build(deps): Bump github.com/hashicorp/go-plugin from 1.7.0 to 1.8.0 in /store (backport #26367)

[mergify]

Bumps github.com/hashicorp/go-plugin from 1.7.0 to 1.8.0.

Release notes

Sourced from github.com/hashicorp/go-plugin's releases.

v1.8.0

What’s Changed

Compliance & Maintenance

• updated copyright and license headers
• Modernized build tags
• Multiple GitHub Actions and dependency bumps

Fixes & Improvements

• Fixed concurrency issue with pipesWaitGroup
• Prevented pidfd leak in cmdrunner
• Reduced logging configuration noise

Enhancements

• Updated go_package to full path in proto
• Improved gRPC example (plugin selection + encoding fix)
• Added gRPC streaming example

Dependencies Upgrade

• Upgraded protobuf
• Several CI/CD action updates

---

New Contributors

• @​ssagarverma
• @​ncabatoff
• @​jbkingsley
• @​kartheek-hc
• @​xnox
• @​texasich

---

Commits

• 155dcdd cmdrunner: release process handle in _pidAlive to avoid pidfd leak (#378)
• 96d18ee [chore] : Bump actions/upload-artifact in the actions group (#376)
• a0c251c [chore] : Bump actions/setup-go from 6.3.0 to 6.4.0 in the actions group (#375)
• 6a56553 [chore] : Bump the actions group with 2 updates (#373)
• abeb978 Bump protobuf from 4.25.8 to 5.29.6 in /examples/grpc/plugin-python (#372)
• a4c9002 examples: Add gRPC streaming example (#339)
• 0ac49e2 [chore] : Bump actions/checkout from 6.0.1 to 6.0.2 in the actions group (#370)
• d662936 logging: lower priority of configuring messages (#311)
• c57bf64 [chore] : Bump actions/setup-go from 6.1.0 to 6.2.0 in the actions group (#369)
• a33e454 chore: add plugin selection and fix encoding in gRPC example (#368)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

This is an automatic backport of pull request #26367 done by [Mergify](https://mergify.com).

[greptile-apps]

PR author is not in the allowed authors list.

[greptile-apps]

PR author is not in the allowed authors list.

[github-actions]

🔒 WARNING: unsigned commits detected

This pull request contains 1 commit(s) without a verified signature.

How to fix:

1. Set up commit signing (GPG or SSH).
2. Amend/rebase so every commit in this PR is verified-signed.
3. Push the updated branch and open a new PR, or ask a maintainer to reopen once fixed.

Docs: https://docs.github.com/authentication/managing-commit-signature-verification

Unsigned commits:

• 14b3313 — build(deps): Bump github.com/hashicorp/go-plugin from 1.7.0 to 1.8.0 in /store (build(deps): Bump github.com/hashicorp/go-plugin from 1.7.0 to 1.8.0 in /store #26367)

[github-actions]

🔒 WARNING: unsigned commits detected

This pull request contains 2 commit(s) without a verified signature.

How to fix:

1. Set up commit signing (GPG or SSH).
2. Amend/rebase so every commit in this PR is verified-signed.
3. Push the updated branch and open a new PR, or ask a maintainer to reopen once fixed.

Docs: https://docs.github.com/authentication/managing-commit-signature-verification

Unsigned commits:

• 14b3313 — build(deps): Bump github.com/hashicorp/go-plugin from 1.7.0 to 1.8.0 in /store (build(deps): Bump github.com/hashicorp/go-plugin from 1.7.0 to 1.8.0 in /store #26367)
• ea6c504 — chore: merge release/v0.54.x into backport branch

[aljo242]

Synced this backport branch with release/v0.54.x (it was missing recent release-line commits) and re-ran go-mod-tidy-all. Pushed to mergify/bp/release/v0.54.x/pr-26367 — CI should refresh.

Merge is still blocked on review / merge-queue policy for release/v0.54.x; no go.mod conflict markers remain on the head branch.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 65.17%. Comparing base (eac7e75) to head (4f249b7).
⚠️ Report is 5 commits behind head on release/v0.54.x.

Additional details and impacted files

@@                 Coverage Diff                 @@
##           release/v0.54.x   #26371      +/-   ##
===================================================
+ Coverage            64.90%   65.17%   +0.26%     
===================================================
  Files                  890      919      +29     
  Lines                58541    60740    +2199     
===================================================
+ Hits                 37997    39588    +1591     
- Misses               20544    21152     +608     

see 65 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.