS stream. Triggering the behavior required specific config changes. It is easiest to trigger when clusters use EDS and routes are changed from one cluster to another. The error “found 0 leaf (logical DNS or EDS) clusters for root cluster” might then be seen
  • xds: Remember nonces for unknown types (6c12c2bd2)
  • xds: Unexpected types in the bootstrap’s server_features should be ignored (e8ff6da2c). They were previously required to be strings
  • xds: Remove xds authority label from metric registration (#11760) (6516c7387). This fixes the error “Incorrect number of required labels provided. Expected: 4” introduced in 1.69.0

... (truncated)

Commits
  • 865c443 Bump version to 1.71.0
  • ac9d0d2 Update README etc to reference 1.71.0
  • 16edf7a Examples: Updated HelloWorldServer to use Executor (#11850)
  • 16d2672 s2a: Don't allow S2AStub to be set
  • 9e54e8e servlet: Provide Gradle a filter version number
  • c1d7035 okhttp:Use a locally specified value instead of Segment.SIZE in okhttp (#11899)
  • 57af63a kokoro: Increase gradle mem in android-interop
  • a5347b2 s2a: inject Optional<AccessTokenManager> in tests
  • 41dd0c6 xds:Cleanup to reduce test flakiness (#11895)
  • 5a7f350 optimize number of buffer allocations (#11879)
  • Additional commits viewable in compare view

Updates io.grpc:grpc-protobuf from 1.68.0 to 1.71.0

Release notes

Sourced from io.grpc:grpc-protobuf's releases.

V1.71.0

API Changes

  • xds: Enable Xds Client Fallback by default. This allows having a backup xDS server as described in gRFC A71-xds-fallback.md (#11817) (176f3eed1)
  • protobuf: Experimental API marshallerWithRecursionLimit in ProtoUtils is now stabilized (#11884) (90b1c4fe9)

Bug Fixes

  • xds: Cluster weights should be uint32 (199a7ea3e). They were previously processed as int32, although the sum of weights was checked to be positive. So this would have caused a very large weight to never be selected and to reduce the chances of immediately-following clusters to be selected. There have been no reports of control planes using such large weights
  • xds: Fix an unlikely infinite loop triggered by route update (199a7ea3e). Triggering required the old cluster to no longer be used, an RPC processing when the update arrived, and for a RPC to not match any route in the new config. There have been no reports of this actually happening
  • core: Release data frame if it is received before the headers (dc316f7fd)

Improvements

  • Replace jsr305's CheckReturnValue with Error Prone's (#11811) (7b5d0692c)
  • core: optimize number of buffer allocations for message sizes larger than 1 MB (#11879) (5a7f35053)
  • core: Update the retry backoff range from [0, 1] to [0.8, 1.2] as per the A6 redefinition (#11858) (44e92e2c2)
  • core: include last pick status in status message when wait-for-ready RPC’s deadline expires (#11851) (7585b1607). This makes it much easier to debug connectivity issues when using wait-for-ready RPCs
  • xds: Include max concurrent request limit in the error status for concurrent connections limit exceeded (#11845) (0f5503ebb)
  • netty, servlet: Remove 4096 min write buffer size because MessageFramer.flush() is being called between every message, so messages are never combined and the larger allocation just wastes memory. (4a10a3816, 7153ff852)
  • core: When ClientStreamObserver closes the response observer log the error message if this operation fails (#11880) (302342cfc)
  • bom: use gradle java-platform to build pom instead of custom xml generation (#11875) (3142928fa)
  • xds: Reuse filter interceptors on client-side across RPCs (c506190b0, b3db8c248). This was an internal refactor that should have no user-visible change
  • alts: Enhance AltsContextUtil to allow getting the AltsContext on client-side (b1bc0a9d2)
  • xds: Envoy proto sync to 2024-11-11 (#11816) (b44ebce45)

Documentation

  • examples: Update HelloWorldServer to use Executor (#11850) (16edf7ac4)
  • examples: Add README for all examples lacking it (#11676) (9e8629914)

Dependencies

  • Version upgrades (#11874) (fc8571a0e)
  • Upgrade netty-tcnative to 2.0.70 (122b68371)

Thanks to

@​benjamin @​panchenko @​harshagoo94 @​NaveenPrasannaV

v1.70.0

Bug Fixes

  • Re-enable animalsniffer, fixing most violations (8ea362937). Violations would only have triggered on API level 23 and earlier, and the violations fixed here were highly unlikely to be triggered
  • api: Fix Android API level 23 and earlier compatibility for StatusRuntimeException without stacktrace (#11072) (ebe2b4867). This fixes a regression introduced in 1.64.0. The regression should have caused failures on API level 23 and earlier when a StatusRuntimeException or StatusException was created. However, for unknown reasons tests on old devices didn’t notice issues
  • okhttp: Improve certificate handling by rejecting non-ASCII subject alternative names and hostnames as seen in CVE-2021-0341 (#11749) (a0982ca0a). Hostnames are considered trusted and CAs are required to use punycode for non-ASCII hostnames, so this is expected to provide defense-in-depth. See also the related GoSecure blog post and the AOSP fix
  • okhttp: Fix for ipv6 link local with scope (#11725) (65b32e60e)
  • xds: Preserve nonce when unsubscribing last watcher of a particular type so that new discovery requests of that type are handled correctly (1cf1927d1). This (along with 6c12c2bd2) fixes a nonce-handling regression introduced in 1.66.0 that could cause resources to appear to not exist until re-creating the ADS stream. Triggering the behavior required specific config changes. It is easiest to trigger when clusters use EDS and routes are changed from one cluster to another. The error “found 0 leaf (logical DNS or EDS) clusters for root cluster” might then be seen
  • xds: Remember nonces for unknown types (6c12c2bd2)
  • xds: Unexpected types in the bootstrap’s server_features should be ignored (e8ff6da2c). They were previously required to be strings
  • xds: Remove xds authority label from metric registration (#11760) (6516c7387). This fixes the error “Incorrect number of required labels provided. Expected: 4” introduced in 1.69.0

... (truncated)

Commits
  • 865c443 Bump version to 1.71.0
  • ac9d0d2 Update README etc to reference 1.71.0
  • 16edf7a Examples: Updated HelloWorldServer to use Executor (#11850)
  • 16d2672 s2a: Don't allow S2AStub to be set
  • 9e54e8e servlet: Provide Gradle a filter version number
  • c1d7035 okhttp:Use a locally specified value instead of Segment.SIZE in okhttp (#11899)
  • 57af63a kokoro: Increase gradle mem in android-interop
  • a5347b2 s2a: inject Optional<AccessTokenManager> in tests
  • 41dd0c6 xds:Cleanup to reduce test flakiness (#11895)
  • 5a7f350 optimize number of buffer allocations (#11879)
  • Additional commits viewable in compare view

Updates io.grpc:grpc-stub from 1.68.0 to 1.71.0

Release notes

Sourced from io.grpc:grpc-stub's releases.

V1.71.0

API Changes

  • xds: Enable Xds Client Fallback by default. This allows having a backup xDS server as described in gRFC A71-xds-fallback.md (#11817) (176f3eed1)
  • protobuf: Experimental API marshallerWithRecursionLimit in ProtoUtils is now stabilized (#11884) (90b1c4fe9)

Bug Fixes

  • xds: Cluster weights should be uint32 (199a7ea3e). They were previously processed as int32, although the sum of weights was checked to be positive. So this would have caused a very large weight to never be selected and to reduce the chances of immediately-following clusters to be selected. There have been no reports of control planes using such large weights
  • xds: Fix an unlikely infinite loop triggered by route update (199a7ea3e). Triggering required the old cluster to no longer be used, an RPC processing when the update arrived, and for a RPC to not match any route in the new config. There have been no reports of this actually happening
  • core: Release data frame if it is received before the headers (dc316f7fd)

Improvements

  • Replace jsr305's CheckReturnValue with Error Prone's (#11811) (7b5d0692c)
  • core: optimize number of buffer allocations for message sizes larger than 1 MB (#11879) (5a7f35053)
  • core: Update the retry backoff range from [0, 1] to [0.8, 1.2] as per the A6 redefinition (#11858) (44e92e2c2)
  • core: include last pick status in status message when wait-for-ready RPC’s deadline expires (#11851) (7585b1607). This makes it much easier to debug connectivity issues when using wait-for-ready RPCs
  • xds: Include max concurrent request limit in the error status for concurrent connections limit exceeded (#11845) (0f5503ebb)
  • netty, servlet: Remove 4096 min write buffer size because MessageFramer.flush() is being called between every message, so messages are never combined and the larger allocation just wastes memory. (4a10a3816, 7153ff852)
  • core: When ClientStreamObserver closes the response observer log the error message if this operation fails (#11880) (302342cfc)
  • bom: use gradle java-platform to build pom instead of custom xml generation (#11875) (3142928fa)
  • xds: Reuse filter interceptors on client-side across RPCs (c506190b0, b3db8c248). This was an internal refactor that should have no user-visible change
  • alts: Enhance AltsContextUtil to allow getting the AltsContext on client-side (b1bc0a9d2)
  • xds: Envoy proto sync to 2024-11-11 (#11816) (b44ebce45)

Documentation

  • examples: Update HelloWorldServer to use Executor (#11850) (16edf7ac4)
  • examples: Add README for all examples lacking it (#11676) (9e8629914)

Dependencies

  • Version upgrades (#11874) (fc8571a0e)
  • Upgrade netty-tcnative to 2.0.70 (122b68371)

Thanks to

@​benjamin @​panchenko @​harshagoo94 @​NaveenPrasannaV

v1.70.0

Bug Fixes

  • Re-enable animalsniffer, fixing most violations (8ea362937). Violations would only have triggered on API level 23 and earlier, and the violations fixed here were highly unlikely to be triggered
  • api: Fix Android API level 23 and earlier compatibility for StatusRuntimeException without stacktrace (#11072) (ebe2b4867). This fixes a regression introduced in 1.64.0. The regression should have caused failures on API level 23 and earlier when a StatusRuntimeException or StatusException was created. However, for unknown reasons tests on old devices didn’t notice issues
  • okhttp: Improve certificate handling by rejecting non-ASCII subject alternative names and hostnames as seen in CVE-2021-0341 (#11749) (a0982ca0a). Hostnames are considered trusted and CAs are required to use punycode for non-ASCII hostnames, so this is expected to provide defense-in-depth. See also the related GoSecure blog post and the AOSP fix
  • okhttp: Fix for ipv6 link local with scope (#11725) (65b32e60e)
  • xds: Preserve nonce when unsubscribing last watcher of a particular type so that new discovery requests of that type are handled correctly (1cf1927d1). This (along with 6c12c2bd2) fixes a nonce-handling regression introduced in 1.66.0 that could cause resources to appear to not exist until re-creating the ADS stream. Triggering the behavior required specific config changes. It is easiest to trigger when clusters use EDS and routes are changed from one cluster to another. The error “found 0 leaf (logical DNS or EDS) clusters for root cluster” might then be seen
  • xds: Remember nonces for unknown types (6c12c2bd2)
  • xds: Unexpected types in the bootstrap’s server_features should be ignored (e8ff6da2c). They were previously required to be strings
  • xds: Remove xds authority label from metric registration (#11760) (6516c7387). This fixes the error “Incorrect number of required labels provided. Expected: 4” introduced in 1.69.0

... (truncated)

Commits
  • 865c443 Bump version to 1.71.0
  • ac9d0d2 Update README etc to reference 1.71.0
  • 16edf7a Examples: Updated HelloWorldServer to use Executor (#11850)
  • 16d2672 s2a: Don't allow S2AStub to be set
  • 9e54e8e servlet: Provide Gradle a filter version number
  • c1d7035 okhttp:Use a locally specified value instead of Segment.SIZE in okhttp (#11899)
  • 57af63a kokoro: Increase gradle mem in android-interop
  • a5347b2 s2a: inject Optional<AccessTokenManager> in tests
  • 41dd0c6 xds:Cleanup to reduce test flakiness (#11895)
  • 5a7f350 optimize number of buffer allocations (#11879)
  • Additional commits viewable in compare view

Updates io.grpc:grpc-netty from 1.68.0 to 1.71.0

Release notes

Sourced from io.grpc:grpc-netty's releases.

V1.71.0

API Changes

  • xds: Enable Xds Client Fallback by default. This allows having a backup xDS server as described in gRFC A71-xds-fallback.md (#11817) (176f3eed1)
  • protobuf: Experimental API marshallerWithRecursionLimit in ProtoUtils is now stabilized (#11884) (90b1c4fe9)

Bug Fixes

  • xds: Cluster weights should be uint32 (199a7ea3e). They were previously processed as int32, although the sum of weights was checked to be positive. So this would have caused a very large weight to never be selected and to reduce the chances of immediately-following clusters to be selected. There have been no reports of control planes using such large weights
  • xds: Fix an unlikely infinite loop triggered by route update (199a7ea3e). Triggering required the old cluster to no longer be used, an RPC processing when the update arrived, and for a RPC to not match any route in the new config. There have been no reports of this actually happening
  • core: Release data frame if it is received before the headers (dc316f7fd)

Improvements

  • Replace jsr305's CheckReturnValue with Error Prone's (#11811) (7b5d0692c)
  • core: optimize number of buffer allocations for message sizes larger than 1 MB (#11879) (5a7f35053)
  • core: Update the retry backoff range from [0, 1] to [0.8, 1.2] as per the A6 redefinition (#11858) (44e92e2c2)
  • core: include last pick status in status message when wait-for-ready RPC’s deadline expires (#11851) (7585b1607). This makes it much easier to debug connectivity issues when using wait-for-ready RPCs
  • xds: Include max concurrent request limit in the error status for concurrent connections limit exceeded (#11845) (0f5503ebb)
  • netty, servlet: Remove 4096 min write buffer size because MessageFramer.flush() is being called between every message, so messages are never combined and the larger allocation just wastes memory. (4a10a3816, 7153ff852)
  • core: When ClientStreamObserver closes the response observer log the error message if this operation fails (#11880) (302342cfc)
  • bom: use gradle java-platform to build pom instead of custom xml generation (#11875) (3142928fa)
  • xds: Reuse filter interceptors on client-side across RPCs (c506190b0, b3db8c248). This was an internal refactor that should have no user-visible change
  • alts: Enhance AltsContextUtil to allow getting the AltsContext on client-side (b1bc0a9d2)
  • xds: Envoy proto sync to 2024-11-11 (#11816) (b44ebce45)

Documentation

  • examples: Update HelloWorldServer to use Executor (#11850) (16edf7ac4)
  • examples: Add README for all examples lacking it (#11676) (9e8629914)

Dependencies

  • Version upgrades (#11874) (fc8571a0e)
  • Upgrade netty-tcnative to 2.0.70 (122b68371)

Thanks to

@​benjamin @​panchenko @​harshagoo94 @​NaveenPrasannaV

v1.70.0

Bug Fixes

  • Re-enable animalsniffer, fixing most violations (8ea362937). Violations would only have triggered on API level 23 and earlier, and the violations fixed here were highly unlikely to be triggered
  • api: Fix Android API level 23 and earlier compatibility for StatusRuntimeException without stacktrace (#11072) (ebe2b4867). This fixes a regression introduced in 1.64.0. The regression should have caused failures on API level 23 and earlier when a StatusRuntimeException or StatusException was created. However, for unknown reasons tests on old devices didn’t notice issues
  • okhttp: Improve certificate handling by rejecting non-ASCII subject alternative names and hostnames as seen in CVE-2021-0341 (#11749) (a0982ca0a). Hostnames are considered trusted and CAs are required to use punycode for non-ASCII hostnames, so this is expected to provide defense-in-depth. See also the related GoSecure blog post and the AOSP fix
  • okhttp: Fix for ipv6 link local with scope (#11725) (65b32e60e)
  • xds: Preserve nonce when unsubscribing last watcher of a particular type so that new discovery requests of that type are handled correctly (1cf1927d1). This (along with 6c12c2bd2) fixes a nonce-handling regression introduced in 1.66.0 that could cause resources to appear to not exist until re-creating the ADS stream. Triggering the behavior required specific config changes. It is easiest to trigger when clusters use EDS and routes are changed from one cluster to another. The error “found 0 leaf (logical DNS or EDS) clusters for root cluster” might then be seen
  • xds: Remember nonces for unknown types (6c12c2bd2)
  • xds: Unexpected types in the bootstrap’s server_features should be ignored (e8ff6da2c). They were previously required to be strings
  • xds: Remove xds authority label from metric registration (#11760) (6516c7387). This fixes the error “Incorrect number of required labels provided. Expected: 4” introduced in 1.69.0

... (truncated)

Commits
  • 865c443 Bump version to 1.71.0
  • ac9d0d2 Update README etc to reference 1.71.0
  • 16edf7a Examples: Updated HelloWorldServer to use Executor (#11850)
  • 16d2672 s2a: Don't allow S2AStub to be set
  • 9e54e8e servlet: Provide Gradle a filter version number
  • c1d7035 okhttp:Use a locally specified value instead of Segment.SIZE in okhttp (#11899)
  • 57af63a kokoro: Increase gradle mem in android-interop
  • a5347b2 s2a: inject Optional<AccessTokenManager> in tests
  • 41dd0c6 xds:Cleanup to reduce test flakiness (#11895)
  • 5a7f350 optimize number of buffer allocations (#11879)
  • Additional commits viewable in compare view

Updates io.grpc:grpc-netty-shaded from 1.68.0 to 1.71.0

Release notes

Sourced from io.grpc:grpc-netty-shaded's releases.

V1.71.0

API Changes

  • xds: Enable Xds Client Fallback by default. This allows having a backup xDS server as described in gRFC A71-xds-fallback.md (#11817) (176f3eed1)
  • protobuf: Experimental API marshallerWithRecursionLimit in ProtoUtils is now stabilized (#11884) (90b1c4fe9)

Bug Fixes

  • xds: Cluster weights should be uint32 (199a7ea3e). They were previously processed as int32, although the sum of weights was checked to be positive. So this would have caused a very large weight to never be selected and to reduce the chances of immediately-following clusters to be selected. There have been no reports of control planes using such large weights
  • xds: Fix an unlikely infinite loop triggered by route update (199a7ea3e). Triggering required the old cluster to no longer be used, an RPC processing when the update arrived, and for a RPC to not match any route in the new config. There have been no reports of this actually happening
  • core: Release data frame if it is received before the headers (dc316f7fd)

Improvements

  • Replace jsr305's CheckReturnValue with Error Prone's (#11811) (7b5d0692c)
  • core: optimize number of buffer allocations for message sizes larger than 1 MB (#11879) (5a7f35053)
  • core: Update the retry backoff range from [0, 1] to [0.8, 1.2] as per the A6 redefinition (#11858) (44e92e2c2)
  • core: include last pick status in status message when wait-for-ready RPC’s deadline expires (#11851) (7585b1607). This makes it much easier to debug connectivity issues when using wait-for-ready RPCs
  • xds: Include max concurrent request limit in the error status for concurrent connections limit exceeded (#11845) (0f5503ebb)
  • netty, servlet: Remove 4096 min write buffer size because MessageFramer.flush() is being called between every message, so messages are never combined and the larger allocation just wastes memory. (4a10a3816, 7153ff852)
  • core: When ClientStreamObserver closes the response observer log the error message if this operation fails (#11880) (302342cfc)
  • bom: use gradle java-platform to build pom instead of custom xml generation (#11875) (3142928fa)
  • xds: Reuse filter interceptors on client-side across RPCs (c506190b0, b3db8c248). This was an internal refactor that should have no user-visible change
  • alts: Enhance AltsContextUtil to allow getting the AltsContext on client-side (b1bc0a9d2)
  • xds: Envoy proto sync to 2024-11-11 (#11816) (b44ebce45)

Documentation

  • examples: Update HelloWorldServer to use Executor (#11850) (16edf7ac4)
  • examples: Add README for all examples lacking it (#11676) (9e8629914)

Dependencies

  • Version upgrades (#11874) (fc8571a0e)
  • Upgrade netty-tcnative to 2.0.70 (122b68371)

Thanks to

@​benjamin @​panchenko @​harshagoo94 @​NaveenPrasannaV

v1.70.0

Bug Fixes

  • Re-enable animalsniffer, fixing most violations (8ea362937). Violations would only have triggered on API level 23 and earlier, and the violations fixed here were highly unlikely to be triggered
  • api: Fix Android API level 23 and earlier compatibility for StatusRuntimeException without stacktrace (#11072) (ebe2b4867). This fixes a regression introduced in 1.64.0. The regression should have caused failures on API level 23 and earlier when a StatusRuntimeException or StatusException was created. However, for unknown reasons tests on old devices didn’t notice issues
  • okhttp: Improve certificate handling by rejecting non-ASCII subject alternative names and hostnames as seen in CVE-2021-0341 (#11749) (a0982ca0a). Hostnames are considered trusted and CAs are required to use punycode for non-ASCII hostnames, so this is expected to provide defense-in-depth. See also the related GoSecure blog post and the AOSP fix
  • okhttp: Fix for ipv6 link local with scope (#11725) (65b32e60e)
  • xds: Preserve nonce when unsubscribing last watcher of a particular type so that new discovery requests of that type are handled correctly (1cf1927d1). This (along with 6c12c2bd2) fixes a nonce-handling regression introduced in 1.66.0 that could cause resources to appear to not exist until re-creating the ADS stream. Triggering the behavior required specific config changes. It is easiest to trigger when clusters use EDS and routes are changed from one cluster to another. The error “found 0 leaf (logical DNS or EDS) clusters for root cluster” might then be seen
  • xds: Remember nonces for unknown types (6c12c2bd2)
  • xds: Unexpected types in the bootstrap’s server_features should be ignored (e8ff6da2c). They were previously required to be strings
  • xds: Remove xds authority label from metric registration (#11760) (6516c7387). This fixes the error “Incorrect number of required labels provided. Expected: 4” introduced in 1.69.0

... (truncated)

Commits
  • 865c443 Bump version to 1.71.0
  • ac9d0d2 Update README etc to reference 1.71.0
  • 16edf7a Examples: Updated HelloWorldServer to use Executor (#11850)
  • 16d2672 s2a: Don't allow S2AStub to be set
  • 9e54e8e servlet: Provide Gradle a filter version number
  • c1d7035 okhttp:Use a locally specified value instead of Segment.SIZE in okhttp (#11899)
  • 57af63a kokoro: Increase gradle mem in android-interop
  • a5347b2 s2a: inject Optional<AccessTokenManager> in tests
  • 41dd0c6 xds:Cleanup to reduce test flakiness (#11895)
  • 5a7f350 optimize number of buffer allocations (#11879)
  • Additional commits viewable in compare view

Updates io.grpc:protoc-gen-grpc-java from 1.68.0 to 1.71.0

Release notes

Sourced from io.grpc:protoc-gen-grpc-java's releases.

V1.71.0

API Changes

  • xds: Enable Xds Client Fallback by default. This allows having a backup xDS server as described in gRFC A71-xds-fallback.md (#11817) (176f3eed1)
  • protobuf: Experimental API marshallerWithRecursionLimit in ProtoUtils is now stabilized (#11884) (90b1c4fe9)

Bug Fixes

  • xds: Cluster weights should be uint32 (199a7ea3e). They were previously processed as int32, although the sum of weights was checked to be positive. So this would have caused a very large weight to never be selected and to reduce the chances of immediately-following clusters to be selected. There have been no reports of control planes using such large weights
  • xds: Fix an unlikely infinite loop triggered by route update (199a7ea3e). Triggering required the old cluster to no longer be used, an RPC processing when the update arrived, and for a RPC to not match any route in the new config. There have been no reports of this actually happening
  • core: Release data frame if it is received before the headers (dc316f7fd)

Improvements

  • Replace jsr305's CheckReturnValue with Error Prone's (#11811) (7b5d0692c)
  • core: optimize number of buffer allocations for message sizes larger than 1 MB (#11879) (5a7f35053)
  • core: Update the retry backoff range from [0, 1] to [0.8, 1.2] as per the A6 redefinition (#11858) (44e92e2c2)
  • core: include last pick status in status message when wait-for-ready RPC’s deadline expires (#11851) (7585b1607). This makes it much easier to debug connectivity issues when using wait-for-ready RPCs
  • xds: Include max concurrent request limit in the error status for concurrent connections limit exceeded (#11845) (0f5503ebb)
  • netty, servlet: Remove 4096 min write buffer size because MessageFramer.flush() is being called between every message, so messages are never combined and the larger allocation just wastes memory. (4a10a3816, 7153ff852)
  • core: When ClientStreamObserver closes the response observer log the error message if this operation fails (#11880) (302342cfc)
  • bom: use gradle java-platform to build pom instead of custom xml generation (#11875) (3142928fa)
  • xds: Reuse filter interceptors on client-side across RPCs (c506190b0, b3db8c248). This was an internal refactor that should have no user-visible change
  • alts: Enhance AltsContextUtil to allow getting the AltsContext on client-side (b1bc0a9d2)
  • xds: Envoy proto sync to 2024-11-11 (#11816) (b44ebce45)

Documentation

  • examples: Update HelloWorldServer to use Executor (#11850) (16edf7ac4)
  • examples: Add README for all examples lacking it (#11676) (9e8629914)

Dependencies

  • Version upgrades (#11874) (fc8571a0e)
  • Upgrade netty-tcnative to 2.0.70 (122b68371)

Thanks to

@​benjamin @​panchenko @​harshagoo94 @​NaveenPrasannaV

v1.70.0

Bug Fixes

  • Re-enable animalsniffer, fixing most violations (8ea362937). Violations would only have triggered on API level 23 and earlier, and the violations fixed here were highly unlikely to be triggered
  • api: Fix Android API level 23 and earlier compatibility for StatusRuntimeException without stacktrace (#11072) (ebe2b4867). This fixes a regression introduced in 1.64.0. The regression should have caused failures on API level 23 and earlier when a StatusRuntimeException or StatusException was created. However, for unknown reasons tests on old devices didn’t notice issues
  • okhttp: Improve certificate handling by rejecting non-ASCII subject alternative names and hostnames as seen in CVE-2021-0341 (#11749) (a0982ca0a). Hostnames are considered trusted and CAs are required to use punycode for non-ASCII hostnames, so this is expected to provide defense-in-depth. See also the related GoSecure blog post and the AOSP fix
  • okhttp: Fix for ipv6 link local with scope (#11725) (65b32e60e)
  • xds: Preserve nonce when unsubscribing last watcher of a particular type so that new discovery requests of that type are handled correctly (1cf1927d1). This (along with 6c12c2bd2) fixes a nonce-handling regression introduced in 1.66.0 that could cause resources to appear to not exist until re-creating the ADS stream. Triggering the behavior required specific config changes. It is easiest to trigger when clusters use EDS and routes are changed from one cluster to another. The error “found 0 leaf (logical DNS or EDS) clusters for root cluster” might then be seen
  • xds: Remember nonces for unknown types (6c12c2bd2)
  • xds: Unexpected types in the bootstrap’s server_features should be ignored (e8ff6da2c). They were previously required to be strings
  • xds: Remove xds authority label from metric registration (#11760) (6516c7387). This fixes the error “Incorrect number of required labels provided. Expected: 4” introduced in 1.69.0

... (truncated)

Commits
  • 865c443 Bump version to 1.71.0
  • ac9d0d2 Update README etc to reference 1.71.0
  • 16edf7a Examples: Updated HelloWorldServer to use Executor (#11850)
  • 16d2672 s2a: Don't allow S2AStub to be set
  • 9e54e8e servlet: Provide Gradle a filter version number
  • c1d7035 okhttp:Use a locally specified value instead of Segment.SIZE in okhttp (#11899)
  • 57af63a kokoro: Increase gradle mem in android-interop
  • a5347b2 s2a: inject Optional<AccessTokenManager> in tests
  • 41dd0c6 xds:Cleanup to reduce test flakiness (#11895)
  • 5a7f350 optimize number of buffer allocations (#11879)
  • Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
io.grpc:grpc-core [>= 1.54.a, < 1.55]
io.grpc:grpc-netty [>= 1.54.a, < 1.55]
io.grpc:grpc-netty-shaded [>= 1.54.a, < 1.55]
io.grpc:grpc-protobuf [>= 1.54.a, < 1.55]
io.grpc:grpc-stub [>= 1.54.a, < 1.55]
io.grpc:protoc-gen-grpc-java [>= 1.54.a, < 1.55]
io.grpc:grpc-core [>= 1.53.a, < 1.54]
io.grpc:grpc-netty [>= 1.53.a, < 1.54]
io.grpc:grpc-netty-shaded [>= 1.53.a, < 1.54]
io.grpc:grpc-protobuf [>= 1.53.a, < 1.54]
io.grpc:grpc-stub [>= 1.53.a, < 1.54]
io.grpc:protoc-gen-grpc-java [>= 1.53.a, < 1.54]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
Bump grpcVersion from 1.68.0 to 1.71.0
698f6a9 
Bumps `grpcVersion` from 1.68.0 to 1.71.0.

Updates `io.grpc:grpc-core` from 1.68.0 to 1.71.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.68.0...v1.71.0)

Updates `io.grpc:grpc-protobuf` from 1.68.0 to 1.71.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.68.0...v1.71.0)

Updates `io.grpc:grpc-stub` from 1.68.0 to 1.71.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.68.0...v1.71.0)

Updates `io.grpc:grpc-netty` from 1.68.0 to 1.71.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.68.0...v1.71.0)

Updates `io.grpc:grpc-netty-shaded` from 1.68.0 to 1.71.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.68.0...v1.71.0)

Updates `io.grpc:protoc-gen-grpc-java` from 1.68.0 to 1.71.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.68.0...v1.71.0)

---
updated-dependencies:
- dependency-name: io.grpc:grpc-core
  dependency-version: 1.71.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: io.grpc:grpc-protobuf
  dependency-version: 1.71.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: io.grpc:grpc-stub
  dependency-version: 1.71.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: io.grpc:grpc-netty
  dependency-version: 1.71.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: io.grpc:grpc-netty-shaded
  dependency-version: 1.71.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: io.grpc:protoc-gen-grpc-java
  dependency-version: 1.71.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Apr 1, 2025
@dependabot dependabot bot mentioned this pull request Apr 1, 2025
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@github-actions github-actions[bot] github-actions[bot] approved these changes

At least 2 approving reviews are required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants