deps: Update Non-major dependency updates

[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
cloud.google.com/go/auth	v0.14.1 -> v0.15.0
github.com/go-sql-driver/mysql	v1.8.1 -> v1.9.0
golang.org/x/net	v0.35.0 -> v0.37.0
golang.org/x/oauth2	v0.26.0 -> v0.28.0
golang.org/x/time	v0.10.0 -> v0.11.0
google.golang.org/api	v0.220.0 -> v0.224.0
google.golang.org/grpc	v1.70.0 -> v1.71.0

---

Release Notes

googleapis/google-cloud-go (cloud.google.com/go/auth)

v0.15.0

• firestore: beta release. See the
  announcement.

• errorreporting: The existing package has been redesigned.

• errors: This package has been removed. Use errorreporting.

go-sql-driver/mysql (github.com/go-sql-driver/mysql)

v1.9.0

Compare Source

Major Changes

• Implement zlib compression. (#​1487)
• Supported Go version is updated to Go 1.21+. (#​1639)
• Add support for VECTOR type introduced in MySQL 9.0. (#​1609)
• Config object can have custom dial function. (#​1527)

Bugfixes

• Fix auth errors when username/password are too long. (#​1625)
• Check if MySQL supports CLIENT_CONNECT_ATTRS before sending client attributes. (#​1640)
• Fix auth switch request handling. (#​1666)

Other changes

• Add "filename:line" prefix to log in go-mysql. Custom loggers now show it. (#​1589)
• Improve error handling. It reduces the "busy buffer" errors. (#​1595, #​1601, #​1641)
• Use strconv.Atoi to parse max_allowed_packet. (#​1661)
• rejectReadOnly option now handles ER_READ_ONLY_MODE (1290) error too. (#​1660)

googleapis/google-api-go-client (google.golang.org/api)

v0.224.0

Compare Source

Features

• all: Auto-regenerate discovery clients (#​3038) (e50dbcf)
• all: Auto-regenerate discovery clients (#​3040) (3acb9e0)
• all: Auto-regenerate discovery clients (#​3041) (3795b39)
• all: Auto-regenerate discovery clients (#​3042) (7d1e850)
• all: Auto-regenerate discovery clients (#​3043) (eaeb698)
• all: Auto-regenerate discovery clients (#​3048) (0f2af0f)
• all: Auto-regenerate discovery clients (#​3051) (f10c130)

Bug Fixes

• transport/http: Add user agent to request headers (#​3050) (10cb1ef), refs #​3049

v0.223.0

Compare Source

Features

• all: Auto-regenerate discovery clients (#​3024) (ae09c4f)
• all: Auto-regenerate discovery clients (#​3027) (7775233)
• all: Auto-regenerate discovery clients (#​3031) (065695b)
• all: Auto-regenerate discovery clients (#​3033) (9390c07)
• all: Auto-regenerate discovery clients (#​3034) (a6fb5d5)
• all: Auto-regenerate discovery clients (#​3036) (a606deb)
• all: Auto-regenerate discovery clients (#​3037) (1532643)

Bug Fixes

• Copy AllowHardBoundTokens option from old auth to new auth. (#​3030) (8cb69d6)

v0.222.0

Compare Source

Features

• all: Auto-regenerate discovery clients (#​3014) (27cb014)
• all: Auto-regenerate discovery clients (#​3016) (8169e72)
• all: Auto-regenerate discovery clients (#​3018) (769817f)
• all: Auto-regenerate discovery clients (#​3019) (f6aa2a4)
• all: Auto-regenerate discovery clients (#​3021) (24ae542)
• all: Auto-regenerate discovery clients (#​3022) (28b0491)

v0.221.0

Compare Source

Features

• all: Auto-regenerate discovery clients (#​2998) (0735943)
• all: Auto-regenerate discovery clients (#​3002) (28be0d7)
• all: Auto-regenerate discovery clients (#​3004) (aa95c21)
• all: Auto-regenerate discovery clients (#​3005) (9550afc)
• all: Auto-regenerate discovery clients (#​3007) (28149bc)
• all: Auto-regenerate discovery clients (#​3010) (c454338)
• all: Auto-regenerate discovery clients (#​3013) (a34f3f4)
• option/internaloption: Add new allowHardBoundTokens option (#​2975) (1cc19b7)

grpc/grpc-go (google.golang.org/grpc)

v1.71.0: Release 1.71.0

Compare Source

API Changes

• balancer: Custom LB policies that record metrics must use the new MetricsRecorder method on Balancer.ClientConn instead of the removed Balancer.BuildOptions.MetricsRecorder field to obtain a metrics recorder. (#​8027)
• balancer: balancer.ClientConn implementations must now embed a delegate implementation. This allows grpc-go to add new methods to the interface and remain backward compatible. (#​8026)
• balancer/endpointsharding: The constructor accepts the child balancer's builder and a struct with optional configuration. (#​8052)

New Features

• xds: Add support for dualstack via the additional_addresses field in the Endpoint resource. To disable this feature, set the environment variable GRPC_EXPERIMENTAL_XDS_DUALSTACK_ENDPOINTS=false. (#​8134)
• stats/opentelemetry: Add experimental support for OpenTelemetry tracing. (#​7852)
• xds/internal/xdsclient: Add counter metrics for valid and invalid resource updates. (#​8038)
• balancer/leastrequest, roundrobin: Add dualstack support. (#​7969, #​7966)
• balancer/endpointsharding: Balancers created with the new DisableAutoReconnect option will not attempt to call ExitIdle automatically on their children when the children report idle. (#​8052)

Bug Fixes

• client: Fix support for proxies when using grpc.NewClient so the target is resolved by the proxy as expected. (#​7881)
  • Added WithLocalDNSResolution() dial option to explicitly force target resolution on the client instead. (#​7881)
• weightedtarget: Return erroring picker when no targets are configured. (#​8070)
• xds: Fail RPCs with UNAVAILABLE when the EDS resource is missing or contains no endpoints (#​8070)
• xdsclient: Fix a bug where connectivity failures were reported to resource watchers before trying all listed servers. (#​8075)
• grpc: Fix the number of bytes reported in the error message when encoded messages are larger than 4GB. (#​8033)
• rls: Fix a bug where RLS channel updates could be lost during startup. (#​8055)
• xds: Fixed a bug preventing tests from creating multiple servers or channels with different bootstrap configs. (#​8050)
• grpc: Fix message length checks when compression is enabled and maxReceiveMessageSize is MaxInt (#​7918)
  • Special Thanks: @​vinothkumarr227

Documentation

• client: Improve documentation of grpc.NewClient and ClientConn.CanonicalTarget by providing examples. (#​8078)
• examples/features/dualstack: New example demonstrating usage of endpoints and dualstack functionality. (#​8098)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[forking-renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 9 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.23 -> 1.23.7
google.golang.org/genproto/googleapis/rpc	v0.0.0-20250207221924-e9438ea467c6 -> v0.0.0-20250227231956-55c901821b1e
github.com/googleapis/enterprise-certificate-proxy	v0.3.4 -> v0.3.5
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	v0.58.0 -> v0.59.0
golang.org/x/crypto	v0.33.0 -> v0.36.0
golang.org/x/sync	v0.11.0 -> v0.12.0
golang.org/x/sys	v0.30.0 -> v0.31.0
golang.org/x/text	v0.22.0 -> v0.23.0
google.golang.org/genproto/googleapis/api	v0.0.0-20241209162323-e6fa225c2576 -> v0.0.0-20250106144421-5f5ef82da422
google.golang.org/protobuf	v1.36.4 -> v1.36.5