[dependabot]

Bumps the all group with 21 updates in the / directory:

Package	From	To
pydantic	2.13.4	2.14.1
google-api-core	2.31.0	2.43.1
googleapis-common-protos	1.75.0	1.76.0
sse-starlette	3.4.4	3.5.1
starlette	1.2.1	1.7.0
fastapi	0.136.3	0.162.0
cryptography	48.0.1	50.0.2
grpcio	1.84.0	1.85.0
grpcio-tools	1.84.0	1.85.0
grpcio-reflection	1.84.0	1.85.0
alembic	1.18.4	1.20.1
pytest	9.0.3	9.2.0
pytest-asyncio	1.4.0	1.4.1
pytest-mock	3.15.1	3.17.0
ruff	0.15.16	0.17.3
uv-dynamic-versioning	0.14.0	0.14.1
types-requests	2.33.0.20260518	2.33.0.20261006
pre-commit	4.6.0	4.6.2
trio	0.33.0	0.34.0
uvicorn	0.49.0	0.54.0
ty	0.0.44	0.0.94

Updates pydantic from 2.13.4 to 2.14.1

Release notes

Sourced from pydantic's releases.

v2.14.1 2026-10-11

What's Changed

Performance

• Avoid Python tuple allocation during model fields validation by @​Viicos in #13955
• Avoid unnecessary extra dict allocation in model validation by @​Viicos in #13956

Fixes

• Fix arguments-v3 schema with variadic keywords by @​Viicos in #13954
• Fix TypeError on ForwardRef on Python 3.10.0 by @​Viicos in #13964
• Support closed and extra_items via inheritance in TypedDict by @​Viicos in #13967
• Enforce the max_digits whole-digits limit in the Python Decimal validator by @​Viicos in #13972
• Reject out-of-range int inputs for timedelta by @​Viicos in #13973
• Support named tuples in Sequence validation by @​Viicos in #13978

Full Changelog: pydantic/pydantic@v2.14.0...v2.14.1

v2.14.0 2026-10-08

What's Changed

The highlights of the v2.14 release are available in the blog post. Several minor changes (considered non-breaking changes according to our versioning policy) are also included in this release. Make sure to look into them before upgrading.

This release drops support for Python 3.9 and adds support for Python 3.15.

Two security fixes are fixed by this release: GHSA-gj4f-r7mf-jjxh and GHSA-955g-x97g-8mcp.

New Features

• Add support for multiple_of constraint in fraction and timedelta core schemas by @​Viicos in #13873
• Add __namespace__ parameter to create_model() by @​Viicos in #13895

Changes

• Add an ordered-dict core schema by @​Viicos in #13796
• Add a counter core schema by @​Viicos in #13824
• Do not mutate model_config attribute by @​Viicos in #13825
• Reject newlines in NameEmail validation by @​Viicos in #13897

Fixes

• Reject large exponents in Fraction validation by @​Viicos in #13944. Addresses GHSA-gj4f-r7mf-jjxh.
• Avoid validating URL prefix multiple times in multi host URLs by @​Viicos in #13945. Addresses GHSA-955g-x97g-8mcp.
• Call enum constructors in both validation modes by @​Viicos in #13792
• Fix documentation examples not raising and remove unused string_sub_type unused error code by @​Viicos in #13821
• Catch OverflowError during ByteSize validation by @​Viicos in #13850
• Require multiple_of constraints to be positive by @​Viicos in #13862
• Always pop field name and model type stacks during schema generation by @​saquibjawedbit in #13859

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.14.0 (2026-10-08)

GitHub release

What's Changed

The highlights of the v2.14 release are available in the blog post. Several minor changes (considered non-breaking changes according to our versioning policy) are also included in this release. Make sure to look into them before upgrading.

This release drops support for Python 3.9 and adds support for Python 3.15.

New Features

• Add support for multiple_of constraint in fraction and timedelta core schemas by @​Viicos in #13873
• Add __namespace__ parameter to create_model() by @​Viicos in #13895

Changes

• Add an ordered-dict core schema by @​Viicos in #13796
• Add a counter core schema by @​Viicos in #13824
• Do not mutate model_config attribute by @​Viicos in #13825
• Reject newlines in NameEmail validation by @​Viicos in #13897

Fixes

• Call enum constructors in both validation modes by @​Viicos in #13792
• Fix documentation examples not raising and remove unused string_sub_type unused error code by @​Viicos in #13821
• Catch OverflowError during ByteSize validation by @​Viicos in #13850
• Require multiple_of constraints to be positive by @​Viicos in #13862
• Always pop field name and model type stacks during schema generation by @​saquibjawedbit in #13859
• Handle TypeError gracefully during docstring extraction by @​Viicos in #13874
• Fix config propagation of stdlib dataclasses and TypedDicts in JSON Schema by @​Viicos in #13891
• Don't apply ser_json_timedelta to all datetime types in serialization inference by @​Viicos in #13892
• Encode JSON Schema defaults with a consistent configuration by @​Viicos in #13893
• Propagate init and kw_only=False from Field() to stdlib dataclass fields by @​Viicos in #13898
• Respect propagated extra config in the JSON Schema of stdlib dataclasses by @​Viicos in #13899
• Handle OS errors during ZoneInfo validation by @​Viicos in #13912
• Handle exceptions during Decimal validation by @​Viicos in #13940
• Rebuild incomplete types during serialization inference by @​Viicos in #13922
• Reject large exponents in Fraction validation by @​Viicos in #13944
• Avoid validating URL prefix multiple times in multi host URLs by @​Viicos in #13945

New Contributors

• @​saquibjawedbit made their first contribution in #13859

... (truncated)

Commits

• b2212c7 Prepare release v2.14.1
• 968fb2b Fix docs conversion table
• 6adc8b3 Support named tuples in Sequence validation
• 7637fbc Reject out-of-range int inputs for timedelta
• dfdbfcb Enforce the max_digits whole-digits limit in the Python Decimal validator
• e2456d3 Support closed and extra_items via inheritance in TypedDict
• 317655d Harden CI security
• 3ba1dd4 Fix TypeError on ForwardRef on Python 3.10.0
• 43681ab Bump samuelcolvin/check-python-version action to v5.1
• d6bc53a Avoid unnecessary extra dict allocation in model validation
• Additional commits viewable in compare view

Updates google-api-core from 2.31.0 to 2.43.1

Release notes

Sourced from google-api-core's releases.

google-api-core: v2.43.1

2.43.1 (2026-10-28)

Bug Fixes

• google-api-core: remove packages_distributions scan and shorten EOL warning window (#18872) (fa77b42)

google-api-core: v2.43.0

2.43.0 (2026-10-22)

Features

• api_core: support DirectPath over Interconnect with TLS composite credentials and ?force-xds (#18431) (fbd3188)
• observability: suppress redundant gRPC auto-instrumentation spans (#18592) (a597007)

google-api-core: v2.42.0

2.42.0 (2026-10-08)

Features

• observability: implement universal 4-path OpenTelemetry tracing (#18433) (7d18b25)

google-api-core: v2.41.0

2.41.0 (2026-10-02)

Features

• api_core: resumable upload supports request_body in constructor (#18543) (97bc619)
• api-core: support AsyncAuthorizedSession transport for resumable uploads (#18544) (9b96af7)
• auth: Support sync credentials in AsyncAuthorizedSession (#18542) (3799568)

Commits

• 9063dd2 chore: release main (#18886)
• 2080127 test: pin pytest<9.2 in failing handwritten packages (#18883)
• ca24f26 feat(bigquery): skip job creation for ARROW query_and_wait results (#18799)
• 2b00f0c fix(bigquery): format datetime objects with isoformat in CSV dataframe loads ...
• fa77b42 fix(google-api-core): remove packages_distributions scan and shorten EOL warn...
• c3392b4 test(gapic-generator): manage Showcase test alignment when PyPI google-api-co...
• d0ce8e3 fix(bigtable): restore the mutation lifecycle in mutate_rows and DirectRow.co...
• dd48193 fix(bigtable): remove unneeded status field from throttling latencies metric ...
• 92a8bf4 fix(bigtable): Log warning on background task failure instead of exception (#...
• c5542b9 chore: update librarian version to v0.50.0 (#18871)
• Additional commits viewable in compare view

Updates googleapis-common-protos from 1.75.0 to 1.76.0

Release notes

Sourced from googleapis-common-protos's releases.

googleapis-common-protos: v1.76.0

1.76.0 (2026-10-22)

Features

• declare support for Python 3.15 (#18737) (65c8767)
• update API sources and regenerate (#18797) (be4d954)

Commits

• 82b0565 chore: release main (#18711)
• ab29d5f chore(main): release google-cloud-bigtable 2.50.2 (#18817)
• 157efe4 feat(bigquery): add column data policies to SchemaField (#18710)
• ea7299f fix: validate Host header in graph_server request handlers (#17932)
• b14c2e5 docs(bigquery-storage): mark ReadRows arrow serialization as beta (#18802)
• 3ccf5ac fix(bigquery): keep the Arrow schema for empty results (#18655)
• 8ac01b9 feat(bigquery): read Arrow results from explicit destinations (#18654)
• 6eab34e feat(bigquery-storage): add context manager to ReadRowsStream (#18781)
• 31d9365 feat(bigquery-storage): send gRPC keepalive pings by default (#18792)
• 89cbc50 feat(bigquery): share one BigQuery Storage client per Client (#18652)
• Additional commits viewable in compare view

Updates sse-starlette from 3.4.4 to 3.5.1

Release notes

Sourced from sse-starlette's releases.

v3.5.1

What's Changed

• chore(deps): bump urllib3 from 2.7.0 to 2.8.0 by @​dependabot[bot] in sysid/sse-starlette#213
• chore(deps): bump actions/setup-python from 6 to 7 by @​dependabot[bot] in sysid/sse-starlette#204
• chore(deps): bump virtualenv from 20.36.1 to 21.7.13 by @​dependabot[bot] in sysid/sse-starlette#214
• Close SSE generators after interrupted sends by @​JackyHsu-X in sysid/sse-starlette#215

New Contributors

• @​JackyHsu-X made their first contribution in sysid/sse-starlette#215

Full Changelog: sysid/sse-starlette@v3.5.0...v3.5.1

v3.5.0

Fixed

• A stopped uvicorn server no longer cancels SSE streams of later servers in the same process (#211, regression since 3.1.1). Typical trigger: test suites starting a real server per test.

Behaviour change

• AppStatus.should_exit is no longer set when sse-starlette detects uvicorn's own Server.should_exit (fallback path, e.g. uvicorn "module:app"). Streams still close on shutdown. If you read AppStatus.should_exit to detect shutdown, use shutdown_event instead.
• A real SIGTERM/SIGINT still sets AppStatus.should_exit process-wide; see README "Testing" if your tests send real signals to an in-process server.

Upgrade note

• If you called AppStatus.disable_automatic_graceful_drain() only to work around #211, remove it to get automatic stream draining back.

What's Changed

• fix(shutdown): stop stopped uvicorn servers from cancelling later SSE streams (#211) by @​sysid in sysid/sse-starlette#212

Full Changelog: sysid/sse-starlette@v3.4.11...v3.5.0

v3.4.11

What's Changed

• fix(examples): handle slow broadcasting clients by @​varadfromeast in sysid/sse-starlette#209

New Contributors

• @​varadfromeast made their first contribution in sysid/sse-starlette#209

Full Changelog: sysid/sse-starlette@v3.4.10...v3.4.11

v3.4.10

What's Changed

• fix: apply send timeout to heartbeat messages by @​wse114 in sysid/sse-starlette#208

New Contributors

... (truncated)

Commits

• 2695621 Bump version to 3.5.1
• 20d13b9 add regression test
• 15712dc Merge pull request #215 from JackyHsu-X/fix/close-interrupted-sse-stream
• da38bdd Preserve SSE send errors during generator cleanup
• 4632103 build(make): build docker image before integration tests
• 6a5de5b Merge pull request #214 from sysid/dependabot/uv/virtualenv-21.7.13
• 615e4e4 Merge pull request #204 from sysid/dependabot/github_actions/actions/setup-py...
• e594e35 Merge pull request #213 from sysid/dependabot/uv/urllib3-2.8.0
• 534991b build(release): relock uv.lock during version bump
• 21b9909 Close SSE generators after interrupted sends
• Additional commits viewable in compare view

Updates starlette from 1.2.1 to 1.7.0

Release notes

Sourced from starlette's releases.

Version 1.7.0

This release adds experimental OpenTelemetry tracing, HTTP QUERY support, and response trailers in TestClient. Starlette now requires AnyIO 4.

[!WARNING] OpenTelemetryMiddleware is experimental. Its API and emitted telemetry may change in minor releases without a deprecation period.

Added

• Add experimental OpenTelemetryMiddleware for HTTP server spans, with URL exclusions and custom tracer providers #3438, #3463, and #3520.
• Expose the matched route through scope["route"] #3438.
• Support the QUERY HTTP method in HTTPEndpoint, CORS, and OpenAPI 3.2 schema generation #3489.
• Capture HTTP response trailers in TestClient and expose them through response.extensions["http.response.trailers"] #3563.
• Support partitioned cookies in SessionMiddleware #3510.
• Add partitioned to Response.delete_cookie() on Python 3.14 and later #3376.
• Support IPv6 hosts in TrustedHostMiddleware and TestClient #3471.
• Support Python 3.15 #3508.

Changed

• Require anyio>=4.0.0,<5, dropping support for AnyIO 3 #3512.
• Raise WebSocketDisconnected, a RuntimeError subclass, for disconnected WebSocket operations #2767.
• Accept Collection[str] in CORSMiddleware configuration annotations, including sets and frozensets #3518.

Fixed

• Run background tasks only after the response is sent when using BaseHTTPMiddleware #3476.
• Return 400 for invalid multipart parser input #3492.
• Include Vary: Origin on all normal CORS responses and vary preflight responses by all request headers that affect them #3516 and #3517.
• Handle malformed Host headers and IPv6 authorities consistently across URL construction, host routing, and redirect middleware #3472.
• Ignore Range headers when FileResponse has a status other than 200, preserving its status and full body #3568.
• Handle standalone If-None-Match: * in StaticFiles #3201.
• Reject WebSocket requests to StaticFiles without raising an assertion error #3532.
• Persist session mutations made with popitem() and |= #3436.
• Handle empty and absent payloads in WebSocketEndpoint.decode() #3372.
• Implement identity on SimpleUser and UnauthenticatedUser #3271.
• Allow HTTPException to use non-standard status codes without an explicit detail #3545.
• Avoid deprecated AnyIO imports in TestClient and add explicit imports in WSGIMiddleware for AnyIO 4.15 compatibility #3498 and #3501.
• Offload debug traceback rendering to a worker thread in ServerErrorMiddleware #2858.

Full changelog: 1.6.0...1.7.0

Version 1.6.0

What's Changed

• Add max_body_size to Starlette and route classes by @​Kludex in Kludex/starlette#3431
• Expose http.response.debug info via response extensions by @​y2kbugger in Kludex/starlette#3130

New Contributors

• @​y2kbugger made their first contribution in Kludex/starlette#3130

Full Changelog: Kludex/starlette@1.5.1...1.6.0

... (truncated)

Changelog

Sourced from starlette's changelog.

1.7.0 (September 23, 2026)

This release adds experimental OpenTelemetry tracing and requires AnyIO 4.

!!! warning "OpenTelemetryMiddleware is experimental" Its API and emitted telemetry may change in minor releases without a deprecation period #3574.

Added

• Add experimental OpenTelemetryMiddleware for HTTP server spans, with URL exclusions and custom tracer providers #3438, #3463, and #3520.
• Expose the matched route through scope["route"] #3438.
• Support the QUERY HTTP method in HTTPEndpoint, CORS, and OpenAPI 3.2 schema generation #3489.
• Capture HTTP response trailers in TestClient and expose them through response.extensions["http.response.trailers"] #3563.
• Support partitioned cookies in SessionMiddleware #3510.
• Add partitioned to Response.delete_cookie() on Python 3.14 and later #3376.
• Support IPv6 hosts in TrustedHostMiddleware and TestClient #3471.
• Support Python 3.15 #3508.

Changed

• Require anyio>=4.0.0,<5, dropping support for AnyIO 3 #3512.
• Raise WebSocketDisconnected, a RuntimeError subclass, for disconnected WebSocket operations #2767.
• Accept Collection[str] in CORSMiddleware configuration annotations, including sets and frozensets #3518.

Fixed

• Run background tasks only after the response is sent when using BaseHTTPMiddleware #3476.
• Return 400 for invalid multipart parser input #3492.
• Include Vary: Origin on all normal CORS responses and vary preflight responses by all request headers that affect them #3516 and #3517.
• Handle malformed Host headers and IPv6 authorities consistently across URL construction, host routing, and redirect middleware #3472.
• Ignore Range headers when FileResponse has a status other than 200, preserving its status and full body #3568.
• Handle standalone If-None-Match: * in StaticFiles #3201.
• Reject WebSocket requests to StaticFiles without raising an assertion error #3532.
• Persist session mutations made with popitem() and |= #3436.
• Handle empty and absent payloads in WebSocketEndpoint.decode() #3372.
• Implement identity on SimpleUser and UnauthenticatedUser #3271.
• Allow HTTPException to use non-standard status codes without an explicit detail #3545.
• Avoid deprecated AnyIO imports in TestClient and add explicit imports in WSGIMiddleware for AnyIO 4.15 compatibility #3498 and #3501.
• Offload debug traceback rendering to a worker thread in ServerErrorMiddleware #2858.

1.6.0 (August 8, 2026)

Added

• Add max_body_size to Starlette and route classes #3431.
• Expose http.response.debug information via response extensions #3130.

1.5.1 (August 8, 2026)

... (truncated)

Commits

• 2269e9a Version 1.7.0 (#3575)
• 4fe55eb Preserve FileResponse status for range requests (#3568)
• 1f08daf Mark OpenTelemetryMiddleware as experimental (#3574)
• 57de5fa Support HTTP response trailers in TestClient (#3563)
• 03f12b7 Allow HTTPException to use non-standard status codes (#3545)
• 76fd00f Reject WebSocket requests to StaticFiles (#3532)
• f03f65c docs: fix 'its not available' and 'This ensure' wording (#3526)
• 485aca4 docs: the test client is built on httpx2, not httpx (#3525)
• fd662b1 Implement identity on SimpleUser and UnauthenticatedUser (#3271)
• 41db6a7 Stabilize CodSpeed upload buffer allocations (#3524)
• Additional commits viewable in compare view

Updates fastapi from 0.136.3 to 0.162.0

Release notes

Sourced from fastapi's releases.

0.162.0

Omitted bool and bool | None form fields now use their declared defaults or produce missing-field errors, consistent with other fields and Pydantic behavior. FastAPI no longer infers False for omitted booleans. This applies to individual form parameters, form models, and unions of form models.

Omitted boolean model fields are excluded from model_dump(exclude_unset=True), and their defaults no longer count as submitted fields during union selection. Default factories and validate_default follow the usual rules.

For HTML checkboxes, declare a boolean with a default of False. See Boolean Form Fields.

Breaking Changes

• 🐛 Restore default handling for omitted boolean form fields. PR #16605 by @​tiangolo.

0.161.1

Fixes

• 🐛 Fix OpenAPI schemas for standalone nullable form unions. PR #16598 by @​tiangolo.

0.161.0

Features

• ✨ Add support for combining unions of form models. PR #16596 by @​tiangolo.

0.160.0

Query, header, cookie, and form parameter models now apply their extra configuration to all submitted fields in the same parameter location, consistent with Pydantic behavior. This includes fields declared in other models, individual parameters, or dependencies, which were previously excluded.

With extra="forbid", fields outside the model are rejected even if another parameter declares them. With extra="allow", those fields are included as model extras. With the default extra="ignore", they are ignored.

Breaking Changes

• 🐛 Apply each parameter model's extra configuration to sibling fields. PR #16594 by @​tiangolo.

Internal

• ⬆ Bump certifi from 2026.1.4 to 2026.10.19. PR #16571 by @​dependabot[bot].

0.159.1

Features

• ✨ Add support for optional unions of form models. PR #16586 by @​tiangolo.

0.159.0

Features

• ✨ Add support for optional query, header, and cookie parameter models. PR #16584 by @​tiangolo.

0.158.2

Features

• ✨ Add support for optional form models. PR #16582 by @​tiangolo.

0.158.1

... (truncated)

Commits

• 7a0a3f0 🔖 Release version 0.162.0 (#16606)
• b56f7c6 📝 Update release notes
• f02ef49 🐛 Restore default handling for omitted boolean form fields (#16605)
• 69ddc2b 🔖 Release version 0.161.1 (#16599)
• 0cafa07 📝 Update release notes
• f90d036 🐛 Fix OpenAPI schemas for standalone nullable form unions (#16598)
• 80c8742 🔖 Release version 0.161.0 (#16597)
• b105209 📝 Update release notes
• e42ac0a ✨ Add support for combining unions of form models (#16596)
• addd077 🔖 Release version 0.160.0 (#16595)
• Additional commits viewable in compare view

Updates cryptography from 48.0.1 to 50.0.2

Changelog

Sourced from cryptography's changelog.

50.0.2 - 2026-09-30

* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 4.0.3.
* Added ``abi3.abi3t`` wheels for free-threaded CPython 3.15 and later.
* Updated to PyO3 0.29.2, which fixes building ``cryptography`` on Cygwin and
  MSYS2.
.. _v50-0-1:
50.0.1 - 2026-08-25

• Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 4.0.2.

.. _v50-0-0:

50.0.0 - 2026-07-31

* **SECURITY ISSUE**:
  :func:`~cryptography.hazmat.primitives.serialization.pkcs7.pkcs7_decrypt_der`
  and its PEM and S/MIME variants no longer expose distinguishable errors or
  timing when unwrapping a ``RecipientInfo``'s ``encryptedKey``, which could
  act as a Bleichenbacher oracle for callers that decrypt untrusted messages.
  A random key is now substituted on failure, as described in :rfc:`3218`.
  Credit to **@X1AOxiang** for reporting the issue. **CVE-2026-69247**
* Deprecated Diffie-Hellman key exchange over finite fields (FFDH).
  Everything FFDH is deprecated, including the types in
  ``cryptography.hazmat.primitives.asymmetric.dh`` and loading FFDH keys or
  parameters with the key loading APIs. Users should migrate to a more
  modern key exchange algorithm.
* Added ``xof()`` class methods to
  :class:`~cryptography.hazmat.primitives.hashes.SHAKE128` and
  :class:`~cryptography.hazmat.primitives.hashes.SHAKE256` for constructing
  algorithm instances configured for use with
  :class:`~cryptography.hazmat.primitives.hashes.XOFHash`.
* The :mod:`X.509 verification <cryptography.x509.verification>` APIs are now
  considered stable and are subject to our API stability policy.
* Added the :doc:`/cobblestone` recipe, an implementation of the
  Cobblestone-128 and Cobblestone-256 instantiations of the `C2SP
  chunked-encryption specification
  <https://c2sp.org/chunked-encryption>`_ for streaming authenticated
  encryption of large messages.
* Parsing a Signed Certificate Timestamp list now rejects encodings that
  carry trailing bytes after the list or after an individual SCT, instead of
  silently ignoring them.
* Added support for using :class:`~cryptography.x509.Name` as a field type in
  the :doc:`/hazmat/asn1/index` module.
* Loading a public key or an EC private key now rejects DER where the
</tr></table> 

... (truncated)

Commits

• 4dda5c7 [50.0.x] Bump for 50.0.2 release + changelog (#15733)
• 70c881c [50.0.x] Bump pyo3 to 0.29.2 (#15731)
• a8c45c4 [50.0.x] Build abi3.abi3t wheels for CPython 3.15+ (#15496) (#15732)
• ffde75a bump for 50.0.1 + changelog (#15520)
• dcb7050 Prepare for 50.0.0 release (#15372)
• 53fccd9 Don't leak how PKCS#7 encryptedKey decryption failed (#15369)
• d472f97 Add from __future__ import annotations to all src/ Python files (#15371)
• 908773d Bump downstream dependencies in CI (#15368)
• 2cc07cc Bump BoringSSL, OpenSSL, AWS-LC in CI (#15367)
• c94ede9 chore(deps): bump ruff from 0.16.0 to 0.16.1 (#15366)
• Additional commits viewable in compare view

Updates grpcio from 1.84.0 to 1.85.0

Release notes

Sourced from grpcio's releases.

Release v1.85.0

This is release 1.85.0 (googol) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

• [security] Update gRPC repo roots. (#43717)
• [experiments] Add map_host_header_to_authority experiment. (#43561)
• [Security] Add MLKEM1024 as a key exchange option. (#43514)
• Remove OpenSSL1.0.2 Support. (#43466)
• [Autosharding-LB][Part-1] Implementing A119. (#43406)
• [OpenSSL] Add support for OpenSSL 4. (#41932)
• [A110] Add child channel options. (#43314)

C#

• [Build] Disambiguate protobuf_version in templates. (#43433)

Python

• [Python][AIO] Fixed data race in PollerCompletionQueue. (#43429)
• [Python] Fix SyncServicerContext abort not raising exception. (#43126)
• [Python] Fixed channelz module leak. (#43196)
• [Python] Fixed CSDS memory leak. (#43202)
• [Python] Unpin Cython dependency for source builds. (#43378)

Release v1.85.0-pre1

This is a prerelease of gRPC Core 1.85.0 (googol).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This prerelease contains refinements, improvements, and bug fixes.

Release v1.84.2

This is release gRPC Core 1.84.2 (gimbal).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

Python

• Fixes Denial of service in Health Watch RPC (#43784)

... (truncated)

Commits

• a83eb27 update g stands for correctly
• cc92f57 [Release] Bump version to 1.85.0 (on v1.85.x branch) (#43729)
• 7f3e5d4 [Backport][v1.85.x][security] Update gRPC repo roots. (#43717)
• 08689a5 [Backport][v1.85.x][CI][macOS] Add retries to git and pip for flaky macOS job...
• cc11ee7 [Backport][v1.85.x][export] Validate EDS locality priority against number of ...
• 0e02b12 [Release] Bump version to 1.85.0-pre1 (on v1.85.x branch) (#43591)
• e124571 [Release] Bump core version to 58.0.0 for upcoming release (#43582)
• 08455f8 Add warning message for WORKSPACE deprecation (#41934)

[github-actions]

🧪 Code Coverage (vs main)

⬇️ Download Full Report

No coverage changes.

Generated by coverage-comment.yml