[deps] Update golang.org/x/vuln from v1.2.0 to v1.3.0

[github-actions]

Summary

Update golang.org/x/vuln dependency from v1.2.0 to v1.3.0.

Current State

• Package: golang.org/x/vuln
• Current Version: v1.2.0
• Proposed Version: v1.3.0
• Update Type: Minor

Why Separate Issue

⚠️ Minor version update

• This is a minor version update (v1.2.0 → v1.3.0)
• golang.org/x/vuln is the Go vulnerability scanning tool (govulncheck) used in make lint / security checks
• Minor updates may include new scanner behavior, updated vuln database integration, or govulncheck API changes

Safety Assessment

⚠️ Requires review

• Minor version update may include new vulnerability detection logic
• Changes could affect govulncheck output in CI, potentially surfacing new alerts
• Review commit history for behavior changes before applying

Links

• [Source Repository]((go.googlesource.com/redacted)
• [Commit History]((go.googlesource.com/redacted)
• Go Package

Note: This package is hosted on Google's Git (go.googlesource.com), not GitHub. There are no GitHub release pages.

Recommended Action

go get -u golang.org/x/vuln@v1.3.0
go mod tidy

Testing Notes

• Run all tests: make test-unit
• Run security checks: make lint
• Verify govulncheck output is unchanged or expected

Warning

⚠️ Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• go.googlesource.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "go.googlesource.com"

See Network Configuration for more information.

Note

🔒 Integrity filter blocked 1 item

The following item was blocked because it doesn't meet the GitHub integrity level.

• #19194 search_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".

To allow these resources, lower min-integrity in your GitHub frontmatter:

tools:
  github:
    min-integrity: approved  # merged | approved | unapproved | none

Generated by Dependabot Dependency Checker · ● 666.8K · ◷

• expires on Apr 26, 2026, 9:59 AM UTC