fix(security): [Aikido] [SEC-728] Fix security issue in x/text via minor version upgrade from 0.22.0 to 0.39.0

[aikido-autofix]

Upgrade golang.org/x/text to fix infinite loop DoS vulnerability in norm.Iter when processing invalid UTF-8 bytes.

✅ 1 CVE resolved by this upgrade

This PR will resolve the following CVEs:

Issue	Severity	Description
CVE-2026-56852	HIGH	[golang.org/x/text] A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.

[aikido-pr-checks]

CVE-2026-39824 in golang.org/x/sys - low severity
NewNTUnicodeString does not check for string length overflow. When provided with a string that overflows the maximum size of a NTUnicodeString (a 16-bit number of bytes), it returns a truncated string rather than an error.

Details

Remediation Aikido suggests bumping this package to version 0.44.0 to resolve this issue

_{Reply @AikidoSec ignore: [REASON] to ignore this issue.
More info}

[ChristianWitts]

Approving Aikido security autofix — CI is green. Owning team: please give this a final review and merge.

[kelu-diao]

Approving as part of the batch PR review requested in Slack — CI checks are green. Owning team: please do the final review and merge.

---

Generated by Claude Code