fix(deps): bump grpc to v1.82.1

[plural-copilot]

Summary

• bump the direct google.golang.org/grpc dependency from v1.82.0 to v1.82.1
• refresh the corresponding go.sum entries only
• validate that module resolution now selects v1.82.1

Why

This remediates GHSA-hrxh-6v49-42gf for the plural CLI binary that is bundled into the ghcr.io/pluralsh/console image.

Validation

• docker run --rm --entrypoint /usr/local/go/bin/go -v "$PWD":/src -w /src golang:1.26.5 list -m google.golang.org/grpc
• docker run --rm --entrypoint /usr/local/go/bin/go -v "$PWD":/src -w /src golang:1.26.5 build -buildvcs=false ./cmd/plural

Note: the build uses -buildvcs=false in this sandbox because the checkout environment lacks git metadata required for default Go VCS stamping.

[plural-copilot]

This PR was generated by the codex Plural Agent Runtime. Here's some useful information you might want to know to evaluate the ai's perfomance:

Name	Details
💬 Prompt	Investigate and, if possible, create a remediation PR in pluralsh/plural-cli for the actionable vulnerability affecting the ghcr.io/pluralsh/console:sha-08f96c1 image....
🔗 Run history	View run history

[greptile-apps]

Greptile Summary

This PR bumps the direct google.golang.org/grpc dependency from v1.82.0 to v1.82.1 to remediate security advisory GHSA-hrxh-6v49-42gf. The change is minimal and correctly scoped to go.mod and go.sum.

• go.mod: single-line version bump from v1.82.0 to v1.82.1.
• go.sum: new h1: and go.mod hash entries added for v1.82.1; the v1.82.0 entries are correctly retained, which is standard Go module behavior (the lockfile accumulates all referenced version hashes).

Confidence Score: 5/5

Minimal, targeted security patch with no logic changes; safe to merge.

The change is a single-line version bump in go.mod plus the corresponding go.sum additions. The new go.sum h1: hash for v1.82.1 differs from v1.82.0's (as expected for a different release), and the shared go.mod hash across both versions is consistent with an unchanged module descriptor. No indirect dependencies, no code changes, no risky refactoring.

No files require special attention.

Important Files Changed

Filename	Overview
go.mod	Bumps google.golang.org/grpc from v1.82.0 to v1.82.1 to remediate GHSA-hrxh-6v49-42gf; no other changes.
go.sum	Adds go.sum hash entries for grpc v1.82.1 while retaining v1.82.0 entries as expected for a Go module lockfile; hashes look consistent.

_{Reviews (1): Last reviewed commit: "fix(deps): bump grpc to v1.82.1" | Re-trigger Greptile}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	google.golang.org/​grpc@​v1.82.0 ⏵ v1.82.1	+1	+16

View full report