build(deps): Bump golang.org/x/net from 0.0.0-20220617184016-355a448f1bc9 to 0.53.0

[dependabot]

Bumps golang.org/x/net from 0.0.0-20220617184016-355a448f1bc9 to 0.53.0.

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

Note

Medium Risk
Updates the module’s Go toolchain version and bumps several core golang.org/x/* dependencies, which can affect build behavior and transitive dependency resolution. Risk is mainly around compatibility/tooling changes rather than application logic.

Overview
Modernizes Go module configuration and dependencies.

Bumps the module go version from 1.17 to 1.25.0 and upgrades golang.org/x/net to v0.53.0 along with related golang.org/x/* packages (notably crypto, sync, mod, sys, term, text, tools) and github.com/google/go-cmp.

Refreshes go.sum accordingly and adjusts the retract directive formatting in go.mod.

^{Reviewed by Cursor Bugbot for commit 880428c. Bugbot is set up for automated code reviews on this repo. Configure here.}

[dependabot]

Labels

The following labels could not be found: S:automerge, T:dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 880428c. Configure here.}

[cursor]

Go minimum version jumps from 1.17 to 1.25.0

High Severity

The go directive changed from 1.17 to 1.25.0, which is an 8-version jump in the minimum required Go toolchain. This is a side effect of golang.org/x/net v0.53.0 declaring go 1.25.0 in its own go.mod, causing MVS to propagate the requirement. While technically correct for the dependency resolution, this fundamentally changes the project's build requirements and is far beyond the intended scope of bumping a single dependency. Any developer or CI pipeline using Go < 1.25 will be unable to build the project.

 

^{Reviewed by Cursor Bugbot for commit 880428c. Configure here.}