Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Jan 10, 2026

Bumps tonic-build from 0.9.2 to 0.14.2.

Release notes

Sourced from tonic-build's releases.

v0.14.2

What's Changed

New Contributors

Full Changelog: hyperium/tonic@v0.14.1...v0.14.2

v0.14.1

Notable change is to relax the accidental MSRV bump in the last release.

What's Changed

New Contributors

Full Changelog: hyperium/tonic@v0.14.0...v0.14.1

v0.14.0

This release marks an important milestone for tonic, "hopefully" this will be the last major breaking release of Tonic before we start to transition work into bringing the community a joint-effort grpc-rust implementation. For the moment, any new features for the core of tonic that are not related to the work towards grpc-rust will not be accepted (I believe tonic to be in quite a good spot, security features of course will be handled with the upmost importance). Stay tuned there will be more information the coming months on what is going on with the new project but you can already see some of the code in the grpc crate within the tonic repository.

You can always watch this video for more info on grpc-rust.

Breaking Changes

  • Prost updated to v0.14
  • Prost has been extracted to their own crates

Migration guide

To migrate between <=v0.13.1 to v0.14 anything that used prost has now been moved into either tonic-prost or tonic-prost-build. All the previous types are still available but under these two new crates.

What's Changed

... (truncated)

Changelog

Sourced from tonic-build's changelog.

NOTE: ths changelog is no longer used and from version v0.13.0 onward we will be using github releases and the changes can be found here.

0.12.3 (2024-08-29)

Features

  • server: Added support for grpc max_connection_age (#1865)
  • build: Add #[deprecated] to deprecated client methods (#1879)
  • build: plumb skip_debug through prost Builder and add test (#1900)

Bug Fixes

  • build: Revert "fix tonic-build cargo build script outputs (#1821)" which accidentally increases MSRV (#1898)
  • server: ignore more error kinds in incoming socket stream (#1885)
  • transport: do not shutdown server on broken connections (#1948)

0.12.2 (2024-08-23)

Features

  • Move TimeoutExpired out of transport (#1826)
  • Move ConnectError type from transport (#1828)
  • channel: allow setting max_header_list_size (#1835)
  • router: Add RoutesBuilder constructor (#1855)
  • tls: Rename tls-roots feature with tls-native-roots (#1860)
  • router: Rename Routes::into_router with into_axum_router (#1862)
  • router: Implement from axum::Router for Routes (#1863)
  • channel: Re-enable TLS based on Cargo features in generated clients (#1866)
  • server: allow setting max_header_list_size (#1870)
  • build: Expose formatted service name (#1684)
  • reflection: add back support for v1alpha reflection protocol (#1888)

Bug Fixes

  • router: Add missing unimplemented fallback to RoutesBuilder (#1864)
  • server: Prevent server from exiting on ECONNABORTED (#1874)
  • web: fix panic in trailer parsing on multiple trailers (#1880)
  • web: fix empty trailer parsing causing infinite parser loop (#1883)

0.12.1 (2024-07-17)

Bug Fixes

  • Reduce tokio-stream feature (#1795)

0.12.0 (2024-07-08)

This breaking release updates tonic to the hyper 1.0 ecosystem and also updates to prost v0.13.0.

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Jan 10, 2026
Bumps [tonic-build](https://github.com/hyperium/tonic) from 0.9.2 to 0.14.2.
- [Release notes](https://github.com/hyperium/tonic/releases)
- [Changelog](https://github.com/hyperium/tonic/blob/master/CHANGELOG.md)
- [Commits](hyperium/tonic@v0.9.2...v0.14.2)

---
updated-dependencies:
- dependency-name: tonic-build
  dependency-version: 0.14.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/cargo/dev-bins/tonic-build-0.14.2 branch from d320719 to fbdd77b Compare January 12, 2026 04:07
@yihau yihau closed this Jan 12, 2026
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Jan 12, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/cargo/dev-bins/tonic-build-0.14.2 branch January 12, 2026 04:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants