chore(deps): Bump grpc from 1.71.0 to 1.73.0 in /pbj-core/hiero-dependency-versions

[dependabot]

Bumps grpc from 1.71.0 to 1.73.0.
Updates io.grpc:grpc-netty from 1.71.0 to 1.73.0

Release notes

Sourced from io.grpc:grpc-netty's releases.

V1.72.0

API Changes

• util: Remove deprecated method GracefulSwitchLb.switchTo() (f207be39a). It is rarely used outside of gRPC itself. The configuration is passed as lb policy configuration instead
• xds: Add support for custom per-target credentials on the transport (#11951) (1958e4237)
• xds: Explicitly set request hash key for the ring hash LB policy (892144dca)

Bug Fixes

• core: Apply ManagedChannelImpl's updateBalancingState() immediately (ca4819ac6)
• xds: Fix cluster selection races when updating config selector (d82613a74)
• otel: Fix span names as per the A72 gRFC changes (#11974) (94f8e9369)
• xds: ClusterResolverLoadBalancer handle update for both resolved addresses and errors via ResolutionResult (#11997) (868178651)

Improvements

• netty: Avoid allocating an exception on transport shutdown. This reduces allocation rate for connection-heavy workloads/load testing (a57c14a51)
• servlet: Set an explicit description for CANCELLED status (#11927) (fca1d3cf4)
• xds: gRFC A74 xDS Config Tears implementation in the XdsNameResolver (e80c19745). While there is more remaining, users may already see reduced latency when resources are replaced. For example, if changing a route from one backend service to another, RPCs may see less latency during the transition
• core: Log any exception during channel panic because of exception (3961a923a). This prevents the exception from propagating up the stack on an arbitrary thread. Such exceptions are rarely interesting. Instead, the exception that caused the channel panic is the important one, and RPCs will still fail with its details
• util: Graceful switch to new LB when leaving CONNECTING (2e260a4bb). Previously when using xDS and the configuration changes the LB policy, the old LB policy is used until the new one is READY. Now the old LB policy is used until the new policy becomes READY, TRANSIENT_FAILURE, or IDLE
• core: Use java.time.Time.getNano directly in InstantTimeProvider. Previously reflection was used which would confuse R8 full mode (#11977) (7507a9ec0)
• core: Avoid cancellation exceptions when notifying watchers that already have their connections cancelled (#11934) (350f90e1a)
• rls: allow maxAge in RLS config to exceed 5 minutes if staleAge is set. Previously, the limit was 5 minutes, which isn't enough for some gRPC clients (#11931) (c340f4a2f)
• xds: avoid unnecessary dns lookup for CIDR addresses (#11932) (602aece08)
• netty: Swap to UniformStreamByteDistributor (#11954) (2f52a0036). gRPC will no longer observe the HTTP/2 priorities, which were not used directly by gRPC and deprecated in RFC 9113
• core: Avoid Set.removeAll() when passing a possibly-large List (#11994) (666136b4b)
• stub: trailersFromThrowable() metadata should be copied (#11979) (a6e1c1f09)

New Features

• xds: xDS-based HTTP CONNECT configuration (#11861) (12197065f)
• netty: Per-rpc authority verification against peer cert subject names. Overriding transport authority at rpc time is only allowed when using TlsChannelCredentials. The per-rpc authority verification feature is guarded by the environment variable GRPC_ENABLE_PER_RPC_AUTHORITY_CHECK in this release. When this is false or not set, the rpc will not fail when the authority verification fails but a warning will be logged. In a subsequent release the usage of this environment variable will be removed and RPCs will start failing if the authority doesn't match the peer certificate names. The environment variable is temporary; if you are depending on the existing insecure behavior, please file an issue (#11724) (cdab410b8)

Thanks to

@​panchenko @​emmanuel-ferdman @​JoeCqupt

Commits

• 7f28d46 Bump version to 1.73.0
• 4717481 Update README etc to reference 1.73.0
• bfb55b5 xds: Add GcpAuthenticationFilter to FilterRegistry (#12075) (#12086)
• 8613672 Rename PSM interop fallback test suite to light (#12092)
• 165e476 alts: add experimental keepalive (#12076)
• e772265 xds: Enable least request by default (#12054) (#12062)
• 6baac45 xds: Fix pretty-print of Cluster with WrrLocality and LB policies (#12037)
• 454f1c5 binder: Create a Robolectric version of BinderTransportTest (#12057)
• 64fe061 Simplify RobolectricBinderSecurityTest (#12058)
• 80cc988 xds: Use acceptResolvedAddresses() for WeightedTarget children (#12053)
• Additional commits viewable in compare view

Updates io.grpc:grpc-protobuf from 1.71.0 to 1.73.0

Release notes

Sourced from io.grpc:grpc-protobuf's releases.

V1.72.0

API Changes

• util: Remove deprecated method GracefulSwitchLb.switchTo() (f207be39a). It is rarely used outside of gRPC itself. The configuration is passed as lb policy configuration instead
• xds: Add support for custom per-target credentials on the transport (#11951) (1958e4237)
• xds: Explicitly set request hash key for the ring hash LB policy (892144dca)

Bug Fixes

• core: Apply ManagedChannelImpl's updateBalancingState() immediately (ca4819ac6)
• xds: Fix cluster selection races when updating config selector (d82613a74)
• otel: Fix span names as per the A72 gRFC changes (#11974) (94f8e9369)
• xds: ClusterResolverLoadBalancer handle update for both resolved addresses and errors via ResolutionResult (#11997) (868178651)

Improvements

• netty: Avoid allocating an exception on transport shutdown. This reduces allocation rate for connection-heavy workloads/load testing (a57c14a51)
• servlet: Set an explicit description for CANCELLED status (#11927) (fca1d3cf4)
• xds: gRFC A74 xDS Config Tears implementation in the XdsNameResolver (e80c19745). While there is more remaining, users may already see reduced latency when resources are replaced. For example, if changing a route from one backend service to another, RPCs may see less latency during the transition
• core: Log any exception during channel panic because of exception (3961a923a). This prevents the exception from propagating up the stack on an arbitrary thread. Such exceptions are rarely interesting. Instead, the exception that caused the channel panic is the important one, and RPCs will still fail with its details
• util: Graceful switch to new LB when leaving CONNECTING (2e260a4bb). Previously when using xDS and the configuration changes the LB policy, the old LB policy is used until the new one is READY. Now the old LB policy is used until the new policy becomes READY, TRANSIENT_FAILURE, or IDLE
• core: Use java.time.Time.getNano directly in InstantTimeProvider. Previously reflection was used which would confuse R8 full mode (#11977) (7507a9ec0)
• core: Avoid cancellation exceptions when notifying watchers that already have their connections cancelled (#11934) (350f90e1a)
• rls: allow maxAge in RLS config to exceed 5 minutes if staleAge is set. Previously, the limit was 5 minutes, which isn't enough for some gRPC clients (#11931) (c340f4a2f)
• xds: avoid unnecessary dns lookup for CIDR addresses (#11932) (602aece08)
• netty: Swap to UniformStreamByteDistributor (#11954) (2f52a0036). gRPC will no longer observe the HTTP/2 priorities, which were not used directly by gRPC and deprecated in RFC 9113
• core: Avoid Set.removeAll() when passing a possibly-large List (#11994) (666136b4b)
• stub: trailersFromThrowable() metadata should be copied (#11979) (a6e1c1f09)

New Features

• xds: xDS-based HTTP CONNECT configuration (#11861) (12197065f)
• netty: Per-rpc authority verification against peer cert subject names. Overriding transport authority at rpc time is only allowed when using TlsChannelCredentials. The per-rpc authority verification feature is guarded by the environment variable GRPC_ENABLE_PER_RPC_AUTHORITY_CHECK in this release. When this is false or not set, the rpc will not fail when the authority verification fails but a warning will be logged. In a subsequent release the usage of this environment variable will be removed and RPCs will start failing if the authority doesn't match the peer certificate names. The environment variable is temporary; if you are depending on the existing insecure behavior, please file an issue (#11724) (cdab410b8)

Thanks to

@​panchenko @​emmanuel-ferdman @​JoeCqupt

Commits

• 7f28d46 Bump version to 1.73.0
• 4717481 Update README etc to reference 1.73.0
• bfb55b5 xds: Add GcpAuthenticationFilter to FilterRegistry (#12075) (#12086)
• 8613672 Rename PSM interop fallback test suite to light (#12092)
• 165e476 alts: add experimental keepalive (#12076)
• e772265 xds: Enable least request by default (#12054) (#12062)
• 6baac45 xds: Fix pretty-print of Cluster with WrrLocality and LB policies (#12037)
• 454f1c5 binder: Create a Robolectric version of BinderTransportTest (#12057)
• 64fe061 Simplify RobolectricBinderSecurityTest (#12058)
• 80cc988 xds: Use acceptResolvedAddresses() for WeightedTarget children (#12053)
• Additional commits viewable in compare view

Updates io.grpc:grpc-stub from 1.71.0 to 1.73.0

Release notes

Sourced from io.grpc:grpc-stub's releases.

V1.72.0

API Changes

• util: Remove deprecated method GracefulSwitchLb.switchTo() (f207be39a). It is rarely used outside of gRPC itself. The configuration is passed as lb policy configuration instead
• xds: Add support for custom per-target credentials on the transport (#11951) (1958e4237)
• xds: Explicitly set request hash key for the ring hash LB policy (892144dca)

Bug Fixes

• core: Apply ManagedChannelImpl's updateBalancingState() immediately (ca4819ac6)
• xds: Fix cluster selection races when updating config selector (d82613a74)
• otel: Fix span names as per the A72 gRFC changes (#11974) (94f8e9369)
• xds: ClusterResolverLoadBalancer handle update for both resolved addresses and errors via ResolutionResult (#11997) (868178651)

Improvements

• netty: Avoid allocating an exception on transport shutdown. This reduces allocation rate for connection-heavy workloads/load testing (a57c14a51)
• servlet: Set an explicit description for CANCELLED status (#11927) (fca1d3cf4)
• xds: gRFC A74 xDS Config Tears implementation in the XdsNameResolver (e80c19745). While there is more remaining, users may already see reduced latency when resources are replaced. For example, if changing a route from one backend service to another, RPCs may see less latency during the transition
• core: Log any exception during channel panic because of exception (3961a923a). This prevents the exception from propagating up the stack on an arbitrary thread. Such exceptions are rarely interesting. Instead, the exception that caused the channel panic is the important one, and RPCs will still fail with its details
• util: Graceful switch to new LB when leaving CONNECTING (2e260a4bb). Previously when using xDS and the configuration changes the LB policy, the old LB policy is used until the new one is READY. Now the old LB policy is used until the new policy becomes READY, TRANSIENT_FAILURE, or IDLE
• core: Use java.time.Time.getNano directly in InstantTimeProvider. Previously reflection was used which would confuse R8 full mode (#11977) (7507a9ec0)
• core: Avoid cancellation exceptions when notifying watchers that already have their connections cancelled (#11934) (350f90e1a)
• rls: allow maxAge in RLS config to exceed 5 minutes if staleAge is set. Previously, the limit was 5 minutes, which isn't enough for some gRPC clients (#11931) (c340f4a2f)
• xds: avoid unnecessary dns lookup for CIDR addresses (#11932) (602aece08)
• netty: Swap to UniformStreamByteDistributor (#11954) (2f52a0036). gRPC will no longer observe the HTTP/2 priorities, which were not used directly by gRPC and deprecated in RFC 9113
• core: Avoid Set.removeAll() when passing a possibly-large List (#11994) (666136b4b)
• stub: trailersFromThrowable() metadata should be copied (#11979) (a6e1c1f09)

New Features

• xds: xDS-based HTTP CONNECT configuration (#11861) (12197065f)
• netty: Per-rpc authority verification against peer cert subject names. Overriding transport authority at rpc time is only allowed when using TlsChannelCredentials. The per-rpc authority verification feature is guarded by the environment variable GRPC_ENABLE_PER_RPC_AUTHORITY_CHECK in this release. When this is false or not set, the rpc will not fail when the authority verification fails but a warning will be logged. In a subsequent release the usage of this environment variable will be removed and RPCs will start failing if the authority doesn't match the peer certificate names. The environment variable is temporary; if you are depending on the existing insecure behavior, please file an issue (#11724) (cdab410b8)

Thanks to

@​panchenko @​emmanuel-ferdman @​JoeCqupt

Commits

• 7f28d46 Bump version to 1.73.0
• 4717481 Update README etc to reference 1.73.0
• bfb55b5 xds: Add GcpAuthenticationFilter to FilterRegistry (#12075) (#12086)
• 8613672 Rename PSM interop fallback test suite to light (#12092)
• 165e476 alts: add experimental keepalive (#12076)
• e772265 xds: Enable least request by default (#12054) (#12062)
• 6baac45 xds: Fix pretty-print of Cluster with WrrLocality and LB policies (#12037)
• 454f1c5 binder: Create a Robolectric version of BinderTransportTest (#12057)
• 64fe061 Simplify RobolectricBinderSecurityTest (#12058)
• 80cc988 xds: Use acceptResolvedAddresses() for WeightedTarget children (#12053)
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[github-actions]

JUnit Test Report

   68 files  ±0     68 suites  ±0   3m 22s ⏱️ +2s
1 274 tests ±0  1 271 ✅ ±0   3 💤 ±0  0 ❌ ±0 
7 129 runs  ±0  7 110 ✅ ±0  19 💤 ±0  0 ❌ ±0 

Results for commit 58b5421. ± Comparison against base commit a18c8fc.

This pull request removes 2 and adds 1 tests. Note that renamed tests count towards both.

, 1
com.hedera.pbj.runtime.Utf8ToolsTest ‑ [4] 

com.hedera.pbj.runtime.Utf8ToolsTest ‑ [4] 
, 1

[github-actions]

Integration Test Report

    397 files  ±0      397 suites  ±0   12m 15s ⏱️ + 1m 21s
114 798 tests ±0  114 798 ✅ ±0  0 💤 ±0  0 ❌ ±0 
115 026 runs  ±0  115 026 ✅ ±0  0 💤 ±0  0 ❌ ±0 

Results for commit 58b5421. ± Comparison against base commit a18c8fc.

This pull request removes 3 and adds 3 tests. Note that renamed tests count towards both.

com.hedera.pbj.integration.test.ParserNeverWrapsTest ‑ [1] com.hedera.pbj.integration.test.ParserNeverWrapsTest$$Lambda/0x00007f306462c860@1315950f
com.hedera.pbj.integration.test.ParserNeverWrapsTest ‑ [2] com.hedera.pbj.integration.test.ParserNeverWrapsTest$$Lambda/0x00007f306462ca90@6e51d7e8
com.hedera.pbj.integration.test.ParserNeverWrapsTest ‑ [3] com.hedera.pbj.integration.test.ParserNeverWrapsTest$$Lambda/0x00007f306462ccc0@5b23dd59

com.hedera.pbj.integration.test.ParserNeverWrapsTest ‑ [1] com.hedera.pbj.integration.test.ParserNeverWrapsTest$$Lambda/0x00007f8a1c61eb88@572b6d97
com.hedera.pbj.integration.test.ParserNeverWrapsTest ‑ [2] com.hedera.pbj.integration.test.ParserNeverWrapsTest$$Lambda/0x00007f8a1c61edb8@7fd58e6d
com.hedera.pbj.integration.test.ParserNeverWrapsTest ‑ [3] com.hedera.pbj.integration.test.ParserNeverWrapsTest$$Lambda/0x00007f8a1c61efe8@66da5116

[PavelSBorisov]

Version 1.73.0 is only a tag and no official release with that version number currently exists in the grpc-java repo. There also aren't any notes, so I would hold off on the dependency bumps to that version until amended.

[dependabot]

Superseded by #550.