chore: update releases

[renovate]

Update Request | Renovate Bot

This PR contains the following updates:

Package	Update	Change
curl/curl	minor	8_9_1 -> 8_10_1
git://git.kernel.org/pub/scm/git/git.git	patch	2.46.0 -> 2.46.2
git://git.kernel.org/pub/scm/utils/dtc/dtc.git	patch	1.7.0 -> 1.7.1
git://git.savannah.gnu.org/gawk.git	patch	5.3.0 -> 5.3.1
git://git.savannah.gnu.org/libtool.git	minor	2.4.7 -> 2.5.3
git://git.savannah.gnu.org/texinfo.git	patch	7.1 -> 7.1.1
grpc/grpc-go	minor	v1.65.0 -> v1.67.1
https://github.com/sabotage-linux/gettext-tiny.git	digest	070f01d -> 55a8ae9
libbpf/libbpf	patch	v1.4.5 -> v1.4.6
libexpat/libexpat	patch	2_6_2 -> 2_6_3
libuv/libuv	minor	v1.48.0 -> v1.49.0
mesonbuild/meson	patch	1.5.1 -> 1.5.2
openssl/openssl	patch	3.3.1 -> 3.3.2
protocolbuffers/protobuf	minor	27.4 -> 27.5
python/cpython	patch	3.12.5 -> 3.12.7
systemd/systemd	minor	256.4 -> 256.6

---

Release Notes

curl/curl (curl/curl)

v8_10_1: 8.10.1

Compare Source

changelog
release blog
release video

v8_10_0: 8.10.0

Compare Source

changelog
release blog
release video

grpc/grpc-go (grpc/grpc-go)

v1.67.1: Release 1.67.1

Compare Source

Bug Fixes

• transport: Fix a bug causing stream failures due to miscalculation of the flow control window in both clients and servers. (#​7667)
• xds/server: Fix xDS Server memory leak. (#​7681)

v1.67.0: Release 1.67.0

Compare Source

Bug Fixes

• ringhash: when used with multiple EDS priorities, fix bug that could prevent a higher priority from recovering from transient failure. (#​7364)
  • Special Thanks: @​atollena

Behavior Changes

• In accordance with RFC 7540, clients and servers will now reject TLS connections that don't support ALPN. This can be disabled by setting the environment variable GRPC_ENFORCE_ALPN_ENABLED to false (case insensitive). Please file a bug if you encounter any issues with this behavior. The environment variable to revert this behavior will be removed in an upcoming release. (#​7535)

v1.66.3: Release 1.66.3

Compare Source

Bug Fixes

• transport: Fix a bug causing stream failures due to miscalculation of the flow control window in both clients and servers. (#​7667)
• xds/server: Fix xDS Server memory leak. (#​7681)

v1.66.2: Release 1.66.2

Compare Source

Dependencies

• Remove unintentional dependency on the testing package (#​7579)
• Remove unintentional dependency on the flate package (#​7595)
  • Special Thanks: @​ash2k

Bug Fixes

• client: fix a bug that prevented memory reuse after handling unary RPCs (#​7571)
  • Special Thanks: @​coxley

v1.66.1

Compare Source

v1.66.0: Release 1.66.0

Compare Source

New Features

• metadata: stabilize ValueFromIncomingContext (#​7368)
  • Special Thanks: @​KarthikReddyPuli
• client: stabilize the WaitForStateChange and GetState methods, which were previously experimental. (#​7425)
• xds: Implement ADS flow control mechanism (#​7458)
  • See https://github.com/grpc/grpc/issues/34099 for context.
• balancer/rls: Add metrics for data cache and picker internals (#​7484, #​7495)
• xds: LRS load reports now include the total_issued_requests field. (#​7544)

Bug Fixes

• grpc: Clients now return status code INTERNAL instead of UNIMPLEMENTED when the server uses an unsupported compressor. This is consistent with the gRPC compression spec. (#​7461)
  • Special Thanks: @​Gayathri625
• transport: Fix a bug which could result in writes busy looping when the underlying conn.Write returns errors (#​7394)
  • Special Thanks: @​veshij
• client: fix race that could lead to orphaned connections and associated resources. (#​7390)
• xds: use locality from the connected address for load reporting with pick_first (#​7378)
  • without this fix, if a priority contains multiple localities with pick_first, load was reported for the wrong locality
• client: prevent hanging during ClientConn.Close() when the network is unreachable (#​7540)

Performance Improvements

• transport: double buffering is avoided when using an http connect proxy and the target server waits for client to send the first message. (#​7424)
• codec: Implement a new Codec which uses buffer recycling for encoded message (#​7356)
  • introduce a mem package to facilitate buffer reuse (#​7432)
  • Special Thanks: @​PapaCharlie

libbpf/libbpf (libbpf/libbpf)

v1.4.6: libbpf v1.4.6

Compare Source

Bug fix release:

• BPF skeleton forward compatibility fix (libbpf/libbpf@f6f2402);
• BTF endianness inheritance bug fix (libbpf/libbpf@fe28fae).

Full Changelog: libbpf/libbpf@v1.4.5...v1.4.6

libexpat/libexpat (libexpat/libexpat)

v2_6_3: 2.6.3

Compare Source

Original change log

libuv/libuv (libuv/libuv)

v1.49.0: : 2024.09.25, Version 1.49.0 (Stable)

Compare Source

See https://github.com/libuv/libuv/issues/4468 for details.

Dist files at https://dist.libuv.org/dist/v1.49.0/

Notable Changes

• linux: disable SQPOLL io_uring by default #​4492
• unix: reinstate preadv/pwritev fallback code #​4345
• win,fs: use the new Windows fast stat API #​4327

Important Bugs Fixed

• win,pipe: fix race with concurrent readers #​4470
• win,signal: fix data race dispatching SIGWINCH #​4488

mesonbuild/meson (mesonbuild/meson)

v1.5.2

Compare Source

openssl/openssl (openssl/openssl)

v3.3.2

Compare Source

• Fixed possible denial of service in X.509 name checks.

  Applications performing certificate name checks (e.g., TLS clients checking
  server certificates) may attempt to read an invalid memory address when
  comparing the expected name with an otherName subject alternative name of
  an X.509 certificate. This may result in an exception that terminates the
  application program.

  ([CVE-2024-6119])

  Viktor Dukhovni

• Fixed possible buffer overread in SSL_select_next_proto().

  Calling the OpenSSL API function SSL_select_next_proto with an empty
  supported client protocols buffer may cause a crash or memory contents
  to be sent to the peer.

  ([CVE-2024-5535])

  Matt Caswell

protocolbuffers/protobuf (protocolbuffers/protobuf)

v27.5: Protocol Buffers v27.5

Compare Source

Announcements

• Protobuf News may include additional announcements or pre-announcements for upcoming changes.

C++

• Fix cord handling in DynamicMessage and oneofs. (#​18374) (protocolbuffers/protobuf@6fa3f2d)

Java

• Add recursion check when parsing unknown fields in Java. (#​18388)
  https://github.com/protocolbuffers/protobuf/pull/183888388/commits/8bfa80b5422cc22d64bfba5aa3049b9d5143c99b)

Other

• Remove --copt="-Werror" from .bazelrc (#​18392) (protocolbuffers/protobuf@6481fec)

python/cpython (python/cpython)

v3.12.7

Compare Source

v3.12.6

Compare Source

systemd/systemd (systemd/systemd)

v256.6: systemd v256.6

Compare Source

Full Changelog: systemd/systemd@v256.5...v256.6

v256.5: systemd v256.5

Compare Source

Full Changelog: systemd/systemd@v256.4...v256.5

---

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.