It's a bit confusing that go.mod has already been updated to 1.36.10, but the go/private/repositories.bzl has not been.
This should resolve compatibility issues with recent releases of buf.build/go/protovalidate that otherwise require a hand-curated http_archive and patch to make work, which is rather inconvenient.
Anyway, please update this when you get a chance.
(I'd send a PR, but you don't want those, so...)