New Features
- okhttp: Added connection management features to okhttp server, including maxConnectionIdle(), permitKeepAliveTime(), and permitKeepAliveWithoutCalls() (#9494, #9544)
- binder: Add
SecurityPolicies
for checking device owner/profile owner (#9428)
API Changes
- api: Add LoadBalancer.acceptResolvedAddresses() (#9498). The method is like
handleResolvedAddresses()
but returns aboolean
of whether the addresses and configuration were accepted. Not accepting the update triggers the NameResolver to retry after a delay. We are not yet encouraging migration to this method, as there is still a second future API change - core: add CallOptions to CallCredentials.RequestInfo (#9538)
Bug Fixes
- auth: Fix AppEngine failing while retrieving access token when instantiating a blocking stub using AppEngineCredentials (#9504)
- core: Ensure that context cancellationCause is set (#9501)
- core: Update outlier detection max ejection logic to allow exceeding the limit by one, to match Envoy. (#9489, #9492)
- core: outlier detection to honor min host request volume (#9490)
- okhttp: Add timeout for HTTP CONNECT proxy handshake (#9586)
- xds: ringhash policy in TRANSIENT_FAILURE should not attempt connecting when already in connecting (#9535). With workloads where most requests have the same hash, ring hash should behave more like pick-first of slowly trying backends
Dependencies
- netty: upgrade netty from 4.1.77.Final to 4.1.79.Final and tcnative from 2.0.53 to 2.0.54 (#9451)