build(deps): bump google.golang.org/grpc from 1.58.0 to 1.58.3 #7366

dependabot · 2023-10-12T14:10:21Z

Bumps google.golang.org/grpc from 1.58.0 to 1.58.3.

Release notes

Sourced from google.golang.org/grpc's releases.

Release v1.58.3

Security

server: prohibit more than MaxConcurrentStreams handlers from running at once (CVE-2023-44487)

In addition to this change, applications should ensure they do not leave running tasks behind related to the RPC before returning from method handlers, or should enforce appropriate limits on any such work.

Release 1.58.2

Bug Fixes

balancer/weighted_round_robin: fix ticker leak on update

A new ticker is created every time there is an update of addresses or configuration, but was not properly stopped. This change stops the ticker when it is no longer needed.

Release 1.58.1

Bug Fixes

grpc: fix a bug that was decrementing active RPC count too early for streaming RPCs; leading to channel moving to IDLE even though it had open streams

grpc: fix a bug where transports were not being closed upon channel entering IDLE

Commits

bf05b95 Change version.go to v1.58.3 (#6707)
c40c9ba server: prohibit more than MaxConcurrentStreams handlers from running at once...
dd9270d update version to 1.58.3-dev (#6656)
c0aa20a Change version to 1.58.2 (#6654)
67a53a6 balancer/weightedroundrobin: fix ticker leak on update (#6655)
863de73 update version to 1.58.2-dev (#6633)
62726d4 update version to 1.58.1 (#6629)
fa6d9ab cherry-pick 6610 and 6620 (#6627)
467fbf2 Change version to 1.58.1-dev (#6580)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.58.0 to 1.58.3. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.58.0...v1.58.3) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>

codecov · 2023-10-12T15:27:56Z

Codecov Report

Merging #7366 (2a04f72) into main (f54ac5f) will not change coverage.
Report is 8 commits behind head on main.
The diff coverage is n/a.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #7366   +/-   ##
=======================================
  Coverage   49.23%   49.23%           
=======================================
  Files         136      136           
  Lines       15678    15678           
=======================================
  Hits         7719     7719           
  Misses       7039     7039           
  Partials      920      920

saschagrunert

/retest

openshift-ci · 2023-10-13T07:12:16Z

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: dependabot[bot], saschagrunert

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

~~OWNERS~~ [saschagrunert]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

saschagrunert · 2023-10-13T08:45:07Z

/retest

saschagrunert · 2023-10-13T11:44:46Z

/retest

saschagrunert · 2023-10-13T12:21:49Z

/override ci/prow/ci-cgroupv2-integration

openshift-ci · 2023-10-13T12:21:54Z

@saschagrunert: Overrode contexts on behalf of saschagrunert: ci/prow/ci-cgroupv2-integration

Details

In response to this:

/override ci/prow/ci-cgroupv2-integration

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

saschagrunert · 2023-10-13T13:30:20Z

/override ci/prow/e2e-aws-ovn

openshift-ci · 2023-10-13T13:30:26Z

@saschagrunert: Overrode contexts on behalf of saschagrunert: ci/prow/e2e-aws-ovn

Details

In response to this:

/override ci/prow/e2e-aws-ovn

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

kwilczynski · 2023-10-16T11:46:13Z

/cherry-pick release-1.28

openshift-cherrypick-robot · 2023-10-16T11:46:53Z

@kwilczynski: #7366 failed to apply on top of branch "release-1.28":

Applying: build(deps): bump google.golang.org/grpc from 1.58.0 to 1.58.3
Using index info to reconstruct a base tree...
M	go.mod
M	go.sum
M	vendor/google.golang.org/grpc/call.go
M	vendor/google.golang.org/grpc/clientconn.go
M	vendor/google.golang.org/grpc/internal/transport/http2_server.go
M	vendor/google.golang.org/grpc/server.go
M	vendor/google.golang.org/grpc/stream.go
M	vendor/google.golang.org/grpc/version.go
M	vendor/modules.txt
Falling back to patching base and 3-way merge...
Auto-merging vendor/modules.txt
CONFLICT (content): Merge conflict in vendor/modules.txt
Auto-merging vendor/google.golang.org/grpc/version.go
CONFLICT (content): Merge conflict in vendor/google.golang.org/grpc/version.go
Auto-merging vendor/google.golang.org/grpc/stream.go
CONFLICT (content): Merge conflict in vendor/google.golang.org/grpc/stream.go
Auto-merging vendor/google.golang.org/grpc/server.go
Auto-merging vendor/google.golang.org/grpc/internal/transport/http2_server.go
Auto-merging vendor/google.golang.org/grpc/clientconn.go
Auto-merging vendor/google.golang.org/grpc/call.go
CONFLICT (content): Merge conflict in vendor/google.golang.org/grpc/call.go
Auto-merging go.sum
CONFLICT (content): Merge conflict in go.sum
Auto-merging go.mod
CONFLICT (content): Merge conflict in go.mod
error: Failed to merge in the changes.
hint: Use 'git am --show-current-patch=diff' to see the failed patch
Patch failed at 0001 build(deps): bump google.golang.org/grpc from 1.58.0 to 1.58.3
When you have resolved this problem, run "git am --continue".
If you prefer to skip this patch, run "git am --skip" instead.
To restore the original branch and stop patching, run "git am --abort".

Details

In response to this:

/cherry-pick release-1.28

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

kwilczynski · 2023-10-16T11:47:23Z

Will cherry-pick manually.

dependabot bot requested a review from mrunalp as a code owner October 12, 2023 14:10

dependabot bot added the release-note-none Denotes a PR that doesn't merit a release note. label Oct 12, 2023

openshift-ci bot added the dco-signoff: yes Indicates the PR's author has DCO signed all their commits. label Oct 12, 2023

openshift-ci bot requested review from hasan4791 and wgahnagl October 12, 2023 14:10

saschagrunert approved these changes Oct 13, 2023

View reviewed changes

openshift-ci bot assigned saschagrunert Oct 13, 2023

openshift-ci bot added the lgtm Indicates that a PR is ready to be merged. label Oct 13, 2023

openshift-ci bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Oct 13, 2023

openshift-ci bot merged commit dee5ee3 into main Oct 13, 2023

dependabot bot deleted the dependabot/go_modules/google.golang.org/grpc-1.58.3 branch October 13, 2023 13:36

kwilczynski mentioned this pull request Feb 13, 2024

[release-1.25] When crio restarts, restore the infraContainer #7773

Merged

build(deps): bump google.golang.org/grpc from 1.58.0 to 1.58.3 #7366

build(deps): bump google.golang.org/grpc from 1.58.0 to 1.58.3 #7366

Uh oh!

Conversation

dependabot bot commented on behalf of github Oct 12, 2023

Release v1.58.3

Security

Release 1.58.2

Bug Fixes

Release 1.58.1

Bug Fixes

Uh oh!

codecov bot commented Oct 12, 2023 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

saschagrunert left a comment

Choose a reason for hiding this comment

Uh oh!

openshift-ci bot commented Oct 13, 2023

Uh oh!

saschagrunert commented Oct 13, 2023

Uh oh!

saschagrunert commented Oct 13, 2023

Uh oh!

saschagrunert commented Oct 13, 2023

Uh oh!

openshift-ci bot commented Oct 13, 2023

Uh oh!

saschagrunert commented Oct 13, 2023

Uh oh!

openshift-ci bot commented Oct 13, 2023

Uh oh!

kwilczynski commented Oct 16, 2023

Uh oh!

openshift-cherrypick-robot commented Oct 16, 2023

Uh oh!

kwilczynski commented Oct 16, 2023

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

codecov bot commented Oct 12, 2023 •

edited

Loading