Skip to content
This repository has been archived by the owner on Jul 21, 2023. It is now read-only.

build(deps): bump google.golang.org/grpc from 1.49.0 to 1.50.0 in /key-rotator #2098

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 10, 2022

Bumps google.golang.org/grpc from 1.49.0 to 1.50.0.

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.50.0

Behavior Changes

  • client: use proper "@" semantics for connecting to abstract unix sockets. (#5678)
    • This is technically a bug fix; the result is that the address was including a trailing NULL byte, which it should not have. This may break users creating the socket in Go by prefixing a NULL instead of an "@", though, so calling it out as a behavior change.

New Features

  • metadata: add experimental ValueFromIncomingContext to more efficiently retrieve a single value (#5596)
  • stats: provide peer information in HandleConn context (#5589)
  • xds: add support for Outlier Detection, enabled by default (#5435, #5673)

Bug Fixes

  • client: fix deadlock in transport caused by GOAWAY racing with stream creation (#5652)
    • This should only occur with an HTTP/2 server that does not follow best practices of an advisory GOAWAY (not a grpc-go server).
  • xds/xdsclient: fix a bug which was causing routes with cluster_specifier_plugin set to be NACKed when GRPC_EXPERIMENTAL_XDS_RLS_LB was off (#5670)
  • xds/xdsclient: NACK cluster resource if config_source_specifier in lrs_server is not self (#5613)
  • xds/ringhash: fix a bug which sometimes prevents the LB policy from retrying connection attempts (#5601)
  • xds/ringhash: do nothing when asked to exit IDLE instead of falling back on the default channel behavior of connecting to all addresses (#5614)
  • xds/rls: fix a bug which was causing the channel to be stuck in IDLE (#5656)
  • alts: fix a bug which was setting WaitForReady on handshaker service RPCs, thereby delaying fallback when required (#5620)
  • gcp/observability: fix End() to cleanup global state correctly (#5623)
Commits
  • c1d7d7a Change version to 1.50.0 (#5685)
  • 1451c62 internal/transport: optimize grpc-message encoding/decoding (#5654)
  • be4b63b test: minor test cleanup (#5679)
  • d83070e Changed Outlier Detection Env Var to default true (#5673)
  • 54521b2 client: remove trailing null from unix abstract socket address (#5678)
  • 36e4810 orca: cleanup old code, and get grpc package to use new code (#5627)
  • e8866a8 build: harden GitHub Workflow permissions (#5660)
  • 8458251 xdsclient: ignore routes with cluster_specifier_plugin when GRPC_EXPERIMENTAL...
  • a238ceb xDS: Outlier Detection Env Var not hardcoded to false (#5664)
  • b1d7f56 transport: Fix deadlock in transport caused by GOAWAY race with new stream cr...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.49.0 to 1.50.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.49.0...v1.50.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from a team as a code owner October 10, 2022 09:18
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 10, 2022
@codecov-commenter
Copy link

codecov-commenter commented Oct 10, 2022

Codecov Report

Base: 57.46% // Head: 57.46% // No change to project coverage 👍

Coverage data is based on head (a9e09c4) compared to base (3b43133).
Patch has no changes to coverable lines.

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #2098   +/-   ##
=======================================
  Coverage   57.46%   57.46%           
=======================================
  Files          37       37           
  Lines       11664    11664           
=======================================
  Hits         6703     6703           
  Misses       4846     4846           
  Partials      115      115           
Flag Coverage Δ
facilitator_tests 59.56% <ø> (ø)
key_rotator_tests 56.02% <ø> (ø)
workflow_manager_tests 39.28% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

☔ View full report at Codecov.
📢 Do you have feedback about the report comment? Let us know in this issue.

Copy link
Contributor

@branlwyd branlwyd left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@dependabot squash and merge

@dependabot dependabot bot merged commit e958116 into main Oct 10, 2022
@dependabot dependabot bot deleted the dependabot/go_modules/key-rotator/google.golang.org/grpc-1.50.0 branch October 10, 2022 16:51
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
dependencies Pull requests that update a dependency file go Pull requests that update Go code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants