dependabot[bot] opened a new pull request #1161: URL: https://github.com/apache/avro/pull/1161
Bumps `grpc.version` from 1.36.0 to 1.36.1. Updates `grpc-core` from 1.36.0 to 1.36.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/grpc/grpc-java/releases";>grpc-core's releases</a>.</em></p> <blockquote> <h2>v1.36.1</h2> <ul> <li>Fix an <code>UnsupportedOperationException</code> incompatibility with Netty 4.1.60.Final (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/7953";>#7953</a>). This allows users of grpc-netty that may be using Netty elsewhere in their application to upgrade their Netty version to avoid exposure to recent Netty CVEs. gRPC is not impacted by those CVEs so a Netty upgrade for gRPC itself is not necessary</li> <li>xds: Fixed a bug that would drop some node information (e.g., user-agent) when reporting to LRS (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/7964";>#7964</a>)</li> <li>xds: Renamed <code>io.grpc.xds.bootstrapValue</code> system property to <code>io.grpc.xds.bootstrapConfig</code>. This more closely matches the environment variable (<code>GRPC_XDS_BOOTSTRAP_CONFIG</code>) and avoids future confusion (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/7968";>#7968</a>)</li> <li>xds: Fixed a possible <code>IllegalStateException</code> causing Channel panic during LB shutdown (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/7942";>#7942</a>). The bug was introduced in v1.36.0. The issue likely most impacts xDS users that may leave a channel unused (no RPCs) for 30 minutes since idle timeout triggers LB shutdown</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/grpc/grpc-java/commit/2c56ed86d5cbdebf390b1a7af395d68d04e97884";><code>2c56ed8</code></a> Bump version to 1.36.1</li> <li><a href="https://github.com/grpc/grpc-java/commit/2ea5cedbc19c5e8d322d2dd9a193420602508cea";><code>2ea5ced</code></a> Update README etc to reference 1.36.1</li> <li><a href="https://github.com/grpc/grpc-java/commit/087cff274d32160321e642cb9958dd076ae503bf";><code>087cff2</code></a> netty: Add Http2Headers.setLong() for inbound headers</li> <li><a href="https://github.com/grpc/grpc-java/commit/d8ac871fe21a03676e1de18b32c4922803b23710";><code>d8ac871</code></a> buildscripts: pin the bootstrap generator version to 0.10.0 for v1.36.x branc...</li> <li><a href="https://github.com/grpc/grpc-java/commit/e3dd9ad9e99f1ddc7f1ce6f9f75bdc519b9524d6";><code>e3dd9ad</code></a> xds:fix cdsLoadBalancer2 childLb shutdown (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/7976";>#7976</a>)</li> <li><a href="https://github.com/grpc/grpc-java/commit/c5300949e01a1f6b81d9b11e2ed3f329bf8a9bf5";><code>c530094</code></a> xds: change system property for reading bootstrap config (backport v1.36.x) (...</li> <li><a href="https://github.com/grpc/grpc-java/commit/cddf3b00257582a33c6b076eb674a24b482515e5";><code>cddf3b0</code></a> xds: fix Node.toBuilder() bug</li> <li><a href="https://github.com/grpc/grpc-java/commit/50d6e1f507b51df6fffea8a0ae897f4cfc43544c";><code>50d6e1f</code></a> Bump version to 1.36.1-SNAPSHOT</li> <li>See full diff in <a href="https://github.com/grpc/grpc-java/compare/v1.36.0...v1.36.1";>compare view</a></li> </ul> </details> <br /> Updates `grpc-stub` from 1.36.0 to 1.36.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/grpc/grpc-java/releases";>grpc-stub's releases</a>.</em></p> <blockquote> <h2>v1.36.1</h2> <ul> <li>Fix an <code>UnsupportedOperationException</code> incompatibility with Netty 4.1.60.Final (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/7953";>#7953</a>). This allows users of grpc-netty that may be using Netty elsewhere in their application to upgrade their Netty version to avoid exposure to recent Netty CVEs. gRPC is not impacted by those CVEs so a Netty upgrade for gRPC itself is not necessary</li> <li>xds: Fixed a bug that would drop some node information (e.g., user-agent) when reporting to LRS (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/7964";>#7964</a>)</li> <li>xds: Renamed <code>io.grpc.xds.bootstrapValue</code> system property to <code>io.grpc.xds.bootstrapConfig</code>. This more closely matches the environment variable (<code>GRPC_XDS_BOOTSTRAP_CONFIG</code>) and avoids future confusion (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/7968";>#7968</a>)</li> <li>xds: Fixed a possible <code>IllegalStateException</code> causing Channel panic during LB shutdown (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/7942";>#7942</a>). The bug was introduced in v1.36.0. The issue likely most impacts xDS users that may leave a channel unused (no RPCs) for 30 minutes since idle timeout triggers LB shutdown</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/grpc/grpc-java/commit/2c56ed86d5cbdebf390b1a7af395d68d04e97884";><code>2c56ed8</code></a> Bump version to 1.36.1</li> <li><a href="https://github.com/grpc/grpc-java/commit/2ea5cedbc19c5e8d322d2dd9a193420602508cea";><code>2ea5ced</code></a> Update README etc to reference 1.36.1</li> <li><a href="https://github.com/grpc/grpc-java/commit/087cff274d32160321e642cb9958dd076ae503bf";><code>087cff2</code></a> netty: Add Http2Headers.setLong() for inbound headers</li> <li><a href="https://github.com/grpc/grpc-java/commit/d8ac871fe21a03676e1de18b32c4922803b23710";><code>d8ac871</code></a> buildscripts: pin the bootstrap generator version to 0.10.0 for v1.36.x branc...</li> <li><a href="https://github.com/grpc/grpc-java/commit/e3dd9ad9e99f1ddc7f1ce6f9f75bdc519b9524d6";><code>e3dd9ad</code></a> xds:fix cdsLoadBalancer2 childLb shutdown (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/7976";>#7976</a>)</li> <li><a href="https://github.com/grpc/grpc-java/commit/c5300949e01a1f6b81d9b11e2ed3f329bf8a9bf5";><code>c530094</code></a> xds: change system property for reading bootstrap config (backport v1.36.x) (...</li> <li><a href="https://github.com/grpc/grpc-java/commit/cddf3b00257582a33c6b076eb674a24b482515e5";><code>cddf3b0</code></a> xds: fix Node.toBuilder() bug</li> <li><a href="https://github.com/grpc/grpc-java/commit/50d6e1f507b51df6fffea8a0ae897f4cfc43544c";><code>50d6e1f</code></a> Bump version to 1.36.1-SNAPSHOT</li> <li>See full diff in <a href="https://github.com/grpc/grpc-java/compare/v1.36.0...v1.36.1";>compare view</a></li> </ul> </details> <br /> Updates `grpc-netty` from 1.36.0 to 1.36.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/grpc/grpc-java/releases";>grpc-netty's releases</a>.</em></p> <blockquote> <h2>v1.36.1</h2> <ul> <li>Fix an <code>UnsupportedOperationException</code> incompatibility with Netty 4.1.60.Final (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/7953";>#7953</a>). This allows users of grpc-netty that may be using Netty elsewhere in their application to upgrade their Netty version to avoid exposure to recent Netty CVEs. gRPC is not impacted by those CVEs so a Netty upgrade for gRPC itself is not necessary</li> <li>xds: Fixed a bug that would drop some node information (e.g., user-agent) when reporting to LRS (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/7964";>#7964</a>)</li> <li>xds: Renamed <code>io.grpc.xds.bootstrapValue</code> system property to <code>io.grpc.xds.bootstrapConfig</code>. This more closely matches the environment variable (<code>GRPC_XDS_BOOTSTRAP_CONFIG</code>) and avoids future confusion (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/7968";>#7968</a>)</li> <li>xds: Fixed a possible <code>IllegalStateException</code> causing Channel panic during LB shutdown (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/7942";>#7942</a>). The bug was introduced in v1.36.0. The issue likely most impacts xDS users that may leave a channel unused (no RPCs) for 30 minutes since idle timeout triggers LB shutdown</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/grpc/grpc-java/commit/2c56ed86d5cbdebf390b1a7af395d68d04e97884";><code>2c56ed8</code></a> Bump version to 1.36.1</li> <li><a href="https://github.com/grpc/grpc-java/commit/2ea5cedbc19c5e8d322d2dd9a193420602508cea";><code>2ea5ced</code></a> Update README etc to reference 1.36.1</li> <li><a href="https://github.com/grpc/grpc-java/commit/087cff274d32160321e642cb9958dd076ae503bf";><code>087cff2</code></a> netty: Add Http2Headers.setLong() for inbound headers</li> <li><a href="https://github.com/grpc/grpc-java/commit/d8ac871fe21a03676e1de18b32c4922803b23710";><code>d8ac871</code></a> buildscripts: pin the bootstrap generator version to 0.10.0 for v1.36.x branc...</li> <li><a href="https://github.com/grpc/grpc-java/commit/e3dd9ad9e99f1ddc7f1ce6f9f75bdc519b9524d6";><code>e3dd9ad</code></a> xds:fix cdsLoadBalancer2 childLb shutdown (<a href="https://github-redirect.dependabot.com/grpc/grpc-java/issues/7976";>#7976</a>)</li> <li><a href="https://github.com/grpc/grpc-java/commit/c5300949e01a1f6b81d9b11e2ed3f329bf8a9bf5";><code>c530094</code></a> xds: change system property for reading bootstrap config (backport v1.36.x) (...</li> <li><a href="https://github.com/grpc/grpc-java/commit/cddf3b00257582a33c6b076eb674a24b482515e5";><code>cddf3b0</code></a> xds: fix Node.toBuilder() bug</li> <li><a href="https://github.com/grpc/grpc-java/commit/50d6e1f507b51df6fffea8a0ae897f4cfc43544c";><code>50d6e1f</code></a> Bump version to 1.36.1-SNAPSHOT</li> <li>See full diff in <a href="https://github.com/grpc/grpc-java/compare/v1.36.0...v1.36.1";>compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected]
