Bump google.golang.org/grpc from 1.45.0 to 1.47.0 in /src/code.cloudfoundry.org

[dependabot[bot]]

Bumps google.golang.org/grpc from 1.45.0 to 1.47.0.

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.47.0

New Features

• xds: add support for RBAC metadata invert matchers (#5345)

Bug Fixes

• client: fix a context leaked if a connection to an address is lost before it is fully established (#5337)
  • Special Thanks: @​carzil
• client: fix potential panic during RPC retries (#5323)
• xds/client: fix a potential concurrent map read/write in load reporting (#5331)
• client/SubConn: do not recreate addrConn if UpdateAddresses is called with the same addresses (#5373)
• xds/eds: resources containing duplicate localities with the same priority will be rejected (#5303)
• server: return Canceled or DeadlineExceeded status code when writing headers to a stream that is already closed (#5292)
  • Special Thanks: @​idiamond-stripe

Behavior Changes

• xds/priority: start the init timer when a child switches to Connecting from non-failure states (#5334)
• server: respond with HTTP Status 405 and gRPC status INTERNAL if the method sent to server is not POST (#5364)

Documentation

• server: clarify documentation around setting and sending headers and ServerStream errors (#5302)

Release v1.46.2

Bug Fixes

• client: fix potential panic during RPC retries (#5323)
• xds: fix leak of deleted CDS resources from CSDS view (#5339)

Release 1.46.0

New Features

• server: Support setting TCP_USER_TIMEOUT on grpc.Server connections using keepalive.ServerParameters.Time (#5219)
  • Special Thanks: @​bonnefoa
• client: perform graceful switching of LB policies in the ClientConn by default (#5285)
• all: improve logging by including channelz identifier in log messages (#5192)

API Changes

• grpc: delete WithBalancerName() API, deprecated over 4 years ago in #1697 (#5232)
• balancer: change BuildOptions.ChannelzParentID to an opaque identifier instead of int (#5192)
  • Note: the balancer package is labeled as EXPERIMENTAL, and we don't believe users were using this field.

Behavior Changes

• client: change connectivity state to TransientFailure in pick_first LB policy when all addresses are removed (#5274)
  • This is a minor change that brings grpc-go's behavior in line with the intended behavior and how C and Java behave.
• metadata: add client-side validation of HTTP-invalid metadata before attempting to send (#4886)
  • Special Thanks: @​Patrick0308

... (truncated)

Commits

• 5b509df Change version to 1.47.0 (#5377)
• ed75225 Don't call cmp in non testing file (#5370)
• 081c688 client: fix hctx leakage in addrConn.createTransport (#5337)
• 30b9d59 client/SubConn: do not recreate addrConn if UpdateAddresses is called with th...
• 459729d xds/priority: avoid sending duplicate updates to children (#5374)
• 9f4b31a Added HTTP status and grpc status to POST check (#5364)
• 333a441 xds/ringhash: update connectivity state aggregation, and make sure at least o...
• e23132c Added support for metadata matcher invert (#5345)
• d9b952b xds/resolver: use correct resource name in log message (#5357)
• db79903 xds/priority: start the init timer when a child switch to Connecting from non...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot[bot]]

Superseded by #156.