fix: Update google.golang.org/grpc and GitHub actions

[maciaszczykm]

Removed WithSharedWriteBuffer calls as it is done by default now.

See: grpc/grpc-go#8957 and grpc/grpc-go#9060.

Test Plan

Test environment: https://console.plrl-dev-aws.onplural.sh/

Checklist

• I have added a meaningful title and summary to convey the impact of this PR to a user.
• If required, I have updated the Plural documentation accordingly.

Plural Flow: console

[maciaszczykm]

plural review this

[soffi-ai]

Soffi AI Summary

This PR performs routine dependency and CI infrastructure maintenance across the monorepo. The core change upgrades google.golang.org/grpc from v1.80.0 to v1.82.1 (along with the corresponding google.golang.org/genproto sub-packages) in both go/cloud-query and go/controller. In parallel, all GitHub Actions action versions are bumped across every workflow file: actions/cache from v3 → v6, actions/upload-artifact/actions/download-artifact from v4 → v7, and various other actions (CodeQL, Trivy, etc.) are similarly updated to their latest pinned versions. A small cleanup commit removes redundant function calls. These changes keep the project aligned with current upstream releases and avoid using deprecated/unsupported action versions in CI.

Commits

Commit	Summary
69153da	Bumps google.golang.org/grpc from v1.80.0 to v1.82.1 and updates the associated google.golang.org/genproto/googleapis/api and google.golang.org/genproto/googleapis/rpc packages to their latest versions in both go/cloud-query and go/controller go.sum/go.mod files.
505c940	Updates yarn lock file resolutions in the frontend (assets/) to align with the dependency bump, and adjusts assets/package.json accordingly.
09f9e7c	Upgrades all GitHub Actions action versions across the full suite of CI/CD workflow files: actions/cache v3 → v6, actions/upload-artifact/actions/download-artifact v4 → v7, and other action pinnings (CodeQL, Trivy, nexus, go-ci, etc.) to their latest versions.
5b43325	Removes redundant function calls, likely a minor code cleanup identified while touching these files.

Deploy in Soffi

---

Updated: 2026-07-22 12:55 UTC

[maciaszczykm]

@greptileai

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	golang/​google.golang.org/​grpc@​v1.80.0 ⏵ v1.82.1	+1	+16
	golang/​github.com/​envoyproxy/​protoc-gen-validate@​v1.3.0 ⏵ v1.3.3
	golang/​google.golang.org/​genproto/​googleapis/​rpc@​v0.0.0-20260414002931-afd174a4e478

View full report

[greptile-apps]

Greptile Summary

This PR updates the shared Go dependency graph for gRPC. The main changes are:

• Updates gRPC from v1.80.0 to v1.82.1 across nine modules.
• Refreshes matching genproto and transitive dependencies.
• Aligns protoc-gen-validate tooling and KAS dependencies at v1.3.3.
• Removes unused indirect OpenTelemetry and OAuth requirements.

Confidence Score: 5/5

This looks safe to merge.

• No blocking issues found in the changed dependency manifests.
• Existing callers use stable gRPC interfaces supported by the updated version.
• Removed indirect requirements are not imported by their modules.
• The validation generator and KAS runtime dependency are aligned at v1.3.3.

Important Files Changed

Filename	Overview
go/cloud-query/go.mod	Updates the direct gRPC dependency and reconciles its indirect genproto requirements.
go/deployment-operator/go.mod	Updates the direct gRPC dependency and matching genproto revisions.
go/kubernetes-agent/kas/go.mod	Aligns gRPC, genproto, and protoc-gen-validate dependency versions.
go/nexus/go.mod	Updates gRPC and removes unused indirect OpenTelemetry requirements.
go/observability-proxy/go.mod	Updates gRPC and prunes unused indirect OpenTelemetry requirements.
go/tools/go.mod	Updates protoc-gen-validate and refreshes its transitive generator dependency graph.
go/helm-test/go.mod	Updates the indirect gRPC and genproto graph and removes an unnecessary explicit requirement.

_{Reviews (1): Last reviewed commit: "update google.golang.org/grpc" | Re-trigger Greptile}

[greptile-apps]

Greptile Summary

This PR updates gRPC and related Go dependencies across the repository. The main changes are:

• Upgrade gRPC-Go from v1.80.0 to v1.82.1 across nine modules.
• Align genproto and protobuf-validation dependencies.
• Refresh related Envoy, xDS, GCP detector, and generator checksums.
• Remove indirect dependencies no longer selected by the module graph.

Confidence Score: 5/5

This looks safe to merge.

• No blocking issues found in the changed code.
• The gRPC version is aligned across the affected modules.
• Existing generated gRPC code remains within the selected library's supported API range.
• Removed indirect requirements have no identified direct imports in their modules.

Important Files Changed

Filename	Overview
go/cloud-query/go.mod	Upgrades the direct gRPC dependency and aligns the selected genproto modules.
go/deployment-operator/go.mod	Upgrades the operator's direct gRPC dependency and related indirect genproto modules.
go/deployment-operator/go.sum	Refreshes checksums for gRPC and selected transitive Envoy, xDS, validation, and GCP detector dependencies.
go/kubernetes-agent/kas/go.mod	Upgrades direct gRPC, genproto, and protoc-gen-validate dependencies used by KAS.
go/nexus/go.mod	Upgrades gRPC and genproto while removing unused indirect OpenTelemetry requirements.
go/observability-proxy/go.mod	Upgrades gRPC and genproto while removing unused indirect OpenTelemetry requirements.
go/tools/go.mod	Updates protobuf validation tooling and its protoc-gen-star dependency.

_{Reviews (2): Last reviewed commit: "update google.golang.org/grpc" | Re-trigger Greptile}

[plural-copilot]

The grpc update looks consistent across the modules touched by this PR, but the workspace is still left with mixed genproto/googleapis/rpc revisions in go/client and go/deployment-operator/terratest. I don't see a clear correctness issue in the diff itself, but I'd like those leftover modules reconciled or explicitly justified, and the usual module-level CI / grpc-heavy validation to pass before merge.

Main review concern is workspace-wide dependency alignment rather than the direct grpc bump itself. If the omitted modules are intentionally excluded, please note that in the PR and rely on green CI for the grpc-heavy services.