deps: update dependency io.grpc:grpc-bom to v1.36.0 - autoclosed

[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
io.grpc:grpc-bom	1.34.1 -> 1.36.0

---

Release Notes

grpc/grpc-java

v1.36.0

Compare Source

API Changes

• Added .class file hack to ease removal of internal ABIs (#​7834). This does not impact source code (API); it only impacts code compiled with a different version of gRPC than it runs with (ABI). Users of the transport-specific and experimental channel/server builders (NettyChannelBuilder, NettyServerBuilder, OkHttpChannelBuilder, InProcessChannelBuilder, CronetChannelBuilder) are commonly referencing internal ABIs due to overly-specific generics in gRPC. There is now a .class file hack in place which preserves ABI compatibility for old builds while causing javac to use the intended public API for new builds. In a future release we will remove the internal ABI for these experimental APIs (#​7211) which may cause runtime failures. Recompiling with this release or later will prevent your code from using those ABIs and so you will not be impacted by the ABI removal. This is related to the temporary ABI breakage in v1.33.0.
• Deleted deprecated LoadBalancer.Helper APIs as they had been deprecated since v1.22 release (#​7793).
• Deprecated LoadBalancer.Helper.createResolvingOobChannelBuilder(String target) in favor of the new experimental API createResolvingOobChannelBuilder(String target, ChannelCredentials creds). The two APIs differ not only in signature but also in the default authority of the returned builder. See their javadoc for more detail.

Behavior Changes

• ManagedChannelBuilder.overrideAuthority() is now used even if the NameResolver uses EquivalentAddressGroup.ATTR_AUTHORITY_OVERRIDE. Previously the NameResolver’s override would be used
• grpclb: keep RR Subchannel state in TRANSIENT_FAILURE until becoming READY (#​7816). This enhancement was previously made to the round_robin policy, but now also applies to grpclb
• netty: On server-side, stop logging expected STREAM_CLOSED exceptions. This reduces log pollution

New Features

• services: Add support for grpc.channelz.v1.Channelz.GetServer, as defined in channelz.proto
• xds: support reading bootstrap config directly from env var (GRPC_XDS_BOOTSTRAP_CONFIG) or system property (io.grpc.xds.bootstrapValue) values
• alts: Introduce AltsContext to allow outside packages access to ALTS peer information

Bug Fixes

• core: Fixed a bug where RPCs queued waiting for a connection can use user-provided executors after the ManagedChannel is terminated (#​6283)
• core: Fixed a bug where RPCs queued waiting on CallCredentials can use user-provided executors after the ManagedChannel is terminated (#​7813)

Documentation

• api: add nullable annotation to Status.trailersFromThrowable (#​7856). The annotation doesn’t change behavior, it just makes the behavior more clear

Dependencies

• alts: Remove dependency on Apache Commons Lang

Acknowledgements

@​elharo Elliotte Rusty Harold
@​lriuui0x0 Rui Liu
@​martin-schaub Martin Schaub
@​njhill Nick Hill
@​ReginFell Serhii Zabelnykov

v1.35.0

Compare Source

Bug Fixes

• core: Fix CompositeChannelCredentials to no longer use CallCredentials for OOB channels. OOB channels are available for load balancing policies to use to communicate with an LB server. It is mainly used by gRPC-LB. This resolves the incompatibility of the 1.34.0 release with googleapis.com.
• alts: Limit number of concurrent handshakes to 32. ALTS uses blocking RPCs for handshakes. If the handshake server has a limit to number of concurrent handshakes this can produce a deadlock. Limiting to 32 should workaround the problem for the majority of the cases. A later fix will allow handshake RPCs to be asynchronous
• xds: Fix missed class relocations for generated code. grpc-xds previously exposed generated code for multiple 3rd-party protobuf generated code classes outside of the io.grpc package. They are now shaded to avoid colliding with other users of the classes
• xds: Fix a user visible stack trace showing java.util.NoSuchElementException when the environment variable GRPC_XDS_EXPERIMENTAL_SECURITY_SUPPORT was set and the application contains an xDS configured gRPC server. The exception was benign and was seen when the connection was dropped before an SslContextProvider was available.
• xds: decouple xds channel creation and bootstrapping. This fixes the bug caused by the lifecycle mismatch between XdsClient and its channel to the xDS server. Cheating a new XdsClient (previous one shutdown due to no Channel using it) would create and use a new xDS channel.

Dependencies

• Guava updated to 30.0-android
• Animal Sniffer annotations updated to 1.19
• Error Prone annotations updated to 2.4.0
• Perfmark updated to 0.23.0
• compiler: Linux artifacts now built using CentOS 7. Previously CentOS 6 was used, but that distribution is discontinued and no longer available in our build infrastructure
• netty: Upgrade to Netty 4.1.52 and tcnative 2.0.34. Note that this Netty release enables TLSv1.3 support. mTLS failures with TLSv1.3 will have different error messages than in TLSv1.2
• auth,alts: google-auth-library-java updated to 0.22.2
• census: OpenCensus updated to 0.28.0
• protobuf: googleapi’s common protos updated to 2.0.1
• okhttp: Okio updated to 1.17.5
• xds: re2j updated to 1.5
• xds: bouncycastle updated to 1.67
• gradle: bumped protobuf-gradle-plugin version to 0.8.14
• android, cronet: upgraded the latest support Android version to 29

Acknowledgments

@​amnox
@​horizonzy
@​wanyingd1996

---

Renovate configuration

📅 Schedule: At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by WhiteSource Renovate. View repository job log here.

[codecov]

Codecov Report

Merging #356 (b51abf5) into master (6e03ce5) will not change coverage.
The diff coverage is n/a.

@@ Coverage Diff @@## master #356 +/- ##
=========================================
Coverage 67.74% 67.74% Complexity 384 384 =========================================
Files 36 36 Lines 1981 1981 Branches 267 267 =========================================
Hits 1342 1342 Misses 531 531 Partials 108 108 

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 6e03ce5...56bb0f2. Read the comment docs.

[gcf-merge-on-green]

Merge-on-green attempted to merge your PR for 6 hours, but it was not mergeable because either one of your required status checks failed, one of your required reviews was not approved, or there is a do not merge label. Learn more about your required status checks here: https://help.github.com/en/github/administering-a-repository/enabling-required-status-checks. You can remove and reapply the label to re-run the bot.