Bump google.golang.org/grpc from 1.82.1 to 1.83.1 - #1367
Conversation
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.82.1 to 1.83.1. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.82.1...v1.83.1) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-version: 1.83.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
| - Prefer minimal, surgical changes over broad refactors or speculative cleanup. | ||
| - Read the package you are editing and match its existing naming, option types, error handling, comments, tests, and concurrency patterns. | ||
| - Keep public APIs backward compatible unless the task explicitly requires a breaking change. | ||
| - Keep telemetry resilient and loosely coupled. Do not introduce behavior that can unexpectedly interfere with host applications. |
There was a problem hiding this comment.
host may be insensitive, use presenter, entertainer, emcee instead host-hostess retext-equality
| - Prefer fail-safe behavior and explicit invariants over implicit assumptions. | ||
| - Keep dependencies minimal and justified. | ||
| - Preserve host-application safety: telemetry should not panic, block indefinitely, or amplify attacker-controlled input. | ||
| - Be conservative on hot paths. Avoid unnecessary allocations, reflection, interface churn, blocking, global state, and high-cardinality telemetry. |
There was a problem hiding this comment.
Be careful with conservative, it’s profane in some cases conservative retext-profanities
| - Add or tighten tests before moving code if current behavior is not already pinned down. | ||
| - Avoid broad rewrites, clever abstractions, or package-wide cleanup unless explicitly requested. | ||
| - If a refactor touches a hot path, benchmark before and after. | ||
| - Keep API shape, semantics, concurrency guarantees, and failure modes unchanged unless the task says otherwise. |
There was a problem hiding this comment.
Be careful with failure, it’s profane in some cases failure retext-profanities
| ### Changed | ||
|
|
||
| - ⚠️ **Breaking Change:** `go.opentelemetry.io/otel/sdk/metric` now applies a default cardinality limit of 2000 to comply with the Metrics SDK specification recommendation. | ||
| New attribute sets are dropped when the cardinality limit is reached. The measurement of these sets are aggregated into a special attribute set containing `attribute.Bool("otel.metric.overflow", true)`. |
There was a problem hiding this comment.
special may be insensitive, use has a disability, person with a disability, people with disabilities instead special retext-equality
|
This one will be used instead: #1369 |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
1 participant
Bumps google.golang.org/grpc from 1.82.1 to 1.83.1.
Release notes
Sourced from google.golang.org/grpc's releases.
... (truncated)
Commits
1550d9eChange version to 1.83.1 (#9336)ebba6f3Cherry-pick #9258 and #9332 into v1.83.x (#9335)8cfeca0Cherry-pick #9331 to v1.83.x (#9333)dec6951Change version to 1.83.1-dev (#9229)4c226daChange version to 1.83.0 (#9228)c198988Cherrypick 9223 into v1.83.x (#9279)8ce3ebfCherrypick PR 9255 into v1.83.x (#9263)e393849Cherry-pick recent changes from master (#9240)2a112a8authz: add onPolicyUpdate callback to authz file watcher (#9142)1a80fcavet: adds a check to disallow usage of regex.Compile in xDS code (#9216)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.