unboundsoftware/cron-checker
6
0
Fork 0
Code Issues 1 Pull Requests 1 Actions Packages Projects Releases 32 Activity

fix(deps): bump golang.org/x/text to v0.39.0 and x/net to v0.56.0 #389

Merged
argoyle merged 1 commits from fix/vuln-x-text-x-net into main 2026-08-09 19:12:07 +00:00
Conversation 0 Commits 1 Files Changed 2
+12 -12
argoyle commented 2026-08-09 18:48:03 +00:00
Owner
Copy Link
Copy Source

Fixes GO-2026-5970 (infinite loop on invalid input in golang.org/x/text), which is reachable from doCheck via the Kubernetes lister and was failing the vulnerabilities job in CI.

Also bumps golang.org/x/net for GO-2026-5942, which govulncheck reports as required but not called.

golang.org/x/text v0.37.0 -> v0.39.0
golang.org/x/net  v0.55.0 -> v0.56.0
golang.org/x/sys  v0.45.0 -> v0.46.0  (transitive)
golang.org/x/term v0.43.0 -> v0.44.0  (transitive)

All indirect dependencies, so Renovate had not opened a branch for them.

govulncheck ./... is now clean and go test -race ./... passes.

🤖 Generated with Claude Code

https://claude.ai/code/session_01PuGr8hyEpEpTX4DyLLwfzG

Fixes `GO-2026-5970` (infinite loop on invalid input in `golang.org/x/text`), which is reachable from `doCheck` via the Kubernetes lister and was failing the `vulnerabilities` job in CI. Also bumps `golang.org/x/net` for `GO-2026-5942`, which govulncheck reports as required but not called. ``` golang.org/x/text v0.37.0 -> v0.39.0 golang.org/x/net v0.55.0 -> v0.56.0 golang.org/x/sys v0.45.0 -> v0.46.0 (transitive) golang.org/x/term v0.43.0 -> v0.44.0 (transitive) ``` All indirect dependencies, so Renovate had not opened a branch for them. `govulncheck ./...` is now clean and `go test -race ./...` passes. 🤖 Generated with [Claude Code](https://claude.com/claude-code) https://claude.ai/code/session_01PuGr8hyEpEpTX4DyLLwfzG
argoyle added 1 commit 2026-08-09 18:48:04 +00:00
fix(deps): bump golang.org/x/text to v0.39.0 and x/net to v0.56.0
cron-checker / test (push) Skipped
cron-checker / vulnerabilities (push) Skipped
cron-checker / build (push) Skipped
cron-checker / test (pull_request) Successful in 1m11s
Details
cron-checker / vulnerabilities (pull_request) Successful in 1m28s
Details
cron-checker / build (pull_request) Successful in 21m49s
Details
261b703557 
Fixes GO-2026-5970 (infinite loop on invalid input in golang.org/x/text),
which was reachable from doCheck via the Kubernetes lister and failed the
vulnerabilities job in CI. Also bumps golang.org/x/net for GO-2026-5942,
which govulncheck reports as required but not called.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PuGr8hyEpEpTX4DyLLwfzG
argoyle scheduled this pull request to auto merge when all checks succeed 2026-08-09 18:52:01 +00:00
argoyle merged commit ce98f90f40 into main 2026-08-09 19:12:07 +00:00
argoyle deleted branch fix/vuln-x-text-x-net 2026-08-09 19:12:09 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
dependencies
Pull requests that update a dependency file
 docker
go
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
acctest (Shiny Acctest) argoyle (Joakim Olsson) buildtools (Buildtools) kubernetes (Kubernetes) releaser (Unbound Releaser) renovate (Renovate Bot)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unboundsoftware/cron-checker#389