chore(deps): Consolidate Go module updates (crypto, mod, term, go-sdk)

[Copilot]

Bundles 4 Dependabot PRs for Go module dependencies.

Updated Dependencies

Direct:

• golang.org/x/crypto 0.47.0 → 0.48.0 — fixes scrypt panic on parameters ≤ 0
• golang.org/x/mod 0.32.0 → 0.33.0
• golang.org/x/term 0.39.0 → 0.40.0
• github.com/modelcontextprotocol/go-sdk 1.2.0 → 1.3.0 — schema caching improvements, logger enhancements, SSE transport fixes

Transitive:

• golang.org/x/net 0.48.0 → 0.49.0
• golang.org/x/sys 0.40.0 → 0.41.0
• golang.org/x/text 0.33.0 → 0.34.0
• golang.org/x/tools 0.40.0 → 0.41.0
• golang.org/x/telemetry (version bump)

Changes

Updated go.mod and go.sum via go get + go mod tidy.

Original prompt

---

This section details on the original issue you should resolve

<issue_title>[dependabot-burner] Go modules dependency updates (go.mod)</issue_title>
<issue_description>This bundle issue tracks Dependabot PRs for Go module dependencies in go.mod.

Related PRs

• chore(deps): bump golang.org/x/crypto from 0.47.0 to 0.48.0 #14760 - chore(deps): bump golang.org/x/crypto from 0.47.0 to 0.48.0
• chore(deps): bump github.com/modelcontextprotocol/go-sdk from 1.2.0 to 1.3.0 #14759 - chore(deps): bump github.com/modelcontextprotocol/go-sdk from 1.2.0 to 1.3.0
• chore(deps): bump golang.org/x/mod from 0.32.0 to 0.33.0 #14757 - chore(deps): bump golang.org/x/mod from 0.32.0 to 0.33.0
• chore(deps): bump golang.org/x/term from 0.39.0 to 0.40.0 #14756 - chore(deps): bump golang.org/x/term from 0.39.0 to 0.40.0

Summary

Runtime: Go modules
Manifest file: go.mod
Total PRs: 4

Updates

1. golang.org/x/crypto 0.47.0 → 0.48.0

   • Fixes panic on scrypt parameters <= 0

2. github.com/modelcontextprotocol/go-sdk 1.2.0 → 1.3.0

   • Schema caching performance improvements
   • Logger enhancements
   • SSE transport bugfixes

3. golang.org/x/mod 0.32.0 → 0.33.0

   • Dependency updates

4. golang.org/x/term 0.39.0 → 0.40.0

   • Dependency updates

Next Steps

1. Review and test each PR individually
2. Merge PRs in order (crypto, mod, term, then go-sdk)
3. Run make agent-finish to verify all tests pass
4. Close this issue once all PRs are merged

AI generated by Dependabot Burner

Comments on the Issue (you are @copilot in this section)

Custom agent used: agentic-workflows
GitHub Agentic Workflows (gh-aw) - Create, debug, and upgrade AI-powered workflows with intelligent prompt routing

• Fixes [dependabot-burner] Go modules dependency updates (go.mod) #14841

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

[Copilot]

Pull request overview

Bundles multiple Go module dependency bumps into a single consolidated update, keeping the repository’s Go dependencies current and aligning go.mod/go.sum with a fresh go get + go mod tidy.

Changes:

• Bumped direct dependencies: golang.org/x/crypto, golang.org/x/mod, golang.org/x/term, and github.com/modelcontextprotocol/go-sdk.
• Updated transitive dependencies including golang.org/x/net, golang.org/x/sys, golang.org/x/text, golang.org/x/tools, and golang.org/x/telemetry.
• Refreshed go.sum checksums to match the updated module graph.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File	Description
go.mod	Updates direct and indirect module versions to the consolidated set described in the PR.
go.sum	Updates module checksums to match the new dependency versions after tidy.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.