deps: update gRPC

[elharo]

@suztomo @chingor13

[elharo]

Repository rule http_archive defined at:
  /home/runner/.cache/bazel/_bazel_runner/708235df2b9026c2ff59e4840c097026/external/bazel_tools/tools/build_defs/repo/http.bzl:336:31: in <toplevel>
ERROR: /home/runner/work/gax-java/gax-java/gax-grpc/BUILD.bazel:46:13: no such package '@io_netty_netty_tcnative_boringssl_static//jar': The repository '@io_netty_netty_tcnative_boringssl_static' could not be resolved and referenced by '//gax-grpc:gax_grpc'
ERROR: Analysis of target '//gax-grpc:gax_grpc' failed; build aborted: Analysis failed
INFO: Elapsed time: 12.565s
INFO: 0 processes.
ERROR: Couldn't start the build. Unable to run tests

[codecov]

Codecov Report

Merging #1263 (1c96f64) into master (52296b9) will not change coverage.
The diff coverage is n/a.

@@            Coverage Diff            @@
##             master    #1263   +/-   ##
=========================================
  Coverage     79.19%   79.19%           
  Complexity     1235     1235           
=========================================
  Files           209      209           
  Lines          5378     5378           
  Branches        454      454           
=========================================
  Hits           4259     4259           
  Misses          939      939           
  Partials        180      180           

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 52296b9...1c96f64. Read the comment docs.

[elharo]

seems gRPC 1.35.0 still depends on commons-lang. Next release should remove that.

[elharo]

Can anyone explain why this upgrade requires me to add all these transitive dependencies from gRPC? Something about bazel builds I'm missing? @ejona86

[ejona86]

Seems you aren't using mvn_install: https://github.com/googleapis/gax-java/blob/master/WORKSPACE

https://github.com/grpc/grpc-java/releases/tag/v1.33.0

bazel: Remove Maven repositories from repositories.bzl, in favor of maven_install. v1.27.0 introduced support for maven_install and encouraged users to migrate. See examples/WORKSPACE for an example. maven_install dramatically reduces the boilerplate for maven dependencies and properly handles transitive dependencies and version selection. gRPC is not yet using the @maven workspace, so it is still possible to use other dependency tools.

https://github.com/grpc/grpc-java/releases/tag/v1.27.0

Bazel users should migrate to maven_install. Please open an issue to report problems migrating to maven_install.

bazel: Support maven_install (#6553). See examples/WORKSPACE for typical usage. grpc-java still supports the jvm_maven_import_external()-based loading only to ease migration. grpc-java will drop usages of jvm_maven_import_external() in the future