SECURESIGN-5504 bump golang.org/x family

[jkopriva]

Bump golang.org/x/crypto to v0.55.0 (fixes CVE-2026-56854) and the rest of the golang.org/x family to latest, capped to keep Go 1.25 (x/crypto v0.56.0 would require Go 1.26).

Assisted-by: Claude

[qodo-for-securesign]

PR Summary by Qodo

Upgrade golang.org/x dependencies to address CVE-2026-56854

🐞 Bug fix ⚙️ Configuration changes 🕐 Less than 10 minutes

AI Description

• Upgrades x/crypto to v0.55.0, resolving CVE-2026-56854.
• Aligns related golang.org/x modules with Go 1.25-compatible releases.
• Refreshes module checksums for the upgraded dependency set.

High-Level Assessment

The coordinated dependency upgrade is appropriate because it applies the x/crypto security fix while keeping related golang.org/x modules consistent and preserving Go 1.25 compatibility. Upgrading to x/crypto v0.56.0 was reasonably deferred because it would require a broader Go 1.26 migration.

Files changed (2) +21 / -21

Other (2) +21 / -21

go.modUpgrade the Go x dependency family +7/-7

Upgrade the Go x dependency family

• Upgrades golang.org/x/crypto to v0.55.0 to address CVE-2026-56854. Also advances six related indirect golang.org/x modules to versions compatible with Go 1.25.

go.mod

go.sumRefresh checksums for upgraded Go modules +14/-14

Refresh checksums for upgraded Go modules

• Replaces checksums for the previous golang.org/x module versions with checksums for the newly selected releases.

go.sum

[qodo-for-securesign]

Code Review by Qodo

🐞 Bugs (0) 📘 Rule violations (0) 📎 Requirement gaps (0)

Great, no issues found!

Qodo reviewed your code and found no material issues that require review

Tip of the day

💡 Did you know, you can copy the agent prompt from any finding and feed it to your IDE agent

More tips ↗ | Customize Qodo ↗ | Qodo docs ↗

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 32.14%. Comparing base (acf3b4a) to head (0cab96a).

Additional details and impacted files

@@             Coverage Diff              @@
##           release-1.4     #148   +/-   ##
============================================
  Coverage        32.14%   32.14%           
============================================
  Files               57       57           
  Lines             3394     3394           
============================================
  Hits              1091     1091           
  Misses            2198     2198           
  Partials           105      105           

Flag	Coverage Δ
unit	32.14% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[jkopriva]

/retest