[fix][sec] Bump google.golang.org/grpc from 1.83.1 to 1.83.2 in /pulsar-function-go

[merlimat]

Motivation

grpc-go 1.83.2 is a security release: the server now rejects requests missing both the :authority and Host headers with HTTP 400 and status Internal (grpc/grpc-go#9365).

Dependabot split this bump into #26507 (parent module) and #26508 (examples module). The examples module replaces the parent with ../, so bumping only the parent leaves examples/go.mod stale and go install ./... in examples fails with "updates to go.mod needed", which breaks the pulsar-test-latest-version Docker image build (that is why #26507 is red). Bumping only examples leaves the parent module on 1.83.1.

Modifications

Bump google.golang.org/grpc to 1.83.2 in both Go modules in a single change, as was done for the previous bump in #26446:

cd pulsar-function-go && go get google.golang.org/grpc@v1.83.2 && go mod tidy
cd examples && go mod tidy

The resulting diff is exactly the union of #26507 and #26508, including the transitive bumps of golang.org/x/{mod,net,sys,text}.

Supersedes #26507 and #26508.

Verifying this change

• Make sure that the change passes the CI checks.

This change is already covered by existing tests, such as the CI - Go Functions workflow and the Go function integration tests in CI - System - Function.

Verified locally: go mod tidy -diff is a no-op in both modules; go build ./..., go install -mod=readonly ./... in examples (the Docker image step that fails on #26507), golangci-lint run -c ./golangci.yml ./pf, and go test on the non-examples packages all pass.

Does this pull request potentially affect one of the following parts:

If the box was checked, please highlight the changes

• Dependencies (add or upgrade a dependency)
• The public API
• The schema
• The default values of configurations
• The threading model
• The binary protocol
• The REST endpoints
• The admin CLI options
• The metrics
• Anything that affects deployment

[lhotari]

LGTM