You have to update the dependencies as well. I’ll add the commit.

@uri-canva buildTools is not a go package, but uses bazel. It’s not really clear to me how the dependencies should be updated.

@Profpatsch I am assuming we should use go2nix but I haven't looked more into it.

Yes, that is correct, there's also a newer mechanism buildGoModule but I don't think we can use that for this particular derivation because it's missing the required files: https://kalbas.it/2019/03/17/announcing-the-new-golang-infrastructure-buildgomodule/.

I’m unsure whether we should merge this without also making sure the dependencies are up-to-date.

I think it's better not to, even if superficial testing might show it to be working, there might be subtle bugs compared to upstream if we're not using the same versions of dependencies.

Closing in favor of #64537 bumping to an even newer version.