fix: upgrade golang.org/x/net to v0.55.0 to resolve GO-2026-5026

[SoloJacobs]

An attempt at fixing: https://github.com/prometheus/alertmanager/actions/runs/26335768500/job/77529105242

Pull Request Checklist

• I have signed-off my commits
• I will follow best practices for contributing to this project

Which user-facing changes does this PR introduce?

NONE

Summary by CodeRabbit

• Chores
  • Updated project dependencies to their latest versions for improved stability and security.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 4b29c869-5d51-4b94-97e2-0186dd249cb6

📥 Commits

Reviewing files that changed from the base of the PR and between 79ecbb4 and 41d95a5.

⛔ Files ignored due to path filters (1)

• go.sum is excluded by !**/*.sum

📒 Files selected for processing (1)

• go.mod

---

📝 Walkthrough

Walkthrough

This PR updates Go module dependencies in go.mod. Direct dependencies golang.org/x/net and golang.org/x/text are bumped to newer versions, along with indirect dependencies golang.org/x/crypto and golang.org/x/sys.

Changes

Go dependency updates

Layer / File(s)	Summary
Go module dependencies go.mod	Direct dependencies golang.org/x/net (v0.53.0 → v0.55.0) and golang.org/x/text (v0.36.0 → v0.37.0) are updated in the primary require block. Indirect dependencies golang.org/x/crypto (v0.50.0 → v0.51.0) and golang.org/x/sys (v0.43.0 → v0.45.0) are updated in the indirect require block.

---

🎯 1 (Trivial) | ⏱️ ~2 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately describes the main change: upgrading golang.org/x/net to v0.55.0 and references the specific CVE/vulnerability being resolved.
Description check	✅ Passed	The description addresses the core sections (commits signed-off, contributing best practices confirmed, release-notes marked as NONE), though it lacks detail on the broader dependency updates and does not explicitly address other affected dependencies mentioned in the go.mod changes.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}