chore(deps): bump the version-updates group with 14 updates by dependabot[bot] · Pull Request #116 · qdrant/java-client

dependabot · 2026-06-06T10:55:27Z

Bumps the version-updates group with 14 updates:

Package	From	To
com.uber.nullaway:nullaway	`0.10.18`	`0.13.6`
io.grpc:grpc-protobuf	`1.75.0`	`1.81.0`
io.grpc:grpc-stub	`1.75.0`	`1.81.0`
io.grpc:grpc-netty-shaded	`1.75.0`	`1.81.0`
io.grpc:grpc-testing	`1.75.0`	`1.81.0`
io.grpc:protoc-gen-grpc-java	`1.75.0`	`1.81.0`
org.slf4j:slf4j-api	`2.0.14`	`2.0.18`
org.slf4j:slf4j-nop	`2.0.14`	`2.0.18`
com.google.errorprone:error_prone_core	`2.29.2`	`2.49.0`
org.testcontainers:qdrant	`1.20.1`	`1.21.4`
org.testcontainers:junit-jupiter	`1.20.1`	`1.21.4`
com.google.protobuf	`0.9.4`	`0.10.0`
org.ajoberstar.grgit:grgit-gradle	`5.0.0`	`5.3.3`
org.apache.commons:commons-compress	`1.23.0`	`1.28.0`

Updates com.uber.nullaway:nullaway from 0.10.18 to 0.13.6

Release notes

Sourced from com.uber.nullaway:nullaway's releases.

NullAway 0.13.6

(NOTE: originally these notes appeared with the 0.13.5 release, but that release was pushed incorrectly due to an error in our release process.)

Includes various bug fixes, particularly in JSpecify mode. Also, the nullaway-annotations artifact now includes a @Contract annotation. NullAway also now has a built-in handler to reason about field initialization in classes managed by Jakarta Persistence.

Work has begun on support for wildcards in JSpecify mode. Currently, this support is off by default, guarded by the configuration flag HandleWildcardGenerics. The support still has multiple known bugs, and we do not yet recommend enabling it.

Initial subtype checking for wildcards (#1520)

Handle subtype checking for wildcard super bounds (#1547)

Handle most remaining wildcard subtyping / containment cases (#1548)

Test case for #1528 (#1556)

Initial inference for wildcards (#1549)

Fix wildcard inference bug with method references (#1553)

Fix nullability for return and parameter wildcards (#1558)

Test case for trick to assert chain of accesses is non-null (#1566)

Improve inference failure error message (#1567)

Adjust more TreePaths to have correct leaf before calling getTreeType (#1570)

Add Contract annotation to nullaway-annotations by @codingkiddo (#1569)

Run inference for generic method calls nested inside receivers (#1571)

Refactor hasAnyAnnotationMatching method (#1583)

Improve handling of var-declared local variables (#1573)

Compensate for more annotations inserted by javac (#1574)

Enable test for issue 1500 and add comment (#1560)

Use ground target types when handling lambdas and method refs passed to generic methods (#1575)

Fix for unbounded wildcard passed to @NullUnmarked type variable (#1577)

Detect and warn on annotations directly on wildcard types (#1579)

Enable HandleWildcardGenerics flag when building NullAway (#1586)

Report error when @Initializer is used on a constructor by @Vinu2111 (#1546)

Add a handler for Jakarta Persistence to reason about field initialization (#1584)

Revert "Report error when @Initializer is used on a constructor (#1546)" (#1588)

Maintenance

Use Jacoco 0.8.15 snapshot (#1550)

Update to Gradle 9.5.0 (#1554)

Test with latest Error Prone snapshot on CI (#1555)

Add Spring Boot as an integration test (#1557)

Enable generic bytecode tests on JDK 17 (#1561)

Update spotless and guava-latest deps, removed unused semver4j (#1562)

Use text blocks in more tests (#1563)

Use text blocks for addInputLines and addOutputLines calls (#1564)

Use Temurin JDK 17 always in CI (#1565)

Tell agents not to run multiple Gradle builds in parallel (#1582)

Update Codecov action to v6 (#1587)

NullAway 0.13.5

DO NOT USE THIS RELEASE. It was pushed incorrectly due to an error in our release process.

... (truncated)

Changelog

Sourced from com.uber.nullaway:nullaway's changelog.

Version 0.13.6

(NOTE: originally these notes appeared with the 0.13.5 release, but that release was pushed incorrectly due to an error in our release process.)

Includes various bug fixes, particularly in JSpecify mode. Also, the nullaway-annotations artifact now includes a @Contract annotation. NullAway also now has a built-in handler to reason about field initialization in classes managed by Jakarta Persistence.

Work has begun on support for wildcards in JSpecify mode. Currently, this support is off by default, guarded by the configuration flag HandleWildcardGenerics. The support still has multiple known bugs, and we do not yet recommend enabling it.

Initial subtype checking for wildcards (#1520)

Handle subtype checking for wildcard super bounds (#1547)

Handle most remaining wildcard subtyping / containment cases (#1548)

Test case for #1528 (#1556)

Initial inference for wildcards (#1549)

Fix wildcard inference bug with method references (#1553)

Fix nullability for return and parameter wildcards (#1558)

Test case for trick to assert chain of accesses is non-null (#1566)

Improve inference failure error message (#1567)

Adjust more TreePaths to have correct leaf before calling getTreeType (#1570)

Add Contract annotation to nullaway-annotations by @codingkiddo (#1569)

Run inference for generic method calls nested inside receivers (#1571)

Refactor hasAnyAnnotationMatching method (#1583)

Improve handling of var-declared local variables (#1573)

Compensate for more annotations inserted by javac (#1574)

Enable test for issue 1500 and add comment (#1560)

Use ground target types when handling lambdas and method refs passed to generic methods (#1575)

Fix for unbounded wildcard passed to @NullUnmarked type variable (#1577)

Detect and warn on annotations directly on wildcard types (#1579)

Enable HandleWildcardGenerics flag when building NullAway (#1586)

Report error when @Initializer is used on a constructor by @Vinu2111 (#1546)

Add a handler for Jakarta Persistence to reason about field initialization (#1584)

Revert "Report error when @Initializer is used on a constructor (#1546)" (#1588)

Maintenance

Use Jacoco 0.8.15 snapshot (#1550)

Update to Gradle 9.5.0 (#1554)

Test with latest Error Prone snapshot on CI (#1555)

Add Spring Boot as an integration test (#1557)

Enable generic bytecode tests on JDK 17 (#1561)

Update spotless and guava-latest deps, removed unused semver4j (#1562)

Use text blocks in more tests (#1563)

Use text blocks for addInputLines and addOutputLines calls (#1564)

Use Temurin JDK 17 always in CI (#1565)

Tell agents not to run multiple Gradle builds in parallel (#1582)

Update Codecov action to v6 (#1587)

... (truncated)

Commits

fa850b5 Prepare for release 0.13.6.
e188182 Notes for 0.13.6 release (#1592)
c09d202 Add 0.13.5 release notes to changelog (#1589)
d9d0392 Revert "Report error when @Initializer is used on a constructor (#1546)" (#1588)
ec978b9 Update Codecov action to v6 (#1587)
69ba115 Add a handler for Jakarta Persistence to reason about field initialization (#...
661f374 Report error when @Initializer is used on a constructor (#1546)
f790ac9 Enable HandleWildcardGenerics flag when building NullAway (#1586)
31b14ce Detect and warn on annotations directly on wildcard types (#1579)
c183d49 Fix for unbounded wildcard passed to @NullUnmarked type variable (#1577)
Additional commits viewable in compare view

Updates io.grpc:grpc-protobuf from 1.75.0 to 1.81.0

Release notes

Sourced from io.grpc:grpc-protobuf's releases.

V1.81.0

In this release we drop support for Android API level 22 or lower (Lollipop or earlier), following Google Play Service’s discontinued updates for Lollipop (API levels 21 & 22) and now requires a minimum of API level 23 (Android 6.0 Marshmallow).

API Changes

api: Deprecate LoadBalancer.handleResolvedAddresses(). Developers maintaining custom LoadBalancer implementations should transition to using LoadBalancer.acceptResolvedAddresses(). Unlike the deprecated method, acceptResolvedAddresses() returns a Status object, allowing the load balancer to explicitly report success or reject the update if the provided addresses or configuration are invalid. (#11623)

Behavior Changes

core: Enable dns "caching" on Android for 30 seconds to reduce CPU impact of a refresh loop with an LB policy (0675f70af). DnsNameResolver ignores re-resolution requests on OpenJDK-like platforms if it has been too soon since the last DNS query because InetAddress.getAllByName() has a cache with a fixed entry lifetime, but this logic was disabled for Android which does not have that style of cache. Android’s cache uses the result TTL, which will rarely be less than 30 seconds. This change would probably be most noticeable when 1) changing to a different network (e.g., from wifi to mobile), 2) the server has different addresses for different networks, and 3) the app is not using AndroidChannelBuilder with an android.context.Context. For reference, it seems Chrome caches for 1 minute

Bug Fixes

opentelemetry: Fix baggage propagation, the baggage propagation for opentelemetry introduced in #12389 was broken. The context is decided once and used for all recording for the call, thus guaranteeing all record()s have consistent information.

core: Address a race condition where ManagedChannelOrphanWrapper could incorrectly log a "not shutdown properly" warning during garbage collection when using directExecutor(). (#12705) (d459338d9)

xds: Fix xDS HTTP CONNECT's transport socket name bug which is now corrected to use typeUrl. (#12740) (eac9fe961)

xds: Fix an issue where subchannel metrics were dropping their association with the backend_service. This ensures xDS load balancing metrics are reported accurately. (#12735)

New Features

netty: Add tcp metrics, by implementing a few of the metrics defined in A80.

api: Add a CallOption for a custom label on per-RPC metrics (0e39b2967). This CallOption is copied by grpc-opentelemetry to the grpc.client.call.custom label as defined by gRFC A108. See also the gRPC OpenTelemetry Metrics guide (update in-progress)

xds: Add support for Weighted Round Robin (WRR) load balancing driven by custom backend metrics, implementing the behavior defined in gRFC A114. (#12645)

utils: Update AdvancedTlsX509KeyManager so that developers can now preserve and use key aliases when dynamically reloading TLS certificates. (#12686)

Documentation

Update the "Outgoing Flow Control" section in the Manual Flow Control example to say onNext() does not block, but rather queues the messages in memory and advises developers to use CallStreamObserver.isReady() to prevent this memory exhaustion (#12700) (a3a9ffcbe) (#12726) (65ae2efda)

examples: Clean up Health example, and document need for grpc-services (3ed732fc0)

Dependencies

Upgrade Dependencies (#12719) (16e17abba). Google-auth-library: 1.42.1, animal-sniffer: 1.27, assertj-core:3.27.7, error_prone_annotations:2.48.0, proto-google-common-protos:2.64.1, google-cloud-logging:3.23.10, jetty-http2-server:12.1.7, jetty-ee10-servlet:12.1.7, lincheck:3.4, opentelemetry-api:1.60.1, opentelemetry-exporter-prometheus:1.60.1-alpha, opentelemetry-gcp-resources:1.54.0-alpha, opentelemetry-sdk-extension-autoconfigure:1.60.1, opentelemetry-sdk-testing:1.60.1, robolectric:4.16.1, tomcat-embed-core:10.1.52, tomcat-embed-core9: 9.0.115,

Upgrade Netty to 4.1.132 and netty-tcnative to 2.0.75 (1528f809c)

Thanks to

@becomeStar

@benjaminp

@JoeCqupt

@Kainsin

@merlimat

@SreeramdasLavanya

@themechbro

@zhangweikop

V1.80.0

API Changes

core: Added PickResult.copyWithSubchannel() and PickResult.copyWithStreamTracerFactory() to simplify updating PickResult while preserving metadata. Load balancing policies should now ensure ForwardingSubchannel decorators are unwrapped before being returned in a pick result. (#12658) (eae16b251)

... (truncated)

Commits

6951542 Bump version to 1.81.0
e94188e Update README etc to reference 1.81.0
4813c6d core,xds: Fix backend_service plumbing for subchannel metrics (#12735)
6737eb5 Revert "Replace javax ThreadSafe annotation with errorprone ThreadSafe (#1274...
ef35313 Replace javax ThreadSafe annotation with errorprone ThreadSafe (#12742)
3ed732f examples: Clean up Health, and document need for grpc-services
eac9fe9 xds: fix xDS HTTP CONNECT's transport socket name bug (#12740)
1528f80 Upgrade Netty to 4.1.132 and netty-tcnative to 2.0.75
d057a7e [xds] Implement A114: WRR support for custom backend metrics (#12645)
842636f xds: Add configuration objects for ExtAuthz, GrpcService and Bootstrap change...
Additional commits viewable in compare view

Updates io.grpc:grpc-stub from 1.75.0 to 1.81.0

Release notes

Sourced from io.grpc:grpc-stub's releases.

V1.81.0

In this release we drop support for Android API level 22 or lower (Lollipop or earlier), following Google Play Service’s discontinued updates for Lollipop (API levels 21 & 22) and now requires a minimum of API level 23 (Android 6.0 Marshmallow).

API Changes

api: Deprecate LoadBalancer.handleResolvedAddresses(). Developers maintaining custom LoadBalancer implementations should transition to using LoadBalancer.acceptResolvedAddresses(). Unlike the deprecated method, acceptResolvedAddresses() returns a Status object, allowing the load balancer to explicitly report success or reject the update if the provided addresses or configuration are invalid. (#11623)

Behavior Changes

core: Enable dns "caching" on Android for 30 seconds to reduce CPU impact of a refresh loop with an LB policy (0675f70af). DnsNameResolver ignores re-resolution requests on OpenJDK-like platforms if it has been too soon since the last DNS query because InetAddress.getAllByName() has a cache with a fixed entry lifetime, but this logic was disabled for Android which does not have that style of cache. Android’s cache uses the result TTL, which will rarely be less than 30 seconds. This change would probably be most noticeable when 1) changing to a different network (e.g., from wifi to mobile), 2) the server has different addresses for different networks, and 3) the app is not using AndroidChannelBuilder with an android.context.Context. For reference, it seems Chrome caches for 1 minute

Bug Fixes

opentelemetry: Fix baggage propagation, the baggage propagation for opentelemetry introduced in #12389 was broken. The context is decided once and used for all recording for the call, thus guaranteeing all record()s have consistent information.

core: Address a race condition where ManagedChannelOrphanWrapper could incorrectly log a "not shutdown properly" warning during garbage collection when using directExecutor(). (#12705) (d459338d9)

xds: Fix xDS HTTP CONNECT's transport socket name bug which is now corrected to use typeUrl. (#12740) (eac9fe961)

xds: Fix an issue where subchannel metrics were dropping their association with the backend_service. This ensures xDS load balancing metrics are reported accurately. (#12735)

New Features

netty: Add tcp metrics, by implementing a few of the metrics defined in A80.

api: Add a CallOption for a custom label on per-RPC metrics (0e39b2967). This CallOption is copied by grpc-opentelemetry to the grpc.client.call.custom label as defined by gRFC A108. See also the gRPC OpenTelemetry Metrics guide (update in-progress)

xds: Add support for Weighted Round Robin (WRR) load balancing driven by custom backend metrics, implementing the behavior defined in gRFC A114. (#12645)

utils: Update AdvancedTlsX509KeyManager so that developers can now preserve and use key aliases when dynamically reloading TLS certificates. (#12686)

Documentation

Update the "Outgoing Flow Control" section in the Manual Flow Control example to say onNext() does not block, but rather queues the messages in memory and advises developers to use CallStreamObserver.isReady() to prevent this memory exhaustion (#12700) (a3a9ffcbe) (#12726) (65ae2efda)

examples: Clean up Health example, and document need for grpc-services (3ed732fc0)

Dependencies

Upgrade Dependencies (#12719) (16e17abba). Google-auth-library: 1.42.1, animal-sniffer: 1.27, assertj-core:3.27.7, error_prone_annotations:2.48.0, proto-google-common-protos:2.64.1, google-cloud-logging:3.23.10, jetty-http2-server:12.1.7, jetty-ee10-servlet:12.1.7, lincheck:3.4, opentelemetry-api:1.60.1, opentelemetry-exporter-prometheus:1.60.1-alpha, opentelemetry-gcp-resources:1.54.0-alpha, opentelemetry-sdk-extension-autoconfigure:1.60.1, opentelemetry-sdk-testing:1.60.1, robolectric:4.16.1, tomcat-embed-core:10.1.52, tomcat-embed-core9: 9.0.115,

Upgrade Netty to 4.1.132 and netty-tcnative to 2.0.75 (1528f809c)

Thanks to

@becomeStar

@benjaminp

@JoeCqupt

@Kainsin

@merlimat

@SreeramdasLavanya

@themechbro

@zhangweikop

V1.80.0

API Changes

core: Added PickResult.copyWithSubchannel() and PickResult.copyWithStreamTracerFactory() to simplify updating PickResult while preserving metadata. Load balancing policies should now ensure ForwardingSubchannel decorators are unwrapped before being returned in a pick result. (#12658) (eae16b251)

... (truncated)

Commits

6951542 Bump version to 1.81.0
e94188e Update README etc to reference 1.81.0
4813c6d core,xds: Fix backend_service plumbing for subchannel metrics (#12735)
6737eb5 Revert "Replace javax ThreadSafe annotation with errorprone ThreadSafe (#1274...
ef35313 Replace javax ThreadSafe annotation with errorprone ThreadSafe (#12742)
3ed732f examples: Clean up Health, and document need for grpc-services
eac9fe9 xds: fix xDS HTTP CONNECT's transport socket name bug (#12740)
1528f80 Upgrade Netty to 4.1.132 and netty-tcnative to 2.0.75
d057a7e [xds] Implement A114: WRR support for custom backend metrics (#12645)
842636f xds: Add configuration objects for ExtAuthz, GrpcService and Bootstrap change...
Additional commits viewable in compare view

Updates io.grpc:grpc-netty-shaded from 1.75.0 to 1.81.0

Release notes

Sourced from io.grpc:grpc-netty-shaded's releases.

V1.81.0

In this release we drop support for Android API level 22 or lower (Lollipop or earlier), following Google Play Service’s discontinued updates for Lollipop (API levels 21 & 22) and now requires a minimum of API level 23 (Android 6.0 Marshmallow).

API Changes

api: Deprecate LoadBalancer.handleResolvedAddresses(). Developers maintaining custom LoadBalancer implementations should transition to using LoadBalancer.acceptResolvedAddresses(). Unlike the deprecated method, acceptResolvedAddresses() returns a Status object, allowing the load balancer to explicitly report success or reject the update if the provided addresses or configuration are invalid. (#11623)

Behavior Changes

core: Enable dns "caching" on Android for 30 seconds to reduce CPU impact of a refresh loop with an LB policy (0675f70af). DnsNameResolver ignores re-resolution requests on OpenJDK-like platforms if it has been too soon since the last DNS query because InetAddress.getAllByName() has a cache with a fixed entry lifetime, but this logic was disabled for Android which does not have that style of cache. Android’s cache uses the result TTL, which will rarely be less than 30 seconds. This change would probably be most noticeable when 1) changing to a different network (e.g., from wifi to mobile), 2) the server has different addresses for different networks, and 3) the app is not using AndroidChannelBuilder with an android.context.Context. For reference, it seems Chrome caches for 1 minute

Bug Fixes

opentelemetry: Fix baggage propagation, the baggage propagation for opentelemetry introduced in #12389 was broken. The context is decided once and used for all recording for the call, thus guaranteeing all record()s have consistent information.

core: Address a race condition where ManagedChannelOrphanWrapper could incorrectly log a "not shutdown properly" warning during garbage collection when using directExecutor(). (#12705) (d459338d9)

xds: Fix xDS HTTP CONNECT's transport socket name bug which is now corrected to use typeUrl. (#12740) (eac9fe961)

xds: Fix an issue where subchannel metrics were dropping their association with the backend_service. This ensures xDS load balancing metrics are reported accurately. (#12735)

New Features

netty: Add tcp metrics, by implementing a few of the metrics defined in A80.

api: Add a CallOption for a custom label on per-RPC metrics (0e39b2967). This CallOption is copied by grpc-opentelemetry to the grpc.client.call.custom label as defined by gRFC A108. See also the gRPC OpenTelemetry Metrics guide (update in-progress)

xds: Add support for Weighted Round Robin (WRR) load balancing driven by custom backend metrics, implementing the behavior defined in gRFC A114. (#12645)

utils: Update AdvancedTlsX509KeyManager so that developers can now preserve and use key aliases when dynamically reloading TLS certificates. (#12686)

Documentation

Update the "Outgoing Flow Control" section in the Manual Flow Control example to say onNext() does not block, but rather queues the messages in memory and advises developers to use CallStreamObserver.isReady() to prevent this memory exhaustion (#12700) (a3a9ffcbe) (#12726) (65ae2efda)

examples: Clean up Health example, and document need for grpc-services (3ed732fc0)

Dependencies

Upgrade Dependencies (#12719) (16e17abba). Google-auth-library: 1.42.1, animal-sniffer: 1.27, assertj-core:3.27.7, error_prone_annotations:2.48.0, proto-google-common-protos:2.64.1, google-cloud-logging:3.23.10, jetty-http2-server:12.1.7, jetty-ee10-servlet:12.1.7, lincheck:3.4, opentelemetry-api:1.60.1, opentelemetry-exporter-prometheus:1.60.1-alpha, opentelemetry-gcp-resources:1.54.0-alpha, opentelemetry-sdk-extension-autoconfigure:1.60.1, opentelemetry-sdk-testing:1.60.1, robolectric:4.16.1, tomcat-embed-core:10.1.52, tomcat-embed-core9: 9.0.115,

Upgrade Netty to 4.1.132 and netty-tcnative to 2.0.75 (1528f809c)

Thanks to

@becomeStar

@benjaminp

@JoeCqupt

@Kainsin

@merlimat

@SreeramdasLavanya

@themechbro

@zhangweikop

V1.80.0

API Changes

core: Added PickResult.copyWithSubchannel() and PickResult.copyWithStreamTracerFactory() to simplify updating PickResult while preserving metadata. Load balancing policies should now ensure ForwardingSubchannel decorators are unwrapped before being returned in a pick result. (#12658) (eae16b251)

... (truncated)

Commits

6951542 Bump version to 1.81.0
e94188e Update README etc to reference 1.81.0
4813c6d core,xds: Fix backend_service plumbing for subchannel metrics (#12735)
6737eb5 Revert "Replace javax ThreadSafe annotation with errorprone ThreadSafe (#1274...
ef35313 Replace javax ThreadSafe annotation with errorprone ThreadSafe (#12742)
3ed732f examples: Clean up Health, and document need for grpc-services
eac9fe9 xds: fix xDS HTTP CONNECT's transport socket name bug (#12740)
1528f80 Upgrade Netty to 4.1.132 and netty-tcnative to 2.0.75
d057a7e [xds] Implement A114: WRR support for custom backend metrics (#12645)
842636f xds: Add configuration objects for ExtAuthz, GrpcService and Bootstrap change...
Additional commits viewable in compare view

Updates io.grpc:grpc-testing from 1.75.0 to 1.81.0

Release notes

Sourced from io.grpc:grpc-testing's releases.

V1.81.0

In this release we drop support for Android API level 22 or lower (Lollipop or earlier), following Google Play Service’s discontinued updates for Lollipop (API levels 21 & 22) and now requires a minimum of API level 23 (Android 6.0 Marshmallow).

API Changes

api: Deprecate LoadBalancer.handleResolvedAddresses(). Developers maintaining custom LoadBalancer implementations should transition to using LoadBalancer.acceptResolvedAddresses(). Unlike the deprecated method, acceptResolvedAddresses() returns a Status object, allowing the load balancer to explicitly report success or reject the update if the provided addresses or configuration are invalid. (#11623)

Behavior Changes

core: Enable dns "caching" on Android for 30 seconds to reduce CPU impact of a refresh loop with an LB policy (0675f70af). DnsNameResolver ignores re-resolution requests on OpenJDK-like platforms if it has been too soon since the last DNS query because InetAddress.getAllByName() has a cache with a fixed entry lifetime, but this logic was disabled for Android which does not have that style of cache. Android’s cache uses the result TTL, which will rarely be less than 30 seconds. This change would probably be most noticeable when 1) changing to a different network (e.g., from wifi to mobile), 2) the server has different addresses for different networks, and 3) the app is not using AndroidChannelBuilder with an android.context.Context. For reference, it seems Chrome caches for 1 minute

Bug Fixes

opentelemetry: Fix baggage propagation, the baggage propagation for opentelemetry introduced in #12389 was broken. The context is decided once and used for all recording for the call, thus guaranteeing all record()s have consistent information.

core: Address a race condition where ManagedChannelOrphanWrapper could incorrectly log a "not shutdown properly" warning during garbage collection when using directExecutor(). (#12705) (d459338d9)

xds: Fix xDS HTTP CONNECT's transport socket name bug which is now corrected to use typeUrl. (#12740) (eac9fe961)

xds: Fix an issue where subchannel metrics were dropping their association with the backend_service. This ensures xDS load balancing metrics are reported accurately. (#12735)

New Features

netty: Add tcp metrics, by implementing a few of the metrics defined in A80.

api: Add a CallOption for a custom label on per-RPC metrics (0e39b2967). This CallOption is copied by grpc-opentelemetry to the grpc.client.call.custom label as defined by gRFC A108. See also the gRPC OpenTelemetry Metrics guide (update in-progress)

xds: Add support for Weighted Round Robin (WRR) load balancing driven by custom backend metrics, implementing the behavior defined in gRFC A114. (#12645)

utils: Update AdvancedTlsX509KeyManager so that developers can now preserve and use key aliases when dynamically reloading TLS certificates. (#12686)

Documentation

Update the "Outgoing Flow Control" section in the Manual Flow Control example to say onNext() does not block, but rather queues the messages in memory and advises developers to use CallStreamObserver.isReady() to prevent this memory exhaustion (#12700) (a3a9ffcbe) (#12726) (65ae2efda)

examples: Clean up Health example, and document need for grpc-services (3ed732fc0)

Dependencies

Upgrade Dependencies (#12719) (16e17abba). Google-auth-library: 1.42.1, animal-sniffer: 1.27, assertj-core:3.27.7, error_prone_annotations:2.48.0, proto-google-common-protos:2.64.1, google-cloud-logging:3.23.10, jetty-http2-server:12.1.7, jetty-ee10-servlet:12.1.7, lincheck:3.4, opentelemetry-api:1.60.1, opentelemetry-exporter-prometheus:1.60.1-alpha, opentelemetry-gcp-resources:1.54.0-alpha, opentelemetry-sdk-extension-autoconfigure:1.60.1, opentelemetry-sdk-testing:1.60.1, robolectric:4.16.1, tomcat-embed-core:10.1.52, tomcat-embed-core9: 9.0.115,

Upgrade Netty to 4.1.132 and netty-tcnative to 2.0.75 (1528f809c)

Thanks to

@becomeStar

@benjaminp

@JoeCqupt

@Kainsin

@merlimat

@SreeramdasLavanya

@themechbro

@zhangweikop

V1.80.0

API Changes

core: Added PickResult.copyWithSubchannel() and PickResult.copyWithStreamTracerFactory() to simplify updating PickResult while preserving metadata. Load balancing policies should now ensure ForwardingSubchannel decorators are unwrapped before being returned in a pick result. (#12658) (eae16b251)

... (truncated)

Commits

6951542 Bump version to 1.81.0
e94188e Update README etc to reference 1.81.0
4813c6d core,xds: Fix backend_service plumbing for subchannel metrics (#12735)
6737eb5 Revert "Replace javax ThreadSafe annotation with errorprone ThreadSafe (#1274...
ef35313 Replace javax ThreadSafe annotation with errorprone ThreadSafe (#12742)
3ed732f examples: Clean up Health, and document need for grpc-services
eac9fe9 xds: fix xDS HTTP CONNECT's transport socket name bug (#12740)
1528f80 Upgrade Netty to 4.1.132 and netty-tcnative to 2.0.75
d057a7e [xds] Implement A114: WRR support for custom backend metrics (#12645)
842636f xds: Add configuration objects for ExtAuthz, GrpcService and Bootstrap change...
Additional commits viewable in compare view

Updates io.grpc:protoc-gen-grpc-java from 1.75.0 to 1.81.0

Release notes

Sourced from io.grpc:protoc-gen-grpc-java's releases.

V1.81.0

In this release we drop support for Android API level 22 or lower (Lollipop or earlier), following Google Play Service’s discontinued updates for Lollipop (API levels 21 & 22) and now requires a minimum of API level 23 (Android 6.0 Marshmallow).

API Changes

api: Deprecate LoadBalancer.handleResolvedAddresses(). Developers maintaining custom LoadBalancer implementations should transition to using LoadBalancer.acceptResolvedAddresses(). Unlike the deprecated method, acceptResolvedAddresses() returns a Status object, allowing the load balancer to explicitly report success or reject the update if the provided addresses or configuration are invalid. (#11623)

Behavior Changes

core: Enable dns "caching" on Android for 30 seconds to reduce CPU impact of a refresh loop with an LB policy (0675f70af). DnsNameResolver ignores re-resolution requests on OpenJDK-like platforms if it has been too soon since the last DNS query because InetAddress.getAllByName() has a cache with a fixed entry lifetime, but this logic was disabled for Android which does not have that style of cache. Android’s cache uses the result TTL, which will rarely be less than 30 seconds. This change would probably be most noticeable when 1) changing to a different network (e.g., from wifi to mobile), 2) the server has different addresses for different networks, and 3) the app is not using AndroidChannelBuilder with an android.context.Context. For reference, it seems Chrome caches for 1 minute

Bug Fixes

opentelemetry: Fix baggage propagation, the baggage propagation for opentelemetry introduced in #12389 was broken. The context is decided once and used for all recording for the call, thus guaranteeing all record()s have consistent information.

core: Address a race condition where ManagedChannelOrphanWrapper could incorrectly log a "not shutdown properly" warning during garbage collection when using directExecutor(). (#12705) (d459338d9)

xds: Fix xDS HTTP CONNECT's transport socket name bug which is now corrected to use typeUrl. (#12740) (eac9fe961)

xds: Fix an issue where subchannel metrics were dropping their association with the backend_service. This ensures xDS load balancing metrics are reported accurately. (#12735)

New Features

netty: Add tcp metrics, by implementing a few of the metrics defined in A80.

api: Add a CallOption for a custom label on per-RPC metrics (0e39b2967). This CallOption is copied by grpc-opentelemetry to the grpc.client.call.custom label as defined by gRFC A108. See also the gRPC OpenTelemetry Metrics guide (update in-progress)

xds: Add support for Weighted Round Robin (WRR) load balancing driven by custom backend metrics, implementing the behavior defined in gRFC A114. (#12645)

utils: Update AdvancedTlsX509KeyManager so that developers can now preserve and use key aliases when dynamically reloading TLS certificates. (#12686)

Documentation

Update the "Outgoing Flow Control" section in the Manual Flow Control example to say onNext() does not block, but rather queues the messages in memory and advises developers to use CallStreamObserver.isReady() to prevent this memory exhaustion (#12700) (a3a9ffcbe) (#12726) (65ae2efda)

examples: Clean up Health example, and document need for grpc-services (3ed732fc0)

Dependencies

Upgrade Dependencies (#12719) (16e17abba). Google-auth-library: 1.42.1, animal-sniffer: 1.27, assertj-core:3.27.7, error_prone_annotations:2.48.0, proto-google-common-protos:2.64.1, google-cloud-logging:3.23.10, jetty-http2-server:12.1.7, jetty-ee10-servlet:12.1.7, lincheck:3.4, opentelemetry-api:1.60.1, opentelemetry-exporter-prometheus:1.60.1-alpha, opentelemetry-gcp-resources:1.54.0-alpha, opentelemetry-sdk-extension-autoconfigure:1.60.1, opentelemetry-sdk-testing:1.60.1, robolectric:4.16.1, tomcat-embed-core:10.1.52, tomcat-embed-core9: 9.0.115,

Upgrade Netty to 4.1.132 and netty-tcnative to 2.0.75 (1528f809c)

Thanks to

@becomeStar

@benjaminp

@JoeCqupt

@Kainsin

@merlimat

@SreeramdasLavanya

@themechbro

@zhangweikop

V1.80.0

API Changes

core: Added PickResult.copyWithSubchannel() and PickResult.copyWithStreamTracerFactory() to simplify updating PickResult while preserving metadata. Load balancing policies should now ensure ForwardingSubchannel decorators are unwrapped before being returned in a pick result. (#12658) (eae16b251)

... (truncated)

Commits

6951542 Bump version to 1.81.0
e94188e Update README etc to reference 1.81.0
4813c6d core,xds: Fix backend_service plumbing for subchannel metrics (#12735)
6737eb5 Revert "Replace javax ThreadSafe annotation with errorprone ThreadSafe (#1274...
ef35313 Replace javax ThreadSafe annotation with errorprone ThreadSafe (#12742)
3ed732f examples: Clean up Health, and document need for grpc-services
eac9fe9 xds: fix xDS HTTP CONNECT's transport socket name bug (#12740)
1528f80 Upgrade Netty to 4.1.132 and netty-tcnative to 2.0.75
d057a7e [xds] Implement A114: WRR support for custom backend metrics (#12645)
842636f xds: Add configuration objects for ExtAuthz, GrpcService and Bootstrap change...
Additional commits viewable in compare view

Updates io.grpc:grpc-stub from 1.75.0 to 1.81.0

Release notes

Sourced from io.grpc:grpc-stub's releases.

V1.81.0

In this release we drop support for Android API level 22 or lower (Lollipop or earlier), following Google Play Service’s discontinued updates for Lollipop (API levels 21 & 22) and now requires a minimum of API level 23 (Android 6.0 Marshmallow).

API Changes

api: Deprecate LoadBalancer.handleResolvedAddresses(). Developers maintaining custom LoadBalancer implementations should transition to using LoadBalancer.acceptResolvedAddresses(). Unlike the deprecated method, acceptResolvedAddresses() returns a Status object, allowing the load balancer to explicitly report success or reject the update if the provided addresses or configuration are invalid. (#11623)

Behavior Changes

core: Enable dns "caching" on Android for 30 seconds to reduce CPU impact of a refresh loop with an LB policy (0675f70af). DnsNameResolver ignores re-resolution requests on OpenJDK-like platforms if it has been too soon since the last DNS query because InetAddress.getAllByName() has a cache with a fixed entry lifetime, but this logic was disabled for Android which does not have that style of cache. Android’s cache uses the result TTL, which will rarely be less than 30 seconds. This change would probably be most noticeable when 1) changing to a different network (e.g., from wifi to mobile), 2) the server has different addresses for different networks, and 3) the app is not using AndroidChannelBuilder with an android.context.Context. For reference, it seems Chrome caches for 1 minute

Bug Fixes

opentelemetry: Fix baggage propagation, the baggage propagation for opentelemetry introduced in #12389 was broken. The context is decided once and used for all recording for the call, thus guaranteeing all record()s have consistent information.

core: Address a race condition where ManagedChannelOrphanWrapper could incorrectly log a "not shutdown properly" warning during garbage collection when using directExecutor(). (#12705) (d459338d9)

xds: Fix xDS HTTP CONNECT's transport socket name bug which is now corrected to use typeUrl. (#12740) (eac9fe961)

xds: Fix an issue where subchannel metrics were dropping their association with the backend_service. This ensures xDS ...
Description has been truncated

Bumps the version-updates group with 14 updates: | Package | From | To | | --- | --- | --- | | [com.uber.nullaway:nullaway](https://github.com/uber/NullAway) | `0.10.18` | `0.13.6` | | [io.grpc:grpc-protobuf](https://github.com/grpc/grpc-java) | `1.75.0` | `1.81.0` | | [io.grpc:grpc-stub](https://github.com/grpc/grpc-java) | `1.75.0` | `1.81.0` | | [io.grpc:grpc-netty-shaded](https://github.com/grpc/grpc-java) | `1.75.0` | `1.81.0` | | [io.grpc:grpc-testing](https://github.com/grpc/grpc-java) | `1.75.0` | `1.81.0` | | [io.grpc:protoc-gen-grpc-java](https://github.com/grpc/grpc-java) | `1.75.0` | `1.81.0` | | org.slf4j:slf4j-api | `2.0.14` | `2.0.18` | | org.slf4j:slf4j-nop | `2.0.14` | `2.0.18` | | [com.google.errorprone:error_prone_core](https://github.com/google/error-prone) | `2.29.2` | `2.49.0` | | [org.testcontainers:qdrant](https://github.com/testcontainers/testcontainers-java) | `1.20.1` | `1.21.4` | | [org.testcontainers:junit-jupiter](https://github.com/testcontainers/testcontainers-java) | `1.20.1` | `1.21.4` | | com.google.protobuf | `0.9.4` | `0.10.0` | | org.ajoberstar.grgit:grgit-gradle | `5.0.0` | `5.3.3` | | [org.apache.commons:commons-compress](https://github.com/apache/commons-compress) | `1.23.0` | `1.28.0` | Updates `com.uber.nullaway:nullaway` from 0.10.18 to 0.13.6 - [Release notes](https://github.com/uber/NullAway/releases) - [Changelog](https://github.com/uber/NullAway/blob/master/CHANGELOG.md) - [Commits](uber/NullAway@v0.10.18...v0.13.6) Updates `io.grpc:grpc-protobuf` from 1.75.0 to 1.81.0 - [Release notes](https://github.com/grpc/grpc-java/releases) - [Commits](grpc/grpc-java@v1.75.0...v1.81.0) Updates `io.grpc:grpc-stub` from 1.75.0 to 1.81.0 - [Release notes](https://github.com/grpc/grpc-java/releases) - [Commits](grpc/grpc-java@v1.75.0...v1.81.0) Updates `io.grpc:grpc-netty-shaded` from 1.75.0 to 1.81.0 - [Release notes](https://github.com/grpc/grpc-java/releases) - [Commits](grpc/grpc-java@v1.75.0...v1.81.0) Updates `io.grpc:grpc-testing` from 1.75.0 to 1.81.0 - [Release notes](https://github.com/grpc/grpc-java/releases) - [Commits](grpc/grpc-java@v1.75.0...v1.81.0) Updates `io.grpc:protoc-gen-grpc-java` from 1.75.0 to 1.81.0 - [Release notes](https://github.com/grpc/grpc-java/releases) - [Commits](grpc/grpc-java@v1.75.0...v1.81.0) Updates `io.grpc:grpc-stub` from 1.75.0 to 1.81.0 - [Release notes](https://github.com/grpc/grpc-java/releases) - [Commits](grpc/grpc-java@v1.75.0...v1.81.0) Updates `org.slf4j:slf4j-api` from 2.0.14 to 2.0.18 Updates `org.slf4j:slf4j-nop` from 2.0.14 to 2.0.18 Updates `com.google.errorprone:error_prone_core` from 2.29.2 to 2.49.0 - [Release notes](https://github.com/google/error-prone/releases) - [Commits](google/error-prone@v2.29.2...v2.49.0) Updates `io.grpc:grpc-netty-shaded` from 1.75.0 to 1.81.0 - [Release notes](https://github.com/grpc/grpc-java/releases) - [Commits](grpc/grpc-java@v1.75.0...v1.81.0) Updates `io.grpc:grpc-testing` from 1.75.0 to 1.81.0 - [Release notes](https://github.com/grpc/grpc-java/releases) - [Commits](grpc/grpc-java@v1.75.0...v1.81.0) Updates `org.slf4j:slf4j-nop` from 2.0.14 to 2.0.18 Updates `org.testcontainers:qdrant` from 1.20.1 to 1.21.4 - [Release notes](https://github.com/testcontainers/testcontainers-java/releases) - [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md) - [Commits](testcontainers/testcontainers-java@1.20.1...1.21.4) Updates `org.testcontainers:junit-jupiter` from 1.20.1 to 1.21.4 - [Release notes](https://github.com/testcontainers/testcontainers-java/releases) - [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md) - [Commits](testcontainers/testcontainers-java@1.20.1...1.21.4) Updates `org.testcontainers:junit-jupiter` from 1.20.1 to 1.21.4 - [Release notes](https://github.com/testcontainers/testcontainers-java/releases) - [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md) - [Commits](testcontainers/testcontainers-java@1.20.1...1.21.4) Updates `io.grpc:protoc-gen-grpc-java` from 1.75.0 to 1.81.0 - [Release notes](https://github.com/grpc/grpc-java/releases) - [Commits](grpc/grpc-java@v1.75.0...v1.81.0) Updates `com.google.protobuf` from 0.9.4 to 0.10.0 Updates `org.ajoberstar.grgit:grgit-gradle` from 5.0.0 to 5.3.3 Updates `org.apache.commons:commons-compress` from 1.23.0 to 1.28.0 - [Changelog](https://github.com/apache/commons-compress/blob/master/RELEASE-NOTES.txt) - [Commits](apache/commons-compress@rel/commons-compress-1.23.0...rel/commons-compress-1.28.0) --- updated-dependencies: - dependency-name: com.uber.nullaway:nullaway dependency-version: 0.13.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates - dependency-name: io.grpc:grpc-protobuf dependency-version: 1.81.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates - dependency-name: io.grpc:grpc-stub dependency-version: 1.81.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates - dependency-name: io.grpc:grpc-netty-shaded dependency-version: 1.81.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates - dependency-name: io.grpc:grpc-testing dependency-version: 1.81.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates - dependency-name: io.grpc:protoc-gen-grpc-java dependency-version: 1.81.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates - dependency-name: io.grpc:grpc-stub dependency-version: 1.81.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates - dependency-name: org.slf4j:slf4j-api dependency-version: 2.0.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: org.slf4j:slf4j-nop dependency-version: 2.0.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: com.google.errorprone:error_prone_core dependency-version: 2.49.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates - dependency-name: io.grpc:grpc-netty-shaded dependency-version: 1.81.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates - dependency-name: io.grpc:grpc-testing dependency-version: 1.81.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates - dependency-name: org.slf4j:slf4j-nop dependency-version: 2.0.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: org.testcontainers:qdrant dependency-version: 1.21.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates - dependency-name: org.testcontainers:junit-jupiter dependency-version: 1.21.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates - dependency-name: org.testcontainers:junit-jupiter dependency-version: 1.21.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates - dependency-name: io.grpc:protoc-gen-grpc-java dependency-version: 1.81.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates - dependency-name: com.google.protobuf dependency-version: 0.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates - dependency-name: org.ajoberstar.grgit:grgit-gradle dependency-version: 5.3.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates - dependency-name: org.apache.commons:commons-compress dependency-version: 1.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jun 6, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the version-updates group with 14 updates#116

chore(deps): bump the version-updates group with 14 updates#116
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/gradle/version-updates-f6abf7130c

dependabot Bot commented on behalf of github Jun 6, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jun 6, 2026

NullAway 0.13.6

NullAway 0.13.5

Version 0.13.6

V1.81.0

V1.80.0

V1.81.0

V1.80.0

V1.81.0

V1.80.0

V1.81.0

V1.80.0

V1.81.0

V1.80.0

V1.81.0

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants