Bump google.golang.org/grpc from 1.58.0 to 1.58.3 #535

dependabot · 2023-10-26T06:45:32Z

Bumps google.golang.org/grpc from 1.58.0 to 1.58.3.

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.58.3

Security

server: prohibit more than MaxConcurrentStreams handlers from running at once (CVE-2023-44487)

In addition to this change, applications should ensure they do not leave running tasks behind related to the RPC before returning from method handlers, or should enforce appropriate limits on any such work.

Release 1.58.2

Bug Fixes

balancer/weighted_round_robin: fix ticker leak on update

A new ticker is created every time there is an update of addresses or configuration, but was not properly stopped. This change stops the ticker when it is no longer needed.

Release 1.58.1

Bug Fixes

grpc: fix a bug that was decrementing active RPC count too early for streaming RPCs; leading to channel moving to IDLE even though it had open streams

grpc: fix a bug where transports were not being closed upon channel entering IDLE

Commits

bf05b95 Change version.go to v1.58.3 (#6707)
c40c9ba server: prohibit more than MaxConcurrentStreams handlers from running at once...
dd9270d update version to 1.58.3-dev (#6656)
c0aa20a Change version to 1.58.2 (#6654)
67a53a6 balancer/weightedroundrobin: fix ticker leak on update (#6655)
863de73 update version to 1.58.2-dev (#6633)
62726d4 update version to 1.58.1 (#6629)
fa6d9ab cherry-pick 6610 and 6620 (#6627)
467fbf2 Change version to 1.58.1-dev (#6580)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.58.0 to 1.58.3. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.58.0...v1.58.3) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-type: indirect ... Signed-off-by: dependabot[bot] <[email protected]>

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.58.0 to 1.58.3. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.58.0...v1.58.3) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-type: indirect ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> (cherry picked from commit 5fa1a1b)

* Update module github.com/aws/aws-sdk-go to v1.45.6 (#515) (cherry picked from commit 4953af3) * Update crazy-max/ghaction-import-gpg action to v6 (#516) (cherry picked from commit ee28b90) * Handle empty service account policy (#518) (cherry picked from commit 779d356) * Update repository URL (#520) (cherry picked from commit 7a680c7) * Update project to Go v1.20 (#519) (cherry picked from commit be07cf7) * Destroy object versions on bucket force_destroy (#524) (cherry picked from commit a107f61) * Update goreleaser-action to v5 and add permission for the workflow to attach binaries to GitHub Releases (#521) (cherry picked from commit c06ddba) * Add Noncurrent Version expiration to ilm policy (#526) Co-authored-by: Nicolas De Jesus <[email protected]> (cherry picked from commit f031109) * Bump golang.org/x/net from 0.15.0 to 0.17.0 (#530) Bumps [golang.org/x/net](https://github.com/golang/net) from 0.15.0 to 0.17.0. - [Commits](golang/net@v0.15.0...v0.17.0) --- updated-dependencies: - dependency-name: golang.org/x/net dependency-type: indirect ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> (cherry picked from commit ec7f197) * Add service account values to read and import (#525) (cherry picked from commit cf0c88d) * Recreate user if it's not found anymore (#534) Fixes #511 (cherry picked from commit 50bc121) * Bump google.golang.org/grpc from 1.58.0 to 1.58.3 (#535) Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.58.0 to 1.58.3. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.58.0...v1.58.3) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-type: indirect ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> (cherry picked from commit 5fa1a1b) * Revert "Update repository URL (#520)" (#538) This reverts commit 7a680c7. (cherry picked from commit 8a0b114) * Update target branches of GitHub Actions to `v1` branch --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Artem Usenko <[email protected]> Co-authored-by: Jonathan Buch <[email protected]> Co-authored-by: Pat Sier <[email protected]> Co-authored-by: ndejesus <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Tobias Krischer <[email protected]>

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [minio](https://registry.terraform.io/providers/aminueza/minio) ([source](https://github.com/aminueza/terraform-provider-minio)) | required_provider | minor | `~> 1.18.0` -> `~> 1.20.0` | --- > ⚠ **Warning** > > Some dependencies could not be looked up. Check the warning logs for more information. --- ### Release Notes <details> <summary>aminueza/terraform-provider-minio (minio)</summary> ### [`v1.20.1`](https://github.com/aminueza/terraform-provider-minio/releases/tag/v1.20.1) [Compare Source](aminueza/terraform-provider-minio@v1.20.0...v1.20.1) #### What's Changed - Fix null expiration date handling by [@pjsier](https://github.com/pjsier) in aminueza/terraform-provider-minio#545 - Update terraform version to 1.5.7 in GitHub Action by [@felladrin](https://github.com/felladrin) in aminueza/terraform-provider-minio#540 **Full Changelog**: aminueza/terraform-provider-minio@v1.20.0...v1.20.1 > **Note** > [v1](https://github.com/aminueza/terraform-provider-minio/tree/v1) of the provider is now under maintenance mode. If you can, it's advised to upgrade to `v2`. ### [`v1.20.0`](https://github.com/aminueza/terraform-provider-minio/releases/tag/v1.20.0) [Compare Source](aminueza/terraform-provider-minio@v1.19.0...v1.20.0) #### What's Changed - Update module github.com/aws/aws-sdk-go to v1.45.6 by [@renovate](https://github.com/renovate) in aminueza/terraform-provider-minio#515 - Update crazy-max/ghaction-import-gpg action to v6 by [@renovate](https://github.com/renovate) in aminueza/terraform-provider-minio#516 - Handle empty service account policy by [@ArataEM](https://github.com/ArataEM) in aminueza/terraform-provider-minio#518 - Go 1.20 by [@BuJo](https://github.com/BuJo) in aminueza/terraform-provider-minio#519 - Destroy object versions on bucket force_destroy by [@pjsier](https://github.com/pjsier) in aminueza/terraform-provider-minio#524 - Update goreleaser-action to v5 and add permission for the workflow to attach binaries to GitHub Releases by [@felladrin](https://github.com/felladrin) in aminueza/terraform-provider-minio#521 - Add Noncurrent Version expiration to ilm policy by [@ndejesus](https://github.com/ndejesus) in aminueza/terraform-provider-minio#526 - Bump golang.org/x/net from 0.15.0 to 0.17.0 by [@dependabot](https://github.com/dependabot) in aminueza/terraform-provider-minio#530 - Add service account values to read and import by [@pjsier](https://github.com/pjsier) in aminueza/terraform-provider-minio#525 - feat: recreate user if not found anymore by [@tobikris](https://github.com/tobikris) in aminueza/terraform-provider-minio#534 - Bump google.golang.org/grpc from 1.58.0 to 1.58.3 by [@dependabot](https://github.com/dependabot) in aminueza/terraform-provider-minio#535 #### New Contributors - [@ndejesus](https://github.com/ndejesus) made their first contribution in aminueza/terraform-provider-minio#526 **Full Changelog**: aminueza/terraform-provider-minio@v1.18.0...v1.20.0 > **Note** > This release replaces v1.18.1 and v1.18.2, which are unavailable on https://registry.terraform.io/providers/aminueza/minio as they were built with an outdated GPG key. It also replaces v1.18.3 and v1.19.0, which couldn't be installed due the issue [#531](aminueza/terraform-provider-minio#531). ### [`v1.19.0`](https://github.com/aminueza/terraform-provider-minio/releases/tag/v1.19.0) [Compare Source](aminueza/terraform-provider-minio@v1.18.3...v1.19.0) Changes on this Release: - Update crazy-max/ghaction-import-gpg action to v6 ([#516](aminueza/terraform-provider-minio#516)) - Handle empty service account policy ([#518](aminueza/terraform-provider-minio#518)) - Update repository URL ([#520](aminueza/terraform-provider-minio#520)) - Destroy object versions on bucket force_destroy ([#524](aminueza/terraform-provider-minio#524)) - Add Noncurrent Version expiration to ilm policy ([#526](aminueza/terraform-provider-minio#526)) **Full Changelog**: aminueza/terraform-provider-minio@v1.18.0...v1.19.0 > **Note** > This release replaces v1.18.1 and v1.18.2, which are unavailable on https://registry.terraform.io/providers/aminueza/minio as they were built with an outdated GPG key. It also replaces v1.18.3, which couldn't be installed due the issue [#531](aminueza/terraform-provider-minio#531). </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).  Reviewed-on: https://gitea.eevans.me/shosti/eevans-infra/pulls/10 Co-authored-by: Renovate Bot <[email protected]> Co-committed-by: Renovate Bot <[email protected]>

dependabot bot added the dependencies Pull requests that update a dependency file label Oct 26, 2023

felladrin approved these changes Oct 31, 2023

View reviewed changes

felladrin merged commit 5fa1a1b into master Nov 1, 2023
2 checks passed

felladrin deleted the dependabot/go_modules/google.golang.org/grpc-1.58.3 branch November 1, 2023 20:44

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump google.golang.org/grpc from 1.58.0 to 1.58.3 #535

Bump google.golang.org/grpc from 1.58.0 to 1.58.3 #535

dependabot bot commented on behalf of github Oct 26, 2023

Bump google.golang.org/grpc from 1.58.0 to 1.58.3 #535

Bump google.golang.org/grpc from 1.58.0 to 1.58.3 #535

Conversation

dependabot bot commented on behalf of github Oct 26, 2023

Release 1.58.3

Security

Release 1.58.2

Bug Fixes

Release 1.58.1

Bug Fixes