Bump google.golang.org/grpc from 1.45.0 to 1.49.0 in /src/code.cloudfoundry.org

[dependabot[bot]]

Bumps google.golang.org/grpc from 1.45.0 to 1.49.0.

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.49.0

New Features

• gcp/observability: add support for Environment Variable GRPC_CONFIG_OBSERVABILITY_JSON (#5525)
• gcp/observability: add support for custom tags (#5565)

Behavior Changes

• server: reduce log level from Warning to Info for early connection establishment errors (#5524)
  • Special Thanks: @​jpkrohling

Bug Fixes

• client: fix race in flow control that could lead to unexpected EOF errors (#5494)
• client: fix a race that could cause RPCs to time out instead of failing more quickly with UNAVAILABLE (#5503)
• client & server: fix a panic caused by passing a nil stats handler to grpc.WithStatsHandler or grpc.StatsHandler (#5543)
• transport/server: fix a race that could cause a stray header to be sent (#5513)
• balancer: give precedence to IDLE over TRANSIENT_FAILURE when aggregating connectivity state (#5473)
• xds/xdsclient: request correct resource name when user specifies a new style resource name with empty authority (#5488)
• xds/xdsclient: NACK endpoint resources with zero weight (#5560)
• xds/xdsclient: fix bug that would reset resource version information after ADS stream restart (#5422)
• xds/xdsclient: fix goroutine leaks when load reporting is enabled (#5505)
• xds/ringhash: fix config update processing to recreate ring and picker when min/max ring size changes (#5557)
• xds/ringhash: avoid recreating subChannels when update doesn't change address weight information (#5431)
• xds/priority: fix bug which could cause priority LB to block all traffic after a config update (#5549)
• xds: fix bug when environment variable GRPC_EXPERIMENTAL_ENABLE_OUTLIER_DETECTION is set to true (#5537)

Release 1.48.0

Bug Fixes

• xds/priority: fix bug that could prevent higher priorities from receiving config updates (#5417)
• RLS load balancer: don't propagate the status code returned on control plane RPCs to data plane RPCs (#5400)

New Features

• stats: add support for multiple stats handlers in a single client or server (#5347)
• gcp/observability: add experimental OpenCensus tracing/metrics support (#5372)
• xds: enable aggregate and logical DNS clusters by default (#5380)
• credentials/google (for xds): support xdstp C2P cluster names (#5399)

Release 1.47.0

New Features

• xds: add support for RBAC metadata invert matchers (#5345)

Bug Fixes

• client: fix a context leaked if a connection to an address is lost before it is fully established (#5337)
  • Special Thanks: @​carzil
• client: fix potential panic during RPC retries (#5323)

... (truncated)

Commits

• 1c29e07 Change version to 1.49.0 (#5583)
• 8e5a84e xds/resolver: generate channel ID randomly (#5603)
• 92cee34 gcp/observability: Add logging filters for logging, tracing, and metrics API ...
• c7fe135 O11Y: Added support for custom tags (#5565)
• 7981af4 test/kokoro: add missing image tagging to the xDS interop url map buildscript...
• 6f34b7a xdsclient: NACK endpoint resource if load_balancing_weight is specified and i...
• f9409d3 ringhash: handle config updates properly (#5557)
• 946dde0 xdsclient: NACK endpoint resources with zero weight (#5560)
• b89f49b xdsclient: deflake Test/LDSWatch_PartialValid (#5552)
• 9bc72de grpc: remove mentions of WithBalancerName from comments (#5555)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)