Skip to content

Bump google.golang.org/grpc from 1.79.3 to 1.81.1 in /ecs-agent#4974

Merged
harishxr merged 2 commits into
devfrom
dependabot/go_modules/ecs-agent/dev/google.golang.org/grpc-1.81.1
Jun 2, 2026
Merged

Bump google.golang.org/grpc from 1.79.3 to 1.81.1 in /ecs-agent#4974
harishxr merged 2 commits into
devfrom
dependabot/go_modules/ecs-agent/dev/google.golang.org/grpc-1.81.1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 25, 2026 •
edited
Loading

Bumps google.golang.org/grpc from 1.79.3 to 1.81.1.

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.81.1

Security

  • xds/rbac: Fix a potential authorization bypass caused by incorrectly falling through URI/DNS SANs to Subject Distinguished Name (DN) when matching the authenticated principal name. With this fix, only the first non-empty identity source will be used, as per gRFC A41. (#9111)

Bug Fixes

  • otel: Segregate client and server RPC information used for metrics and traces, to avoid one overwriting the other. (#9081)

Release 1.81.0

Behavior Changes

  • balancer/rls: Switch gauge metrics to asynchronous emission (once per collection cycle) to reduce telemetry noise and align with other gRPC language implementations. (#8808)

Dependencies

  • Minimum supported Go version is now 1.25. (#8969)

Bug Fixes

  • xds: Use the leaf cluster's security config for the TLS handshake instead of the aggregate cluster's config. (#8956)
  • transport: Send a RST_STREAM when receiving an END_STREAM when the stream is not already half-closed. (#8832)
  • xds: Fix ADS resource name validation to prevent a panic. (#8970)

New Features

  • grpc/stats: Add support for custom labels in per-call metrics (gRFC A108). (#9008)
  • xds: Add support for Server Name Indication (SNI) and SAN validation (gRFC A101). Disabled by default. To enable, set GRPC_EXPERIMENTAL_XDS_SNI=true environment variable. (#9016)
  • xds: Add support to control which fields get propagated from ORCA backend metric reports to LRS load reports (gRFC A85). Disabled by default. To enable, set GRPC_EXPERIMENTAL_XDS_ORCA_LRS_PROPAGATION=true. (#9005)
  • xds: Add metrics to track xDS client connectivity and cached resource state (gRFC A78). (#8807)
  • stats/otel: Enhance grpc.subchannel.disconnections metric by adding disconnection reason to the grpc.disconnect_error label (gRFC A94). This provides granular insights into why subchannels are closing. (#8973)
  • mem: Add mem.Buffer.Slice() API to slice the buffer like a slice. (#8977)

Performance Improvements

  • alts: Pool read buffers to lower memory utilization when sockets are unreadable. (#8964)
  • transport: Pool HTTP/2 framer read buffers to reduce idle memory consumption. Currently limited to Linux for ALTS and non-encrypted transports (TCP, Unix). To disable, set GRPC_GO_EXPERIMENTAL_HTTP_FRAMER_READ_BUFFER_POOLING=false and report any issues. (#9032)

Release 1.80.0

Behavior Changes

  • balancer: log a warning if a balancer is registered with uppercase letters, as balancer names should be lowercase. In a future release, balancer names will be treated as case-insensitive; see #5288 for details. (#8837)
  • xds: update resource error handling and re-resolution logic (#8907)
    • Re-resolve all LOGICAL_DNS clusters simultaneously when re-resolution is requested.
    • Fail all in-flight RPCs immediately upon receipt of listener or route resource errors, instead of allowing them to complete.

Bug Fixes

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels May 25, 2026
@dependabot dependabot Bot requested a review from a team as a code owner May 25, 2026 00:09
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels May 25, 2026
@danehlim
Copy link
Copy Markdown
Contributor

danehlim commented Jun 1, 2026

@dependabot rebase

@dependabot
Bump google.golang.org/grpc from 1.79.3 to 1.81.1 in /ecs-agent
1baac82 
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.79.3 to 1.81.1.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.79.3...v1.81.1)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.81.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/go_modules/ecs-agent/dev/google.golang.org/grpc-1.81.1 branch from bce6eca to 1baac82 Compare June 1, 2026 19:09
chore(deps): Bump google.golang.org/grpc to 1.81.1 in /agent
c10e259 
grpc was bumped from 1.79.3 to 1.81.1 in /ecs-agent; since /agent imports ecs-agent via a replace directive, go mod tidy propagates the indirect requirement (1.80.0 -> 1.81.1) here too and drops the now-unused go.opentelemetry.io/otel/sdk/metric indirect entry. Updated go.mod, go.sum, and re-vendored via go mod vendor.
@harishxr harishxr enabled auto-merge (rebase) June 2, 2026 22:35
@harishxr harishxr merged commit 2784e84 into dev Jun 2, 2026
54 of 57 checks passed
@dependabot dependabot Bot deleted the dependabot/go_modules/ecs-agent/dev/google.golang.org/grpc-1.81.1 branch June 2, 2026 22:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@mye956 mye956 mye956 approved these changes

@harishxr harishxr harishxr approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@danehlim @mye956 @harishxr @amazon-ecs-bot