Bump golang.org/x/net from 0.52.0 to 0.53.0 in the minor-and-patch group across 1 directory

[dependabot]

Bumps the minor-and-patch group with 1 update in the / directory: golang.org/x/net.

Updates golang.org/x/net from 0.52.0 to 0.53.0

Commits

• a8d1fc1 go.mod: update golang.org/x dependencies
• 056ac74 quic: avoid depending on golang.org/x/sys/unix
• c85f611 http3: add http3 package for testing in std
• 805fc81 http2: add transport API tests
• e63b894 http2: support testing via net/http.Transport.RoundTrip
• 9ee1e48 http2/hpack: prevent HeaderField from escaping during encoding
• 1e71bd8 http2: prevent hanging Transport due to bad SETTINGS frame
• 7bca150 internal/http3: respect net/http Server Shutdown context when shutting down
• 44c41be internal/http3: prevent server from holding mutex when sleeping during shutdown
• 228a67a internal/http3: add CloseIdleConnections support in transport
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[roborev-ci]

roborev: Combined Review (dfb8617)

No medium-or-higher findings; the dependency bump appears clean.

All three reviews found no issues. The PR updates golang.org/x/net from v0.52.0 to v0.53.0 in go.mod and refreshes checksums, with no identified medium, high, or critical concerns.

---

Synthesized from 3 reviews (agents: codex, gemini | types: default, security)

[roborev-ci]

roborev: Combined Review (0937a8d)

Verdict: One high-severity issue needs to be addressed before merge.

High

• go.mod:28
golang.org/x/net was bumped to v0.53.0, but no corresponding go.sum update appears in the diff. This risks checksum mismatches and build failures if the new module version is not already recorded.
  Suggested fix: run go mod tidy and include any resulting go.sum changes in the PR.

---

Synthesized from 3 reviews (agents: codex, gemini | types: default, security)