fix(deps): update module google.golang.org/grpc to v1.76.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
google.golang.org/grpc	v1.73.0 -> v1.76.0

---

Release Notes

grpc/grpc-go (google.golang.org/grpc)

v1.76.0: Release 1.76.0

Compare Source

Dependencies

• Minimum supported Go version is now 1.24 (#​8509)
  • Special Thanks: @​kevinGC

Bug Fixes

• client: Return status INTERNAL when a server sends zero response messages for a unary or client-streaming RPC. (#​8523)
• client: Fail RPCs with status INTERNAL instead of UNKNOWN upon receiving http headers with status 1xx and END_STREAM flag set. (#​8518)
  • Special Thanks: @​vinothkumarr227
• pick_first: Fix race condition that could cause pick_first to get stuck in IDLE state on backend address change. (#​8615)

New Features

• credentials: Add credentials/jwt package providing file-based JWT PerRPCCredentials (A97). (#​8431)
  • Special Thanks: @​dimpavloff

Performance Improvements

• client: Improve HTTP/2 header size estimate to reduce re-allocations. (#​8547)
• encoding/proto: Avoid redundant message size calculation when marshaling. (#​8569)
  • Special Thanks: @​rs-unity

v1.75.1: Release 1.75.1

Compare Source

Bug Fixes

• transport: Fix a data race while copying headers for stats handlers in the std lib http2 server transport. (#​8519)
• xdsclient:
  • Fix a data race caused while reporting load to LRS. (#​8483)
  • Fix regression preventing empty node IDs when creating an LRS client. (#​8483)
• server: Fix a regression preventing streams from being cancelled or timed out when blocked on flow control. (#​8528)

v1.75.0: Release 1.75.0

Compare Source

Behavior Changes

• xds: Remove support for GRPC_EXPERIMENTAL_XDS_FALLBACK environment variable. Fallback support can no longer be disabled. (#​8482)
• stats: Introduce DelayedPickComplete event, a type alias of PickerUpdated. (#​8465)
  • This (combined) event will now be emitted only once per call, when a transport is successfully selected for the attempt.
  • OpenTelemetry metrics will no longer have multiple "Delayed LB pick complete" events in Go, matching other gRPC languages.
  • A future release will delete the PickerUpdated symbol.
• credentials: Properly apply grpc.WithAuthority as the highest-priority option for setting authority, above the setting in the credentials themselves. (#​8488)
  • Now that this WithAuthority is available, the credentials should not be used to override the authority.
• round_robin: Randomize the order in which addresses are connected to in order to spread out initial RPC load between clients. (#​8438)
• server: Return status code INTERNAL when a client sends more than one request in unary and server streaming RPC. (#​8385)
  • This is a behavior change but also a bug fix to bring gRPC-Go in line with the gRPC spec.

New Features

• dns: Add an environment variable (GRPC_ENABLE_TXT_SERVICE_CONFIG) to provide a way to disable TXT lookups in the DNS resolver (by setting it to false). By default, TXT lookups are enabled, as they were previously. (#​8377)

Bug Fixes

• xds: Fix regression preventing empty node IDs in xDS bootstrap configuration. (#​8476)
  • Special Thanks: @​davinci26
• xds: Fix possible panic when certain invalid resources are encountered. (#​8412)
  • Special Thanks: @​wooffie
• xdsclient: Fix a rare panic caused by processing a response from a closed server. (#​8389)
• stats: Fix metric unit formatting by enclosing non-standard units like call and endpoint in curly braces to comply with UCUM and gRPC OpenTelemetry guidelines. (#​8481)
• xds: Fix possible panic when clusters are removed from the xds configuration. (#​8428)
• xdsclient: Fix a race causing "resource doesn not exist" when rapidly subscribing and unsubscribing to the same resource. (#​8369)
• client: When determining the authority, properly percent-encode (if needed, which is unlikely) when the target string omits the hostname and only specifies a port (grpc.NewClient(":<port-number-or-name>")). (#​8488)

v1.74.3: Release 1.74.3

Compare Source

Bug Fixes

• xds: Fix a regression preventing empty node IDs in the bootstrap configuration. (#​8476 , #​8483)
• xdsclient: Fix a data race caused while reporting load to LRS. (#​8483)
• server: Fix a regression preventing streams from being cancelled or timed out when blocked on flow control. (#​8528)

v1.74.2: Release 1.74.2

Compare Source

New Features

• grpc: introduce new DialOptions and ServerOptions (WithStaticStreamWindowSize, WithStaticConnWindowSize, StaticStreamWindowSize, StaticConnWindowSize) that force fixed window sizes for all HTTP/2 connections. By default, gRPC uses dynamic sizing of these windows based upon a BDP estimation algorithm. The existing options (WithInitialWindowSize, etc) also disable BDP estimation, but this behavior will be changed in a following release. (#​8283)

API Changes

• balancer: add ExitIdle method to Balancer interface. Earlier, implementing this method was optional. (#​8367)

Behavior Changes

• xds: Remove the GRPC_EXPERIMENTAL_ENABLE_LEAST_REQUEST environment variable that allows disabling the least request balancer with xDS. Least request was made available by default with xDS in v1.72.0. (#​8248)
  • Special Thanks: @​atollena
• server: allow 0s grpc-timeout header values, which older gRPC-Java versions could send. This restores the behavior of grpc-go before v1.73.0. (#​8439)

Bug Fixes

• googledirectpath: avoid logging the error message Attempt to set a bootstrap configuration... when creating multiple directpath channels. (#​8419)

Performance Improvements

• transport: reduce heap allocations by pooling objects and avoiding method-to-closure conversions. (#​8361)
• transport: reduce heap allocations by re-using mem.Reader objects. (#​8360)

Documentation

• examples: add examples to demonstrate enabling experimental metrics using the OpenTelemetry plugin. (#​8388)
  • Special Thanks: @​vinothkumarr227

v1.74.1: Release 1.74.1

Compare Source

Version 1.74.1 retracts release v1.74.0 and itself. Release 1.74.0 was accidentally tagged on the wrong commit and should not be used. Version 1.73.0 should be used until 1.74.2 is released.

v1.74.0: Release 1.74.0

Compare Source

Release 1.74.0 was accidentally tagged on the wrong commit and should not be used. Version 1.73.0 should be used until 1.74.1 is released.

v1.73.1: Release 1.73.1

Compare Source

Bug Fixes

• server: Fix a regression preventing streams from being cancelled or timed out when blocked on flow control. (#​8528)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 3 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.23.0 -> 1.24.0
golang.org/x/net	v0.38.0 -> v0.42.0
golang.org/x/sys	v0.31.0 -> v0.34.0
google.golang.org/genproto/googleapis/rpc	v0.0.0-20250324211829-b45e905df463 -> v0.0.0-20250804133106-a7a43d27e69b

[coveralls]

coverage: 28.238%. remained the same
when pulling bb3c445 on renovate/google.golang.org-grpc-1.x
into e95697e on master.