… to v2.38.0 (#3240)

This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [io.grpc:grpc-core](https://redirect.github.com/grpc/grpc-java) |
`1.67.1` -> `1.68.1` |
[![age](https://developer.mend.io/api/mc/badges/age/maven/io.grpc:grpc-core/1.68.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/maven/io.grpc:grpc-core/1.68.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/maven/io.grpc:grpc-core/1.67.1/1.68.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/io.grpc:grpc-core/1.67.1/1.68.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [io.grpc:grpc-bom](https://redirect.github.com/grpc/grpc-java) |
`1.67.1` -> `1.68.1` |
[![age](https://developer.mend.io/api/mc/badges/age/maven/io.grpc:grpc-bom/1.68.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/maven/io.grpc:grpc-bom/1.68.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/maven/io.grpc:grpc-bom/1.67.1/1.68.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/io.grpc:grpc-bom/1.67.1/1.68.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>grpc/grpc-java (io.grpc:grpc-core)</summary>

###
[`v1.68.1`](https://redirect.github.com/grpc/grpc-java/releases/tag/v1.68.1)

##### gRPC Java 1.68.1 Release Notes

v1.68.0 was a mistake. This is the first release of version 1.68.x

##### Bug Fixes

- xds: Fix NullPointerException introduced in "Fix load reporting when
pick first is used for locality-routing"
([#&#8203;11553](https://redirect.github.com/grpc/grpc-java/issues/11553)).
This was in 1.67.1 but not 1.68.0

##### Behavior Changes

- core: JSON parsing rejects duplicate keys in objects
([#&#8203;11575](https://redirect.github.com/grpc/grpc-java/issues/11575))
([`4be69e3`](https://redirect.github.com/grpc/grpc-java/commit/4be69e3f8)).
This is the existing behavior in C core. Duplicate keys in objects are
dangerous as which value takes effect is undefined. Previously, the last
value was used
- okhttp: Detect transport executors with no remaining threads
([#&#8203;11503](https://redirect.github.com/grpc/grpc-java/issues/11503))
([`3a6be9c`](https://redirect.github.com/grpc/grpc-java/commit/3a6be9ca1)).
The transport uses two threads, but one is on-demand. If the executor
provided to `builder.transportExecutor()` runs out of threads (e.g., it
is a fixed-size thread pool), *all* transports can be wedged, unable to
run on-demand tasks, until keepalive kills one of them. Two threads are
now used when handshaking a new transport, and the transport will time
out after 1 second with “Timed out waiting for second handshake thread”
if two threads are unavailable
- gcp-csm-o11y: Get `mesh_id` value from `CSM_MESH_ID` environment
variable, instead of getting it from bootstrap file
([`84d30af`](https://redirect.github.com/grpc/grpc-java/commit/84d30afad))

##### Improvements

- New grpc-context-override-opentelemetry artifact
([#&#8203;11523](https://redirect.github.com/grpc/grpc-java/issues/11523))
([`782a44a`](https://redirect.github.com/grpc/grpc-java/commit/782a44ad6))
([#&#8203;11599](https://redirect.github.com/grpc/grpc-java/issues/11599))
([`e59ae5f`](https://redirect.github.com/grpc/grpc-java/commit/e59ae5fad)).
This is a `io.grpc.Context` storage override to store its state in
`io.opentelemetry.context.Context`. Libraries should not add a
dependency on this artifact, as applications can only have one storage
override in their classpath
- New grpc-s2a artifact. It is a transport that offloads the handshake
similar to ALTS, but for TLS. It provides
`io.grpc.s2a.S2AChannelCredentials`
- api: Enhance name resolver \`ResolutionResult\` to hold addresses or
error so the single listener API *onResult2* is used to convey both
success and error cases for name resolution
([#&#8203;11330](https://redirect.github.com/grpc/grpc-java/issues/11330))
([`1ded8af`](https://redirect.github.com/grpc/grpc-java/commit/1ded8aff8))
- core: Handle NameResolver/LoadBalancer exceptions when panicking
([`b692b9d`](https://redirect.github.com/grpc/grpc-java/commit/b692b9d26)).
This expands the class of bugs that will fail RPCs with the panic error,
versus some undefined behavior
- core: Use the default service config in case of initial name resolver
address resolution error
([#&#8203;11577](https://redirect.github.com/grpc/grpc-java/issues/11577))
([`fa26a8b`](https://redirect.github.com/grpc/grpc-java/commit/fa26a8bc5))
- core: `StreamTracer.inboundMessageRead()` now reports uncompressed
message size when the message does not need compression
([#&#8203;11598](https://redirect.github.com/grpc/grpc-java/issues/11598))
([`2aae68e`](https://redirect.github.com/grpc/grpc-java/commit/2aae68e11)).
Previously it always reported `-1` (unknown)
- netty: Avoid TCP_USER_TIMEOUT warning when explicitly specifying a
non-epoll channel type to use
([#&#8203;11564](https://redirect.github.com/grpc/grpc-java/issues/11564))
([`62f4098`](https://redirect.github.com/grpc/grpc-java/commit/62f409810))
- okhttp: Don't warn about missing Conscrypt
([`6f35422`](https://redirect.github.com/grpc/grpc-java/commit/6f3542297)).
This is especially helpful when using TLS but not running on Android
- android: For `UdsChannelBuilder`, use fake IP instead of localhost
([`a908b5e`](https://redirect.github.com/grpc/grpc-java/commit/a908b5e40)).
This avoids an unnecessary DNS lookup
- xds: Add xDS node ID in select control plane errors to enable
cross-referencing with control plane logs when debugging
([`f3cf7c3`](https://redirect.github.com/grpc/grpc-java/commit/f3cf7c3c7))
- xds: Enhanced how ADS stream terminations are handled, specifically
addressing cases where a response has or hasn't been received
(#&#8203;2e9c3e19f)
- binder: Update status code documentation for Android 11's package
visibility rules.
([#&#8203;11551](https://redirect.github.com/grpc/grpc-java/issues/11551))
([`99be6e9`](https://redirect.github.com/grpc/grpc-java/commit/99be6e985))
- binder: Update binderDied() error description to spell out the
possibilities for those unfamiliar with Android internals.
([#&#8203;11628](https://redirect.github.com/grpc/grpc-java/issues/11628))
([`46c1b38`](https://redirect.github.com/grpc/grpc-java/commit/46c1b387f))
- example-gauth: Use application default creds instead of file argument
([#&#8203;11595](https://redirect.github.com/grpc/grpc-java/issues/11595))
([`94a0a0d`](https://redirect.github.com/grpc/grpc-java/commit/94a0a0d1c))

##### Dependencies

- Updated protobuf-java to 3.25.5. This helps avoid CVE-2024-7254
([`2ff837a`](https://redirect.github.com/grpc/grpc-java/commit/2ff837ab6))

Thanks to:\
[@&#8203;Juneezee](https://redirect.github.com/Juneezee)\
[@&#8203;lgalfaso](https://redirect.github.com/lgalfaso)\
[@&#8203;bestbeforetoday](https://redirect.github.com/bestbeforetoday)\
[@&#8203;hlx502](https://redirect.github.com/hlx502)\
[@&#8203;JoeCqupt](https://redirect.github.com/JoeCqupt)

###
[`v1.68.0`](https://redirect.github.com/grpc/grpc-java/releases/tag/v1.68.0):
MISTAKE

This was supposed to be v1.67.0, but there was a mistake during the
release process. This has everything in v1.67.1, *except* for:

- xds: Fix NullPointerException introduced in "Fix load reporting when
pick first is used for locality-routing"
([https://github.com/grpc/grpc-java/pull/11553](https://redirect.github.com/grpc/grpc-java/pull/11553))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/googleapis/sdk-platform-java).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC44MC4wIiwidXBkYXRlZEluVmVyIjoiMzguMTM1LjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->

🤖 I have created a release *beep* *boop*
---


<details><summary>2.50.0</summary>

##
[2.50.0](googleapis/sdk-platform-java@v2.49.0...v2.50.0)
(2024-11-14)


### Features

* Add experimental S2A integration in client libraries grpc transport
([#3326](googleapis/sdk-platform-java#3326))
([e374427](googleapis/sdk-platform-java@e374427))
* enable selective generation based on service config include list
([#3323](googleapis/sdk-platform-java#3323))
([e4dd181](googleapis/sdk-platform-java@e4dd181))
* introduce `java.time` to java-core
([#3330](googleapis/sdk-platform-java#3330))
([1a4495f](googleapis/sdk-platform-java@1a4495f))
* Update Gapic-Generator to generate libraries using `java.time` methods
([#3321](googleapis/sdk-platform-java#3321))
([82bc610](googleapis/sdk-platform-java@82bc610))


### Bug Fixes

* Fix flaky test
ScheduledRetryingExecutorTest.testCancelOuterFutureAfterStart
([#3335](googleapis/sdk-platform-java#3335))
([1f7e9b8](googleapis/sdk-platform-java@1f7e9b8))
* httpjson callables to trace attempts (started, failed)
([#3300](googleapis/sdk-platform-java#3300))
([ade4bb3](googleapis/sdk-platform-java@ade4bb3))
* instantiate GaxProperties at build time to ensure we get the protobuf
version
([#3365](googleapis/sdk-platform-java#3365))
([a4224a4](googleapis/sdk-platform-java@a4224a4))
* protobuf version not always getting set in headers
([#3322](googleapis/sdk-platform-java#3322))
([024de0a](googleapis/sdk-platform-java@024de0a))
* use BuildKit instead of legacy builder to build the Hermetic Build
images
([#3338](googleapis/sdk-platform-java#3338))
([b2610a2](googleapis/sdk-platform-java@b2610a2))


### Dependencies

* update google auth library dependencies to v1.30.0
([#3367](googleapis/sdk-platform-java#3367))
([0fc8d39](googleapis/sdk-platform-java@0fc8d39))
* update grpc dependencies to v1.68.1
([#3240](googleapis/sdk-platform-java#3240))
([e67c9ff](googleapis/sdk-platform-java@e67c9ff))


### Documentation

* fix list num
([#3356](googleapis/sdk-platform-java#3356))
([dbbd049](googleapis/sdk-platform-java@dbbd049))
* **hermetic-build:** indicate usage of Docker Buildkit in development
guide
([#3337](googleapis/sdk-platform-java#3337))
([2dfd2e2](googleapis/sdk-platform-java@2dfd2e2))
* modify hermetic build docs
([#3331](googleapis/sdk-platform-java#3331))
([a3d7380](googleapis/sdk-platform-java@a3d7380))
</details>

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com>

Fixes #3240

* chore(main): release 2.56.0

* chore: generate libraries at Mon Aug 25 19:27:55 UTC 2025

---------

Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com>
Co-authored-by: cloud-java-bot <cloud-java-bot@google.com>