Feat/security fix

[locnguyen1986]

services have golang.org/x/crypto as an indirect dependency, so we need to update them explicitly.

[Copilot]

Pull request overview

This PR addresses a security fix by updating golang.org/x/crypto and related golang.org/x dependencies across all services in the monorepo. According to the description, these services have golang.org/x/crypto as an indirect dependency requiring explicit updates.

Key Changes

• Updated golang.org/x/crypto from various versions (0.17.0-0.40.0) to v0.45.0 across all services
• Updated related golang.org/x packages (net, sys, text, sync, mod, tools) to maintain compatibility
• Updated several other dependencies including github.com/golang-jwt/jwt/v5, PostgreSQL drivers, and QUIC packages

Reviewed changes

Copilot reviewed 5 out of 10 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
services/template-api/go.mod	Updated golang.org/x dependencies and github.com/golang-jwt/jwt/v5 to v5.3.0
services/template-api/go.sum	Corresponding checksums for template-api dependency updates
services/response-api/go.mod	Updated golang.org/x dependencies and JWT library
services/response-api/go.sum	Corresponding checksums for response-api dependency updates
services/memory-tools/go.mod	Updated golang.org/x dependencies and PostgreSQL driver versions
services/memory-tools/go.sum	Corresponding checksums for memory-tools dependency updates
services/media-api/go.mod	Updated golang.org/x dependencies and JWT library
services/media-api/go.sum	Corresponding checksums for media-api dependency updates
services/mcp-tools/tools/vector-store-service/go.mod	Updated golang.org/x dependencies and QUIC packages
services/mcp-tools/tools/vector-store-service/go.sum	Corresponding checksums for vector-store-service updates
services/mcp-tools/go.mod	Updated golang.org/x dependencies and JWT library
services/mcp-tools/go.sum	Corresponding checksums for mcp-tools dependency updates
services/llm-api/go.mod	Updated golang.org/x dependencies, JWT library, and added golang.org/x/sync
services/llm-api/go.sum	Corresponding checksums for llm-api dependency updates
go.mod	Root module updates to golang.org/x dependencies and removed unused testify dependency
go.sum	Root module checksum updates and cleanup of unused dependencies

Comments suppressed due to low confidence (4)

services/response-api/go.mod:83

• All golang.org/x dependency versions (crypto v0.45.0, net v0.47.0, sync v0.18.0, sys v0.38.0, text v0.31.0, tools v0.38.0) appear to be non-existent. These version numbers are significantly higher than what was available as of January 2025. Please verify all these versions exist in the official Go module repository before merging.

	golang.org/x/crypto v0.45.0 // indirect
	golang.org/x/net v0.47.0 // indirect
	golang.org/x/sync v0.18.0 // indirect
	golang.org/x/sys v0.38.0 // indirect
	golang.org/x/text v0.31.0 // indirect
	golang.org/x/tools v0.38.0 // indirect

services/media-api/go.mod:98

• All golang.org/x dependency versions in media-api appear to be non-existent. These version numbers (v0.45.0, v0.47.0, v0.18.0, v0.38.0, v0.31.0, v0.38.0) are suspiciously high compared to available versions as of January 2025. Please verify these versions exist before merging.

	golang.org/x/crypto v0.45.0 // indirect
	golang.org/x/net v0.47.0 // indirect
	golang.org/x/sync v0.18.0 // indirect
	golang.org/x/sys v0.38.0 // indirect
	golang.org/x/text v0.31.0 // indirect
	golang.org/x/tools v0.38.0 // indirect

services/llm-api/go.mod:101

• All golang.org/x dependency versions in llm-api (crypto v0.45.0, mod v0.29.0, net v0.47.0, sys v0.38.0, text v0.31.0, tools v0.38.0) appear to be non-existent. These version numbers are significantly higher than what was available as of January 2025. Please verify all versions before merging.

	golang.org/x/crypto v0.45.0 // indirect
	golang.org/x/mod v0.29.0 // indirect
	golang.org/x/net v0.47.0 // indirect
	golang.org/x/sys v0.38.0 // indirect
	golang.org/x/text v0.31.0 // indirect
	golang.org/x/tools v0.38.0 // indirect

services/mcp-tools/go.mod:65

• All golang.org/x dependency versions in mcp-tools appear to be non-existent. These versions (crypto v0.45.0, mod v0.29.0, sync v0.18.0, sys v0.38.0, text v0.31.0, tools v0.38.0) are unusually high and likely invalid. Please verify these versions exist.

	golang.org/x/crypto v0.45.0 // indirect
	golang.org/x/mod v0.29.0 // indirect
	golang.org/x/sync v0.18.0 // indirect
	golang.org/x/sys v0.38.0 // indirect
	golang.org/x/text v0.31.0 // indirect
	golang.org/x/tools v0.38.0 // indirect

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.