Update grpc to v1.81.1 in runner_wrapper (CVE-2026-33186)

Daniel Keenanrequested to merge
bump-grpc-dep-in-runner-wrapper into main

What does this MR do?

Updates google.golang.org/grpc to v1.81.1 in the runner_wrapper API.

Why was this MR needed?

Vulnerability scanners flag the presence of CVE-2026-33186 due to the google.golang.org/grpc version being < 1.79.3 in the go.mod for the runner_wrapper API.

This change updates google.golang.org/grpc to v1.81.1 in the runner_wrapper API to align with the main go.mod of the project.

The vulnerability is not practically exploitable in our codebase (see security assessment) — this change simply improves scanner results by preventing the CVE from being flagged by simple version comparisons.

What's the best way to test this MR?

Inspect the code.

What are the relevant issue numbers?

Relates to https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/39332

Merge request reports