build(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.3

[dependabot]

Bumps google.golang.org/grpc from 1.79.1 to 1.79.3.

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.79.3

Security

• server: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted "deny" rules in interceptors like grpc/authz. Any request with a non-canonical path is now immediately rejected with an Unimplemented error. (#8981)

Release 1.79.2

Bug Fixes

• stats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (grpc/grpc-go#8874)

Commits

• dda86db Change version to 1.79.3 (#8983)
• 72186f1 grpc: enforce strict path checking for incoming requests on the server (#8981)
• 97ca352 Changing version to 1.79.3-dev (#8954)
• 8902ab6 Change the version to release 1.79.2 (#8947)
• a928670 Cherry-pick #8874 to v1.79.x (#8904)
• 06df363 Change version to 1.79.2-dev (#8903)
• See full diff in compare view

[lerian-studio]

⚠️ Invalid Source Branch

Pull requests to main can only come from:

• develop
• release-candidate
• hotfix/*

Your source branch: dependabot/go_modules/google.golang.org/grpc-1.79.3

Please change the base branch or create a PR from an allowed branch.

[gandalf-at-lerian]

@dependabot rebase

[lerian-studio]

⚠️ Invalid Source Branch

Pull requests to main can only come from:

• develop
• release-candidate
• hotfix/*

Your source branch: dependabot/go_modules/google.golang.org/grpc-1.79.3

Please change the base branch or create a PR from an allowed branch.

[lerian-studio]

📊 Unit Test Coverage Report: reporter-worker

Metric	Value
Overall Coverage	90.9% ✅ PASS
Threshold	85%

Coverage by Package

Package	Coverage
github.com/LerianStudio/reporter/components/worker/internal/services	93.0%

---

Generated by Go PR Analysis workflow

[lerian-studio]

📊 Unit Test Coverage Report: reporter-manager

Metric	Value
Overall Coverage	89.0% ✅ PASS
Threshold	85%

Coverage by Package

Package	Coverage
github.com/LerianStudio/reporter/components/manager/internal/adapters/http/in	84.6%
github.com/LerianStudio/reporter/components/manager/internal/services	91.5%

---

Generated by Go PR Analysis workflow

[gandalf-at-lerian]

LGTM. Patch-level bump of an indirect dependency (grpc-go 1.79.1 → 1.79.3).

This release includes a security fix: authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted "deny" rules in interceptors like grpc/authz (grpc/grpc-go#8981). Non-canonical paths are now immediately rejected with Unimplemented.

Changes are scoped to go.mod + go.sum — no code changes, no breaking API surface. Safe to merge.

[gandalf-at-lerian]

@dependabot rebase

[brunobls]

@dependabot rebase

[lerian-studio]

⚠️ Invalid Source Branch

Pull requests to main can only come from:

• develop
• release-candidate
• hotfix/*

Your source branch: dependabot/go_modules/google.golang.org/grpc-1.79.3

Please change the base branch or create a PR from an allowed branch.

[gandalf-at-lerian]

Closing — google.golang.org/grpc v1.79.3 is already present in develop. This bump was absorbed by a prior dependency update, so the PR has zero diff against the target branch. No action needed.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.