chore(deps): bump golang.org/x/net to v0.55.0

[tsaarni]

Bump golang.org/x/net from v0.52.0 to v0.55.0.

This fixes a critical vulnerability: CVE-2026-39821 (golang.org/x/net/idna which is part of golang.org/x/net)

Dependabot did not pick this up, maybe because the package version information is still missing from the advisory.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 98.43%. Comparing base (3dc1cd6) to head (a4248ac).
⚠️ Report is 276 commits behind head on master.

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #4678      +/-   ##
==========================================
- Coverage   99.21%   98.43%   -0.78%     
==========================================
  Files          42       48       +6     
  Lines        3182     3138      -44     
==========================================
- Hits         3157     3089      -68     
- Misses         17       40      +23     
- Partials        8        9       +1     

Flag	Coverage Δ
	?
--ldflags="-checklinkname=0" -tags sonic	98.36% <ø> (?)
-tags go_json	98.29% <ø> (?)
-tags nomsgpack	98.41% <ø> (?)
go-1.18	?
go-1.19	?
go-1.20	?
go-1.21	?
go-1.25	98.43% <ø> (?)
go-1.26	98.37% <ø> (?)
macos-latest	98.43% <ø> (-0.78%)	⬇️
ubuntu-latest	98.37% <ø> (-0.84%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.