chore(deps): Bump the go-dependencies group across 1 directory with 4 updates

[dependabot]

Bumps the go-dependencies group with 4 updates in the / directory: github.com/PuerkitoBio/goquery, github.com/getkin/kin-openapi, github.com/netresearch/go-cron and golang.org/x/mod.

Updates github.com/PuerkitoBio/goquery from 1.12.0 to 1.13.0

Release notes

Sourced from github.com/PuerkitoBio/goquery's releases.

v1.13.0

Performance improvements and new top-level goquery.Text function to extract text from a selection with more control than the sel.Text jquery-like method.

Commits

• 4a4f132 Linkify github usernames
• e47f384 Add new version to readme to prepare 1.13 release
• 80a9b7f Run CI on go1.27 (+1.26)
• ad18e5a Merge pull request #596 from ChrisJr404/text-toplevel-func
• 4e49d09 add tests for empty and fully-filtered selections
• 91ed06d Add top-level Text function for BeautifulSoup-style text extraction
• 105f399 Merge pull request #595 from PuerkitoBio/dependabot/go_modules/golang.org/x/n...
• d329e29 build(deps): bump golang.org/x/net from 0.57.0 to 0.58.0
• 53a9b37 Merge pull request #586 from jvoisin/cachephwc
• 50e9856 Merge pull request #593 from PuerkitoBio/dependabot/go_modules/golang.org/x/n...
• Additional commits viewable in compare view

Updates github.com/getkin/kin-openapi from 0.147.0 to 0.149.0

Release notes

Sourced from github.com/getkin/kin-openapi's releases.

v0.149.0

What's Changed

• openapi3: accept boolean schemas by @​reuvenharrison in getkin/kin-openapi#1258

Full Changelog: getkin/kin-openapi@v0.148.0...v0.149.0

v0.148.0

What's Changed

• openapi3: do not forget to carry schema format validators over to OAS3.1 by @​fenollp in getkin/kin-openapi#1250
• openapi3: add FormatOfStringForUUIDOfRFC9562 for UUID v6-v8 by @​ChrisJr404 in getkin/kin-openapi#1251
• openapi3: compare multipleOf on exact rationals, not fixed-precision decimals by @​snowyukitty in getkin/kin-openapi#1252
• docs: add inspect.software health badge by @​Nayjest in getkin/kin-openapi#1253
• openapi3: validate prefixItems positionally by @​reuvenharrison in getkin/kin-openapi#1259

New Contributors

• @​ChrisJr404 made their first contribution in getkin/kin-openapi#1251
• @​Nayjest made their first contribution in getkin/kin-openapi#1253

Full Changelog: getkin/kin-openapi@v0.147.0...v0.148.0

Commits

• 1a812b4 openapi3: accept boolean schemas (#1258)
• 9814d1f Merge commit from fork
• 9245cef Merge commit from fork
• 4487f19 Merge commit from fork
• 53c2ab1 openapi3: validate prefixItems positionally (#1259)
• ba23e9d docs: add inspect.software health badge (#1253)
• 94fcebf openapi3: compare multipleOf on exact rationals, not fixed-precision decimals...
• e9e5e11 openapi3: add FormatOfStringForUUIDOfRFC9562 for UUID v6-v8 (#1251)
• df7e8f4 openapi3: do not forget to carry schema format validators over to OAS3.1 (#1250)
• See full diff in compare view

Updates github.com/netresearch/go-cron from 0.15.1 to 0.16.0

Release notes

Sourced from github.com/netresearch/go-cron's releases.

v0.16.0 raises the supported Go floor and brings one new scheduling capability.

Breaking: minimum Go is now 1.26

With Go 1.27 released, the two most recent Go releases are 1.26 and 1.27 — the support window this library commits to in its FAQ. The go directive moves from 1.25 to 1.26 and the toolchain to go1.27.0; consumers on Go 1.25 must upgrade their toolchain before taking this version (#402). Every surface that declared the old floor — package godoc, README, FAQ, migration checklist — was swept in the same change.

New: optional job priority

Jobs can now carry a priority that decides execution order when multiple jobs fire at the same instant — contributed by @​manu52697 (#399).

Documentation

How to verify a release — checksums, Cosign signatures, SLSA provenance — is now documented, also contributed by @​manu52697 (#393).

Internal

The test files were modernized via go fix (for range n, wg.Go, any, atomic.Int32/Int64, slices.Contains) with no library code or public API changed (#402); CI housekeeping landed in #395, #396, #397 and #398.

Full Changelog: netresearch/go-cron@v0.15.1...v0.16.0

Changelog

Sourced from github.com/netresearch/go-cron's changelog.

[0.16.0] - 2026-08-26

Added

• Optional job priority: decides execution order when multiple jobs fire at the same instant. Contributed by [@​manu52697] ([PR#399])

Changed

• BREAKING: minimum supported Go version raised from 1.25 to 1.26 (Go release policy: two most recent releases, now 1.26 + 1.27); toolchain updated to go1.27.0 ([PR#402])

Documentation

• How to verify a release (checksums, Cosign signatures, SLSA provenance) is now documented. Contributed by [@​manu52697] ([PR#393])
• Every surface that declared the old floor now says Go 1.26+ (package godoc, README, FAQ, MIGRATION checklist, PROJECT_INDEX, AGENTS); the stale pre-go-check required-checks list in BRANCH_PROTECTION.md was rewritten to match the live ruleset ([PR#402])

Internal

• Test files modernized via go fix (for range n, wg.Go, any, atomic.Int32/Int64, slices.Contains); no library code or public API changed ([PR#402])

Commits

• c1f4534 chore(release): v0.16.0 (#403)
• 7895c8d chore(release): v0.16.0
• 3f473d2 feat: Go 1.27 toolchain, minimum Go 1.26, go fix modernization (#402)
• 0559861 chore: retrigger CI for re-analysis under updated Sonar settings
• bcd6621 docs: complete the Go 1.26 floor sweep
• a41437a refactor: apply Go 1.26 modernizers via go fix
• 2c5f50a feat: raise minimum supported Go to 1.26
• 94093ad chore: update Go toolchain to 1.27.0
• d9bc350 chore: point CODEOWNERS at existing org teams (#401)
• 9fa5378 chore: point CODEOWNERS at existing org teams
• Additional commits viewable in compare view

Updates golang.org/x/mod from 0.38.0 to 0.40.0

Commits

• d3398d0 go.mod: update golang.org/x dependencies
• 57549bf sumdb: ignore unrelated hashes in Lookup
• 96f62ae sumdb/tlog: fix TileHashReader authentication bypass
• 13be902 go.mod: update golang.org/x dependencies
• See full diff in compare view

[alicoding]

Closing: Dependabot's regeneration bumped go.mod's go directive to 1.26 while the runners and the local toolchain are on 1.25; the Go dependency group is re-taken with the toolchain under goal 0314 (docs/goals/BACKLOG.md). @dependabot ignore this major version

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml