fix(deps): use new golang.org/x/
* add a tested version