deps(all): update gRPC to v1.82.1 - #12780
Conversation
Update gRPC to the advisory fixed version and refresh only the transitive module closure required by minimal version selection.
|
Skipping CI for Draft Pull Request. |
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
|
Important Review skippedDraft detected. Please check the settings in the CodeRabbit UI or the ⚙️ Run configurationConfiguration used: Organization UI Review profile: CHILL Plan: Pro Plus Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
What problem does this PR solve?
Issue Number: close #12779
TiFlow master selects gRPC v1.79.3, below the v1.82.1 fixed version for GHSA-hrxh-6v49-42gf. The other reported vulnerable modules were already updated by #12769.
What is changed and how it works?
google.golang.org/grpctov1.82.1.go.modandgo.sum.Check List
Tests
GOPROXY=https://proxy.golang.org,direct make unit_testGOPROXY=https://proxy.golang.org,direct make dm_unit_testGOPROXY=https://proxy.golang.org,direct make buildGOPROXY=https://proxy.golang.org,direct make checkQuestions
Will it cause performance regression or break compatibility?
No expected regression. This changes only module metadata, and the full build and unit suites pass.
Do you need to update user documentation, design documentation or monitoring documentation?
No.
Release note