Update io.grpc:grpc-* to v1.61.1

[solrbot]

This PR contains the following updates:

Package	Type	Update	Change	Pending
io.grpc:grpc-xds	dependencies	minor	1.59.0 -> 1.61.1	1.62.2
io.grpc:grpc-util	dependencies	minor	1.59.0 -> 1.61.1	1.62.2
io.grpc:grpc-stub	dependencies	minor	1.59.0 -> 1.61.1	1.62.2
io.grpc:grpc-services	dependencies	minor	1.59.0 -> 1.61.1	1.62.2
io.grpc:grpc-rls	dependencies	minor	1.59.0 -> 1.61.1	1.62.2
io.grpc:grpc-protobuf-lite	dependencies	minor	1.59.0 -> 1.61.1	1.62.2
io.grpc:grpc-protobuf	dependencies	minor	1.59.0 -> 1.61.1	1.62.2
io.grpc:grpc-netty-shaded	dependencies	minor	1.59.0 -> 1.61.1	1.62.2
io.grpc:grpc-netty	dependencies	minor	1.59.0 -> 1.61.1	1.62.2
io.grpc:grpc-grpclb	dependencies	minor	1.59.0 -> 1.61.1	1.62.2
io.grpc:grpc-googleapis	dependencies	minor	1.59.0 -> 1.61.1	1.62.2
io.grpc:grpc-core	dependencies	minor	1.59.0 -> 1.61.1	1.62.2
io.grpc:grpc-context	dependencies	minor	1.59.0 -> 1.61.1	1.62.2
io.grpc:grpc-auth	dependencies	minor	1.59.0 -> 1.61.1	1.62.2
io.grpc:grpc-api	dependencies	minor	1.59.0 -> 1.61.1	1.62.2
io.grpc:grpc-alts	dependencies	minor	1.59.0 -> 1.61.1	1.62.2

---

Release Notes

grpc/grpc-java (io.grpc:grpc-xds)

v1.61.1

Bug Fixes

xds: Fix a bug in WeightedRoundRobinLoadBalancer policy that could raise NullPointerException and further cause channel panic when picking a subchannel. This bug can only be triggered when connection can not be established and the channel reports TRANSIENT_FAILURE state. (#​10868)

v1.61.0

API Changes

• Remove unused experimental API ManagedChannelBuilder.enableFullStreamDecompression (#​10744)
• api: Deprecate LoadBalancer.EMPTY_PICKER added in 1.58.0 in favor of FixedResultPicker (860b5cb)

New Features

• binder: Experimental support for asynchronous security policies (#​10566)

Improvements

• core: reduce CompositeReadableBuffer allocation (#​3279)
• core: Improve error message clarity when a channel leak is detected (201893f)
• util: use shared index across round_robin pickers (dca89b2). This makes its implementation more similar to weighted_round_robin.
• xds: Implement ADS stream flow control mechanism (#​10674). This limits the maximum memory consumed if the control plane sends updates more rapidly than they can be processed.

Bug Fixes

• core: Check outbound maximum message size for the compressed size in addition to the already-checked uncompressed size (#​10739). Fixed the status code to be RESOURCE_EXHAUSTED instead of UNKNOWN.
• util: Fix NPE when multiple addresses are in an address group for petiole load balancer policies (#​10769)
• util: Disable publishing of fixtures (8ac43dd). The Gradle test fixtures are for use by grpc-java's internal tests.
• okhttp: Ignore known conscrypt socket close issue (#​10812). This stops an exception from being thrown when a known Conscrypt synchronization issue happens.

Dependencies

• Drop support for Bazel 5 (55a9c01). Bazel 7 is available, and Protobuf has already dropped support for Bazel 5.
• Change many compile deps to runtime deps (d6830d7). This reduces the transitive classes "leaked" into the compile classpath. In particular, grpc-core (io.grpc.internal) will be less frequently included transitively at compile time.
• Upgrade dependencies (c985797)
  • Protobuf to 3.25.1
  • auto-value-annotations to 1.10.4
  • error_prone_annotations to 2.23.0
  • proto-google-common-protos to 2.29.0
  • google-cloud-logging to 3.15.14
  • guava to 32.1.3-android
  • okio to 3.4.0

Acknowledgements

• @​Gordiychuk
• @​jroper
• @​jyane
• @​ulfjack

v1.60.2

Bug Fixes

xds: Fix a bug in WeightedRoundRobinLoadBalancer policy that could raise NullPointerException and further cause channel panic when picking a subchannel. This bug can only be triggered when connection can not be established and the channel reports TRANSIENT_FAILURE state. (#​10868)

v1.60.1

Bug Fixes

• util: Fix NPE when multiple addresses in an address group for petiole load balancer policies (#​10770)

v1.60.0

API Changes

• api: Stabilize ForwardingServerBuilder, ForwardingChannelBuilder2, and ForwardingChannelBuilder. Note that ForwardingChannelBuilder is stabilized (no changes will be made to it), but immediately deprecated in favor of ForwardingChannelBuilder2. (#​10586)
• api: Deprecate ForwardingChannelBuilder.delegate(). De facto this deprecates the class itself, since all classes extending ForwardingChannelBuilder implement the delegate() method. See javadoc for details (#​10587)
• api: Changed recently-introduced LoadBalancer.acceptResolvedAddresses() to return Status instead of boolean (#​10636). This is part of continued work to align the LB API cross-language and API stabilization
• stub: Deprecate StreamObservers (#​10654)
• alts: AltsChannelBuilder now extends ForwardingChannelBuilder2 (#​10587)
• protobuf: Stabilize ProtoUtils.metadataMarshaller() (#​10628)
• protobuf-lite: ProtoLiteUtils experimental comment (#​10627)

Behavior Changes

• core: ManagedChannels now check the address types provided by the nameResolver (for the given target) with the address types supported by the channel transport and generate an error in case of mismatch. That dramatically improves the error message when an issue occurs
• core: When a server stream is closed due to user's code (an uncaught exception in halfClosed, messagesAvailable, onReady callback of a ServerStream's listener), the Status.UNKNOWN returned to the client will have Application error processing RPC description. Previously the description was empty. This is helpful to differentiate between server errors originated in user application, gRPC library, or even those injected by a proxy. (#​10643)
• xds: Log ORCA UNIMPLEMENTED error to subchannel logger. This removes them from the normal application logs, reducing log spam

Improvements

• Change the underlying implementations of RingHash, RoundRobin, WeightedRoundRobin and LeastRequest load balancers to utilize the pick first load balancer rather than directly manage subchannels. This should only be noticeable if it introduced a bug
• core: Avoid flushing headers when the server returns a single response (#​9314). This is a performance optimization to reduce the number of packets for non-streaming responses
• util: Make grpc-core an implementation dependency. This will prevent the io.grpc.internal classes in grpc-core from being visible during compilation when depending on just grpc-util
• netty: Implement Http2Headers.isEmpty(). This fixes compatibility with Netty 4.1.101.Final.
• netty: Add NettyServerBuilder.maxRstFramesPerWindow(). This can be used to limit impact of Rapid Reset
• netty: Disable huffman coding in headers (#​10563). Huffman coding provides modest compression for relatively high CPU usage, especially within a data center. Rely just on the HPACK static and dynamic tables for compression, for higher performance. This only impacts header values 512 bytes or longer, as Netty already disabled Huffman for smaller values
• alts: Improve handshake failure error message by propagating original exception (#​10644)

Bug Fixes

• util: Remove shutdown subchannels from OD tracking (#​10683). This could have caused a memory leak on a long-lived channel. But we don’t think it could be triggered with our built-in load balancing policies.

Dependencies

• Bump Netty to 4.1.100.Final

Acknowledgements

@​anthonyjpratti
@​fedorka
@​jpd236
@​mateusazis
@​pkoenig10
@​yannickepstein
@​amirhadadi

v1.59.1

• netty: Implement Http2Headers.isEmpty(). This fixes compatibility with Netty 4.1.101.Final.
• netty: Add NettyServerBuilder.maxRstFramesPerWindow(). This can be used to limit impact of Rapid Reset
• xds: Log ORCA UNIMPLEMENTED error to subchannel logger. This removes them from the normal application logs, reducing log spam

---

Configuration

📅 Schedule: Branch creation - "* * * * *" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot