Skip to content

fix: update dependency io.grpc:grpc-bom to v1.80.0#767

Open
renovate-bot wants to merge 1 commit intogoogleapis:mainfrom
renovate-bot:renovate/grpc-java-monorepo
Open

fix: update dependency io.grpc:grpc-bom to v1.80.0#767
renovate-bot wants to merge 1 commit intogoogleapis:mainfrom
renovate-bot:renovate/grpc-java-monorepo

Conversation

@renovate-bot
Copy link
Contributor

@renovate-bot renovate-bot commented Mar 18, 2026

This PR contains the following updates:

Package Change Age Confidence
io.grpc:grpc-bom 1.79.01.80.0 age confidence

Release Notes

grpc/grpc-java (io.grpc:grpc-bom)

v1.80.0


Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate-bot renovate-bot force-pushed the renovate/grpc-java-monorepo branch from c1eeddf to a5d429f Compare March 18, 2026 01:50
@renovate-bot renovate-bot requested a review from a team as a code owner March 18, 2026 01:50
@trusted-contributions-gcf trusted-contributions-gcf bot added the kokoro:force-run Add this label to force Kokoro to re-run the tests. label Mar 18, 2026
@gemini-code-assist
Copy link
Contributor

Summary of Changes

Hello, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request updates the grpc-bom dependency to its latest version, 1.80.0, ensuring the project benefits from the newest features, bug fixes, and performance improvements provided by the gRPC framework. This keeps the project's gRPC components current and aligned with the latest stable releases.

Highlights

  • Dependency Update: Updated the io.grpc:grpc-bom dependency from version 1.79.0 to 1.80.0.
Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature Command Description
Code Review /gemini review Performs a code review for the current pull request in its current state.
Pull Request Summary /gemini summary Provides a summary of the current pull request in its current state.
Comment @gemini-code-assist Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help /gemini help Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for GitHub and other Google products, sign up here.

Footnotes

  1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution.

Copy link
Contributor

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the io.grpc:grpc-bom dependency from version 1.79.0 to 1.80.0. While this is a minor update, it highlights a potential risk in the existing code. The application uses an internal, experimental gRPC API (BlockingClientCall), which is not guaranteed to be stable across versions. This dependency update could introduce runtime breakages. I've added a comment with a recommendation to refactor this for better long-term stability.

<groupId>io.grpc</groupId>
<artifactId>grpc-bom</artifactId>
<version>1.79.0</version>
<version>1.80.0</version>
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

This gRPC version update introduces a potential risk. The codebase in GrpcSpannerLibraryImpl.java on line 242 uses io.grpc.stub.BlockingClientCall, which is an internal gRPC API and marked as experimental. Internal APIs are not guaranteed to be stable and can change without notice between versions, which could cause this update to break functionality at runtime. It is highly recommended to refactor the code to avoid using internal gRPC APIs and rely only on the public, stable API surface.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

kokoro:force-run Add this label to force Kokoro to re-run the tests.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant