(fix) grpc and go versions have been updated to 1.79.3 and to 1.24

[ChanukaUOJ]

Problem

There is a vulnerability(CVE-2026-33186) issue in core layer with grpc version 1.72.1. This is caught by choreo Container (Trivy) Vulnerability Scan and the container log is reported below. As the solution the grpc and go version need to updated to versions 1.79.3 and 1.24 respectively.

app/opengin/core-api/core-service (gobinary)
============================================
Total: 1 (CRITICAL: 1)

┌────────────────────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬─────────────────────────────────────────────────────────────┐
│        Library         │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version │                            Title                            │
├────────────────────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼─────────────────────────────────────────────────────────────┤
│ google.golang.org/grpc │ CVE-2026-33186 │ CRITICAL │ fixed  │ v1.72.1           │ 1.79.3        │ google.golang.org/grpc/grpc-go:                             │
│                        │                │          │        │                   │               │ google.golang.org/grpc/authz: gRPC-Go: Authorization bypass │
│                        │                │          │        │                   │               │ due to improper HTTP/2 path validation                      │
│                        │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2026-33186                  │
└────────────────────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴─────────────────────────────────────────────────────────────┘

usr/local/bin/core-service (gobinary)
=====================================
Total: 1 (CRITICAL: 1)

┌────────────────────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬─────────────────────────────────────────────────────────────┐
│        Library         │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version │                            Title                            │
├────────────────────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼─────────────────────────────────────────────────────────────┤
│ google.golang.org/grpc │ CVE-2026-33186 │ CRITICAL │ fixed  │ v1.72.1           │ 1.79.3        │ google.golang.org/grpc/grpc-go:                             │
│                        │                │          │        │                   │               │ google.golang.org/grpc/authz: gRPC-Go: Authorization bypass │
│                        │                │          │        │                   │               │ due to improper HTTP/2 path validation                      │
│                        │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2026-33186                  │
└────────────────────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴─────────────────────────────────────────────────────────────┘```

### Solution
- `grpc` version has been updated to `1.79.3`
- `go` version has been updated in the core layer to `1.24` (the compatible version)

### Testing
- All the `e2e` tests are parsing

[gemini-code-assist]

Code Review

This pull request updates the Go runtime environment and various dependencies for the core-api service. Specifically, it upgrades the Go version from 1.23 to 1.24 in both the Dockerfiles and the go.mod file, updates the Go toolchain to 1.24.3, and bumps several key dependencies including gRPC, Protobuf, and various golang.org/x packages to their latest versions. There are no review comments, and I have no feedback to provide.

Important

The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.

[zaeema-n]

LGTM!