[mdelapenya]

What does this PR do?

Upgrades google.golang.org/grpc to v1.83.2 in the Dex, Couchbase, and Grafana LGTM modules. Dex and Couchbase also receive the minimum google.golang.org/genproto/googleapis/rpc version required by gRPC. The diff contains only the three modules' go.mod and go.sum files.

Why is it important?

Addresses seven Dependabot alerts covering these gRPC advisories:

• GHSA-vp52-pcj8-j9qc: memory exhaustion through HTTP/2 DATA frame fragmentation.
• GHSA-qc2q-p7wx-3px3: xDS RBAC header-matching bypass.
• GHSA-2v4p-qf9q-27wj: xDS server panic when authority/Host headers are absent. The fix on the 1.83 release line requires v1.83.2.

Related issues

• Dex alerts: 1290, 1305, 1306.
• Couchbase alerts: 1289, 1303, 1304.
• Grafana LGTM alert: 1301.

How to test this PR

• Passed make generate, go mod tidy -diff, go mod verify, and golangci-lint run in all three modules.
• Passed the Dex suite with the race detector and cache disabled: make -C modules/dex test TEST_RERUN_FAILS=0 GO_TEST_FLAGS=-count=1 (54 tests reported, one existing opt-in skip).
• Couchbase's Community and Enterprise containers timed out during startup on the local ARM64/16 KiB-page host. Re-running the Community test with the unchanged base manifests and gRPC v1.82.1 reproduced the timeout; container logs report jemalloc: Unsupported system page size. The remaining suite was stopped after these startup failures.
• Grafana LGTM compiled, but its pinned grafana/otel-lgtm:0.6.0 image is AMD64-only and exits with exec format error on the local ARM64 Docker host. The Ubuntu CI jobs are needed to complete these two integration suites.
• The repository-wide make tidy-all attempt encountered disk exhaustion while downloading unrelated modules. All three affected modules pass their individual tidy checks, and there is no unrelated manifest churn.

[netlify]

✅ Deploy Preview for testcontainers-go ready!

Name	Link
🔨 Latest commit	6c53395
🔍 Latest deploy log	https://app.netlify.com/projects/testcontainers-go/deploys/6ad783b08b852670ab6e199c
😎 Deploy Preview	https://deploy-preview-4045--testcontainers-go.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 766d2de6-58a4-4215-bba2-d5076c37f2ed

📥 Commits

Reviewing files that changed from the base of the PR and between f6d479d and 6c53395.

⛔ Files ignored due to path filters: 3

• modules/couchbase/go.sum is excluded by !**/*.sum
• modules/dex/go.sum is excluded by !**/*.sum
• modules/grafana-lgtm/go.sum is excluded by !**/*.sum

📒 Files selected for processing: 3

• modules/couchbase/go.mod
• modules/dex/go.mod
• modules/grafana-lgtm/go.mod

Included review availability: This review used your included allowance. Your plan provides up to 8 included reviews per hour; 7 remain after this review.

Summary by CodeRabbit

• Chores
  • Completed routine maintenance updates across several internal modules.
  • No user-facing features, behavior changes, or public API changes are included in this update.

Walkthrough

Updated gRPC and genproto RPC dependency versions in the Couchbase, Dex, and Grafana LGTM Go modules.

Changes

Go dependency updates

Layer / File(s)	Summary
Module dependency requirements modules/dex/go.mod, modules/couchbase/go.mod, modules/grafana-lgtm/go.mod	Updated the gRPC version in all three modules. Updated the indirect genproto RPC pseudo-version in the Couchbase and Dex modules.

Priority: ⬆️ High

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Suggested reviewers: stevenh

Merge Risk: ⚪ Minimal · up to 6c533

No actionable merge-blocking risk remains from these dependency updates.

Pre-merge checks: 5

Check name	Status	Explanation
Title check		The title clearly identifies the primary change: upgrading gRPC to v1.83.2. It accurately covers all three affected modules.
Description check		The description is directly related to the dependency upgrades, security advisories, affected modules, validation results, and test limitations.
Docstring Coverage		No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (3 skipped: 3 unsupported.)

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{A rabbit checks the module list,
New versions hop into the mix.
gRPC gets a newer number,
RPC deps join the slumber.
The burrow builds, then rests its ears.}

_{Comment @coderabbitai help to get the list of available commands.}