[PR #2073] [CLOSED] build(deps): bump google.golang.org/grpc from 1.76.0 to 1.77.0 #2070

New issue

Closed

opened 2026-03-03 13:29:38 +03:00 by kerem · 0 comments

kerem commented

2026-03-03 13:29:38 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/fsouza/fake-gcs-server/pull/2073
Author: @dependabot[bot]
Created: 11/18/2025
Status: ❌ Closed

Base: main ← Head: dependabot/go_modules/google.golang.org/grpc-1.77.0

📝 Commits (1)

0adbb4d build(deps): bump google.golang.org/grpc from 1.76.0 to 1.77.0

📊 Changes

2 files changed (+64 additions, -67 deletions)

View changed files

📝 go.mod (+20 -21)
📝 go.sum (+44 -46)

📄 Description

Bumps google.golang.org/grpc from 1.76.0 to 1.77.0.

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.77.0

API Changes

mem: Replace the Reader interface with a struct for better performance and maintainability. (#8669)

Behavior Changes

balancer/pickfirst: Remove support for the old pick_first LB policy via the environment variable GRPC_EXPERIMENTAL_ENABLE_NEW_PICK_FIRST=false. The new pick_first has been the default since v1.71.0. (#8672)

Bug Fixes

xdsclient: Fix a race condition in the ADS stream implementation that could result in resource-not-found errors, causing the gRPC client channel to move to TransientFailure. (#8605)

client: Ignore HTTP status header for gRPC streams. (#8548)

client: Set a read deadline when closing a transport to prevent it from blocking indefinitely on a broken connection. (#8534)

Special Thanks: @jgold2-stripe

client: Fix a bug where default port 443 was not automatically added to addresses without a specified port when sent to a proxy.

Setting environment variable GRPC_EXPERIMENTAL_ENABLE_DEFAULT_PORT_FOR_PROXY_TARGET=false disables this change; please file a bug if any problems are encountered as we will remove this option soon. (#8613)

balancer/pickfirst: Fix a bug where duplicate addresses were not being ignored as intended. (#8611)

server: Fix a bug that caused overcounting of channelz metrics for successful and failed streams. (#8573)

Special Thanks: @hugehoo

balancer/pickfirst: When configured, shuffle addresses in resolver updates that lack endpoints. Since gRPC automatically adds endpoints to resolver updates, this bug only affects custom LB policies that delegate to pick_first but don't set endpoints. (#8610)

mem: Clear large buffers before re-using. (#8670)

Performance Improvements

transport: Reduce heap allocations to reduce time spent in garbage collection. (#8624, #8630, #8639, #8668)

transport: Avoid copies when reading and writing Data frames. (#8657, #8667)

mem: Avoid clearing newly allocated buffers. (#8670)

New Features

outlierdetection: Add metrics specified in gRFC A91. (#8644)

Special Thanks: @davinci26, @PardhuKonakanchi

stats/opentelemetry: Add support for optional label grpc.lb.backend_service in per-call metrics (#8637)

xds: Add support for JWT Call Credentials as specified in gRFC A97. Set environment variable GRPC_EXPERIMENTAL_XDS_BOOTSTRAP_CALL_CREDS=true to enable this feature. (#8536)

Special Thanks: @dimpavloff

experimental/stats: Add support for up/down counters. (#8581)

Commits

805b1f8 Change version to 1.77.0 (#8677)
ea7b66e Cherrypick #8702 to v1.77.x (#8709)
cadae08 Cherry-pick #8536 to v1.77.x (#8691)
4288cfc Cherrypick #8657 and #8667 to v1.77.x (#8690)
f959da6 transport: Reduce heap allocations (#8668)
0d49384 deps: update all dependencies (#8673)
e3e142d pickfirst: Remove old pickfirst (#8672)
254ab10 documentation: fix typos in benchmark and auth docs (#8674)
2d56bda mem: Remove Reader interface and export the concrete struct (#8669)
8ab0c82 mem: Avoid clearing new buffers and clear buffers from simpleBufferPools (#8670)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/fsouza/fake-gcs-server/pull/2073 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 11/18/2025 **Status:** ❌ Closed **Base:** `main` ← **Head:** `dependabot/go_modules/google.golang.org/grpc-1.77.0` --- ### 📝 Commits (1) - [`0adbb4d`](https://github.com/fsouza/fake-gcs-server/commit/0adbb4d0a0ff9972f0d3d46810b4985937b26edd) build(deps): bump google.golang.org/grpc from 1.76.0 to 1.77.0 ### 📊 Changes **2 files changed** (+64 additions, -67 deletions) <details> <summary>View changed files</summary> 📝 `go.mod` (+20 -21) 📝 `go.sum` (+44 -46) </details> ### 📄 Description Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.76.0 to 1.77.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/grpc/grpc-go/releases">google.golang.org/grpc's releases</a>.</em></p> <blockquote> <h2>Release 1.77.0</h2> <h1>API Changes</h1> <ul> <li>mem: Replace the <code>Reader</code> interface with a struct for better performance and maintainability. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8669">#8669</a>)</li> </ul> <h1>Behavior Changes</h1> <ul> <li>balancer/pickfirst: Remove support for the old <code>pick_first</code> LB policy via the environment variable <code>GRPC_EXPERIMENTAL_ENABLE_NEW_PICK_FIRST=false</code>. The new <code>pick_first</code> has been the default since <code>v1.71.0</code>. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8672">#8672</a>)</li> </ul> <h1>Bug Fixes</h1> <ul> <li>xdsclient: Fix a race condition in the ADS stream implementation that could result in <code>resource-not-found</code> errors, causing the gRPC client channel to move to <code>TransientFailure</code>. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8605">#8605</a>)</li> <li>client: Ignore HTTP status header for gRPC streams. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8548">#8548</a>)</li> <li>client: Set a read deadline when closing a transport to prevent it from blocking indefinitely on a broken connection. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8534">#8534</a>) <ul> <li>Special Thanks: <a href="https://github.com/jgold2-stripe"><code>@jgold2-stripe</code></a></li> </ul> </li> <li>client: Fix a bug where default port 443 was not automatically added to addresses without a specified port when sent to a proxy. <ul> <li>Setting environment variable <code>GRPC_EXPERIMENTAL_ENABLE_DEFAULT_PORT_FOR_PROXY_TARGET=false</code> disables this change; please file a bug if any problems are encountered as we will remove this option soon. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8613">#8613</a>)</li> </ul> </li> <li>balancer/pickfirst: Fix a bug where duplicate addresses were not being ignored as intended. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8611">#8611</a>)</li> <li>server: Fix a bug that caused overcounting of channelz metrics for successful and failed streams. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8573">#8573</a>) <ul> <li>Special Thanks: <a href="https://github.com/hugehoo"><code>@hugehoo</code></a></li> </ul> </li> <li>balancer/pickfirst: When configured, shuffle addresses in resolver updates that lack endpoints. Since gRPC automatically adds endpoints to resolver updates, this bug only affects custom LB policies that delegate to <code>pick_first</code> but don't set endpoints. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8610">#8610</a>)</li> <li>mem: Clear large buffers before re-using. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8670">#8670</a>)</li> </ul> <h1>Performance Improvements</h1> <ul> <li>transport: Reduce heap allocations to reduce time spent in garbage collection. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8624">#8624</a>, <a href="https://redirect.github.com/grpc/grpc-go/issues/8630">#8630</a>, <a href="https://redirect.github.com/grpc/grpc-go/issues/8639">#8639</a>, <a href="https://redirect.github.com/grpc/grpc-go/issues/8668">#8668</a>)</li> <li>transport: Avoid copies when reading and writing Data frames. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8657">#8657</a>, <a href="https://redirect.github.com/grpc/grpc-go/issues/8667">#8667</a>)</li> <li>mem: Avoid clearing newly allocated buffers. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8670">#8670</a>)</li> </ul> <h1>New Features</h1> <ul> <li>outlierdetection: Add metrics specified in <a href="https://github.com/grpc/proposal/blob/master/A91-outlier-detection-metrics.md">gRFC A91</a>. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8644">#8644</a>) <ul> <li>Special Thanks: <a href="https://github.com/davinci26"><code>@davinci26</code></a>, <a href="https://github.com/PardhuKonakanchi"><code>@PardhuKonakanchi</code></a></li> </ul> </li> <li>stats/opentelemetry: Add support for optional label <code>grpc.lb.backend_service</code> in per-call metrics (<a href="https://redirect.github.com/grpc/grpc-go/issues/8637">#8637</a>)</li> <li>xds: Add support for JWT Call Credentials as specified in <a href="https://github.com/grpc/proposal/blob/master/A97-xds-jwt-call-creds.md">gRFC A97</a>. Set environment variable <code>GRPC_EXPERIMENTAL_XDS_BOOTSTRAP_CALL_CREDS=true</code> to enable this feature. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8536">#8536</a>) <ul> <li>Special Thanks: <a href="https://github.com/dimpavloff"><code>@dimpavloff</code></a></li> </ul> </li> <li>experimental/stats: Add support for up/down counters. (<a href="https://redirect.github.com/grpc/grpc-go/issues/8581">#8581</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/grpc/grpc-go/commit/805b1f88c5fb9419e3837c72e1deb9c2ec677ffe"><code>805b1f8</code></a> Change version to 1.77.0 (<a href="https://redirect.github.com/grpc/grpc-go/issues/8677">#8677</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/ea7b66e1caa21b242b035bc4f598edb82093877f"><code>ea7b66e</code></a> Cherrypick <a href="https://redirect.github.com/grpc/grpc-go/issues/8702">#8702</a> to v1.77.x (<a href="https://redirect.github.com/grpc/grpc-go/issues/8709">#8709</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/cadae08d5f37d60083091c103a89d5566b7ae34e"><code>cadae08</code></a> Cherry-pick <a href="https://redirect.github.com/grpc/grpc-go/issues/8536">#8536</a> to v1.77.x (<a href="https://redirect.github.com/grpc/grpc-go/issues/8691">#8691</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/4288cfc5aba43fa11ad9b769f58b193b78f76a3b"><code>4288cfc</code></a> Cherrypick <a href="https://redirect.github.com/grpc/grpc-go/issues/8657">#8657</a> and <a href="https://redirect.github.com/grpc/grpc-go/issues/8667">#8667</a> to v1.77.x (<a href="https://redirect.github.com/grpc/grpc-go/issues/8690">#8690</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/f959da611763ff733f7fb6b4b04c0f796d0fa441"><code>f959da6</code></a> transport: Reduce heap allocations (<a href="https://redirect.github.com/grpc/grpc-go/issues/8668">#8668</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/0d49384b60894f29d2da20f7f72987aed4fbb229"><code>0d49384</code></a> deps: update all dependencies (<a href="https://redirect.github.com/grpc/grpc-go/issues/8673">#8673</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/e3e142d0e32ff4e500ca140dc5eaed66adac9bfd"><code>e3e142d</code></a> pickfirst: Remove old pickfirst (<a href="https://redirect.github.com/grpc/grpc-go/issues/8672">#8672</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/254ab1095e9f4179cebd36517bfb7e61b623e509"><code>254ab10</code></a> documentation: fix typos in benchmark and auth docs (<a href="https://redirect.github.com/grpc/grpc-go/issues/8674">#8674</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/2d56bdadb11058f67c48e3c837fcf4a487e15346"><code>2d56bda</code></a> mem: Remove Reader interface and export the concrete struct (<a href="https://redirect.github.com/grpc/grpc-go/issues/8669">#8669</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/8ab0c8214a28222821a1a761996b76f9bfa6aca7"><code>8ab0c82</code></a> mem: Avoid clearing new buffers and clear buffers from simpleBufferPools (<a href="https://redirect.github.com/grpc/grpc-go/issues/8670">#8670</a>)</li> <li>Additional commits viewable in <a href="https://github.com/grpc/grpc-go/compare/v1.76.0...v1.77.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=google.golang.org/grpc&package-manager=go_modules&previous-version=1.76.0&new-version=1.77.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>