[9.4](backport #7748) build(deps): bump google.golang.org/grpc from 1.83.0 to 1.83.1

[mergify]

Bumps google.golang.org/grpc from 1.83.0 to 1.83.1.

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.83.1

Security

• xds/rbac: Fix a bug where nested Principal or Permission rules with :scheme or grpc- prefixed header matchers were not rejected, which could cause DENY rules to fail open. (#9258)
  • Special Thanks: @​nvxbug
• xds/rbac: Fix a bug where the host header matcher was not being replaced with :authority in nested Principal or Permission rules. (#9258)
  • Special Thanks: @​nvxbug
• xds/rbac: Fix a bug where a header matcher whose name was not lowercase, such as X-Role, matched no header, which could cause DENY rules to fail open. (#9332)
  • Special Thanks: @​alimony
• xds/rbac: Fix a bug where a :scheme or grpc- prefixed header matcher was accepted when its name was not lowercase. (#9332)
  • Special Thanks: @​alimony
• xds/rbac: Fix a bug where a Host header matcher was not replaced with :authority. (#9332)
  • Special Thanks: @​alimony

Performance

• transport: Restrict memory overhead of buffering small data frames. (#9331)

Commits

• 1550d9e Change version to 1.83.1 (#9336)
• ebba6f3 Cherry-pick #9258 and #9332 into v1.83.x (#9335)
• 8cfeca0 Cherry-pick #9331 to v1.83.x (#9333)
• dec6951 Change version to 1.83.1-dev (#9229)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

---

This is an automatic backport of pull request #7748 done by [Mergify](https://mergify.com).

[github-actions]

TL;DR

The Buildkite failure was not caused by this PR’s code changes. The Package x86_64 job failed while downloading a Go module from proxy.golang.org due to an upstream HTTP/2 stream INTERNAL_ERROR; this is a transient infrastructure/network fetch failure, so rerunning the job is the immediate action.

Remediation

• Re-run the failed Buildkite job (Package x86_64) for build https://buildkite.com/elastic/fleet-server/builds/16604.
• If it flakes again, add a retry around the go mod download step in the packaging flow (or configure Buildkite step retry-on-failure for transient network errors).

Investigation details

Root Cause

Dockerfile.build fails in the dependency-fetch layer (RUN go mod download && go mod verify) because the download from Go proxy aborts with an HTTP/2 stream internal error, before compilation/tests/package logic run.

• Failing step in log: Dockerfile.build:16 (RUN go mod download && go mod verify)
• Error: go: github.com/dgraph-io/ristretto@v0.2.0: read "https://proxy.golang.org/...": stream error: stream ID 449; INTERNAL_ERROR; received from peer

This PR only bumps google.golang.org/grpc v1.83.0 -> v1.83.1 in go.mod/go.sum plus NOTICE/testing mirrors, and the failing module is unrelated (github.com/dgraph-io/ristretto@v0.2.0).

Evidence

• Build: https://buildkite.com/elastic/fleet-server/builds/16604
• Job/step: Package x86_64 → .buildkite/scripts/release_test.sh
• Key log excerpt:

ERROR [6/7] RUN go mod download && go mod verify
go: github.com/dgraph-io/ristretto@v0.2.0: read "https://proxy.golang.org/github.com/dgraph-io/ristretto/@v/v0.2.0.zip": stream error: stream ID 449; INTERNAL_ERROR; received from peer
ERROR: failed to build: process "/bin/sh -c go mod download && go mod verify" did not complete successfully: exit code: 1

Verification

• Not run locally in this workflow (analysis is based on the provided Buildkite logs and PR diff).

Follow-up

• If retries keep failing on the same module/proxy path, capture another failed log with timestamps and open/attach an infra ticket for Go proxy/network instability in CI.

---

What is this? | From workflow: PR Buildkite Detective

Give us feedback! React with 🚀 if perfect, 👍 if helpful, 👎 if not.