Bump golang.org/x/net from 0.50.0 to 0.55.0

[dependabot]

Bumps golang.org/x/net from 0.50.0 to 0.55.0.

Commits

• 7770ec4 go.mod: update golang.org/x dependencies
• 4ece7b6 html: escape greater-than symbol in doctype identifiers
• 08be507 html: improve Noah's Ark clause performance
• a8fb2fe html: properly render fostered elements in foreign content
• 0dc5b7a html: properly check namespace in "in body" any other end tag
• a452f3c html: ignore duplicate attributes during tokenization
• f865199 quic: fix appendMaxDataFrame erroneously accumulating sentLimit
• 210ed3c quic: establish a "happened-before" relationship between stream write and read
• ad8140e quic: fix buffer slicing when handling overlapping stream data
• 23ee2ef http2: avoid API changes when built with go1.27
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

Summary by CodeRabbit

• Chores
  • Updated several Go dependency versions to newer releases.
  • Brought core golang.org/x/* libraries up to date for continued compatibility and maintenance.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Enterprise

Run ID: cacf4afe-ffd4-4094-a161-2a5de0788b70

📥 Commits

Reviewing files that changed from the base of the PR and between ed100b9 and 5e58ee6.

⛔ Files ignored due to path filters (1)

• go.sum is excluded by !**/*.sum

📒 Files selected for processing (1)

• go.mod

🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

• codeready-toolchain/api (manual) → reviewed against open PR #512 dependabot/go_modules/golang.org/x/net-0.55.0 instead of the default branch
• codeready-toolchain/toolchain-common (manual) → reviewed against open PR #535 dependabot/go_modules/golang.org/x/net-0.55.0 instead of the default branch
• codeready-toolchain/host-operator (manual) → reviewed against open PR #1272 dependabot/go_modules/golang.org/x/net-0.55.0 instead of the default branch
• codeready-toolchain/toolchain-e2e (manual) → reviewed against open PR #1290 dependabot/go_modules/golang.org/x/net-0.55.0 instead of the default branch

📜 Recent review details

⏰ Context from checks skipped due to timeout. (3)

• GitHub Check: Lint
• GitHub Check: Build
• GitHub Check: Test Go Backend

🧰 Additional context used

📓 Path-based instructions (1)

**

⚙️ CodeRabbit configuration file

-Focus on major issues impacting performance, readability, maintainability and security. Avoid nitpicks and avoid verbosity.

Files:

• go.mod

🔇 Additional comments (1)

go.mod (1)

98-106: LGTM!

---

Walkthrough

This PR updates the pinned versions of several indirect golang.org/x/* dependencies (crypto, mod, net, sync, sys, text, tools) in go.mod to newer releases. No other dependency entries or exported declarations are changed.

Changes

Dependency updates

Layer / File(s)	Summary
Update indirect x/* module versions go.mod	Bumped golang.org/x/crypto, x/mod, x/net, x/sync, x/sys, x/text, and x/tools to newer pinned versions.

Estimated code review effort: 1 (Trivial) | ~3 minutes

Suggested reviewers: alexeykazakov

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title is specific and accurate about one of the dependency bumps in the PR, even though the change also updates several other x/* modules.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch dependabot/go_modules/golang.org/x/net-0.55.0

Warning

Tools execution failed with the following error:

Failed to run tools: 14 UNAVAILABLE: read ECONNRESET

---

_{Comment @coderabbitai help to get the list of available commands.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 83.41%. Comparing base (ed100b9) to head (5e58ee6).

Additional details and impacted files

@@            Coverage Diff             @@
##           master     #270      +/-   ##
==========================================
+ Coverage   83.30%   83.41%   +0.11%     
==========================================
  Files         155      155              
  Lines       15973    15973              
==========================================
+ Hits        13306    13324      +18     
+ Misses       1922     1906      -16     
+ Partials      745      743       -2     

Flag	Coverage Δ
go	83.49% <ø> (+0.11%)	⬆️
python	81.51% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.