chore(deps): update module golang.org/x/net to v0.13.0

[mend-for-github-com]

This PR contains the following updates:

Package	Type	Update	Change
golang.org/x/net	indirect	minor	v0.7.0 -> v0.13.0

---

Improper rendering of text nodes in golang.org/x/net/html

CVE-2023-3978 / GO-2023-1988

More information

Details

Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack.

Severity

Unknown

References

• https://go.dev/issue/61615
• https://go.dev/cl/514896

This data is provided by OSV and the Go Vulnerability Database (CC-BY 4.0).

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

[mend-for-github-com]

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go mod vendor
go: downloading github.com/creack/pty v1.1.18
go: downloading github.com/Netflix/go-expect v0.0.0-20220104043353-73e0943537d2
go: downloading github.com/hinshun/vt10x v0.0.0-20220301184237-5011da428d02
go: downloading github.com/maxbrunsfeld/counterfeiter/v6 v6.6.1
github.com/DelineaXPM/dsv-cli/tools imports
	github.com/maxbrunsfeld/counterfeiter/v6 imports
	github.com/maxbrunsfeld/counterfeiter/v6/generator imports
	golang.org/x/tools/go/packages: missing go.sum entry for module providing package golang.org/x/tools/go/packages (imported by github.com/maxbrunsfeld/counterfeiter/v6/generator); to add:
	go get github.com/maxbrunsfeld/counterfeiter/v6/generator@v6.6.1
github.com/DelineaXPM/dsv-cli/tools imports
	github.com/maxbrunsfeld/counterfeiter/v6 imports
	github.com/maxbrunsfeld/counterfeiter/v6/generator imports
	golang.org/x/tools/go/types/typeutil: missing go.sum entry for module providing package golang.org/x/tools/go/types/typeutil (imported by github.com/maxbrunsfeld/counterfeiter/v6/generator); to add:
	go get github.com/maxbrunsfeld/counterfeiter/v6/generator@v6.6.1
github.com/DelineaXPM/dsv-cli/tools imports
	github.com/maxbrunsfeld/counterfeiter/v6 imports
	github.com/maxbrunsfeld/counterfeiter/v6/generator imports
	golang.org/x/tools/imports: missing go.sum entry for module providing package golang.org/x/tools/imports (imported by github.com/maxbrunsfeld/counterfeiter/v6/generator); to add:
	go get github.com/maxbrunsfeld/counterfeiter/v6/generator@v6.6.1

[andrii-zakurenyi]

ugh, I do not like when //indirect dependencies are upgraded. Probably I just do not understand how it works... :(

[andrii-zakurenyi]

suppressed by #114