Security

• credentials/tls: if not set, set TLS MinVersion to 1.2 and CipherSuites according to supported suites not forbidden by RFC7540.
  • This is a behavior change to bring us into better alignment with RFC 7540.

API Changes

• resolver: remove deprecated and experimental ClientConn.NewServiceConfig (#6784)
• client: remove deprecated grpc.WithServiceConfig DialOption (#6800)

Bug Fixes

• client: fix race that could cause a deadlock while entering idle mode and receiving a name resolver update (#6804)
• client: always enable TCP keepalives with OS defaults (#6834)
• credentials/alts: fix a bug preventing ALTS from connecting to the metadata server if the default scheme is overridden (#6686)
  • Special Thanks: @mjamaloney

Behavior Changes

• server: Do not return from Stop() or GracefulStop() until all resources are released (#6489)
  • Special Thanks: @fho

Documentation

• codes: clarify that only codes defined by this package are valid and that users should not cast other values to codes.Code (#6701)