Merge pull request #287 from datum-cloud/renovate/go-golang.org-x-mod-vulnerability

fix(deps): update module golang.org/x/mod to v0.40.0 [security]

Author: ecv

flake.nix

@@ -41,7 +41,7 @@
             # Hash of Go module dependencies.
             # Update this after changing go.mod/go.sum:
             #   task nix-update-hash
-            vendorHash = "sha256-JGXvzJlMrgMAs5xEJx+erzbAVJaLdzy+dtscpYRxqFg=";
+            vendorHash = "sha256-l95+UqRSw/zbsM3MQGKis6GsvMahB2Ah0tnycIwYmnk=";
 
             env.CGO_ENABLED = 0;
 

go.mod

@@ -22,7 +22,7 @@ require (
 	go.miloapis.com/activity v0.7.1
 	go.miloapis.com/milo v0.31.0
 	go.miloapis.com/service-catalog v0.3.2-0.20260714005215-6a3cddd298b0
-	golang.org/x/mod v0.38.0
+	golang.org/x/mod v0.40.0
 	golang.org/x/oauth2 v0.36.0
 	golang.org/x/term v0.45.0
 	k8s.io/api v0.35.3

go.sum

@@ -289,6 +289,8 @@ golang.org/x/mod v0.37.0 h1:vF1DjpVEshcIqoEaauuHebaLk1O1forxjxBaVn884JQ=
 golang.org/x/mod v0.37.0/go.mod h1:m8S8VeM9r4dzDwjrKO0a1sZP3YjeMamRRlD+fmR2Q/0=
 golang.org/x/mod v0.38.0 h1:MECBjubtXD7yj4HrhIUcywNaGeNVUdfVnxmPajOk4yk=
 golang.org/x/mod v0.38.0/go.mod h1:V6Xz0pq8TQ3dGqVQ1FVHuelZpAL0uNhSkk9ogYP3c40=
+golang.org/x/mod v0.40.0 h1:hUv+3cXcdRHz08UmSiOob7sadHig73uo5bkXxQ/tvUs=
+golang.org/x/mod v0.40.0/go.mod h1:0/weTWkPWGBikyTWAX3dkjVztMmBA5hM0DH6BElSupE=
 golang.org/x/net v0.55.0 h1:bcvxaJn3e1U6InsFWt1JUq1aSjnRxLzT2rtD2KfkDF8=
 golang.org/x/net v0.55.0/go.mod h1:L5U2KuzuOe1lY7Z+aWVIKK6qEeJXnXV9yzGA+WCHJww=
 golang.org/x/net v0.56.0 h1:Rw8j/hFzGvJUZwNBXnAtf5sVDVt+65SK2C7IxCxZt5o=