deps: update dependency io.grpc:grpc-bom to v1.37.0 (#131)

[![WhiteSource Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [io.grpc:grpc-bom](https://togithub.com/grpc/grpc-java) | `1.36.0` -> `1.37.0` | [![age](https://badges.renovateapi.com/packages/maven/io.grpc:grpc-bom/1.37.0/age-slim)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://badges.renovateapi.com/packages/maven/io.grpc:grpc-bom/1.37.0/adoption-slim)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://badges.renovateapi.com/packages/maven/io.grpc:grpc-bom/1.37.0/compatibility-slim/1.36.0)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://badges.renovateapi.com/packages/maven/io.grpc:grpc-bom/1.37.0/confidence-slim/1.36.0)](https://docs.renovatebot.com/merge-confidence/) |

---

### Release Notes

<details>
<summary>grpc/grpc-java</summary>

### [`v1.37.0`](https://togithub.com/grpc/grpc-java/releases/v1.37.0)

[Compare Source](https://togithub.com/grpc/grpc-java/compare/v1.36.1...v1.37.0)

##### Behavior Changes

-   alts: make both `GoogleDefaultChannelCredentials` and `ComputeEngineChannelCredentials` choose ALTS for backends given by xDS TD. Changes for `ComputeEngineChannelCredentials` were missing, but they really should be the same.
-   api: added a convenient `ServerBuilder.addServices()` API that allows adding a list of services instead of iterating through list and calling `addService()`.
-   api: deleted some `NameResolver` APIs that have been marked as deprecated since 1.21 release.
-   api: implemented admin interface API, which automatically loads available admin services in a given binary. Currently, it only includes [`Channelz`](https://togithub.com/grpc/proposal/blob/master/A14-channelz.md) and [`CSDS`](https://togithub.com/grpc/proposal/blob/master/A40-csds-support.md) with dependencies required at runtime.
-   context: move `pendingDeadline.cancel` out of synchronized block.
-   netty: allow connection handshakes (e.g., TCP, TLS) to be interrupted by `channel.shutdown()`. Previously `shutdownNow()` was required for prompt shutdown if a connection was handshaking.
-   xds: change in parsing ADS responses for LDS, RDS, CDS, and EDS resources. Before this release, gRPC parsing logic for ADS response containing multiple resources was to stop resource processing on the first encountered error, followed by NACK with the details of this single error. With this change, the parsing logic processes all resources and collects all processing errors. If any error occurred, a NACK is issued with concatenated error messages of all errors encountered. The rationale and the detailed design can be found in [gRFC A40 — ADS Parsing Logic Update: Continue After First Error](https://togithub.com/grpc/proposal/blob/master/A40-csds-support.md#ads-parsing-logic-update-continue-after-first-error).
-   xds: change system property name for reading bootstrap config from io.grpc.xds.bootstrapValue to `io.grpc.xds.bootstrapConfig`.
-   xds: circuit breaking, timeout and fault injection are enabled by default. Previously they were protected by environment variables.
-   xds: use the new `server_listener_resource_name_template` property from the bootstrap file for server side xDS processing as per the gRFC [A36-xds-for-servers.md](https://togithub.com/grpc/proposal/blob/master/A36-xds-for-servers.md).

##### New Features

-   api: `TlsChannelCredentials` and `TlsServerCredentials` now support client certificates and custom KeyManagers/TrustManagers. grpc-netty fully supports these options. grpc-okhttp does not support keyfile-based configuration; you’d need to use a KeyManager. Most users of Netty’s SslContext and GrpcSslContexts should be able to migrate and are encouraged to do so, because this API does not have a Netty dependency and so is planned to become stable.
-   netty: added support for OpenJSSE.
-   okhttp&amp;#x3A; support compiling with okio 2.x API for Bazel users. grpc-okhttp was already compatible with okio 2 at runtime.
-   xds: `XdsServingStatusListener` has been implemented as per the gRFC [A36-xds-for-servers.md](https://togithub.com/grpc/proposal/blob/master/A36-xds-for-servers.md).
-   xds: add proto leakage check at gradle build. Create a new Gradle task depends on shadowJar. It examines the outputs of shadowJar package prefix to make sure it is inside within the package.
-   xds: added `CsdsService`. It is safe for production but are Experimental APIs to resolve issues discovered as they see usage. The rationale and description of the new API can be found in [gRFC A40: xDS Configuration Dump via Client Status Discovery Service in gRPC](https://togithub.com/grpc/proposal/blob/master/A40-csds-support.md).
-   xds: implement gRPC server side validations and filterChain match of xDS configuration as per the gRFC [A36-xds-for-servers.md](https://togithub.com/grpc/proposal/blob/master/A36-xds-for-servers.md).
-   xds: `WeightedTargetLoadBalancer` collect all failure child pickers to log more error details.

##### Bug Fixes

-   grpclb: gRPCLB would buffer RPCs indefinitely if failing to fallback because the resolver provides no fallback addresses. Now it turns into `TRANSIENT_FAILURE` for such cases.
-   xds: fix `CdsLoadBalancer2` childLb shutdown behavior. Previously these childLbs are not properly shutdown, which might cause channel panic as client channel is referenced by those childLbs.
-   Fixed an `UnsupportedOperationException` incompatibility with Netty 4.1.60.Final ([#&#8203;7953](https://togithub.com/grpc/grpc-java/issues/7953)). This allows users of grpc-netty that may be using Netty elsewhere in their application to upgrade their Netty version to avoid exposure to recent Netty CVEs. gRPC itself is not impacted by those CVEs.
-   grpclb: fixed a race between address update and LB stream recreation, which would cause channel panic if the resolver refreshes the result while gRPCLB is in LB stream backoff.
-   grpclb: gRPCLB ignored `CONNECTING` subchannels when aggregating the overall LB state, which would cause RPCs to fail prematurely if there are subchannels in its initial connection.
-   grpclb: now we allow multiple authorities in lb backends instead of flattening to the first authority.
-   interop-testing: fix alts handshaking race: add proper synchronization on the `AltsTestServer` object lock, this way, alts client and alts server won’t race on the `AltsTestServer` during Alts handshake negotiation.
-   xds: fixed a bug that would drop some node information (e.g., user-agent) when reporting to LRS ([#&#8203;7964](https://togithub.com/grpc/grpc-java/issues/7964)).
-   xds: the xDS resolver did not clear its state when control plane resources were revoked before offloading the xDS LB plugin. It would treat the next update as duplicate if the control plane recovers and never comes back to use those resources. Now this is fixed.

##### Documentation

-   example-tls: ported to `TlsChannelCredentials`/`TlsServerCredentials` and no longer depends on Netty at compile time.
-   examples: add ALTS example README.md.

##### Dependencies

-   gradle: bumped protobuf-gradle-plugin version to 0.8.15
-   xds: envoy proto updated to commit [`ac9a26373`](https://togithub.com/envoyproxy/envoy/commit/ac9a2637336decdcc52c24add5e8fc39edebb962). Added xDS v3 csds.proto with dependencies.

##### Acknowledgements

[@&#8203;spkrka](https://togithub.com/spkrka) Kristofer Karlsson
[@&#8203;njhill](https://togithub.com/njhill) Nick Hill
[@&#8203;ulfjack](https://togithub.com/ulfjack) Ulf Adams

### [`v1.36.1`](https://togithub.com/grpc/grpc-java/releases/v1.36.1)

[Compare Source](https://togithub.com/grpc/grpc-java/compare/v1.36.0...v1.36.1)

-   Fix an `UnsupportedOperationException` incompatibility with Netty 4.1.60.Final ([#&#8203;7953](https://togithub.com/grpc/grpc-java/issues/7953)). This allows users of grpc-netty that may be using Netty elsewhere in their application to upgrade their Netty version to avoid exposure to recent Netty CVEs. gRPC is not impacted by those CVEs so a Netty upgrade for gRPC itself is not necessary
-   xds: Fixed a bug that would drop some node information (e.g., user-agent) when reporting to LRS ([#&#8203;7964](https://togithub.com/grpc/grpc-java/issues/7964))
-   xds: Renamed `io.grpc.xds.bootstrapValue` system property to `io.grpc.xds.bootstrapConfig`. This more closely matches the environment variable (`GRPC_XDS_BOOTSTRAP_CONFIG`) and avoids future confusion ([#&#8203;7968](https://togithub.com/grpc/grpc-java/issues/7968))
-   xds: Fixed a possible `IllegalStateException` causing Channel panic during LB shutdown ([#&#8203;7942](https://togithub.com/grpc/grpc-java/issues/7942)). The bug was introduced in v1.36.0. The issue likely most impacts xDS users that may leave a channel unused (no RPCs) for 30 minutes since idle timeout triggers LB shutdown

</details>

---

### Configuration

:date: **Schedule**: At any time (no schedule defined).

:vertical_traffic_light: **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

:recycle: **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

:no_bell: **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box.

---

This PR has been generated by [WhiteSource Renovate](https://renovate.whitesourcesoftware.com). View repository job log [here](https://app.renovatebot.com/dashboard#github/googleapis/java-common-protos).

pom.xml

@@ -66,7 +66,7 @@
     <google.common-protos.version>1.17.0</google.common-protos.version>
     <protobuf.version>3.15.6</protobuf.version>
     <junit.version>4.13.2</junit.version>
-    <grpc.version>1.36.0</grpc.version>
+    <grpc.version>1.37.0</grpc.version>
     <guava.version>30.1-android</guava.version>
   </properties>