chore(deps): Bump golang.org/x/sys from 0.43.0 to 0.45.0

[dependabot]

Bumps golang.org/x/sys from 0.43.0 to 0.45.0.

Commits

• 397d5f8 unix: update to Linux kernel 7.0
• 0a387f7 cpu: detect zbc extension on riscv64
• 758f71c cpu: add LLACQ_SCREL, SCQ, DBAR_HINTS detection for loong64
• 99666ae unix: merge Linux readv/writev implementation with Darwin/OpenBSD
• e4444cb windows: add NtSetEaFile, NtQueryEaFile and NtQueryInformationFile
• 04396e8 unix: add Readv, Writev, Preadv, Pwritev for OpenBSD
• fb1facd windows: avoid uint16 overflow in NewNTUnicodeString
• 94ad893 windows: add GetIfTable2Ex, GetIpInterface{Entry,Table}, GetUnicastIpAddressT...
• 54fe89f cpu: use IsProcessorFeaturePresent to calculate ARM64 on windows
• df7d5d7 unix: automatically remove container created by mkall.sh
• Additional commits viewable in compare view

[swirlds-automation]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[brunodam]

@dependabot rebase

[brunodam]

Dependabot review — no supply-chain concerns, one correctness note

Reviewed the diff for golang.org/x/sys: v0.43.0 -> v0.45.0 (Go module, direct dependency).

Supply-chain checks (clean):

• Author is app/dependabot; branch is dependabot/go_modules/golang.org/x/sys-0.44.0.
• Diff is scoped to go.mod and go.sum only — no unexpected file changes.
• go mod verify passes on the new checksums.
• Upstream v0.43.0...v0.45.0 compare (12 commits, 90 files): all changes are typical golang.org/x/sys content — syscall plumbing, generated zerrors_* / zsyscall_* / ztypes_* tables, new Linux affinity helpers (unix/readv_unix.go, unix/affinity_linux.go), and new Windows CPU/xattr support (cpu/cpu_windows.go, windows/xattr_test.go). No new network calls, no init-time side effects, no obfuscated payloads.
• This is a Google-maintained golang.org/x/* module — commits flow through the standard Go review process.
• Snyk + Wiz security scanners on this PR are green.

Note (non-security, correctness):

The PR updates go.mod/go.sum but does not update the vendored source. Per CLAUDE.md, the repo vendors all dependencies and vendor/golang.org/x/sys/ still contains the v0.43.0 sources. Build appears to pass, but the binary may not actually pick up the new code until go mod vendor is run on the branch. Worth regenerating the vendor tree before merging so the changes actually land.

Recommendation: Safe from a supply-chain standpoint. Run go mod vendor on the PR branch before merging.

Automated review by Claude. Findings flagged for human verification — this is a second pair of eyes, not a replacement for human review.

[brunodam]

LGTM