build(deps): bump the examples-ext-authz group across 1 directory with 2 updates

[dependabot]

Bumps the examples-ext-authz group with 2 updates in the /ext_authz/auth/grpc-service directory: github.com/envoyproxy/go-control-plane and google.golang.org/grpc.

Updates github.com/envoyproxy/go-control-plane from 0.13.1 to 0.13.4

Release notes

Sourced from github.com/envoyproxy/go-control-plane's releases.

xdsmatcher/v0.13.4

What's Changed

• build(deps): Bump google.golang.org/grpc from 1.67.1 to 1.69.2 in /examples/dyplomat by @​dependabot in envoyproxy/go-control-plane#1071
• build(deps): Bump golang.org/x/crypto from 0.29.0 to 0.31.0 in /internal/tools by @​dependabot in envoyproxy/go-control-plane#1067
• build(deps): Bump github/codeql-action from 3.27.6 to 3.27.9 by @​dependabot in envoyproxy/go-control-plane#1065
• build(deps): Bump google.golang.org/protobuf from 1.35.2 to 1.36.1 in /xdsmatcher by @​dependabot in envoyproxy/go-control-plane#1068
• deps: Remove Go minor version from go.mods by @​mmorel-35 in envoyproxy/go-control-plane#1078
• #1074: Add imports of previous root package in new subpackages to avoid dependency upgrade issues. by @​valerian-roche in envoyproxy/go-control-plane#1075

Full Changelog: envoyproxy/go-control-plane@xdsmatcher/v0.13.2...xdsmatcher/v0.13.4

v0.13.4

What's Changed

• build(deps): Bump google.golang.org/grpc from 1.67.1 to 1.69.2 in /examples/dyplomat by @​dependabot in envoyproxy/go-control-plane#1071
• build(deps): Bump golang.org/x/crypto from 0.29.0 to 0.31.0 in /internal/tools by @​dependabot in envoyproxy/go-control-plane#1067
• build(deps): Bump github/codeql-action from 3.27.6 to 3.27.9 by @​dependabot in envoyproxy/go-control-plane#1065
• build(deps): Bump google.golang.org/protobuf from 1.35.2 to 1.36.1 in /xdsmatcher by @​dependabot in envoyproxy/go-control-plane#1068
• deps: Remove Go minor version from go.mods by @​mmorel-35 in envoyproxy/go-control-plane#1078
• #1074: Add imports of previous root package in new subpackages to avoid dependency upgrade issues. by @​valerian-roche in envoyproxy/go-control-plane#1075

Full Changelog: envoyproxy/go-control-plane@v0.13.2...v0.13.4

xdsmatcher/v0.13.2

New releasing model

The go-control-plane repository is now released as multiple independent packages:

• github.com/envoyproxy/go-control-plane (this release), including the core components such as cache and server
• github.com/envoyproxy/go-control-plane/envoy and github.com/envoyproxy/go-control-plane/contrib for envoy API go generated files
• github.com/envoyproxy/go-control-plane/ratelimit and github.com/envoyproxy/go-control-plane/xdsmatcher as independent components for specific use-cases

What's Changed

No change for xdsmatcher

Full Changelog: envoyproxy/go-control-plane@v0.13.1...xdsmatcher/v0.13.2

v0.13.2

New releasing model

The go-control-plane repository is now released as multiple independent packages:

• github.com/envoyproxy/go-control-plane (this release), including the core components such as cache and server
• github.com/envoyproxy/go-control-plane/envoy and github.com/envoyproxy/go-control-plane/contrib for envoy API go generated files
• github.com/envoyproxy/go-control-plane/ratelimit and github.com/envoyproxy/go-control-plane/xdsmatcher as independent components for specific use-cases

What's Changed

• clean up: use only goimports with golangci-lint by @​mmorel-35 in envoyproxy/go-control-plane#1030
• build(deps): Bump github/codeql-action from 3.26.6 to 3.27.0 by @​dependabot in envoyproxy/go-control-plane#1031
• build(deps): Bump actions/checkout from 4.1.6 to 4.2.2 by @​dependabot in envoyproxy/go-control-plane#1032

... (truncated)

Commits

• 2d07f5a Prepare go-control-plane for version v0.13.4
• efcd8a1 Prepare envoy for version v1.32.3
• 0f0bc3e Create new release 1.32.3 for envoy, 0.13.4 for go-control-plane modules
• 2ebcd7c Mirrored from envoyproxy/envoy @ 2aaa544747e88cf80c17ef66b94b7c05ed198fa1
• af9f4a2 Mirrored from envoyproxy/envoy @ 864a28a6283d55320cc38606e1c7ef0bc7c62e50
• 5ffae0c Mirrored from envoyproxy/envoy @ b0d58be31c2d7fe3ea8fd620c7aedb6b09a4bb89
• 90c18a6 #1074: Add imports of previous root package in new subpackages to avoid depen...
• 2ea9c8b deps: Remove Go minor version from go.mods (#1078)
• 3bbb165 build(deps): Bump google.golang.org/protobuf in /xdsmatcher (#1068)
• 75822fe build(deps): Bump github/codeql-action from 3.27.6 to 3.27.9 (#1065)
• Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.67.1 to 1.70.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.70.0

Behavior Changes

• client: reject service configs containing an invalid retryPolicy in accordance with gRFCs A21 and A6. (#7905)
  • Note that this is a potential breaking change for some users using an invalid configuration, but continuing to allow this behavior would violate our cross-language compatibility requirements.

New Features

• xdsclient: fallback to a secondary management server (if specified in the bootstrap configuration) when the primary is down is enabled by default. Can be disabled by setting the environment variable GRPC_EXPERIMENTAL_XDS_FALLBACK to false. (#7949)
• experimental/credentials: experimental transport credentials are added which don't enforce ALPN. (#7980)
  • These credentials will be removed in an upcoming grpc-go release. Users must not rely on these credentials directly. Instead, they should either vendor a specific version of gRPC or copy the relevant credentials into their own codebase if absolutely necessary.

Bug Fixes

• xds: fix a possible deadlock that happens when both the client application and the xDS management server (responsible for configuring the client) are using the xds:/// scheme in their target URIs. (#8011)

Performance

• server: for unary requests, free raw request message data as soon as parsing is finished instead of waiting until the method handler returns. (#7998)
  • Special Thanks: @​lqs

Documentation

• examples/features/gracefulstop: add example to demonstrate server graceful stop. (#7865)

Release 1.69.4

Bug Fixes

• rbac: fix support for :path header matchers, which would previously never successfully match (#7965).

Documentation

• examples/features/csm_observability: update example client and server to use the helloworld service instead of echo service (#7945).

Release 1.69.3 was accidentally tagged on the master branch and will be deleted. Please update to 1.69.4 instead.

Release 1.69.2

Bug Fixes

• stats/experimental: add type aliases for symbols (Metrics/etc) that were moved to the stats package (#7929).
• client: set user-agent string to the correct version.

Release 1.69.0

Known Issues

• The recently added grpc.NewClient function is incompatible with forward proxies, because it resolves the target hostname on the client instead of passing the hostname to the proxy. A fix is expected to be a part of grpc-go v1.70. (#7556)

New Features

• stats/opentelemetry: Introduce new APIs to enable OpenTelemetry instrumentation for metrics on servers and clients (#7874)
• xdsclient: add support to fallback to lower priority servers when higher priority ones are down (#7701)
• dns: Add support for link local IPv6 addresses (#7889)
• The new experimental pickfirst LB policy (disabled by default) supports Happy Eyeballs, interleaving IPv4 and IPv6 address as described in RFC-8305 section 4, to attempt connections to multiple backends concurrently. The experimental pickfirst policy can be enabled by setting the environment variable GRPC_EXPERIMENTAL_ENABLE_NEW_PICK_FIRST to true. (#7725, #7742)

... (truncated)

Commits

• 98a0092 Change version to 1.70.0 (#7984)
• bf380de Cherrypick #7998, #8011, #8010 into 1.70.x (#8028)
• 54b3eb9 experimental/credentials: Add credentials that don't enforce ALPN (#7980) (#8...
• 62b9185 clustetresolver: Copy endpoints.Addresses slice from DNS updates to avoid dat...
• 724f450 examples/features/csm_observability: use helloworld client and server instead...
• e8d5feb rbac: add method name to :path in headers (#7965)
• e912015 cleanup: Fix usages of non-constant format strings (#7959)
• 681334a cleanup: replace dial with newclient (#7943)
• 063d352 internal/resolver: introduce a new resolver to handle target URI and proxy ad...
• 10c7e13 outlierdetection: Support health listener for ejection updates (#7908)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

[dependabot]

Superseded by #517.