chore(go-deps:backend)(deps): bump the go-dependencies group with 2 updates

[dependabot]

Bumps the go-dependencies group with 2 updates: github.com/mmcdole/gofeed and github.com/wailsapp/wails/v3.

Updates github.com/mmcdole/gofeed from 1.4.2 to 1.5.0

Release notes

Sourced from github.com/mmcdole/gofeed's releases.

v1.5.0

This release adds Person.URL for author URLs and fixes several parser bugs, including author parsing for Name <email> values and names with parentheses or @.

Changes

• Add Person.URL for author URLs, including Atom URIs. (#340)
• Split Name <email> authors and keep names like Smith & Sons (Ltd) and @jack instead of dropping them. (#365)
• Preserve file paths when resolving xml:base URLs. (#362)
• Enforce response size limits through the end of the body. (#361)
• Return an error for null JSON feed items and authors instead of panicking. (#360)
• Fix quadratic allocations in extension text parsing. (#359)
• Reduce allocations when parsing dates with named zones. (#352)
• Remove the urfave/cli dependency. (#354)
• Update golang.org/x/net to v0.58.0 and testify to v1.12.1. (#341, #350)

Full changelog: mmcdole/gofeed@v1.4.2...v1.5.0

Commits

• 9637349 Keep free-text author names and split Name <email> authors (#365)
• 253ddbe Preserve file paths when resolving xml:base URLs (#362)
• b82e734 Enforce response size limits through the end of the body (#361)
• 0f806fb Reject null JSON feed items and authors (#360)
• ed73f31 Fix quadratic allocations in extension text parsing (#359)
• 25f647f Remove the CLI framework and simplify fixture tests (#354)
• 3f6ff87 Bump golang.org/x/net from 0.57.0 to 0.58.0 (#341)
• ab1f722 Bump github.com/stretchr/testify from 1.11.1 to 1.12.1 (#350)
• a6c7d46 Preserve author URLs in the universal feed (#340)
• c1bd988 Reduce allocations when parsing dates with named zones (#352)
• Additional commits viewable in compare view

Updates github.com/wailsapp/wails/v3 from 3.0.0-beta.23 to 3.0.0-beta.25

Release notes

Sourced from github.com/wailsapp/wails/v3's releases.

Wails v3.0.0-beta.25

Wails v3 Beta Release - v3.0.0-beta.25

Fixed

• Stop wails3 dev and its background processes when the primary application exits (#6048)

---

🤖 This is an automated nightly release generated from the latest changes on master.

Installation:

go install github.com/wailsapp/wails/v3/cmd/wails3@v3.0.0-beta.25

⚠️ Beta Warning: This is pre-release software. The API is stable, but you may still encounter issues before the final 3.0 release.

Wails v3.0.0-beta.24

Wails v3 Beta Release - v3.0.0-beta.24

Security

• Restrict GITHUB_TOKEN permissions in build and publish workflows to follow the principle of least privilege
• Fix path traversal and symlink escapes in the screen example asset middleware
• Keep setup wizard dependency installation functional while restricting it to approved package-manager commands

---

🤖 This is an automated nightly release generated from the latest changes on master.

Installation:

go install github.com/wailsapp/wails/v3/cmd/wails3@v3.0.0-beta.24

⚠️ Beta Warning: This is pre-release software. The API is stable, but you may still encounter issues before the final 3.0 release.

Commits

• 2e3e153 chore(v3): bump to v3.0.0-beta.25 and update changelog
• 4145991 chore: update sponsors.svg and contributors.svg [skip ci]
• 4b1f348 Merge pull request #6049 from Paulkm2006/codex/fix-dev-ctrl-c
• dd2f62e Merge branch 'master' into codex/fix-dev-ctrl-c
• a2b47f6 chore: update sponsors.svg and contributors.svg [skip ci]
• f5457ed chore(v3): bump to v3.0.0-beta.24 and update changelog
• 2a6be71 chore(docs): migrate M-Press sources to Markdown (#6137)
• 8560afd fix(security): address multiple security vulnerabilities (#4895)
• 114c003 chore: update sponsors.svg and contributors.svg [skip ci]
• 5511639 chore: update sponsors.svg and contributors.svg [skip ci]
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

发布分支适配与验证

已以 merge commit 同步 release/v1.3.39，保留 Dependabot 原提交，并将 Taskfile.yml 的 Wails CLI 配套升级到 beta.25。与 #1234 的 runtime beta.25 在临时累计分支一起验证，Go/runtime/CLI 三处一致。go vet、go build、相关 Go 测试通过；完整 Go 测试仅保留官方 macOS 基线已有失败。累计前端 247 项单测、只读 ESLint、静态构建及官网独立 lint/build 通过；阅读 Cypress 与原基线同为 28/29（同一聊天等待失败）。本次只进入 release 分支，不构建安装包、不发布版本。