This is an automated email from the ASF dual-hosted git repository.
jbonofre pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/arrow-java.git
The following commit(s) were added to refs/heads/main by this push:
new fb34d7a48 MINOR: Bump io.grpc:grpc-bom from 1.81.0 to 1.82.1 (#1199)
fb34d7a48 is described below
commit fb34d7a4848f5c5a93470b731e28490b1b64f166
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Mon Jun 29 09:53:53 2026 +0200
MINOR: Bump io.grpc:grpc-bom from 1.81.0 to 1.82.1 (#1199)
Bumps [io.grpc:grpc-bom](https://github.com/grpc/grpc-java) from 1.81.0
to 1.82.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/grpc/grpc-java/releases";>io.grpc:grpc-bom's
releases</a>.</em></p>
<blockquote>
<h2>v1.82.1</h2>
<ul>
<li>protoc-gen-grpc-java: Fix missing osx-x86_64 binary (<a
href="https://redirect.github.com/grpc/grpc-java/pull/12878";>grpc/grpc-java#12878</a>).
This fixes a regression in v1.82.0</li>
</ul>
<h2>v1.82.0</h2>
<p>This release drops support for Bazel 7. It may still run, but we are
no longer testing it. We are testing Bazel 8 and 9.</p>
<p>We are anticipating requiring Netty 4.2 in the next release. Please
file an issue if you still need Netty 4.1 support.</p>
<h3>Behavior Changes</h3>
<ul>
<li>xds: Disable Priority LB child policy retention cache (<a
href="https://redirect.github.com/grpc/grpc-java/issues/12806";>#12806</a>).
Previously, when a priority became inactive, its associated child load
balancer was kept in a deactivated state for potential reuse. Now,
inactive child balancers are immediately torn down and removed.</li>
<li>xds: skip DiscoveryRequest for unsubscribed types on stream ready
(<a
href="https://redirect.github.com/grpc/grpc-java/issues/12782";>#12782</a>).
When the bootstrap declares more than one xDS server (e.g. a default
server for LDS/CDS plus an authority-specific EDS-only server),
grpc-java was sending CDS/LDS DiscoveryRequests to the EDS-only server
too. That server replies <code>UNIMPLEMENTED</code>, which tears down
the stream and EDS data never arrives. This fix makes it skip
DiscoveryRequests for resource types we don't actually subscribe to on a
given server.</li>
</ul>
<h3>Improvements</h3>
<ul>
<li>Remove JSR-305 <code>@ThreadSafe</code> annotation and replace with
JavaDoc (<a
href="https://redirect.github.com/grpc/grpc-java/issues/12762";>#12762</a>).
Removes JSR-305 annotations but instead of replacing it with
ErrorProne's ThreadSafe, sticks to adding a JavaDoc comment. This is
done only in public non-final classes and interfaces. This allows Java
applications that have moved away from javax to compile and avoids a bug
in Immutables and Lombok (and possibly other annotation processors) from
failing when JSR-305 is not present.</li>
<li>core: Reduce per-stream idle memory on the server by 0.5 KB
(b38df6c94). The main improvement here is not retaining the request
Metadata for the life of the RPC. That means RPCs with larger request
Metadata would see a larger benefit.</li>
<li>core: Clarify missing content-type on HTTP error responses (<a
href="https://redirect.github.com/grpc/grpc-java/issues/12720";>#12720</a>).
Adjusts the diagnostic for the missing rather than invalid content-type,
in the Status description.</li>
<li>core: throw IOException when ProxySelector returns null or empty
list (<a
href="https://redirect.github.com/grpc/grpc-java/issues/12793";>#12793</a>).
ProxySelector.select(URI) is required to return a non-null, non-empty
list. Some implementations violate this, which previously caused an
opaque crash in ProxyDetectorImpl. Now it detects this case explicitly
and fails gracefully, naming the offending ProxySelector class to help
with debugging.</li>
<li>okhttp: enable TLS 1.3 by default for Android clients, retain TLS
1.2-only for desktop JVM (f43013161)</li>
<li>xds: Reduce per-endpoint memory from CDS LB (cc0d1a810). This is
most noticeable when there are many endpoints returned by EDS, but the
LB policy only uses a few of them, like pick_first.</li>
<li>xds: pre-parse custom metric names in WRR load balancer (<a
href="https://redirect.github.com/grpc/grpc-java/issues/12773";>#12773</a>)
(324fce715). This reduces the per-RPC overhead of the gRFC A114 support
added in v1.81.0</li>
<li>xds: Propagate status cause through XdsDepManager (13b4b9727). This
preserves more information for failures communicating with the control
plane.</li>
<li>binder: Give clear error when message is larger than parcel
(d92ca44a1)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>xds: Trust Manager fix for certain scenarios where SAN validation
shouldn't use the SNI sent (<a
href="https://redirect.github.com/grpc/grpc-java/issues/12775";>#12775</a>)
(bb153a83f).</li>
<li>core: Cancel DelayedClientCall when application listener throws (<a
href="https://redirect.github.com/grpc/grpc-java/issues/12761";>#12761</a>).
Align DelayedClientCall.DelayedListener with ClientCallImpl's existing
behavior for listener exceptions. When the application listener throws
from onHeaders/onMessage/onReady, catch the Throwable, cancel the call
with CANCELLED (cause = the throwable), and swallow subsequent
callbacks. Previously, a throw from the application listener escaped to
the callExecutor's uncaught-exception handler. The real call was not
cancelled and the transport kept delivering callbacks to an already
broken listener</li>
<li>core,opentelemetry: Fix server metric labels on early close (<a
href="https://redirect.github.com/grpc/grpc-java/issues/12774";>#12774</a>).
Addresses the server-side OpenTelemetry metric labeling bug where a
generated method can be recorded as grpc.method="other" if
<code>streamClosed()</code> happens before
<code>serverCallStarted()</code>.</li>
<li>core: Fix pick_first NPE with
<code>GRPC_EXPERIMENTAL_ENABLE_NEW_PICK_FIRST=true</code> when accepting
resolved addresses and in CONNECTING state (<a
href="https://redirect.github.com/grpc/grpc-java/issues/12814";>#12814</a>).
It makes sure that whenever PickFirstLeafLoadBalancer transitions into
CONNECTING the current address in the addressIndex has a corresponding
subchannel. This prevents an NPE in acceptResolvedAddresses in some
situations.</li>
<li>okhttp: HPACK should fail on varint overflow (ec1099254). This
should have no visible impact in normal use. It mostly just makes it
easier to debug broken implementations</li>
<li>xds: When using the file watcher certificate provider, reload
cert/key even if only one of them changes (f4125c591)</li>
<li>compiler: Avoid compile error on weird proto file names
(f021befcd)</li>
</ul>
<h3>New Features</h3>
<ul>
<li>googleapis: support <code>?force-xds</code> query parameter in the
<code>google-c2p</code> resolver (<a
href="https://redirect.github.com/grpc/grpc-java/issues/12760";>#12760</a>)
(86fa86063). This disables environment checks and uses xDS
unconditionally. Please note that this feature has not yet seen
comprehensive testing.</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li>Upgrade Netty to 4.1.133 (ada087b9d)</li>
<li>bazel: Upgrade googleapis proto repo to commit 1dbb1a14 (ec0a9c976).
This fixed a rules_go incompatibility issue with Bazel 9.1. But it also
greatly reduced the overall transitive dependencies, as the C++ grpc
repo is no longer a dependency</li>
<li>bazel: Upgrade workflows to Bazel 8 (039ad7779) add Bazel 9.1.0 to
our CI matrix (17be0d3d1)</li>
<li>protoc-gen-grpc-java: Linux binaries are now built with Ubuntu 20.04
instead of 18.04 (8802dc35b5, da98b04b09)</li>
</ul>
<h3>Thanks to</h3>
<p><a
href="https://github.com/becomeStar";><code>@​becomeStar</code></a><br />
<a
href="https://github.com/bengtsson1-flir";><code>@​bengtsson1-flir</code></a></p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/grpc/grpc-java/commit/7b5e9ff531a8706a562d04ed9570a4790ce8ec64";><code>7b5e9ff</code></a>
Bump version to 1.82.1</li>
<li><a
href="https://github.com/grpc/grpc-java/commit/20768f1630394b10d90c8737263cd198a43b7052";><code>20768f1</code></a>
Update README etc to reference 1.82.1</li>
<li><a
href="https://github.com/grpc/grpc-java/commit/5ab5eba718f2e278e1015a0b7544e8dcf68afbc0";><code>5ab5eba</code></a>
kokoro: Remove extra / in architecture replacement</li>
<li><a
href="https://github.com/grpc/grpc-java/commit/6726caf64c6e3d3db1ebfb5e9924fc75b706ae52";><code>6726caf</code></a>
buildscripts: add regional td config for psm-interop (v1.82.x backport)
(<a
href="https://redirect.github.com/grpc/grpc-java/issues/12864";>#12864</a>)</li>
<li><a
href="https://github.com/grpc/grpc-java/commit/022256f3f9f3816192dd11909b20902ebffcc37d";><code>022256f</code></a>
Bump version to 1.82.1-SNAPSHOT</li>
<li><a
href="https://github.com/grpc/grpc-java/commit/78fb51905574241fbb5bc0259f908ead78dae609";><code>78fb519</code></a>
Bump version to 1.82.0</li>
<li><a
href="https://github.com/grpc/grpc-java/commit/b62b0fc700b379cd080093d79330c181fce93de6";><code>b62b0fc</code></a>
Update README etc to reference 1.82.0</li>
<li><a
href="https://github.com/grpc/grpc-java/commit/8802dc35b5c4d17cc8a53986db4f98bec9a2e04f";><code>8802dc3</code></a>
build: downgrade multiarch to Ubuntu 20.04 and consolidate images (<a
href="https://redirect.github.com/grpc/grpc-java/issues/12830";>#12830</a>)</li>
<li><a
href="https://github.com/grpc/grpc-java/commit/be300bd11d15bfe6d19bd50c40dfec44e9b127e6";><code>be300bd</code></a>
kokoro: Avoid brew on Mac OS</li>
<li><a
href="https://github.com/grpc/grpc-java/commit/4111f6f33ab3198833da99391875d378a25229f4";><code>4111f6f</code></a>
core: throw IOException when ProxySelector returns null or empty list
(<a
href="https://redirect.github.com/grpc/grpc-java/issues/12793";>#12793</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/grpc/grpc-java/compare/v1.81.0...v1.82.1";>compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
---
pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/pom.xml b/pom.xml
index 326b26ee9..3aa3867b9 100644
--- a/pom.xml
+++ b/pom.xml
@@ -99,7 +99,7 @@ under the License.
<dep.slf4j.version>2.0.18</dep.slf4j.version>
<dep.guava-bom.version>33.6.0-jre</dep.guava-bom.version>
<dep.netty-bom.version>4.2.15.Final</dep.netty-bom.version>
- <dep.grpc-bom.version>1.81.0</dep.grpc-bom.version>
+ <dep.grpc-bom.version>1.82.1</dep.grpc-bom.version>
<dep.protobuf-bom.version>4.35.0</dep.protobuf-bom.version>
<dep.jackson-bom.version>2.22.0</dep.jackson-bom.version>
<dep.hadoop.version>3.5.0</dep.hadoop.version>
