Sourced from grpcio's releases.

Release v1.53.2

This is release gRPC Core 1.53.2 (glockenspiel).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

Core

• [backport][iomgr][EventEngine] Improve server handling of file descriptor exhaustion by @​drfloob in grpc/grpc#33672

Release v1.53.1

This is release gRPC Core 1.53.1 (glockenspiel).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

• Fixed CVE-2023-32731
• Fixed CVE-2023-32732

Release v1.53.0

This is release 1.53.0 (glockenspiel) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

• xDS: fix crash when removing the last endpoint from the last locality in weighted_target. (#32592)
• filter stack: pass peer name up via recv_initial_metadata batch. (#31933)
• [EventEngine] Add advice against blocking work in callbacks. (#32397)
• [http2] Dont drop connections on metadata limit exceeded. (#32309)
• xDS: reject aggregate cluster with empty cluster list. (#32238)
• Fix Python epoll1 Fork Support. (#32196)
• server: introduce ServerMetricRecorder API and move per-call reporting from a C++ interceptor to a C-core filter. (#32106)
• [EventEngine] Add invalid handle types to the public API. (#32202)
• [EventEngine] Refactoring the EventEngine Test Suite: Part 1. (#32127)
• xDS: fix WeightedClusters total weight handling. (#32134)

C++

• Update minimum MSVC version to 2019. (#32615)
• Use CMake variables for paths in pkg-config files. (#31671)

... (truncated)

Sourced from grpcio's changelog.

gRPC Release Schedule

Below is the release schedule for gRPC Java, Go and Core and its dependent languages C++, C#, Objective-C, PHP, Python and Ruby.

Releases are scheduled every six weeks on Tuesdays on a best effort basis. In some unavoidable situations a release may be delayed or released early or a language may skip a release altogether and do the next release to catch up with other languages. See the past releases in the links above. A six-week cycle gives us a good balance between delivering new features/fixes quickly and keeping the release overhead low.

The gRPC release support policy can be found here.

Releases are cut from release branches. For Core and Java repos, the release branch is cut two weeks before the scheduled release date. For Go, the branch is cut just before the release. An RC (release candidate) is published for Core and its dependent languages just after the branch cut. This RC is later promoted to release version if no further changes are made to the release branch. We do our best to keep head of master branch stable at all times regardless of release schedule. Daily build packages from master branch for C#, PHP, Python, Ruby and Protoc plugins are published on packages.grpc.io. If you depend on gRPC in production we recommend to set up your CI system to test the RCs and, if possible, the daily builds.

Names of gRPC releases are here.

Release	Scheduled Branch Cut	Scheduled Release Date
v1.17.0	Nov 19, 2018	Dec 4, 2018
v1.18.0	Jan 2, 2019	Jan 15, 2019
v1.19.0	Feb 12, 2019	Feb 26, 2019
v1.20.0	Mar 26, 2019	Apr 9, 2019
v1.21.0	May 7, 2019	May 21, 2019
v1.22.0	Jun 18, 2019	Jul 2, 2019
v1.23.0	Jul 30, 2019	Aug 13, 2019
v1.24.0	Sept 10, 2019	Sept 24, 2019
v1.25.0	Oct 22, 2019	Nov 5, 2019
v1.26.0	Dec 3, 2019	Dec 17, 2019
v1.27.0	Jan 14, 2020	Jan 28, 2020
v1.28.0	Feb 25, 2020	Mar 10, 2020
v1.29.0	Apr 7, 2020	Apr 21, 2020
v1.30.0	May 19, 2020	Jun 2, 2020
v1.31.0	Jul 14, 2020	Jul 28, 2020
v1.32.0	Aug 25, 2020	Sep 8, 2020
v1.33.0	Oct 6, 2020	Oct 20, 2020
v1.34.0	Nov 17, 2020	Dec 1, 2020
v1.35.0	Dec 29, 2020	Jan 12, 2021
v1.36.0	Feb 9, 2021	Feb 23, 2021
v1.37.0	Mar 23, 2021	Apr 6, 2021
v1.38.0	May 4, 2021	May 18, 2021
v1.39.0	Jun 15, 2021	Jun 29, 2021
v1.40.0	Jul 27, 2021	Aug 10, 2021
v1.41.0	Sep 7, 2021	Sep 21, 2021
v1.42.0	Oct 19, 2021	Nov 2, 2021
v1.43.0	Nov 30, 2021	Dec 14, 2021
v1.44.0	Jan 11, 2022	Jan 25, 2022
v1.45.0	Feb 22, 2022	Mar 8, 2022

• afb307f [v1.53.x][Interop] Backport Python image update (#33864)
• 7a9373b [Backport] [dependency] Restrict cython to less than 3.X (#33770)
• fdb64a6 [v1.53][Build] Update Phusion baseimage (#33767) (#33836)
• cdf4186 [PSM Interop] Legacy tests: fix xDS test client build (v1.53.x backport) (#33...
• ce5b93a [PSM Interop] Legacy test builds always pull the driver from master (v1.53.x ...
• b24b6ea [release] Bump release version to 1.53.2 (#33709)
• 1e86ca5 [backport][iomgr][EventEngine] Improve server handling of file descriptor exh...
• aff3066 [PSM interop] Don't fail url_map target if sub-target already failed (v1.53.x...
• 539d75c [PSM interop] Don't fail target if sub-target already failed (#33222) (v1.53....
• 3e79c88 [Release] Bump version to 1.53.1 (on v1.53.x branch) (#33047)
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.