Skip to content

build(deps): bump io.grpc:grpc-bom from 1.84.3 to 1.85.0 - #461

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/maven/io.grpc-grpc-bom-1.85.0
Oct 19, 2026
Merged

github-actions[bot] merged 1 commit into
mainfrom
dependabot/maven/io.grpc-grpc-bom-1.85.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown
Contributor

Bumps io.grpc:grpc-bom from 1.84.3 to 1.85.0.

Release notes

Sourced from io.grpc:grpc-bom's releases.

v1.85.0

gRPC Java 1.85.0 Release Notes

API Changes

  • netty: Support never-indexed metadata keys (#12976) (e9a8c2bf83). High-cardinality metadata values provide little compression benefit and can churn the server's dynamic HPACK table. Adds NettyChannelBuilder.neverIndexMetadataKey() and neverIndexMetadataKeys() so callers can mark selected outbound metadata keys for HPACK's never-indexed literal representation.
  • binder: Add Context-based hasPermissions() to SecurityPolicies and deprecate the PackageManager version.

Behavior Changes

  • xds: allow wildcard listener port in LDS (5fda0c7c35). It now accepts a port of 0 in the LDS listener address as matching any port.
     

Bug Fixes

  •  xds: Make RawMessageClientInterceptor conditional on ext_proc flags (#13015) (e58489ffa0). Fixes a bug that caused empty payloads on retry attempts for regular xDS channels.
  • core: Reset configSelector on realChannel while entering IDLE state (#12832) (fc4314419d). Because of a bug in the config selector, when ManagedChannel entered IDLE state due to resource deletion on the xDS control plane, the channel stayed stuck in IDLE state even after the resource came back online and a new rpc was executed.
  • core: Gracefully handle GOAWAY frames with unrecognized error codes (#13035) (b3ae8010c9). When a server or proxy sent a GOAWAY with an unrecognized HTTP/2 error code, such as 70007 from Apache httpd, Netty transport clients logged NullPointerException: Http2Error cannot be null for GOAWAY and RPCs could hang until their deadline. Such codes are now treated as INTERNAL_ERROR, so the transport shuts down cleanly.

Improvements

  • netty: make hostname verification configurable (#13002) (2858db2862). This configures HTTPS endpoint identification in GrpcSslContexts and updates ClientTlsHandler to preserve an explicit empty-string opt-out. A null algorithm still falls back to HTTPS, retaining hostname verification for custom contexts that do not select an algorithm.
  • bazel: Adopt proto_lang_toolchain for java_grpc_library() (#12994) (c9ee3f8a79). java_grpc_library and java_lite_grpc_library now invoke protoc through Protobuf's proto_lang_toolchain instead of always using @com_google_protobuf//:protoc. They now use the same protoc and protoc options as java_proto_library.

New Features

  • api: Implement custom events framework in gRPC-Java server (#12980) (dd00881a6e). This adds triggerEvent/onEvent APIs to ServerCall and ServerCall.Listener. This allows events to be triggered on the ServerCall and be delivered as a listener callback.

Dependencies

  • Upgrade protobuf for bazel from 36.0 to 36.0.bcr.1 (#13013) (9799887b74)
  • netty: Upgrade Netty to 4.2.17 (#13036) (61b910bb43). netty-tcnative remains at 2.0.81.

Documentation

  • stub: Clarify flow control javadoc (#12977) (893eb70807)

 

Thanks to

@​kkalin68

@​petedmarsh

Commits
  • 73a9039 Bump version to 1.85.0
  • 44ef493 Update README etc to reference 1.85.0
  • 4d0d548 api: move ATTR_ADDRESS_NAME to EquivalentAddressGroup (#13072)
  • 9e0ff28 xds: fix TSAN data race in ext_proc client interceptor test cleanup (#13071)
  • c9ee3f8 bazel: Adopt proto_lang_toolchain for java_grpc_library() (#12994)
  • fc56206 xds: fix ext_authz unit test issues creating import issues (#13061)
  • 4865560 binder: deliver, even in the case where a prefix-only txn arrives last
  • 126f42e binder: Add true unit tests for io.grpc.binder.internal.Inbound
  • 4c8d26d binder: Fix OneWayBinderProxy to be a complete abstraction, removing getDeleg...
  • 872b8c8 binder: Add Context-based hasPermissions to SecurityPolicies and deprecate th...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [io.grpc:grpc-bom](https://github.com/grpc/grpc-java) from 1.84.3 to 1.85.0.
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.84.3...v1.85.0)

---
updated-dependencies:
- dependency-name: io.grpc:grpc-bom
  dependency-version: 1.85.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Oct 19, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) October 19, 2026 16:43
@codecov

codecov Bot commented Oct 19, 2026 •

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 88.37%. Comparing base (0e685f6) to head (3ff7427).
⚠️ Report is 3 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #461   +/-   ##
=======================================
  Coverage   88.37%   88.37%           
=======================================
  Files          22       22           
  Lines        1540     1540           
  Branches      272      272           
=======================================
  Hits         1361     1361           
  Misses         79       79           
  Partials      100      100           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@github-actions
github-actions Bot merged commit eabebc1 into main Oct 19, 2026
17 checks passed
@github-actions
github-actions Bot deleted the dependabot/maven/io.grpc-grpc-bom-1.85.0 branch October 19, 2026 16:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants