[PR #1423] [MERGED] build(deps): bump google.golang.org/grpc from 1.59.0 to 1.60.0 #1477

New issue

Closed

opened 2026-03-03 12:34:46 +03:00 by kerem · 0 comments

kerem commented

2026-03-03 12:34:46 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/fsouza/fake-gcs-server/pull/1423
Author: @dependabot[bot]
Created: 12/12/2023
Status: ✅ Merged
Merged: 12/12/2023
Merged by: @fsouza

Base: main ← Head: dependabot/go_modules/google.golang.org/grpc-1.60.0

📝 Commits (1)

6703384 build(deps): bump google.golang.org/grpc from 1.59.0 to 1.60.0

📊 Changes

2 files changed (+25 additions, -9 deletions)

View changed files

📝 go.mod (+2 -2)
📝 go.sum (+23 -7)

📄 Description

Bumps google.golang.org/grpc from 1.59.0 to 1.60.0.

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.60.0

Security

credentials/tls: if not set, set TLS MinVersion to 1.2 and CipherSuites according to supported suites not forbidden by RFC7540.

This is a behavior change to bring us into better alignment with RFC 7540.

API Changes

resolver: remove deprecated and experimental ClientConn.NewServiceConfig (#6784)

client: remove deprecated grpc.WithServiceConfig DialOption (#6800)

Bug Fixes

client: fix race that could cause a deadlock while entering idle mode and receiving a name resolver update (#6804)

client: always enable TCP keepalives with OS defaults (#6834)

credentials/alts: fix a bug preventing ALTS from connecting to the metadata server if the default scheme is overridden (#6686)

Special Thanks: @mjamaloney

Behavior Changes

server: Do not return from Stop() or GracefulStop() until all resources are released (#6489)

Special Thanks: @fho

Documentation

codes: clarify that only codes defined by this package are valid and that users should not cast other values to codes.Code (#6701)

Commits

297d8dd Cherry-pick #6841 to v1.60.x release branch (#6847)
3580447 Change version to 1.60.0 (#6792)
71e67a9 Cherry-pick #6834 to v1.60.x release branch (#6839)
cb6581d Cherry-pick #6804 and dependencies to v1.60.x release branch (#6838)
dd39cdb credentials: if not set, restrict to TLS v1.2+ and CipherSuites per RFC7540 (...
8645f95 resolver: remove ClientConn.NewServiceConfig (#6784)
8b17a4d vet: various cleanups (#6780)
591c481 internal/transport: Add LocalAddr to http2Client.getPeer() (#6779)
eb46b7d github: set top-level read-only workflow permissions (#6775)
be1d1c1 security/advancedtls: FileWatcher CRL provider initialization enhancement (#6...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/fsouza/fake-gcs-server/pull/1423 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 12/12/2023 **Status:** ✅ Merged **Merged:** 12/12/2023 **Merged by:** [@fsouza](https://github.com/fsouza) **Base:** `main` ← **Head:** `dependabot/go_modules/google.golang.org/grpc-1.60.0` --- ### 📝 Commits (1) - [`6703384`](https://github.com/fsouza/fake-gcs-server/commit/6703384f72ad52bd1c735fb7eb6fa9a954a0e877) build(deps): bump google.golang.org/grpc from 1.59.0 to 1.60.0 ### 📊 Changes **2 files changed** (+25 additions, -9 deletions) <details> <summary>View changed files</summary> 📝 `go.mod` (+2 -2) 📝 `go.sum` (+23 -7) </details> ### 📄 Description Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.59.0 to 1.60.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/grpc/grpc-go/releases">google.golang.org/grpc's releases</a>.</em></p> <blockquote> <h2>Release 1.60.0</h2> <h1>Security</h1> <ul> <li>credentials/tls: if not set, set TLS MinVersion to 1.2 and CipherSuites according to supported suites not forbidden by RFC7540. <ul> <li>This is a behavior change to bring us into better alignment with RFC 7540.</li> </ul> </li> </ul> <h1>API Changes</h1> <ul> <li>resolver: remove deprecated and experimental <code>ClientConn.NewServiceConfig</code> (<a href="https://redirect.github.com/grpc/grpc-go/issues/6784">#6784</a>)</li> <li>client: remove deprecated <code>grpc.WithServiceConfig</code> <code>DialOption</code> (<a href="https://redirect.github.com/grpc/grpc-go/issues/6800">#6800</a>)</li> </ul> <h1>Bug Fixes</h1> <ul> <li>client: fix race that could cause a deadlock while entering idle mode and receiving a name resolver update (<a href="https://redirect.github.com/grpc/grpc-go/issues/6804">#6804</a>)</li> <li>client: always enable TCP keepalives with OS defaults (<a href="https://redirect.github.com/grpc/grpc-go/issues/6834">#6834</a>)</li> <li>credentials/alts: fix a bug preventing ALTS from connecting to the metadata server if the default scheme is overridden (<a href="https://redirect.github.com/grpc/grpc-go/issues/6686">#6686</a>) <ul> <li>Special Thanks: <a href="https://github.com/mjamaloney"><code>@mjamaloney</code></a></li> </ul> </li> </ul> <h1>Behavior Changes</h1> <ul> <li>server: Do not return from Stop() or GracefulStop() until all resources are released (<a href="https://redirect.github.com/grpc/grpc-go/issues/6489">#6489</a>) <ul> <li>Special Thanks: <a href="https://github.com/fho"><code>@fho</code></a></li> </ul> </li> </ul> <h1>Documentation</h1> <ul> <li>codes: clarify that only codes defined by this package are valid and that users should not cast other values to <code>codes.Code</code> (<a href="https://redirect.github.com/grpc/grpc-go/issues/6701">#6701</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/grpc/grpc-go/commit/297d8ddeb0d5834b47f40a5bd624aa0c2cfb9c7a"><code>297d8dd</code></a> Cherry-pick <a href="https://redirect.github.com/grpc/grpc-go/issues/6841">#6841</a> to v1.60.x release branch (<a href="https://redirect.github.com/grpc/grpc-go/issues/6847">#6847</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/3580447e0cc2b9fb1c2f005b182d172c673fc0c6"><code>3580447</code></a> Change version to 1.60.0 (<a href="https://redirect.github.com/grpc/grpc-go/issues/6792">#6792</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/71e67a93f46639f053cc83cd29e74d2a0248468e"><code>71e67a9</code></a> Cherry-pick <a href="https://redirect.github.com/grpc/grpc-go/issues/6834">#6834</a> to v1.60.x release branch (<a href="https://redirect.github.com/grpc/grpc-go/issues/6839">#6839</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/cb6581dd1a407e1679498e9b304ae2000da7dd92"><code>cb6581d</code></a> Cherry-pick <a href="https://redirect.github.com/grpc/grpc-go/issues/6804">#6804</a> and dependencies to v1.60.x release branch (<a href="https://redirect.github.com/grpc/grpc-go/issues/6838">#6838</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/dd39cdbddcfbc1ad1cf04910d8fba2b7201469ec"><code>dd39cdb</code></a> credentials: if not set, restrict to TLS v1.2+ and CipherSuites per RFC7540 (...</li> <li><a href="https://github.com/grpc/grpc-go/commit/8645f95509d6c5d17a54621407f3ca717d4f8620"><code>8645f95</code></a> resolver: remove ClientConn.NewServiceConfig (<a href="https://redirect.github.com/grpc/grpc-go/issues/6784">#6784</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/8b17a4dbc328e8ef7f9e5094ab5fe8a78efccbb8"><code>8b17a4d</code></a> vet: various cleanups (<a href="https://redirect.github.com/grpc/grpc-go/issues/6780">#6780</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/591c48187c4ba075d14a0ca6e69572a60662af92"><code>591c481</code></a> internal/transport: Add LocalAddr to http2Client.getPeer() (<a href="https://redirect.github.com/grpc/grpc-go/issues/6779">#6779</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/eb46b7d427ee19c821e43dfd034447f8b3a28e7a"><code>eb46b7d</code></a> github: set top-level read-only workflow permissions (<a href="https://redirect.github.com/grpc/grpc-go/issues/6775">#6775</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/be1d1c10a930fa0e91fc4bcd01963035011e2466"><code>be1d1c1</code></a> security/advancedtls: FileWatcher CRL provider initialization enhancement (<a href="https://redirect.github.com/grpc/grpc-go/issues/6">#6</a>...</li> <li>Additional commits viewable in <a href="https://github.com/grpc/grpc-go/compare/v1.59.0...v1.60.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=google.golang.org/grpc&package-manager=go_modules&previous-version=1.59.0&new-version=1.60.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>