fix(deps): update minor dependencies (master)

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/docker/go-units	v0.3.3 -> v0.5.0
golang.org/x/net	v0.20.0 -> v0.21.0
golang.org/x/sys	v0.16.0 -> v0.17.0
google.golang.org/grpc	v1.60.1 -> v1.62.0
grpcio (source)	==1.58.0 -> ==1.62.0
protobuf	==4.24.3 -> ==4.25.3

---

Release Notes

docker/go-units (github.com/docker/go-units)

v0.5.0

Compare Source

v0.4.0

Compare Source

grpc/grpc-go (google.golang.org/grpc)

v1.62.0: Release 1.62.0

Compare Source

New Features

• grpc: Add StaticMethod CallOption as a signal to stats handler that a method is safe to use as an instrument key (#​6986)

Behavior Changes

• grpc: Return canonical target string from ClientConn.Target() and resolver.Address.String() (#​6923)

Bug Fixes

• server: wait to close connection until incoming socket is drained (with timeout) to prevent data loss on client-side (#​6977)
  • Special Thanks: @​s-matyukevich for discovering the root cause

Performance Improvements

• *: Allow building without x/net/trace by using grpcnotrace to enable dead code elimination (#​6954)
  • Special Thanks: @​hugelgupf
• rand: improve performance and simplify implementation of grpcrand by adopting math/rand's top-level functions for go version 1.21.0 and newer. (#​6925)
  • Special Thanks: @​kmirzavaziri

Dependencies

• *: Use google.golang.org/protobuf/proto instead of github.com/golang/protobuf. (#​6919)
  • Special Thanks: @​Clement-Jean

[!NOTE]
The above change in proto library usage introduces a minor behavior change within those libraries. The old github.com/golang/protobuf library would error if given a nil message to Marshal, while the new google.golang.org/protobuf library will successfully output zero bytes in this case. This means server method handlers that did return nil, nil will now return an empty message and no error, while it used to return an error. This also affects the client side, where clients sending nil messages used to fail without sending the RPC, and now they will send an empty message.

v1.61.1: Release 1.61.1

Compare Source

Bug Fixes

• server: wait to close connection until incoming socket is drained (with timeout) to prevent data loss on client-side (#​6977)
  • Special Thanks: @​s-matyukevich for discovering the root cause

v1.61.0: Release 1.61.0

Compare Source

New Features

• resolver: provide method, AuthorityOverrider, to allow resolver.Builders to override the default authority for a ClientConn. (EXPERIMENTAL) (#​6752)
  • Special Thanks: @​Aditya-Sood
• xds: add support for mTLS Credentials in xDS bootstrap (gRFC A65) (#​6757)
  • Special Thanks: @​atollena
• server: add grpc.WaitForHandlers ServerOption to cause Server.Stop to block until method handlers return. (EXPERIMENTAL) (#​6922)

Performance Improvements

• grpc: skip compression of empty messages as an optimization (#​6842)
  • Special Thanks: @​jroper
• orca: use atomic pointer to improve performance in server metrics recorder (#​6799)
  • Special Thanks: @​danielzhaotongliu

Bug Fixes

• client: correctly enable TCP keepalives with OS defaults on windows (#​6863)
  • Special Thanks: @​mmatczuk
• server: change some stream operations to return UNAVAILABLE instead of UNKNOWN when underlying connection is broken (#​6891)
  • Special Thanks: @​mustafasen81
• server: fix GracefulStop to block until all method handlers return (v1.60 regression). (#​6922)
• server: fix two bugs that could lead to panics at shutdown when using NumStreamWorkers (EXPERIMENTAL). (#​6856)
• reflection: do not send invalid descriptors to clients for files that cannot be fully resolved (#​6771)
  • Special Thanks: @​jhump
• xds: don't fail channel/server startup when xds creds is specified, but bootstrap is missing certificate providers (#​6848)
• xds: Atomically read and write xDS security configuration client side (#​6796)
• xds/server: fix RDS handling for non-inline route configs (#​6915)

grpc/grpc (grpcio)

v1.62.0

Compare Source

This is release 1.62.0 (guardian) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

• [metadata] Allow non application/grpc content-type values. (#​35824)
• [BoringSSL] Update third_party/boringssl-with-bazel. (#​35768)
• [GPR] Removed GPR_BACKWARDS_COMPATIBILITY_MODE. (#​35602)

Python

• [Build] Strip armv7 artifacts. (#​35832)
• [Python AIO] Handle DeprecationWarnings when get current loop. (#​35583)
• [Python AIO] Raise resource_exhausted error in case of concurrent RPC limit exceeded. (#​35376)
• [Python O11y] Build and distrib O11y package. (#​35578)
• [Python setuptools] Import error from distutils for lower version of setuptools. (#​35561)
• [ruby] Fix use-after-free for post-fork channel recreation. (#​35488)

Ruby

• [ruby] Build/test ruby 3.3 and build native gems with Ruby 3.3 support. (#​35399)

v1.60.1

Compare Source

This is release gRPC Core 1.60.1 (gjallarhorn).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

Python

• [Python Misc] Revert change to print backtrace in server. (#​35462)

v1.60.0

Compare Source

This is release 1.60.0 (gjallarhorn) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

• Implemented dualstack IPv4 and IPv6 backend support, as per draft gRFC A61. xDS support currently guarded by GRPC_EXPERIMENTAL_XDS_DUALSTACK_ENDPOINTS env var.
• Dropped Bazel 5 support. (#​34813)
• [deps] Upgrade protobuf version to v25.0. (#​34513)
• [Security - Revocation] Crl Directory Watcher Implementation. (#​34749)
• [server] Cap size of pending request queue with RealRequestMatcher. (#​34782)
• [chttp2] Fix outgoing data stats. (#​34693)
• [EventEngine] Enable Posix EventEngine Listener on all builds. (#​34748)
• [EventEngine] Enable Windows EventEngine Listener on all builds. (#​34436)
• [chttp2] Alternative protection for too many streams in the system. (#​34697)
• [Proxy] Support for setting proxy for addresses. (#​34617)
• [client idleness] client channels go idle after 30 minutes by default. (#​34653)
• [chttp2] Add an experiment to separate liveness checks from ping timeouts. (#​34647)
• [chttp2] Tarpit invalid requests. (#​34641)
• [chttp2] Enforce settings acks. (#​34640)
• [chttp2] Limit work per read cycle. (#​34639)
• [chttp2] Limit request count before receiving settings ack. (#​34638)
• [chttp2] Randomly ping on RST_STREAM. (#​34637)

C++

• [xds] C++ XdsServerBuilder Remove src/... header dependency from public header. (#​34790)
• [reflection] Add v1 reflection. (#​34535)

C#

• [csharp] Grpc.Tools documentation for sharing proto files between projects and nuget packages. (#​34521)

Ruby

• [ruby] create debug symbol packages. (#​34632)

v1.59.3

Compare Source

This is release gRPC Core 1.59.3 (generative).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

Core

• [Security - Revocation] Crl backport to 1.59. (#​34926)

v1.59.2

Compare Source

This is release 1.59.2 (generative) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

• [chttp2] Rollup of fixes for CVE-2023-44487. (#​34763)

v1.59.0

Compare Source

This is release 1.59.0 (generative) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

• [Release] Bump core version 2023092. (#​34476)
• [xds ssa] Remove environment variable protection for stateful affinity. (#​34435)
• [windows DNS] Simplify c-ares Windows code. (#​33965)
• [c-ares] fix spin loop bug when c-ares gives up on a socket that still has data left in its read buffer. (#​34185)
• [Deps] Adding upb as a submodule. (#​34199)
• [EventEngine] Update Cancel contract on closure deletion timeline. (#​34167)

C#

• [csharp codegen] Handle empty base_namespace option value to fix #​34113. (#​34137)

Python

• [Python 3.12] Support Python 3.12. (#​34398)
• [Python 3.12] Deprecate distutil. (#​34186)

Ruby

• [ruby] Fix linking errors on x86-darwin. (#​34134)
• [Ruby] replace strdup with gpr_strdup. (#​34177)
• [ruby] drop ruby 2.6 support. (#​34198)

---

Configuration

📅 Schedule: Branch creation - "after 6pm and before 11pm every weekday,after 10am on saturday,on sunday" in timezone Asia/Taipei, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.