[CP 1675] fix(security): weekly CVE remediation 2026-09-13

[ci-penbot-01]

cp of pensando/gpu-operator#1675

---

Source PR Description (pensando/gpu-operator#1675):

Summary

Weekly automated CVE remediation by cve-bot.

Baseline scan: 1 HIGH/CRITICAL CVEs
After fixes: 0 HIGH/CRITICAL CVEs
Fixed: 1 CVEs

What changed

 go.mod                                             |  14 +-
 go.sum                                             |  28 +-
 vendor/golang.org/x/net/http2/hpack/encode.go      |   1 -
 vendor/golang.org/x/net/http2/hpack/hpack.go       |   1 -
 vendor/golang.org/x/net/http2/hpack/tables.go      |  51 +-
 vendor/golang.org/x/net/http2/transport_wrap.go    |  73 ++-
 vendor/golang.org/x/net/idna/idna.go               |   6 +-
 vendor/golang.org/x/sys/unix/syscall_linux.go      |   1 +
 vendor/golang.org/x/sys/unix/syscall_linux_386.go  |   1 -
 .../golang.org/x/sys/unix/syscall_linux_amd64.go   |   1 -
 vendor/golang.org/x/sys/unix/syscall_linux_arm.go  |   1 -
 .../golang.org/x/sys/unix/syscall_linux_arm64.go   |   1 -
 .../golang.org/x/sys/unix/syscall_linux_loong64.go |   1 -
 .../golang.org/x/sys/unix/syscall_linux_mips64x.go |   1 -
 .../golang.org/x/sys/unix/syscall_linux_mipsx.go   |   1 -
 vendor/golang.org/x/sys/unix/syscall_linux_ppc.go  |   1 -
 .../golang.org/x/sys/unix/syscall_linux_ppc64x.go  |   1 -
 .../golang.org/x/sys/unix/syscall_linux_riscv64.go |   1 -
 .../golang.org/x/sys/unix/syscall_linux_s390x.go   |   1 -
 .../golang.org/x/sys/unix/syscall_linux_sparc64.go |   1 -
 vendor/golang.org/x/sys/unix/zerrors_linux.go      |   8 +-
 vendor/golang.org/x/sys/unix/zsyscall_linux.go     |  17 +
 vendor/golang.org/x/sys/unix/zsyscall_linux_386.go |  17 -
 .../golang.org/x/sys/unix/zsyscall_linux_amd64.go  |  17 -
 vendor/golang.org/x/sys/unix/zsyscall_linux_arm.go |  17 -
 .../golang.org/x/sys/unix/zsyscall_linux_arm64.go  |  17 -
 .../x/sys/unix/zsyscall_linux_loong64.go           |  17 -
 .../golang.org/x/sys/unix/zsyscall_linux_mips.go   |  17 -
 .../golang.org/x/sys/unix/zsyscall_linux_mips64.go |  17 -
 .../x/sys/unix/zsyscall_linux_mips64le.go          |  17 -
 .../golang.org/x/sys/unix/zsyscall_linux_mipsle.go |  17 -
 vendor/golang.org/x/sys/unix/zsyscall_linux_ppc.go |  17 -
 .../golang.org/x/sys/unix/zsyscall_linux_ppc64.go  |  17 -
 .../x/sys/unix/zsyscall_linux_ppc64le.go           |  17 -
 .../x/sys/unix/zsyscall_linux_riscv64.go           |  17 -
 .../golang.org/x/sys/unix/zsyscall_linux_s390x.go  |  17 -
 .../x/sys/unix/zsyscall_linux_sparc64.go           |  17 -
 .../golang.org/x/sys/windows/security_windows.go   |  36 ++
 vendor/golang.org/x/sys/windows/syscall_windows.go |   8 +-
 vendor/golang.org/x/sys/windows/types_windows.go   |   1 +
 .../x/tools/go/types/objectpath/objectpath.go      |   9 +-
 vendor/golang.org/x/tools/internal/stdlib/deps.go  | 669 +++++++++++----------
 .../golang.org/x/tools/internal/stdlib/manifest.go |   2 +
 vendor/modules.txt                                 |  14 +-
 44 files changed, 527 insertions(+), 679 deletions(-)

Unfixable CVEs

None

Notes

• Automated by cve-bot
• Review required before merge

Cherrypick triggered by: ACP-Automation

[spraveenio]

Lgtm