Sourced from google.golang.org/grpc's releases.
Release v1.60.1
Bug Fixes
- server: fix two bugs that could lead to panics at shutdown when using NumStreamWorkers (experimental feature).
Release 1.60.0
Security
- credentials/tls: if not set, set TLS MinVersion to 1.2 and CipherSuites according to supported suites not forbidden by RFC7540.
- This is a behavior change to bring us into better alignment with RFC 7540.
API Changes
- resolver: remove deprecated and experimental
ClientConn.NewServiceConfig
(#6784)- client: remove deprecated
grpc.WithServiceConfig
DialOption
(#6800)Bug Fixes
- client: fix race that could cause a deadlock while entering idle mode and receiving a name resolver update (#6804)
- client: always enable TCP keepalives with OS defaults (#6834)
- credentials/alts: fix a bug preventing ALTS from connecting to the metadata server if the default scheme is overridden (#6686)
- Special Thanks:
@mjamaloney
Behavior Changes
- server: Do not return from Stop() or GracefulStop() until all resources are released (#6489)
- Special Thanks:
@fho
Documentation
- codes: clarify that only codes defined by this package are valid and that users should not cast other values to
codes.Code
(#6701)Release 1.58.3
Security
server: prohibit more than MaxConcurrentStreams handlers from running at once (CVE-2023-44487)
In addition to this change, applications should ensure they do not leave running tasks behind related to the RPC before returning from method handlers, or should enforce appropriate limits on any such work.
dbbcf59
Update version.go to 1.60.1 (#6865)6e384cf
Cherry-pick #6856 to
v1.60.x release branch (#6864)6430548
Change version to 1.60.1-dev (#6793)297d8dd
Cherry-pick #6841 to
v1.60.x release branch (#6847)3580447
Change version to 1.60.0 (#6792)71e67a9
Cherry-pick #6834 to
v1.60.x release branch (#6839)cb6581d
Cherry-pick #6804
and dependencies to v1.60.x release branch (#6838)dd39cdb
credentials: if not set, restrict to TLS v1.2+ and CipherSuites per
RFC7540 (...8645f95
resolver: remove ClientConn.NewServiceConfig (#6784)8b17a4d
vet: various cleanups (#6780)