b606291e9f4d8833fd604e9abb04e61d59dfc7a3
golang.org/x/net v0.58.0 has five advisories fixed in v0.60.0 (GO-2026-6603, GO-2026-6610, GO-2026-6611, GO-2026-6612, GO-2026-6617), so the vulnerabilities job fails on every PR. x/net is indirect, so Renovate never proposed it. golang.org/x/tools v0.49.0 under Go 1.27.2 makes gqlgen miss methods on bound model types: go generate replaces them with panicking resolver stubs, which fails the check job's codegen gate. x/tools v0.51.0 generates the committed code again. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012GZcP1B9UALgvE785GL8Jb