fix(core): bump to go 1.24 and bump service proto module dependencies

[jakedoublev]

Buf has new proto validation features we want to take advantage of, and we need to bump the underlying service deps in advance of utilizing those features in proto gencode. As one module requires a minimum of 1.23.4, we are bumping to 1.24.0 to avoid pinning to frequently-changing patch versions.

[github-actions]

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration
publickey	3	0.064 ms	0.027 ms	0.092 ms
rewrap-nanotdf	4860	482.137 ms	50.255 ms	1269.372 ms
rewrap-tdf3	5001	502.949 ms	63.291 ms	1200.825 ms

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	357.641892ms
Throughput	279.61 requests/second

[github-actions]

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration
publickey	3	0.063 ms	0.035 ms	0.106 ms
rewrap-nanotdf	4645	400.055 ms	58.663 ms	1123.891 ms
rewrap-tdf3	5001	440.956 ms	59.151 ms	1188.088 ms

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	342.483296ms
Throughput	291.99 requests/second

[github-actions]

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration
publickey	3	0.058 ms	0.029 ms	0.102 ms
rewrap-nanotdf	4877	416.791 ms	44.862 ms	1054.425 ms
rewrap-tdf3	5001	446.853 ms	50.555 ms	1050.524 ms

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	369.247704ms
Throughput	270.82 requests/second

[github-actions]

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration
publickey	3	0.094 ms	0.047 ms	0.186 ms
rewrap-nanotdf	4828	435.043 ms	123.594 ms	946.875 ms
rewrap-tdf3	5001	462.728 ms	49.884 ms	1034.890 ms

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	360.8476ms
Throughput	277.13 requests/second

[github-actions]

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration
publickey	3	0.063 ms	0.033 ms	0.098 ms
rewrap-nanotdf	4953	409.565 ms	46.225 ms	792.930 ms
rewrap-tdf3	5001	436.229 ms	51.019 ms	1071.023 ms

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	360.385518ms
Throughput	277.48 requests/second

[github-actions]

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration
publickey	3	0.065 ms	0.039 ms	0.106 ms
rewrap-nanotdf	4916	409.803 ms	61.099 ms	981.811 ms
rewrap-tdf3	5001	445.102 ms	43.979 ms	1157.826 ms

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	358.22374ms
Throughput	279.16 requests/second

[github-actions]

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration
publickey	3	0.066 ms	0.045 ms	0.108 ms
rewrap-nanotdf	4764	426.474 ms	42.776 ms	1015.747 ms
rewrap-tdf3	5001	460.436 ms	52.596 ms	1153.605 ms

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	356.086643ms
Throughput	280.83 requests/second

[github-actions]

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration
publickey	3	0.064 ms	0.036 ms	0.103 ms
rewrap-nanotdf	4953	463.774 ms	58.298 ms	1085.135 ms
rewrap-tdf3	5001	499.552 ms	58.542 ms	1270.470 ms

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	360.888691ms
Throughput	277.09 requests/second

[github-actions]

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration
publickey	3	0.075 ms	0.028 ms	0.142 ms
rewrap-nanotdf	4912	413.127 ms	16.142 ms	955.888 ms
rewrap-tdf3	5001	450.670 ms	39.057 ms	1080.096 ms

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	366.662138ms
Throughput	272.73 requests/second

[pflynn-virtru]

No Clear Regression/Improvement Solely from Go Version:
While performance varied, the data doesn't strongly indicate a significant, consistent performance regression or improvement directly and solely caused by switching from Go 1.23.x to Go 1.24.0 within this specific test suite and set of changes. The impact of dependency updates is intertwined with the Go version change.

[Copilot]

Copilot reviewed 16 out of 18 changed files in this pull request and generated no comments.

Files not reviewed (2)

• go.work: Language not supported
• service/go.mod: Language not supported

Comments suppressed due to low confidence (6)

service/policy/unsafe/unsafe_test.go:16

• Changing the return type from *protovalidate.Validator to protovalidate.Validator could affect behavior if the validator has mutable internals; please confirm that value semantics are intended and that downstream code can work with a copy rather than a pointer.

func getValidator() protovalidate.Validator {

service/policy/subjectmapping/subject_mapping_test.go:12

• Ensure that switching from returning a pointer to a value for protovalidate.Validator is consistent with its usage in the tests and does not inadvertently alter mutable state behavior.

func getValidator() protovalidate.Validator {

service/policy/resourcemapping/resource_mapping_test.go:51

• Verify that returning a Validator value instead of a pointer is correct for the intended test operations, especially if methods on protovalidate.Validator expect pointer semantics.

func getValidator() protovalidate.Validator {

service/policy/namespaces/namespaces_test.go:22

• The change from a pointer to a value for the getValidator function should be reviewed to ensure that any internal mutable state in protovalidate.Validator is handled properly.

func getValidator() protovalidate.Validator {

service/policy/kasregistry/key_access_server_registry_test.go:13

• Confirm that returning protovalidate.Validator as a value (instead of a pointer) works as expected in test scenarios and does not impact stateful behavior.

func getValidator() protovalidate.Validator {

service/policy/attributes/attributes_test.go:14

• Review the change in getValidator's signature from a pointer to a value to ensure that this does not break any assumptions about mutability or shared state in the validator usage.

func getValidator() protovalidate.Validator {