Update dependency io.grpc:grpc-bom to v1.58.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
io.grpc:grpc-bom	1.56.1 -> 1.58.0

---

Release Notes

grpc/grpc-java (io.grpc:grpc-bom)

v1.58.0

API Changes

• xds: Add missing ExperimentalApi to OrcaServiceImpl
• stub: Removed deprecated methods attachHeaders and captureMetadata from MetadataUtils (#​10443)
• api: Stabilized ServerCall.getAuthority() by removing experimental annotation (#​10498)
• api: Stabilized ServerCall#setMessageCompression() and PartialForwardingServerCall#setMessageCompression() (#​10393)
• protobuf: Stabilize ProtoUtils.setExtensionRegistry() and ProtoLiteUtils.setExtensionRegistry() (#​10392)
• testing: Stabilize GrpcCleanupRule, GrpcServerRule (#​10494)
• api: Stabilized ServerBuilder.handshakeTimeout (#​10499)
• api: Removed Context.Storage deprecated method attach(), made doAttach() abstract (#​10379)
• api : Stabilized methodDescriptor getRequestMarshaller, getResponseMarshaller (#​10495)

Behavior Changes

• rls: Have RLS's LRU Cache rely on cleanup process to remove expired entries (#​10400)
• core, inprocess, util: 2 new artifacts grpc-inprocess and grpc-util have been created by moving code from grpc-core to facilitate Java module support (#​10362, #​10390)
• all: Automatic module name support added to all artifacts (#​10413)
• xds: Encode the service authority in XdsNameResolver (#​10207)

Improvements

• api: In Javadoc, link to gRFCs A8/A9 for keepalive and related settings
• okhttp: Enable support for being returned by Grpc.newServerBuilderForPort(). At present, Netty always has higher priority than OkHttp, if they are both available, because ServerBuilder.forPort() is not supported in the OkHttp transport but is supported in the Netty transport
• bazel: Enhance java_grpc_library.bzl to allow toolchain to use annotation processors
• examples: Add pre-serialized-message example (#​10112)
• examples: Android examples to use AGP 7.4.0 (#​10497)

Bug Fixes

• Fix compatibility with Java 8. This fixes the NoSuchMethodError for ByteBuffer methods present in 1.57.0 (#​10441)
• xds: Remove debug assert in WeightedRoundRobinLoadBalancer. The assert was to detect breakages in the static stride algorithm causing too much looping. However, with multithreading it is possible to trigger even in legitimate scenarios (#​10437)
• util: Outlier detection tracer delegation (#​10459)
• Handle header with errors and endStream = true. Was filling logs with NPEs. (#​10384)
• core: Fix a retriablestream bug that may cause deadlock with OkHttp (#​10386)
• stub: Remove ThreadlessExecutor from BlockingServerStream to eliminate the problem where sometimes the iterator’s next() method would get stuck. (#​10496)
• compiler: Fix aarch_64 macs not being able to build the compiler module. (#​10516)
• okhttp: Use padded length for flow control in both client and server transport (#​10422)
• xds: Fix locality logging information in bootstrap (#​10423)

Dependencies

• Upgraded protobuf to 3.24.0
• android: Min SDK level to 21 (#​10505)
• Various dependency upgrades (#​10359):
  androidx.core:core 1.10.0 -> 1.10.1
  com.google.api.grpc:proto-google-common-protos 2.17.0 -> 2.22.0
  com.google.cloud:google-cloud-logging 3.14.5 -> 3.15.5
  com.google.errorprone:error_prone_annotations 2.18.0 -> 2.20.0
  com.squareup.okio:okio 1.17.5 -> 2.10.0

Acknowledgements

Halvard Skogsrud

v1.57.2

Bug Fixes

• util: Outlier detection tracer delegation (#​10459) (#​10483)

v1.57.1

Bug fixes

• Fix compatibility with Java 8. This fixes the NoSuchMethodError for ByteBuffer methods present in 1.57.0 (#​10441)
• xds: Remove debug assert in WeightedRoundRobinLoadBalancer. The assert was to detect breakages in the static stride algorithm causing too much looping. However, with multithreading it is possible to trigger even in legitimate scenarios (#​10437)

v1.57.0

gRPC Java 1.57.0 Release Notes

This release accidentally broke Java 8: NoSuchMethodError for some ByteBuffer methods. The issue is tracked in https://github.com/grpc/grpc-java/issues/10432 and fixed in 1.57.1.

API Changes

• Use fully qualified java.lang.String in all cases in generated code. This fixes compilation if a protobuf message is named “String”.
• Stabilize io.grpc.Status.asRuntimeException(Metadata) and trailersFromThrowable
• Stabilize io.grpc.ManagedChannelBuilder.useTransportSecurity (#​10244)
• Stabilize io.grpc.util.MutableHandlerRegistry (#​10348)

Behavior Changes

• api: CheckedForwardingClientCall now passes trailers from the caught exception
• context, api: Package io.grpc is now consolidated into a single artifact grpc-api by moving classes from grpc-context to grpc-api. grpc-context now has a dependency on grpc-api (but excludes other dependencies of grpc-api) so any application previously using only grpc-context will now also bring in grpc-api. This fixes #​3522 which was the major issue preventing support of Java modules. We are not done fixing support, as some artifacts need to be split and Automatic-Module-Name needs to be added. The next release is likely to be more stable for modules.
• core: Change delay for hedging retry after a non-fatal error to be 0 to match the gRFC (A6).
• core: Wrap other name resolver types in a RetryingNameResolver . Previously, if authority was not overridden, then some name resolvers (such as grpclb) had no retry.
• xds: Handle loops and duplicates in xds Aggregate clusters
• xds: require EDS service name in CDS resources with an xdstp name
• xds: Use Rule order instead of RuleChain
• xds: Environment variable "GRPC_XDS_EXPERIMENTAL_SECURITY_SUPPORT" is no longer respected, so xDS security cannot be disabled any more (#​10243)

New Features

• binder: Add UserHandle and BinderChannelCredentials to support cross-user communication (#​10197)
• xds,orca: LRS named metrics support

Improvements

• core: Resolve isAndroid only once on class loading. This can improve channel creation performance on Android.
• xds: Pick a subchannel with new static stride scheduler in WeightedRoundRobinLoadBalancer

Bug Fixes

• xds: Fix the server sending a GOAWAY when an LDS update with no changes other than ordering is received.
• netty: Fix NPE when a header with errors is received with endStream=true. This was causing logs to be filled with errors when health checkers didn’t specify a content type.
• okhttp: Fix the Socket data race when shutdown/closed during connecting that was causing a significant delay

Dependencies

• Upgraded Netty to 4.1.93-Final
• Update guava dependency to 32.0.1 to address CVE-2023-2976

Acknowledgements

• Benjamin Peterson
• Masakuni Oishi
• Philip K. Warren
• Stephane Landelle

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

build seems to be broken for some reason.

[whiskeysierra]

Build is failing because the io.grpc:grpc-inprocess dependency is set to scope test by default now and only available transitively when using io.grpc:grpc-testing.
The easy fix would be to add an explicit dependency to this artifact in compile scope.

[marcindabrowski]

I'm not sure but also io.grpc:grpc-util was extracted from io.grpc:grpc-core in v1.58.0 and should be also added as implementation dependency.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠ Warning: custom changes will be lost.