go 1.21.3

[stefanb]

Announcement: https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo
Release notes: https://go.dev/doc/devel/release#go1.21.3

go1.21.3 (released 2023-10-10) includes a security fix to the net/http package. See the Go 1.21.3 milestone on our issue tracker for details.

Other links:

• https://www.cve.org/CVERecord?id=CVE-2023-44487
• https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/
• https://groups.google.com/g/golang-announce/c/XIujkcMT56U
• https://go.dev/dl/
• net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-39325) golang/go#63417
• security: fix CVE-2023-39325 [1.21 backport] golang/go#63427
• https://dev.golang.org/release#Go1.21.3

---

• Have you followed the guidelines for contributing?
• Have you ensured that your commits follow the commit style guide?
• Have you checked that there aren't other open pull requests for the same formula update/change?
• Have you built your formula locally with HOMEBREW_NO_INSTALL_FROM_API=1 brew install --build-from-source <formula>, where <formula> is the name of the formula you're submitting?
• Is your test running fine brew test <formula>, where <formula> is the name of the formula you're submitting?
• Does your build pass brew audit --strict <formula> (after doing HOMEBREW_NO_INSTALL_FROM_API=1 brew install --build-from-source <formula>)? If this is a new formula, does it pass brew audit --new <formula>?

---

[stefanb]

Interestingly it didn't get the "go" tag as did #150459. Same happened with go 1.21.2 PR.

[p-linnane]

The labelling workflow looks for depends_on "go(@[0-9.]+)?" in order to label PR's with the go label. Since this formula doesn't have that, it wasn't labelled.

[github-actions]

🤖 An automated task has requested bottles to be published to this PR.