chore: upgrade dependencies and secure passwords

scripts/update-all.sh

@@ -32,11 +32,26 @@ for module_dir in "${modules[@]}"; do
 
   (
     cd -- "${module_dir}"
-    go get -u ./...
+    if ! go get -u ./...; then
+      echo "warning: dependency update failed; retrying with the current genproto parent module" >&2
+      # Older transitive gRPC dependencies can select the pre-split genproto
+      # module alongside the current googleapis/api and googleapis/rpc modules.
+      # Seeding the current parent version lets MVS resolve a non-overlapping set;
+      # go mod tidy removes this requirement afterward when it is not needed.
+      go get google.golang.org/genproto@latest
+      go get -u ./...
+    fi
     go mod tidy
   )
 done
 
+echo
+echo "==> Pinning the current genproto parent module for workspace compatibility"
+(
+  cd -- "${modules[0]}"
+  go get google.golang.org/genproto@latest
+)
+
 echo
 echo "==> Synchronizing go.work"
 go work sync