chore(deps): bump the go-dependencies group across 1 directory with 6 updates

[dependabot]

Bumps the go-dependencies group with 5 updates in the /server directory:

Package	From	To
github.com/coreos/go-oidc/v3	3.20.0	3.21.0
golang.org/x/crypto	0.55.0	0.57.0
golang.org/x/image	0.45.0	0.46.0
golang.org/x/net	0.58.0	0.59.0
golang.org/x/oauth2	0.36.0	0.37.0

Updates github.com/coreos/go-oidc/v3 from 3.20.0 to 3.21.0

Release notes

Sourced from github.com/coreos/go-oidc/v3's releases.

v3.21.0

What's Changed

• oidc: ignore JWKs with unsupported key types rather than failing by @​nicoske in coreos/go-oidc#499

New Contributors

• @​nicoske made their first contribution in coreos/go-oidc#499

Full Changelog: coreos/go-oidc@v3.20.0...v3.21.0

Commits

• c914bd3 oidc: ignore JWKs with unsupported key types rather than failing
• See full diff in compare view

Updates golang.org/x/crypto from 0.55.0 to 0.57.0

Commits

• 3f62bf1 go.mod: update golang.org/x dependencies
• 86efde5 ssh: reject unexpected message types on established channels
• a6cdac6 ssh: drop traffic on undecided channels
• 39dc44e ssh: don't skip the source-address critical option in CheckCert
• afebf4c x509roots/fallback/bundle: make subjectsEqual stricter on Go 1.27+
• 89f4e9b x509roots/fallback: update bundle
• 71488c4 ssh/knownhosts: compare only public key portions for revocation
• 82adefa ssh: synchronize unexpected response test
• c757c98 all: upgrade go directive to at least 1.26.0 [generated]
• 593c81a ssh: correctly ignore pre-banner lines
• Additional commits viewable in compare view

Updates golang.org/x/image from 0.45.0 to 0.46.0

Commits

• b06f1de go.mod: update golang.org/x dependencies
• 09b0b4f all: upgrade go directive to at least 1.26.0 [generated]
• See full diff in compare view

Updates golang.org/x/net from 0.58.0 to 0.59.0

Commits

• 540d04c go.mod: update golang.org/x dependencies
• 20eef7f quic: clear fast-path receive buffer on stream reset
• c23af1b internal/http3: fix compilation error due to missed symbol name update
• eda109f internal/http3: send appropriate error codes in STOP_SENDING frames
• 12e0501 internal/http3: server header size limits
• d89285e quic: add Stream.StopSending, and rework stream/application errors
• d34deae quic: ensure Endpoint.Close waits for connection loops to exit
• 55577aa http2: use IDNA Lookup profile, not raw Punycode translation
• b22627e internal/http3: handle a nil TLSConfig in newQUICConfig
• 6e98b0d internal/http3: report endpoint creation errors from initEndpoint
• Additional commits viewable in compare view

Updates golang.org/x/oauth2 from 0.36.0 to 0.37.0

Commits

• c624b89 google: change the snake case endpoint to kebab-case
• 09a82f6 all: upgrade go directive to at least 1.26.0 [generated]
• See full diff in compare view

Updates golang.org/x/text from 0.41.0 to 0.42.0

Commits

• fafe4a0 go.mod: update golang.org/x dependencies
• f53c316 unicode/norm: don't truncate runes in the recomposition map key
• 37867f6 unicode/norm: let any starter block composition in compose
• 0dd525f unicode/norm: compose non-Hangul runes after a Hangul syllable
• bac26e5 unicode/norm: avoid improper ErrShortDst return in Form.transform
• 4f55186 unicode/norm: simplify short source detection in Form.transform
• a1b6c10 unicode/norm: prevent decomposeSegment from moving backwards
• cd1cbc9 unicode/bidi: panic rather than log.Panicf
• a459614 internal/export/idna: fix conformance with optional validation disabled
• be70a61 internal/export/idna: drop trie field from Profiles
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions