Bump google.golang.org/grpc from 1.64.0 to 1.65.0

[dependabot]

Bumps google.golang.org/grpc from 1.64.0 to 1.65.0.

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.65.0

Dependencies

• Change support policy to cover only the latest TWO releases of Go, matching the policy for Go itself. See #7249 for more information. (#7250)
• Update x/net/http2 to address CVE-2023-45288 (#7282)

Behavior Changes

• credentials/tls: clients and servers will now reject connections that don't support ALPN when environment variable GRPC_ENFORCE_ALPN_ENABLED is set to "true" (case insensitive). (#7184)
  • NOTE: this behavior will become the default in a future release.
• metadata: remove String method from MD to make printing more consistent (#7373)

New Features

• grpc: add WithMaxCallAttempts to configure gRPC's retry behavior per-channel. (#7229)
  • Special Thanks: @​imoore76

Bug Fixes

• ringhash: properly apply endpoint weights instead of ignoring them (#7156)
• xds: fix a bug that could cause xds-enabled servers to stop accepting new connections after handshaking errors (#7128)
  • Special Thanks: @​bozaro

Release 1.64.1

Dependencies

• Update x/net/http2 to address CVE-2023-45288 (#7352)
• metadata: remove String method from MD to make printing consistent (#7374)

Commits

• 2da9769 Change version to 1.65.0 (#7306)
• ede96b7 metadata: remove String method (#7373)
• 64be203 grpc: Readd pick first name (#7336) (#7341)
• 25e33a6 examples: Add CSM Observability example (#7302) (#7318)
• 04a5f46 xds/internal/xdsclient: Emit unknown for CSM Labels if not present in CDS (#7...
• cff5c3e stats/opentelemetry: Add e2e testing for CSM Observability (#7279) (#7316)
• 9b970fd dns: fix constant 30s backoff for re-resolution (#7262) (#7311)
• 6d23620 documentation: on server, use FromIncomingContext for retrieving context and...
• 7e5898e xds: unify xDS client creation APIs meant for testing (#7268)
• 5d7bd7a interop/xds: Interop client and server changes for CSM Observability (#7280)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Temporary image deleted.

[zapier-sre-bot]

Mergecat's Review

Click to read mergecats review!

😼 Mergecat review of go.mod

@@ -54,7 +54,7 @@ require (
 	golang.org/x/exp v0.0.0-20240112132812-db7319d0e0e3
 	golang.org/x/net v0.26.0
 	golang.org/x/oauth2 v0.20.0
-	google.golang.org/grpc v1.64.0
+	google.golang.org/grpc v1.65.0
 	gopkg.in/dealancer/validate.v2 v2.1.0
 	gopkg.in/yaml.v3 v3.0.1
 	k8s.io/api v0.26.15

Feedback & Suggestions:

1. Dependency Update Verification: Ensure that the update from google.golang.org/grpc v1.64.0 to v1.65.0 is compatible with your codebase. Check the release notes for any breaking changes or deprecations that might affect your project.

2. Security Considerations: Verify if the new version addresses any security vulnerabilities. It's always good practice to keep dependencies up-to-date, but ensure that the update does not introduce new vulnerabilities.

3. Testing: After updating the dependency, run your test suite to ensure that everything works as expected. This will help catch any issues introduced by the new version.

4. Documentation: If your project has documentation that specifies dependency versions, make sure to update it to reflect this change.

---

Overall, the diff looks good, but always ensure thorough testing and verification when updating dependencies. 🚀

---

Dependency Review

Click to read mergecats review!

No suggestions found

[dependabot]

Superseded by #267.