chore: go version & sonic dep

[seefs001]

Summary by CodeRabbit

• Chores
  • Upgraded the Go runtime to version 1.25.1.
  • Updated multiple third-party dependencies to newer versions.
  • Removed an obsolete indirect dependency.
  • Adjusted module metadata to reflect these updates.
  • No changes to public APIs or user-facing behavior.

[coderabbitai]

Walkthrough

Updates the Go toolchain to 1.25.1 and refreshes dependencies in go.mod, including version bumps for several libraries and removal of one indirect dependency.

Changes

Cohort / File(s)	Summary
Go toolchain go.mod	Set toolchain to go 1.25.1 (replacing previous 1.24.x line).
Dependency updates go.mod	Bumped: github.com/bytedance/gopkg → v0.1.3; github.com/bytedance/sonic → v1.14.1 (indirect) and loader → v0.3.0 (indirect); github.com/cloudwego/base64x → v0.1.6 (indirect); github.com/klauspost/cpuid/v2 → v2.3.0 (indirect); golang.org/x/arch → v0.21.0 (indirect).
Dependency removal go.mod	Removed indirect: github.com/cloudwego/iasm.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Poem

Thump-thump go my paws—update time, hooray!
New Go hops in, 1.25 leads the way.
Dependencies trimmed, some fresh, some gone—
I nibble tidy modules at dawn.
With whiskers twitching, I merge and say:
Ship it swift—hip hop, all the way! 🥕🐇

Pre-merge checks and finishing touches

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title Check	✅ Passed	The title succinctly references the two key updates—upgrading the Go toolchain and updating the Sonic dependency—which directly correspond to the primary changes in the pull request and clearly communicates the scope of the chore without unnecessary detail.
Docstring Coverage	✅ Passed	No functions found in the changes. Docstring coverage check skipped.

✨ Finishing touches

🧪 Generate unit tests

• Create PR with unit tests
• Post copyable unit tests in a comment

---

📜 Recent review details

Configuration used: CodeRabbit UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 7533ffc and c4e0fc1.

⛔ Files ignored due to path filters (1)

• go.sum is excluded by !**/*.sum

📒 Files selected for processing (1)

• go.mod (5 hunks)

🔇 Additional comments (4)

go.mod (4)

14-14: Confirm v0.1.3 release and no security issues found

Version v0.1.3 is present in the bytedance/gopkg releases and no vulnerability alerts were detected.

---

4-4: Go version bump confirmed; proceed with dependency review.

• go1.25.1 exists and is the latest stable release.
• Please verify that all updated dependencies (bytedance/gopkg v0.1.3, sonic v1.14.1 & loader v0.3.0, base64x v0.1.6, cpuid/v2 v2.3.0, arch v0.21.0) have no known vulnerabilities or breaking changes.

---

48-110: Confirmed removal of cloudwego/iasm. No imports or usages remain in the codebase.

---

54-55: Verify significant version jumps in indirect dependencies.

Automated vulnerability scanning failed due to Go version mismatch (module requires Go 1.25; runner uses Go 1.24). Please upgrade your Go toolchain to ≥ 1.25 and re-run:

go install golang.org/x/vuln/cmd/govulncheck@latest
govulncheck ./...

Meanwhile, manually review changelogs for potential breaking changes or vulnerabilities:

• github.com/bytedance/sonic v1.11.6 → v1.14.1: https://github.com/bytedance/sonic/releases
• github.com/bytedance/sonic/loader v0.1.1 → v0.3.0: https://github.com/bytedance/sonic/tree/master/loader
• golang.org/x/arch v0.12.0 → v0.21.0: https://pkg.go.dev/golang.org/x/arch?tab=changelog

Ensure no issues were introduced.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

🧪 Early access (Sonnet 4.5): enabled

We are currently testing the Sonnet 4.5 model, which is expected to improve code review quality. However, this model may lead to increased noise levels in the review comments. Please disable the early access features if the noise level causes any inconvenience.

Note:

• Public repositories are always opted into early access features.
• You can enable or disable early access features from the CodeRabbit UI or by updating the CodeRabbit configuration file.

_{Comment @coderabbitai help to get the list of available commands and usage tips.}