build(deps): bump google.golang.org/grpc from 1.83.1 to 1.83.2

[dependabot]

Bumps google.golang.org/grpc from 1.83.1 to 1.83.2.

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.83.2

Security

• server: Reject requests missing both :authority and Host headers with HTTP 400 and status Internal. (grpc/grpc-go#9365)
  • Special Thanks: @​winklemad

Commits

• 030ee8b Update version to 1.83.2 (#9375)
• 8668b69 cherry-pick #9365 to v1.83.x (#9366)
• a3e952d cherry-pick #9346 to v1.83.x and update x/net dependency (#9369)
• 58f8fd9 Change version to 1.83.2-dev (#9337)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[Copilot]

Pull request overview

This PR updates the vendored Go module dependencies, primarily bumping google.golang.org/grpc from v1.83.1 to v1.83.2 (including a server-side security fix), along with associated transitive updates (golang.org/x/net, x/sync, x/sys, x/text) reflected in go.mod, go.sum, and vendor/.

Changes:

• Bump google.golang.org/grpc to v1.83.2 and refresh vendored sources.
• Update transitive dependencies (golang.org/x/net, x/sync, x/sys, x/text) and regenerate related vendored/generated syscall files.
• Incorporate upstream behavior/security adjustments in vendored grpc and x/net/http2 code.

Reviewed changes

Copilot reviewed 1 out of 49 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
vendor/modules.txt	Updates vendored module versions recorded for the workspace.
vendor/google.golang.org/grpc/version.go	Updates gRPC version constant to 1.83.2.
vendor/google.golang.org/grpc/internal/transport/http2_server.go	Applies upstream security behavior: reject requests missing both Host and :authority.
vendor/golang.org/x/text/unicode/norm/normalize.go	Updates normalization logic to treat invalid runes via isInvalid() sentinel.
vendor/golang.org/x/text/unicode/norm/iter.go	Simplifies iterator advancement now that invalid rune size handling is standardized.
vendor/golang.org/x/text/unicode/norm/forminfo.go	Adds invalid-rune sentinel (flags == 0x80) and adjusts quick-check flag masking.
vendor/golang.org/x/sys/windows/types_windows.go	Adds MAX_USHORT constant used for bounds checks.
vendor/golang.org/x/sys/windows/syscall_windows.go	Tightens NewNTString to validate size and avoid unsafe pointer patterns.
vendor/golang.org/x/sys/windows/security_windows.go	Documents/annotates pinning requirements and deprecates unsafe TrusteeValueFromString usage.
vendor/golang.org/x/sys/unix/zsyscall_linux.go	Adds/adjusts generated Linux syscall wrapper (EpollWait) targeting SYS_EPOLL_PWAIT.
vendor/golang.org/x/sys/unix/zsyscall_linux_sparc64.go	Removes arch-specific generated EpollWait wrapper (now centralized).
vendor/golang.org/x/sys/unix/zsyscall_linux_s390x.go	Removes arch-specific generated EpollWait wrapper (now centralized).
vendor/golang.org/x/sys/unix/zsyscall_linux_riscv64.go	Removes arch-specific generated EpollWait wrapper (now centralized).
vendor/golang.org/x/sys/unix/zsyscall_linux_ppc64le.go	Removes arch-specific generated EpollWait wrapper (now centralized).
vendor/golang.org/x/sys/unix/zsyscall_linux_ppc64.go	Removes arch-specific generated EpollWait wrapper (now centralized).
vendor/golang.org/x/sys/unix/zsyscall_linux_ppc.go	Removes arch-specific generated EpollWait wrapper (now centralized).
vendor/golang.org/x/sys/unix/zsyscall_linux_mipsle.go	Removes arch-specific generated EpollWait wrapper (now centralized).
vendor/golang.org/x/sys/unix/zsyscall_linux_mips64le.go	Removes arch-specific generated EpollWait wrapper (now centralized).
vendor/golang.org/x/sys/unix/zsyscall_linux_mips64.go	Removes arch-specific generated EpollWait wrapper (now centralized).
vendor/golang.org/x/sys/unix/zsyscall_linux_mips.go	Removes arch-specific generated EpollWait wrapper (now centralized).
vendor/golang.org/x/sys/unix/zsyscall_linux_loong64.go	Removes arch-specific generated EpollWait wrapper (now centralized).
vendor/golang.org/x/sys/unix/zsyscall_linux_arm64.go	Removes arch-specific generated EpollWait wrapper (now centralized).
vendor/golang.org/x/sys/unix/zsyscall_linux_arm.go	Removes arch-specific generated EpollWait wrapper (now centralized).
vendor/golang.org/x/sys/unix/zsyscall_linux_amd64.go	Removes arch-specific generated EpollWait wrapper (now centralized).
vendor/golang.org/x/sys/unix/zsyscall_linux_386.go	Removes arch-specific generated EpollWait wrapper (now centralized).
vendor/golang.org/x/sys/unix/zerrors_linux.go	Updates Linux constants (including correcting MS_NOUSER sign) per upstream.
vendor/golang.org/x/sys/unix/syscall_linux.go	Remaps EpollWait to SYS_EPOLL_PWAIT in the syscall declaration.
vendor/golang.org/x/sys/unix/syscall_linux_sparc64.go	Removes arch-local EpollWait syscall directive (now centralized).
vendor/golang.org/x/sys/unix/syscall_linux_s390x.go	Removes arch-local EpollWait syscall directive (now centralized).
vendor/golang.org/x/sys/unix/syscall_linux_riscv64.go	Removes arch-local EpollWait syscall directive (now centralized).
vendor/golang.org/x/sys/unix/syscall_linux_ppc64x.go	Removes arch-local EpollWait syscall directive (now centralized).
vendor/golang.org/x/sys/unix/syscall_linux_ppc.go	Removes arch-local EpollWait syscall directive (now centralized).
vendor/golang.org/x/sys/unix/syscall_linux_mipsx.go	Removes arch-local EpollWait syscall directive (now centralized).
vendor/golang.org/x/sys/unix/syscall_linux_mips64x.go	Removes arch-local EpollWait syscall directive (now centralized).
vendor/golang.org/x/sys/unix/syscall_linux_loong64.go	Removes arch-local EpollWait syscall directive (now centralized).
vendor/golang.org/x/sys/unix/syscall_linux_arm64.go	Removes arch-local EpollWait syscall directive (now centralized).
vendor/golang.org/x/sys/unix/syscall_linux_arm.go	Removes arch-local EpollWait syscall directive (now centralized).
vendor/golang.org/x/sys/unix/syscall_linux_amd64.go	Removes arch-local EpollWait syscall directive (now centralized).
vendor/golang.org/x/sys/unix/syscall_linux_386.go	Removes arch-local EpollWait syscall directive (now centralized).
vendor/golang.org/x/sync/semaphore/semaphore.go	Adds explicit non-negative weight requirement and panics on negative weights.
vendor/golang.org/x/net/idna/idna.go	Tightens punycode error behavior for ASCII-only xn-- labels (security-related).
vendor/golang.org/x/net/http2/transport_wrap.go	Restores/ensures HTTP/2 enabling on wrapped http.Transport and refines reservation handling.
vendor/golang.org/x/net/http2/server_wrap.go	Ensures ALPN NextProtos are registered on http.Server TLS config for HTTP/2 negotiation.
vendor/golang.org/x/net/http2/hpack/tables.go	Lazily builds header table maps to reduce memory for decoder-only tables.
vendor/golang.org/x/net/http2/hpack/hpack.go	Removes eager map initialization to support lazy map creation.
vendor/golang.org/x/net/http2/hpack/encode.go	Removes eager map initialization to support lazy map creation.
vendor/golang.org/x/net/bpf/doc.go	Adds security considerations documentation for the BPF VM implementation.
go.sum	Updates checksums for bumped modules.
go.mod	Bumps grpc and related x/* dependencies to the new versions.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.