Update dependency-updates (release-v1.40) (minor)

[marvin-tigera]

This PR contains the following updates:

Package	Change	Age	Confidence
golang.org/x/crypto	v0.55.0 → v0.57.0
golang.org/x/mod	v0.40.0 → v0.41.0
golang.org/x/net	v0.58.0 → v0.59.0
golang.org/x/oauth2	v0.36.0 → v0.37.0
golang.org/x/sync	v0.22.0 → v0.23.0
golang.org/x/sys	v0.47.0 → v0.48.0
golang.org/x/term	v0.45.0 → v0.46.0
golang.org/x/text	v0.41.0 → v0.42.0
golang.org/x/time	v0.15.0 → v0.16.0
golang.org/x/tools	v0.49.0 → v0.50.0

---

• If you want to rebase/retry this PR, check this box

[Copilot]

🟢 Approval recommended

The change is a straightforward dependency version bump with corresponding go.sum updates and no detected issues in the modified lines.

Pull request overview

This PR updates the golang.org/x/crypto dependency for the release-v1.40 branch, aligning the module version and checksums to v0.56.0.

Changes:

• Bumped golang.org/x/crypto from v0.55.0 to v0.56.0 in go.mod.
• Updated go.sum to reflect the new v0.56.0 module and go.mod checksums.

File summaries

File	Description
go.mod	Updates the required golang.org/x/crypto version to v0.56.0.
go.sum	Replaces v0.55.0 checksum entries with v0.56.0 entries.

Review details

• Files reviewed: 1/2 changed files
• Comments generated: 0
• Review effort level: Lite

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[marvin-tigera]

ℹ️ Artifact update notice

File name: api/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.25.13 -> 1.26.0

[Copilot]

🟡 Changes recommended

The api/go.mod Go version update introduces toolchain/version skew (and a scope change not reflected in the PR description) that should be resolved before merging.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Review details

Suppressed comments (1)

api/go.mod:3

• The repo pins the toolchain to Go 1.26.6 (e.g., root go.mod and Makefile’s GOTOOLCHAIN), but this module is now set to go 1.26.0. Keeping these aligned helps avoid version-skew between the root module and the api submodule during builds/linting.

go 1.26.0

• Files reviewed: 2/4 changed files
• Comments generated: 1
• Review effort level: Lite