fix(deps): update minor dependencies (master)

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update	OpenSSF
golang.org/x/net	v0.39.0 -> v0.40.0					require	minor
golang.org/x/sync	v0.13.0 -> v0.14.0					require	minor
google.golang.org/grpc	v1.71.1 -> v1.72.0					require	minor
k8s.io/mount-utils	v0.32.3 -> v0.33.0					require	minor

---

Release Notes

grpc/grpc-go (google.golang.org/grpc)

v1.72.0: Release 1.72.0

Compare Source

Dependencies

• Minimum supported Go version is now 1.23 (#​8108)

API Changes

• resolver: add experimental AddressMapV2 with generics to ultimately replace AddressMap. Deprecate AddressMap for deletion (#​8187)
• resolver: convert EndpointMap in place to use generics (#​8189)

New Features

• xds: add grpc.xds_client.server_failure counter metric on xDS client to record connectivity errors (#​8203)
• balancer/rls: allow maxAge to exceed 5 minutes if staleAge is set in the LB policy configuration (#​8137)
• ringhash: implement gRFC A76 improvements. (#​8159)
• pickfirst: The new pick first LB policy is made the default. The new LB policy implements the Happy Eyeballs algorithm. To disable the new policy set the environment variable GRPC_EXPERIMENTAL_ENABLE_NEW_PICK_FIRST to false (case insensitive).

Bug Fixes

• xds: fix support for circuit breakers and load reporting in LOGICAL_DNS clusters (#​8169, #​8170)
• xds/cds: improve RPC error messages when resources are not found (#​8122)
• balancer/priority: fix race that could leak balancers and goroutines during shutdown (#​8095)
• stats/opentelemetry: fix trace attributes message sequence numbers to start from 0 (#​8237)
• balancer/pickfirstleaf: fix panic if deprecated Address.Metadata field is set to a non-comparable value by ignoring the field (#​8227)

Behavior Changes

• transport: make servers send an HTTP/2 RST_STREAM frame to cancel a stream when the deadline expires (#​8071)

Documentation

• stats: clarify the expected sequence of events on a stats handler (#​7885)
  • Special Thanks: @​RyanBlaney

kubernetes/mount-utils (k8s.io/mount-utils)

v0.33.0

Compare Source

v0.32.4

Compare Source

---

Configuration

📅 Schedule: Branch creation - "after 1pm on sunday" in timezone Asia/Taipei, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 5 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.23.0 -> 1.24.0
golang.org/x/oauth2	v0.25.0 -> v0.26.0
golang.org/x/sys	v0.32.0 -> v0.33.0
golang.org/x/term	v0.31.0 -> v0.32.0
golang.org/x/text	v0.24.0 -> v0.25.0
google.golang.org/genproto/googleapis/rpc	v0.0.0-20250115164207-1a7da9e5054f -> v0.0.0-20250218202821-56aae31c358a

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.