fix(sec): upgrade golang.org/x/net to 0.7.0

[chncaption]

What happened？

There are 1 security vulnerabilities found in golang.org/x/net v0.4.0

• CVE-2022-41723

What did I do？

Upgrade golang.org/x/net from v0.4.0 to 0.7.0 for vulnerability fix

What did you expect to happen？

Ideally, no insecure libs should be used.

The specification of the pull request

PR Specification from OSCS

[holiman]

I'm not sure how you did this upgrade -- did you just manually modify the file?

golang.org/x/net v0.7.0 // indirect

As you see, this is an indirect dependency, meaning that we require something that pulls this dependency in. If we want to upgrade this component, the right thing to do is to find the dependency which pulls this in, and update that one.

I looked at it a little bit earlier, and was a bit surprised at how non-trivial that turned out to be (maybe just me being stupid). Going to close this, feel free to open a new one if you figure out the correct way to do it.

[holiman]

Prevous discussion: #26724