chore(deps): bump golang.org/x/image from 0.32.0 to 0.38.0

[dependabot]

Bumps golang.org/x/image from 0.32.0 to 0.38.0.

Commits

• 23ae9ed tiff: cap buffer growth to prevent OOM from malicious IFD offset
• e589e60 webp: allow VP8L + VP8X(with alpha)
• fe7d73d go.mod: update golang.org/x dependencies
• e3d762b all: upgrade go directive to at least 1.25.0 [generated]
• 833c6ed go.mod: update golang.org/x dependencies
• bc7fe0b go.mod: update golang.org/x dependencies
• c53c97f go.mod: update golang.org/x dependencies
• 9032ff7 all: eliminate vet diagnostics
• 9c9d08c go.mod: update golang.org/x dependencies
• 742b1b7 all: fix some comments
• Additional commits viewable in compare view

[ThatScalaGuy]

@dependabot rebase

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ❌ 9 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 1 package(s) with unknown licenses.

See the Details below.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 14568db.

Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

License Issues

go.mod

Package	Version	License	Issue Type
golang.org/x/crypto	0.48.0	BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang	Incompatible License
golang.org/x/mod	0.33.0	BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang	Incompatible License
golang.org/x/net	0.50.0	BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang	Incompatible License
golang.org/x/sync	0.20.0	BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang	Incompatible License
golang.org/x/sys	0.41.0	BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang	Incompatible License
golang.org/x/telemetry	0.0.0-20260209163413-e7419c687ee4	BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang	Incompatible License
golang.org/x/term	0.40.0	BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang	Incompatible License
golang.org/x/text	0.35.0	BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang	Incompatible License
golang.org/x/tools	0.42.0	BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang	Incompatible License
golang.org/x/image	0.38.0	Null	Unknown License

Allowed Licenses:

MIT, Apache-2.0, BSD-2-Clause, BSD-3-Clause, ISC, MPL-2.0, Unlicense, CC0-1.0

OpenSSF Scorecard

Package	Version	Score	Details
gomod/golang.org/x/crypto	0.48.0	Unknown	Unknown
gomod/golang.org/x/image	0.38.0	Unknown	Unknown
gomod/golang.org/x/mod	0.33.0	Unknown	Unknown
gomod/golang.org/x/net	0.50.0	Unknown	Unknown
gomod/golang.org/x/sync	0.20.0	Unknown	Unknown
gomod/golang.org/x/sys	0.41.0	Unknown	Unknown
gomod/golang.org/x/telemetry	0.0.0-20260209163413-e7419c687ee4	Unknown	Unknown
gomod/golang.org/x/term	0.40.0	Unknown	Unknown
gomod/golang.org/x/text	0.35.0	Unknown	Unknown
gomod/golang.org/x/tools	0.42.0	Unknown	Unknown

Scanned Files

• go.mod

[ThatScalaGuy]

@dependabot rebase

[dependabot]

Looks like this PR is already up-to-date with main! If you'd still like to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.