Security and maintenance release. Minor version bump because the minimum required Go version for consumers is raised to 1.25.8.
- Bump the go.mod Go version to 1.25.8 (consumers must now run Go >= 1.25.8).
- Pin the Go toolchain in go.mod to the latest patch version, picking up upstream security and bugfix releases.
- Update dependencies flagged with security advisories: golang.org/x/net, otlptracehttp, moby/spdystream.
- Update go.k6.io/k6 to v1.7.1.