[PR #2011] [MERGED] build(deps): bump google.golang.org/grpc from 1.72.0 to 1.75.0 #2017

New issue

Closed

opened 2026-03-03 12:37:15 +03:00 by kerem · 0 comments

kerem commented

2026-03-03 12:37:15 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/fsouza/fake-gcs-server/pull/2011
Author: @dependabot[bot]
Created: 8/26/2025
Status: ✅ Merged
Merged: 8/27/2025
Merged by: @fsouza

Base: main ← Head: dependabot/go_modules/google.golang.org/grpc-1.75.0

📝 Commits (1)

7008d76 build(deps): bump google.golang.org/grpc from 1.72.0 to 1.75.0

📊 Changes

2 files changed (+53 additions, -49 deletions)

View changed files

📝 go.mod (+17 -17)
📝 go.sum (+36 -32)

📄 Description

Bumps google.golang.org/grpc from 1.72.0 to 1.75.0.

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.75.0

Behavior Changes

xds: Remove support for GRPC_EXPERIMENTAL_XDS_FALLBACK environment variable. Fallback support can no longer be disabled. (#8482)

stats: Introduce DelayedPickComplete event, a type alias of PickerUpdated. (#8465)

This (combined) event will now be emitted only once per call, when a transport is successfully selected for the attempt.

OpenTelemetry metrics will no longer have multiple "Delayed LB pick complete" events in Go, matching other gRPC languages.

A future release will delete the PickerUpdated symbol.

credentials: Properly apply grpc.WithAuthority as the highest-priority option for setting authority, above the setting in the credentials themselves. (#8488)

Now that this WithAuthority is available, the credentials should not be used to override the authority.

round_robin: Randomize the order in which addresses are connected to in order to spread out initial RPC load between clients. (#8438)

server: Return status code INTERNAL when a client sends more than one request in unary and server streaming RPC. (#8385)

This is a behavior change but also a bug fix to bring gRPC-Go in line with the gRPC spec.

New Features

dns: Add an environment variable (GRPC_ENABLE_TXT_SERVICE_CONFIG) to provide a way to disable TXT lookups in the DNS resolver (by setting it to false). By default, TXT lookups are enabled, as they were previously. (#8377)

Bug Fixes

xds: Fix regression preventing empty node IDs in xDS bootstrap configuration. (#8476)

Special Thanks: @davinci26

xds: Fix possible panic when certain invalid resources are encountered. (#8412)

Special Thanks: @wooffie

xdsclient: Fix a rare panic caused by processing a response from a closed server. (#8389)

stats: Fix metric unit formatting by enclosing non-standard units like call and endpoint in curly braces to comply with UCUM and gRPC OpenTelemetry guidelines. (#8481)

xds: Fix possible panic when clusters are removed from the xds configuration. (#8428)

xdsclient: Fix a race causing "resource doesn not exist" when rapidly subscribing and unsubscribing to the same resource. (#8369)

client: When determining the authority, properly percent-encode (if needed, which is unlikely) when the target string omits the hostname and only specifies a port (grpc.NewClient(":<port-number-or-name>")). (#8488)

Release 1.74.2

New Features

grpc: introduce new DialOptions and ServerOptions (WithStaticStreamWindowSize, WithStaticConnWindowSize, StaticStreamWindowSize, StaticConnWindowSize) that force fixed window sizes for all HTTP/2 connections. By default, gRPC uses dynamic sizing of these windows based upon a BDP estimation algorithm. The existing options (WithInitialWindowSize, etc) also disable BDP estimation, but this behavior will be changed in a following release. (#8283)

API Changes

balancer: add ExitIdle method to Balancer interface. Earlier, implementing this method was optional. (#8367)

Behavior Changes

xds: Remove the GRPC_EXPERIMENTAL_ENABLE_LEAST_REQUEST environment variable that allows disabling the least request balancer with xDS. Least request was made available by default with xDS in v1.72.0. (#8248)

Special Thanks: @atollena

server: allow 0s grpc-timeout header values, which older gRPC-Java versions could send. This restores the behavior of grpc-go before v1.73.0. (#8439)

Bug Fixes

googledirectpath: avoid logging the error message Attempt to set a bootstrap configuration... when creating multiple directpath channels. (#8419)

Performance Improvements

... (truncated)

Commits

b9788ef Change version to 1.75.0 (#8493)
2bd74b2 credentials: fix behavior of grpc.WithAuthority and credential handshake prec...
9fa3267 xds: remove xds client fallback environment variable (#8482)
62ec29f grpc: Fix cardinality violations in non-client streaming RPCs. (#8385)
85240a5 stats: change non-standard units to annotations (#8481)
ac13172 update deps (#8478)
0a895bc examples/opentelemetry: use experimental metrics in example (#8441)
8b61e8f xdsclient: do not process updates from closed server channels (#8389)
7238ab1 Allow empty nodeID (#8476)
9186ebd cleanup: use slices.Equal to simplify code (#8472)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/fsouza/fake-gcs-server/pull/2011 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 8/26/2025 **Status:** ✅ Merged **Merged:** 8/27/2025 **Merged by:** [@fsouza](https://github.com/fsouza) **Base:** `main` ← **Head:** `dependabot/go_modules/google.golang.org/grpc-1.75.0` --- ### 📝 Commits (1) - [`7008d76`](https://github.com/fsouza/fake-gcs-server/commit/7008d76389caffa6306c353d7edae93de4e5c217) build(deps): bump google.golang.org/grpc from 1.72.0 to 1.75.0 ### 📊 Changes **2 files changed** (+53 additions, -49 deletions) <details> <summary>View changed files</summary> 📝 `go.mod` (+17 -17) 📝 `go.sum` (+36 -32) </details> ### 📄 Description Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.72.0 to 1.75.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/grpc/grpc-go/releases">google.golang.org/grpc's releases</a>.</em></p> <blockquote> <h2>Release 1.75.0</h2> <h1>Behavior Changes</h1> <ul> <li>xds: Remove support for GRPC_EXPERIMENTAL_XDS_FALLBACK environment variable. Fallback support can no longer be disabled. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8482">#8482</a>)</li> <li>stats: Introduce <code>DelayedPickComplete</code> event, a type alias of <code>PickerUpdated</code>. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8465">#8465</a>) <ul> <li>This (combined) event will now be emitted only once per call, when a transport is successfully selected for the attempt.</li> <li>OpenTelemetry metrics will no longer have multiple "Delayed LB pick complete" events in Go, matching other gRPC languages.</li> <li>A future release will delete the <code>PickerUpdated</code> symbol.</li> </ul> </li> <li>credentials: Properly apply <code>grpc.WithAuthority</code> as the highest-priority option for setting authority, above the setting in the credentials themselves. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8488">#8488</a>) <ul> <li>Now that this <code>WithAuthority</code> is available, the credentials should not be used to override the authority.</li> </ul> </li> <li>round_robin: Randomize the order in which addresses are connected to in order to spread out initial RPC load between clients. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8438">#8438</a>)</li> <li>server: Return status code INTERNAL when a client sends more than one request in unary and server streaming RPC. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8385">#8385</a>) <ul> <li>This is a behavior change but also a bug fix to bring gRPC-Go in line with the gRPC spec.</li> </ul> </li> </ul> <h1>New Features</h1> <ul> <li>dns: Add an environment variable (<code>GRPC_ENABLE_TXT_SERVICE_CONFIG</code>) to provide a way to disable TXT lookups in the DNS resolver (by setting it to <code>false</code>). By default, TXT lookups are enabled, as they were previously. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8377">#8377</a>)</li> </ul> <h1>Bug Fixes</h1> <ul> <li>xds: Fix regression preventing empty node IDs in xDS bootstrap configuration. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8476">#8476</a>) <ul> <li>Special Thanks: <a href="https://github.com/davinci26"><code>@davinci26</code></a></li> </ul> </li> <li>xds: Fix possible panic when certain invalid resources are encountered. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8412">#8412</a>) <ul> <li>Special Thanks: <a href="https://github.com/wooffie"><code>@wooffie</code></a></li> </ul> </li> <li>xdsclient: Fix a rare panic caused by processing a response from a closed server. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8389">#8389</a>)</li> <li>stats: Fix metric unit formatting by enclosing non-standard units like <code>call</code> and <code>endpoint</code> in curly braces to comply with UCUM and gRPC OpenTelemetry guidelines. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8481">#8481</a>)</li> <li>xds: Fix possible panic when clusters are removed from the xds configuration. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8428">#8428</a>)</li> <li>xdsclient: Fix a race causing "resource doesn not exist" when rapidly subscribing and unsubscribing to the same resource. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8369">#8369</a>)</li> <li>client: When determining the authority, properly percent-encode (if needed, which is unlikely) when the target string omits the hostname and only specifies a port (<code>grpc.NewClient(":<port-number-or-name>")</code>). (<a href="https://redirect.github.com/grpc/grpc-go/issues/8488">#8488</a>)</li> </ul> <h2>Release 1.74.2</h2> <h1>New Features</h1> <ul> <li>grpc: introduce new <code>DialOptions</code> and <code>ServerOptions</code> (<code>WithStaticStreamWindowSize</code>, <code>WithStaticConnWindowSize</code>, <code>StaticStreamWindowSize</code>, <code>StaticConnWindowSize</code>) that force fixed window sizes for all HTTP/2 connections. By default, gRPC uses dynamic sizing of these windows based upon a BDP estimation algorithm. The existing options (<code>WithInitialWindowSize</code>, etc) also disable BDP estimation, but this behavior will be changed in a following release. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8283">#8283</a>)</li> </ul> <h1>API Changes</h1> <ul> <li>balancer: add <code>ExitIdle</code> method to <code>Balancer</code> interface. Earlier, implementing this method was optional. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8367">#8367</a>)</li> </ul> <h1>Behavior Changes</h1> <ul> <li>xds: Remove the <code>GRPC_EXPERIMENTAL_ENABLE_LEAST_REQUEST</code> environment variable that allows disabling the least request balancer with xDS. Least request was made available by default with xDS in v1.72.0. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8248">#8248</a>) <ul> <li>Special Thanks: <a href="https://github.com/atollena"><code>@atollena</code></a></li> </ul> </li> <li>server: allow 0s grpc-timeout header values, which older gRPC-Java versions could send. This restores the behavior of grpc-go before v1.73.0. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8439">#8439</a>)</li> </ul> <h1>Bug Fixes</h1> <ul> <li>googledirectpath: avoid logging the error message <code>Attempt to set a bootstrap configuration...</code> when creating multiple directpath channels. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8419">#8419</a>)</li> </ul> <h1>Performance Improvements</h1>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/grpc/grpc-go/commit/b9788ef265596eda98a4391079c70c3992ed47cb"><code>b9788ef</code></a> Change version to 1.75.0 (<a href="https://redirect.github.com/grpc/grpc-go/issues/8493">#8493</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/2bd74b28f5a7d464de4ed6927aef4b69abc0d3af"><code>2bd74b2</code></a> credentials: fix behavior of grpc.WithAuthority and credential handshake prec...</li> <li><a href="https://github.com/grpc/grpc-go/commit/9fa3267859958a7fa0141a8180102850f3d5842c"><code>9fa3267</code></a> xds: remove xds client fallback environment variable (<a href="https://redirect.github.com/grpc/grpc-go/issues/8482">#8482</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/62ec29fd9b3f9ea3cea6dc08a31e837aa92678b7"><code>62ec29f</code></a> grpc: Fix cardinality violations in non-client streaming RPCs. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8385">#8385</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/85240a5b02defe7b653ccba66866b4370c982b6a"><code>85240a5</code></a> stats: change non-standard units to annotations (<a href="https://redirect.github.com/grpc/grpc-go/issues/8481">#8481</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/ac13172781fae5593fd97ce07c3019c4044a71cd"><code>ac13172</code></a> update deps (<a href="https://redirect.github.com/grpc/grpc-go/issues/8478">#8478</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/0a895bc971a89c68c00070f792a28cc533846780"><code>0a895bc</code></a> examples/opentelemetry: use experimental metrics in example (<a href="https://redirect.github.com/grpc/grpc-go/issues/8441">#8441</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/8b61e8f7b8fe9b0a4217336f6a4a31731338c3b2"><code>8b61e8f</code></a> xdsclient: do not process updates from closed server channels (<a href="https://redirect.github.com/grpc/grpc-go/issues/8389">#8389</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/7238ab1822875fdc2864e06fb224236dc7cbf3bf"><code>7238ab1</code></a> Allow empty nodeID (<a href="https://redirect.github.com/grpc/grpc-go/issues/8476">#8476</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/9186ebd774370e3b3232d1b202914ff8fc2c56d6"><code>9186ebd</code></a> cleanup: use slices.Equal to simplify code (<a href="https://redirect.github.com/grpc/grpc-go/issues/8472">#8472</a>)</li> <li>Additional commits viewable in <a href="https://github.com/grpc/grpc-go/compare/v1.72.0...v1.75.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=google.golang.org/grpc&package-manager=go_modules&previous-version=1.72.0&new-version=1.75.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>