fix(deps): bump golang.org/x/text to v0.39.0 and golang.org/x/net to v0.56.0 (#463)

Fixes govulncheck failures in CI: - **GO-2026-5970** — infinite loop on invalid input in `golang.org/x/text` (v0.37.0 → v0.39.0), reachable via `gitlab.RestClient.projectApiCall` → `http.Client.Do` - **GO-2026-5942** — panic parsing invalid SVCB/HTTPS RR in `golang.org/x/net/dns/dnsmessage` (v0.55.0 → v0.56.0) `go mod tidy` also pulled `x/sys` v0.46.0 and `x/term` v0.44.0. `govulncheck ./...` now reports no vulnerabilities; `go test -race ./...` passes. Reviewed-on: #463
2026-08-09 18:31:25 +00:00
parent f70982bfdb
commit b43a3e8edd
2 changed files with 12 additions and 12 deletions
@@ -36,11 +36,11 @@ require (
 	github.com/x448/float16 v0.8.4 // indirect
 	go.yaml.in/yaml/v2 v2.4.3 // indirect
 	go.yaml.in/yaml/v3 v3.0.4 // indirect
-	golang.org/x/net v0.55.0 // indirect
+	golang.org/x/net v0.56.0 // indirect
 	golang.org/x/oauth2 v0.34.0 // indirect
-	golang.org/x/sys v0.45.0 // indirect
-	golang.org/x/term v0.43.0 // indirect
-	golang.org/x/text v0.37.0 // indirect
+	golang.org/x/sys v0.46.0 // indirect
+	golang.org/x/term v0.44.0 // indirect
+	golang.org/x/text v0.39.0 // indirect
 	golang.org/x/time v0.14.0 // indirect
 	google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af // indirect
 	gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect