Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump grpcVersion from 1.17.1 to 1.23.0 #49

Closed

Conversation

dependabot-preview[bot]
Copy link

Bumps grpcVersion from 1.17.1 to 1.23.0.

Updates grpc-netty from 1.17.1 to 1.23.0

Release notes

Sourced from grpc-netty's releases.

v1.23.0

This release resolves the DoS vulnerability CVE-2019-9515 (SETTINGS flood). Users using the grpc-netty server with untrusted clients should upgrade.

Dependencies

  • Bump netty to 4.1.38
  • Bump PerfMark to 0.17.0
  • Bump protobuf to 3.9.0

Bug Fixes

API Changes

  • core: Add @Nullable to getter for trailers on StatusRuntimeException (#5951)
  • core: ClientStream.getAttributes() can be called at any time (#5904)
  • core,netty: Block server shutdown until the socket is unbound (#5905)
  • netty: Users providing EventLoopGroup and/or ChannelType for NettyServerBuilder and NettyChannelBuilder requires to provide all of them or none. Otherwise, it will throw an IllegalStateException (#6014)

New Features

  • Make //compiler:grpc_java_plugin publicly visible again (#5947)
  • java_grpc_library.bzl: Work with proto_library rules using strip_import_prefix / import_prefix (#5959)
  • Make .proto import path computation work with virtual protos in the main repository (#5967)
  • core: Attach debug information about stream to DEADLINE_EXCEEDED (#5892)

Documentation

  • Provide an example of hedging in examples
  • compiler: Add note about where to download precompiled version of plugin (#6022)

Acknowledgements

@​aaliddell Adam Liddell
@​DarrienG Darrien Glasser
@​jadekler Jean de Klerk
@​lberki Lukacs T. Berki
@​liym stbridge
@​mkobit Mike Kobit
@​tiggerlee2 Shuangtai Li
@​zhaonian Zhaonian Luan

v1.22.1

Bug Fixes

  • Fix IllegalStateException when transport is terminated (#5955). This is due to a race that seems to mainly impact OkHttp clients. While we believe all transports are affected, it may trigger very rarely. If you see an exception with the message “activeTransport still points to this transport. Seems transportShutdown() was not called.” then you are impacted by the bug.
  • bazel target //compiler:grpc_java_plugin is publicly visible again (#5953). The target wasn't publicly visible since v1.21.0. This target was used by rules_proto.

v1.22.0

Dependencies

  • upgrade netty version to 4.1.35 and netty-tcnative version to 2.0.25 (#5818)
... (truncated)
Commits
  • b3ed852 Bump version to 1.23.0
  • 0bb54b2 Update README etc to reference 1.23.0
  • dd1315f netty: Limit number of frames client can cause server to enqueue
  • 8779c6a core: handle removing partially-closed resources for throwing on close. Fixes...
  • 79bc50c doc: fix version bug in documentation/android-channel-builder.md
  • 188b4d1 compiler: add note about where to download precompiled version of plugin (#6022)
  • 99993be xds: implement a server interceptor for taking server application metrics and...
  • 50df56f xds: add a missing test case for CallMetricRecorder and polish test data. (#6...
  • 57e7bd3 all: update to proto 3.9.0
  • 65109e6 netty: Netty{Server,Channel}Builder requires all or none of ELG and ChannelTy...
  • Additional commits viewable in compare view

Updates grpc-protobuf from 1.17.1 to 1.23.0

Release notes

Sourced from grpc-protobuf's releases.

v1.23.0

This release resolves the DoS vulnerability CVE-2019-9515 (SETTINGS flood). Users using the grpc-netty server with untrusted clients should upgrade.

Dependencies

  • Bump netty to 4.1.38
  • Bump PerfMark to 0.17.0
  • Bump protobuf to 3.9.0

Bug Fixes

API Changes

  • core: Add @Nullable to getter for trailers on StatusRuntimeException (#5951)
  • core: ClientStream.getAttributes() can be called at any time (#5904)
  • core,netty: Block server shutdown until the socket is unbound (#5905)
  • netty: Users providing EventLoopGroup and/or ChannelType for NettyServerBuilder and NettyChannelBuilder requires to provide all of them or none. Otherwise, it will throw an IllegalStateException (#6014)

New Features

  • Make //compiler:grpc_java_plugin publicly visible again (#5947)
  • java_grpc_library.bzl: Work with proto_library rules using strip_import_prefix / import_prefix (#5959)
  • Make .proto import path computation work with virtual protos in the main repository (#5967)
  • core: Attach debug information about stream to DEADLINE_EXCEEDED (#5892)

Documentation

  • Provide an example of hedging in examples
  • compiler: Add note about where to download precompiled version of plugin (#6022)

Acknowledgements

@​aaliddell Adam Liddell
@​DarrienG Darrien Glasser
@​jadekler Jean de Klerk
@​lberki Lukacs T. Berki
@​liym stbridge
@​mkobit Mike Kobit
@​tiggerlee2 Shuangtai Li
@​zhaonian Zhaonian Luan

v1.22.1

Bug Fixes

  • Fix IllegalStateException when transport is terminated (#5955). This is due to a race that seems to mainly impact OkHttp clients. While we believe all transports are affected, it may trigger very rarely. If you see an exception with the message “activeTransport still points to this transport. Seems transportShutdown() was not called.” then you are impacted by the bug.
  • bazel target //compiler:grpc_java_plugin is publicly visible again (#5953). The target wasn't publicly visible since v1.21.0. This target was used by rules_proto.

v1.22.0

Dependencies

  • upgrade netty version to 4.1.35 and netty-tcnative version to 2.0.25 (#5818)
... (truncated)
Commits
  • b3ed852 Bump version to 1.23.0
  • 0bb54b2 Update README etc to reference 1.23.0
  • dd1315f netty: Limit number of frames client can cause server to enqueue
  • 8779c6a core: handle removing partially-closed resources for throwing on close. Fixes...
  • 79bc50c doc: fix version bug in documentation/android-channel-builder.md
  • 188b4d1 compiler: add note about where to download precompiled version of plugin (#6022)
  • 99993be xds: implement a server interceptor for taking server application metrics and...
  • 50df56f xds: add a missing test case for CallMetricRecorder and polish test data. (#6...
  • 57e7bd3 all: update to proto 3.9.0
  • 65109e6 netty: Netty{Server,Channel}Builder requires all or none of ELG and ChannelTy...
  • Additional commits viewable in compare view

Updates grpc-stub from 1.17.1 to 1.23.0

Release notes

Sourced from grpc-stub's releases.

v1.23.0

This release resolves the DoS vulnerability CVE-2019-9515 (SETTINGS flood). Users using the grpc-netty server with untrusted clients should upgrade.

Dependencies

  • Bump netty to 4.1.38
  • Bump PerfMark to 0.17.0
  • Bump protobuf to 3.9.0

Bug Fixes

API Changes

  • core: Add @Nullable to getter for trailers on StatusRuntimeException (#5951)
  • core: ClientStream.getAttributes() can be called at any time (#5904)
  • core,netty: Block server shutdown until the socket is unbound (#5905)
  • netty: Users providing EventLoopGroup and/or ChannelType for NettyServerBuilder and NettyChannelBuilder requires to provide all of them or none. Otherwise, it will throw an IllegalStateException (#6014)

New Features

  • Make //compiler:grpc_java_plugin publicly visible again (#5947)
  • java_grpc_library.bzl: Work with proto_library rules using strip_import_prefix / import_prefix (#5959)
  • Make .proto import path computation work with virtual protos in the main repository (#5967)
  • core: Attach debug information about stream to DEADLINE_EXCEEDED (#5892)

Documentation

  • Provide an example of hedging in examples
  • compiler: Add note about where to download precompiled version of plugin (#6022)

Acknowledgements

@​aaliddell Adam Liddell
@​DarrienG Darrien Glasser
@​jadekler Jean de Klerk
@​lberki Lukacs T. Berki
@​liym stbridge
@​mkobit Mike Kobit
@​tiggerlee2 Shuangtai Li
@​zhaonian Zhaonian Luan

v1.22.1

Bug Fixes

  • Fix IllegalStateException when transport is terminated (#5955). This is due to a race that seems to mainly impact OkHttp clients. While we believe all transports are affected, it may trigger very rarely. If you see an exception with the message “activeTransport still points to this transport. Seems transportShutdown() was not called.” then you are impacted by the bug.
  • bazel target //compiler:grpc_java_plugin is publicly visible again (#5953). The target wasn't publicly visible since v1.21.0. This target was used by rules_proto.

v1.22.0

Dependencies

  • upgrade netty version to 4.1.35 and netty-tcnative version to 2.0.25 (#5818)
... (truncated)
Commits
  • b3ed852 Bump version to 1.23.0
  • 0bb54b2 Update README etc to reference 1.23.0
  • dd1315f netty: Limit number of frames client can cause server to enqueue
  • 8779c6a core: handle removing partially-closed resources for throwing on close. Fixes...
  • 79bc50c doc: fix version bug in documentation/android-channel-builder.md
  • 188b4d1 compiler: add note about where to download precompiled version of plugin (#6022)
  • 99993be xds: implement a server interceptor for taking server application metrics and...
  • 50df56f xds: add a missing test case for CallMetricRecorder and polish test data. (#6...
  • 57e7bd3 all: update to proto 3.9.0
  • 65109e6 netty: Netty{Server,Channel}Builder requires all or none of ELG and ChannelTy...
  • Additional commits viewable in compare view

Updates protoc-gen-grpc-java from 1.17.1 to 1.23.0

Release notes

Sourced from protoc-gen-grpc-java's releases.

v1.23.0

This release resolves the DoS vulnerability CVE-2019-9515 (SETTINGS flood). Users using the grpc-netty server with untrusted clients should upgrade.

Dependencies

  • Bump netty to 4.1.38
  • Bump PerfMark to 0.17.0
  • Bump protobuf to 3.9.0

Bug Fixes

API Changes

  • core: Add @Nullable to getter for trailers on StatusRuntimeException (#5951)
  • core: ClientStream.getAttributes() can be called at any time (#5904)
  • core,netty: Block server shutdown until the socket is unbound (#5905)
  • netty: Users providing EventLoopGroup and/or ChannelType for NettyServerBuilder and NettyChannelBuilder requires to provide all of them or none. Otherwise, it will throw an IllegalStateException (#6014)

New Features

  • Make //compiler:grpc_java_plugin publicly visible again (#5947)
  • java_grpc_library.bzl: Work with proto_library rules using strip_import_prefix / import_prefix (#5959)
  • Make .proto import path computation work with virtual protos in the main repository (#5967)
  • core: Attach debug information about stream to DEADLINE_EXCEEDED (#5892)

Documentation

  • Provide an example of hedging in examples
  • compiler: Add note about where to download precompiled version of plugin (#6022)

Acknowledgements

@​aaliddell Adam Liddell
@​DarrienG Darrien Glasser
@​jadekler Jean de Klerk
@​lberki Lukacs T. Berki
@​liym stbridge
@​mkobit Mike Kobit
@​tiggerlee2 Shuangtai Li
@​zhaonian Zhaonian Luan

v1.22.1

Bug Fixes

  • Fix IllegalStateException when transport is terminated (#5955). This is due to a race that seems to mainly impact OkHttp clients. While we believe all transports are affected, it may trigger very rarely. If you see an exception with the message “activeTransport still points to this transport. Seems transportShutdown() was not called.” then you are impacted by the bug.
  • bazel target //compiler:grpc_java_plugin is publicly visible again (#5953). The target wasn't publicly visible since v1.21.0. This target was used by rules_proto.

v1.22.0

Dependencies

  • upgrade netty version to 4.1.35 and netty-tcnative version to 2.0.25 (#5818)
... (truncated)
Commits
  • b3ed852 Bump version to 1.23.0
  • 0bb54b2 Update README etc to reference 1.23.0
  • dd1315f netty: Limit number of frames client can cause server to enqueue
  • 8779c6a core: handle removing partially-closed resources for throwing on close. Fixes...
  • 79bc50c doc: fix version bug in documentation/android-channel-builder.md
  • 188b4d1 compiler: add note about where to download precompiled version of plugin (#6022)
  • 99993be xds: implement a server interceptor for taking server application metrics and...
  • 50df56f xds: add a missing test case for CallMetricRecorder and polish test data. (#6...
  • 57e7bd3 all: update to proto 3.9.0
  • 65109e6 netty: Netty{Server,Channel}Builder requires all or none of ELG and ChannelTy...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
  • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

  • Update frequency (including time of day and day of week)
  • Automerge options (never/patch/minor, and dev/runtime dependencies)
  • Pull request limits (per update run and/or open at any time)
  • Out-of-range updates (receive only lockfile updates, if desired)
  • Security updates (receive only security updates, if desired)

Finally, you can contact us by mentioning @dependabot.

Bumps `grpcVersion` from 1.17.1 to 1.23.0.

Updates `grpc-netty` from 1.17.1 to 1.23.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.17.1...v1.23.0)

Updates `grpc-protobuf` from 1.17.1 to 1.23.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.17.1...v1.23.0)

Updates `grpc-stub` from 1.17.1 to 1.23.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.17.1...v1.23.0)

Updates `protoc-gen-grpc-java` from 1.17.1 to 1.23.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.17.1...v1.23.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
@dependabot-preview dependabot-preview bot added the dependencies Pull requests that update a dependency file label Aug 14, 2019
@dependabot-preview
Copy link
Author

Superseded by #56.

@dependabot-preview dependabot-preview bot deleted the dependabot/gradle/grpcVersion-1.23.0 branch September 25, 2019 22:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

0 participants