Bump grpcVersion from 1.68.0 to 1.70.0 #5169

dependabot · 2025-02-01T02:10:30Z

Bumps grpcVersion from 1.68.0 to 1.70.0.
Updates io.grpc:grpc-core from 1.68.0 to 1.70.0

Release notes

Sourced from io.grpc:grpc-core's releases.

v1.70.0

Bug Fixes

Re-enable animalsniffer, fixing most violations (8ea362937). Violations would only have triggered on API level 23 and earlier, and the violations fixed here were highly unlikely to be triggered

api: Fix Android API level 23 and earlier compatibility for StatusRuntimeException without stacktrace (#11072) (ebe2b4867). This fixes a regression introduced in 1.64.0. The regression should have caused failures on API level 23 and earlier when a StatusRuntimeException or StatusException was created. However, for unknown reasons tests on old devices didn’t notice issues

okhttp: Improve certificate handling by rejecting non-ASCII subject alternative names and hostnames as seen in CVE-2021-0341 (#11749) (a0982ca0a). Hostnames are considered trusted and CAs are required to use punycode for non-ASCII hostnames, so this is expected to provide defense-in-depth. See also the related GoSecure blog post and the AOSP fix

okhttp: Fix for ipv6 link local with scope (#11725) (65b32e60e)

xds: Preserve nonce when unsubscribing last watcher of a particular type so that new discovery requests of that type are handled correctly (1cf1927d1). This (along with 6c12c2bd2) fixes a nonce-handling regression introduced in 1.66.0 that could cause resources to appear to not exist until re-creating the ADS stream. Triggering the behavior required specific config changes. It is easiest to trigger when clusters use EDS and routes are changed from one cluster to another. The error “found 0 leaf (logical DNS or EDS) clusters for root cluster” might then be seen

xds: Remember nonces for unknown types (6c12c2bd2)

xds: Unexpected types in the bootstrap’s server_features should be ignored (e8ff6da2c). They were previously required to be strings

xds: Remove xds authority label from metric registration (#11760) (6516c7387). This fixes the error “Incorrect number of required labels provided. Expected: 4” introduced in 1.69.0

xds: Fixed unsupported unsigned 32 bits issue for circuit breaker (#11735) (f8f613984). This fixes clients treating large max_requests as “no requests” and failing all requests

Improvements

api: Introduce custom NameResolver.Args (#11669) (0b2d44098)

stub: Introduce new API: BlockingStubV2 which supports Bidi streaming, Client streaming, a cleaner Server streaming and Unary RPCs (#10318) (ea8c31c30)

bazel: Remove workaround for DoNotCall fixed in Bazel 3.4 (805cad378)

binder: A standard API for pointing resolvers at a different Android User. (#11775) (1126a8e30)

xds: Fix XDS control plane client retry timer backoff duration when connection closes after results are received (#11766) (ef7c2d59c)

xds: Parsing xDS Cluster Metadata (#11741) (1edc4d84d). Not used actively, but this adds validation. The validation is unlikely to fail but may reject invalid resources.

xds: Use "#server" as dataplane target value for xDS enabled gRPC servers (#11715) (ebb43a69e). This only impacts the grpc.target label in grpc.xds_client.* metrics. Previously the empty string was used

rls: Reduce RLS debug channel logging (7f9c1f39f). This only matters when debug logging is enabled

Documentation

examples: Simplify graceful shutdown in Hostname example (f1109e421)

examples: Remove references to maven-central.storage-download.googleapis.com (c96e926e6)

examples: Updated the attachHeaders to newAttachHeadersInterceptor in HeaderClientInterceptor (#11759) (5e8abc677)

Dependencies

Bazel 8 is released, so replace Bazel 6 testing with Bazel 7 (8a5f7776d)

Thanks to

@panchenko

@benjaminp

@ZachChuba

@vinodhabib

v1.69.1

Bug Fixes

okhttp: Improve certificate handling by rejecting non-ASCII subject alternative names and hostnames as seen in CVE-2021-0341 (#11749) (a0982ca0a). Hostnames are considered trusted and CAs are required to use punycode for non-ASCII hostnames, so this is expected to provide defense-in-depth. See also the related GoSecure blog post and the AOSP fix

xds: Preserve nonce when unsubscribing last watcher of a particular type so that new discovery requests of that type are handled correctly (1cf1927d1). This (along with 6c12c2bd2) fixes a nonce-handling regression introduced in 1.66.0 that could cause resources to appear to not exist until re-creating the ADS stream. Triggering the behavior required specific config changes. It is easiest to trigger when clusters use EDS and routes are changed from one cluster to another. The error “found 0 leaf (logical DNS or EDS) clusters for root cluster” might then be seen

xds: Remember nonces for unknown types (6c12c2bd2)

xds: Unexpected types in the bootstrap’s server_features should be ignored (e8ff6da2c). They were previously required to be strings

xds: Fixed unsupported unsigned 32 bits issue for circuit breaker (#11735) (f8f613984). This fixes clients treating large max_requests as “no requests” and failing all requests

xds: Remove xds authority label from metric registration (#11760) (6516c7387). This fixes the error “Incorrect number of required labels provided. Expected: 4” introduced in 1.69.0

... (truncated)

Commits

22a42c8 Bump version to 1.70.0
e015a74 Update README etc to reference 1.70.0
4412054 xds: Rename grpc.xds.cluster to grpc.lb.backend_service
7dada7d xds: Pass grpc.xds.cluster label to tracer
1edc4d8 xds: Parsing xDS Cluster Metadata (#11741)
4222f77 xds:Move creating the retry timer in handleRpcStreamClosed to as late as poss...
6c12c2b xds: Remember nonces for unknown types
4a0f707 xds: Avoid depending on io.grpc.xds.Internal* classes
1cf1927 xds: Preserve nonce when unsubscribing type
9a712c3 xds: Make XdsClient.ResourceStore package-private
Additional commits viewable in compare view

Updates io.grpc:grpc-protobuf from 1.68.0 to 1.70.0

Release notes

Sourced from io.grpc:grpc-protobuf's releases.

v1.70.0

Bug Fixes

Re-enable animalsniffer, fixing most violations (8ea362937). Violations would only have triggered on API level 23 and earlier, and the violations fixed here were highly unlikely to be triggered

api: Fix Android API level 23 and earlier compatibility for StatusRuntimeException without stacktrace (#11072) (ebe2b4867). This fixes a regression introduced in 1.64.0. The regression should have caused failures on API level 23 and earlier when a StatusRuntimeException or StatusException was created. However, for unknown reasons tests on old devices didn’t notice issues

okhttp: Improve certificate handling by rejecting non-ASCII subject alternative names and hostnames as seen in CVE-2021-0341 (#11749) (a0982ca0a). Hostnames are considered trusted and CAs are required to use punycode for non-ASCII hostnames, so this is expected to provide defense-in-depth. See also the related GoSecure blog post and the AOSP fix

okhttp: Fix for ipv6 link local with scope (#11725) (65b32e60e)

xds: Preserve nonce when unsubscribing last watcher of a particular type so that new discovery requests of that type are handled correctly (1cf1927d1). This (along with 6c12c2bd2) fixes a nonce-handling regression introduced in 1.66.0 that could cause resources to appear to not exist until re-creating the ADS stream. Triggering the behavior required specific config changes. It is easiest to trigger when clusters use EDS and routes are changed from one cluster to another. The error “found 0 leaf (logical DNS or EDS) clusters for root cluster” might then be seen

xds: Remember nonces for unknown types (6c12c2bd2)

xds: Unexpected types in the bootstrap’s server_features should be ignored (e8ff6da2c). They were previously required to be strings

xds: Remove xds authority label from metric registration (#11760) (6516c7387). This fixes the error “Incorrect number of required labels provided. Expected: 4” introduced in 1.69.0

xds: Fixed unsupported unsigned 32 bits issue for circuit breaker (#11735) (f8f613984). This fixes clients treating large max_requests as “no requests” and failing all requests

Improvements

api: Introduce custom NameResolver.Args (#11669) (0b2d44098)

stub: Introduce new API: BlockingStubV2 which supports Bidi streaming, Client streaming, a cleaner Server streaming and Unary RPCs (#10318) (ea8c31c30)

bazel: Remove workaround for DoNotCall fixed in Bazel 3.4 (805cad378)

binder: A standard API for pointing resolvers at a different Android User. (#11775) (1126a8e30)

xds: Fix XDS control plane client retry timer backoff duration when connection closes after results are received (#11766) (ef7c2d59c)

xds: Parsing xDS Cluster Metadata (#11741) (1edc4d84d). Not used actively, but this adds validation. The validation is unlikely to fail but may reject invalid resources.

xds: Use "#server" as dataplane target value for xDS enabled gRPC servers (#11715) (ebb43a69e). This only impacts the grpc.target label in grpc.xds_client.* metrics. Previously the empty string was used

rls: Reduce RLS debug channel logging (7f9c1f39f). This only matters when debug logging is enabled

Documentation

examples: Simplify graceful shutdown in Hostname example (f1109e421)

examples: Remove references to maven-central.storage-download.googleapis.com (c96e926e6)

examples: Updated the attachHeaders to newAttachHeadersInterceptor in HeaderClientInterceptor (#11759) (5e8abc677)

Dependencies

Bazel 8 is released, so replace Bazel 6 testing with Bazel 7 (8a5f7776d)

Thanks to

@panchenko

@benjaminp

@ZachChuba

@vinodhabib

v1.69.1

Bug Fixes

okhttp: Improve certificate handling by rejecting non-ASCII subject alternative names and hostnames as seen in CVE-2021-0341 (#11749) (a0982ca0a). Hostnames are considered trusted and CAs are required to use punycode for non-ASCII hostnames, so this is expected to provide defense-in-depth. See also the related GoSecure blog post and the AOSP fix

xds: Preserve nonce when unsubscribing last watcher of a particular type so that new discovery requests of that type are handled correctly (1cf1927d1). This (along with 6c12c2bd2) fixes a nonce-handling regression introduced in 1.66.0 that could cause resources to appear to not exist until re-creating the ADS stream. Triggering the behavior required specific config changes. It is easiest to trigger when clusters use EDS and routes are changed from one cluster to another. The error “found 0 leaf (logical DNS or EDS) clusters for root cluster” might then be seen

xds: Remember nonces for unknown types (6c12c2bd2)

xds: Unexpected types in the bootstrap’s server_features should be ignored (e8ff6da2c). They were previously required to be strings

xds: Fixed unsupported unsigned 32 bits issue for circuit breaker (#11735) (f8f613984). This fixes clients treating large max_requests as “no requests” and failing all requests

xds: Remove xds authority label from metric registration (#11760) (6516c7387). This fixes the error “Incorrect number of required labels provided. Expected: 4” introduced in 1.69.0

... (truncated)

Commits

22a42c8 Bump version to 1.70.0
e015a74 Update README etc to reference 1.70.0
4412054 xds: Rename grpc.xds.cluster to grpc.lb.backend_service
7dada7d xds: Pass grpc.xds.cluster label to tracer
1edc4d8 xds: Parsing xDS Cluster Metadata (#11741)
4222f77 xds:Move creating the retry timer in handleRpcStreamClosed to as late as poss...
6c12c2b xds: Remember nonces for unknown types
4a0f707 xds: Avoid depending on io.grpc.xds.Internal* classes
1cf1927 xds: Preserve nonce when unsubscribing type
9a712c3 xds: Make XdsClient.ResourceStore package-private
Additional commits viewable in compare view

Updates io.grpc:grpc-stub from 1.68.0 to 1.70.0

Release notes

Sourced from io.grpc:grpc-stub's releases.

v1.70.0

Bug Fixes

Re-enable animalsniffer, fixing most violations (8ea362937). Violations would only have triggered on API level 23 and earlier, and the violations fixed here were highly unlikely to be triggered

api: Fix Android API level 23 and earlier compatibility for StatusRuntimeException without stacktrace (#11072) (ebe2b4867). This fixes a regression introduced in 1.64.0. The regression should have caused failures on API level 23 and earlier when a StatusRuntimeException or StatusException was created. However, for unknown reasons tests on old devices didn’t notice issues

okhttp: Improve certificate handling by rejecting non-ASCII subject alternative names and hostnames as seen in CVE-2021-0341 (#11749) (a0982ca0a). Hostnames are considered trusted and CAs are required to use punycode for non-ASCII hostnames, so this is expected to provide defense-in-depth. See also the related GoSecure blog post and the AOSP fix

okhttp: Fix for ipv6 link local with scope (#11725) (65b32e60e)

xds: Preserve nonce when unsubscribing last watcher of a particular type so that new discovery requests of that type are handled correctly (1cf1927d1). This (along with 6c12c2bd2) fixes a nonce-handling regression introduced in 1.66.0 that could cause resources to appear to not exist until re-creating the ADS stream. Triggering the behavior required specific config changes. It is easiest to trigger when clusters use EDS and routes are changed from one cluster to another. The error “found 0 leaf (logical DNS or EDS) clusters for root cluster” might then be seen

xds: Remember nonces for unknown types (6c12c2bd2)

xds: Unexpected types in the bootstrap’s server_features should be ignored (e8ff6da2c). They were previously required to be strings

xds: Remove xds authority label from metric registration (#11760) (6516c7387). This fixes the error “Incorrect number of required labels provided. Expected: 4” introduced in 1.69.0

xds: Fixed unsupported unsigned 32 bits issue for circuit breaker (#11735) (f8f613984). This fixes clients treating large max_requests as “no requests” and failing all requests

Improvements

api: Introduce custom NameResolver.Args (#11669) (0b2d44098)

stub: Introduce new API: BlockingStubV2 which supports Bidi streaming, Client streaming, a cleaner Server streaming and Unary RPCs (#10318) (ea8c31c30)

bazel: Remove workaround for DoNotCall fixed in Bazel 3.4 (805cad378)

binder: A standard API for pointing resolvers at a different Android User. (#11775) (1126a8e30)

xds: Fix XDS control plane client retry timer backoff duration when connection closes after results are received (#11766) (ef7c2d59c)

xds: Parsing xDS Cluster Metadata (#11741) (1edc4d84d). Not used actively, but this adds validation. The validation is unlikely to fail but may reject invalid resources.

xds: Use "#server" as dataplane target value for xDS enabled gRPC servers (#11715) (ebb43a69e). This only impacts the grpc.target label in grpc.xds_client.* metrics. Previously the empty string was used

rls: Reduce RLS debug channel logging (7f9c1f39f). This only matters when debug logging is enabled

Documentation

examples: Simplify graceful shutdown in Hostname example (f1109e421)

examples: Remove references to maven-central.storage-download.googleapis.com (c96e926e6)

examples: Updated the attachHeaders to newAttachHeadersInterceptor in HeaderClientInterceptor (#11759) (5e8abc677)

Dependencies

Bazel 8 is released, so replace Bazel 6 testing with Bazel 7 (8a5f7776d)

Thanks to

@panchenko

@benjaminp

@ZachChuba

@vinodhabib

v1.69.1

Bug Fixes

okhttp: Improve certificate handling by rejecting non-ASCII subject alternative names and hostnames as seen in CVE-2021-0341 (#11749) (a0982ca0a). Hostnames are considered trusted and CAs are required to use punycode for non-ASCII hostnames, so this is expected to provide defense-in-depth. See also the related GoSecure blog post and the AOSP fix

xds: Preserve nonce when unsubscribing last watcher of a particular type so that new discovery requests of that type are handled correctly (1cf1927d1). This (along with 6c12c2bd2) fixes a nonce-handling regression introduced in 1.66.0 that could cause resources to appear to not exist until re-creating the ADS stream. Triggering the behavior required specific config changes. It is easiest to trigger when clusters use EDS and routes are changed from one cluster to another. The error “found 0 leaf (logical DNS or EDS) clusters for root cluster” might then be seen

xds: Remember nonces for unknown types (6c12c2bd2)

xds: Unexpected types in the bootstrap’s server_features should be ignored (e8ff6da2c). They were previously required to be strings

xds: Fixed unsupported unsigned 32 bits issue for circuit breaker (#11735) (f8f613984). This fixes clients treating large max_requests as “no requests” and failing all requests

xds: Remove xds authority label from metric registration (#11760) (6516c7387). This fixes the error “Incorrect number of required labels provided. Expected: 4” introduced in 1.69.0

... (truncated)

Commits

22a42c8 Bump version to 1.70.0
e015a74 Update README etc to reference 1.70.0
4412054 xds: Rename grpc.xds.cluster to grpc.lb.backend_service
7dada7d xds: Pass grpc.xds.cluster label to tracer
1edc4d8 xds: Parsing xDS Cluster Metadata (#11741)
4222f77 xds:Move creating the retry timer in handleRpcStreamClosed to as late as poss...
6c12c2b xds: Remember nonces for unknown types
4a0f707 xds: Avoid depending on io.grpc.xds.Internal* classes
1cf1927 xds: Preserve nonce when unsubscribing type
9a712c3 xds: Make XdsClient.ResourceStore package-private
Additional commits viewable in compare view

Updates io.grpc:grpc-netty from 1.68.0 to 1.70.0

Release notes

Sourced from io.grpc:grpc-netty's releases.

v1.70.0

Bug Fixes

Re-enable animalsniffer, fixing most violations (8ea362937). Violations would only have triggered on API level 23 and earlier, and the violations fixed here were highly unlikely to be triggered

api: Fix Android API level 23 and earlier compatibility for StatusRuntimeException without stacktrace (#11072) (ebe2b4867). This fixes a regression introduced in 1.64.0. The regression should have caused failures on API level 23 and earlier when a StatusRuntimeException or StatusException was created. However, for unknown reasons tests on old devices didn’t notice issues

okhttp: Improve certificate handling by rejecting non-ASCII subject alternative names and hostnames as seen in CVE-2021-0341 (#11749) (a0982ca0a). Hostnames are considered trusted and CAs are required to use punycode for non-ASCII hostnames, so this is expected to provide defense-in-depth. See also the related GoSecure blog post and the AOSP fix

okhttp: Fix for ipv6 link local with scope (#11725) (65b32e60e)

xds: Preserve nonce when unsubscribing last watcher of a particular type so that new discovery requests of that type are handled correctly (1cf1927d1). This (along with 6c12c2bd2) fixes a nonce-handling regression introduced in 1.66.0 that could cause resources to appear to not exist until re-creating the ADS stream. Triggering the behavior required specific config changes. It is easiest to trigger when clusters use EDS and routes are changed from one cluster to another. The error “found 0 leaf (logical DNS or EDS) clusters for root cluster” might then be seen

xds: Remember nonces for unknown types (6c12c2bd2)

xds: Unexpected types in the bootstrap’s server_features should be ignored (e8ff6da2c). They were previously required to be strings

xds: Remove xds authority label from metric registration (#11760) (6516c7387). This fixes the error “Incorrect number of required labels provided. Expected: 4” introduced in 1.69.0

xds: Fixed unsupported unsigned 32 bits issue for circuit breaker (#11735) (f8f613984). This fixes clients treating large max_requests as “no requests” and failing all requests

Improvements

api: Introduce custom NameResolver.Args (#11669) (0b2d44098)

stub: Introduce new API: BlockingStubV2 which supports Bidi streaming, Client streaming, a cleaner Server streaming and Unary RPCs (#10318) (ea8c31c30)

bazel: Remove workaround for DoNotCall fixed in Bazel 3.4 (805cad378)

binder: A standard API for pointing resolvers at a different Android User. (#11775) (1126a8e30)

xds: Fix XDS control plane client retry timer backoff duration when connection closes after results are received (#11766) (ef7c2d59c)

xds: Parsing xDS Cluster Metadata (#11741) (1edc4d84d). Not used actively, but this adds validation. The validation is unlikely to fail but may reject invalid resources.

xds: Use "#server" as dataplane target value for xDS enabled gRPC servers (#11715) (ebb43a69e). This only impacts the grpc.target label in grpc.xds_client.* metrics. Previously the empty string was used

rls: Reduce RLS debug channel logging (7f9c1f39f). This only matters when debug logging is enabled

Documentation

examples: Simplify graceful shutdown in Hostname example (f1109e421)

examples: Remove references to maven-central.storage-download.googleapis.com (c96e926e6)

examples: Updated the attachHeaders to newAttachHeadersInterceptor in HeaderClientInterceptor (#11759) (5e8abc677)

Dependencies

Bazel 8 is released, so replace Bazel 6 testing with Bazel 7 (8a5f7776d)

Thanks to

@panchenko

@benjaminp

@ZachChuba

@vinodhabib

v1.69.1

Bug Fixes

okhttp: Improve certificate handling by rejecting non-ASCII subject alternative names and hostnames as seen in CVE-2021-0341 (#11749) (a0982ca0a). Hostnames are considered trusted and CAs are required to use punycode for non-ASCII hostnames, so this is expected to provide defense-in-depth. See also the related GoSecure blog post and the AOSP fix

xds: Preserve nonce when unsubscribing last watcher of a particular type so that new discovery requests of that type are handled correctly (1cf1927d1). This (along with 6c12c2bd2) fixes a nonce-handling regression introduced in 1.66.0 that could cause resources to appear to not exist until re-creating the ADS stream. Triggering the behavior required specific config changes. It is easiest to trigger when clusters use EDS and routes are changed from one cluster to another. The error “found 0 leaf (logical DNS or EDS) clusters for root cluster” might then be seen

xds: Remember nonces for unknown types (6c12c2bd2)

xds: Unexpected types in the bootstrap’s server_features should be ignored (e8ff6da2c). They were previously required to be strings

xds: Fixed unsupported unsigned 32 bits issue for circuit breaker (#11735) (f8f613984). This fixes clients treating large max_requests as “no requests” and failing all requests

xds: Remove xds authority label from metric registration (#11760) (6516c7387). This fixes the error “Incorrect number of required labels provided. Expected: 4” introduced in 1.69.0

... (truncated)

Commits

22a42c8 Bump version to 1.70.0
e015a74 Update README etc to reference 1.70.0
4412054 xds: Rename grpc.xds.cluster to grpc.lb.backend_service
7dada7d xds: Pass grpc.xds.cluster label to tracer
1edc4d8 xds: Parsing xDS Cluster Metadata (#11741)
4222f77 xds:Move creating the retry timer in handleRpcStreamClosed to as late as poss...
6c12c2b xds: Remember nonces for unknown types
4a0f707 xds: Avoid depending on io.grpc.xds.Internal* classes
1cf1927 xds: Preserve nonce when unsubscribing type
9a712c3 xds: Make XdsClient.ResourceStore package-private
Additional commits viewable in compare view

Updates io.grpc:grpc-netty-shaded from 1.68.0 to 1.70.0

Release notes

Sourced from io.grpc:grpc-netty-shaded's releases.

v1.70.0

Bug Fixes

Re-enable animalsniffer, fixing most violations (8ea362937). Violations would only have triggered on API level 23 and earlier, and the violations fixed here were highly unlikely to be triggered

api: Fix Android API level 23 and earlier compatibility for StatusRuntimeException without stacktrace (#11072) (ebe2b4867). This fixes a regression introduced in 1.64.0. The regression should have caused failures on API level 23 and earlier when a StatusRuntimeException or StatusException was created. However, for unknown reasons tests on old devices didn’t notice issues

okhttp: Improve certificate handling by rejecting non-ASCII subject alternative names and hostnames as seen in CVE-2021-0341 (#11749) (a0982ca0a). Hostnames are considered trusted and CAs are required to use punycode for non-ASCII hostnames, so this is expected to provide defense-in-depth. See also the related GoSecure blog post and the AOSP fix

okhttp: Fix for ipv6 link local with scope (#11725) (65b32e60e)

xds: Preserve nonce when unsubscribing last watcher of a particular type so that new discovery requests of that type are handled correctly (1cf1927d1). This (along with 6c12c2bd2) fixes a nonce-handling regression introduced in 1.66.0 that could cause resources to appear to not exist until re-creating the ADS stream. Triggering the behavior required specific config changes. It is easiest to trigger when clusters use EDS and routes are changed from one cluster to another. The error “found 0 leaf (logical DNS or EDS) clusters for root cluster” might then be seen

xds: Remember nonces for unknown types (6c12c2bd2)

xds: Unexpected types in the bootstrap’s server_features should be ignored (e8ff6da2c). They were previously required to be strings

xds: Remove xds authority label from metric registration (#11760) (6516c7387). This fixes the error “Incorrect number of required labels provided. Expected: 4” introduced in 1.69.0

xds: Fixed unsupported unsigned 32 bits issue for circuit breaker (#11735) (f8f613984). This fixes clients treating large max_requests as “no requests” and failing all requests

Improvements

api: Introduce custom NameResolver.Args (#11669) (0b2d44098)

stub: Introduce new API: BlockingStubV2 which supports Bidi streaming, Client streaming, a cleaner Server streaming and Unary RPCs (#10318) (ea8c31c30)

bazel: Remove workaround for DoNotCall fixed in Bazel 3.4 (805cad378)

binder: A standard API for pointing resolvers at a different Android User. (#11775) (1126a8e30)

xds: Fix XDS control plane client retry timer backoff duration when connection closes after results are received (#11766) (ef7c2d59c)

xds: Parsing xDS Cluster Metadata (#11741) (1edc4d84d). Not used actively, but this adds validation. The validation is unlikely to fail but may reject invalid resources.

xds: Use "#server" as dataplane target value for xDS enabled gRPC servers (#11715) (ebb43a69e). This only impacts the grpc.target label in grpc.xds_client.* metrics. Previously the empty string was used

rls: Reduce RLS debug channel logging (7f9c1f39f). This only matters when debug logging is enabled

Documentation

examples: Simplify graceful shutdown in Hostname example (f1109e421)

examples: Remove references to maven-central.storage-download.googleapis.com (c96e926e6)

examples: Updated the attachHeaders to newAttachHeadersInterceptor in HeaderClientInterceptor (#11759) (5e8abc677)

Dependencies

Bazel 8 is released, so replace Bazel 6 testing with Bazel 7 (8a5f7776d)

Thanks to

@panchenko

@benjaminp

@ZachChuba

@vinodhabib

v1.69.1

Bug Fixes

okhttp: Improve certificate handling by rejecting non-ASCII subject alternative names and hostnames as seen in CVE-2021-0341 (#11749) (a0982ca0a). Hostnames are considered trusted and CAs are required to use punycode for non-ASCII hostnames, so this is expected to provide defense-in-depth. See also the related GoSecure blog post and the AOSP fix

xds: Preserve nonce when unsubscribing last watcher of a particular type so that new discovery requests of that type are handled correctly (1cf1927d1). This (along with 6c12c2bd2) fixes a nonce-handling regression introduced in 1.66.0 that could cause resources to appear to not exist until re-creating the ADS stream. Triggering the behavior required specific config changes. It is easiest to trigger when clusters use EDS and routes are changed from one cluster to another. The error “found 0 leaf (logical DNS or EDS) clusters for root cluster” might then be seen

xds: Remember nonces for unknown types (6c12c2bd2)

xds: Unexpected types in the bootstrap’s server_features should be ignored (e8ff6da2c). They were previously required to be strings

xds: Fixed unsupported unsigned 32 bits issue for circuit breaker (#11735) (f8f613984). This fixes clients treating large max_requests as “no requests” and failing all requests

xds: Remove xds authority label from metric registration (#11760) (6516c7387). This fixes the error “Incorrect number of required labels provided. Expected: 4” introduced in 1.69.0

... (truncated)

Commits

22a42c8 Bump version to 1.70.0
e015a74 Update README etc to reference 1.70.0
4412054 xds: Rename grpc.xds.cluster to grpc.lb.backend_service
7dada7d xds: Pass grpc.xds.cluster label to tracer
1edc4d8 xds: Parsing xDS Cluster Metadata (#11741)
4222f77 xds:Move creating the retry timer in handleRpcStreamClosed to as late as poss...
6c12c2b xds: Remember nonces for unknown types
4a0f707 xds: Avoid depending on io.grpc.xds.Internal* classes
1cf1927 xds: Preserve nonce when unsubscribing type
9a712c3 xds: Make XdsClient.ResourceStore package-private
Additional commits viewable in compare view

Updates io.grpc:protoc-gen-grpc-java from 1.68.0 to 1.70.0

Release notes

Sourced from io.grpc:protoc-gen-grpc-java's releases.

v1.70.0

Bug Fixes

Re-enable animalsniffer, fixing most violations (8ea362937). Violations would only have triggered on API level 23 and earlier, and the violations fixed here were highly unlikely to be triggered

api: Fix Android API level 23 and earlier compatibility for StatusRuntimeException without stacktrace (#11072) (ebe2b4867). This fixes a regression introduced in 1.64.0. The regression should have caused failures on API level 23 and earlier when a StatusRuntimeException or StatusException was created. However, for unknown reasons tests on old devices didn’t notice issues

okhttp: Improve certificate handling by rejecting non-ASCII subject alternative names and hostnames as seen in CVE-2021-0341 (#11749) (a0982ca0a). Hostnames are considered trusted and CAs are required to use punycode for non-ASCII hostnames, so this is expected to provide defense-in-depth. See also the related GoSecure blog post and the AOSP fix

okhttp: Fix for ipv6 link local with scope (#11725) (65b32e60e)

xds: Preserve nonce when unsubscribing last watcher of a particular type so that new discovery requests of that type are handled correctly (1cf1927d1). This (along with 6c12c2bd2) fixes a nonce-handling regression introduced in 1.66.0 that could cause resources to appear to not exist until re-creating the ADS stream. Triggering the behavior required specific config changes. It is easiest to trigger when clusters use EDS and routes are changed from one cluster to another. The error “found 0 leaf (logical DNS or EDS) clusters for root cluster” might then be seen

xds: Remember nonces for unknown types (6c12c2bd2)

xds: Unexpected types in the bootstrap’s server_features should be ignored (e8ff6da2c). They were previously required to be strings

xds: Remove xds authority label from metric registration (#11760) (6516c7387). This fixes the error “Incorrect number of required labels provided. Expected: 4” introduced in 1.69.0

xds: Fixed unsupported unsigned 32 bits issue for circuit breaker (#11735) (f8f613984). This fixes clients treating large max_requests as “no requests” and failing all requests

Improvements

api: Introduce custom NameResolver.Args (#11669) (0b2d44098)

stub: Introduce new API: BlockingStubV2 which supports Bidi streaming, Client streaming, a cleaner Server streaming and Unary RPCs (#10318) (ea8c31c30)

bazel: Remove workaround for DoNotCall fixed in Bazel 3.4 (805cad378)

binder: A standard API for pointing resolvers at a different Android User. (#11775) (1126a8e30)

xds: Fix XDS control plane client retry timer backoff duration when connection closes after results are received (#11766) (ef7c2d59c)

xds: Parsing xDS Cluster Metadata (#11741) (1edc4d84d). Not used actively, but this adds validation. The validation is unlikely to fail but may reject invalid resources.

xds: Use "#server" as dataplane target value for xDS enabled gRPC servers (#11715) (ebb43a69e). This only impacts the grpc.target label in grpc.xds_client.* metrics. Previously the empty string was used

rls: Reduce RLS debug channel logging (7f9c1f39f). This only matters when debug logging is enabled

Documentation

examples: Simplify graceful shutdown in Hostname example (f1109e421)

examples: Remove references to maven-central.storage-download.googleapis.com (c96e926e6)

examples: Updated the attachHeaders to newAttachHeadersInterceptor in HeaderClientInterceptor (#11759) (5e8abc677)

Dependencies

Bazel 8 is released, so replace Bazel 6 testing with Bazel 7 (8a5f7776d)

Thanks to

@panchenko

@benjaminp

@ZachChuba

@vinodhabib

v1.69.1

Bug Fixes

okhttp: Improve certificate handling by rejecting non-ASCII subject alternative names and hostnames as seen in CVE-2021-0341 (#11749) (a0982ca0a). Hostnames are considered trusted and CAs are required to use punycode for non-ASCII hostnames, so this is expected to provide defense-in-depth. See also the related GoSecure blog post and the AOSP fix

xds: Preserve nonce when unsubscribing last watcher of a particular type so that new discovery requests of that type are handled correctly (1cf1927d1). This (along with 6c12c2bd2) fixes a nonce-handling regression introduced in 1.66.0 that could cause resources to appear to not exist until re-creating the ADS stream. Triggering the behavior required specific config changes. It is easiest to trigger when clusters use EDS and routes are changed from one cluster to another. The error “found 0 leaf (logical DNS or EDS) clusters for root cluster” might then be seen

xds: Remember nonces for unknown types (6c12c2bd2)

xds: Unexpected types in the bootstrap’s server_features should be ignored (e8ff6da2c). They were previously required to be strings

xds: Fixed unsupported unsigned 32 bits issue for circuit breaker (#11735) (f8f613984). This fixes clients treating large max_requests as “no requests” and failing all requests

xds: Remove xds authority label from metric registration (#11760) (6516c7387). This fixes the error “Incorrect number of required labels provided. Expected: 4” introduced in 1.69.0

... (truncated)

Commits

22a42c8 Bump version to 1.70.0
e015a74 Update README etc to reference 1.70.0
4412054 xds: Rename grpc.xds.cluster to grpc.lb.backend_service
7dada7d xds: Pass grpc.xds.cluster label to tracer
1edc4d8 xds: Parsing xDS Cluster Metadata (#11741)
4222f77 xds:Move creating the retry timer in handleRpcStreamClosed to as late as poss...
6c12c2b xds: Remember nonces for unknown types
4a0f707 xds: Avoid depending on io.grpc.xds.Internal* classes
1cf1927 xds: Preserve nonce when unsubscribing type
9a712c3 xds: Make XdsClient.ResourceStore package-private
Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
io.grpc:grpc-core	[>= 1.54.a, < 1.55]
io.grpc:grpc-netty	[>= 1.54.a, < 1.55]
io.grpc:grpc-netty-shaded	[>= 1.54.a, < 1.55]
io.grpc:grpc-protobuf	[>= 1.54.a, < 1.55]
io.grpc:grpc-stub	[>= 1.54.a, < 1.55]
io.grpc:protoc-gen-grpc-java	[>= 1.54.a, < 1.55]
io.grpc:grpc-core	[>= 1.53.a, < 1.54]
io.grpc:grpc-netty	[>= 1.53.a, < 1.54]
io.grpc:grpc-netty-shaded	[>= 1.53.a, < 1.54]
io.grpc:grpc-protobuf	[>= 1.53.a, < 1.54]
io.grpc:grpc-stub	[>= 1.53.a, < 1.54]
io.grpc:protoc-gen-grpc-java	[>= 1.53.a, < 1.54]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

* EventMesh function admin (#4851) * own * dependency * finish registry * EventMesh function admin (#4853) * own * dependency * finish registry * init * Eventmesh function admin (#4854) * own * dependency * finish registry * init * 0419 * 0419 * more discovery and move gRPC * fix dependency * EventMesh function connector runtime (#4858) * [ISSUE #4812] Set up Admin Endpoints v2 (#4813) * Remove redundant overloaded methods * Simplify write() result param * Add writeJson(); Add PUT; Add JavaDoc * Rename EventHttpHandler to EventMeshHttpHandler * Correct server thread name * Clean up messy & non-hierarchical overloading * No need to set headers manually any more * Set up v1&v2 endpoints * Set up v1&v2 response dto * Introduce fastjson2 * Fix fastjson2 "level too large : 2048" error caused by IPAddress * Correct @ConfigField naming * Return properties format json key * Add format option to query string * Introduce Result * Reduce duplicate builder code * Fix all checkstyle warnings in eventmesh-runtime * Add known dependency * [ISSUE #4814] Migrate from fastjson 1.2.83 to fastjson2 (#4819) * [Enhancement] Migrate from fastjson 1.2.83 to fastjson2 #4814 * fix_dependencies_problem * fix_check * [ISSUE #4551] modify the logic of time-consumption statistics (#4822) * init connector runtime v2 * [ISSUE #4804] Fix SubStreamHandler exception loop by closeOnError (#4807) * Handle exception loop by closeOnError * Lombok optimization * some format optimization * Avoid closing multiple times * Remove redundant set null * Revert "Avoid closing multiple times" This reverts commit 767bc59. * Use synchronized latch to keep senderOnComplete called once * Use boolean to prevent latch called by somebody else * Remove the unique callee/caller close() of onCompleted() * [ISSUE #4838] Deprecate unused `eventMesh.connector.plugin.type` etc. properties (#4839) * Remove all references of `eventMesh.connector.plugin.type` * Deprecate `eventMesh.connector.plugin.type` and sort properties * Remove misconfigured & not-used `registerIntervalInMills`, `fetchRegistryAddrIntervalInMills` * Remove 'defibus' related un-used usages * Supplement #4809 for `null != object` * [ISSUE #4832] Downgrade stale bot to v8 to resolve state cache reserving error (#4833) * Revert stale bot to v8 to resolve state cache reserving error * Reduce operations-per-run to default value to ease pressure * Unify yaml to yml * [ISSUE #4820] Bug fix EventHandler not return json (#4821) * bug fix * bug fix * bug fix * update runtime v2 * update connector runtime * update connector runtime * update connector runtime * update connector runtime * update connector runtime --------- Co-authored-by: Pil0tXia <[email protected]> Co-authored-by: Zaki <[email protected]> Co-authored-by: Karson <[email protected]> * [ISSUE #4931]Add Registry Module for Discovery AdminServer * [ISSUES #4933]Add Admin Module * [ISSUE #4935] Add and Move the Pojo Used By Both Runtime and Admin to Common * [ISSUE #4937]fix gradle dependecy and add runtime v2 * [ISSUES #4939]add canal connector * fix missing apache header * fix missing apache header * fix missing apache header * update gradle dependencies * fix admin server ci check error * fix admin server ci check error * fix ci checkStyle error * fix ci check error --------- Co-authored-by: sodaRyCN <[email protected]> Co-authored-by: Pil0tXia <[email protected]> Co-authored-by: Zaki <[email protected]> Co-authored-by: Karson <[email protected]>

* Code optimization * Remove unused imports * Added one forgotten import 'Objects' * Added Constants import * removed unnecessary space * fixed code optimization * corrected some small changes * redundant lines * redundant lines * optimized returned reply in subscribe method * reverted correct change * reverted back

* Move admin port to http configs * Refactor AdminServer to own independent configuration * Support TLS/SSL for AdminServer * Add default configs * Rename jks file to a shorter name * Add one line of comment * Fetch current version

Bumps `protobufVersion` from 3.21.5 to 3.25.3. Updates `com.google.protobuf:protobuf-java-util` from 3.21.5 to 3.25.3 Updates `com.google.protobuf:protobuf-java` from 3.21.5 to 3.25.3 - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/protobuf_release.bzl) - [Commits](protocolbuffers/protobuf@v3.21.5...v3.25.3) --- updated-dependencies: - dependency-name: com.google.protobuf:protobuf-java-util dependency-type: direct:production update-type: version-update:semver-minor - dependency-name: com.google.protobuf:protobuf-java dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [org.antlr:antlr4](https://github.com/antlr/antlr4) from 4.13.0 to 4.13.1. - [Release notes](https://github.com/antlr/antlr4/releases) - [Changelog](https://github.com/antlr/antlr4/blob/dev/doc/go-changes.md) - [Commits](antlr/antlr4@4.13.0...4.13.1) --- updated-dependencies: - dependency-name: org.antlr:antlr4 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [com.baomidou:mybatis-plus-boot-starter](https://github.com/baomidou/mybatis-plus) from 3.5.5 to 3.5.6. - [Release notes](https://github.com/baomidou/mybatis-plus/releases) - [Changelog](https://github.com/baomidou/mybatis-plus/blob/3.0/CHANGELOG.md) - [Commits](baomidou/mybatis-plus@v3.5.5...v3.5.6) --- updated-dependencies: - dependency-name: com.baomidou:mybatis-plus-boot-starter dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [io.spring.gradle:dependency-management-plugin](https://github.com/spring-gradle-plugins/dependency-management-plugin) from 1.0.11.RELEASE to 1.1.5. - [Release notes](https://github.com/spring-gradle-plugins/dependency-management-plugin/releases) - [Commits](spring-gradle-plugins/dependency-management-plugin@v1.0.11.RELEASE...v1.1.5) --- updated-dependencies: - dependency-name: io.spring.gradle:dependency-management-plugin dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [org.assertj:assertj-core](https://github.com/joel-costigliola/assertj-core) from 2.6.0 to 2.8.0. - [Release notes](https://github.com/joel-costigliola/assertj-core/releases) - [Commits](assertj/assertj@assertj-core-2.6.0...assertj-core-2.8.0) --- updated-dependencies: - dependency-name: org.assertj:assertj-core dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [com.aliyun:dingtalk](https://github.com/aliyun/alibabacloud-sdk) from 2.0.61 to 2.1.25. - [Release notes](https://github.com/aliyun/alibabacloud-sdk/releases) - [Changelog](https://github.com/aliyun/alibabacloud-sdk/blob/master/ChangeLog-Go.txt) - [Commits](https://github.com/aliyun/alibabacloud-sdk/commits) --- updated-dependencies: - dependency-name: com.aliyun:dingtalk dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps org.apache.commons:commons-lang3 from 3.6 to 3.14.0. --- updated-dependencies: - dependency-name: org.apache.commons:commons-lang3 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [com.mebigfatguy.fb-contrib:fb-contrib](https://github.com/mebigfatguy/fb-contrib) from 7.6.0 to 7.6.4. - [Commits](mebigfatguy/fb-contrib@v7.6.0...v7.6.4) --- updated-dependencies: - dependency-name: com.mebigfatguy.fb-contrib:fb-contrib dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump jacksonVersion from 2.0.1 to 2.17.1 Bumps `jacksonVersion` from 2.0.1 to 2.17.1. Updates `com.fasterxml.jackson.core:jackson-databind` from 2.0.1 to 2.17.1 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `com.fasterxml.jackson.core:jackson-core` from 2.17.1 to 2.17.1 - [Commits](FasterXML/jackson-core@jackson-core-2.17.1...jackson-core-2.17.1) Updates `com.fasterxml.jackson.core:jackson-annotations` from 2.17.1 to 2.17.1 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-yaml` from 2.17.1 to 2.17.1 - [Commits](FasterXML/jackson-dataformats-text@jackson-dataformats-text-2.17.1...jackson-dataformats-text-2.17.1) Updates `com.fasterxml.jackson.datatype:jackson-datatype-jsr310` from 2.17.1 to 2.17.1 --- updated-dependencies: - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-type: direct:production update-type: version-update:semver-minor - dependency-name: com.fasterxml.jackson.core:jackson-core dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: com.fasterxml.jackson.core:jackson-annotations dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-yaml dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jsr310 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> * Remove redundant dep declaration --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Pil0tXia <[email protected]>

* Bump io.cloudevents:cloudevents-http-vertx from 2.3.0 to 2.5.0 Bumps io.cloudevents:cloudevents-http-vertx from 2.3.0 to 2.5.0. --- updated-dependencies: - dependency-name: io.cloudevents:cloudevents-http-vertx dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> * Do not downgrade * Can upgrade --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Pil0tXia <[email protected]>

* Bump com.github.seancfoley:ipaddress from 5.3.3 to 5.5.0 Bumps [com.github.seancfoley:ipaddress](https://github.com/seancfoley/IPAddress) from 5.3.3 to 5.5.0. - [Release notes](https://github.com/seancfoley/IPAddress/releases) - [Commits](seancfoley/IPAddress@v5.3.3...v5.5.0) --- updated-dependencies: - dependency-name: com.github.seancfoley:ipaddress dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> * Redundant dep declaration --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Pil0tXia <[email protected]>

…mitters (#4930) * a more standard way to prevent creating dependabot PRs * approve if the PR author is dependabot

* Bump org.redisson:redisson from 3.17.3 to 3.30.0 Bumps [org.redisson:redisson](https://github.com/redisson/redisson) from 3.17.3 to 3.30.0. - [Release notes](https://github.com/redisson/redisson/releases) - [Changelog](https://github.com/redisson/redisson/blob/master/CHANGELOG.md) - [Commits](redisson/redisson@redisson-3.17.3...redisson-3.30.0) --- updated-dependencies: - dependency-name: org.redisson:redisson dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> * manual upgrade * Update dependency that are no longer maintained * Streamline build command * Fix address in use and try to fix countDownLatch await blocking * Update deprecated ENV --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Pil0tXia <[email protected]>

Bumps [com.alibaba.fastjson2:fastjson2](https://github.com/alibaba/fastjson2) from 2.0.48 to 2.0.51. - [Release notes](https://github.com/alibaba/fastjson2/releases) - [Commits](alibaba/fastjson2@2.0.48...2.0.51) --- updated-dependencies: - dependency-name: com.alibaba.fastjson2:fastjson2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps mysql:mysql-connector-java from 8.0.32 to 8.0.33. --- updated-dependencies: - dependency-name: mysql:mysql-connector-java dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [org.mybatis.spring.boot:mybatis-spring-boot-starter](https://github.com/mybatis/spring-boot-starter) from 2.3.1 to 2.3.2. - [Release notes](https://github.com/mybatis/spring-boot-starter/releases) - [Commits](mybatis/spring-boot-starter@mybatis-spring-boot-2.3.1...mybatis-spring-boot-2.3.2) --- updated-dependencies: - dependency-name: org.mybatis.spring.boot:mybatis-spring-boot-starter dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

….0 (#4974) Bumps [com.h3xstream.findsecbugs:findsecbugs-plugin](https://github.com/find-sec-bugs/find-sec-bugs) from 1.11.0 to 1.13.0. - [Release notes](https://github.com/find-sec-bugs/find-sec-bugs/releases) - [Changelog](https://github.com/find-sec-bugs/find-sec-bugs/blob/master/CHANGELOG.md) - [Commits](find-sec-bugs/find-sec-bugs@version-1.11.0...version-1.13.0) --- updated-dependencies: - dependency-name: com.h3xstream.findsecbugs:findsecbugs-plugin dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [org.asynchttpclient:async-http-client](https://github.com/AsyncHttpClient/async-http-client) from 2.12.0 to 2.12.3. - [Release notes](https://github.com/AsyncHttpClient/async-http-client/releases) - [Changelog](https://github.com/AsyncHttpClient/async-http-client/blob/main/CHANGES.md) - [Commits](AsyncHttpClient/async-http-client@async-http-client-project-2.12.0...async-http-client-project-2.12.3) --- updated-dependencies: - dependency-name: org.asynchttpclient:async-http-client dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps commons-io:commons-io from 2.11.0 to 2.16.1. --- updated-dependencies: - dependency-name: commons-io:commons-io dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [com.alibaba:druid-spring-boot-starter](https://github.com/alibaba/druid) from 1.2.22 to 1.2.23. - [Release notes](https://github.com/alibaba/druid/releases) - [Commits](alibaba/druid@1.2.22...1.2.23) --- updated-dependencies: - dependency-name: com.alibaba:druid-spring-boot-starter dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps software.amazon.awssdk:s3 from 2.25.55 to 2.25.64. --- updated-dependencies: - dependency-name: software.amazon.awssdk:s3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps org.apache.commons:commons-text from 1.9 to 1.12.0. --- updated-dependencies: - dependency-name: org.apache.commons:commons-text dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump org.junit.jupiter:junit-jupiter from 5.6.0 to 5.10.2 Bumps [org.junit.jupiter:junit-jupiter](https://github.com/junit-team/junit5) from 5.6.0 to 5.10.2. - [Release notes](https://github.com/junit-team/junit5/releases) - [Commits](junit-team/junit5@r5.6.0...r5.10.2) --- updated-dependencies: - dependency-name: org.junit.jupiter:junit-jupiter dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> * use dependency mgmt --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Pil0tXia <[email protected]>

Bumps [com.alibaba:druid](https://github.com/alibaba/druid) from 1.2.6 to 1.2.23. - [Release notes](https://github.com/alibaba/druid/releases) - [Commits](alibaba/druid@1.2.6...1.2.23) --- updated-dependencies: - dependency-name: com.alibaba:druid dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump commons-validator:commons-validator from 1.7 to 1.9.0 Bumps commons-validator:commons-validator from 1.7 to 1.9.0. --- updated-dependencies: - dependency-name: commons-validator:commons-validator dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> * Update build.gradle --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Pil0tXia <[email protected]>

Bumps [org.springframework.boot:spring-boot-starter-jetty](https://github.com/spring-projects/spring-boot) from 2.7.10 to 2.7.18. - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](spring-projects/spring-boot@v2.7.10...v2.7.18) --- updated-dependencies: - dependency-name: org.springframework.boot:spring-boot-starter-jetty dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…ll Sources(#5102)

Bumps software.amazon.awssdk:s3 from 2.28.12 to 2.29.5. --- updated-dependencies: - dependency-name: software.amazon.awssdk:s3 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…5125) Bumps [com.zendesk:mysql-binlog-connector-java](https://github.com/osheroff/mysql-binlog-connector-java) from 0.29.2 to 0.30.1. - [Changelog](https://github.com/osheroff/mysql-binlog-connector-java/blob/master/CHANGELOG.md) - [Commits](https://github.com/osheroff/mysql-binlog-connector-java/commits) --- updated-dependencies: - dependency-name: com.zendesk:mysql-binlog-connector-java dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [org.redisson:redisson](https://github.com/redisson/redisson) from 3.36.0 to 3.38.1. - [Release notes](https://github.com/redisson/redisson/releases) - [Changelog](https://github.com/redisson/redisson/blob/master/CHANGELOG.md) - [Commits](redisson/redisson@redisson-3.36.0...redisson-3.38.1) --- updated-dependencies: - dependency-name: org.redisson:redisson dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps org.apache.kafka:kafka-clients from 3.7.1 to 3.8.1. --- updated-dependencies: - dependency-name: org.apache.kafka:kafka-clients dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps commons-io:commons-io from 2.17.0 to 2.18.0. --- updated-dependencies: - dependency-name: commons-io:commons-io dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps org.apache.kafka:kafka-clients from 3.8.1 to 3.9.0. --- updated-dependencies: - dependency-name: org.apache.kafka:kafka-clients dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* [ISSUE #5127] fix * [ISSUE #5127] fix * [ISSUE #5127] fix * [ISSUE #5127] fix * [ISSUE #5127] fix checkstyle test --------- Co-authored-by: JiangShuJu <[email protected]>

* [ISSUE #5137] update connector runtime v2 module * fix checkStyle error

* [ISSUE #5137] update connector runtime v2 module * fix checkStyle error * [ISSUE #5139] update canal connector module

* [ISSUE #5137] update connector runtime v2 module * fix checkStyle error * [ISSUE #5139] update canal connector module * [ISSUE #5141] update eventmesh-admin-server module

* [ISSUE #5137] update connector runtime v2 module * fix checkStyle error * [ISSUE #5139] update canal connector module * [ISSUE #5141] update eventmesh-admin-server module * [ISSUE #5144] update eventmesh-connector-http module

* Update cncf landscape link in README.md * Update README.md

)

…de (#5163)

* Publish build scans to develocity.apache.org * Update Develocity plugin versions * Add a projectId * Use `DEVELOCITY_ACCESS_KEY` to authenticate to `develocity.apache.org`

Bumps `grpcVersion` from 1.68.0 to 1.70.0. Updates `io.grpc:grpc-core` from 1.68.0 to 1.70.0 - [Release notes](https://github.com/grpc/grpc-java/releases) - [Commits](grpc/grpc-java@v1.68.0...v1.70.0) Updates `io.grpc:grpc-protobuf` from 1.68.0 to 1.70.0 - [Release notes](https://github.com/grpc/grpc-java/releases) - [Commits](grpc/grpc-java@v1.68.0...v1.70.0) Updates `io.grpc:grpc-stub` from 1.68.0 to 1.70.0 - [Release notes](https://github.com/grpc/grpc-java/releases) - [Commits](grpc/grpc-java@v1.68.0...v1.70.0) Updates `io.grpc:grpc-netty` from 1.68.0 to 1.70.0 - [Release notes](https://github.com/grpc/grpc-java/releases) - [Commits](grpc/grpc-java@v1.68.0...v1.70.0) Updates `io.grpc:grpc-netty-shaded` from 1.68.0 to 1.70.0 - [Release notes](https://github.com/grpc/grpc-java/releases) - [Commits](grpc/grpc-java@v1.68.0...v1.70.0) Updates `io.grpc:protoc-gen-grpc-java` from 1.68.0 to 1.70.0 - [Release notes](https://github.com/grpc/grpc-java/releases) - [Commits](grpc/grpc-java@v1.68.0...v1.70.0) --- updated-dependencies: - dependency-name: io.grpc:grpc-core dependency-type: direct:production update-type: version-update:semver-minor - dependency-name: io.grpc:grpc-protobuf dependency-type: direct:production update-type: version-update:semver-minor - dependency-name: io.grpc:grpc-stub dependency-type: direct:production update-type: version-update:semver-minor - dependency-name: io.grpc:grpc-netty dependency-type: direct:production update-type: version-update:semver-minor - dependency-name: io.grpc:grpc-netty-shaded dependency-type: direct:production update-type: version-update:semver-minor - dependency-name: io.grpc:protoc-gen-grpc-java dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>

xwm1992 and others added 30 commits May 31, 2024 17:03

update eventmesh architecture (#4946)

58b35c0

[ISSUE #4929] Auto approve when dependabot's branch is changed by com…

229edb3

…mitters (#4930) * a more standard way to prevent creating dependabot PRs * approve if the PR author is dependabot

melisolmez and others added 23 commits October 28, 2024 11:58

[ISSUE #4991] add unit test for LogUtil (#5100)

e86d927

[ISSUE #5101] Define and standardize some common configurations for a…

1d0d11f

…ll Sources(#5102)

[ISSUE #5127] fix create topic error in Standalone mode (#5128)

202a31d

* [ISSUE #5127] fix * [ISSUE #5127] fix * [ISSUE #5127] fix * [ISSUE #5127] fix * [ISSUE #5127] fix checkstyle test --------- Co-authored-by: JiangShuJu <[email protected]>

[ISSUE #5137] update connector runtime v2 module (#5138)

efa5793

* [ISSUE #5137] update connector runtime v2 module * fix checkStyle error

[ISSUE #5139] update canal connector module (#5140)

60d9b1e

* [ISSUE #5137] update connector runtime v2 module * fix checkStyle error * [ISSUE #5139] update canal connector module

[ISSUE #5141] update eventmesh-admin-server module (#5142)

8826a97

* [ISSUE #5137] update connector runtime v2 module * fix checkStyle error * [ISSUE #5139] update canal connector module

[ISSUE #5141] update eventmesh-admin-server module (#5143)

8b0bd2c

* [ISSUE #5137] update connector runtime v2 module * fix checkStyle error * [ISSUE #5139] update canal connector module * [ISSUE #5141] update eventmesh-admin-server module

Hessian Serializer add whitelist (#5146)

a124e47

Update cncf landscape link in README.md (#5149)

b30d270

* Update cncf landscape link in README.md * Update README.md

Update LICENSE & NOTICE files (#5150)

1bf8616

Update README.md (#5024)

2afe3dd

Update gradle.properties (#5152)

8c28e1d

[ISSUE #4825] Deprecate Webhook function of EventMesh Runtime(v1) (#5153

cea517d

)

[ISSUE #5162] Remove and replace sensitive information involved in co…

bad987d

…de (#5163)

Publish build scans to develocity.apache.org (#5165)

22e4703

* Publish build scans to develocity.apache.org * Update Develocity plugin versions * Add a projectId * Use `DEVELOCITY_ACCESS_KEY` to authenticate to `develocity.apache.org`

dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Feb 1, 2025

dependabot bot mentioned this pull request Feb 1, 2025

Bump grpcVersion from 1.68.0 to 1.69.0 #5154

Closed

github-actions bot previously approved these changes Feb 1, 2025

View reviewed changes

xwm1992 dismissed github-actions[bot]’s stale review via 1afaf67 February 7, 2025 04:30

xwm1992 force-pushed the dependabot/gradle/grpcVersion-1.70.0 branch from a838d2d to 1afaf67 Compare February 7, 2025 04:30

xwm1992 force-pushed the master branch from 4ea9f76 to e8fdcd3 Compare February 13, 2025 03:23

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump grpcVersion from 1.68.0 to 1.70.0 #5169

Bump grpcVersion from 1.68.0 to 1.70.0 #5169

dependabot bot commented on behalf of github Feb 1, 2025

Bump grpcVersion from 1.68.0 to 1.70.0 #5169

Are you sure you want to change the base?

Bump grpcVersion from 1.68.0 to 1.70.0 #5169

Conversation

dependabot bot commented on behalf of github Feb 1, 2025

v1.70.0

Bug Fixes

Improvements

Documentation

Dependencies

Thanks to

v1.69.1

Bug Fixes

v1.70.0

Bug Fixes

Improvements

Documentation

Dependencies

Thanks to

v1.69.1

Bug Fixes

v1.70.0

Bug Fixes

Improvements

Documentation

Dependencies

Thanks to

v1.69.1

Bug Fixes

v1.70.0

Bug Fixes

Improvements

Documentation

Dependencies

Thanks to

v1.69.1

Bug Fixes

v1.70.0

Bug Fixes

Improvements

Documentation

Dependencies

Thanks to

v1.69.1

Bug Fixes

v1.70.0

Bug Fixes

Improvements

Documentation

Dependencies

Thanks to

v1.69.1

Bug Fixes