Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 24, 2025

Bumps google.golang.org/grpc from 1.69.2 to 1.70.0.

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.70.0

Behavior Changes

  • client: reject service configs containing an invalid retryPolicy in accordance with gRFCs A21 and A6. (#7905)
    • Note that this is a potential breaking change for some users using an invalid configuration, but continuing to allow this behavior would violate our cross-language compatibility requirements.

New Features

  • xdsclient: fallback to a secondary management server (if specified in the bootstrap configuration) when the primary is down is enabled by default. Can be disabled by setting the environment variable GRPC_EXPERIMENTAL_XDS_FALLBACK to false. (#7949)
  • experimental/credentials: experimental transport credentials are added which don't enforce ALPN. (#7980)
    • These credentials will be removed in an upcoming grpc-go release. Users must not rely on these credentials directly. Instead, they should either vendor a specific version of gRPC or copy the relevant credentials into their own codebase if absolutely necessary.

Bug Fixes

  • xds: fix a possible deadlock that happens when both the client application and the xDS management server (responsible for configuring the client) are using the xds:/// scheme in their target URIs. (#8011)

Performance

  • server: for unary requests, free raw request message data as soon as parsing is finished instead of waiting until the method handler returns. (#7998)

Documentation

  • examples/features/gracefulstop: add example to demonstrate server graceful stop. (#7865)

Release 1.69.4

Bug Fixes

  • rbac: fix support for :path header matchers, which would previously never successfully match (#7965).

Documentation

  • examples/features/csm_observability: update example client and server to use the helloworld service instead of echo service (#7945).

Release 1.69.3 was accidentally tagged on the master branch and will be deleted. Please update to 1.69.4 instead.

Commits
  • 98a0092 Change version to 1.70.0 (#7984)
  • bf380de Cherrypick #7998, #8011, #8010 into 1.70.x (#8028)
  • 54b3eb9 experimental/credentials: Add credentials that don't enforce ALPN (#7980) (#8...
  • 62b9185 clustetresolver: Copy endpoints.Addresses slice from DNS updates to avoid dat...
  • 724f450 examples/features/csm_observability: use helloworld client and server instead...
  • e8d5feb rbac: add method name to :path in headers (#7965)
  • e912015 cleanup: Fix usages of non-constant format strings (#7959)
  • 681334a cleanup: replace dial with newclient (#7943)
  • 063d352 internal/resolver: introduce a new resolver to handle target URI and proxy ad...
  • 10c7e13 outlierdetection: Support health listener for ejection updates (#7908)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added the dependencies Dependencies only. label Jan 24, 2025
@dependabot dependabot bot requested a review from a team as a code owner January 24, 2025 09:47
@dependabot dependabot bot requested a review from jpayne3506 January 24, 2025 09:47
@dependabot dependabot bot requested a review from neaggarwMS January 24, 2025 09:47
@paulyufan2
Copy link
Contributor

/azp run Azure Container Networking PR

@paulyufan2 paulyufan2 enabled auto-merge January 24, 2025 15:31
paulyufan2
paulyufan2 previously approved these changes Jan 24, 2025
@azure-pipelines
Copy link

Azure Pipelines successfully started running 1 pipeline(s).

@dependabot dependabot bot force-pushed the 8f03dependabot/go_modules/google.golang.org/grpc-1.70.0 branch from 93bce62 to 549a180 Compare February 6, 2025 00:51
@paulyufan2
Copy link
Contributor

/azp run Azure Container Networking PR

@azure-pipelines
Copy link

Azure Pipelines successfully started running 1 pipeline(s).

rbtr
rbtr previously approved these changes Feb 10, 2025
@paulyufan2 paulyufan2 added this pull request to the merge queue Feb 12, 2025
@rbtr rbtr removed this pull request from the merge queue due to a manual request Feb 12, 2025
@dependabot dependabot bot force-pushed the 8f03dependabot/go_modules/google.golang.org/grpc-1.70.0 branch 3 times, most recently from 61736af to a1a8965 Compare February 20, 2025 01:46
paulyufan2
paulyufan2 previously approved these changes Feb 20, 2025
@rbtr rbtr enabled auto-merge February 20, 2025 17:43
@rbtr
Copy link
Collaborator

rbtr commented Feb 20, 2025

/azp run Azure Container Networking PR

@azure-pipelines
Copy link

Azure Pipelines successfully started running 1 pipeline(s).

@rbtr rbtr added this pull request to the merge queue Feb 20, 2025
@github-merge-queue github-merge-queue bot removed this pull request from the merge queue due to a conflict with the base branch Feb 20, 2025
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.69.2 to 1.70.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.69.2...v1.70.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot dismissed stale reviews from paulyufan2 and rbtr via 2e9a263 February 20, 2025 21:37
@dependabot dependabot bot force-pushed the 8f03dependabot/go_modules/google.golang.org/grpc-1.70.0 branch from a1a8965 to 2e9a263 Compare February 20, 2025 21:37
@paulyufan2
Copy link
Contributor

/azp run Azure Container Networking PR

@paulyufan2 paulyufan2 enabled auto-merge February 20, 2025 22:14
@azure-pipelines
Copy link

Azure Pipelines successfully started running 1 pipeline(s).

@paulyufan2 paulyufan2 added this pull request to the merge queue Feb 20, 2025
@github-merge-queue github-merge-queue bot removed this pull request from the merge queue due to failed status checks Feb 21, 2025
@paulyufan2 paulyufan2 added this pull request to the merge queue Feb 21, 2025
Merged via the queue into master with commit c0bacc1 Feb 21, 2025
14 checks passed
@paulyufan2 paulyufan2 deleted the 8f03dependabot/go_modules/google.golang.org/grpc-1.70.0 branch February 21, 2025 18:26
sivakami-projects pushed a commit that referenced this pull request Oct 23, 2025
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.69.2 to 1.70.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.69.2...v1.70.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependencies only.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants