chore(deps): bump golang.org/x/sync from 0.22.0 to 0.23.0

[dependabot]

Bumps golang.org/x/sync from 0.22.0 to 0.23.0.

Commits

• f75267d semaphore: panic on negative capacity
• 3ffd83c all: upgrade go directive to at least 1.26.0 [generated]
• See full diff in compare view

[github-actions]

✅MegaLinter analysis: Success

✅ Linters with no issues

actionlint, bash-exec, git_diff, hadolint, jscpd, jsonlint, lychee, markdown-table-formatter, markdownlint, prettier, prettier, shellcheck, shfmt, stylelint, syft, trivy-sbom, trufflehog, v8r, v8r, yamllint

Notices

⚠️ Your configuration references items that have been removed from MegaLinter and are ignored: REPOSITORY_GITLEAKS. See Removed linters to find their replacements.

See detailed reports in MegaLinter artifacts

Show us your support by starring ⭐ the repository

[devantler]

🤖 Generated by the Agentic Engineer

Diagnosed, and parked on a named blocker: #6974.

This PR is not self-progressing — auto-merge is armed but four required checks fail at the current head and will not clear on their own. The cause is not this dependency:

go: updates to go.mod needed; to update it:
	go mod tidy

The bump changed the root go.mod/go.sum only. desktop is a second Go module consuming the root through replace github.com/devantler-tech/ksail/v7 => ../, so its graph moved too and desktop/go.mod is now stale — which fails both Desktop App build jobs and, through TestClaircoreLinkedPackagesStayInert/desktop, 🧪 Test and 📊 Code Coverage.

Evidence that this is one shared defect rather than a problem with this bump: #6971, #6972 and #6973 fail the identical four checks while bumping three unrelated modules, and all three touch root files only — whereas merged bumps #6950 and #6860 also carried desktop/go.mod and desktop/go.sum and passed. main is unaffected (Desktop App green through 8cd2d9a403).

Distinct from #6728, which is the upstream loft-sh/apiserver ceiling on the Talos/omni line (re-verified 2026-09-08, still live). This bump would merge cleanly once the second module is tidied.

No action is needed on this PR itself; it is tracked by #6974.

[devantler]

🤖 Generated by the Agentic Engineer

This bump is stalled on the same cause as #6972, confirmed there from the run log rather than inferred:

--- FAIL: TestClaircoreLinkedPackagesStayInert/desktop
    go list -deps ./... in module ".../desktop" failed: exit status 1
        go: updates to go.mod needed; to update it:

desktop/ is a second Go module vendoring the root via replace => ../, so a root bump leaves its go.mod/go.sum stale and fails this PR's own required checks. CI computed that tidy on every run and then discarded it on Dependabot branches, so the bump could never go green on its own.

ksail#6976 fixed that and merged (55c1720bbea5): a Dependabot branch now receives the desktop tidy — and only the desktop tidy, so Dependabot keeps its rebase ability in every case #6832 was about.

Rebasing so this picks up the repaired job.

@dependabot rebase