Skip to content

MINOR: Bump io.grpc:grpc-bom from 1.82.1 to 1.83.1 - #1224

Merged
lidavidm merged 1 commit into
mainfrom
dependabot/maven/io.grpc-grpc-bom-1.82.2
Aug 25, 2026
Merged

MINOR: Bump io.grpc:grpc-bom from 1.82.1 to 1.83.1#1224
lidavidm merged 1 commit into
mainfrom
dependabot/maven/io.grpc-grpc-bom-1.82.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 13, 2026

Copy link
Copy Markdown
Contributor

Bumps io.grpc:grpc-bom from 1.82.1 to 1.83.1.

Release notes

Sourced from io.grpc:grpc-bom's releases.

v1.83.1

gRPC Java 1.83.1 Release Notes

Improvements

  • netty: Fix client-initiated stream limit bypass in NettyServerHandler (#12942). Enforces the limit proactively at startup without waiting for SETTINGS_ACK
  • core: Coalesce Contiguous Small Buffers for ReadableBuffer (#12944)

v1.83.0

gRPC Java 1.83.0 Release Notes

API Changes

  • api: Turn on RFC 3986 parsing by default and update javadoc. (4456721328)
  • api: Add Grpc.newChannelBuilder accepting NameResolverRegistry (#11901) (2b86f8f42f). This allows users to explicitly provide a NameResolverRegistry during channel creation rather than relying on the global registry, offering better isolation and control over name resolution per-channel.

Behavior Changes

  • okhttp: enable TLS 1.3 for servers on Android (3018ce341c). v1.82.0 enabled TLS 1.3 for clients; this does the same for servers
  • xds: enable orca to lrs propagation by default (#12836) (1e85674a40) Enables xDS configuration to control which fields get propagated from ORCA backend metric reports to LRS load reports as per gRFC A85
  • xds: Use leaf cluster name for backend service label in metrics, instead of aggregate cluster name (#12882) (c8079eed98). This only has an effect when using aggregate clusters
  • xds: Hold parsed service config in CdsUpdate (3db3235ebd). Previously, modifications to LoadBalancerRegistry could cause failures in the LB tree
  • xds: Revert "xds: reuse connections to the control plane across channels" added in 1.81.0 (d49c0b15d8). If using xds heavily with many targets, then MAX_CONCURRENT_STREAMS to the control plane could be exceeded. This then prevents loading resources for new targets, which causes those channels to hang on name resolution. RPCs would see the nondescript "DEADLINE_EXCEEDED: Deadline Context was exceeded after Xs" or "DEADLINE_EXCEEDED: Deadline CallOptions was exceeded after Xs"

Improvements

  • api: Move attributes to the end of ResolvedAddresses.toString(), for better legibility (103bd4b852)
  • core: normalize service config number values (#12826) (663c505dbd) This updates default service config validation to accept numeric values represented as Number, not only Double. Common JSON parsers may deserialize integer-looking JSON values such as maxAttempts: 4 and backoffMultiplier: 2 as Integer, which previously caused defaultServiceConfig() to fail with IllegalArgumentException. The values are normalized to Double when copied into the validated service config, preserving the existing internal representation expected by the service config parsing code.
  • core: DEADLINE_EXCEEDED before initial name resolution completes will now mention “name_resolver” in the error description (56d2b25eb5). Previously there was not a hint as to what gRPC was delayed on when the deadline was exceeded.
  • netty: Reduce TcpMetrics log from INFO to FINE (4ec83df1eb). This removes unnecessary log noise
  • core: Enable child channel plugins (#12578) (89aef90d52). This introduces the ChildChannelConfigurer API to allow intercepting and customizing the configuration (such as injecting interceptors or modifying credentials) of child channels created dynamically by load balancers.

Dependencies

  • Upgrade to Netty 4.2.15 (66c6ab1da6). If you need Netty 4.1 support, please file an issue
  • Upgrade codegen plugin to C++ Protobuf 35.1 (#12876) (c886f0a06b)
  • Upgrade various dependencies (064272c61d):
    • gson to 2.14.0
    • guava to 33.6.0
    • cel-java to 0.13.0
    • protobuf-java to 3.25.9
    • error-prone-annotations to 2.50.0
    • opentelemetry to 1.63.0

Documentation

  • Document how to build with Bazel and introduce bazel support for building android and binder (#12811) (f94574eff7)

Thanks to

... (truncated)

Commits
  • 8f621c0 Bump version to 1.83.1
  • 2bafe5e Update README etc to reference 1.83.1
  • e1f2dbd netty: Fix client-initiated stream limit bypass in NettyServerHandler (v1.83....
  • ee8232f core: Coalesce Contiguous Small Buffers for ReadableBuffer (v1.83.x backport)...
  • b4ca099 Fix docker tagging failure in upload_artifacts by using stable tag name (#12922)
  • b4fb7f4 build: Allow downloading pkgconfiglite with empty checksum
  • 1fbfa86 Bump version to 1.83.1-SNAPSHOT
  • 8ab6e0a Bump version to 1.83.0
  • 33ad6a4 Update README etc to reference 1.83.0
  • 17d5bd6 Revert "enable child channel plugins (#12578)" (v1.83.x backport) (#12913)
  • Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Jul 13, 2026
@dependabot dependabot Bot added the java Pull requests that update Java code label Jul 13, 2026
@dependabot
dependabot Bot requested a review from jbonofre as a code owner July 13, 2026 06:45
@lidavidm

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot dependabot Bot changed the title MINOR: Bump io.grpc:grpc-bom from 1.82.1 to 1.82.2 MINOR: Bump io.grpc:grpc-bom from 1.82.1 to 1.83.1 Aug 25, 2026
@dependabot
dependabot Bot force-pushed the dependabot/maven/io.grpc-grpc-bom-1.82.2 branch from c5a0c68 to e980342 Compare August 25, 2026 00:50
@lidavidm

Copy link
Copy Markdown
Member

@dependabot rebase

@github-actions github-actions Bot added this to the 20.0.0 milestone Aug 25, 2026
Bumps [io.grpc:grpc-bom](https://github.com/grpc/grpc-java) from 1.82.1 to 1.83.1.
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.82.1...v1.83.1)

---
updated-dependencies:
- dependency-name: io.grpc:grpc-bom
  dependency-version: 1.82.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/maven/io.grpc-grpc-bom-1.82.2 branch from e980342 to a3c2a67 Compare August 25, 2026 02:02
@lidavidm
lidavidm merged commit fe7d3eb into main Aug 25, 2026
25 checks passed
@lidavidm
lidavidm deleted the dependabot/maven/io.grpc-grpc-bom-1.82.2 branch August 25, 2026 03:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant