Skip to content

Bump the grpc group with 2 updates - #15

Merged
deku2026 merged 3 commits into
mainfrom
dependabot/nuget/grpc-1f136629c3
Sep 21, 2026
Merged

deku2026 merged 3 commits into
mainfrom
dependabot/nuget/grpc-1f136629c3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 21, 2026 •

Copy link
Copy Markdown
Contributor

Aligns Grpc.AspNetCore, Grpc.AspNetCore.Web and Grpc.Net.Client at 2.84.0. The original grouped update left AspNetCore and the test project's transitive lock stale, causing locked restores to fail. Regenerates all three locks with the normal NuGet resolver, including the required Microsoft.Extensions patch updates in the test graph.

Adds immutable cloud-release-r8 and matching successor records for the changed central declaration/host lock. The actual restored gRPC nuspec identifies official source 4c6997a214601422dd66c5c74c1969db749479e9; its Apache license matches the retained full legal text. Docker pins, Protobuf/Contracts versions, Worker inputs/generators/output, and existing legal texts remain unchanged.

Validation: full solution restore, Release build with zero warnings/errors, all 16 offline C# tests, source provenance audit and git diff --check passed. Final-head retained CI and the prior main deployment must succeed before merge. Official changes: https://github.com/grpc/grpc-dotnet/releases/tag/v2.84.0

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Sep 21, 2026
@dependabot
dependabot Bot requested a review from deku2026 as a code owner September 21, 2026 22:26
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Sep 21, 2026
dependabot Bot and others added 3 commits September 21, 2026 16:40
Bumps Grpc.AspNetCore.Web from 2.83.0 to 2.84.0
Bumps Grpc.Net.Client from 2.83.0 to 2.84.0

---
updated-dependencies:
- dependency-name: Grpc.AspNetCore.Web
  dependency-version: 2.84.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: grpc
- dependency-name: Grpc.Net.Client
  dependency-version: 2.84.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: grpc
...

Signed-off-by: dependabot[bot] <support@github.com>
@deku2026
deku2026 force-pushed the dependabot/nuget/grpc-1f136629c3 branch from 81f92b3 to 98d7999 Compare September 21, 2026 23:44

@deku2026 deku2026 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Full review passed at 98d7999. gRPC central pins and all three resolver-generated locks are coherent; dependent Microsoft.Extensions patch upgrades are explained by the new package dependency minimums. Reviewed actual package source/license identity and immutable release successor; runtime base, Worker bundle and legal texts remain intact. Full Release build succeeded without diagnostics and all16 offline C# tests passed. Final CI and prior main deployment are required before merge.

@deku2026
deku2026 merged commit c536b2d into main Sep 21, 2026
12 checks passed
@dependabot
dependabot Bot deleted the dependabot/nuget/grpc-1f136629c3 branch September 21, 2026 23:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant