chore(deps): bump the go_modules group across 1 directory with 3 updates

[dependabot[bot]]

Bumps the go_modules group with 3 updates in the /prover directory: golang.org/x/crypto, golang.org/x/net and github.com/ethereum/go-ethereum.

Updates golang.org/x/crypto from 0.31.0 to 0.35.0

Commits

• 7292932 ssh: limit the size of the internal packet queue while waiting for KEX
• f66f74b acme/autocert: check host policy before probing the cache
• b0784b7 x509roots/fallback: drop obsolete build constraint
• 911360c all: bump golang.org/x/crypto dependencies of asm generators
• 89ff08d all: upgrade go directive to at least 1.23.0 [generated]
• e47973b all: update certs for go1.24
• 9290511 go.mod: update golang.org/x dependencies
• fa5273e x509roots/fallback: update bundle
• a8ea4be ssh: add ServerConfig.PreAuthConnCallback, ServerPreAuthConn (banner) interface
• 71d3a4c acme: support challenges that require the ACME client to send a non-empty JSO...
• Additional commits viewable in compare view

Updates golang.org/x/net from 0.27.0 to 0.36.0

Commits

• 85d1d54 go.mod: update golang.org/x dependencies
• cde1dda proxy, http/httpproxy: do not mismatch IPv6 zone ids against hosts
• fe7f039 publicsuffix: spruce up code gen and speed up PublicSuffix
• 459513d internal/http3: move more common stream processing to genericConn
• aad0180 http2: fix flakiness from t.Log when GOOS=js
• b73e574 http2: don't log expected errors from writing invalid trailers
• 5f45c77 internal/http3: make read-data tests usable for server handlers
• 43c2540 http2, internal/httpcommon: reject userinfo in :authority
• 1d78a08 http2, internal/httpcommon: factor out server header logic for h2/h3
• 0d7dc54 quic: add Conn.ConnectionState
• Additional commits viewable in compare view

Updates github.com/ethereum/go-ethereum from 1.14.8 to 1.14.13

Release notes

Sourced from github.com/ethereum/go-ethereum's releases.

Schwarzschild (v1.14.13)

This is a security release, fixing a vulnerability (CVE-2025-24883).

Please update your nodes ASAP.

---

As with all our previous releases, you can find the:

• Pre-built binaries for all platforms on our downloads page.
• Docker images published under ethereum/client-go.
• Ubuntu packages in our Launchpad PPA repository.
• OSX packages in our Homebrew Tap repository.

Gei Hinnom (v1.14.12)

This release covers quite a lot of time, and has many changes across the codebase. In particular; changes in tracing and account management, optimizations in database, trie and evm, and, as always bugfixes.

This release removes the personal RPC namespace. It was already previously deprecated, and has not been accessible by default for nearly two years. We also removed the --unlock command-line parameter, with a view towards removing key/account management from the geth binary.

• Key management:
  • Remove --unlock command line flag from geth (#30737)
  • Remove personal RPC namespace (#30704)
• Builds:
  • RISC-V docker images (#30739)
  • ppa-builds for ubuntu 24.10 (#30580)
• Tracing:
  • invoke OnCodeChange-hook on selfdestruct (#30686, #30497)
  • improvements to flatCallTracer (#30539)
  • invoke tx-end hook in runtime helpers (#30711)
  • disableCode and disableStorage options for prestateTracer (#30648)
  • tracing of system calls (#30666)
  • Change to how chainconfig is passed to tracers (breaking change) (#30540)
  • add GetTransientState method to StateDB interface (#30531)
• Signing:
  • improved support for EIP-712 array types (#30620)
  • non-legacy transactions support for ledger wallets (#30180)
• Bugfixes:
  • Set basefee for AccessList based on given block, not chain tip (#30538)
  • Multiple issues in benchmarks (#30667)
  • Fix bug with resolving a payload (#30615)
• Database optimizations
  • Run pebble in non-sync mode (#30573, #29792). This change makes quite a big difference on certain OS:es, particularly MacOSX/Darwin, where it has been noted that fsync is notoriously slow.
  • Use to increasing level sizes (#30602), This change makes pebble use larger files, reducing the number of files from 160K to 10K.
• Assorted:
  • Make jwtsecretflag expand tilde
  • Work on verkle (#30672)
  • Work on EIP-7002 and EIP 7251 (#30571)
  • Implement EIP-7685 and EIP-6110 (flat requests enconding) (#30425)
  • Validation of EOF containers (#30418)

... (truncated)

Commits

• eb00f16 version: release go-ethereum v1.14.13 stable
• 159fb1a crypto: add IsOnCurve check (#31100)
• db93d49 build: retry PPA upload up to three times (#31099)
• 293a300 version: go-ethereum v1.14.12 stable
• f3c19b1 rpc: run tests in parallel (#30384)
• 71b32b4 core/txpool, eth/catalyst: clear transaction pool in Rollback (#30534)
• 9e959db all: remove kilic dependency from bls12381 fuzzers (#30296)
• ed7bac0 core: fix typos (#30767)
• a7ef9d6 build: upgrade -dlgo version to Go 1.23.3 (#30742)
• 55b18e9 cmd/geth: remove unlock commandline flag (#30737)
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions You can disable automated security fix PRs for this repo from the Security Alerts page.

Note Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[cla-assistant[bot]]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[cla-assistant[bot]]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[github-actions[bot]]

PR has had no activity for 30 days. What is blocking it? Is there anything you can do to help move it forward? Without action it will be closed in 7 days.

[alainncls]

@dependabot rebase