chore: dependabot updates

[anish-sahoo]

Updates dependencies across GitHub Actions, Go, Rust, and Python examples.

Updates

• GitHub Actions: actions/checkout 6 -> 7 (#3068)
• Go: github.com/getkin/kin-openapi 0.139.0 -> 0.140.0 (#3079)
• Go: golang.org/x/crypto 0.50.0 -> 0.52.0 (#3099)
• Go: golang.org/x/net 0.53.0 -> 0.55.0, with transitive updates to golang.org/x/term 0.42.0 -> 0.43.0 and golang.org/x/text 0.36.0 -> 0.37.0 (#3092)
• Rust: nix 0.31.2 -> 0.31.3 and transitive libc 0.2.184 -> 0.2.186 (#3084)
• Rust (not included): jsonschema 0.29.1 -> 0.46.6 (#3085) REVERTED — breaking API change (error.instance_path field changed to a method), plus aws-lc-sys requires cmake and breaks the manylinux wheel build
• Python: transformers 4.52.3 -> 5.5.0 in examples/experimental/resnet-managed-weights (#3102)
• Python: transformers 5.0.0rc3 -> 5.5.0 in examples/streaming-text (#3103)
• Python: transformers 5.0.0rc3 -> 5.5.0 in examples/z-image-turbo (#3117)
• Go module cleanup: remove obsolete indirect dependencies from go.mod and go.sum.

[ask-bonk]

@anish-sahoo Bonk workflow was cancelled.

View workflow run · To retry, trigger Bonk again.

[ask-bonk]

LGTM

github run

[ask-bonk]

LGTM

github run

[ask-bonk]

I'm Bonk, and I've done a quick review of your PR.

This PR rolls up safe dependency updates from dependabot (GitHub Actions, Go, Rust, Python examples).

Issues found (1 critical):

1. CRITICAL -- go.sum contains unresolved merge conflict markers at two locations (around lines 330 and 348). This will break Go builds. The conflicts are between golang.org/x/crypto and golang.org/x/net versions.

   Fix: Run go mod tidy and commit the result. This will regenerate go.sum correctly. Alternatively, manually remove the conflict markers and keep:

   • For golang.org/x/crypto: the v0.52.0 entries (matching go.mod)
   • For golang.org/x/net: the v0.55.0 entries (matching go.mod)

2. Note -- PR description mismatch: The description says transformers is updated 5.2.0 -> 5.3.0, but the actual code updates examples to 5.5.0 (and one example jumps from 4.52.3). Not blocking, but you may want to update the PR description for clarity.

[ask-bonk]

I've posted a review on PR #3098.

Summary: The PR contains unresolved git merge conflict markers in go.sum (lines ~330 and ~348) for golang.org/x/crypto and golang.org/x/net. This is a critical issue that will break Go builds. I suggested running go mod tidy to regenerate the file correctly.

I also noted a minor PR description mismatch: the body says transformers 5.2.0 -> 5.3.0, but the actual code updates examples to 5.5.0 (with one jumping from 4.52.3).

github run

[ask-bonk]

LGTM

github run