Bump google.golang.org/grpc from 1.83.1 to 1.83.2

[dependabot]

Bumps google.golang.org/grpc from 1.83.1 to 1.83.2.

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.83.2

Security

• server: Reject requests missing both :authority and Host headers with HTTP 400 and status Internal. (grpc/grpc-go#9365)
  • Special Thanks: @​winklemad

Commits

• 030ee8b Update version to 1.83.2 (#9375)
• 8668b69 cherry-pick #9365 to v1.83.x (#9366)
• a3e952d cherry-pick #9346 to v1.83.x and update x/net dependency (#9369)
• 58f8fd9 Change version to 1.83.2-dev (#9337)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

Change Impact: 🟡 Medium

Reasoning: The update changes shared Go dependencies, including google.golang.org/grpc, which affects inter-service communication. The security fix changes request handling for missing authority headers.

Regression Risk: Low to moderate. The changes are dependency-only, but the gRPC behavior change can affect clients that omit required headers.

** QA Recommendation:** Perform targeted integration tests for gRPC requests and HTTP 400 handling. Manual QA is limited; skipping it carries moderate risk for affected clients.

Generated by CodeRabbitAI

[mattermost-build]

Hello @dependabot[bot],

Thanks for your pull request! A Core Committer will review your pull request soon. For code contributions, you can learn more about the review process here.

[nang2049]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Essentials

Run ID: cb2449ef-2fb4-4ab6-9091-15d0e46eefe2

📥 Commits

Reviewing files that changed from the base of the PR and between 8ae7fa2 and 20dd30d.

⛔ Files ignored due to path filters (1)

• go.sum is excluded by !**/*.sum

📒 Files selected for processing (1)

• go.mod

Included review availability: 1 review is currently available. Your included PR review attempts over the past 7 days set your current allowance at 5 reviews per hour.

---

📝 Walkthrough

Walkthrough

The change updates six indirect Go dependency versions in go.mod. The genproto dependency remains unchanged. No exported entities change.

Changes

Dependency version updates

Layer / File(s)	Summary
Update indirect module versions go.mod	Updated indirect versions for selected golang.org/x/* modules and google.golang.org/grpc.

Priority: ➖ Normal

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to 20dd3

This updates indirect Go dependencies, including gRPC 1.83.2, without changing exported application behavior. No current merge-blocking risk was identified.

Suggested reviewers: avasconcelos114

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely identifies the primary change: updating google.golang.org/grpc from version 1.83.1 to 1.83.2. This matches the stated objective and the dependency update in the changes…
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch dependabot/go_modules/google.golang.org/grpc-1.83.2

---

_{A rabbit checks the module trail
Six small versions hop in line
genproto stays upon its rail
The Go file gains a tidy sign
Dependencies rest, aligned
One gentle bounce, and all is fine}

_{Comment @coderabbitai help to get the list of available commands.}