You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@avro.apache.org by GitBox <gi...@apache.org> on 2022/06/05 17:03:16 UTC
[GitHub] [avro] dependabot[bot] opened a new pull request, #1712: Bump grpc.version from 1.46.0 to 1.47.0 in /lang/java
dependabot[bot] opened a new pull request, #1712:
URL: https://github.com/apache/avro/pull/1712
Bumps `grpc.version` from 1.46.0 to 1.47.0.
Updates `grpc-core` from 1.46.0 to 1.47.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/grpc/grpc-java/releases">grpc-core's releases</a>.</em></p>
<blockquote>
<h2>v1.47.0</h2>
<h3>Bug Fixes</h3>
<ul>
<li>api: Ignore <code>ClassCastExceptions</code> for hard-coded providers on Android (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9174">#9174</a>). This avoids <code>ServiceConfigurationError</code> in certain cases when an “SDK” includes a copy of gRPC that was renamed with Proguard-like tools that do precise class name rewriting (versus something like Maven Shade Plugin which uses coarse pattern matching)</li>
<li>binder: respect requested message limits when provide received messages to listener (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9163">#9163</a>)</li>
<li>binder: Avoid an ISE from <code>asAndroidAppUri()</code> (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9169">#9169</a>)</li>
<li>okhttp: Use the user-provided <code>ScheduledExecutorService</code> for keepalive if provided. Previously the user-provided executor was used for deadlines, but not keepalive. Keepalive always used the default executor (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9073">#9073</a>)</li>
<li>bom: Reverted “bom: Removed protoc-gen-grpc-java from the BOM” in v1.46.0. There was a way to use it with Gradle (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9154">#9154</a>)</li>
<li>build: fix grpc-java build against protobuf 3.21 (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9218">#9218</a>)</li>
<li>grpclb: Adds missing META-INF resources to <code>libgrpclb.jar</code> produced by bazel <code>//grpclb:grpclb</code> target (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9156">#9156</a>)</li>
<li>xds: Protect xdstp processing with federation env var. If the xds server uses xdstp:// resource names it was possible for federation code paths to be entered even without enabling the experimental federation support. This is now fixed and it is safe for xds servers to use xdstp:// resource names. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9190">#9190</a>)</li>
<li>xds: fix bugs in ring-hash load balancer picking subchannel behavior per gRFC. The bug may cause connection not failing over from <code>TRANSIENT_FAILURE</code> status. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9085">#9085</a>)</li>
<li>xds: NACK EDS resources with duplicate localities in the same priority (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9119">#9119</a>)</li>
</ul>
<h3>New Features</h3>
<ul>
<li>api: Add connection management APIs to <code>ServerBuilder</code> (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9176">#9176</a>). This includes methods for keepalive, max connection age, and max connection idle. These APIs have been available on NettyServerBuilder since v1.4.0</li>
<li>api: allow <code>NameResolver</code> to influence which transport to use (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9076">#9076</a>)</li>
<li>api: New API in ServerCall to expose SecurityLevel on server-side (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8943">#8943</a>)</li>
<li>netty: Add <code>NameResolver</code> for <code>unix:</code> scheme, as defined in <a href="https://github.com/grpc/grpc/blob/master/doc/naming.md">gRPC Name Resolution</a> (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9113">#9113</a>)</li>
<li>binder: add <code>allOf</code> security policy, which allows access iff ALL given security policies allow access. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9125">#9125</a>)</li>
<li>binder: add <code>anyOf</code> security policy, which allows access if ANY given security policy allows access. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9147">#9147</a>)</li>
<li>binder: add <code>hasPermissions</code> security policy, which checks that a caller has all of the given package permissions. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9117">#9117</a>)</li>
<li>build: Add Bazel build support for xds, googleapis, rls, and services. grpc-services previously had partial bazel support, but some parts were missing. These artifacts are now configured via <code>IO_GRPC_GRPC_JAVA_OVERRIDE_TARGETS</code> so maven_install will not use the artifacts from Maven Central (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9172">#9172</a>)</li>
<li>xds: New ability to configure custom load balancer implementations via the xDS <code>Cluster.load_balancing_policy</code> field. This implements <a href="https://github.com/grpc/proposal/blob/master/A52-xds-custom-lb-policies.md">gRFC A52: gRPC xDS Custom Load Balancer Configuration</a>. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9141">#9141</a>)</li>
<li>xds, orca: add support for custom backend metrics reporting: allow setting metrics at gRPC server and consuming metrics reports from a custom load balancing policy at the client. This implements <a href="https://github.com/grpc/proposal/blob/master/A51-custom-backend-metrics.md">gRFC A51: Custom Backend Metrics Support</a>.</li>
<li>xds: include node ID in RPC failure status messages from the XdsClient (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9099">#9099</a>)</li>
<li>xds: support for the <code>is_optional</code> logic in Cluster Specifier Plugins: if an unsupported Cluster Specifier Plugin is optional, don't NACK, and skip any routes that point to it. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9168">#9168</a>)</li>
</ul>
<h3>Behavior Changes</h3>
<ul>
<li>xds: Allow unspecified listener traffic direction, to match other languages and to work with Istio (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9173">#9173</a>)</li>
<li>xds: change priority load balancer failover time behavior and <code>ring_hash</code> LB aggregation rule to better handle transient_failure channel status (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9084">#9084</a>, <a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9093">#9093</a>)</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li>Bump GSON to 2.9.0. Earlier versions of GSON are affected by <a href="https://nvd.nist.gov/vuln/detail/CVE-2022-25647">CVE-2022-25647</a>. gRPC was not impacted by the vulnerability. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9215">#9215</a>)</li>
<li>gcp-observability: add grpc-census as a dependency and update opencensus version (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9140">#9140</a>)</li>
</ul>
<h3>Acknowledgements</h3>
<p><a href="https://github.com/caseyduquettesc"><code>@caseyduquettesc</code></a>
<a href="https://github.com/cfredri4"><code>@cfredri4</code></a>
<a href="https://github.com/jvolkman"><code>@jvolkman</code></a>
<a href="https://github.com/mirlord"><code>@mirlord</code></a>
<a href="https://github.com/ovidiutirla"><code>@ovidiutirla</code></a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/grpc/grpc-java/commit/76b37d3748e561bf32ed1805f96b0097cbbf5098"><code>76b37d3</code></a> Bump version to 1.47.0</li>
<li><a href="https://github.com/grpc/grpc-java/commit/98ec497b4a0256e40cca75e2f5129b5ce718bae8"><code>98ec497</code></a> Update README etc to reference 1.47.0, protobuf plugin 0.8.18</li>
<li><a href="https://github.com/grpc/grpc-java/commit/e0238df70a33b649fa9bd9adfbc00a17fd27c9e7"><code>e0238df</code></a> Update to handle rename of java_names.h to names.h in protobuf upstream (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9218">#9218</a>)</li>
<li><a href="https://github.com/grpc/grpc-java/commit/6bf3e2cfb5a480d713ecfb8dbf3d46169d788dc0"><code>6bf3e2c</code></a> Bump GSON to 2.9.0 (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9215">#9215</a>)</li>
<li><a href="https://github.com/grpc/grpc-java/commit/540be7fcd0af149e2232b4bd961f92225a01f480"><code>540be7f</code></a> interop-test: Remove duplicated GCE tests</li>
<li><a href="https://github.com/grpc/grpc-java/commit/bd025d3c2230f76d4ff0d0ccef4f66e47f7570da"><code>bd025d3</code></a> Enable xDS custom LB config by default. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9214">#9214</a>)</li>
<li><a href="https://github.com/grpc/grpc-java/commit/74112adebf22f99ac67c98ac6609de40b3253cc6"><code>74112ad</code></a> xds: Make a copy of Metadata for thread safety. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9212">#9212</a>)</li>
<li><a href="https://github.com/grpc/grpc-java/commit/7e578ed87c515fdf563cbf2d8397a759c9f25a21"><code>7e578ed</code></a> xds: Properly assign picker. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9201">#9201</a>)</li>
<li><a href="https://github.com/grpc/grpc-java/commit/a6b14760bd67bc0d0ce86e84449a34bf17affb46"><code>a6b1476</code></a> xds: Custom LB configs to support UDPA TypeStruct (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9198">#9198</a>)</li>
<li><a href="https://github.com/grpc/grpc-java/commit/61604aca7e2936681f2760d6d24e1748b788f22e"><code>61604ac</code></a> xds: Use weighted_target LB provider in wrr_locality (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9195">#9195</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/grpc/grpc-java/compare/v1.46.0...v1.47.0">compare view</a></li>
</ul>
</details>
<br />
Updates `grpc-stub` from 1.46.0 to 1.47.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/grpc/grpc-java/releases">grpc-stub's releases</a>.</em></p>
<blockquote>
<h2>v1.47.0</h2>
<h3>Bug Fixes</h3>
<ul>
<li>api: Ignore <code>ClassCastExceptions</code> for hard-coded providers on Android (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9174">#9174</a>). This avoids <code>ServiceConfigurationError</code> in certain cases when an “SDK” includes a copy of gRPC that was renamed with Proguard-like tools that do precise class name rewriting (versus something like Maven Shade Plugin which uses coarse pattern matching)</li>
<li>binder: respect requested message limits when provide received messages to listener (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9163">#9163</a>)</li>
<li>binder: Avoid an ISE from <code>asAndroidAppUri()</code> (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9169">#9169</a>)</li>
<li>okhttp: Use the user-provided <code>ScheduledExecutorService</code> for keepalive if provided. Previously the user-provided executor was used for deadlines, but not keepalive. Keepalive always used the default executor (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9073">#9073</a>)</li>
<li>bom: Reverted “bom: Removed protoc-gen-grpc-java from the BOM” in v1.46.0. There was a way to use it with Gradle (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9154">#9154</a>)</li>
<li>build: fix grpc-java build against protobuf 3.21 (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9218">#9218</a>)</li>
<li>grpclb: Adds missing META-INF resources to <code>libgrpclb.jar</code> produced by bazel <code>//grpclb:grpclb</code> target (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9156">#9156</a>)</li>
<li>xds: Protect xdstp processing with federation env var. If the xds server uses xdstp:// resource names it was possible for federation code paths to be entered even without enabling the experimental federation support. This is now fixed and it is safe for xds servers to use xdstp:// resource names. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9190">#9190</a>)</li>
<li>xds: fix bugs in ring-hash load balancer picking subchannel behavior per gRFC. The bug may cause connection not failing over from <code>TRANSIENT_FAILURE</code> status. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9085">#9085</a>)</li>
<li>xds: NACK EDS resources with duplicate localities in the same priority (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9119">#9119</a>)</li>
</ul>
<h3>New Features</h3>
<ul>
<li>api: Add connection management APIs to <code>ServerBuilder</code> (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9176">#9176</a>). This includes methods for keepalive, max connection age, and max connection idle. These APIs have been available on NettyServerBuilder since v1.4.0</li>
<li>api: allow <code>NameResolver</code> to influence which transport to use (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9076">#9076</a>)</li>
<li>api: New API in ServerCall to expose SecurityLevel on server-side (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8943">#8943</a>)</li>
<li>netty: Add <code>NameResolver</code> for <code>unix:</code> scheme, as defined in <a href="https://github.com/grpc/grpc/blob/master/doc/naming.md">gRPC Name Resolution</a> (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9113">#9113</a>)</li>
<li>binder: add <code>allOf</code> security policy, which allows access iff ALL given security policies allow access. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9125">#9125</a>)</li>
<li>binder: add <code>anyOf</code> security policy, which allows access if ANY given security policy allows access. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9147">#9147</a>)</li>
<li>binder: add <code>hasPermissions</code> security policy, which checks that a caller has all of the given package permissions. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9117">#9117</a>)</li>
<li>build: Add Bazel build support for xds, googleapis, rls, and services. grpc-services previously had partial bazel support, but some parts were missing. These artifacts are now configured via <code>IO_GRPC_GRPC_JAVA_OVERRIDE_TARGETS</code> so maven_install will not use the artifacts from Maven Central (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9172">#9172</a>)</li>
<li>xds: New ability to configure custom load balancer implementations via the xDS <code>Cluster.load_balancing_policy</code> field. This implements <a href="https://github.com/grpc/proposal/blob/master/A52-xds-custom-lb-policies.md">gRFC A52: gRPC xDS Custom Load Balancer Configuration</a>. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9141">#9141</a>)</li>
<li>xds, orca: add support for custom backend metrics reporting: allow setting metrics at gRPC server and consuming metrics reports from a custom load balancing policy at the client. This implements <a href="https://github.com/grpc/proposal/blob/master/A51-custom-backend-metrics.md">gRFC A51: Custom Backend Metrics Support</a>.</li>
<li>xds: include node ID in RPC failure status messages from the XdsClient (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9099">#9099</a>)</li>
<li>xds: support for the <code>is_optional</code> logic in Cluster Specifier Plugins: if an unsupported Cluster Specifier Plugin is optional, don't NACK, and skip any routes that point to it. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9168">#9168</a>)</li>
</ul>
<h3>Behavior Changes</h3>
<ul>
<li>xds: Allow unspecified listener traffic direction, to match other languages and to work with Istio (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9173">#9173</a>)</li>
<li>xds: change priority load balancer failover time behavior and <code>ring_hash</code> LB aggregation rule to better handle transient_failure channel status (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9084">#9084</a>, <a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9093">#9093</a>)</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li>Bump GSON to 2.9.0. Earlier versions of GSON are affected by <a href="https://nvd.nist.gov/vuln/detail/CVE-2022-25647">CVE-2022-25647</a>. gRPC was not impacted by the vulnerability. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9215">#9215</a>)</li>
<li>gcp-observability: add grpc-census as a dependency and update opencensus version (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9140">#9140</a>)</li>
</ul>
<h3>Acknowledgements</h3>
<p><a href="https://github.com/caseyduquettesc"><code>@caseyduquettesc</code></a>
<a href="https://github.com/cfredri4"><code>@cfredri4</code></a>
<a href="https://github.com/jvolkman"><code>@jvolkman</code></a>
<a href="https://github.com/mirlord"><code>@mirlord</code></a>
<a href="https://github.com/ovidiutirla"><code>@ovidiutirla</code></a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/grpc/grpc-java/commit/76b37d3748e561bf32ed1805f96b0097cbbf5098"><code>76b37d3</code></a> Bump version to 1.47.0</li>
<li><a href="https://github.com/grpc/grpc-java/commit/98ec497b4a0256e40cca75e2f5129b5ce718bae8"><code>98ec497</code></a> Update README etc to reference 1.47.0, protobuf plugin 0.8.18</li>
<li><a href="https://github.com/grpc/grpc-java/commit/e0238df70a33b649fa9bd9adfbc00a17fd27c9e7"><code>e0238df</code></a> Update to handle rename of java_names.h to names.h in protobuf upstream (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9218">#9218</a>)</li>
<li><a href="https://github.com/grpc/grpc-java/commit/6bf3e2cfb5a480d713ecfb8dbf3d46169d788dc0"><code>6bf3e2c</code></a> Bump GSON to 2.9.0 (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9215">#9215</a>)</li>
<li><a href="https://github.com/grpc/grpc-java/commit/540be7fcd0af149e2232b4bd961f92225a01f480"><code>540be7f</code></a> interop-test: Remove duplicated GCE tests</li>
<li><a href="https://github.com/grpc/grpc-java/commit/bd025d3c2230f76d4ff0d0ccef4f66e47f7570da"><code>bd025d3</code></a> Enable xDS custom LB config by default. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9214">#9214</a>)</li>
<li><a href="https://github.com/grpc/grpc-java/commit/74112adebf22f99ac67c98ac6609de40b3253cc6"><code>74112ad</code></a> xds: Make a copy of Metadata for thread safety. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9212">#9212</a>)</li>
<li><a href="https://github.com/grpc/grpc-java/commit/7e578ed87c515fdf563cbf2d8397a759c9f25a21"><code>7e578ed</code></a> xds: Properly assign picker. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9201">#9201</a>)</li>
<li><a href="https://github.com/grpc/grpc-java/commit/a6b14760bd67bc0d0ce86e84449a34bf17affb46"><code>a6b1476</code></a> xds: Custom LB configs to support UDPA TypeStruct (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9198">#9198</a>)</li>
<li><a href="https://github.com/grpc/grpc-java/commit/61604aca7e2936681f2760d6d24e1748b788f22e"><code>61604ac</code></a> xds: Use weighted_target LB provider in wrr_locality (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9195">#9195</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/grpc/grpc-java/compare/v1.46.0...v1.47.0">compare view</a></li>
</ul>
</details>
<br />
Updates `grpc-netty` from 1.46.0 to 1.47.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/grpc/grpc-java/releases">grpc-netty's releases</a>.</em></p>
<blockquote>
<h2>v1.47.0</h2>
<h3>Bug Fixes</h3>
<ul>
<li>api: Ignore <code>ClassCastExceptions</code> for hard-coded providers on Android (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9174">#9174</a>). This avoids <code>ServiceConfigurationError</code> in certain cases when an “SDK” includes a copy of gRPC that was renamed with Proguard-like tools that do precise class name rewriting (versus something like Maven Shade Plugin which uses coarse pattern matching)</li>
<li>binder: respect requested message limits when provide received messages to listener (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9163">#9163</a>)</li>
<li>binder: Avoid an ISE from <code>asAndroidAppUri()</code> (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9169">#9169</a>)</li>
<li>okhttp: Use the user-provided <code>ScheduledExecutorService</code> for keepalive if provided. Previously the user-provided executor was used for deadlines, but not keepalive. Keepalive always used the default executor (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9073">#9073</a>)</li>
<li>bom: Reverted “bom: Removed protoc-gen-grpc-java from the BOM” in v1.46.0. There was a way to use it with Gradle (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9154">#9154</a>)</li>
<li>build: fix grpc-java build against protobuf 3.21 (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9218">#9218</a>)</li>
<li>grpclb: Adds missing META-INF resources to <code>libgrpclb.jar</code> produced by bazel <code>//grpclb:grpclb</code> target (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9156">#9156</a>)</li>
<li>xds: Protect xdstp processing with federation env var. If the xds server uses xdstp:// resource names it was possible for federation code paths to be entered even without enabling the experimental federation support. This is now fixed and it is safe for xds servers to use xdstp:// resource names. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9190">#9190</a>)</li>
<li>xds: fix bugs in ring-hash load balancer picking subchannel behavior per gRFC. The bug may cause connection not failing over from <code>TRANSIENT_FAILURE</code> status. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9085">#9085</a>)</li>
<li>xds: NACK EDS resources with duplicate localities in the same priority (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9119">#9119</a>)</li>
</ul>
<h3>New Features</h3>
<ul>
<li>api: Add connection management APIs to <code>ServerBuilder</code> (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9176">#9176</a>). This includes methods for keepalive, max connection age, and max connection idle. These APIs have been available on NettyServerBuilder since v1.4.0</li>
<li>api: allow <code>NameResolver</code> to influence which transport to use (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9076">#9076</a>)</li>
<li>api: New API in ServerCall to expose SecurityLevel on server-side (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/8943">#8943</a>)</li>
<li>netty: Add <code>NameResolver</code> for <code>unix:</code> scheme, as defined in <a href="https://github.com/grpc/grpc/blob/master/doc/naming.md">gRPC Name Resolution</a> (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9113">#9113</a>)</li>
<li>binder: add <code>allOf</code> security policy, which allows access iff ALL given security policies allow access. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9125">#9125</a>)</li>
<li>binder: add <code>anyOf</code> security policy, which allows access if ANY given security policy allows access. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9147">#9147</a>)</li>
<li>binder: add <code>hasPermissions</code> security policy, which checks that a caller has all of the given package permissions. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9117">#9117</a>)</li>
<li>build: Add Bazel build support for xds, googleapis, rls, and services. grpc-services previously had partial bazel support, but some parts were missing. These artifacts are now configured via <code>IO_GRPC_GRPC_JAVA_OVERRIDE_TARGETS</code> so maven_install will not use the artifacts from Maven Central (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9172">#9172</a>)</li>
<li>xds: New ability to configure custom load balancer implementations via the xDS <code>Cluster.load_balancing_policy</code> field. This implements <a href="https://github.com/grpc/proposal/blob/master/A52-xds-custom-lb-policies.md">gRFC A52: gRPC xDS Custom Load Balancer Configuration</a>. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9141">#9141</a>)</li>
<li>xds, orca: add support for custom backend metrics reporting: allow setting metrics at gRPC server and consuming metrics reports from a custom load balancing policy at the client. This implements <a href="https://github.com/grpc/proposal/blob/master/A51-custom-backend-metrics.md">gRFC A51: Custom Backend Metrics Support</a>.</li>
<li>xds: include node ID in RPC failure status messages from the XdsClient (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9099">#9099</a>)</li>
<li>xds: support for the <code>is_optional</code> logic in Cluster Specifier Plugins: if an unsupported Cluster Specifier Plugin is optional, don't NACK, and skip any routes that point to it. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9168">#9168</a>)</li>
</ul>
<h3>Behavior Changes</h3>
<ul>
<li>xds: Allow unspecified listener traffic direction, to match other languages and to work with Istio (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9173">#9173</a>)</li>
<li>xds: change priority load balancer failover time behavior and <code>ring_hash</code> LB aggregation rule to better handle transient_failure channel status (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9084">#9084</a>, <a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9093">#9093</a>)</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li>Bump GSON to 2.9.0. Earlier versions of GSON are affected by <a href="https://nvd.nist.gov/vuln/detail/CVE-2022-25647">CVE-2022-25647</a>. gRPC was not impacted by the vulnerability. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9215">#9215</a>)</li>
<li>gcp-observability: add grpc-census as a dependency and update opencensus version (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9140">#9140</a>)</li>
</ul>
<h3>Acknowledgements</h3>
<p><a href="https://github.com/caseyduquettesc"><code>@caseyduquettesc</code></a>
<a href="https://github.com/cfredri4"><code>@cfredri4</code></a>
<a href="https://github.com/jvolkman"><code>@jvolkman</code></a>
<a href="https://github.com/mirlord"><code>@mirlord</code></a>
<a href="https://github.com/ovidiutirla"><code>@ovidiutirla</code></a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/grpc/grpc-java/commit/76b37d3748e561bf32ed1805f96b0097cbbf5098"><code>76b37d3</code></a> Bump version to 1.47.0</li>
<li><a href="https://github.com/grpc/grpc-java/commit/98ec497b4a0256e40cca75e2f5129b5ce718bae8"><code>98ec497</code></a> Update README etc to reference 1.47.0, protobuf plugin 0.8.18</li>
<li><a href="https://github.com/grpc/grpc-java/commit/e0238df70a33b649fa9bd9adfbc00a17fd27c9e7"><code>e0238df</code></a> Update to handle rename of java_names.h to names.h in protobuf upstream (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9218">#9218</a>)</li>
<li><a href="https://github.com/grpc/grpc-java/commit/6bf3e2cfb5a480d713ecfb8dbf3d46169d788dc0"><code>6bf3e2c</code></a> Bump GSON to 2.9.0 (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9215">#9215</a>)</li>
<li><a href="https://github.com/grpc/grpc-java/commit/540be7fcd0af149e2232b4bd961f92225a01f480"><code>540be7f</code></a> interop-test: Remove duplicated GCE tests</li>
<li><a href="https://github.com/grpc/grpc-java/commit/bd025d3c2230f76d4ff0d0ccef4f66e47f7570da"><code>bd025d3</code></a> Enable xDS custom LB config by default. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9214">#9214</a>)</li>
<li><a href="https://github.com/grpc/grpc-java/commit/74112adebf22f99ac67c98ac6609de40b3253cc6"><code>74112ad</code></a> xds: Make a copy of Metadata for thread safety. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9212">#9212</a>)</li>
<li><a href="https://github.com/grpc/grpc-java/commit/7e578ed87c515fdf563cbf2d8397a759c9f25a21"><code>7e578ed</code></a> xds: Properly assign picker. (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9201">#9201</a>)</li>
<li><a href="https://github.com/grpc/grpc-java/commit/a6b14760bd67bc0d0ce86e84449a34bf17affb46"><code>a6b1476</code></a> xds: Custom LB configs to support UDPA TypeStruct (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9198">#9198</a>)</li>
<li><a href="https://github.com/grpc/grpc-java/commit/61604aca7e2936681f2760d6d24e1748b788f22e"><code>61604ac</code></a> xds: Use weighted_target LB provider in wrr_locality (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/9195">#9195</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/grpc/grpc-java/compare/v1.46.0...v1.47.0">compare view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@avro.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [avro] martin-g merged pull request #1712: Bump grpc.version from 1.46.0 to 1.47.0 in /lang/java
Posted by GitBox <gi...@apache.org>.
martin-g merged PR #1712:
URL: https://github.com/apache/avro/pull/1712
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@avro.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org