chore(deps): bump grpc-stub from 1.38.0 to 1.46.0

[dependabot]

Bumps grpc-stub from 1.38.0 to 1.46.0.

Release notes

Sourced from grpc-stub's releases.

v1.46.0

Bug Fixes

• netty: Fixed incompatibility with Netty 4.1.75.Final that caused COMPRESSION_ERROR (#9004)
• xds: Fix LBs blindly propagating control plane errors (#9012). This change forces the use of UNAVAILABLE for any xDS communication failures, which otherwise could greatly confuse an application. This is essentially a continuation of the fix in 1.45.0 for XdsNameResolver, but for other similar cases
• xds: Fix ring_hash reconnecting behavior. Previously a TRANSIENT_FAILURE subchannel would remain failed forever
• xds: Fix ring_hash defeating priority’s failover connection timeout. grpc/proposal#296
• binder: Work around an Android Intent bug for consistent AndroidComponentAndress hashCode() and equals() (#9061)
• binder: Fix deadlock when using process-local Binder (#8987). Process-local binder has a different threading model than normal FLAG_ONEWAY, so this case is now detected and the FLAG_ONEWAY threading model is emulated
• okhttp: Removed dead code in io.grpc.okhttp.internal.Util. This should have no impact except for static code analysis. This code was never used and was from the process of forking okhttp. It calculated things like MD5 which can trigger security scanners (#9071)

Behavior Changes

• java_grpc_library.bzl: Pass use_default_shell_env = True for protoc (#8984). This allows using MinGW on Windows
• xds: Unconditionally apply backoff on ADS and LDS stream recreation. Previously if a message had been received on the stream no backoff wait would be performed. This limits QPS to a buggy server to 1 QPS, instead of a closed loop
• xds: Skip Routes within VirtualHosts whose RouteAction has no cluster_specifier. This probably means the control plane is using a cluster_specifier field unknown/unsupported by gRPC. The control plane can repeat the Route with a different cluster_specifier for compatibility with older clients
• xds: Support xds.config.resource-in-sotw client capability. Resources wrapped in a io.envoyproxy.envoy.service.discovery.v3.Resource message are now supported (#8997)

New Features

• gcp-observability: A new experimental module for improving visibility into gRPC workloads. Initially supports logging RPCs to Google Cloud Logging
• grpclb: Support setting initial fallback timeout by service config (#8980)

Dependencies

• PerfMark bumped to 0.25.0 (#8948)
• okhttp: the okhttp dependency is now compile only (#8971). Okhttp’s internal HTTP/2 implementation was forked inside grpc-okhttp a long time ago, but there had been a few stray internal classes that had not been forked but should have been. That has now been fixed in preparation for OkHttp 3/4 support. Compile-only may cause a runtime failure for code using reflection on OkHttpChannelBuilder; add a dependency on okhttp 2.7.4 to resolve
• bom: Removed protoc-gen-grpc-java from the BOM, as the classifier was confusing and it provided no value (#9020)

Acknowledgements

@​jesseschalken @​kluever @​beatrausch

v1.45.1

Bug Fixes

• netty: Fixed incompatibility with Netty 4.1.75.Final that caused COMPRESSION_ERROR (#9004)
• xds: Fix LBs blindly propagating control plane errors (#9012). This change forces the use of UNAVAILABLE for any xDS communication failures, which otherwise could greatly confuse an application. This is essentially a continuation of the fix in 1.45.0 for XdsNameResolver, but for other similar cases

v1.45.0

gRPC Java 1.45.0 Release Notes

Bug Fixes

• rls: fix child lb leak when client channel is shutdown (#8750)
• rls: fix RLS lb policy name (#8867)
• testing: fix GrpcCleanupRule issue when retrying tests (#8918)
• xds: Fix XdsNameResolver blindly propagates control plane errors (#8953). This change forces the use of UNAVAILABLE for any xDS communication failures, which otherwise could greatly confuse an application
• xds: fix validation code to accept new-style CertificateProviderPluginInstance (#8892)
• xds: fix a concurrency issue in CSDS ClientStatus responses (#8795)
• xds: Squelch "Failed to resolve name" ADS reconnection error logs. Workaround for #8886 (#8942)
• xds: Improve priority failover handling for IDLE subpolicies (#8926). This mainly improves behavior with ring_hash
• bom: Include grpc-binder
• binder: Fix a ServiceConnection leak (#8861)

... (truncated)

Commits

• 3500243 Bump version to 1.46.0
• 15d4874 Update README etc to reference 1.46.0
• 74d831f xds: priority reset failover timer when connecting if seen ready or idle sinc...
• afc52a0 xds: fix ring-hash-picker behaviour (1.46.x backport) (#9096)
• f557fe2 xds: change ring_hash LB aggregation rule to handles transient_failures (#908...
• 78ccc81 okhttp: Remove dead code in io.grpc.okhttp.internal.Util
• 569b7b0 xds: Unconditionally apply backoff on LRS stream recreation
• 054cb49 okhttp: Remove RPCs-before-ready tests
• 5351fb9 okhttp: Pass TransportFactory directly to transport constructor
• 584622c Revert "stub: enable GRPC_CLIENT_CALL_REJECT_RUNNABLE in ThreadlessExecutor s...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #64.