dependabot[bot] opened a new pull request, #607:
URL: https://github.com/apache/doris-opentelemetry-demo/pull/607
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.71.0
to 1.83.1.
Release notes
Sourced from https://github.com/grpc/grpc-go/releases";>google.golang.org/grpc's
releases.
Release 1.83.1
Security
xds/rbac: Fix a bug where nested Principal or
Permission rules with :scheme or grpc-
prefixed header matchers were not rejected, which could cause DENY rules to
fail open. (https://redirect.github.com/grpc/grpc-go/issues/9258";>#9258)
Special Thanks: https://github.com/nvxbug";>@nvxbug
xds/rbac: Fix a bug where the host header matcher was not
being replaced with :authority in nested Principal or
Permission rules. (https://redirect.github.com/grpc/grpc-go/issues/9258";>#9258)
Special Thanks: https://github.com/nvxbug";>@nvxbug
xds/rbac: Fix a bug where a header matcher whose name was not lowercase,
such as X-Role, matched no header, which could cause DENY rules to
fail open. (https://redirect.github.com/grpc/grpc-go/issues/9332";>#9332)
Special Thanks: https://github.com/alimony";>@alimony
xds/rbac: Fix a bug where a :scheme or grpc-
prefixed header matcher was accepted when its name was not lowercase. (https://redirect.github.com/grpc/grpc-go/issues/9332";>#9332)
Special Thanks: https://github.com/alimony";>@alimony
xds/rbac: Fix a bug where a Host header matcher was not
replaced with :authority. (https://redirect.github.com/grpc/grpc-go/issues/9332";>#9332)
Special Thanks: https://github.com/alimony";>@alimony
Performance
transport: Restrict memory overhead of buffering small data frames. (https://redirect.github.com/grpc/grpc-go/issues/9331";>#9331)
Release 1.83.0
Security
server: Stop reading from connections when flooded by HTTP/2 frames to
mitigate resource exhaustion. The default value for this limit is 100 frames,
excluding DATA and HEADERS, and may be changed by setting environment variable
GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT.
xds/rbac: Support Metadata and
RequestedServerName permissions matcher fields. If present in a
DENY rule, previously these would be ignored and fail-open.
xds/rbac: Fix panic when parsing unsupported fields in
NotRule/NotId permissions.
xds/rbac: Support the deprecated source_ip principal
identifier by treating it as equivalent to direct_remote_ip.
xds: Fix panic when parsing route header matchers configured with empty
exact_match, prefix_match, or
suffix_match strings. (https://redirect.github.com/grpc/grpc-go/issues/9223";>#9223)
New Features
xds/googlec2p: Enable DirectPath over Interconnect support for
on-premises clients via the force-xds target URI query parameter.
(https://redirect.github.com/grpc/grpc-go/issues/9133";>#9133)
xds: Enable xDS configuration to control which fields get propagated
from ORCA backend metric reports to LRS load reports. (https://redirect.github.com/grpc/grpc-go/issues/9145";>#9145)
authz: Add OnPolicyUpdate callback to
FileWatcherOptions to notify when an authz policy is loaded or
updated. (https://redirect.github.com/grpc/grpc-go/issues/9142";>#9142)
Special Thanks: https://github.com/hnefatl";>@hnefatl
xds: Add support for the GCP Authentication HTTP Filter, which
automatically fetches and attaches GCP Service Account Identity JWT tokens to
outgoing RPCs.
This feature can be enabled by setting environment variable
GRPC_EXPERIMENTAL_XDS_GCP_AUTHENTICATION_FILTER=true. (https://redirect.github.com/grpc/grpc-go/issues/9119";>#9119)
xds: Add support for xDS-based HTTP CONNECT proxies.
This feature can be enabled by setting environment variable
GRPC_EXPERIMENTAL_XDS_HTTP_CONNECT=true. (https://redirect.github.com/grpc/grpc-go/issues/9151";>#9151)
xds: Add support for contains_match in route header
matchers. (https://redirect.github.com/grpc/grpc-go/issues/9223";>#9223)
Bug Fixes
credentials/alts: Fix panic when processing malformed frames by
validating that the message frame length exceeds the message type field size.
(https://redirect.github.com/grpc/grpc-go/issues/9197";>#9197)
grpc: Fix compilation on Plan 9 targets (GOOS=plan9),
broken since v1.81.0. (https://redirect.github.com/grpc/grpc-go/issues/9255";>#9255)
Special Thanks: https://github.com/Yusufihsangorgel";>@Yusufihsangorgel
Release 1.82.2
Security
server: Reject requests missing both :authority and
Host headers with HTTP 400 and status Internal. (https://redirect.github.com/grpc/grpc-go/pull/9365";>grpc/grpc-go#9365)
... (truncated)
Commits
https://github.com/grpc/grpc-go/commit/1550d9e0cddb30ce99e61a2102e8294a49461e5e";>1550d9e
Change version to 1.83.1
