Backport PR #3606 to release/v1.7 for Update dependencies

[vdaas-ci]

Description

This pull request primarily updates dependencies and tools across the codebase to their latest versions, focusing on GitHub Actions, Docker, and Go-related tooling. These updates help maintain compatibility, security, and stability in CI/CD workflows and development environments. The changes also include updates to version references in documentation and template files.

Dependency and Tooling Updates

• Updated GitHub Actions used in workflows to newer versions for improved features and security, including actions/checkout (v7.0.1), actions/labeler (v7.0.0), docker/login-action (v4.6.0), and github/codeql-action (v4.37.7). (.github/workflows/labeler.yaml, .github/workflows/semver-major-minor.yaml, .github/workflows/test-hack.yaml, .github/workflows/update-protobuf.yaml, .github/workflows/_docker-image.yaml, .github/workflows/codeql-analysis.yml) [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11]

• Updated Trivy and CodeQL-related actions to their latest versions in the Docker image scanning workflow for enhanced vulnerability scanning and reporting. (.github/actions/scan-docker-image/action.yaml) [1] [2]

Documentation and Template Updates

• Updated version references for Go, Docker, Helm, and Faiss in issue and pull request templates to reflect the latest supported versions. (.github/ISSUE_TEMPLATE/bug_report.md, .github/ISSUE_TEMPLATE/security_issue_report.md, .github/PULL_REQUEST_TEMPLATE.md) [1] [2] [3]

Generated Code Updates

• Regenerated gRPC Go files to use protoc-gen-go v1.36.12 (was v1.36.11), ensuring generated code is up-to-date with the latest tooling. (apis/grpc/v1/agent/core/agent.pb.go, apis/grpc/v1/agent/sidecar/sidecar.pb.go, apis/grpc/v1/discoverer/discoverer.pb.go, apis/grpc/v1/filter/egress/egress_filter.pb.go, apis/grpc/v1/filter/ingress/ingress_filter.pb.go, apis/grpc/v1/meta/meta.pb.go, apis/grpc/v1/mirror/mirror.pb.go, apis/grpc/v1/payload/payload.pb.go, apis/grpc/v1/rpc/errdetails/error_details.pb.go, apis/grpc/v1/rpc/stats/stats.pb.go) [1] [2] [3] [4] [5] [6] [7] [8] [9] [10]

Related Issue

Versions

• Vald Version: v1.7.17
• Go Version: v1.26.5
• Rust Version: v1.97.1
• Docker Version: v29.6.2
• Kubernetes Version: v1.36.3
• Helm Version: v4.2.3
• NGT Version: v2.7.4
• Faiss Version: v1.14.3

Checklist

• I have read the CONTRIBUTING document and completed our CLA agreement.
• I have checked open Pull Requests for the similar feature or fixes?

Special notes for your reviewer

Summary by CodeRabbit

• Documentation

  • Expanded API reference descriptions for agent, discoverer, filter, mirror, statistics, indexing, search, and vector-management services.
  • Clarified schema metadata for search and filtering options.

• Chores

  • Updated development environment version references across issue and pull request templates.
  • Refreshed build, security scanning, code analysis, labeling, and workflow tooling.
  • Enabled SBOM scanning configuration for container builds.
  • Updated Go toolchain and module versions across the project and example client.

[cloudflare-workers-and-pages]

Deploying vald with    Cloudflare Pages

Latest commit:	895a71a
Status:	✅  Deploy successful!
Preview URL:	https://80653838.vald.pages.dev
Branch Preview URL:	https://backport-release-v1-7-refact-kufn.vald.pages.dev

View logs

[vdaas-ci]

[CHATOPS:HELP] ChatOps commands.

• 🙆‍♀️ /approve - approve
• 🍱 /format - format codes and add licenses
• ✅ /gen-test - generate test codes
• 🏷️ /label - add labels
• 🔚 2️⃣ 🔚 /label actions/e2e-v2 - run E2E deploy & integration test (tests/v2/e2e)

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

🗂️ Base branches to auto review (1)

• main

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 4ee34b51-f03e-44a3-99b1-c35bacd64578

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

🚫 [hadolint] <DL1000> _{reported by reviewdog 🐶}
unexpected '<'
expecting '#', '', ADD, ARG, CMD, COPY, ENTRYPOINT, ENV, EXPOSE, FROM, HEALTHCHECK, LABEL, MAINTAINER, ONBUILD, RUN, SHELL, STOPSIGNAL, USER, VOLUME, WORKDIR, a pragma, at least one space, or end of input