Bump google.golang.org/grpc from 1.72.2 to 1.73.0 #1680

Merged

dependabot[bot] merged 1 commit from refs/pull/1680/head into main

2025-06-11 21:59:19 +00:00

dependabot[bot] commented

2025-06-09 03:11:30 +00:00

(Migrated from github.com)

Owner

Imported from GitHub pull request.

Original GitHub pull request: #885
Original author: @dependabot[bot]
Original URL: https://github.com/carverauto/serviceradar/pull/885
Original created: 2025-06-09T03:11:30Z
Original updated: 2025-06-11T21:59:27Z
Original head: carverauto/serviceradar:dependabot/go_modules/google.golang.org/grpc-1.73.0
Original base: main
Original merged: 2025-06-11T21:59:19Z by @mfreeman451

Bumps google.golang.org/grpc from 1.72.2 to 1.73.0.

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.73.0

New Features

balancer/ringhash: move LB policy from xds/internal to exported path to facilitate use without xds (#8249)

xds: enable least request LB policy by default. It can be disabled by setting GRPC_EXPERIMENTAL_ENABLE_LEAST_REQUEST=false in your environment. (#8253)

grpc: add a CallAuthority Call Option that can be used to overwrite the http :authority header on per-RPC basis. (#8068)

stats/opentelemetry: add trace event for name resolution delay. (#8074)

health: added List method to gRPC Health service. (#8155)

Special Thanks: @marcoshuck

ringhash: implement features from gRFC A76. (#8159)

xds: add functionality to support SPIFFE Bundle Maps as roots of trust in XDS which can be enabled by setting GRPC_EXPERIMENTAL_XDS_MTLS_SPIFFE=true. (#8167, #8180, #8229, #8343)

Bug Fixes

xds: locality ID metric label is changed to make it consistent with gRFC A78. (#8256)

client: fail RPCs on the client when using extremely short contexts that expire before the grpc-timeout header is created. (#8312)

server: non-positive grpc-timeout header values are now rejected. This is consistent with the gRPC protocol spec. (#8290)

Special Thanks: @evanj

xds: fix reported error string when LRS load reporting interval is invalid. (#8224)

Special Thanks: @alingse

Performance Improvements

credentials/alts: improve read performance by optimizing buffer copies and allocations. (#8271)

server: improve performance of RPC handling by avoid a status proto copy (#8282)

Special Thanks: @evanj

Documentation

examples/features/opentelemetry: modify example to demonstrate tracing using OpenTelemtry plugin. (#8056)

Commits

c52d025 Change version to 1.73.0 (#8322)
ac60db1 Add flag guarding SPIFFE Bundle provider (#8343) (#8382)
183c148 balancer/ringhash: Add experimental notice in package comment (#8364) (#8365)
b610465 delegatingresolver: avoid proxy for resolved addresses in NO_PROXY env (#8329...
96c4308 balancer/least_request : Fix panic while handling resolver errors (#8333) (#8...
af5146b grpc: update contributing.md (#8318)
09166b6 cleanup: remove unused constants in generic xdsclient (#8315)
e3f13e7 transport: Prevent sending negative timeouts (#8312)
b89909b leakcheck: Fix flaky test TestCheck (#8309)
709023d grpcsync/event: Simplify synchronization (#8308)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Imported from GitHub pull request. Original GitHub pull request: #885 Original author: @dependabot[bot] Original URL: https://github.com/carverauto/serviceradar/pull/885 Original created: 2025-06-09T03:11:30Z Original updated: 2025-06-11T21:59:27Z Original head: carverauto/serviceradar:dependabot/go_modules/google.golang.org/grpc-1.73.0 Original base: main Original merged: 2025-06-11T21:59:19Z by @mfreeman451 --- Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.72.2 to 1.73.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/grpc/grpc-go/releases">google.golang.org/grpc's releases</a>.</em></p> <blockquote> <h2>Release 1.73.0</h2> <h1>New Features</h1> <ul> <li>balancer/ringhash: move LB policy from xds/internal to exported path to facilitate use without xds (<a href="https://redirect.github.com/grpc/grpc-go/issues/8249">#8249</a>)</li> <li>xds: enable least request LB policy by default. It can be disabled by setting <code>GRPC_EXPERIMENTAL_ENABLE_LEAST_REQUEST=false</code> in your environment. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8253">#8253</a>)</li> <li>grpc: add a <code>CallAuthority</code> Call Option that can be used to overwrite the http <code>:authority</code> header on per-RPC basis. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8068">#8068</a>)</li> <li>stats/opentelemetry: add trace event for name resolution delay. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8074">#8074</a>)</li> <li>health: added <code>List</code> method to gRPC Health service. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8155">#8155</a>) <ul> <li>Special Thanks: <a href="https://github.com/marcoshuck"><code>@marcoshuck</code></a></li> </ul> </li> <li>ringhash: implement features from gRFC A76. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8159">#8159</a>)</li> <li>xds: add functionality to support SPIFFE Bundle Maps as roots of trust in XDS which can be enabled by setting <code>GRPC_EXPERIMENTAL_XDS_MTLS_SPIFFE=true</code>. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8167">#8167</a>, <a href="https://redirect.github.com/grpc/grpc-go/issues/8180">#8180</a>, <a href="https://redirect.github.com/grpc/grpc-go/issues/8229">#8229</a>, <a href="https://redirect.github.com/grpc/grpc-go/issues/8343">#8343</a>)</li> </ul> <h1>Bug Fixes</h1> <ul> <li>xds: locality ID metric label is changed to make it consistent with <a href="https://github.com/grpc/proposal/blob/master/A78-grpc-metrics-wrr-pf-xds.md#optional-xds-locality-label">gRFC A78</a>. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8256">#8256</a>)</li> <li>client: fail RPCs on the client when using extremely short contexts that expire before the <code>grpc-timeout</code> header is created. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8312">#8312</a>)</li> <li>server: non-positive <code>grpc-timeout</code> header values are now rejected. This is consistent with the <a href="https://github.com/grpc/grpc/blob/master/doc/PROTOCOL-HTTP2.md#requests">gRPC protocol spec</a>. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8290">#8290</a>) <ul> <li>Special Thanks: <a href="https://github.com/evanj"><code>@evanj</code></a></li> </ul> </li> <li>xds: fix reported error string when LRS load reporting interval is invalid. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8224">#8224</a>) <ul> <li>Special Thanks: <a href="https://github.com/alingse"><code>@alingse</code></a></li> </ul> </li> </ul> <h1>Performance Improvements</h1> <ul> <li>credentials/alts: improve read performance by optimizing buffer copies and allocations. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8271">#8271</a>)</li> <li>server: improve performance of RPC handling by avoid a status proto copy (<a href="https://redirect.github.com/grpc/grpc-go/issues/8282">#8282</a>) <ul> <li>Special Thanks: <a href="https://github.com/evanj"><code>@evanj</code></a></li> </ul> </li> </ul> <h1>Documentation</h1> <ul> <li>examples/features/opentelemetry: modify example to demonstrate tracing using OpenTelemtry plugin. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8056">#8056</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/grpc/grpc-go/commit/c52d02553f2649c28d0279bca17909a3a08de022"><code>c52d025</code></a> Change version to 1.73.0 (<a href="https://redirect.github.com/grpc/grpc-go/issues/8322">#8322</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/ac60db1864c340dee6e5718fad7dee439775766e"><code>ac60db1</code></a> Add flag guarding SPIFFE Bundle provider (<a href="https://redirect.github.com/grpc/grpc-go/issues/8343">#8343</a>) (<a href="https://redirect.github.com/grpc/grpc-go/issues/8382">#8382</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/183c148c4e63b5770c8b9bdfc7d38fc0811e2742"><code>183c148</code></a> balancer/ringhash: Add experimental notice in package comment (<a href="https://redirect.github.com/grpc/grpc-go/issues/8364">#8364</a>) (<a href="https://redirect.github.com/grpc/grpc-go/issues/8365">#8365</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/b610465ce4bd1af616bad0389185276fb8d19bb8"><code>b610465</code></a> delegatingresolver: avoid proxy for resolved addresses in NO_PROXY env (<a href="https://redirect.github.com/grpc/grpc-go/issues/8329">#8329</a>...</li> <li><a href="https://github.com/grpc/grpc-go/commit/96c4308a9958ccd2bcaffffd53d8fa6c380058b7"><code>96c4308</code></a> balancer/least_request : Fix panic while handling resolver errors (<a href="https://redirect.github.com/grpc/grpc-go/issues/8333">#8333</a>) (<a href="https://redirect.github.com/grpc/grpc-go/issues/8">#8</a>...</li> <li><a href="https://github.com/grpc/grpc-go/commit/af5146b69698317950518c934e9eb14341df6858"><code>af5146b</code></a> grpc: update contributing.md (<a href="https://redirect.github.com/grpc/grpc-go/issues/8318">#8318</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/09166b665e8b6442bc70e88cdef580da9e7b7b06"><code>09166b6</code></a> cleanup: remove unused constants in generic xdsclient (<a href="https://redirect.github.com/grpc/grpc-go/issues/8315">#8315</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/e3f13e75a60a13287fc537cb7974680f1eb99dc7"><code>e3f13e7</code></a> transport: Prevent sending negative timeouts (<a href="https://redirect.github.com/grpc/grpc-go/issues/8312">#8312</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/b89909b7bd0d9bd333aab291e90fec1fa8d45ce9"><code>b89909b</code></a> leakcheck: Fix flaky test TestCheck (<a href="https://redirect.github.com/grpc/grpc-go/issues/8309">#8309</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/709023de87a25ae63b000139295af10589edffee"><code>709023d</code></a> grpcsync/event: Simplify synchronization (<a href="https://redirect.github.com/grpc/grpc-go/issues/8308">#8308</a>)</li> <li>Additional commits viewable in <a href="https://github.com/grpc/grpc-go/compare/v1.72.2...v1.73.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=google.golang.org/grpc&package-manager=go_modules&previous-version=1.72.2&new-version=1.73.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>