build(deps): bump the go_modules group across 56 directories with 3 updates

[dependabot]

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go directory: golang.org/x/crypto.
Bumps the go_modules group with 2 updates in the /pkg/trpc-agent-go/benchmark/gaia/trpc-agent-go-impl directory: golang.org/x/crypto and golang.org/x/image.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/benchmark/knowledge/knowledge_system/trpc_agent_go/trpc_knowledge directory: golang.org/x/crypto.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/examples/agui directory: golang.org/x/crypto.
Bumps the go_modules group with 2 updates in the /pkg/trpc-agent-go/examples/arxivsearch directory: golang.org/x/crypto and golang.org/x/image.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/examples/graph directory: golang.org/x/crypto.
Bumps the go_modules group with 2 updates in the /pkg/trpc-agent-go/examples/knowledge directory: golang.org/x/crypto and golang.org/x/image.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/examples/n8n directory: golang.org/x/net.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/examples/promptcache/anthropic directory: golang.org/x/net.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/examples/promptcache/openai directory: golang.org/x/net.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/examples/provider directory: golang.org/x/crypto.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/examples/session directory: golang.org/x/crypto.
Bumps the go_modules group with 2 updates in the /pkg/trpc-agent-go/examples/skill directory: golang.org/x/crypto and golang.org/x/image.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/examples/skillrun directory: golang.org/x/net.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/examples/tailor directory: golang.org/x/crypto.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/examples/taskrun directory: golang.org/x/net.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/examples/tool/webfetch/geminifetch directory: golang.org/x/crypto.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/examples/tool/webfetch/httpfetch directory: golang.org/x/net.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/examples/toolpipe directory: golang.org/x/net.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/examples/weknora directory: golang.org/x/net.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/graph/checkpoint/redis directory: golang.org/x/net.
Bumps the go_modules group with 2 updates in the /pkg/trpc-agent-go/knowledge/document/reader/pdf directory: golang.org/x/crypto and golang.org/x/image.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/knowledge/embedder/gemini directory: golang.org/x/crypto.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/knowledge/embedder/huggingface directory: golang.org/x/net.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/knowledge/embedder/ollama directory: golang.org/x/crypto.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/knowledge/graphstore/age directory: golang.org/x/crypto.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/knowledge/vectorstore/milvus directory: golang.org/x/crypto.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/knowledge/vectorstore/pgvector directory: golang.org/x/crypto.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/knowledge/vectorstore/qdrant directory: golang.org/x/net.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/knowledge/vectorstore/tcvector directory: golang.org/x/net.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/memory/pgvector directory: golang.org/x/crypto.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/memory/postgres directory: golang.org/x/crypto.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/model/gemini directory: golang.org/x/crypto.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/model/provider directory: golang.org/x/crypto.
Bumps the go_modules group with 2 updates in the /pkg/trpc-agent-go/openclaw directory: golang.org/x/crypto and golang.org/x/image.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/server/agui directory: golang.org/x/net.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/server/evaluation directory: golang.org/x/crypto.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/server/promptiter directory: golang.org/x/crypto.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/session/clickhouse directory: golang.org/x/net.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/session/mysql directory: golang.org/x/net.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/session/pgvector directory: golang.org/x/crypto.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/session/postgres directory: golang.org/x/crypto.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/session/redis directory: golang.org/x/net.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/session/sqlite directory: golang.org/x/net.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/storage/milvus directory: golang.org/x/crypto.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/storage/mongodb directory: golang.org/x/crypto.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/storage/postgres directory: golang.org/x/crypto.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/storage/qdrant directory: golang.org/x/net.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/storage/tcvector directory: golang.org/x/net.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/test directory: golang.org/x/net.
Bumps the go_modules group with 2 updates in the /pkg/trpc-agent-go/tool/arxivsearch directory: golang.org/x/crypto and golang.org/x/image.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/tool/claudecode directory: golang.org/x/net.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/tool/google directory: golang.org/x/crypto.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/tool/webfetch/geminifetch directory: golang.org/x/crypto.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/tool/webfetch/httpfetch directory: golang.org/x/net.
Bumps the go_modules group with 1 update in the /pkg/trpc-agent-go/tool/wikipedia directory: golang.org/x/net.

Updates golang.org/x/crypto from 0.32.0 to 0.52.0

Commits

• a1c0d99 go.mod: update golang.org/x dependencies
• 3c7c869 ssh: fix deadlock on unexpected channel responses
• 533fb3f ssh: fix source-address critical option bypass
• abbc44d ssh: fix incorrect operator order
• e052873 ssh: fix infinite loop on large channel writes due to integer overflow
• b61cf85 ssh: enforce user presence verification for security keys
• 9c2cd33 ssh: enforce strict limits on DSA key parameters
• 8907318 ssh: reject RSA keys with excessively large moduli
• ffd87b4 ssh: fix panic when authority callbacks are nil
• 4e7a738 ssh: fix deadlock on unexpected global responses
• Additional commits viewable in compare view

Updates golang.org/x/net from 0.34.0 to 0.54.0

Commits

• 7770ec4 go.mod: update golang.org/x dependencies
• 4ece7b6 html: escape greater-than symbol in doctype identifiers
• 08be507 html: improve Noah's Ark clause performance
• a8fb2fe html: properly render fostered elements in foreign content
• 0dc5b7a html: properly check namespace in "in body" any other end tag
• a452f3c html: ignore duplicate attributes during tokenization
• f865199 quic: fix appendMaxDataFrame erroneously accumulating sentLimit
• 210ed3c quic: establish a "happened-before" relationship between stream write and read
• ad8140e quic: fix buffer slicing when handling overlapping stream data
• 23ee2ef http2: avoid API changes when built with go1.27
• Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.45.0 to 0.52.0

Commits

• a1c0d99 go.mod: update golang.org/x dependencies
• 3c7c869 ssh: fix deadlock on unexpected channel responses
• 533fb3f ssh: fix source-address critical option bypass
• abbc44d ssh: fix incorrect operator order
• e052873 ssh: fix infinite loop on large channel writes due to integer overflow
• b61cf85 ssh: enforce user presence verification for security keys
• 9c2cd33 ssh: enforce strict limits on DSA key parameters
• 8907318 ssh: reject RSA keys with excessively large moduli
• ffd87b4 ssh: fix panic when authority callbacks are nil
• 4e7a738 ssh: fix deadlock on unexpected global responses
• Additional commits viewable in compare view

Updates golang.org/x/net from 0.47.0 to 0.54.0

Commits

• 7770ec4 go.mod: update golang.org/x dependencies
• 4ece7b6 html: escape greater-than symbol in doctype identifiers
• 08be507 html: improve Noah's Ark clause performance
• a8fb2fe html: properly render fostered elements in foreign content
• 0dc5b7a html: properly check namespace in "in body" any other end tag
• a452f3c html: ignore duplicate attributes during tokenization
• f865199 quic: fix appendMaxDataFrame erroneously accumulating sentLimit
• 210ed3c quic: establish a "happened-before" relationship between stream write and read
• ad8140e quic: fix buffer slicing when handling overlapping stream data
• 23ee2ef http2: avoid API changes when built with go1.27
• Additional commits viewable in compare view

Updates golang.org/x/image from 0.32.0 to 0.41.0

Commits

• 0d61147 bmp: reject input with invalid palette index
• fe8ae45 tiff: limit PackBits decompression output size
• 542a3d9 go.mod: update golang.org/x dependencies
• 5cbe89a tiff: reject 0-size images
• 3d5c9b6 go.mod: update golang.org/x dependencies
• 854c274 font/sfnt: apply bounds checks before allocating read buffer
• 96edba0 webp: reject VP8X headers with too-large canvases
• 23ae9ed tiff: cap buffer growth to prevent OOM from malicious IFD offset
• e589e60 webp: allow VP8L + VP8X(with alpha)
• fe7d73d go.mod: update golang.org/x dependencies
• Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.32.0 to 0.52.0

Commits

• a1c0d99 go.mod: update golang.org/x dependencies
• 3c7c869 ssh: fix deadlock on unexpected channel responses
• 533fb3f ssh: fix source-address critical option bypass
• abbc44d ssh: fix incorrect operator order
• e052873 ssh: fix infinite loop on large channel writes due to integer overflow
• b61cf85 ssh: enforce user presence verification for security keys
• 9c2cd33 ssh: enforce strict limits on DSA key parameters
• 8907318 ssh: reject RSA keys with excessively large moduli
• ffd87b4 ssh: fix panic when authority callbacks are nil
• 4e7a738 ssh: fix deadlock on unexpected global responses
• Additional commits viewable in compare view

Updates golang.org/x/net from 0.34.0 to 0.54.0

Commits

• 7770ec4 go.mod: update golang.org/x dependencies
• 4ece7b6 html: escape greater-than symbol in doctype identifiers
• 08be507 html: improve Noah's Ark clause performance
• a8fb2fe html: properly render fostered elements in foreign content
• 0dc5b7a html: properly check namespace in "in body" any other end tag
• a452f3c html: ignore duplicate attributes during tokenization
• f865199 quic: fix appendMaxDataFrame erroneously accumulating sentLimit
• 210ed3c quic: establish a "happened-before" relationship between stream write and read
• ad8140e quic: fix buffer slicing when handling overlapping stream data
• 23ee2ef http2: avoid API changes when built with go1.27
• Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.32.0 to 0.52.0

Commits

• a1c0d99 go.mod: update golang.org/x dependencies
• 3c7c869 ssh: fix deadlock on unexpected channel responses
• 533fb3f ssh: fix source-address critical option bypass
• abbc44d ssh: fix incorrect operator order
• e052873 ssh: fix infinite loop on large channel writes due to integer overflow
• b61cf85 ssh: enforce user presence verification for security keys
• 9c2cd33 ssh: enforce strict limits on DSA key parameters
• 8907318 ssh: reject RSA keys with excessively large moduli
• ffd87b4 ssh: fix panic when authority callbacks are nil
• 4e7a738 ssh: fix deadlock on unexpected global responses
• Additional commits viewable in compare view

Updates golang.org/x/net from 0.34.0 to 0.54.0

Commits

• 7770ec4 go.mod: update golang.org/x dependencies
• 4ece7b6 html: escape greater-than symbol in doctype identifiers
• 08be507 html: improve Noah's Ark clause performance
• a8fb2fe html: properly render fostered elements in foreign content
• 0dc5b7a html: properly check namespace in "in body" any other end tag
• a452f3c html: ignore duplicate attributes during tokenization
• f865199 quic: fix appendMaxDataFrame erroneously accumulating sentLimit
• 210ed3c quic: establish a "happened-before" relationship between stream write and read
• ad8140e quic: fix buffer slicing when handling overlapping stream data
• 23ee2ef http2: avoid API changes when built with go1.27
• Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.43.0 to 0.52.0

Commits

• a1c0d99 go.mod: update golang.org/x dependencies
• 3c7c869 ssh: fix deadlock on unexpected channel responses
• 533fb3f ssh: fix source-address critical option bypass
• abbc44d ssh: fix incorrect operator order
• e052873 ssh: fix infinite loop on large channel writes due to integer overflow
• b61cf85 ssh: enforce user presence verification for security keys
• 9c2cd33 ssh: enforce strict limits on DSA key parameters
• 8907318 ssh: reject RSA keys with excessively large moduli
• ffd87b4 ssh: fix panic when authority callbacks are nil
• 4e7a738 ssh: fix deadlock on unexpected global responses
• Additional commits viewable in compare view

Updates golang.org/x/net from 0.45.0 to 0.54.0

Commits

• 7770ec4 go.mod: update golang.org/x dependencies
• 4ece7b6 html: escape greater-than symbol in doctype identifiers
• 08be507 html: improve Noah's Ark clause performance
• a8fb2fe html: properly render fostered elements in foreign content
• 0dc5b7a html: properly check namespace in "in body" any other end tag
• a452f3c html: ignore duplicate attributes during tokenization
• f865199 quic: fix appendMaxDataFrame erroneously accumulating sentLimit
• 210ed3c quic: establish a "happened-before" relationship between stream write and read
• ad8140e quic: fix buffer slicing when handling overlapping stream data
• 23ee2ef http2: avoid API changes when built with go1.27
• Additional commits viewable in compare view

Updates golang.org/x/image from 0.32.0 to 0.41.0

Commits

• 0d61147 bmp: reject input with invalid palette index
• fe8ae45 tiff: limit PackBits decompression output size
• 542a3d9 go.mod: update golang.org/x dependencies
• 5cbe89a tiff: reject 0-size images
• 3d5c9b6 go.mod: update golang.org/x dependencies
• 854c274 font/sfnt: apply bounds checks before allocating read buffer
• 96edba0 webp: reject VP8X headers with too-large canvases
• 23ae9ed tiff: cap buffer growth to prevent OOM from malicious IFD offset
• e589e60 webp: allow VP8L + VP8X(with alpha)
• fe7d73d go.mod: update golang.org/x dependencies
• Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.32.0 to 0.52.0

Commits

• a1c0d99 go.mod: update golang.org/x dependencies
• 3c7c869 ssh: fix deadlock on unexpected channel responses
• 533fb3f ssh: fix source-address critical option bypass
• abbc44d ssh: fix incorrect operator order
• e052873 ssh: fix infinite loop on large channel writes due to integer overflow
• b61cf85 ssh: enforce user presence verification for security keys
• 9c2cd33 ssh: enforce strict limits on DSA key parameters
• 8907318 ssh: reject RSA keys with excessively large moduli
• ffd87b4 ssh: fix panic when authority callbacks are nil
• 4e7a738 ssh: fix deadlock on unexpected global responses
• Additional commits viewable in compare view

Updates golang.org/x/net from 0.34.0 to 0.54.0

Commits

• 7770ec4 go.mod: update golang.org/x dependencies
• 4ece7b6 html: escape greater-than symbol in doctype identifiers
• 08be507 html: improve Noah's Ark clause performance
• a8fb2fe html: properly render fostered elements in foreign content
• 0dc5b7a html: properly check namespace in "in body" any other end tag
• a452f3c html: ignore duplicate attributes during tokenization
• f865199 quic: fix appendMaxDataFrame erroneously accumulating sentLimit
• 210ed3c quic: establish a "happened-before" relationship between stream write and read
• ad8140e quic: fix buffer slicing when handling overlapping stream data
• 23ee2ef http2: avoid API changes when built with go1.27
• Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.43.0 to 0.52.0

Commits

• a1c0d99 go.mod: update golang.org/x dependencies
• 3c7c869 ssh: fix deadlock on unexpected channel responses
• 533fb3f ssh: fix source-address critical option bypass
• abbc44d ssh: fix incorrect operator order
• e052873 ssh: fix infinite loop on large channel writes due to integer overflow
• b61cf85 ssh: enforce user presence verification for security keys
• 9c2cd33 ssh: enforce strict limits on DSA key parameters
• 8907318 ssh: reject RSA keys with excessively large moduli
• ffd87b4 ssh: fix panic when authority callbacks are nil
• 4e7a738 ssh: fix deadlock on unexpected global responses
• Additional commits viewable in compare view

Updates golang.org/x/net from 0.45.0 to 0.54.0

Commits

• 7770ec4 go.mod: update golang.org/x dependencies
• 4ece7b6 html: escape greater-than symbol in doctype identifiers
• 08be507 html: improve Noah's Ark clause performance
• a8fb2fe html: properly render fostered elements in foreign content
• 0dc5b7a html: properly check namespace in "in body" any other end tag
• a452f3c html: ignore duplicate attributes during tokenization
• f865199 quic: fix appendMaxDataFrame erroneously accumulating sentLimit
• 210ed3c quic: establish a "happened-before" relationship between stream write and read
• ad8140e quic: fix buffer slicing when handling overlapping stream data
• 23ee2ef http2: avoid API changes when built with go1.27
• Additional commits viewable in compare view

Updates golang.org/x/image from 0.32.0 to 0.41.0

Commits

• 0d61147 bmp: reject input with invalid palette index
• fe8ae45 tiff: limit PackBits decompression output size
• 542a3d9 go.mod: update golang.org/x dependencies
• 5cbe89a tiff: reject 0-size images
• 3d5c9b6 go.mod: update golang.org/x dependencies
• 854c274 font/sfnt: apply bounds checks before allocating read buffer
• 96edba0 webp: reject VP8X headers with too-large canvases
• 23ae9ed tiff: cap buffer growth to prevent OOM from malicious IFD offset
• e589e60 webp: allow VP8L + VP8X(with alpha)
• fe7d73d go.mod: update golang.org/x dependencies
• Additional commits viewable in compare view

Updates golang.org/x/net from 0.34.0 to 0.55.0

Commits

• 7770ec4 go.mod: update golang.org/x dependencies
• 4ece7b6 html: escape greater-than symbol in doctype identifiers
• 08be507 html: improve Noah's Ark clause performance
• a8fb2fe html: properly render fostered elements in foreign content
• 0dc5b7a html: properly check namespace in "in body" any other end tag
• a452f3c html: ignore duplicate attributes during tokenization
• f865199 quic: fix appendMaxDataFrame erroneously accumulating sentLimit
• 210ed3c quic: establish a "happened-before" relationship between stream write and read
• ad8140e quic: fix buffer slicing when handling overlapping stream data
• 23ee2ef http2: avoid API changes when built with go1.27
• Additional commits viewable in compare view

Updates golang.org/x/net from 0.41.0 to 0.55.0

Commits

• 7770ec4 go.mod: update golang.org/x dependencies
• 4ece7b6 html: escape greater-than symbol in doctype identifiers
• 08be507 html: improve Noah's Ark clause performance
• a8fb2fe html: properly render fostered elements in foreign content
• 0dc5b7a html: properly check namespace in "in body" any other end tag
• a452f3c html: ignore duplicate attributes during tokenization
• f865199 quic: fix appendMaxDataFrame erroneously accumulating sentLimit
• 210ed3c quic: establish a "happened-before" relationship between stream write and read
• ad8140e quic: fix buffer slicing when handling overlapping stream data
• 23ee2ef http2: avoid API changes when built with go1.27
• Additional commits viewable in compare view

Updates golang.org/x/net from 0.41.0 to 0.55.0

Commits

• 7770ec4 go.mod: update golang.org/x dependencies
• 4ece7b6 html: escape greater-than symbol in doctype identifiers
• 08be507 html: improve Noah's Ark clause performance
• a8fb2fe html: properly render fostered elements in foreign content
• 0dc5b7a html: properly check namespace in "in body" any other end tag
• a452f3c html: ignore duplicate attributes during tokenization
• f865199 quic: fix appendMaxDataFrame erroneously accumulating sentLimit
• 210ed3c quic: establish a "happened-before" relationship between stream write and read
• ad8140e quic: fix buffer slicing when handling overlapping stream data
• 23ee2ef http2: avoid API changes when built with go1.27
• Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.45.0 to 0.52.0

Commits

• a1c0d99 go.mod: update golang.org/x dependencies
• 3c7c869 ssh: fix deadlock on unexpected channel responses
• 533fb3f ssh: fix source-address critical option bypass
• abbc44d ssh: fix incorrect operator order
• e052873 ssh: fix infinite loop on large channel writes due to integer overflow
• b61cf85 ssh: enforce user presence verification for security keys
• 9c2cd33 ssh: enforce strict limits on DSA key parameters
• 8907318 ssh: reject RSA keys with excessively large moduli
• ffd87b4 ssh: fix panic when authority callbacks are nil
• 4e7a738 ssh: fix deadlock on unexpected global responses
• Additional commits viewable in compare view

Updates golang.org/x/net from 0.47.0 to 0.54.0

Commits

• 7770ec4 go.mod: update golang.org/x dependencies
• 4ece7b6 html: escape greater-than symbol in doctype identifiers
• 08be507 html: improve Noah's Ark clause performance
• a8fb2fe html: properly render fostered elements in foreign content
• 0dc5b7a html: properly check namespace in "in body" any other end tag
• a452f3c html: ignore duplicate attributes during tokenization
• f865199 quic: fix appendMaxDataFrame erroneously accumulating sentLimit
• 210ed3c quic: establish a "happened-before" relationship between stream write and read
• ad8140e quic: fix buffer slicing when handling overlapping stream data
• 23ee2ef http2: avoid API changes when built with go1.27
• Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.44.0 to 0.52.0

Commits

• a1c0d99 go.mod: update golang.org/x dependencies
• 3c7c869 ssh: fix deadlock on unexpected channel responses
• 533fb3f ssh: fix source-address critical option bypass
• abbc44d ssh: fix incorrect operator order
• e052873 ssh: fix infinite loop on large channel writes due to integer overflow
• b61cf85 ssh: enforce user presence verification for security keys
• 9c2cd33 ssh: enforce strict limits on DSA key parameters
• 8907318 ssh: reject RSA keys with excessively large moduli
• ffd87b4 ssh: fix panic when authority callbacks are nil
• 4e7a738 ssh: fix deadlock on unexpected global responses
• Additional commits viewable in compare view

Updates golang.org/x/net from 0.47.0 to 0.54.0

Commits

• 7770ec4 go.mod: update golang.org/x dependencies
• 4ece7b6 html: escape greater-than symbol in doctype identifiers
• 08be507 html: improve Noah's Ark clause performance
• a8fb2fe html: properly render fostered elements in foreign content
• 0dc5b7a html: properly check namespace in "in body" any other end tag
• a452f3c html: ignore duplicate attributes during tokenization
• f865199 quic: fix appendMaxDataFrame erroneously accumulating sentLimit
• 210ed3c quic: establish a "happened-before" relationship between stream write and read
• ad8140e quic: fix buffer slicing when handling overlapping stream data
• 23ee2ef http2: avoid API changes when built with go1.27
• Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.44.0 to 0.52.0

Commits

• a1c0d99 go.mod: update golang.org/x dependencies
• 3c7c869 ssh: fix deadlock on unexpected channel responses
• 533fb3f ssh: fix source-address critical option bypass
• abbc44d ssh: fix incorrect operator order
• e052873 ssh: fix infinite loop on large channel writes due to integer overflow
• b61cf85 ssh: enforce user presence verification for security keys
• 9c2cd33 ssh: enforce strict limits on DSA key parameters
• 8907318 ssh: reject RSA keys with excessively large moduli
• ffd87b4 ssh: fix panic when authority callbacks are nil
• 4e7a738 ssh: fix deadlock on unexpected global responses
• Additional commits viewable in compare view

Updates golang.org/x/net from 0.47.0 to 0.54.0

Commits

• 7770ec4 go.mod: update golang.org/x dependencies
• 4ece7b6 html: escape greater-than symbol in doctype identifiers
• 08be507 html: improve Noah's Ark clause performance
• a8fb2fe html: properly render fostered elements in foreign content
• 0dc5b7a html: properly check namespace in "in body" any other end tag
• a452f3c html: ignore duplicate attributes during tokenization
• f865199 quic: fix appendMaxDataFrame erroneously accumulating sentLimit
• 210ed3c quic: establish a "happened-before" relationship between stream write and read
• ad8140e quic: fix buffer slicing when handling overlapping stream data
• 23ee2ef http2: avoid API changes when built with go1.27
• Additional commits viewable in compare view

Updates golang.org/x/image from 0.32.0 to 0.41.0

Commits

• 0d61147 bmp: reject input with invalid palette index
• fe8ae45 tiff: limit PackBits decompression output size
• 542a3d9 go.mod: update golang.org/x dependencies
• 5cbe89a tiff: reject 0-size images
• 3d5c9b6 go.mod: update golang.org/x dependencies
• 854c274 font/sfnt: apply bounds checks before allocating read buffer
• 96edba0 webp: reject VP8X headers with too-large canvases
• 23ae9ed tiff: cap buffer growth to prevent OOM from malicious IFD offset
• e589e60 webp: allow VP8L + VP8X(with alpha)
• fe7d73d go.mod: update golang.org/x dependencies
• Additional commits viewable in compare view

Updates golang.org/x/net from 0.34.0 to 0.55.0

Commits

• 7770ec4 go.mod: update golang.org/x dependencies
• 4ece7b6 html: escape greater-than symbol in doctype identifiers
• 08be507 html: improve Noah's Ark clause performance
• a8fb2fe html: properly render fostered elements in foreign content
• 0dc5b7a html: properly check namespace in "in body" any other end tag
• a452f3c html: ignore duplicate attributes during tokenization
• f865199 quic: fix appendMaxDataFrame erroneously accumulating sentLimit
• 210ed3c quic: establish a "happened-before" relationship between stream write and read
• ad8140e quic: fix buffer slicing when handling overlapping stream data
• 23ee2ef http2: avoid API changes when built with go1.27
• Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.45.0 to 0.52.0

Commits