deps: update dependency io.grpc:grpc-bom to v1.47.0 (#842)

[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [io.grpc:grpc-bom](https://togithub.com/grpc/grpc-java) | `1.46.0` -> `1.47.0` | [![age](https://badges.renovateapi.com/packages/maven/io.grpc:grpc-bom/1.47.0/age-slim)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://badges.renovateapi.com/packages/maven/io.grpc:grpc-bom/1.47.0/adoption-slim)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://badges.renovateapi.com/packages/maven/io.grpc:grpc-bom/1.47.0/compatibility-slim/1.46.0)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://badges.renovateapi.com/packages/maven/io.grpc:grpc-bom/1.47.0/confidence-slim/1.46.0)](https://docs.renovatebot.com/merge-confidence/) |

---

### Release Notes

<details>
<summary>grpc/grpc-java</summary>

### [`v1.47.0`](https://togithub.com/grpc/grpc-java/releases/tag/v1.47.0)

[Compare Source](https://togithub.com/grpc/grpc-java/compare/v1.46.0...v1.47.0)

##### Bug Fixes

-   api: Ignore `ClassCastExceptions` for hard-coded providers on Android ([#&#8203;9174](https://togithub.com/grpc/grpc-java/issues/9174)). This avoids `ServiceConfigurationError` in certain cases when an “SDK” includes a copy of gRPC that was renamed with Proguard-like tools that do precise class name rewriting (versus something like Maven Shade Plugin which uses coarse pattern matching)
-   binder: respect requested message limits when provide received messages to listener ([#&#8203;9163](https://togithub.com/grpc/grpc-java/issues/9163))
-   binder: Avoid an ISE from `asAndroidAppUri()` ([#&#8203;9169](https://togithub.com/grpc/grpc-java/issues/9169))
-   okhttp: Use the user-provided `ScheduledExecutorService` for keepalive if provided. Previously the user-provided executor was used for deadlines, but not keepalive. Keepalive always used the default executor ([#&#8203;9073](https://togithub.com/grpc/grpc-java/issues/9073))
-   bom: Reverted “bom: Removed protoc-gen-grpc-java from the BOM” in v1.46.0. There was a way to use it with Gradle ([#&#8203;9154](https://togithub.com/grpc/grpc-java/issues/9154))
-   build: fix grpc-java build against protobuf 3.21 ([#&#8203;9218](https://togithub.com/grpc/grpc-java/issues/9218))
-   grpclb: Adds missing META-INF resources to `libgrpclb.jar` produced by bazel `//grpclb:grpclb` target ([#&#8203;9156](https://togithub.com/grpc/grpc-java/issues/9156))
-   xds: Protect xdstp processing with federation env var. If the xds server uses xdstp:// resource names it was possible for federation code paths to be entered even without enabling the experimental federation support. This is now fixed and it is safe for xds servers to use xdstp:// resource names. ([#&#8203;9190](https://togithub.com/grpc/grpc-java/issues/9190))
-   xds: fix bugs in ring-hash load balancer picking subchannel behavior per gRFC. The bug may cause connection not failing over from `TRANSIENT_FAILURE` status. ([#&#8203;9085](https://togithub.com/grpc/grpc-java/issues/9085))
-   xds: NACK EDS resources with duplicate localities in the same priority ([#&#8203;9119](https://togithub.com/grpc/grpc-java/issues/9119))

##### New Features

-   api: Add connection management APIs to `ServerBuilder` ([#&#8203;9176](https://togithub.com/grpc/grpc-java/issues/9176)). This includes methods for keepalive, max connection age, and max connection idle. These APIs have been available on NettyServerBuilder since v1.4.0
-   api: allow `NameResolver` to influence which transport to use ([#&#8203;9076](https://togithub.com/grpc/grpc-java/issues/9076))
-   api: New API in ServerCall to expose SecurityLevel on server-side ([#&#8203;8943](https://togithub.com/grpc/grpc-java/issues/8943))
-   netty: Add `NameResolver` for `unix:` scheme, as defined in [gRPC Name Resolution](https://togithub.com/grpc/grpc/blob/master/doc/naming.md) ([#&#8203;9113](https://togithub.com/grpc/grpc-java/issues/9113))
-   binder: add `allOf` security policy, which allows access iff ALL given security policies allow access. ([#&#8203;9125](https://togithub.com/grpc/grpc-java/issues/9125))
-   binder: add `anyOf` security policy, which allows access if ANY given security policy allows access. ([#&#8203;9147](https://togithub.com/grpc/grpc-java/issues/9147))
-   binder: add `hasPermissions` security policy, which checks that a caller has all of the given package permissions. ([#&#8203;9117](https://togithub.com/grpc/grpc-java/issues/9117))
-   build: Add Bazel build support for xds, googleapis, rls, and services. grpc-services previously had partial bazel support, but some parts were missing. These artifacts are now configured via `IO_GRPC_GRPC_JAVA_OVERRIDE_TARGETS` so maven_install will not use the artifacts from Maven Central ([#&#8203;9172](https://togithub.com/grpc/grpc-java/issues/9172))
-   xds: New ability to configure custom load balancer implementations via the xDS `Cluster.load_balancing_policy` field. This implements [gRFC A52: gRPC xDS Custom Load Balancer Configuration](https://togithub.com/grpc/proposal/blob/master/A52-xds-custom-lb-policies.md). ([#&#8203;9141](https://togithub.com/grpc/grpc-java/issues/9141))
-   xds, orca: add support for custom backend metrics reporting: allow setting metrics at gRPC server and consuming metrics reports from a custom load balancing policy at the client. This implements [gRFC A51: Custom Backend Metrics Support](https://togithub.com/grpc/proposal/blob/master/A51-custom-backend-metrics.md).
-   xds: include node ID in RPC failure status messages from the XdsClient ([#&#8203;9099](https://togithub.com/grpc/grpc-java/issues/9099))
-   xds: support for the `is_optional` logic in Cluster Specifier Plugins: if an unsupported Cluster Specifier Plugin is optional, don't NACK, and skip any routes that point to it. ([#&#8203;9168](https://togithub.com/grpc/grpc-java/issues/9168))

##### Behavior Changes

-   xds: Allow unspecified listener traffic direction, to match other languages and to work with Istio ([#&#8203;9173](https://togithub.com/grpc/grpc-java/issues/9173))
-   xds: change priority load balancer failover time behavior and `ring_hash` LB aggregation rule to better handle transient_failure channel status ([#&#8203;9084](https://togithub.com/grpc/grpc-java/issues/9084), [#&#8203;9093](https://togithub.com/grpc/grpc-java/issues/9093))

##### Dependencies

-   Bump GSON to 2.9.0. Earlier versions of GSON are affected by [CVE-2022-25647](https://nvd.nist.gov/vuln/detail/CVE-2022-25647). gRPC was not impacted by the vulnerability. ([#&#8203;9215](https://togithub.com/grpc/grpc-java/issues/9215))
-   gcp-observability: add grpc-census as a dependency and update opencensus version ([#&#8203;9140](https://togithub.com/grpc/grpc-java/issues/9140))

##### Acknowledgements

[@&#8203;caseyduquettesc](https://togithub.com/caseyduquettesc)
[@&#8203;cfredri4](https://togithub.com/cfredri4)
[@&#8203;jvolkman](https://togithub.com/jvolkman)
[@&#8203;mirlord](https://togithub.com/mirlord)
[@&#8203;ovidiutirla](https://togithub.com/ovidiutirla)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, click this checkbox.

---

This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://app.renovatebot.com/dashboard#github/googleapis/java-core).

pom.xml

@@ -158,7 +158,7 @@
     <google.auth.version>1.7.0</google.auth.version>
     <google.api.version>1.34.1</google.api.version>
     <google.http.version>1.41.8</google.http.version>
-    <grpc.version>1.46.0</grpc.version>
+    <grpc.version>1.47.0</grpc.version>
     <protobuf.version>3.21.0</protobuf.version>
     <opencensus.version>0.31.1</opencensus.version>
     <annotations-api.version>1.3.2</annotations-api.version>