fix(deps): bump golang.org/x/text to v0.39.0 and x/net to v0.56.0 #389

Merged
argoyle merged 1 commits from fix/vuln-x-text-x-net into main 2026-08-09 19:12:07 +00:00
1 Commits
Author SHA1 Message Date
argoyleandClaude Opus 5 261b703557 fix(deps): bump golang.org/x/text to v0.39.0 and x/net to v0.56.0
cron-checker / test (push) Skipped
cron-checker / vulnerabilities (push) Skipped
cron-checker / build (push) Skipped
cron-checker / test (pull_request) Successful in 1m11s
cron-checker / vulnerabilities (pull_request) Successful in 1m28s
cron-checker / build (pull_request) Successful in 21m49s
Fixes GO-2026-5970 (infinite loop on invalid input in golang.org/x/text),
which was reachable from doCheck via the Kubernetes lister and failed the
vulnerabilities job in CI. Also bumps golang.org/x/net for GO-2026-5942,
which govulncheck reports as required but not called.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PuGr8hyEpEpTX4DyLLwfzG
2026-08-09 20:47:45 +02:00