build(deps): bump golang.org/x/sync from 0.22.0 to 0.23.0 - #3551

Insecure dependency golang/stdlib@v1.26.0 (CVE-2026-25679: net/url: Incorrect parsing of IPv6 host literals in net/url) (update to 1.26.1)

Insecure dependency golang/stdlib@v1.26.0 (CVE-2026-27137: crypto/x509: Incorrect enforcement of email constraints in crypto/x509) (update to 1.26.1)

Insecure dependency golang/stdlib@v1.26.0 (CVE-2026-27142: html/template: URLs in meta content attribute actions are not escaped in html/template) (update to 1.26.1)

Insecure dependency golang/stdlib@v1.26.0 (CVE-2026-27145: crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries) (update to 1.26.4)

Insecure dependency golang/stdlib@v1.26.0 (CVE-2026-32280: crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building) (update to 1.26.2)

Insecure dependency golang/stdlib@v1.26.0 (CVE-2026-32281: crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation) (update to 1.26.2)

Insecure dependency golang/stdlib@v1.26.0 (CVE-2026-32282: golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root) (update to 1.26.2)

Insecure dependency golang/stdlib@v1.26.0 (CVE-2026-32283: crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages) (update to 1.26.2)

Insecure dependency golang/stdlib@v1.26.0 (CVE-2026-32288: archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive) (update to 1.26.2)

Insecure dependency golang/stdlib@v1.26.0 (CVE-2026-32289: html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals) (update to 1.26.2)

Insecure dependency golang/stdlib@v1.26.0 (CVE-2026-33810: crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application) (update to 1.26.2)

Insecure dependency golang/stdlib@v1.26.0 (CVE-2026-33811: net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME) (update to 1.26.3)

Insecure dependency golang/stdlib@v1.26.0 (CVE-2026-33814: net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame) (update to 1.26.3)

Insecure dependency golang/stdlib@v1.26.0 (CVE-2026-33818: encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal) (update to 1.26.6)

Insecure dependency golang/stdlib@v1.26.0 (CVE-2026-39820: net/mail: golang: Go net/mail: Denial of Service via crafted email inputs) (update to 1.26.3)

Insecure dependency golang/stdlib@v1.26.0 (CVE-2026-39821: golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing) (update to 1.26.6)

Insecure dependency golang/stdlib@v1.26.0 (CVE-2026-39822: golang: Go os.Root: Symlink following vulnerability allows directory traversal) (update to 1.26.5)

Insecure dependency golang/stdlib@v1.26.0 (CVE-2026-39823: html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content) (update to 1.26.3)

Insecure dependency golang/stdlib@v1.26.0 (CVE-2026-39825: net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls) (update to 1.26.3)

Insecure dependency golang/stdlib@v1.26.0 (CVE-2026-39826: html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping) (update to 1.26.3)

Insecure dependency golang/stdlib@v1.26.0 (CVE-2026-39836: net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows) (update to 1.26.3)

Insecure dependency golang/stdlib@v1.26.0 (CVE-2026-42499: net/mail: golang: net/mail: Denial of Service via pathological email address parsing) (update to 1.26.3)

Insecure dependency golang/stdlib@v1.26.0 (CVE-2026-42504: mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header) (update to 1.26.4)