Bump the go-dependencies group with 2 updates

[dependabot]

Bumps the go-dependencies group with 2 updates: github.com/go-logr/logr and google.golang.org/grpc.

Updates github.com/go-logr/logr from 1.4.3 to 1.4.4

Release notes

Sourced from github.com/go-logr/logr's releases.

v1.4.4

What's Changed

• drop +build tags by @​pohly in go-logr/logr#401
• CI: avoid floating dependencies, fix issues by @​pohly in go-logr/logr#432
• Bump to Go 1.26 by @​thockin in go-logr/logr#445
• funcr: bound slog.Group nesting depth to prevent stack overflow by @​martinholovsky in go-logr/logr#447
• funcr: Handle and test recursive values by @​thockin in go-logr/logr#446

New Contributors

• @​martinholovsky made their first contribution in go-logr/logr#447

Full Changelog: go-logr/logr@v1.4.3...v1.4.4

Commits

• 96a9aba Fix lint
• 51c6302 Better implementation of pointer recursion checking
• c667114 funcr: Handle and test recursive values
• f7ffadb Add benchmark for pointer args
• e2a3c8e funcr: bound slog.Group nesting depth to prevent stack overflow
• 2886d2b build(deps): bump actions/setup-go from 6.5.0 to 7.0.0
• 0b40896 build(deps): bump github/codeql-action/upload-sarif
• 77f671b Bump to Go 1.26
• cce283f build(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0
• 3832a11 build(deps): bump github/codeql-action/upload-sarif
• Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.82.0 to 1.82.1

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.82.1

Security

• server: Stop reading from the connection when flooded by HTTP/2 frames. The default value for this limit is 100 frames, excluding DATA and HEADERS, and may be changed by setting environment variable GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT.
• xds/rbac: Support Metadata and RequestedServerName permissions matcher fields. If present in a DENY rule, previously these would be ignored and fail-open.
• xds/rbac: Fix panic when parsing unsupported fields in NotRule/NotId permissions.
• xds/rbac: Support the deprecated source_ip principal identifier by treating it as equivalent to direct_remote_ip.

Commits

• ebd8f06 Change version to 1.82.1 (#9238)
• 4ea465d Cherry-pick commits (#9236)
• 9494a2c Change version to 1.82.1-dev (#9171)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions