fix(chi): CVE GO-2025-3770

[thejoeejoee]

Motivation / Background

get rid of CVE https://pkg.go.dev/vuln/GO-2025-3770

Details

Alternative approaches considered (if applicable)

Checklist

The resources of our team are limited. There are a couple of things that you can do to help us merge your PR faster:

• I wrote tests for the changes.
• All tests are passing.
  • If you are testing a Pub/Sub, you can start Docker with make up.
  • You can start with make test_short for a quick check.
  • If you want to run all tests, use make test.
• Code has no breaking changes.
• (If applicable) documentation on watermill.io is updated.
  • Documentation is built in the github.com/ThreeDotsLabs/watermill/docs.
  • You can find development instructions in the DEVELOP.md.

[laouji]

Hi can you also update the import in pkg/http/sse_test.go so that we get rid of the v4 import entirely?

[thejoeejoee]

fixed

[thejoeejoee]

@laouji would you mind to do a CR? thanks