fix(deps): upgrade gRPC to v1.83.1 for PROD-5196

[plural-copilot]

Summary

• Remediates Dependabot Update module github.com/hashicorp/hcl to v2 #139 / GHSA-vp52-pcj8-j9qc / CVE-2026-84304 by upgrading google.golang.org/grpc from v1.82.1 to the fixed v1.83.1 release.
• Updates only Go module metadata: the direct requirement in go.mod and the corresponding two go.sum checksums.
• No deployment or infrastructure manifests were changed, and Go module tidy selected no transitive module version changes.

Validation

• go list -m all | grep "^google.golang.org/grpc " → google.golang.org/grpc v1.83.1
• go mod verify → all modules verified
• go test ./pkg/provider/gcp/... passed (package has no test files).
• go build -buildvcs=false ./cmd/plural passed. The standard build form hit a mounted-container VCS stamping limitation (exit status 128).
• make test exited 0, but gotestsum printed two unknown failures despite both underlying package test commands reporting ok; this runner inconsistency is documented.
• Bounded Dockerfile build compiled the builder-stage binary but timed out during final image assembly after 15 minutes.

Fixes PROD-5196

[plural-copilot]

This PR was generated by the codex Plural Agent Runtime. Here's some useful information you might want to know to evaluate the ai's perfomance:

Name	Details
💬 Prompt	Implement the dependency vulnerability remediation for Linear PROD-5196 in this repository and open one PR against the normal default branch....
🔗 Run history	View run history

[linear]

PROD-5196

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	google.golang.org/​grpc@​v1.82.1 ⏵ v1.83.1	+1	+16

View full report

[greptile-apps]

Greptile Summary

This PR upgrades google.golang.org/grpc from v1.82.1 to v1.83.1 to remediate the cited vulnerability.

• Updates the direct module requirement in go.mod.
• Replaces the corresponding module and module-file checksums in go.sum.
• Introduces no transitive dependency or application-code changes.

Confidence Score: 5/5

The PR appears safe to merge because the focused gRPC patch upgrade is consistent with the repository’s toolchain and usage.

No actionable failure was identified; the dependency declaration and checksums agree, and the upgraded version does not conflict with the repository’s direct gRPC APIs or declared Go version.

Important Files Changed

Filename	Overview
go.mod	Upgrades the direct gRPC dependency to v1.83.1; the repository toolchain and direct gRPC API usage remain compatible.
go.sum	Replaces only the two gRPC v1.82.1 checksums with the matching v1.83.1 checksums.

_{Reviews (1): Last reviewed commit: "fix(deps): upgrade grpc to v1.83.1" | Re-trigger Greptile}