Update module golang.org/x/oauth2 to v0.27.0 [SECURITY]

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
golang.org/x/oauth2	v0.21.0 → v0.27.0

GitHub Vulnerability Alerts

CVE-2025-22868

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 46.45%. Comparing base (b47170d) to head (6bea225).

Additional details and impacted files

@@             Coverage Diff              @@
##               main    #2396      +/-   ##
============================================
+ Coverage     43.76%   46.45%   +2.69%     
============================================
  Files           275       34     -241     
  Lines         13243     4107    -9136     
  Branches       1328        0    -1328     
============================================
- Hits           5796     1908    -3888     
+ Misses         6857     2000    -4857     
+ Partials        590      199     -391     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.22.0 -> 1.23.0