Skip to content

chore(deps): update module golang.org/x/net to v0.56.0 [security] - autoclosed - #3413

Closed
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/go-golang.org-x-net-vulnerability
Closed

chore(deps): update module golang.org/x/net to v0.56.0 [security] - autoclosed#3413
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/go-golang.org-x-net-vulnerability

Conversation

@renovate

@renovate renovate Bot commented Jul 22, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
golang.org/x/net v0.55.0 → v0.56.0 age confidence

Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage

BIT-golang-2026-46600 / CVE-2026-46600 / GO-2026-5942

More information

Details

Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer.

Severity

Unknown

References

This data is provided by OSV and the Go Vulnerability Database (CC-BY 4.0).

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added automated Created by automation security Security-related issues and features labels Jul 22, 2026
@renovate

renovate Bot commented Jul 22, 2026

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: api/apps/v1alpha1/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 1 additional dependency was updated

Details:

Package Change
golang.org/x/text v0.37.0 -> v0.38.0
File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 7 additional dependencies were updated

Details:

Package Change
golang.org/x/crypto v0.52.0 -> v0.53.0
golang.org/x/mod v0.35.0 -> v0.36.0
golang.org/x/sync v0.20.0 -> v0.21.0
golang.org/x/sys v0.45.0 -> v0.46.0
golang.org/x/term v0.43.0 -> v0.44.0
golang.org/x/text v0.37.0 -> v0.38.0
golang.org/x/tools v0.44.0 -> v0.45.0

@github-actions github-actions Bot added area/dependencies Dependency bumps (Renovate, go.mod); scope `deps` kind/cleanup Categorizes issue or PR as related to cleanup of code, process, or technical debt size/S This PR changes 10-29 lines, ignoring generated files labels Jul 22, 2026
@renovate renovate Bot changed the title chore(deps): update module golang.org/x/net to v0.56.0 [security] chore(deps): update module golang.org/x/net to v0.56.0 [security] - autoclosed Jul 30, 2026
@renovate renovate Bot closed this Jul 30, 2026
@renovate
renovate Bot deleted the renovate/go-golang.org-x-net-vulnerability branch July 30, 2026 08:57
@renovate renovate Bot changed the title chore(deps): update module golang.org/x/net to v0.56.0 [security] - autoclosed chore(deps): update module golang.org/x/net to v0.56.0 [security] Jul 30, 2026
@renovate renovate Bot reopened this Jul 30, 2026
@renovate
renovate Bot force-pushed the renovate/go-golang.org-x-net-vulnerability branch 2 times, most recently from 3364b82 to 61c5104 Compare July 30, 2026 09:06
@renovate renovate Bot changed the title chore(deps): update module golang.org/x/net to v0.56.0 [security] chore(deps): update module golang.org/x/net to v0.56.0 [security] - autoclosed Aug 7, 2026
@renovate renovate Bot closed this Aug 7, 2026
@renovate renovate Bot changed the title chore(deps): update module golang.org/x/net to v0.56.0 [security] - autoclosed chore(deps): update module golang.org/x/net to v0.56.0 [security] Aug 7, 2026
@renovate renovate Bot reopened this Aug 7, 2026
@renovate
renovate Bot force-pushed the renovate/go-golang.org-x-net-vulnerability branch 2 times, most recently from 61c5104 to a4470af Compare August 7, 2026 20:59
@renovate renovate Bot changed the title chore(deps): update module golang.org/x/net to v0.56.0 [security] chore(deps): update module golang.org/x/net to v0.56.0 [security] - autoclosed Aug 11, 2026
@renovate renovate Bot closed this Aug 11, 2026
@renovate renovate Bot changed the title chore(deps): update module golang.org/x/net to v0.56.0 [security] - autoclosed chore(deps): update module golang.org/x/net to v0.56.0 [security] Aug 11, 2026
@renovate renovate Bot reopened this Aug 11, 2026
@renovate renovate Bot changed the title chore(deps): update module golang.org/x/net to v0.56.0 [security] chore(deps): update module golang.org/x/net to v0.56.0 [security] - autoclosed Aug 18, 2026
@renovate renovate Bot closed this Aug 18, 2026
@renovate renovate Bot changed the title chore(deps): update module golang.org/x/net to v0.56.0 [security] - autoclosed chore(deps): update module golang.org/x/net to v0.56.0 [security] Aug 18, 2026
@renovate renovate Bot reopened this Aug 18, 2026
@renovate
renovate Bot force-pushed the renovate/go-golang.org-x-net-vulnerability branch 2 times, most recently from c0e2318 to 76075f5 Compare August 18, 2026 14:26
@renovate
renovate Bot force-pushed the renovate/go-golang.org-x-net-vulnerability branch 2 times, most recently from 630291b to f0166d1 Compare August 28, 2026 08:53
@renovate renovate Bot changed the title chore(deps): update module golang.org/x/net to v0.56.0 [security] chore(deps): update module golang.org/x/net to v0.56.0 [security] - autoclosed Aug 30, 2026
@renovate renovate Bot closed this Aug 30, 2026
@renovate renovate Bot changed the title chore(deps): update module golang.org/x/net to v0.56.0 [security] - autoclosed chore(deps): update module golang.org/x/net to v0.56.0 [security] Aug 31, 2026
@renovate renovate Bot reopened this Aug 31, 2026
@renovate
renovate Bot force-pushed the renovate/go-golang.org-x-net-vulnerability branch 2 times, most recently from f0166d1 to 6dcf80c Compare August 31, 2026 00:33
@renovate renovate Bot changed the title chore(deps): update module golang.org/x/net to v0.56.0 [security] chore(deps): update module golang.org/x/net to v0.56.0 [security] - autoclosed Aug 31, 2026
@renovate renovate Bot closed this Aug 31, 2026
@renovate renovate Bot changed the title chore(deps): update module golang.org/x/net to v0.56.0 [security] - autoclosed chore(deps): update module golang.org/x/net to v0.56.0 [security] Aug 31, 2026
@renovate renovate Bot reopened this Aug 31, 2026
@renovate
renovate Bot force-pushed the renovate/go-golang.org-x-net-vulnerability branch 2 times, most recently from 6dcf80c to 5f3f10a Compare August 31, 2026 18:27
@renovate renovate Bot changed the title chore(deps): update module golang.org/x/net to v0.56.0 [security] chore(deps): update module golang.org/x/net to v0.56.0 [security] - autoclosed Aug 31, 2026
@renovate renovate Bot closed this Aug 31, 2026
@renovate renovate Bot changed the title chore(deps): update module golang.org/x/net to v0.56.0 [security] - autoclosed chore(deps): update module golang.org/x/net to v0.56.0 [security] Sep 1, 2026
@renovate renovate Bot reopened this Sep 1, 2026
@renovate
renovate Bot force-pushed the renovate/go-golang.org-x-net-vulnerability branch 2 times, most recently from 5f3f10a to d264bd3 Compare September 1, 2026 00:40
@renovate renovate Bot changed the title chore(deps): update module golang.org/x/net to v0.56.0 [security] chore(deps): update module golang.org/x/net to v0.56.0 [security] - autoclosed Sep 1, 2026
@coderabbitai

coderabbitai Bot commented Sep 15, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository: cozystack/cozystack/.coderabbit.yaml

Review profile: CHILL

Plan: Advanced

Run ID: 8d936d25-60e2-4f1b-af96-66bce36f179e

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@lexfrei Aleksei Sviridkin (lexfrei) mentioned this pull request Sep 24, 2026
Merged
1 of 12 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@kvaps Andrei Kvapil (kvaps) Awaiting requested review from kvaps kvaps is a code owner
@lllamnyp Timofei Larkin (lllamnyp) Awaiting requested review from lllamnyp lllamnyp is a code owner
@lexfrei Aleksei Sviridkin (lexfrei) Awaiting requested review from lexfrei lexfrei is a code owner
@androndo Andrey Kolkov (androndo) Awaiting requested review from androndo
@IvanHunters IvanHunters Awaiting requested review from IvanHunters IvanHunters is a code owner
@sircthulhu Kirill Ilin (sircthulhu) Awaiting requested review from sircthulhu sircthulhu is a code owner
@myasnikovdaniil myasnikovdaniil Awaiting requested review from myasnikovdaniil myasnikovdaniil is a code owner

Assignees

No one assigned

Labels

area/dependencies Dependency bumps (Renovate, go.mod); scope `deps` automated Created by automation kind/cleanup Categorizes issue or PR as related to cleanup of code, process, or technical debt security Security-related issues and features size/S This PR changes 10-29 lines, ignoring generated files

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants