Skip to content

chore(deps): update grpcio-tools requirement from <1.81,>=1.60 to >=1.60,<1.82 - #148

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/grpcio-tools-gte-1.60-and-lt-1.82
Open

chore(deps): update grpcio-tools requirement from <1.81,>=1.60 to >=1.60,<1.82#148
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/grpcio-tools-gte-1.60-and-lt-1.82

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 15, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on grpcio-tools to permit the latest version.

Release notes

Sourced from grpcio-tools's releases.

Release v1.81.1

This is release 1.81.0 (graphic) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

  • [EventEngine] Fix a potential use-after-free error on Windows. (#42078)
  • [ssl] Server side handshaker factory stores a map of key signers. (#42002)
  • [Core] Fix completion queue shutdown race on weak memory models (ARM). (#41510)
  • [EventEngine] Fix a Windows race that causes an assertion error. (#41563)
  • [grpc_error] enable error_flatten experiment in OSS. (#41471)

Objective-C

  • [ObjC] Add receiveNextMessage to GRPCUnaryProtoCall. (#42260)

Python

  • [Python] Add typing_extensions dep to aio Bazel target. (#42001)
  • [Python] [Pyright] Part 1 - Pyright for src/python/grpcio/grpc/aio/_base_server.py. (#42240)
  • [Python] Drop 3.9. (#42145)
  • [Python] grpc-status: Relax protobuf dependency upper bound to allow 7.x. (#41948)
  • [Python] [Typeguard] Part 5 - Add Typeguard SYNC Stack in tests. (#40278)
  • [Python] Remove GIL from ReceiveMessageOperation.un_c method. (#41812)
  • [Python] Support observability in AsyncIO stack. (#41573)
  • [Python] Trim Python2 backward compatiblity syntax - removed (object) inheritance. (#41708)

Ruby

  • [Ruby] Drop support for EOL Ruby 3.1 and clean up. (#41435)
  • [Ruby] Composed CallCredentials keep a reference to their source. (#41782)
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jun 15, 2026
@dependabot
dependabot Bot requested a review from jjviscomi as a code owner June 15, 2026 06:22
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jun 15, 2026
@dependabot
dependabot Bot force-pushed the dependabot/pip/grpcio-tools-gte-1.60-and-lt-1.82 branch from 1017ee6 to 9efab37 Compare June 16, 2026 19:48
@jjviscomi

Copy link
Copy Markdown
Owner

Holding this for now rather than declining it. The <1.81 cap on grpcio-tools is deliberate, and the precondition for lifting it (documented in the pyproject.toml comment next to the pin) is not yet met.

Why:

  • grpcio-tools declares Requires-Dist: grpcio>=<its own version>, so a grpcio-tools newer than the installed grpcio is a pip-flagged incompatibility, and the generated stubs expect a matching grpcio runtime.
  • Five Python example CI jobs install bqemulator editable (pip install -e ".[dev,all]") and then their hash-pinned requirements.txt. Four of them (pytest-integration, dbt-local, airflow-dag-test, pyspark-bigquery) pin grpcio==1.80.0; only export-to-gcs is on grpcio==1.81.0.
  • Lifting the cap to <1.82 lets the editable install pull grpcio-tools==1.81, then requirements.txt pins grpcio==1.80.0 back down while leaving grpcio-tools at 1.81 (it is not in the lock). That is grpcio-tools 1.81 newer than grpcio 1.80, the exact skew the cap prevents.
  • This PR only touches pyproject.toml, which is not in examples.yml's path filter, so those example jobs do not run here. The breakage would be latent (surfacing on the next docs/examples/** PR or the nightly sweep) rather than caught at merge.

There is no CVE forcing this bump, so we will hold until the remaining example grpcio client locks move to >=1.81 (the comment's stated precondition), then lift grpcio-tools and grpcio-health-checking together and update the comment. Leaving this open so it can be picked up at that point.

@dependabot
dependabot Bot force-pushed the dependabot/pip/grpcio-tools-gte-1.60-and-lt-1.82 branch from 9efab37 to 9862896 Compare June 20, 2026 19:15
Updates the requirements on [grpcio-tools](https://github.com/grpc/grpc) to permit the latest version.
- [Release notes](https://github.com/grpc/grpc/releases)
- [Commits](grpc/grpc@v1.60.0...v1.81.1)

---
updated-dependencies:
- dependency-name: grpcio-tools
  dependency-version: 1.81.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/grpcio-tools-gte-1.60-and-lt-1.82 branch from 9862896 to 84ebd49 Compare June 28, 2026 15:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant