fix(deps): Update module google.golang.org/grpc to v1.73.0 (#2190)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [google.golang.org/grpc](https://redirect.github.com/grpc/grpc-go) | require | minor | `v1.72.2` -> `v1.73.0` |

---

### Release Notes

<details>
<summary>grpc/grpc-go (google.golang.org/grpc)</summary>

### [`v1.73.0`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.73.0): Release 1.73.0

[Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.72.2...v1.73.0)

### New Features

-   balancer/ringhash: move LB policy from xds/internal to exported path to facilitate use without xds ([#&#8203;8249](https://redirect.github.com/grpc/grpc-go/issues/8249))
-   xds: enable least request LB policy by default. It can be disabled by setting `GRPC_EXPERIMENTAL_ENABLE_LEAST_REQUEST=false` in your environment. ([#&#8203;8253](https://redirect.github.com/grpc/grpc-go/issues/8253))
-   grpc: add a `CallAuthority` Call Option that can be used to overwrite the http `:authority` header on per-RPC basis. ([#&#8203;8068](https://redirect.github.com/grpc/grpc-go/issues/8068))
-   stats/opentelemetry: add trace event for name resolution delay. ([#&#8203;8074](https://redirect.github.com/grpc/grpc-go/issues/8074))
-   health: added `List` method to gRPC Health service. ([#&#8203;8155](https://redirect.github.com/grpc/grpc-go/issues/8155))
    -   Special Thanks: [@&#8203;marcoshuck](https://redirect.github.com/marcoshuck)
-   ringhash: implement features from gRFC A76. ([#&#8203;8159](https://redirect.github.com/grpc/grpc-go/issues/8159))
-   xds: add functionality to support SPIFFE Bundle Maps as roots of trust in XDS which can be enabled by setting `GRPC_EXPERIMENTAL_XDS_MTLS_SPIFFE=true`. ([#&#8203;8167](https://redirect.github.com/grpc/grpc-go/issues/8167), [#&#8203;8180](https://redirect.github.com/grpc/grpc-go/issues/8180), [#&#8203;8229](https://redirect.github.com/grpc/grpc-go/issues/8229), [#&#8203;8343](https://redirect.github.com/grpc/grpc-go/issues/8343))

### Bug Fixes

-   xds: locality ID metric label is changed to make it consistent with [gRFC A78](https://redirect.github.com/grpc/proposal/blob/master/A78-grpc-metrics-wrr-pf-xds.md#optional-xds-locality-label). ([#&#8203;8256](https://redirect.github.com/grpc/grpc-go/issues/8256))
-   client: fail RPCs on the client when using extremely short contexts that expire before the `grpc-timeout` header is created. ([#&#8203;8312](https://redirect.github.com/grpc/grpc-go/issues/8312))
-   server: non-positive `grpc-timeout` header values are now rejected. This is consistent with the [gRPC protocol spec](https://redirect.github.com/grpc/grpc/blob/master/doc/PROTOCOL-HTTP2.md#requests). ([#&#8203;8290](https://redirect.github.com/grpc/grpc-go/issues/8290))
    -   Special Thanks: [@&#8203;evanj](https://redirect.github.com/evanj)
-   xds: fix reported error string when LRS load reporting interval is invalid. ([#&#8203;8224](https://redirect.github.com/grpc/grpc-go/issues/8224))
    -   Special Thanks: [@&#8203;alingse](https://redirect.github.com/alingse)

### Performance Improvements

-   credentials/alts: improve read performance by optimizing buffer copies and allocations. ([#&#8203;8271](https://redirect.github.com/grpc/grpc-go/issues/8271))
-   server: improve performance of RPC handling by avoid a status proto copy ([#&#8203;8282](https://redirect.github.com/grpc/grpc-go/issues/8282))
    -   Special Thanks: [@&#8203;evanj](https://redirect.github.com/evanj)

### Documentation

-   examples/features/opentelemetry: modify example to demonstrate tracing using OpenTelemtry plugin. ([#&#8203;8056](https://redirect.github.com/grpc/grpc-go/issues/8056))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 3am on Saturday" (UTC), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC4yMi4xIiwidXBkYXRlZEluVmVyIjoiNDAuMjIuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiYXV0b21lcmdlIl19-->

Author: cq-bot

examples/simple_plugin/go.mod

@@ -86,7 +86,7 @@ require (
 	golang.org/x/xerrors v0.0.0-20240903120638-7835f813f4da // indirect
 	google.golang.org/genproto/googleapis/api v0.0.0-20250519155744-55703ea1f237 // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20250519155744-55703ea1f237 // indirect
-	google.golang.org/grpc v1.72.2 // indirect
+	google.golang.org/grpc v1.73.0 // indirect
 	google.golang.org/protobuf v1.36.6 // indirect
 	gopkg.in/yaml.v2 v2.4.0 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect

examples/simple_plugin/go.sum

@@ -219,8 +219,8 @@ google.golang.org/genproto/googleapis/api v0.0.0-20250519155744-55703ea1f237 h1:
 google.golang.org/genproto/googleapis/api v0.0.0-20250519155744-55703ea1f237/go.mod h1:ezi0AVyMKDWy5xAncvjLWH7UcLBB5n7y2fQ8MzjJcto=
 google.golang.org/genproto/googleapis/rpc v0.0.0-20250519155744-55703ea1f237 h1:cJfm9zPbe1e873mHJzmQ1nwVEeRDU/T1wXDK2kUSU34=
 google.golang.org/genproto/googleapis/rpc v0.0.0-20250519155744-55703ea1f237/go.mod h1:qQ0YXyHHx3XkvlzUtpXDkS29lDSafHMZBAZDc03LQ3A=
-google.golang.org/grpc v1.72.2 h1:TdbGzwb82ty4OusHWepvFWGLgIbNo1/SUynEN0ssqv8=
-google.golang.org/grpc v1.72.2/go.mod h1:wH5Aktxcg25y1I3w7H69nHfXdOG3UiadoBtjh3izSDM=
+google.golang.org/grpc v1.73.0 h1:VIWSmpI2MegBtTuFt5/JWy2oXxtjJ/e89Z70ImfD2ok=
+google.golang.org/grpc v1.73.0/go.mod h1:50sbHOUqWoCQGI8V2HQLJM0B+LMlIUjNSZmow7EVBQc=
 google.golang.org/protobuf v1.36.6 h1:z1NpPI8ku2WgiWnf+t9wTPsn6eP1L7ksHUlkfLvd9xY=
 google.golang.org/protobuf v1.36.6/go.mod h1:jduwjTPXsFjZGTmRluh+L6NjiWu7pchiJ2/5YcXBHnY=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=

go.mod

@@ -39,10 +39,10 @@ require (
 	go.opentelemetry.io/otel/sdk/metric v1.36.0
 	go.opentelemetry.io/otel/trace v1.36.0
 	golang.org/x/exp v0.0.0-20250408133849-7e4ce0ab07d0
-	golang.org/x/oauth2 v0.27.0
+	golang.org/x/oauth2 v0.28.0
 	golang.org/x/sync v0.14.0
 	golang.org/x/text v0.25.0
-	google.golang.org/grpc v1.72.2
+	google.golang.org/grpc v1.73.0
 	google.golang.org/protobuf v1.36.6
 )
 

go.sum

@@ -216,8 +216,8 @@ golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLL
 golang.org/x/net v0.0.0-20210405180319-a5a99cb37ef4/go.mod h1:p54w0d4576C0XHj96bSt6lcn1PtDYWL6XObtHCRCNQM=
 golang.org/x/net v0.40.0 h1:79Xs7wF06Gbdcg4kdCCIQArK11Z1hr5POQ6+fIYHNuY=
 golang.org/x/net v0.40.0/go.mod h1:y0hY0exeL2Pku80/zKK7tpntoX23cqL3Oa6njdgRtds=
-golang.org/x/oauth2 v0.27.0 h1:da9Vo7/tDv5RH/7nZDz1eMGS/q1Vv1N/7FCrBhI9I3M=
-golang.org/x/oauth2 v0.27.0/go.mod h1:onh5ek6nERTohokkhCD/y2cV4Do3fxFHFuAejCkRWT8=
+golang.org/x/oauth2 v0.28.0 h1:CrgCKl8PPAVtLnU3c+EDw6x11699EWlsDeWNWKdIOkc=
+golang.org/x/oauth2 v0.28.0/go.mod h1:onh5ek6nERTohokkhCD/y2cV4Do3fxFHFuAejCkRWT8=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20210220032951-036812b2e83c/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.14.0 h1:woo0S4Yywslg6hp4eUFjTVOyKt0RookbpAHG4c1HmhQ=
@@ -253,8 +253,8 @@ google.golang.org/genproto/googleapis/api v0.0.0-20250519155744-55703ea1f237 h1:
 google.golang.org/genproto/googleapis/api v0.0.0-20250519155744-55703ea1f237/go.mod h1:ezi0AVyMKDWy5xAncvjLWH7UcLBB5n7y2fQ8MzjJcto=
 google.golang.org/genproto/googleapis/rpc v0.0.0-20250519155744-55703ea1f237 h1:cJfm9zPbe1e873mHJzmQ1nwVEeRDU/T1wXDK2kUSU34=
 google.golang.org/genproto/googleapis/rpc v0.0.0-20250519155744-55703ea1f237/go.mod h1:qQ0YXyHHx3XkvlzUtpXDkS29lDSafHMZBAZDc03LQ3A=
-google.golang.org/grpc v1.72.2 h1:TdbGzwb82ty4OusHWepvFWGLgIbNo1/SUynEN0ssqv8=
-google.golang.org/grpc v1.72.2/go.mod h1:wH5Aktxcg25y1I3w7H69nHfXdOG3UiadoBtjh3izSDM=
+google.golang.org/grpc v1.73.0 h1:VIWSmpI2MegBtTuFt5/JWy2oXxtjJ/e89Z70ImfD2ok=
+google.golang.org/grpc v1.73.0/go.mod h1:50sbHOUqWoCQGI8V2HQLJM0B+LMlIUjNSZmow7EVBQc=
 google.golang.org/protobuf v1.36.6 h1:z1NpPI8ku2WgiWnf+t9wTPsn6eP1L7ksHUlkfLvd9xY=
 google.golang.org/protobuf v1.36.6/go.mod h1:jduwjTPXsFjZGTmRluh+L6NjiWu7pchiJ2/5YcXBHnY=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=