Bump golang.org/x/net from 0.52.0 to 0.55.0

[dependabot]

Bumps golang.org/x/net from 0.52.0 to 0.55.0.

Commits

• 7770ec4 go.mod: update golang.org/x dependencies
• 4ece7b6 html: escape greater-than symbol in doctype identifiers
• 08be507 html: improve Noah's Ark clause performance
• a8fb2fe html: properly render fostered elements in foreign content
• 0dc5b7a html: properly check namespace in "in body" any other end tag
• a452f3c html: ignore duplicate attributes during tokenization
• f865199 quic: fix appendMaxDataFrame erroneously accumulating sentLimit
• 210ed3c quic: establish a "happened-before" relationship between stream write and read
• ad8140e quic: fix buffer slicing when handling overlapping stream data
• 23ee2ef http2: avoid API changes when built with go1.27
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

Change Impact: 🟡 Medium

Reasoning: This is a dependency upgrade in widely used Go networking libraries, so the blast radius is broader than a single isolated module. While it doesn’t touch application logic or high-risk flows directly, version bumps in shared dependencies can still introduce behavioral or compatibility regressions in affected code paths.

Regression Risk: Moderate. The change affects common transitive packages that may be used across multiple parts of the codebase, with potential side effects in networking, HTTP/2, and related behavior.

QA Recommendation: Light-to-moderate manual QA is recommended, focused on any features that rely on outbound HTTP/networking behavior. If automated test coverage is strong for those paths, this is relatively safe to merge with minimal manual verification.
Generated by CodeRabbitAI

[avasconcelos114]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro

Run ID: 1e211db3-dfdc-4f03-afe8-83fd3b563fb0

📥 Commits

Reviewing files that changed from the base of the PR and between 84f5a3e and bf38d7e.

⛔ Files ignored due to path filters (1)

• go.sum is excluded by !**/*.sum

📒 Files selected for processing (1)

• go.mod

---

📝 Walkthrough

Walkthrough

This PR updates the go.mod file, bumping indirect dependency versions for five golang.org/x modules (crypto, mod, net, sys, text) to newer patch/minor releases. No other files or code logic are affected.

Changes

Dependency version bump

Layer / File(s)	Summary
Update golang.org/x indirect dependencies go.mod	Bumped indirect versions of x/crypto, x/mod, x/net, x/sys, and x/text to newer releases.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Poem

Five little modules, versions anew,
Hopping ahead, as good rabbits do.
No logic changed, just numbers refined,
A tidy go.mod, neatly aligned. 🐇✨

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately reflects one of the dependency bumps in the PR, though the change also updates other golang.org/x modules.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}