fix(deps): update module golang.org/x/sys to v0.43.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
golang.org/x/sys	v0.41.0 → v0.43.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Renovate PR Review Results

⚖️ Safety Assessment: ✅ Safe

🔍 Release Content Analysis

The update from golang.org/x/sys v0.41.0 to v0.43.0 includes 11 commits across 19 files made between February 11 and March 27, 2026. Key changes include:

Major Changes:

• Go directive upgrade to 1.25.0 (Feb 11) - Updated minimum Go version requirement following Go 1.26 release
• Darwin ARM64 CPU feature detection improvements (Feb 12, Mar 2, Mar 26) - Enhanced processor feature detection for Apple M-series chips
• Linux netlink structures (Feb 18) - Added Prefixmsg and PrefixCacheinfo structs for RTM_NEWPREFIX message parsing
• Windows API updates (Feb 12, Mar 3, Mar 24, Mar 27):
  • Signal type aliasing for improved usability
  • Registry ModTime calculation fix to handle full Filetime range
  • SyscallN adoption for deprecated-replacement function
  • Security descriptor nil handling fix

Breaking Changes:

• None identified. All changes are either:
  • Type aliasing improvements (Windows Signal, Plan9 Note)
  • Internal implementation refinements
  • Bug fixes
  • Feature additions (new structs, improved detection)

Security Fixes:

• Windows Security Descriptor nil handling (Mar 27) - Fixed GetNamedSecurityInfo to safely handle nil security descriptors, preventing potential nil pointer dereferences

🎯 Impact Scope Investigation

Usage Location Analysis:
The codebase uses golang.org/x/sys/unix package in the following files:

• internal/sandbox/execution.go - Uses: unix.Poll(), unix.PollFd, unix.POLLIN, unix.POLLHUP, unix.POLLERR, unix.EINTR
• internal/sandbox/sandbox.go - Uses: unix.SignalName()
• internal/sandbox/signal_test.go - Uses: unix.SignalName()

API Compatibility Verification:

• ✅ unix.Poll() - No changes detected, API remains stable
• ✅ unix.PollFd - No changes detected, struct remains stable
• ✅ unix.POLLIN/POLLHUP/POLLERR/EINTR - Constants unchanged
• ✅ unix.SignalName() - No changes detected, API remains stable

Build & Test Verification:

• ✅ Build successful with v0.43.0
• ✅ All unit tests pass (6 test packages, 0 failures)
• ✅ No compilation errors or warnings

Impact on Dependencies:

• No transitive dependency conflicts detected
• Module hash update in go.sum is consistent and expected
• No other packages in the project depend on specific golang.org/x/sys versions that would conflict

💡 Recommended Actions

Immediate Actions:

1. ✅ Merge this PR - The update is backward compatible and safe to merge
2. ✅ No code changes required - All APIs used by the codebase are stable and unchanged

Post-Merge Actions:

1. Monitor the sandbox execution logs for any unexpected behavior (though none is anticipated)
2. Consider running E2E tests if available to validate full system integration
3. No documentation updates required as this is a transparent dependency update

Optional Considerations:

• The Windows security descriptor nil handling fix (commit chore(main): release 0.3.0 #11) is a good defensive improvement, though this codebase runs on Linux
• The Linux netlink struct additions don't affect current usage but provide future extensibility
• Go 1.25.0 directive update in golang.org/x/sys aligns well with the project's Go 1.26.2 requirement

🔗 Reference Links

• golang.org/x/sys v0.43.0 on pkg.go.dev
• GitHub comparison v0.41.0...v0.43.0
• sys module on pkg.go.dev
• Go Release History
• sys Git repository

Generated by koki-develop/claude-renovate-review