Update to latest kindling/fronted that drops unnecessary dependency o…

[myleshorton]

This pull request updates the go.mod dependencies by upgrading some packages to newer versions and removing several indirect dependencies that are no longer needed. These changes help keep the project up-to-date and reduce unnecessary dependencies.

Dependency upgrades:

• Upgraded github.com/getlantern/fronted and github.com/getlantern/kindling to newer versions to include the latest features and bug fixes.

Dependency removals (cleanup):

• Removed several unused or obsolete indirect dependencies, including github.com/getlantern/golog, github.com/getlantern/tlsdialer/v3, github.com/getlantern/fdcount, github.com/getlantern/hex, github.com/getlantern/iptool, github.com/getlantern/mtime, github.com/getlantern/netx, github.com/go-stack/stack, and github.com/oxtoacart/bpool, which helps reduce the project’s footprint and potential security surface. [1] [2] [3] [4]…n tlsdialer

[Copilot]

Pull request overview

This PR updates Go module dependencies by bumping github.com/getlantern/fronted and github.com/getlantern/kindling, and tidying go.mod to remove a set of now-unlisted indirect requirements.

Changes:

• Upgraded github.com/getlantern/fronted to v0.0.0-20260319225233-cf2160f85053.
• Upgraded github.com/getlantern/kindling to v0.0.0-20260319225424-4736208dd171.
• Removed several indirect require entries from go.mod and updated go.sum accordingly.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 4 comments.

File	Description
go.mod	Bumps fronted/kindling and removes multiple indirect require entries.
go.sum	Updates checksums to match the new module graph after the version bumps and tidy.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

github.com/go-stack/stack was removed from go.mod, but it still exists in go.sum, which indicates it’s still being pulled in transitively. If the intent is to fully drop this dependency (as implied by the PR description), please confirm it’s no longer needed or adjust the description to clarify the scope of removal.

[Copilot]

github.com/oxtoacart/bpool was removed from go.mod, but go.sum still contains it, so it hasn’t been fully removed from the resolved dependency set. If the goal is dependency footprint reduction, please identify what still depends on it (or update the PR description to note it’s only removed as an explicit indirect requirement).

[Copilot]

github.com/getlantern/golog was removed from go.mod, but it still appears in go.sum, meaning it’s still being pulled in transitively (or via dependency tests). If the intent is to remove it from the project’s dependency graph, please investigate why it’s still required; otherwise, consider adjusting the PR description to clarify that it’s only removed as an explicit go.mod requirement.

[Copilot]

github.com/getlantern/hex was removed from go.mod, but it still appears in go.sum, so it’s still part of the resolved module set. If the goal is to eliminate this dependency entirely (per the PR description’s “cleanup”), please track down which dependency still requires it; otherwise, update the PR description to reflect that it’s no longer an explicit indirect requirement but still transitive.