chore(deps): Update Go deps

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
buf.build/go/protovalidate	v1.1.2 → v1.1.3
github.com/bufbuild/buf	v1.65.0 → v1.66.0
golang.org/x/net	v0.50.0 → v0.51.0

---

Release Notes

bufbuild/protovalidate-go (buf.build/go/protovalidate)

v1.1.3

Compare Source

What's Changed

• Fix a few godoc comments and update golangci-lint by @​pkwarren in #​306
• Bump the go group across 1 directory with 2 updates by @​dependabot[bot] in #​308
• Fix registry chain for pb.Map in NativeToValue by @​rodaine in #​309

Full Changelog: bufbuild/protovalidate-go@v1.1.2...v1.1.3

bufbuild/buf (github.com/bufbuild/buf)

v1.66.0

Compare Source

• Add LSP comment ignore code action to add comment ignores for lint errors.
• Fix buf breaking module comparison when adding new modules.
• Add LSP hover support for protovalidate CEL expressions.
• Fixed offset handling in CEL semantic tokens for non-ASCII content and proto escape sequences in multi-line string literal expressions.
• Improve URI normalization for the LSP.

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 2 additional dependencies were updated

Details:

Package	Change
cel.dev/expr	v0.24.0 -> v0.25.1
github.com/google/cel-go	v0.26.1 -> v0.27.0

File name: tools/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 13 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.25.0 -> 1.25.6
buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go	v1.36.11-20251209175733-2a1774d88802.1 -> v1.36.11-20260209202127-80ab13bee0bf.1
buf.build/go/protovalidate	v1.1.0 -> v1.1.3
github.com/bufbuild/protocompile	v0.14.2-0.20260130195850-5c64bed4577e -> v0.14.2-0.20260202185951-d02d3732d113
github.com/docker/cli	v29.2.0+incompatible -> v29.2.1+incompatible
github.com/google/go-containerregistry	v0.20.7 -> v0.21.0
github.com/klauspost/compress	v1.18.3 -> v1.18.4
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	v0.64.0 -> v0.65.0
go.opentelemetry.io/otel	v1.39.0 -> v1.40.0
go.opentelemetry.io/otel/metric	v1.39.0 -> v1.40.0
go.opentelemetry.io/otel/trace	v1.39.0 -> v1.40.0
golang.org/x/exp	v0.0.0-20260212183809-81e46e3db34a -> v0.0.0-20260218203240-3dfff04db8fa
google.golang.org/genproto/googleapis/api	v0.0.0-20260128011058-8636f8732409 -> v0.0.0-20260217215200-42d3e9bedb6d
google.golang.org/genproto/googleapis/rpc	v0.0.0-20260128011058-8636f8732409 -> v0.0.0-20260217215200-42d3e9bedb6d

[github-actions]

The latest Buf updates on your PR. Results from workflow Pull Request / buf (pull_request).

Build	Format	Lint	Breaking	Updated (UTC)
✅ passed	✅ passed	✅ passed	✅ passed	Mar 2, 2026, 12:59 AM