Bump the grpc-deps group across 1 directory with 8 updates by dependabot[bot] · Pull Request #710 · nlpie/mtap

dependabot · 2025-04-21T06:35:55Z

Bumps the grpc-deps group with 8 updates in the /java directory:

Package	From	To
io.grpc:protoc-gen-grpc-java	`1.71.0`	`1.72.0`
com.google.api.grpc:proto-google-common-protos	`2.54.1`	`2.55.0`
io.grpc:grpc-protobuf	`1.71.0`	`1.72.0`
io.grpc:grpc-stub	`1.71.0`	`1.72.0`
io.grpc:grpc-services	`1.71.0`	`1.72.0`
io.grpc:grpc-netty-shaded	`1.71.0`	`1.72.0`
io.grpc:grpc-testing	`1.71.0`	`1.72.0`
io.grpc:grpc-inprocess	`1.71.0`	`1.72.0`

Updates io.grpc:protoc-gen-grpc-java from 1.71.0 to 1.72.0

Release notes

Sourced from io.grpc:protoc-gen-grpc-java's releases.

V1.72.0

API Changes

util: Remove deprecated method GracefulSwitchLb.switchTo() (f207be39a). It is rarely used outside of gRPC. The configuration is passed as lb policy configuration instead

xds: Add support for custom per-target credentials on the transport (#11951) (1958e4237)

xds: Explicitly set request hash key for the ring hash LB policy (892144dca)

Bug Fixes

core: Apply ManagedChannelImpl's updateBalancingState() immediately (ca4819ac6)

xds: Fix cluster selection races when updating config selector (d82613a74)

otel: Fix span names as per the A72 gRFC changes (#11974) (94f8e9369)

xds: ClusterResolverLoadBalancer handle update for both resolved addresses and errors via ResolutionResult (#11997) (868178651)

Improvements

netty: Avoid allocating an exception on transport shutdown. This reduces allocation rate for connection-heavy workloads/load testing (a57c14a51)

servlet: Set an explicit description for CANCELLED status (#11927) (fca1d3cf4)

xds: gRFC A74 xDS Config Tears implementation in the XdsNameResolver (e80c19745). While there is more remaining, users may already see reduced latency when resources are replaced. For example, if changing a route from one backend service to another, RPCs may see less latency during the transition

core: Log any exception during channel panic because of exception (3961a923a). This prevents the exception from propagating up the stack on an arbitrary thread. Such exceptions are rarely interesting. Instead, the exception that caused the channel panic is the important one, and RPCs will still fail with its details

util: Graceful switch to new LB when leaving CONNECTING (2e260a4bb). Previously when using xDS and the configuration changes the LB policy, the old LB policy is used until the new one is READY. Now the old LB policy is used until the new policy becomes READY, TRANSIENT_FAILURE, or IDLE

core: Use java.time.Time.getNano directly in InstantTimeProvider. Previously reflection was used which would confuse R8 full mode (#11977) (7507a9ec0)

core: Avoid cancellation exceptions when notifying watchers that already have their connections cancelled (#11934) (350f90e1a)

rls: allow maxAge in RLS config to exceed 5 minutes if staleAge is set. Previously, the limit was 5 minutes, which isn't enough for some gRPC clients (#11931) (c340f4a2f)

xds: avoid unnecessary dns lookup for CIDR addresses (#11932) (602aece08)

netty: Swap to UniformStreamByteDistributor (#11954) (2f52a0036). gRPC will no longer observe the HTTP/2 priorities, which were not used directly by gRPC and deprecated in RFC 9113

core: Avoid Set.removeAll() when passing a possibly-large List (#11994) (666136b4b)

stub: trailersFromThrowable() metadata should be copied (#11979) (a6e1c1f09)

New Features

xds: xDS-based HTTP CONNECT configuration (#11861) (12197065f)

netty: Per-rpc authority verification against peer cert subject names. Overriding transport authority at rpc time is only allowed when using TlsChannelCredentials. The per-rpc authority verification feature is guarded by the environment variable GRPC_ENABLE_PER_RPC_AUTHORITY_CHECK in this release. When this is false or not set, the rpc will not fail when the authority verification fails but a warning will be logged. In a subsequent release the usage of this environment variable will be removed and RPCs will start failing if the authority doesn't match the peer certificate names. The environment variable is temporary; if you are depending on the existing insecure behavior, please file an issue (#11724) (cdab410b8)

Thanks to

@panchenko @emmanuel-ferdman @JoeCqupt

Commits

b0794e4 Bump version to 1.72.0
a2b642c Update README etc to reference 1.72.0
b4e635d stub: Utility method StreamObservers.nextAndComplete() that does both onNext ...
a6e1c1f stub: trailersFromThrowable() metadata should be copied (#11979) (#12008)
8681786 xds: ClusterResolverLoadBalancer handle update for both resolved addresses an...
666136b core: Avoid Set.removeAll() when passing a possibly-large List (#11994) (#12000)
2448c8b util: Replace BUFFER_PICKER with FixedResultPicker
2e260a4 util: Graceful switch to new LB when leaving CONNECTING
7507a9e core: Use java.time.Time.getNano in InstantTimeProvider without reflection (#...
a332edd fix: cleans up FileWatcherCertificateProvider in XdsSecurityClientServerTest
Additional commits viewable in compare view

Updates com.google.api.grpc:proto-google-common-protos from 2.54.1 to 2.55.0

Release notes

Sourced from com.google.api.grpc:proto-google-common-protos's releases.

v2.55.0

2.55.0 (2025-03-12)

Features

generate showcase using docker image (#3568) (3857e3f)

next release from main branch is 2.55.0 (#3668) (1eda55f)

Bug Fixes

remove call credentials from call options if DirectPath (#3670) (5ede29c)

Dependencies

update arrow.version to v18.2.0 (#3675) (5a555e5)

Changelog

Sourced from com.google.api.grpc:proto-google-common-protos's changelog.

2.55.0 (2025-03-12)

Features

generate showcase using docker image (#3568) (3857e3f)

next release from main branch is 2.55.0 (#3668) (1eda55f)

Bug Fixes

remove call credentials from call options if DirectPath (#3670) (5ede29c)

Dependencies

update arrow.version to v18.2.0 (#3675) (5a555e5)

2.54.0 (2025-02-25)

Features

add client side logging with slf4j (#3403) (fe002fa)

Bug Fixes

S2A gRPC flow creates ComputeEngineCredentials via newBuilder. (#3651) (29c061e)

Dependencies

update dependency ch.qos.logback:logback-core to v1.3.15 [security] (#3654) (093d867)

update google api dependencies (#3631) (48db2a1)

update google auth library dependencies to v1.33.1 (#3656) (f7877a5)

update google http client dependencies to v1.46.3 (#3657) (9d5b3b5)

update grpc to 1.70.0 (#3641) (ad26cf9)

update grpc to 1.70.0 (missed update) (#3658) (6ca0599)

Update opentelemetry-semconv to v1.29.0-alpha (#3635) (49ac09d)

Documentation

update showcase readme (#3659) (0ddf073)

2.53.0 (2025-02-10)

Features

... (truncated)

Commits

a38020a chore(main): release 2.55.0 (#3669)
8fd7b62 build(deps): update dependency com.google.cloud:google-cloud-shared-config to...
2562a7d chore: update googleapis commit at Thu Feb 27 02:27:38 UTC 2025 (#3666)
542d98d chore: add aliases to generate command options. (#3689)
5192426 chore: add java 8 compatibility check (#3688)
25d3101 chore: fix logback-classic version for testing (#3686)
0932605 test: Reduce the LRO timeout value in Showcase tests (#3684)
47ab198 chore: Update README and CI with the new name of showcase module. (#3680)
18cb026 chore: fix showcase clirr test after java-showcase renaming (#3685)
5ede29c fix: remove call credentials from call options if DirectPath (#3670)
Additional commits viewable in compare view

Updates io.grpc:grpc-protobuf from 1.71.0 to 1.72.0

Release notes

Sourced from io.grpc:grpc-protobuf's releases.

V1.72.0

API Changes

util: Remove deprecated method GracefulSwitchLb.switchTo() (f207be39a). It is rarely used outside of gRPC. The configuration is passed as lb policy configuration instead

xds: Add support for custom per-target credentials on the transport (#11951) (1958e4237)

xds: Explicitly set request hash key for the ring hash LB policy (892144dca)

Bug Fixes

core: Apply ManagedChannelImpl's updateBalancingState() immediately (ca4819ac6)

xds: Fix cluster selection races when updating config selector (d82613a74)

otel: Fix span names as per the A72 gRFC changes (#11974) (94f8e9369)

xds: ClusterResolverLoadBalancer handle update for both resolved addresses and errors via ResolutionResult (#11997) (868178651)

Improvements

netty: Avoid allocating an exception on transport shutdown. This reduces allocation rate for connection-heavy workloads/load testing (a57c14a51)

servlet: Set an explicit description for CANCELLED status (#11927) (fca1d3cf4)

xds: gRFC A74 xDS Config Tears implementation in the XdsNameResolver (e80c19745). While there is more remaining, users may already see reduced latency when resources are replaced. For example, if changing a route from one backend service to another, RPCs may see less latency during the transition

core: Log any exception during channel panic because of exception (3961a923a). This prevents the exception from propagating up the stack on an arbitrary thread. Such exceptions are rarely interesting. Instead, the exception that caused the channel panic is the important one, and RPCs will still fail with its details

util: Graceful switch to new LB when leaving CONNECTING (2e260a4bb). Previously when using xDS and the configuration changes the LB policy, the old LB policy is used until the new one is READY. Now the old LB policy is used until the new policy becomes READY, TRANSIENT_FAILURE, or IDLE

core: Use java.time.Time.getNano directly in InstantTimeProvider. Previously reflection was used which would confuse R8 full mode (#11977) (7507a9ec0)

core: Avoid cancellation exceptions when notifying watchers that already have their connections cancelled (#11934) (350f90e1a)

rls: allow maxAge in RLS config to exceed 5 minutes if staleAge is set. Previously, the limit was 5 minutes, which isn't enough for some gRPC clients (#11931) (c340f4a2f)

xds: avoid unnecessary dns lookup for CIDR addresses (#11932) (602aece08)

netty: Swap to UniformStreamByteDistributor (#11954) (2f52a0036). gRPC will no longer observe the HTTP/2 priorities, which were not used directly by gRPC and deprecated in RFC 9113

core: Avoid Set.removeAll() when passing a possibly-large List (#11994) (666136b4b)

stub: trailersFromThrowable() metadata should be copied (#11979) (a6e1c1f09)

New Features

xds: xDS-based HTTP CONNECT configuration (#11861) (12197065f)

netty: Per-rpc authority verification against peer cert subject names. Overriding transport authority at rpc time is only allowed when using TlsChannelCredentials. The per-rpc authority verification feature is guarded by the environment variable GRPC_ENABLE_PER_RPC_AUTHORITY_CHECK in this release. When this is false or not set, the rpc will not fail when the authority verification fails but a warning will be logged. In a subsequent release the usage of this environment variable will be removed and RPCs will start failing if the authority doesn't match the peer certificate names. The environment variable is temporary; if you are depending on the existing insecure behavior, please file an issue (#11724) (cdab410b8)

Thanks to

@panchenko @emmanuel-ferdman @JoeCqupt

Commits

b0794e4 Bump version to 1.72.0
a2b642c Update README etc to reference 1.72.0
b4e635d stub: Utility method StreamObservers.nextAndComplete() that does both onNext ...
a6e1c1f stub: trailersFromThrowable() metadata should be copied (#11979) (#12008)
8681786 xds: ClusterResolverLoadBalancer handle update for both resolved addresses an...
666136b core: Avoid Set.removeAll() when passing a possibly-large List (#11994) (#12000)
2448c8b util: Replace BUFFER_PICKER with FixedResultPicker
2e260a4 util: Graceful switch to new LB when leaving CONNECTING
7507a9e core: Use java.time.Time.getNano in InstantTimeProvider without reflection (#...
a332edd fix: cleans up FileWatcherCertificateProvider in XdsSecurityClientServerTest
Additional commits viewable in compare view

Updates io.grpc:grpc-stub from 1.71.0 to 1.72.0

Release notes

Sourced from io.grpc:grpc-stub's releases.

V1.72.0

API Changes

util: Remove deprecated method GracefulSwitchLb.switchTo() (f207be39a). It is rarely used outside of gRPC. The configuration is passed as lb policy configuration instead

xds: Add support for custom per-target credentials on the transport (#11951) (1958e4237)

xds: Explicitly set request hash key for the ring hash LB policy (892144dca)

Bug Fixes

core: Apply ManagedChannelImpl's updateBalancingState() immediately (ca4819ac6)

xds: Fix cluster selection races when updating config selector (d82613a74)

otel: Fix span names as per the A72 gRFC changes (#11974) (94f8e9369)

xds: ClusterResolverLoadBalancer handle update for both resolved addresses and errors via ResolutionResult (#11997) (868178651)

Improvements

netty: Avoid allocating an exception on transport shutdown. This reduces allocation rate for connection-heavy workloads/load testing (a57c14a51)

servlet: Set an explicit description for CANCELLED status (#11927) (fca1d3cf4)

xds: gRFC A74 xDS Config Tears implementation in the XdsNameResolver (e80c19745). While there is more remaining, users may already see reduced latency when resources are replaced. For example, if changing a route from one backend service to another, RPCs may see less latency during the transition

core: Log any exception during channel panic because of exception (3961a923a). This prevents the exception from propagating up the stack on an arbitrary thread. Such exceptions are rarely interesting. Instead, the exception that caused the channel panic is the important one, and RPCs will still fail with its details

util: Graceful switch to new LB when leaving CONNECTING (2e260a4bb). Previously when using xDS and the configuration changes the LB policy, the old LB policy is used until the new one is READY. Now the old LB policy is used until the new policy becomes READY, TRANSIENT_FAILURE, or IDLE

core: Use java.time.Time.getNano directly in InstantTimeProvider. Previously reflection was used which would confuse R8 full mode (#11977) (7507a9ec0)

core: Avoid cancellation exceptions when notifying watchers that already have their connections cancelled (#11934) (350f90e1a)

rls: allow maxAge in RLS config to exceed 5 minutes if staleAge is set. Previously, the limit was 5 minutes, which isn't enough for some gRPC clients (#11931) (c340f4a2f)

xds: avoid unnecessary dns lookup for CIDR addresses (#11932) (602aece08)

netty: Swap to UniformStreamByteDistributor (#11954) (2f52a0036). gRPC will no longer observe the HTTP/2 priorities, which were not used directly by gRPC and deprecated in RFC 9113

core: Avoid Set.removeAll() when passing a possibly-large List (#11994) (666136b4b)

stub: trailersFromThrowable() metadata should be copied (#11979) (a6e1c1f09)

New Features

xds: xDS-based HTTP CONNECT configuration (#11861) (12197065f)

netty: Per-rpc authority verification against peer cert subject names. Overriding transport authority at rpc time is only allowed when using TlsChannelCredentials. The per-rpc authority verification feature is guarded by the environment variable GRPC_ENABLE_PER_RPC_AUTHORITY_CHECK in this release. When this is false or not set, the rpc will not fail when the authority verification fails but a warning will be logged. In a subsequent release the usage of this environment variable will be removed and RPCs will start failing if the authority doesn't match the peer certificate names. The environment variable is temporary; if you are depending on the existing insecure behavior, please file an issue (#11724) (cdab410b8)

Thanks to

@panchenko @emmanuel-ferdman @JoeCqupt

Commits

b0794e4 Bump version to 1.72.0
a2b642c Update README etc to reference 1.72.0
b4e635d stub: Utility method StreamObservers.nextAndComplete() that does both onNext ...
a6e1c1f stub: trailersFromThrowable() metadata should be copied (#11979) (#12008)
8681786 xds: ClusterResolverLoadBalancer handle update for both resolved addresses an...
666136b core: Avoid Set.removeAll() when passing a possibly-large List (#11994) (#12000)
2448c8b util: Replace BUFFER_PICKER with FixedResultPicker
2e260a4 util: Graceful switch to new LB when leaving CONNECTING
7507a9e core: Use java.time.Time.getNano in InstantTimeProvider without reflection (#...
a332edd fix: cleans up FileWatcherCertificateProvider in XdsSecurityClientServerTest
Additional commits viewable in compare view

Updates io.grpc:grpc-services from 1.71.0 to 1.72.0

Release notes

Sourced from io.grpc:grpc-services's releases.

V1.72.0

API Changes

util: Remove deprecated method GracefulSwitchLb.switchTo() (f207be39a). It is rarely used outside of gRPC. The configuration is passed as lb policy configuration instead

xds: Add support for custom per-target credentials on the transport (#11951) (1958e4237)

xds: Explicitly set request hash key for the ring hash LB policy (892144dca)

Bug Fixes

core: Apply ManagedChannelImpl's updateBalancingState() immediately (ca4819ac6)

xds: Fix cluster selection races when updating config selector (d82613a74)

otel: Fix span names as per the A72 gRFC changes (#11974) (94f8e9369)

xds: ClusterResolverLoadBalancer handle update for both resolved addresses and errors via ResolutionResult (#11997) (868178651)

Improvements

netty: Avoid allocating an exception on transport shutdown. This reduces allocation rate for connection-heavy workloads/load testing (a57c14a51)

servlet: Set an explicit description for CANCELLED status (#11927) (fca1d3cf4)

xds: gRFC A74 xDS Config Tears implementation in the XdsNameResolver (e80c19745). While there is more remaining, users may already see reduced latency when resources are replaced. For example, if changing a route from one backend service to another, RPCs may see less latency during the transition

core: Log any exception during channel panic because of exception (3961a923a). This prevents the exception from propagating up the stack on an arbitrary thread. Such exceptions are rarely interesting. Instead, the exception that caused the channel panic is the important one, and RPCs will still fail with its details

util: Graceful switch to new LB when leaving CONNECTING (2e260a4bb). Previously when using xDS and the configuration changes the LB policy, the old LB policy is used until the new one is READY. Now the old LB policy is used until the new policy becomes READY, TRANSIENT_FAILURE, or IDLE

core: Use java.time.Time.getNano directly in InstantTimeProvider. Previously reflection was used which would confuse R8 full mode (#11977) (7507a9ec0)

core: Avoid cancellation exceptions when notifying watchers that already have their connections cancelled (#11934) (350f90e1a)

rls: allow maxAge in RLS config to exceed 5 minutes if staleAge is set. Previously, the limit was 5 minutes, which isn't enough for some gRPC clients (#11931) (c340f4a2f)

xds: avoid unnecessary dns lookup for CIDR addresses (#11932) (602aece08)

netty: Swap to UniformStreamByteDistributor (#11954) (2f52a0036). gRPC will no longer observe the HTTP/2 priorities, which were not used directly by gRPC and deprecated in RFC 9113

core: Avoid Set.removeAll() when passing a possibly-large List (#11994) (666136b4b)

stub: trailersFromThrowable() metadata should be copied (#11979) (a6e1c1f09)

New Features

xds: xDS-based HTTP CONNECT configuration (#11861) (12197065f)

netty: Per-rpc authority verification against peer cert subject names. Overriding transport authority at rpc time is only allowed when using TlsChannelCredentials. The per-rpc authority verification feature is guarded by the environment variable GRPC_ENABLE_PER_RPC_AUTHORITY_CHECK in this release. When this is false or not set, the rpc will not fail when the authority verification fails but a warning will be logged. In a subsequent release the usage of this environment variable will be removed and RPCs will start failing if the authority doesn't match the peer certificate names. The environment variable is temporary; if you are depending on the existing insecure behavior, please file an issue (#11724) (cdab410b8)

Thanks to

@panchenko @emmanuel-ferdman @JoeCqupt

Commits

b0794e4 Bump version to 1.72.0
a2b642c Update README etc to reference 1.72.0
b4e635d stub: Utility method StreamObservers.nextAndComplete() that does both onNext ...
a6e1c1f stub: trailersFromThrowable() metadata should be copied (#11979) (#12008)
8681786 xds: ClusterResolverLoadBalancer handle update for both resolved addresses an...
666136b core: Avoid Set.removeAll() when passing a possibly-large List (#11994) (#12000)
2448c8b util: Replace BUFFER_PICKER with FixedResultPicker
2e260a4 util: Graceful switch to new LB when leaving CONNECTING
7507a9e core: Use java.time.Time.getNano in InstantTimeProvider without reflection (#...
a332edd fix: cleans up FileWatcherCertificateProvider in XdsSecurityClientServerTest
Additional commits viewable in compare view

Updates io.grpc:grpc-netty-shaded from 1.71.0 to 1.72.0

Release notes

Sourced from io.grpc:grpc-netty-shaded's releases.

V1.72.0

API Changes

util: Remove deprecated method GracefulSwitchLb.switchTo() (f207be39a). It is rarely used outside of gRPC. The configuration is passed as lb policy configuration instead

xds: Add support for custom per-target credentials on the transport (#11951) (1958e4237)

xds: Explicitly set request hash key for the ring hash LB policy (892144dca)

Bug Fixes

core: Apply ManagedChannelImpl's updateBalancingState() immediately (ca4819ac6)

xds: Fix cluster selection races when updating config selector (d82613a74)

otel: Fix span names as per the A72 gRFC changes (#11974) (94f8e9369)

xds: ClusterResolverLoadBalancer handle update for both resolved addresses and errors via ResolutionResult (#11997) (868178651)

Improvements

netty: Avoid allocating an exception on transport shutdown. This reduces allocation rate for connection-heavy workloads/load testing (a57c14a51)

servlet: Set an explicit description for CANCELLED status (#11927) (fca1d3cf4)

xds: gRFC A74 xDS Config Tears implementation in the XdsNameResolver (e80c19745). While there is more remaining, users may already see reduced latency when resources are replaced. For example, if changing a route from one backend service to another, RPCs may see less latency during the transition

core: Log any exception during channel panic because of exception (3961a923a). This prevents the exception from propagating up the stack on an arbitrary thread. Such exceptions are rarely interesting. Instead, the exception that caused the channel panic is the important one, and RPCs will still fail with its details

util: Graceful switch to new LB when leaving CONNECTING (2e260a4bb). Previously when using xDS and the configuration changes the LB policy, the old LB policy is used until the new one is READY. Now the old LB policy is used until the new policy becomes READY, TRANSIENT_FAILURE, or IDLE

core: Use java.time.Time.getNano directly in InstantTimeProvider. Previously reflection was used which would confuse R8 full mode (#11977) (7507a9ec0)

core: Avoid cancellation exceptions when notifying watchers that already have their connections cancelled (#11934) (350f90e1a)

rls: allow maxAge in RLS config to exceed 5 minutes if staleAge is set. Previously, the limit was 5 minutes, which isn't enough for some gRPC clients (#11931) (c340f4a2f)

xds: avoid unnecessary dns lookup for CIDR addresses (#11932) (602aece08)

netty: Swap to UniformStreamByteDistributor (#11954) (2f52a0036). gRPC will no longer observe the HTTP/2 priorities, which were not used directly by gRPC and deprecated in RFC 9113

core: Avoid Set.removeAll() when passing a possibly-large List (#11994) (666136b4b)

stub: trailersFromThrowable() metadata should be copied (#11979) (a6e1c1f09)

New Features

xds: xDS-based HTTP CONNECT configuration (#11861) (12197065f)

netty: Per-rpc authority verification against peer cert subject names. Overriding transport authority at rpc time is only allowed when using TlsChannelCredentials. The per-rpc authority verification feature is guarded by the environment variable GRPC_ENABLE_PER_RPC_AUTHORITY_CHECK in this release. When this is false or not set, the rpc will not fail when the authority verification fails but a warning will be logged. In a subsequent release the usage of this environment variable will be removed and RPCs will start failing if the authority doesn't match the peer certificate names. The environment variable is temporary; if you are depending on the existing insecure behavior, please file an issue (#11724) (cdab410b8)

Thanks to

@panchenko @emmanuel-ferdman @JoeCqupt

Commits

b0794e4 Bump version to 1.72.0
a2b642c Update README etc to reference 1.72.0
b4e635d stub: Utility method StreamObservers.nextAndComplete() that does both onNext ...
a6e1c1f stub: trailersFromThrowable() metadata should be copied (#11979) (#12008)
8681786 xds: ClusterResolverLoadBalancer handle update for both resolved addresses an...
666136b core: Avoid Set.removeAll() when passing a possibly-large List (#11994) (#12000)
2448c8b util: Replace BUFFER_PICKER with FixedResultPicker
2e260a4 util: Graceful switch to new LB when leaving CONNECTING
7507a9e core: Use java.time.Time.getNano in InstantTimeProvider without reflection (#...
a332edd fix: cleans up FileWatcherCertificateProvider in XdsSecurityClientServerTest
Additional commits viewable in compare view

Updates io.grpc:grpc-testing from 1.71.0 to 1.72.0

Release notes

Sourced from io.grpc:grpc-testing's releases.

V1.72.0

API Changes

util: Remove deprecated method GracefulSwitchLb.switchTo() (f207be39a). It is rarely used outside of gRPC. The configuration is passed as lb policy configuration instead

xds: Add support for custom per-target credentials on the transport (#11951) (1958e4237)

xds: Explicitly set request hash key for the ring hash LB policy (892144dca)

Bug Fixes

core: Apply ManagedChannelImpl's updateBalancingState() immediately (ca4819ac6)

xds: Fix cluster selection races when updating config selector (d82613a74)

otel: Fix span names as per the A72 gRFC changes (#11974) (94f8e9369)

xds: ClusterResolverLoadBalancer handle update for both resolved addresses and errors via ResolutionResult (#11997) (868178651)

Improvements

netty: Avoid allocating an exception on transport shutdown. This reduces allocation rate for connection-heavy workloads/load testing (a57c14a51)

servlet: Set an explicit description for CANCELLED status (#11927) (fca1d3cf4)

xds: gRFC A74 xDS Config Tears implementation in the XdsNameResolver (e80c19745). While there is more remaining, users may already see reduced latency when resources are replaced. For example, if changing a route from one backend service to another, RPCs may see less latency during the transition

core: Log any exception during channel panic because of exception (3961a923a). This prevents the exception from propagating up the stack on an arbitrary thread. Such exceptions are rarely interesting. Instead, the exception that caused the channel panic is the important one, and RPCs will still fail with its details

util: Graceful switch to new LB when leaving CONNECTING (2e260a4bb). Previously when using xDS and the configuration changes the LB policy, the old LB policy is used until the new one is READY. Now the old LB policy is used until the new policy becomes READY, TRANSIENT_FAILURE, or IDLE

core: Use java.time.Time.getNano directly in InstantTimeProvider. Previously reflection was used which would confuse R8 full mode (#11977) (7507a9ec0)

core: Avoid cancellation exceptions when notifying watchers that already have their connections cancelled (#11934) (350f90e1a)

rls: allow maxAge in RLS config to exceed 5 minutes if staleAge is set. Previously, the limit was 5 minutes, which isn't enough for some gRPC clients (#11931) (c340f4a2f)

xds: avoid unnecessary dns lookup for CIDR addresses (#11932) (602aece08)

netty: Swap to UniformStreamByteDistributor (#11954) (2f52a0036). gRPC will no longer observe the HTTP/2 priorities, which were not used directly by gRPC and deprecated in RFC 9113

core: Avoid Set.removeAll() when passing a possibly-large List (#11994) (666136b4b)

stub: trailersFromThrowable() metadata should be copied (#11979) (a6e1c1f09)

New Features

xds: xDS-based HTTP CONNECT configuration (#11861) (12197065f)

netty: Per-rpc authority verification against peer cert subject names. Overriding transport authority at rpc time is only allowed when using TlsChannelCredentials. The per-rpc authority verification feature is guarded by the environment variable GRPC_ENABLE_PER_RPC_AUTHORITY_CHECK in this release. When this is false or not set, the rpc will not fail when the authority verification fails but a warning will be logged. In a subsequent release the usage of this environment variable will be removed and RPCs will start failing if the authority doesn't match the peer certificate names. The environment variable is temporary; if you are depending on the existing insecure behavior, please file an issue (#11724) (cdab410b8)

Thanks to

@panchenko @emmanuel-ferdman @JoeCqupt

Commits

b0794e4 Bump version to 1.72.0
a2b642c Update README etc to reference 1.72.0
b4e635d stub: Utility method StreamObservers.nextAndComplete() that does both onNext ...
a6e1c1f stub: trailersFromThrowable() metadata should be copied (#11979) (#12008)
8681786 xds: ClusterResolverLoadBalancer handle update for both resolved addresses an...
666136b core: Avoid Set.removeAll() when passing a possibly-large List (#11994) (#12000)
2448c8b util: Replace BUFFER_PICKER with FixedResultPicker
2e260a4 util: Graceful switch to new LB when leaving CONNECTING
7507a9e core: Use java.time.Time.getNano in InstantTimeProvider without reflection (#...
a332edd fix: cleans up FileWatcherCertificateProvider in XdsSecurityClientServerTest
Additional commits viewable in compare view

Updates io.grpc:grpc-inprocess from 1.71.0 to 1.72.0

Release notes

Sourced from io.grpc:grpc-inprocess's releases.

V1.72.0

API Changes

util: Remove deprecated method GracefulSwitchLb.switchTo() (f207be39a). It is rarely used outside of gRPC. The configuration is passed as lb policy configuration instead

xds: Add support for custom per-target credentials on the transport (#11951) (1958e4237)

xds: Explicitly set request hash key for the ring hash LB policy (892144dca)

Bug Fixes

core: Apply ManagedChannelImpl's updateBalancingState() immediately (ca4819ac6)

xds: Fix cluster selection races when updating config selector (d82613a74)

otel: Fix span names as per the A72 gRFC changes (#11974) (94f8e9369)

xds: ClusterResolverLoadBalancer handle update for both resolved addresses and errors via ResolutionResult (#11997) (868178651)

Improvements

netty: Avoid allocating an exception on transport shutdown. This reduces allocation rate for connection-heavy workloads/load testing (a57c14a51)

servlet: Set an explicit description for CANCELLED status (#11927) (fca1d3cf4)

xds: gRFC A74 xDS Config Tears implementation in the XdsNameResolver (e80c19745). While there is more remaining, users may already see reduced latency when resources are replaced. For example, if changing a route from one backend service to another, RPCs may see less latency during the transition

core: Log any exception during channel panic because of exception (3961a923a). This prevents the exception from propagating up the stack on an arbitrary thread. Such exceptions are rarely interesting. Instead, the exception that caused the channel panic is the important one, and RPCs will still fail with its details

util: Graceful switch to new LB when leaving CONNECTING (2e260a4bb). Previously when using xDS and the configuration changes the LB policy, the old LB policy is used until the new one is READY. Now the old LB policy is used until the new policy becomes READY, TRANSIENT_FAILURE, or IDLE

core: Use java.time.Time.getNano directly in InstantTimeProvider. Previously reflection was used which would confuse R8 full mode (#11977) (7507a9ec0)

core: Avoid cancellation exceptions when notifying watchers that already have their connections cancelled (#11934) (350f90e1a)

rls: allow maxAge in RLS config to exceed 5 minutes if staleAge is set. Previously, the limit was 5 minutes, which isn't enough for some gRPC clients (#11931) (c340f4a2f)

xds: avoid unnecessary dns lookup for CIDR addresses (#11932) (602aece08)

netty: Swap to UniformStreamByteDistributor (#11954) (2f52a0036). gRPC will no longer observe the HTTP/2 priorities, which were not used directly by gRPC and deprecated in RFC 9113

core: Avoid Set.removeAll() when passing a possibly-large List (#11994) (666136b4b)

stub: trailersFromThrowable() metadata should be copied (#11979) (a6e1c1f09)

New Features

xds: xDS-based HTTP CONNECT configuration (#11861) (12197065f)

netty: Per-rpc authority verification against peer cert subject names. Overriding transport authority at rpc time is only allowed when using TlsChannelCredentials. The per-rpc authority verification feature is guarded by the environment variable GRPC_ENABLE_PER_RPC_AUTHORITY_CHECK in this release. When this is false or not set, the rpc will not fail when the authority verification fails but a warning will be logged. In a subsequent release the usage of this environment variable will be removed and RPCs will start failing if the authority doesn't match the peer certificate names. The environment variable is temporary; if you are depending on the existing insecure behavior, please file an issue (#11724) (cdab410b8)

Thanks to

@panchenko @emmanuel-ferdman @JoeCqupt

Commits

b0794e4 Bump version to 1.72.0
a2b642c Update README etc to reference 1.72.0
b4e635d stub: Utility method StreamObservers.nextAndComplete() that does both onNext ...
a6e1c1f stub: trailersFromThrowable() metadata should be copied (#11979) (#12008)
8681786 xds: ClusterResolverLoadBalancer handle update for both resolved addresses an...
666136b core: Avoid Set.removeAll() when passing a possibly-large List (#11994) (#12000)
2448c8b util: Replace BUFFER_PICKER with FixedResultPicker
2e260a4 util: Graceful switch to new LB when leaving CONNECTING
7507a9e core: Use java.time.Time.getNano in InstantTimeProvider without reflection (#...
a332edd fix: cleans up FileWatcherCertificateProvider in XdsSecurityClientServerTest
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
`@dependabot unignore <dependency n...

Description has been truncated

Bumps the grpc-deps group with 8 updates in the /java directory: | Package | From | To | | --- | --- | --- | | [io.grpc:protoc-gen-grpc-java](https://github.com/grpc/grpc-java) | `1.71.0` | `1.72.0` | | [com.google.api.grpc:proto-google-common-protos](https://github.com/googleapis/sdk-platform-java) | `2.54.1` | `2.55.0` | | [io.grpc:grpc-protobuf](https://github.com/grpc/grpc-java) | `1.71.0` | `1.72.0` | | [io.grpc:grpc-stub](https://github.com/grpc/grpc-java) | `1.71.0` | `1.72.0` | | [io.grpc:grpc-services](https://github.com/grpc/grpc-java) | `1.71.0` | `1.72.0` | | [io.grpc:grpc-netty-shaded](https://github.com/grpc/grpc-java) | `1.71.0` | `1.72.0` | | [io.grpc:grpc-testing](https://github.com/grpc/grpc-java) | `1.71.0` | `1.72.0` | | [io.grpc:grpc-inprocess](https://github.com/grpc/grpc-java) | `1.71.0` | `1.72.0` | Updates `io.grpc:protoc-gen-grpc-java` from 1.71.0 to 1.72.0 - [Release notes](https://github.com/grpc/grpc-java/releases) - [Commits](grpc/grpc-java@v1.71.0...v1.72.0) Updates `com.google.api.grpc:proto-google-common-protos` from 2.54.1 to 2.55.0 - [Release notes](https://github.com/googleapis/sdk-platform-java/releases) - [Changelog](https://github.com/googleapis/sdk-platform-java/blob/main/CHANGELOG.md) - [Commits](googleapis/sdk-platform-java@gax/v2.54.1...v2.55.0) Updates `io.grpc:grpc-protobuf` from 1.71.0 to 1.72.0 - [Release notes](https://github.com/grpc/grpc-java/releases) - [Commits](grpc/grpc-java@v1.71.0...v1.72.0) Updates `io.grpc:grpc-stub` from 1.71.0 to 1.72.0 - [Release notes](https://github.com/grpc/grpc-java/releases) - [Commits](grpc/grpc-java@v1.71.0...v1.72.0) Updates `io.grpc:grpc-services` from 1.71.0 to 1.72.0 - [Release notes](https://github.com/grpc/grpc-java/releases) - [Commits](grpc/grpc-java@v1.71.0...v1.72.0) Updates `io.grpc:grpc-netty-shaded` from 1.71.0 to 1.72.0 - [Release notes](https://github.com/grpc/grpc-java/releases) - [Commits](grpc/grpc-java@v1.71.0...v1.72.0) Updates `io.grpc:grpc-testing` from 1.71.0 to 1.72.0 - [Release notes](https://github.com/grpc/grpc-java/releases) - [Commits](grpc/grpc-java@v1.71.0...v1.72.0) Updates `io.grpc:grpc-inprocess` from 1.71.0 to 1.72.0 - [Release notes](https://github.com/grpc/grpc-java/releases) - [Commits](grpc/grpc-java@v1.71.0...v1.72.0) --- updated-dependencies: - dependency-name: io.grpc:protoc-gen-grpc-java dependency-version: 1.72.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: grpc-deps - dependency-name: com.google.api.grpc:proto-google-common-protos dependency-version: 2.55.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: grpc-deps - dependency-name: io.grpc:grpc-protobuf dependency-version: 1.72.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: grpc-deps - dependency-name: io.grpc:grpc-stub dependency-version: 1.72.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: grpc-deps - dependency-name: io.grpc:grpc-services dependency-version: 1.72.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: grpc-deps - dependency-name: io.grpc:grpc-netty-shaded dependency-version: 1.72.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: grpc-deps - dependency-name: io.grpc:grpc-testing dependency-version: 1.72.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: grpc-deps - dependency-name: io.grpc:grpc-inprocess dependency-version: 1.72.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: grpc-deps ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2025-09-16T05:15:44Z

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

dependabot · 2025-09-16T05:50:40Z

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

dependabot · 2025-09-25T05:46:32Z

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

dependabot · 2025-11-17T05:19:59Z

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Apr 21, 2025

dependabot bot force-pushed the dependabot/gradle/java/grpc-deps-45307d6acd branch 2 times, most recently from 238ddd0 to c15c647 Compare May 2, 2025 05:42

dependabot bot force-pushed the dependabot/gradle/java/grpc-deps-45307d6acd branch from c15c647 to 0a66322 Compare May 13, 2025 05:54

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the grpc-deps group across 1 directory with 8 updates#710

Bump the grpc-deps group across 1 directory with 8 updates#710
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/gradle/java/grpc-deps-45307d6acd

dependabot bot commented on behalf of github Apr 21, 2025 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Sep 16, 2025

Uh oh!

dependabot bot commented on behalf of github Sep 16, 2025

Uh oh!

dependabot bot commented on behalf of github Sep 25, 2025

Uh oh!

dependabot bot commented on behalf of github Nov 17, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Apr 21, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

V1.72.0

API Changes

Bug Fixes

Improvements

New Features

Thanks to

v2.55.0

2.55.0 (2025-03-12)

Features

Bug Fixes

Dependencies

2.55.0 (2025-03-12)

Features

Bug Fixes

Dependencies

2.54.0 (2025-02-25)

Features

Bug Fixes

Dependencies

Documentation

2.53.0 (2025-02-10)

Features

V1.72.0

API Changes

Bug Fixes

Improvements

New Features

Thanks to

V1.72.0

API Changes

Bug Fixes

Improvements

New Features

Thanks to

V1.72.0

API Changes

Bug Fixes

Improvements

New Features

Thanks to

V1.72.0

API Changes

Bug Fixes

Improvements

New Features

Thanks to

V1.72.0

API Changes

Bug Fixes

Improvements

New Features

Thanks to

V1.72.0

API Changes

Bug Fixes

Improvements

New Features

Thanks to

Uh oh!

dependabot bot commented on behalf of github Sep 16, 2025

Uh oh!

dependabot bot commented on behalf of github Sep 16, 2025

Uh oh!

dependabot bot commented on behalf of github Sep 25, 2025

Uh oh!

dependabot bot commented on behalf of github Nov 17, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot bot commented on behalf of github Apr 21, 2025 •

edited

Loading