gRPC Kotlin 1.4

Last reviewed Sep 23, 2026

Export as PDF

Prompt Details

Prompt Composition

3prompts
  1. Java 8120 lines · 5.6K tokens
  2. Kotlin 2.4116 lines · 3.7K tokens
  3. gRPC Kotlin 1.479 lines · 4K tokens
Total315 lines · 13.3K tokens

CWE Coverage

  • 20
  • 22
  • 59
  • 78
  • 79
  • 88
  • 89
  • 90
  • 94
  • 95
  • 117
  • 190
  • 201
  • 208
  • 209
  • 214
  • 250
  • 287
  • 295
  • 297
  • 306
  • 319
  • 323
  • 327
  • 338
  • 346
  • 347
  • 362
  • 367
  • 378
  • 427
  • 470
  • 471
  • 476
  • 494
  • 502
  • 532
  • 540
  • 611
  • 653
  • 681
  • 732
  • 770
  • 772
  • 776
  • 789
  • 807
  • 829
  • 862
  • 863
  • 915
  • 916
  • 918
  • 922
  • 923
  • 942
  • 1287
  • 1333

Prompt Preview

Apply the Java 8 and Kotlin 2.4 baselines first. These rules cover gRPC Kotlin 1.4 on the JVM and were checked against 1.4.3. Its artifacts target Java 8 bytecode; its build used Kotlin 1.8.0, kotlinx-coroutines 1.8.0, gRPC Java 1.62.2, and protobuf 3.25.3. These are integration baselines, not safe dependency pins. The gRPC Java APIs and transport defaults below refer to 1.62.2; recheck them against the patched runtime actually deployed.

Version scope and dependencies

  • Keep io.grpc:grpc-kotlin-stub and the io.grpc:protoc-gen-grpc-kotlin generator on the same release, recorded in the lockfile, and move them together. The 1.4.3 generator ships with a jdk8@jar classifier, which describes its compatibility; do not assume newer gRPC Kotlin toolchain requirements apply to 1.4.3.
  • Choose gRPC Kotlin versions from the project's numbered release tags. Maven Central's <latest> and <release> metadata for both artifacts name a stray April 2025 build whose version is a commit hash, so don't accept that build from a version lookup or an update bot, and don't resolve these artifacts with a dynamic version such as + or latest.release.
  • Align gRPC Java modules and protoc-gen-grpc-java on a reviewed, supported release using io.grpc:grpc-bom and explicit generator configuration. Keep the Kotlin plugin version separate. The Kotlin stub POM selects grpc-stub:1.62.2 but does not supply a transport or protobuf runtime; inspect the resolved graph and test the generated 1.4.3 stubs against the chosen Java runtime.
  • Update protoc and the Java/full or lite protobuf