security: fix Dependabot alerts for grpc and OTel

[mdelapenya]

What does this PR do?

Fixes actionable Dependabot security alerts with one commit per vulnerability:

• GHSA-hrxh-6v49-42gf: Bump google.golang.org/grpc to v1.82.1 in dex, couchbase, etcd, milvus, pinecone modules
• GHSA-w8rr-5gcm-pp58: Bump go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to v0.20.0 (+ related OTel log/bridge packages) in grafana-lgtm module

Alerts NOT addressed (no fix available)

• github.com/docker/docker (compose, chroma): v29.3.1 was never published as a Go module — the latest available is v28.5.2+incompatible. Upstream docker/compose needs to migrate away from the docker/docker import path first.
• github.com/weaviate/weaviate (weaviate): all patched versions (>= v1.38.0-rc.0) require go 1.26, incompatible with this repo's go 1.25.0 directive. Needs a Go version bump first.
• pymdown-extensions (Pipfile.lock): Python dependency, outside scope of Go dependency management.

[netlify]

✅ Deploy Preview for testcontainers-go ready!

Name	Link
🔨 Latest commit	92c7f9e
🔍 Latest deploy log	https://app.netlify.com/projects/testcontainers-go/deploys/6a71d6326e3a29000899bea1
😎 Deploy Preview	https://deploy-preview-3835--testcontainers-go.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: f914247a-59c0-4ea5-86aa-7f82973e3d55

📥 Commits

Reviewing files that changed from the base of the PR and between 6b07dec and 92c7f9e.

⛔ Files ignored due to path filters (6)

• modules/couchbase/go.sum is excluded by !**/*.sum
• modules/dex/go.sum is excluded by !**/*.sum
• modules/etcd/go.sum is excluded by !**/*.sum
• modules/grafana-lgtm/go.sum is excluded by !**/*.sum
• modules/milvus/go.sum is excluded by !**/*.sum
• modules/pinecone/go.sum is excluded by !**/*.sum

📒 Files selected for processing (6)

• modules/couchbase/go.mod
• modules/dex/go.mod
• modules/etcd/go.mod
• modules/grafana-lgtm/go.mod
• modules/milvus/go.mod
• modules/pinecone/go.mod

---

Summary by CodeRabbit

• Chores
  • Updated underlying platform components across Couchbase, DEX, etcd, Grafana LGTM, Milvus, and Pinecone integrations.
  • Incorporates the latest improvements and compatibility updates, helping maintain reliability and stability across supported integrations.
  • No changes to public interfaces or end-user functionality.

Walkthrough

The pull request updates dependency versions in six Go modules. It refreshes Google API, genproto, gRPC, protobuf, OpenTelemetry logging, and grpc-gateway references.

Changes

Dependency refresh

Layer / File(s)	Summary
Google and gRPC version updates modules/couchbase/go.mod, modules/dex/go.mod, modules/etcd/go.mod, modules/milvus/go.mod, modules/pinecone/go.mod	These modules now use newer Google API, genproto, gRPC, and protobuf versions.
Grafana observability dependency updates modules/grafana-lgtm/go.mod	The module now uses newer OpenTelemetry logging packages, grpc-gateway, and genproto versions.

Estimated code review effort: 2 (Simple) | ~10 minutes

Suggested reviewers: stevenh

Poem

A rabbit checks each version line,
New modules fit in rows so fine.
gRPC hops, protobufs gleam,
Logs grow fresh beside the stream.
Six go.mod files softly agree.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title directly reflects the main change: fixing Dependabot security alerts for gRPC and OpenTelemetry dependencies across multiple modules.
Description check	✅ Passed	The description clearly explains what the PR does, lists specific security alerts addressed with CVE identifiers, and documents alerts not addressed with reasons.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch security/fix-dependabot-alerts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}