chore(deps): update module golang.org/x/net to v0.33.0 [security]

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
golang.org/x/net	v0.32.0 -> v0.33.0

---

Non-linear parsing of case-insensitive content in golang.org/x/net/html

CVE-2024-45338 / GHSA-w32m-9786-jp63 / GO-2024-3333

More information

Details

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service.

Severity

• CVSS Score: Unknown
• Vector String: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

References

• https://nvd.nist.gov/vuln/detail/CVE-2024-45338
• https://github.com/golang/go/issues/70906
• https://cs.opensource.google/go/x/net
• https://go.dev/cl/637536
• https://go.dev/issue/70906
• https://groups.google.com/g/golang-announce/c/wSCRmFnNmPA/m/Lvcd0mRMAwAJ
• https://pkg.go.dev/vuln/GO-2024-3333

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

---

Non-linear parsing of case-insensitive content in golang.org/x/net/html

CVE-2024-45338 / GHSA-w32m-9786-jp63 / GO-2024-3333

More information

Details

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service.

Severity

Unknown

References

• https://go.dev/cl/637536
• https://go.dev/issue/70906
• https://groups.google.com/g/golang-announce/c/wSCRmFnNmPA/m/Lvcd0mRMAwAJ

This data is provided by OSV and the Go Vulnerability Database (CC-BY 4.0).

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 81.68%. Comparing base (e06bcc6) to head (b9e0f67).
Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1256   +/-   ##
=======================================
  Coverage   81.68%   81.68%           
=======================================
  Files         168      168           
  Lines        9762     9762           
=======================================
  Hits         7974     7974           
  Misses       1537     1537           
  Partials      251      251           

Flag	Coverage Δ
coraza.rule.case_sensitive_args_keys	81.64% <ø> (ø)
coraza.rule.multiphase_valuation	81.49% <ø> (-0.19%)	⬇️
coraza.rule.no_regex_multiline	81.62% <ø> (ø)
default	81.68% <ø> (ø)
examples+	16.55% <ø> (ø)
examples+coraza.rule.case_sensitive_args_keys	81.64% <ø> (ø)
examples+coraza.rule.multiphase_valuation	?
examples+coraza.rule.no_regex_multiline	81.54% <ø> (ø)
examples+memoize_builders	?
examples+no_fs_access	?
ftw	81.68% <ø> (ø)
memoize_builders	81.77% <ø> (ø)
no_fs_access	81.13% <ø> (ø)
tinygo	81.65% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.