🌱(deps): Bump the all-go-deps group across 1 directory with 5 updates

[dependabot]

Bumps the all-go-deps group with 2 updates in the / directory: cloud.google.com/go/cloudsqlconn and github.com/go-sql-driver/mysql.

Updates cloud.google.com/go/cloudsqlconn from 1.17.1 to 1.17.2

Release notes

Sourced from cloud.google.com/go/cloudsqlconn's releases.

v1.17.2

1.17.2 (2025-06-10)

Bug Fixes

• reduce the number of memory allocations and the latency overhead. (#983) (cb641f2)

Changelog

Sourced from cloud.google.com/go/cloudsqlconn's changelog.

1.17.2 (2025-06-10)

Bug Fixes

• reduce the number of memory allocations and the latency overhead. (#983) (cb641f2)

Commits

• 38306dd chore(main): release 1.17.2 (#990)
• d5cf057 deps: Update Non-major dependency updates (#987)
• cb641f2 fix: reduce the number of memory allocations and the latency overhead. (#983)
• See full diff in compare view

Updates github.com/go-sql-driver/mysql from 1.9.2 to 1.9.3

Release notes

Sourced from github.com/go-sql-driver/mysql's releases.

v1.9.3

What's Changed

• [1.9] test stability improvement. by @​methane in go-sql-driver/mysql#1699
• [1.9] Transaction Commit/Rollback returns conn's cached error by @​methane in go-sql-driver/mysql#1702
• backport benchmark_test by @​methane in go-sql-driver/mysql#1706
• [1.9] optimize readPacket (#1705) by @​methane in go-sql-driver/mysql#1707
• [1.9] fix PING on compressed connections by @​methane in go-sql-driver/mysql#1723
• release v1.9.3 by @​methane in go-sql-driver/mysql#1725

Full Changelog: go-sql-driver/mysql@v1.9.2...v1.9.3

Changelog

Sourced from github.com/go-sql-driver/mysql's changelog.

v1.9.3 (2025-06-13)

• tx.Commit() and tx.Rollback() returned ErrInvalidConn always. Now they return cached real error if present. (#1690)

• Optimize reading small resultsets to fix performance regression introduced by compression protocol support. (#1707)

• Fix db.Ping() on compressed connection. (#1723)

Commits

• 62984ad release v1.9.3 (#1725)
• 324cbb3 [1.9] fix PING on compressed connections (#1723)
• dfd973a optimize readPacket (#1707)
• 2ed589b backport benchmark_test (#1706)
• ac04e5f Transaction Commit/Rollback returns conn's cached error (#1702)
• 1bee809 test stability improvement. (#1699)
• See full diff in compare view

Updates golang.org/x/mod from 0.24.0 to 0.25.0

Commits

• 9d33331 x/mod: add the ignore directive
• ae88a97 all: change from sort functions to slices functions
• See full diff in compare view

Updates golang.org/x/sync from 0.14.0 to 0.15.0

Commits

• 8a14946 errgroup: remove duplicated comment
• 1869c69 all: replace deprecated ioutil
• d1ac909 sync/errgroup: PanicError.Error print stack trace
• See full diff in compare view

Updates google.golang.org/grpc from 1.72.2 to 1.73.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.73.0

New Features

• balancer/ringhash: move LB policy from xds/internal to exported path to facilitate use without xds (#8249)
• xds: enable least request LB policy by default. It can be disabled by setting GRPC_EXPERIMENTAL_ENABLE_LEAST_REQUEST=false in your environment. (#8253)
• grpc: add a CallAuthority Call Option that can be used to overwrite the http :authority header on per-RPC basis. (#8068)
• stats/opentelemetry: add trace event for name resolution delay. (#8074)
• health: added List method to gRPC Health service. (#8155)
  • Special Thanks: @​marcoshuck
• ringhash: implement features from gRFC A76. (#8159)
• xds: add functionality to support SPIFFE Bundle Maps as roots of trust in XDS which can be enabled by setting GRPC_EXPERIMENTAL_XDS_MTLS_SPIFFE=true. (#8167, #8180, #8229, #8343)

Bug Fixes

• xds: locality ID metric label is changed to make it consistent with gRFC A78. (#8256)
• client: fail RPCs on the client when using extremely short contexts that expire before the grpc-timeout header is created. (#8312)
• server: non-positive grpc-timeout header values are now rejected. This is consistent with the gRPC protocol spec. (#8290)
  • Special Thanks: @​evanj
• xds: fix reported error string when LRS load reporting interval is invalid. (#8224)
  • Special Thanks: @​alingse

Performance Improvements

• credentials/alts: improve read performance by optimizing buffer copies and allocations. (#8271)
• server: improve performance of RPC handling by avoid a status proto copy (#8282)
  • Special Thanks: @​evanj

Documentation

• examples/features/opentelemetry: modify example to demonstrate tracing using OpenTelemtry plugin. (#8056)

Commits

• c52d025 Change version to 1.73.0 (#8322)
• ac60db1 Add flag guarding SPIFFE Bundle provider (#8343) (#8382)
• 183c148 balancer/ringhash: Add experimental notice in package comment (#8364) (#8365)
• b610465 delegatingresolver: avoid proxy for resolved addresses in NO_PROXY env (#8329...
• 96c4308 balancer/least_request : Fix panic while handling resolver errors (#8333) (#8...
• af5146b grpc: update contributing.md (#8318)
• 09166b6 cleanup: remove unused constants in generic xdsclient (#8315)
• e3f13e7 transport: Prevent sending negative timeouts (#8312)
• b89909b leakcheck: Fix flaky test TestCheck (#8309)
• 709023d grpcsync/event: Simplify synchronization (#8308)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions