chore(deps): bump golang.org/x/vuln from 1.6.0 to 1.7.0 in /internal/golang/go-pin

[dependabot]

Bumps golang.org/x/vuln from 1.6.0 to 1.7.0.

Commits

• 617f44b go.mod: update golang.org/x dependencies
• See full diff in compare view

[pedromvgomes]

@dependabot rebase

[github-actions]

bulwark

• ✅ scan — no findings

• ✅ coverage — see error output below

📦 Full bulwark output — complete scan and coverage logs.

[pedromvgomes]

Superseded — this bump is incorporated into feature/cinder-juniper (the v2.0.0 branch), together with the internal/golang/golang.go constant mirror that TestPinnedVersionsMatchGoPinModule requires. That mirror is why CI was failing here: Dependabot updates go-pin/go.mod but cannot update the Go constants, exactly as .github/dependabot.yml and AGENTS.md describe.

Closing in favour of that branch.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.