CGA-8rf5-6qv5-r2p2

This CVE is introduced by a transitive dependency on wandb. There is already a fix upstream with the bump to the x/net to v0.38.0 and we now need for upstreamt to cut a release with the fix. More info at: https://github.com/wandb/wandb/pull/9743