Skip to content

build(deps): update module golang.org/x/net to v0.55.0 [security] - #1245

Merged
favonia merged 1 commit into
mainfrom
renovate/go-golang.org-x-net-vulnerability
Jul 9, 2026
Merged

build(deps): update module golang.org/x/net to v0.55.0 [security]#1245
favonia merged 1 commit into
mainfrom
renovate/go-golang.org-x-net-vulnerability

Conversation

@renovate

@renovate renovate Bot commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
golang.org/x/net v0.52.0v0.55.0 age confidence

Go Net HTML parser is vulnerable to denial of service

CVE-2026-25680 / GHSA-5cv4-jp36-h3mw

More information

Details

In Go Net (golang.org/x/net) before verion 0.55.0, parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service.

Severity

  • CVSS Score: 6.5 / 10 (Medium)
  • Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References

This data is provided by the GitHub Advisory Database (CC-BY 4.0).


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate

renovate Bot commented Jul 9, 2026

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: scripts/github-actions/cloudflare-auth-error-watch/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 1 additional dependency was updated

Details:

Package Change
golang.org/x/text v0.35.0 -> v0.37.0

@favonia
favonia enabled auto-merge (squash) July 9, 2026 08:11
@codecov

codecov Bot commented Jul 9, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 98.49%. Comparing base (7556136) to head (37457fb).

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #1245   +/-   ##
=======================================
  Coverage   98.49%   98.49%           
=======================================
  Files         100      100           
  Lines        6249     6249           
=======================================
  Hits         6155     6155           
  Misses         81       81           
  Partials       13       13           
Flag Coverage Δ
smoketests 11.88% <ø> (ø)
unittests 98.11% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@favonia
favonia merged commit 3a2ce73 into main Jul 9, 2026
35 checks passed
@favonia
favonia deleted the renovate/go-golang.org-x-net-vulnerability branch July 9, 2026 08:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant