Skip to content

chore(deps): update module golang.org/x/text to v0.39.0 [security] - autoclosed - #3414

Closed
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/go-golang.org-x-text-vulnerability
Closed

chore(deps): update module golang.org/x/text to v0.39.0 [security] - autoclosed#3414
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/go-golang.org-x-text-vulnerability

Conversation

@renovate

@renovate renovate Bot commented Jul 22, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
golang.org/x/text v0.38.0 → v0.39.0 age confidence
golang.org/x/text v0.37.0 → v0.39.0 age confidence

Infinite loop on invalid input in golang.org/x/text

CVE-2026-56852 / GO-2026-5970

More information

Details

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.

Severity

Unknown

References

This data is provided by OSV and the Go Vulnerability Database (CC-BY 4.0).

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added automated Created by automation security Security-related issues and features labels Jul 22, 2026
@renovate

renovate Bot commented Jul 22, 2026

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 7 additional dependencies were updated

Details:

Package Change
golang.org/x/crypto v0.52.0 -> v0.53.0
golang.org/x/mod v0.35.0 -> v0.37.0
golang.org/x/net v0.55.0 -> v0.56.0
golang.org/x/sync v0.20.0 -> v0.21.0
golang.org/x/sys v0.45.0 -> v0.46.0
golang.org/x/term v0.43.0 -> v0.44.0
golang.org/x/tools v0.44.0 -> v0.47.0

@github-actions github-actions Bot added size/S This PR changes 10-29 lines, ignoring generated files area/dependencies Dependency bumps (Renovate, go.mod); scope `deps` kind/cleanup Categorizes issue or PR as related to cleanup of code, process, or technical debt labels Jul 22, 2026
@renovate renovate Bot changed the title chore(deps): update module golang.org/x/text to v0.39.0 [security] chore(deps): update module golang.org/x/text to v0.39.0 [security] - autoclosed Jul 30, 2026
@renovate renovate Bot closed this Jul 30, 2026
@renovate
renovate Bot deleted the renovate/go-golang.org-x-text-vulnerability branch July 30, 2026 08:57
@renovate renovate Bot changed the title chore(deps): update module golang.org/x/text to v0.39.0 [security] - autoclosed chore(deps): update module golang.org/x/text to v0.39.0 [security] Jul 30, 2026
@renovate renovate Bot reopened this Jul 30, 2026
@renovate
renovate Bot force-pushed the renovate/go-golang.org-x-text-vulnerability branch 2 times, most recently from 87050bb to 2546e7c Compare July 30, 2026 09:06
@renovate renovate Bot changed the title chore(deps): update module golang.org/x/text to v0.39.0 [security] chore(deps): update module golang.org/x/text to v0.39.0 [security] - autoclosed Jul 30, 2026
@renovate renovate Bot closed this Jul 30, 2026
@renovate renovate Bot changed the title chore(deps): update module golang.org/x/text to v0.39.0 [security] - autoclosed chore(deps): update module golang.org/x/text to v0.39.0 [security] Jul 30, 2026
@renovate renovate Bot reopened this Jul 30, 2026
@renovate
renovate Bot force-pushed the renovate/go-golang.org-x-text-vulnerability branch from 2546e7c to 0d12e78 Compare July 30, 2026 22:12
@renovate renovate Bot changed the title chore(deps): update module golang.org/x/text to v0.39.0 [security] chore(deps): update module golang.org/x/text to v0.39.0 [security] - autoclosed Aug 3, 2026
@renovate renovate Bot closed this Aug 3, 2026
@renovate renovate Bot changed the title chore(deps): update module golang.org/x/text to v0.39.0 [security] - autoclosed chore(deps): update module golang.org/x/text to v0.39.0 [security] Aug 3, 2026
@renovate renovate Bot reopened this Aug 3, 2026
@renovate
renovate Bot force-pushed the renovate/go-golang.org-x-text-vulnerability branch from 6d42b36 to 0d12e78 Compare August 3, 2026 11:32
@renovate
renovate Bot deleted the renovate/go-golang.org-x-text-vulnerability branch August 26, 2026 11:00
@renovate renovate Bot changed the title chore(deps): update module golang.org/x/text to v0.39.0 [security] - autoclosed chore(deps): update module golang.org/x/text to v0.39.0 [security] Aug 26, 2026
@renovate renovate Bot reopened this Aug 26, 2026
@renovate
renovate Bot force-pushed the renovate/go-golang.org-x-text-vulnerability branch 2 times, most recently from 4775e64 to 8019914 Compare August 26, 2026 11:27
@renovate renovate Bot changed the title chore(deps): update module golang.org/x/text to v0.39.0 [security] chore(deps): update module golang.org/x/text to v0.39.0 [security] - autoclosed Aug 28, 2026
@renovate renovate Bot closed this Aug 28, 2026
@renovate renovate Bot changed the title chore(deps): update module golang.org/x/text to v0.39.0 [security] - autoclosed chore(deps): update module golang.org/x/text to v0.39.0 [security] Aug 28, 2026
@renovate renovate Bot reopened this Aug 28, 2026
@renovate
renovate Bot force-pushed the renovate/go-golang.org-x-text-vulnerability branch from 8019914 to 02bf8c5 Compare August 28, 2026 11:08
@renovate renovate Bot changed the title chore(deps): update module golang.org/x/text to v0.39.0 [security] chore(deps): update module golang.org/x/text to v0.39.0 [security] - autoclosed Sep 1, 2026
@renovate renovate Bot closed this Sep 1, 2026
@renovate renovate Bot changed the title chore(deps): update module golang.org/x/text to v0.39.0 [security] - autoclosed chore(deps): update module golang.org/x/text to v0.39.0 [security] Sep 1, 2026
@renovate renovate Bot reopened this Sep 1, 2026
@renovate
renovate Bot force-pushed the renovate/go-golang.org-x-text-vulnerability branch 3 times, most recently from 1605ce6 to 648893d Compare September 7, 2026 16:29
@renovate
renovate Bot force-pushed the renovate/go-golang.org-x-text-vulnerability branch from 648893d to 8133e12 Compare September 15, 2026 09:51
@coderabbitai

coderabbitai Bot commented Sep 15, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository: cozystack/cozystack/.coderabbit.yaml

Review profile: CHILL

Plan: Advanced

Run ID: f21f367d-eaa1-4f6f-9f35-3e5786fdf162

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@renovate
renovate Bot force-pushed the renovate/go-golang.org-x-text-vulnerability branch from 8133e12 to 3632a18 Compare September 16, 2026 10:54
@renovate
renovate Bot force-pushed the renovate/go-golang.org-x-text-vulnerability branch 2 times, most recently from 89cef8e to bd84659 Compare September 24, 2026 09:32
@lexfrei Aleksei Sviridkin (lexfrei) mentioned this pull request Sep 24, 2026
Merged
1 of 12 tasks
@renovate renovate Bot changed the title chore(deps): update module golang.org/x/text to v0.39.0 [security] chore(deps): update module golang.org/x/text to v0.39.0 [security] - autoclosed Sep 24, 2026
@renovate renovate Bot closed this Sep 24, 2026
@renovate renovate Bot changed the title chore(deps): update module golang.org/x/text to v0.39.0 [security] - autoclosed chore(deps): update module golang.org/x/text to v0.39.0 [security] Sep 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@kvaps Andrei Kvapil (kvaps) Awaiting requested review from kvaps kvaps is a code owner
@lllamnyp Timofei Larkin (lllamnyp) Awaiting requested review from lllamnyp lllamnyp is a code owner
@lexfrei Aleksei Sviridkin (lexfrei) Awaiting requested review from lexfrei lexfrei is a code owner
@androndo Andrey Kolkov (androndo) Awaiting requested review from androndo
@IvanHunters IvanHunters Awaiting requested review from IvanHunters IvanHunters is a code owner
@sircthulhu Kirill Ilin (sircthulhu) Awaiting requested review from sircthulhu sircthulhu is a code owner
@myasnikovdaniil myasnikovdaniil Awaiting requested review from myasnikovdaniil myasnikovdaniil is a code owner
@matthieu-robin Matthieu ROBIN (matthieu-robin) Awaiting requested review from matthieu-robin matthieu-robin is a code owner
@scooby87 scooby87 Awaiting requested review from scooby87 scooby87 is a code owner
@mattia-eleuteri mattia-eleuteri Awaiting requested review from mattia-eleuteri mattia-eleuteri is a code owner

Assignees

No one assigned

Labels

area/dependencies Dependency bumps (Renovate, go.mod); scope `deps` automated Created by automation kind/cleanup Categorizes issue or PR as related to cleanup of code, process, or technical debt security Security-related issues and features size/S This PR changes 10-29 lines, ignoring generated files

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants