Skip to content

Commit 3c63b70

Browse files
Bump google.golang.org/grpc from 1.72.2 to 1.79.3 in /extensibility (#135)
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.72.2 to 1.79.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/grpc/grpc-go/releases">google.golang.org/grpc's releases</a>.</em></p> <blockquote> <h2>Release 1.79.3</h2> <h1>Security</h1> <ul> <li>server: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted &quot;deny&quot; rules in interceptors like <code>grpc/authz</code>. Any request with a non-canonical path is now immediately rejected with an <code>Unimplemented</code> error. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8981">#8981</a>)</li> </ul> <h2>Release 1.79.2</h2> <h1>Bug Fixes</h1> <ul> <li>stats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (<a href="https://redirect.github.com/grpc/grpc-go/pull/8874">grpc/grpc-go#8874</a>)</li> </ul> <h2>Release 1.79.1</h2> <h1>Bug Fixes</h1> <ul> <li>grpc: Remove the <code>-dev</code> suffix from the User-Agent header. (<a href="https://redirect.github.com/grpc/grpc-go/pull/8902">grpc/grpc-go#8902</a>)</li> </ul> <h2>Release 1.79.0</h2> <h1>API Changes</h1> <ul> <li>mem: Add experimental API <code>SetDefaultBufferPool</code> to change the default buffer pool. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8806">#8806</a>) <ul> <li>Special Thanks: <a href="https://github.com/vanja-p"><code>@​vanja-p</code></a></li> </ul> </li> <li>experimental/stats: Update <code>MetricsRecorder</code> to require embedding the new <code>UnimplementedMetricsRecorder</code> (a no-op struct) in all implementations for forward compatibility. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8780">#8780</a>)</li> </ul> <h1>Behavior Changes</h1> <ul> <li>balancer/weightedtarget: Remove handling of <code>Addresses</code> and only handle <code>Endpoints</code> in resolver updates. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8841">#8841</a>)</li> </ul> <h1>New Features</h1> <ul> <li>experimental/stats: Add support for asynchronous gauge metrics through the new <code>AsyncMetricReporter</code> and <code>RegisterAsyncReporter</code> APIs. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8780">#8780</a>)</li> <li>pickfirst: Add support for weighted random shuffling of endpoints, as described in <a href="https://redirect.github.com/grpc/proposal/pull/535">gRFC A113</a>. <ul> <li>This is enabled by default, and can be turned off using the environment variable <code>GRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING</code>. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8864">#8864</a>)</li> </ul> </li> <li>xds: Implement <code>:authority</code> rewriting, as specified in <a href="https://github.com/grpc/proposal/blob/master/A81-xds-authority-rewriting.md">gRFC A81</a>. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8779">#8779</a>)</li> <li>balancer/randomsubsetting: Implement the <code>random_subsetting</code> LB policy, as specified in <a href="https://github.com/grpc/proposal/blob/master/A68-random-subsetting.md">gRFC A68</a>. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8650">#8650</a>) <ul> <li>Special Thanks: <a href="https://github.com/marek-szews"><code>@​marek-szews</code></a></li> </ul> </li> </ul> <h1>Bug Fixes</h1> <ul> <li>credentials/tls: Fix a bug where the port was not stripped from the authority override before validation. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8726">#8726</a>) <ul> <li>Special Thanks: <a href="https://github.com/Atul1710"><code>@​Atul1710</code></a></li> </ul> </li> <li>xds/priority: Fix a bug causing delayed failover to lower-priority clusters when a higher-priority cluster is stuck in <code>CONNECTING</code> state. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8813">#8813</a>)</li> <li>health: Fix a bug where health checks failed for clients using legacy compression options (<code>WithDecompressor</code> or <code>RPCDecompressor</code>). (<a href="https://redirect.github.com/grpc/grpc-go/issues/8765">#8765</a>) <ul> <li>Special Thanks: <a href="https://github.com/sanki92"><code>@​sanki92</code></a></li> </ul> </li> <li>transport: Fix an issue where the HTTP/2 server could skip header size checks when terminating a stream early. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8769">#8769</a>) <ul> <li>Special Thanks: <a href="https://github.com/joybestourous"><code>@​joybestourous</code></a></li> </ul> </li> <li>server: Propagate status detail headers, if available, when terminating a stream during request header processing. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8754">#8754</a>) <ul> <li>Special Thanks: <a href="https://github.com/joybestourous"><code>@​joybestourous</code></a></li> </ul> </li> </ul> <h1>Performance Improvements</h1> <ul> <li>credentials/alts: Optimize read buffer alignment to reduce copies. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8791">#8791</a>)</li> <li>mem: Optimize pooling and creation of <code>buffer</code> objects. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8784">#8784</a>)</li> <li>transport: Reduce slice re-allocations by reserving slice capacity. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8797">#8797</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/grpc/grpc-go/commit/dda86dbd9cecb8b35b58c73d507d81d67761205f"><code>dda86db</code></a> Change version to 1.79.3 (<a href="https://redirect.github.com/grpc/grpc-go/issues/8983">#8983</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/72186f163e75a065c39e6f7df9b6dea07fbdeff5"><code>72186f1</code></a> grpc: enforce strict path checking for incoming requests on the server (<a href="https://redirect.github.com/grpc/grpc-go/issues/8981">#8981</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/97ca3522b239edf6813e2b1106924e9d55e89d43"><code>97ca352</code></a> Changing version to 1.79.3-dev (<a href="https://redirect.github.com/grpc/grpc-go/issues/8954">#8954</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/8902ab6efea590f5b3861126559eaa26fa9783b2"><code>8902ab6</code></a> Change the version to release 1.79.2 (<a href="https://redirect.github.com/grpc/grpc-go/issues/8947">#8947</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/a9286705aa689bee321ec674323b6896284f3e02"><code>a928670</code></a> Cherry-pick <a href="https://redirect.github.com/grpc/grpc-go/issues/8874">#8874</a> to v1.79.x (<a href="https://redirect.github.com/grpc/grpc-go/issues/8904">#8904</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/06df3638c0bcee88197b1033b3ba83e1eb8bc010"><code>06df363</code></a> Change version to 1.79.2-dev (<a href="https://redirect.github.com/grpc/grpc-go/issues/8903">#8903</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/782f2de44f597af18a120527e7682a6670d84289"><code>782f2de</code></a> Change version to 1.79.1 (<a href="https://redirect.github.com/grpc/grpc-go/issues/8902">#8902</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/850eccbb2257bd2de6ac28ee88a7172ab6175629"><code>850eccb</code></a> Change version to 1.79.1-dev (<a href="https://redirect.github.com/grpc/grpc-go/issues/8851">#8851</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/765ff056b6890f6c8341894df4e9668e9bfc18ef"><code>765ff05</code></a> Change version to 1.79.0 (<a href="https://redirect.github.com/grpc/grpc-go/issues/8850">#8850</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/68804be0e78ed0365bb5a576dedc12e2168ed63e"><code>68804be</code></a> Cherry pick <a href="https://redirect.github.com/grpc/grpc-go/issues/8864">#8864</a> to v1.79.x (<a href="https://redirect.github.com/grpc/grpc-go/issues/8896">#8896</a>)</li> <li>Additional commits viewable in <a href="https://github.com/grpc/grpc-go/compare/v1.72.2...v1.79.3">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent 706a9bf commit 3c63b70

2 files changed

Lines changed: 77 additions & 76 deletions

File tree

extensibility/go.mod

Lines changed: 23 additions & 24 deletions
Original file line numberDiff line numberDiff line change
@@ -5,22 +5,22 @@ go 1.25.7
55
require (
66
go.temporal.io/api v1.60.2
77
go.temporal.io/server v1.30.1
8-
google.golang.org/grpc v1.72.2
9-
google.golang.org/protobuf v1.36.6
8+
google.golang.org/grpc v1.79.3
9+
google.golang.org/protobuf v1.36.10
1010
)
1111

1212
require (
13-
cel.dev/expr v0.23.1 // indirect
13+
cel.dev/expr v0.25.1 // indirect
1414
cloud.google.com/go v0.118.3 // indirect
1515
cloud.google.com/go/auth v0.15.0 // indirect
1616
cloud.google.com/go/auth/oauth2adapt v0.2.7 // indirect
17-
cloud.google.com/go/compute/metadata v0.6.0 // indirect
17+
cloud.google.com/go/compute/metadata v0.9.0 // indirect
1818
cloud.google.com/go/iam v1.4.2 // indirect
1919
cloud.google.com/go/monitoring v1.24.1 // indirect
2020
cloud.google.com/go/storage v1.51.0 // indirect
2121
dario.cat/mergo v1.0.1 // indirect
2222
filippo.io/edwards25519 v1.1.0 // indirect
23-
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.27.0 // indirect
23+
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.30.0 // indirect
2424
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.51.0 // indirect
2525
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.51.0 // indirect
2626
github.com/Masterminds/goutils v1.1.1 // indirect
@@ -35,16 +35,16 @@ require (
3535
github.com/cactus/go-statsd-client/v5 v5.1.0 // indirect
3636
github.com/cenkalti/backoff/v4 v4.3.0 // indirect
3737
github.com/cespare/xxhash/v2 v2.3.0 // indirect
38-
github.com/cncf/xds/go v0.0.0-20250121191232-2f005788dc42 // indirect
39-
github.com/davecgh/go-spew v1.1.1 // indirect
38+
github.com/cncf/xds/go v0.0.0-20251210132809-ee656c7534f5 // indirect
39+
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
4040
github.com/dgryski/go-farm v0.0.0-20240924180020-3414d57e47da // indirect
4141
github.com/dustin/go-humanize v1.0.1 // indirect
4242
github.com/emirpasic/gods v1.18.1 // indirect
43-
github.com/envoyproxy/go-control-plane/envoy v1.32.4 // indirect
44-
github.com/envoyproxy/protoc-gen-validate v1.2.1 // indirect
43+
github.com/envoyproxy/go-control-plane/envoy v1.36.0 // indirect
44+
github.com/envoyproxy/protoc-gen-validate v1.3.0 // indirect
4545
github.com/facebookgo/clock v0.0.0-20150410010913-600d898af40a // indirect
4646
github.com/felixge/httpsnoop v1.0.4 // indirect
47-
github.com/go-jose/go-jose/v4 v4.0.5 // indirect
47+
github.com/go-jose/go-jose/v4 v4.1.3 // indirect
4848
github.com/go-logr/logr v1.4.3 // indirect
4949
github.com/go-logr/stdr v1.2.2 // indirect
5050
github.com/go-sql-driver/mysql v1.9.0 // indirect
@@ -59,7 +59,7 @@ require (
5959
github.com/googleapis/gax-go/v2 v2.14.1 // indirect
6060
github.com/gorilla/mux v1.8.1 // indirect
6161
github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.2 // indirect
62-
github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.1 // indirect
62+
github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.1 // indirect
6363
github.com/hailocab/go-hostpool v0.0.0-20160125115350-e80d13ce29ed // indirect
6464
github.com/huandu/xstrings v1.5.0 // indirect
6565
github.com/iancoleman/strcase v0.3.0 // indirect
@@ -84,9 +84,9 @@ require (
8484
github.com/opentracing/opentracing-go v1.2.0 // indirect
8585
github.com/pkg/errors v0.9.1 // indirect
8686
github.com/planetscale/vtprotobuf v0.6.1-0.20240319094008-0393e58bdf10 // indirect
87-
github.com/pmezard/go-difflib v1.0.0 // indirect
87+
github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
8888
github.com/prometheus/client_golang v1.21.0 // indirect
89-
github.com/prometheus/client_model v0.6.1 // indirect
89+
github.com/prometheus/client_model v0.6.2 // indirect
9090
github.com/prometheus/common v0.62.0 // indirect
9191
github.com/prometheus/procfs v0.15.1 // indirect
9292
github.com/rcrowley/go-metrics v0.0.0-20201227073835-cf1acfcdf475 // indirect
@@ -97,7 +97,7 @@ require (
9797
github.com/sirupsen/logrus v1.9.3 // indirect
9898
github.com/sony/gobreaker v1.0.0 // indirect
9999
github.com/spf13/cast v1.7.0 // indirect
100-
github.com/spiffe/go-spiffe/v2 v2.5.0 // indirect
100+
github.com/spiffe/go-spiffe/v2 v2.6.0 // indirect
101101
github.com/stretchr/objx v0.5.2 // indirect
102102
github.com/stretchr/testify v1.11.1 // indirect
103103
github.com/temporalio/ringpop-go v0.0.0-20250130211428-b97329e994f7 // indirect
@@ -106,9 +106,8 @@ require (
106106
github.com/twmb/murmur3 v1.1.8 // indirect
107107
github.com/uber-common/bark v1.3.0 // indirect
108108
github.com/uber-go/tally/v4 v4.1.17 // indirect
109-
github.com/zeebo/errs v1.4.0 // indirect
110109
go.opentelemetry.io/auto/sdk v1.2.1 // indirect
111-
go.opentelemetry.io/contrib/detectors/gcp v1.34.0 // indirect
110+
go.opentelemetry.io/contrib/detectors/gcp v1.39.0 // indirect
112111
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.59.0 // indirect
113112
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.59.0 // indirect
114113
go.opentelemetry.io/otel v1.43.0 // indirect
@@ -120,26 +119,26 @@ require (
120119
go.opentelemetry.io/otel/sdk v1.43.0 // indirect
121120
go.opentelemetry.io/otel/sdk/metric v1.43.0 // indirect
122121
go.opentelemetry.io/otel/trace v1.43.0 // indirect
123-
go.opentelemetry.io/proto/otlp v1.5.0 // indirect
122+
go.opentelemetry.io/proto/otlp v1.7.1 // indirect
124123
go.temporal.io/sdk v1.38.0 // indirect
125124
go.uber.org/atomic v1.11.0 // indirect
126125
go.uber.org/dig v1.19.0 // indirect
127126
go.uber.org/fx v1.24.0 // indirect
128127
go.uber.org/mock v0.6.0 // indirect
129128
go.uber.org/multierr v1.11.0 // indirect
130129
go.uber.org/zap v1.27.0 // indirect
131-
golang.org/x/crypto v0.45.0 // indirect
130+
golang.org/x/crypto v0.46.0 // indirect
132131
golang.org/x/exp v0.0.0-20250620022241-b7579e27df2b // indirect
133-
golang.org/x/net v0.47.0 // indirect
134-
golang.org/x/oauth2 v0.28.0 // indirect
135-
golang.org/x/sync v0.18.0 // indirect
132+
golang.org/x/net v0.48.0 // indirect
133+
golang.org/x/oauth2 v0.34.0 // indirect
134+
golang.org/x/sync v0.19.0 // indirect
136135
golang.org/x/sys v0.42.0 // indirect
137-
golang.org/x/text v0.31.0 // indirect
136+
golang.org/x/text v0.32.0 // indirect
138137
golang.org/x/time v0.10.0 // indirect
139138
google.golang.org/api v0.224.0 // indirect
140139
google.golang.org/genproto v0.0.0-20250303144028-a0af3efb3deb // indirect
141-
google.golang.org/genproto/googleapis/api v0.0.0-20250303144028-a0af3efb3deb // indirect
142-
google.golang.org/genproto/googleapis/rpc v0.0.0-20250303144028-a0af3efb3deb // indirect
140+
google.golang.org/genproto/googleapis/api v0.0.0-20251202230838-ff82c1b0f217 // indirect
141+
google.golang.org/genproto/googleapis/rpc v0.0.0-20251202230838-ff82c1b0f217 // indirect
143142
gopkg.in/inf.v0 v0.9.1 // indirect
144143
gopkg.in/validator.v2 v2.0.1 // indirect
145144
gopkg.in/yaml.v3 v3.0.1 // indirect

0 commit comments

Comments
 (0)