// Procedure to update gRPC, Netty, and BoringSSL versions in this Java/Maven project while maintaining compatibility
| name | update-grpc |
| description | Procedure to update gRPC, Netty, and BoringSSL versions in this Java/Maven project while maintaining compatibility |
| allowed-tools | Read, Grep, WebFetch, Edit |
gRPC, Netty, and BoringSSL are tightly coupled together. Incompatible version combinations will cause runtime failures. When updating gRPC, you must follow this procedure:
Browse the compatibility matrix at https://github.com/grpc/grpc-java/blob/master/SECURITY.md#netty to determine the correct Netty and BoringSSL (netty-tcnative-boringssl-static) versions for the target gRPC version.
Update the version properties in all of the following POM files:
pom.xml (root)central/pom.xmlagent/shaded/core/pom.xmlagent/shaded/central-https-linux/pom.xmlagent/shaded/central-https-windows/pom.xmlagent/shaded/central-https-osx/pom.xmlAll three versions (gRPC, Netty, BoringSSL) must be updated together — never update one without checking the others.
After modifying the POM files, grep the project for any other references to the old versions to ensure nothing was missed:
grep -r "OLD_GRPC_VERSION" --include="pom.xml"
grep -r "OLD_NETTY_VERSION" --include="pom.xml"
grep -r "OLD_BORINGSSL_VERSION" --include="pom.xml"