chore(deps): Update google.golang.org/grpc and ubi base image (v0.8)

[simonbaird]

Update google.golang.org/grpc module dependency.

Version changes:

• acceptance/go.mod: v1.82.0 → v1.83.2
• go.mod: v1.82.0 → v1.83.2
• tools/go.mod: v1.82.0 → v1.83.2

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Enterprise

Run ID: 6eeb9e02-1366-4768-af45-2826f7bd6a7b

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}

[qodo-for-conforma]

PR Summary by Qodo

Upgrade gRPC to v1.83.2 across Go modules

⚙️ Configuration changes 🕐 10-20 Minutes

AI Description

• Upgrade gRPC from v1.82.0 to v1.83.2 across application and tooling modules.
• Refresh transitive dependency versions and checksums, including kubectl tooling dependencies.

Diagram

graph TD
  G["gRPC v1.83.2"] --> R["Root module"] --> RS["Root checksums"]
  G --> A["Acceptance module"] --> AS["Acceptance checksums"]
  G --> T["Tools module"] --> TS["Tools checksums"]
  T --> K["Kubectl module"]

Loading

High-Level Assessment

The automated Go module upgrade is the appropriate approach because it updates gRPC consistently and preserves the dependency solver's transitive selections and checksums. Manual pinning or suppressing transitive updates would risk inconsistent module graphs without providing a meaningful benefit.

Files changed (8) +90 / -90

Other (8) +90 / -90

go.modUpgrade acceptance gRPC and transitive dependencies +6/-6

Upgrade acceptance gRPC and transitive dependencies

• Raises gRPC to v1.83.2 in the acceptance module. Also refreshes CEL and golang.org/x dependency versions selected by the module graph.

acceptance/go.mod

go.sumRefresh acceptance dependency checksums +14/-14

Refresh acceptance dependency checksums

• Replaces checksums for gRPC v1.82.0 and superseded transitive releases with entries for the newly resolved versions.

acceptance/go.sum

go.modUpgrade root gRPC dependency graph +10/-10

Upgrade root gRPC dependency graph

• Raises gRPC to v1.83.2 and updates related networking, text, telemetry, SPIFFE, CEL, and Go tooling dependencies resolved in the root module.

go.mod

go.sumRefresh root module checksums +20/-20

Refresh root module checksums

• Updates checksum entries for gRPC v1.83.2 and the root module's newly selected transitive dependency versions.

go.sum

go.modUpgrade tooling gRPC dependency graph +10/-10

Upgrade tooling gRPC dependency graph

• Raises gRPC to v1.83.2 in the tools module and aligns its CEL, telemetry, SPIFFE, golang.org/x, and related transitive dependencies.

tools/go.mod

go.sumRefresh tooling dependency checksums +20/-20

Refresh tooling dependency checksums

• Regenerates checksums for the upgraded gRPC release and all changed transitive dependencies in the tools module.

tools/go.sum

go.modAlign kubectl transitive Go dependencies +2/-2

Align kubectl transitive Go dependencies

• Updates the kubectl submodule's indirect golang.org/x/net and golang.org/x/text dependencies to versions selected by the refreshed module graph.

tools/kubectl/go.mod

go.sumRefresh kubectl dependency checksums +8/-8

Refresh kubectl dependency checksums

• Replaces checksums for prior golang.org/x module releases with the newly resolved mod, net, text, and tools versions.

tools/kubectl/go.sum

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 2:21 PM UTC · Completed 2:27 PM UTC

Commit: 87c4a29 · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $1.69

[qodo-for-conforma]

Code Review by Qodo

🐞 Bugs (0) 📘 Rule violations (0) 📎 Requirement gaps (0)

Great, no issues found!

Qodo reviewed your code and found no material issues that require review

Tip of the day

💡 Did you know, you can start a comment with 'qodo' or '@qodo' to chat about any finding

More tips ↗ | Customize Qodo ↗ | Qodo docs ↗

[fullsend-ai-review]

Review

Findings

High

• [protected-path] Dockerfile, Dockerfile.dist — These files are under the protected path Dockerfile. The PR has no linked issue providing authorization for modifying governance/infrastructure files. Human approval is always required for protected-path changes.
  Remediation: Link an issue that authorizes the Dockerfile changes, or obtain explicit human approval for the base image update.

---

Next steps:

• /fs-fix — agent addresses review findings automatically
• /fs-fix <your instruction> — agent fixes with your specific guidance
• Push commits directly — review re-runs automatically on push
• /fs-fix-stop — disable automatic fix runs for this PR

Previous run

Looks good to me

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 2:32 PM UTC · Completed 2:40 PM UTC

Commit: 87c4a29 · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $1.76

[fullsend-ai-review]

See the review comment for full details.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

Flag	Coverage Δ
acceptance	54.86% <ø> (+<0.01%)	⬆️
generative	18.14% <ø> (ø)
integration	26.99% <ø> (ø)
unit	68.66% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.