Bump github.com/antchfx/xpath

Bumps the go_modules group with 1 update in the /go/ql/test/query-tests/Security/CWE-643 directory: [github.com/antchfx/xpath](https://github.com/antchfx/xpath).


Updates `github.com/antchfx/xpath` from 1.1.5 to 1.3.6
- [Release notes](https://github.com/antchfx/xpath/releases)
- [Commits](antchfx/xpath@v1.1.5...v1.3.6)

---
updated-dependencies:
- dependency-name: github.com/antchfx/xpath
  dependency-version: 1.3.6
  dependency-type: direct:production
  dependency-group: go_modules
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

go/ql/test/query-tests/Security/CWE-643/go.mod

@@ -1,28 +1,24 @@
 module main
 
-go 1.21
+go 1.25.0
 
 require (
 	github.com/ChrisTrenkamp/goxpath v0.0.0-20190607011252-c5096ec8773d
 	github.com/antchfx/htmlquery v1.2.2
 	github.com/antchfx/jsonquery v1.1.2
 	github.com/antchfx/xmlquery v1.2.3
-	github.com/antchfx/xpath v1.1.5
+	github.com/antchfx/xpath v1.3.6
 	github.com/go-xmlpath/xmlpath v0.0.0-20150820204837-860cbeca3ebc
 	github.com/jbowtie/gokogiri v0.0.0-20190301021639-37f655d3078f
 	github.com/lestrrat-go/libxml2 v0.0.0-20231124114421-99c71026c2f5
 	github.com/santhosh-tekuri/xpathparser v1.0.0
 )
 
 require (
-	github.com/davecgh/go-spew v1.1.1 // indirect
+	github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 // indirect
 	github.com/pkg/errors v0.9.1 // indirect
-	github.com/pmezard/go-difflib v1.0.0 // indirect
-	github.com/stretchr/objx v0.5.0 // indirect
-	github.com/stretchr/testify v1.8.4 // indirect
+	golang.org/x/net v0.52.0 // indirect
+	golang.org/x/text v0.35.0 // indirect
 	gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 // indirect
-	gopkg.in/xmlpath.v1 v1.0.0-20140413065638-a146725ea6e7 // indirect
-	gopkg.in/yaml.v3 v3.0.1 // indirect
-	launchpad.net/gocheck v0.0.0-20140225173054-000000000087 // indirect
-	launchpad.net/xmlpath v0.0.0-20130614043138-000000000004 // indirect
+	gopkg.in/xmlpath.v2 v2.0.0-20150820204837-860cbeca3ebc // indirect
 )