fix: update all dependencies

[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
github.com/googleapis/go-sql-spanner	v1.16.3 -> v1.17.0			require	minor
google.golang.org/api	v0.247.0 -> v0.248.0			require	minor
google.golang.org/genproto/googleapis/rpc	5f3141c -> 3122310			require	digest
google.golang.org/grpc	v1.74.2 -> v1.75.0			require	minor
google.golang.org/protobuf	v1.36.7 -> v1.36.8			require	patch

---

Release Notes

googleapis/go-sql-spanner (github.com/googleapis/go-sql-spanner)

v1.17.0

Compare Source

Features

• Return commit response for r/w transactions (#​491) (463bb09), refs #​488

Documentation

• Add snippets for PostgreSQL (#​482) (c38a8e6)

googleapis/google-api-go-client (google.golang.org/api)

v0.248.0

Compare Source

Features

• all: Auto-regenerate discovery clients (#​3272) (8f03c8e)
• all: Auto-regenerate discovery clients (#​3274) (2900298)
• all: Auto-regenerate discovery clients (#​3275) (4c66642)
• all: Auto-regenerate discovery clients (#​3276) (2692170)
• all: Auto-regenerate discovery clients (#​3277) (23daa11)
• all: Auto-regenerate discovery clients (#​3279) (71f2c5f)
• all: Auto-regenerate discovery clients (#​3280) (59f18fd)

grpc/grpc-go (google.golang.org/grpc)

v1.75.0: Release 1.75.0

Compare Source

Behavior Changes

• xds: Remove support for GRPC_EXPERIMENTAL_XDS_FALLBACK environment variable. Fallback support can no longer be disabled. (#​8482)
• stats: Introduce DelayedPickComplete event, a type alias of PickerUpdated. (#​8465)
  • This (combined) event will now be emitted only once per call, when a transport is successfully selected for the attempt.
  • OpenTelemetry metrics will no longer have multiple "Delayed LB pick complete" events in Go, matching other gRPC languages.
  • A future release will delete the PickerUpdated symbol.
• credentials: Properly apply grpc.WithAuthority as the highest-priority option for setting authority, above the setting in the credentials themselves. (#​8488)
  • Now that this WithAuthority is available, the credentials should not be used to override the authority.
• round_robin: Randomize the order in which addresses are connected to in order to spread out initial RPC load between clients. (#​8438)
• server: Return status code INTERNAL when a client sends more than one request in unary and server streaming RPC. (#​8385)
  • This is a behavior change but also a bug fix to bring gRPC-Go in line with the gRPC spec.

New Features

• dns: Add an environment variable (GRPC_ENABLE_TXT_SERVICE_CONFIG) to provide a way to disable TXT lookups in the DNS resolver (by setting it to false). By default, TXT lookups are enabled, as they were previously. (#​8377)

Bug Fixes

• xds: Fix regression preventing empty node IDs in xDS bootstrap configuration. (#​8476)
  • Special Thanks: @​davinci26
• xds: Fix possible panic when certain invalid resources are encountered. (#​8412)
  • Special Thanks: @​wooffie
• xdsclient: Fix a rare panic caused by processing a response from a closed server. (#​8389)
• stats: Fix metric unit formatting by enclosing non-standard units like call and endpoint in curly braces to comply with UCUM and gRPC OpenTelemetry guidelines. (#​8481)
• xds: Fix possible panic when clusters are removed from the xds configuration. (#​8428)
• xdsclient: Fix a race causing "resource doesn not exist" when rapidly subscribing and unsubscribing to the same resource. (#​8369)
• client: When determining the authority, properly percent-encode (if needed, which is unlikely) when the target string omits the hostname and only specifies a port (grpc.NewClient(":<port-number-or-name>")). (#​8488)

protocolbuffers/protobuf-go (google.golang.org/protobuf)

v1.36.8

Compare Source

Maintenance:

CL/696316: all: set Go language version to Go 1.23
CL/696315: types: regenerate using latest protobuf v32 release

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[forking-renovate]

ℹ Artifact update notice

File name: benchmarks/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 2 additional dependencies were updated

Details:

Package	Change
cloud.google.com/go/auth	v0.16.4 -> v0.16.5
google.golang.org/genproto/googleapis/rpc	v0.0.0-20250811230008-5f3141c8851a -> v0.0.0-20250818200422-3122310a409c

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 1 additional dependency was updated

Details:

Package	Change
cloud.google.com/go/auth	v0.16.4 -> v0.16.5

File name: snippets/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 5 additional dependencies were updated

Details:

Package	Change
cloud.google.com/go/auth	v0.16.4 -> v0.16.5
google.golang.org/api	v0.247.0 -> v0.248.0
google.golang.org/genproto/googleapis/rpc	v0.0.0-20250811230008-5f3141c8851a -> v0.0.0-20250818200422-3122310a409c
google.golang.org/grpc	v1.74.2 -> v1.75.0
google.golang.org/protobuf	v1.36.7 -> v1.36.8