Bump the gomod group with 3 updates - #84

Kusari Analysis Results:

✅ No Flagged Issues Detected
All values appear to be within acceptable risk parameters.

Both analyses support proceeding. Dependency analysis: this is a routine Dependabot batch update across transitive Go modules, all licenses permissive (Apache-2.0, BSD-3-Clause, MIT), no blocked/deprecated/malicious packages, and all resolved versions confirmed published to the Go proxy. The update actually remediates two prior vulnerabilities (GO-2026-5841 in github.com/klauspost/compress and GO-2026-6303 in golang.org/x/crypto). One advisory, GO-2026-5932 (unmaintained/unsafe golang.org/x/crypto/openpgp), carries over from the old version and is marked NO_FIX with no available upgrade, so it is pre-existing and unactionable at the dependency level; if the code actually uses golang.org/x/crypto/openpgp, consider migrating to a maintained fork such as github.com/ProtonMail/go-crypto/openpgp as a code-level mitigation. The 'isRisky' flags on go-openapi/swag submodules stem only from low scorecard scores, not real vulnerabilities. Code analysis found no code issues, exposed secrets, or workflow issues. Combined, there are no critical, actionable, PR-introduced risks blocking merge.

@kusari-inspector rerun - Trigger a re-analysis of this PR
@kusari-inspector feedback [your message] - Send feedback to our AI and team
See Kusari's documentation for setup and configuration.
Commit: cc96130, performed at: 2026-08-31T09:08:01Z