chore(deps): Update google.golang.org/grpc and ubi base image (v0.7)

[simonbaird]

Update google.golang.org/grpc module dependency.

Version changes:

• acceptance/go.mod: v1.82.0 → v1.83.2
• go.mod: v1.82.0 → v1.83.2
• tools/go.mod: v1.82.0 → v1.83.2

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Enterprise

Run ID: 4054e09a-ac4e-441b-bac7-1560ab47354c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}

[qodo-for-conforma]

PR Summary by Qodo

Upgrade gRPC to v1.83.2 across Go modules

⚙️ Configuration changes 🕐 10-20 Minutes

AI Description

• Upgrades gRPC from v1.82.0 to v1.83.2 across applicable Go modules.
• Refreshes transitive dependencies and checksums for consistent module resolution.

Diagram

graph TD
  G["gRPC v1.83.2"] --> R["Module resolution"] --> M["Root module"] --> S["Checksum files"]
  R --> A["Acceptance module"] --> S
  R --> T["Tools module"] --> S
  R --> K["Kubectl module"] --> S

Loading

High-Level Assessment

Using the repository's Go module upgrade helper is the appropriate approach because it keeps gRPC and its minimum-version-selected transitive dependencies synchronized across module boundaries. Manually pinning only gRPC was considered but would risk inconsistent manifests and stale checksums.

Files changed (8) +90 / -90

Other (8) +90 / -90

go.modUpgrade acceptance module gRPC dependencies +6/-6

Upgrade acceptance module gRPC dependencies

• Raises gRPC to v1.83.2 in the acceptance module and updates related indirect Go modules selected during dependency resolution.

acceptance/go.mod

go.sumRefresh acceptance dependency checksums +14/-14

Refresh acceptance dependency checksums

• Replaces checksums for gRPC and the transitive module versions selected by the acceptance module upgrade.

acceptance/go.sum

go.modUpgrade root module gRPC dependency set +10/-10

Upgrade root module gRPC dependency set

• Raises gRPC to v1.83.2 and refreshes direct and indirect dependencies selected in the root module, including networking, telemetry, SPIFFE, and Go tooling modules.

go.mod

go.sumRefresh root module dependency checksums +20/-20

Refresh root module dependency checksums

• Updates integrity hashes for gRPC and all transitive versions changed by root module resolution.

go.sum

go.modUpgrade tools module gRPC dependency set +10/-10

Upgrade tools module gRPC dependency set

• Raises gRPC to v1.83.2 and synchronizes the tools module's related indirect dependencies with the resolved graph.

tools/go.mod

go.sumRefresh tools module dependency checksums +20/-20

Refresh tools module dependency checksums

• Updates checksums for gRPC and the transitive dependency versions selected in the tools module.

tools/go.sum

go.modAlign kubectl transitive Go modules +2/-2

Align kubectl transitive Go modules

• Advances the nested kubectl module's transitive networking and text dependencies to versions selected by the repository-wide upgrade.

tools/kubectl/go.mod

go.sumRefresh kubectl transitive checksums +8/-8

Refresh kubectl transitive checksums

• Replaces hashes for the updated Go module, networking, text, and tools dependencies in the nested kubectl module.

tools/kubectl/go.sum

[qodo-for-conforma]

Code Review by Qodo

🐞 Bugs (0) 📘 Rule violations (0) 📎 Requirement gaps (0)

Great, no issues found!

Qodo reviewed your code and found no material issues that require review

Tip of the day

💡 Did you know, you can start a comment with 'qodo' or '@qodo' to chat about any finding

More tips ↗ | Customize Qodo ↗ | Qodo docs ↗

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 2:21 PM UTC · Completed 2:27 PM UTC

Commit: 87c4a29 · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $1.58

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

Flag	Coverage Δ
generative	69.55% <ø> (ø)
integration	69.55% <ø> (ø)
unit	69.55% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[fullsend-ai-review]

Review

Findings

High

• [protected-path] Dockerfile, Dockerfile.dist — This PR modifies protected infrastructure files (Dockerfile, Dockerfile.dist) which require human approval. The PR has no linked issue and the description does not explain why these files are being changed — it only describes go.mod dependency version bumps. The Dockerfile changes are base image digest updates (ubi9/ubi-minimal digest swap) that appear routine but fall under protected-path governance.
  Remediation: Ensure a human reviewer explicitly approves the Dockerfile changes. Consider adding a brief note to the PR description explaining the base image digest update, or linking to an issue/policy that authorizes routine base image updates alongside dependency bumps.

---

Next steps:

• /fs-fix — agent addresses review findings automatically
• /fs-fix <your instruction> — agent fixes with your specific guidance
• Push commits directly — review re-runs automatically on push
• /fs-fix-stop — disable automatic fix runs for this PR

Previous run

Looks good to me

---

Labels: PR updates Go module dependencies (grpc v1.82.0 to v1.83.2 and transitive deps)

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 2:30 PM UTC · Completed 2:37 PM UTC

Commit: 87c4a29 · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $1.55

[fullsend-ai-review]

See the review comment for full details.