chore(deps): bump golang.org/x/net from 0.55.0 to 0.56.0

[dependabot]

Bumps golang.org/x/net from 0.55.0 to 0.56.0.

Commits

• 9e7fdbf internal/http3: fix wrong argument being given when validating header value
• b686e5f internal/http3: add gzip support to transport
• 8a34885 go.mod: update golang.org/x dependencies
• 72eaf98 dns/dnsmessage: correctly validate SVCB record parameter order
• 82e7868 dns/dnsmessage: avoid panic when parsing SVCB record with truncated data
• b64f1fa internal/http3: add server support for "Trailer:" magic prefix
• 2707ee2 internal/http3: implement HTTP/3 clientConn methods
• 31358cc internal/http3: snapshot response headers at WriteHeader time
• 8ecbaa9 html: don't adjust xml:base
• 8ae811a html: properly handle end script tag in fragment mode
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note

Bump golang.org/x/net from v0.55.0 to v0.56.0

Updates the golang.org/x/net dependency in go.mod and refreshes checksums in go.sum.

^{Macroscope summarized 9abb890.}

[chatgpt-codex-connector]

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Repo admins can enable using credits for code reviews in their settings.

[codeant-ai]

Skipping PR review because a bot author is detected.

If you want to trigger CodeAnt AI, comment @codeant-ai review to trigger a manual review.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	golang/​golang.org/​x/​net@​v0.55.0 ⏵ v0.56.0	+1

View full report

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[kilo-code-bot]

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Overview

Routine Dependabot bump of golang.org/x/net from v0.55.0 to v0.56.0. Changes are confined to go.mod (version pin) and go.sum (refreshed module checksums). No source code, logic, or API surface was modified.

• golang.org/x/net is a direct/production dependency and the bump is a semver-minor update.
• go.sum checksums for both the module and its go.mod were updated consistently.
• Socket supply-chain scan reports +1 on supply chain security with clean vulnerability/quality/maintenance/license scores.
• No new inter-crate or dependency constraints introduced.

Files Reviewed (2 files)

• go.mod
• go.sum

---

_{Reviewed by hy3-20260706:free · Input: 35.9K · Output: 1.3K · Cached: 71.6K}