Bump golang.org/x/net to v0.62.0 for GO-2026-6866 and GO-2026-6860

Merged
JE
3d ago
+4-4

Bumps golang.org/x/net from v0.61.0 to v0.62.0, which fixes GO-2026-6866 and GO-2026-6860. govulncheck reports both against v0.61.0, and they fail the Security check on main.

The Nix vendorHash in nix/package.nix was recomputed with make update-nix-hash; the verification build succeeded.


Summary by cubic

Bumps golang.org/x/net from v0.61.0 to v0.62.0 to clear GO-2026-6866 and GO-2026-6860, which fail the Security check on main.

  • Recomputes the Nix vendorHash in nix/package.nix via make update-nix-hash; the verification build succeeded.