You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pinot.apache.org by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2023/08/04 11:08:18 UTC
[GitHub] [pinot] dependabot[bot] opened a new pull request, #11270: Bump io.grpc:grpc-protobuf-lite from 1.19.0 to 1.57.1
dependabot[bot] opened a new pull request, #11270:
URL: https://github.com/apache/pinot/pull/11270
Bumps [io.grpc:grpc-protobuf-lite](https://github.com/grpc/grpc-java) from 1.19.0 to 1.57.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/grpc/grpc-java/releases">io.grpc:grpc-protobuf-lite's releases</a>.</em></p>
<blockquote>
<h2>v1.57.1</h2>
<h1>Bug fixes</h1>
<ul>
<li>Fix compatibility with Java 8. This fixes the <code>NoSuchMethodError</code> for <code>ByteBuffer</code> methods present in 1.57.0 (<a href="https://redirect.github.com/grpc/grpc-java/issues/10441">#10441</a>)</li>
<li>xds: Remove debug assert in WeightedRoundRobinLoadBalancer. The assert was to detect breakages in the static stride algorithm causing too much looping. However, with multithreading it is possible to trigger even in legitimate scenarios (<a href="https://redirect.github.com/grpc/grpc-java/issues/10437">#10437</a>)</li>
</ul>
<h2>v1.57.0</h2>
<h2>gRPC Java 1.57.0 Release Notes</h2>
<p>This release accidentally broke Java 8: <code>NoSuchMethodError</code> for some ByteBuffer methods. The issue is tracked in <a href="https://redirect.github.com/grpc/grpc-java/issues/10432">grpc/grpc-java#10432</a></p>
<h3>API Changes</h3>
<ul>
<li>Use fully qualified java.lang.String in all cases in generated code. This fixes compilation if a protobuf message is named “String”.</li>
<li>Stabilize two io.grpc.Status methods (asRuntimeException & trailersFromThrowable)</li>
<li>Stabilize io.grpc.ManagedChannelBuilder.useTransportSecurity (<a href="https://redirect.github.com/grpc/grpc-java/issues/10244">#10244</a>)</li>
<li>Stabilize io.grpc.util.MutableHandlerRegistry (<a href="https://redirect.github.com/grpc/grpc-java/issues/10348">#10348</a>)</li>
</ul>
<h3>Behavior Changes</h3>
<ul>
<li>xds: Handle loops and duplicates in xds Aggregate clusters</li>
<li>core: Change delay for hedging retry after a non-fatal error to be 0 to match the gRFC (<a href="https://github.com/grpc/proposal/blob/master/A6-client-retries.md">A6</a>).</li>
<li>api: CheckedForwardingClientCall now passes trailers from the caught exception</li>
<li>xds: require EDS service name in CDS resources with an xdstp name</li>
<li>xds: Use Rule order instead of RuleChain</li>
<li>Wrap other name resolver types in a RetryingNameResolver . Previously, if authority was not overridden, then some name resolvers (such as grpclb) had no retry.</li>
<li>xds: Environment variable "GRPC_XDS_EXPERIMENTAL_SECURITY_SUPPORT" is no longer respected, so xDS security cannot be disabled any more (<a href="https://redirect.github.com/grpc/grpc-java/issues/10243">#10243</a>)</li>
<li>context, api: Package io.grpc is now consolidated into a single artifact grpc-api by moving classes from grpc-context to grpc-api. grpc-context now has a dependency on grpc-api (but excludes other dependencies of grpc-api) so any application previously using only grpc-context will now also bring in grpc-api. This fixes <a href="https://redirect.github.com/grpc/grpc-java/issues/3522">#3522</a> which was the major issue preventing support of Java modules. We are not done fixing support, as some artifacts need to be split and Automatic-Module-Name needs to be added. The next release is likely to be more stable for modules.</li>
<li></li>
</ul>
<h3>New Features</h3>
<ul>
<li>binder: Add <code>UserHandle</code> and <code>BinderChannelCredentials</code> to support cross-user communication (<a href="https://redirect.github.com/grpc/grpc-java/issues/10197">#10197</a>)</li>
<li>xds,orca: LRS named metrics support</li>
</ul>
<h3>Improvements</h3>
<ul>
<li>core: Resolve isAndroid only once on class loading. This can improve channel creation performance on Android.</li>
<li>xds: Pick a subchannel with new static stride scheduler in WeightedRoundRobinLoadBalancer</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>xds: Fix the server sending a GOAWAY when an LDS update with no changes other than ordering is received.</li>
<li>netty: Fix NPE when a header with errors is received with endStream=true. This was causing logs to be filled with errors when health checkers didn’t specify a content type.</li>
<li>okhttp: Fix the Socket data race when shutdown/closed during connecting that was causing a significant delay</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li>Upgraded Netty to 4.1.93-Final</li>
<li>Update guava dependency to 32.0.1 to address CVE-2023-2976</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/grpc/grpc-java/commit/7292ed8f7566279cd26481b95e2316eca667272c"><code>7292ed8</code></a> Bump version to 1.57.1</li>
<li><a href="https://github.com/grpc/grpc-java/commit/adfa669edcc5a3d9527b3b8a9d490fc75edc8d9e"><code>adfa669</code></a> Update README etc to reference 1.57.1</li>
<li><a href="https://github.com/grpc/grpc-java/commit/3e69c26f3a29ad4fd1abc9aadb980a9a4a3eb93d"><code>3e69c26</code></a> Avoid accidental Java 9+ dependency with --release</li>
<li><a href="https://github.com/grpc/grpc-java/commit/38e0a0f971e9b7d4ff1631644600bdaca7fe9aa1"><code>38e0a0f</code></a> (backport v1.57) removed assert statement for static stride scheduler with mu...</li>
<li><a href="https://github.com/grpc/grpc-java/commit/503883bcf28d17e741351ad25ceac3d916c05159"><code>503883b</code></a> Bump version to 1.57.1-SNAPSHOT</li>
<li><a href="https://github.com/grpc/grpc-java/commit/cde208afce38186d06084605abed36f21b003465"><code>cde208a</code></a> Bump version to 1.57.0</li>
<li><a href="https://github.com/grpc/grpc-java/commit/61ad5f4f6d5fe4608c52061b981b010ddabfb230"><code>61ad5f4</code></a> Update README etc to reference 1.57.0</li>
<li><a href="https://github.com/grpc/grpc-java/commit/4d75056b78cdd22f4995e11f45d3f0cb1edb4592"><code>4d75056</code></a> Revert "Release v1.57.0 (<a href="https://redirect.github.com/grpc/grpc-java/issues/10417">#10417</a>)" (<a href="https://redirect.github.com/grpc/grpc-java/issues/10419">#10419</a>)</li>
<li><a href="https://github.com/grpc/grpc-java/commit/d23e39e64b211567b520983ecb4031dd0eb962a7"><code>d23e39e</code></a> Release v1.57.0 (<a href="https://redirect.github.com/grpc/grpc-java/issues/10417">#10417</a>)</li>
<li><a href="https://github.com/grpc/grpc-java/commit/22de21642f1155bf1ae89f437a51a16ec3938f2d"><code>22de216</code></a> Handle header with errors and endStream = true (<a href="https://redirect.github.com/grpc/grpc-java/issues/10384">#10384</a>) (<a href="https://redirect.github.com/grpc/grpc-java/issues/10414">#10414</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/grpc/grpc-java/compare/v1.19.0...v1.57.1">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pinot.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@pinot.apache.org
For additional commands, e-mail: commits-help@pinot.apache.org
[GitHub] [pinot] Jackie-Jiang closed pull request #11270: Bump io.grpc:grpc-protobuf-lite from 1.19.0 to 1.57.1
Posted by "Jackie-Jiang (via GitHub)" <gi...@apache.org>.
Jackie-Jiang closed pull request #11270: Bump io.grpc:grpc-protobuf-lite from 1.19.0 to 1.57.1
URL: https://github.com/apache/pinot/pull/11270
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pinot.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@pinot.apache.org
For additional commands, e-mail: commits-help@pinot.apache.org
[GitHub] [pinot] codecov-commenter commented on pull request #11270: Bump io.grpc:grpc-protobuf-lite from 1.19.0 to 1.57.1
Posted by "codecov-commenter (via GitHub)" <gi...@apache.org>.
codecov-commenter commented on PR #11270:
URL: https://github.com/apache/pinot/pull/11270#issuecomment-1665480850
## [Codecov](https://app.codecov.io/gh/apache/pinot/pull/11270?src=pr&el=h1&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) Report
> Merging [#11270](https://app.codecov.io/gh/apache/pinot/pull/11270?src=pr&el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) (90bc8a8) into [master](https://app.codecov.io/gh/apache/pinot/commit/33fa27704f04076998f6a34c5199207989100794?el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) (33fa277) will **increase** coverage by `0.00%`.
> The diff coverage is `n/a`.
```diff
@@ Coverage Diff @@
## master #11270 +/- ##
=========================================
Coverage 0.11% 0.11%
=========================================
Files 2229 2155 -74
Lines 119955 116798 -3157
Branches 18186 17740 -446
=========================================
Hits 137 137
+ Misses 119798 116641 -3157
Partials 20 20
```
| Flag | Coverage Δ | |
|---|---|---|
| integration1temurin11 | `?` | |
| integration1temurin17 | `?` | |
| integration1temurin20 | `?` | |
| integration2temurin17 | `?` | |
| unittests1temurin11 | `?` | |
| unittests1temurin17 | `?` | |
| unittests1temurin20 | `?` | |
| unittests2temurin11 | `?` | |
| unittests2temurin17 | `?` | |
| unittests2temurin20 | `0.11% <ø> (ø)` | |
Flags with carried forward coverage won't be shown. [Click here](https://docs.codecov.io/docs/carryforward-flags?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache#carryforward-flags-in-the-pull-request-comment) to find out more.
[see 76 files with indirect coverage changes](https://app.codecov.io/gh/apache/pinot/pull/11270/indirect-changes?src=pr&el=tree-more&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache)
:mega: We’re building smart automated test selection to slash your CI/CD build times. [Learn more](https://about.codecov.io/iterative-testing/?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pinot.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@pinot.apache.org
For additional commands, e-mail: commits-help@pinot.apache.org
[GitHub] [pinot] dependabot[bot] commented on pull request #11270: Bump io.grpc:grpc-protobuf-lite from 1.19.0 to 1.57.1
Posted by "dependabot[bot] (via GitHub)" <gi...@apache.org>.
dependabot[bot] commented on PR #11270:
URL: https://github.com/apache/pinot/pull/11270#issuecomment-1666177362
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting `@dependabot ignore this major version` or `@dependabot ignore this minor version`. You can also ignore all major, minor, or patch releases for a dependency by adding an [`ignore` condition](https://docs.github.com/en/code-security/supply-chain-security/configuration-options-for-dependency-updates#ignore) with the desired `update_types` to your config file.
If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pinot.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@pinot.apache.org
For additional commands, e-mail: commits-help@pinot.apache.org