build(deps): bump github.com/goceleris/celeris from 1.5.7 to 1.5.8 in /internal/integrationtest/testserver in the all-go-deps group

[dependabot]

Bumps the all-go-deps group in /internal/integrationtest/testserver with 1 update: github.com/goceleris/celeris.

Updates github.com/goceleris/celeris from 1.5.7 to 1.5.8

Release notes

Sourced from github.com/goceleris/celeris's releases.

v1.5.8 — WebSocket-upgrade crash fix + Context/stream use-after-recycle + H2/overload hardening

A correctness-focused release. Validated with a clean 24h weekend soak (0 high-severity invariant violations, both amd64 + arm64) and an interleaved A/B benchmark showing no performance regression vs v1.5.7.

Fixes

• WebSocket-upgrade crash (chanReader send-on-closed-channel panic). Redesigned around a done-channel: Append/Read select on a done channel that is closed exactly once, and r.ch is never closed — eliminating the send on closed channel panic when a peer RSTs mid-upgrade.
• Context/stream use-after-recycle in the epoll + io_uring engines. closeConn/shutdown could recycle a connection's cached Context+stream (via ReleaseContext/stream.Release) while an async WS upgrade was still running, nil-dereferencing WSRawWriteFn. Fixed by publishing Detached before releasing detachMu and re-reading it under the lock before CloseH1 (both engines).
• #406 — H2 write-queue shard hash. streamID % 4 collapsed always-odd client stream IDs onto 2 of 4 shards; (streamID>>1) % 4 spreads them across all four while preserving per-stream FIFO. (Closes #406)
• #407 — overload Reap GC once-on-entry. runtime.GC() was forced on every poll tick while in the Reap band; now it fires once on entry — removing a ~99% share of forced STW pause time under sustained moderate load. (Closes #407)
• #408 — H2 inline-response direct-outBuf bypass. Small inline H2 GET/HEAD responses now write straight to outBuf, skipping the sharded queue + eventfd self-wake (~10% faster inline responses in isolation), with the inline writer kept a stream.Streamer so SSE-over-H2 doesn't 500. (Closes #408)

Notes

• CI toolchain bumped to Go 1.26.5 (crypto/tls GO-2026-5856).

Full validation + benchmark methodology: probatorium PR #411.

Commits

• 4bdcef6 Merge pull request #411 from goceleris/fix/ws-chanreader-send-on-closed
• 1facc51 ci: clear v1.5.8 lint + vuln gate (ineffassign dead-store, Go 1.26.5)
• 80af765 Merge H2/overload perf fixes (#406/#407/#408) into v1.5.8
• 32e51d8 perf(h2): realize the inline-response outBuf bypass safely — celeris#408
• bcdc8f1 fix(overload): fire Reap GC once on entry, not every poll tick — celeris#407
• d7ade0f fix(h2): spread write-queue shards across all 4 (streamID>>1) — celeris#406
• 1fb051c perf(websocket): drop dead <-r.done case from chanReader Append
• 477df86 fix(iouring): port Context/stream use-after-recycle fix from epoll (e100873)
• e100873 fix(epoll): close Context/stream use-after-recycle on RST mid-upgrade
• 6449d07 fix(epoll): stop event loop racing cs.writeFn against async Detach
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions