Update server dependencies

[rongxin-liu]

Summary

• Updates Go dependency pins across server, Go plugins, and plugin contract tests.
• Refreshes go.sum files and go.work.sum for the updated workspace graph.
• Moves plugin modules to the current server pseudo-version and updates key transitive dependencies including pgx, golang.org/x/*, and genproto.

Validation

• cd plugin/antminer && go test ./...
• cd plugin/virtual && go test ./...
• cd plugin/proto && go test -short ./...
• cd server && go test ./... (local DB-backed tests could not connect to Postgres/Timescale at 127.0.0.1:5432)
• cd plugin/proto && go test ./... (Docker-backed sim-miner integration tests could not create a rootless Docker provider locally)
• cd tests/plugin-contract && go test ./... (local host environment was not suitable for direct contract execution: Linux/arm64 plugin binary, port 80 permission, and port 4028 already in use)

[github-actions]

🔐 Codex Security Review

Note: This is an automated security-focused code review generated by Codex.
It should be used as a supplementary check alongside human review.
False positives are possible - use your judgment.

Scope summary

• Reviewed pull request diff only (75933fce45c269e41e0ba2b30cd33825b0389fa7...c80157c1177c4617a565af7c4fce94b1300205aa, exact PR three-dot diff)
• Model: gpt-5.5

💡 Click "edited" above to see previous reviews for this PR.

---

Review Summary

Overall Risk: NONE

Findings

No security, correctness, or reliability findings in the reviewed diff.

Notes

The authoritative diff .git/codex-review.diff only changes Go module manifests and checksum files:

• server/go.mod, server/go.sum
• plugin go.mod / go.sum files
• tests/plugin-contract/go.mod, tests/plugin-contract/go.sum
• go.work.sum

The changes are dependency version bumps and checksum updates. I found no changed auth, database, RPC handler, command execution, network discovery, plugin implementation, frontend, infrastructure, Rust, mining pool configuration, wallet/worker credential, protobuf, or generated-code behavior in this PR scope. No tests were run; this was a diff-only review.

---

_{Generated by Codex Security Review |
Triggered by: @rongxin-liu |
Review workflow run}

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.