Skip to content

fix(deps): update module golang.org/x/net to v0.56.0 [security] - abandoned - #43

Open
alaudaa-renovate[bot] wants to merge 1 commit into
alauda-v1.33.7from
renovate/go-golang.org-x-net-vulnerability
Open

fix(deps): update module golang.org/x/net to v0.56.0 [security] - abandoned#43
alaudaa-renovate[bot] wants to merge 1 commit into
alauda-v1.33.7from
renovate/go-golang.org-x-net-vulnerability

Conversation

@alaudaa-renovate

@alaudaa-renovate alaudaa-renovate Bot commented Aug 1, 2026

Copy link
Copy Markdown

This PR contains the following updates:

Package Change Age Confidence
golang.org/x/net v0.55.0 -> v0.56.0 age confidence

Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage

BIT-golang-2026-46600 / CVE-2026-46600 / GO-2026-5942

More information

Details

Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer.

Severity

Unknown

References

This data is provided by OSV and the Go Vulnerability Database (CC-BY 4.0).


Configuration

📅 Schedule: Branch creation - "" in timezone Asia/Shanghai, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@alaudaa-renovate alaudaa-renovate Bot added the dependencies Pull requests that update a dependency file label Aug 1, 2026
@alaudaa-renovate

Copy link
Copy Markdown
Author

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 7 additional dependencies were updated

Details:

Package Change
golang.org/x/crypto v0.51.0 -> v0.53.0
golang.org/x/sync v0.20.0 -> v0.21.0
golang.org/x/sys v0.45.0 -> v0.46.0
golang.org/x/term v0.43.0 -> v0.44.0
golang.org/x/tools v0.44.0 -> v0.45.0
golang.org/x/mod v0.35.0 -> v0.36.0
golang.org/x/text v0.37.0 -> v0.38.0
File name: staging/src/k8s.io/kubectl/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 5 additional dependencies were updated

Details:

Package Change
golang.org/x/sys v0.45.0 -> v0.46.0
golang.org/x/sync v0.20.0 -> v0.21.0
golang.org/x/term v0.43.0 -> v0.44.0
golang.org/x/text v0.37.0 -> v0.38.0
golang.org/x/tools v0.44.0 -> v0.45.0

@alaudaa-renovate alaudaa-renovate Bot changed the title fix(deps): update module golang.org/x/net to v0.56.0 [security] fix(deps): update module golang.org/x/net to v0.56.0 [security] - abandoned Aug 24, 2026
@alaudaa-renovate

Copy link
Copy Markdown
Author

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant