build(deps): update golang.org/x dependencies

[natalie-o-perret]

Description

Update the coordinated golang.org/x/* dependency set in the root module:

• crypto v0.45.0 to v0.53.0
• net v0.47.0 to v0.56.0
• sys v0.38.0 to v0.46.0
• term v0.37.0 to v0.44.0
• text v0.31.0 to v0.39.0
• tools v0.38.0 to v0.47.0

This brings x/text to the version that fixes GO-2026-5970. The sibling updates are the versions selected by Go module resolution for x/text v0.39.0. Regenerate go.sum and the committed vendor tree.

Synchronize the separate tests/integ module with the dependency graph selected through its root-module replacement. This also records the already-selected AWS SDK versions, including S3 v1.105.0, EventStream v1.7.14, and Smithy v1.27.3.

This coordinated update supersedes #872, #866, #873, #861, #860, and #859.

Checklist

(For exoscale contributors)

• Changelog updated (under Unreleased block, and add the Pull Request #number for each bit you add to the CHANGELOG.md)
• Testing

Testing

go fmt ./..., make lint, go vet ./..., make build, make test-verbose, go test ./..., and golangci-lint run --timeout 4m passed. go test -v from tests/e2e/ passed all 25 API-free scenarios.

In tests/integ, go fmt ./..., go test ./..., go test -tags=integration_api -run '^$' ./..., and govulncheck ./... passed.

Both modules pass go mod tidy -diff and go mod verify. A separately generated root vendor tree matched the committed tree.

Root and integration-module govulncheck ./... scans reported no reachable vulnerabilities. Verbose root output reported no package vulnerabilities and only GO-2026-5932 at module level for the unimported, unmaintained x/crypto/openpgp package, which has no fixed version.

---

Note

AI assistance: dependency analysis, PR description, changelog entry.