[4.0.8] Bump golang.org/x modules and align Go version to 1.25.14

[bbrks]

Latest golang.org/x/* releases that Go 1.25 will take:

golang.org/x/crypto v0.41.0 => v0.55.0
golang.org/x/net    v0.43.0 => v0.58.0
golang.org/x/oauth2 v0.30.0 => v0.36.0
golang.org/x/sys    v0.35.0 => v0.47.0
golang.org/x/text   v0.28.0 => v0.41.0
golang.org/x/time    v0.5.0 => v0.15.0

x/crypto stops at v0.55.0 - v0.56.0 needs go1.26.0. x/exp left alone, it's pseudo-versioned with no tagged releases.

Also nudged Go 1.25.13 -> 1.25.14 in go.mod, ci.yml, service.yml and the Jenkinsfile to match what manifest/product-config.json actually builds 4.0.8 with.

go build, go vet, yamllint and the unit suite all pass locally with cb_sg_enterprise,cb_sg_devmode.

🤖 Generated with Claude Code

[Copilot]

🔵 Needs a closer look

Dependency/toolchain version bumps can have broad build/runtime impact and should be validated via CI and a quick human sanity check of the stated source-of-truth alignment.

Pull request overview

Updates the Go toolchain version and several golang.org/x/* dependencies for the 4.0.8 release line to match the intended build/CI environment and supported module versions.

Changes:

• Bumps go directive in go.mod from 1.25.13 to 1.25.14.
• Upgrades golang.org/x/{crypto,net,oauth2,sys,text,time} to newer versions and refreshes go.sum.
• Aligns CI/Jenkins Go version pins to 1.25.14.

File summaries

File	Description
Jenkinsfile	Updates Jenkins Go tool version to 1.25.14.
go.mod	Bumps Go version and updates golang.org/x/* dependency requirements.
go.sum	Updates checksums to match the upgraded golang.org/x/* modules.
.github/workflows/service.yml	Aligns service workflow Go version to 1.25.14.
.github/workflows/ci.yml	Aligns CI workflow Go version to 1.25.14 across jobs.

Review details

• Files reviewed: 4/5 changed files
• Comments generated: 1
• Review effort level: Lite

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.