fix(deps): bump golang.org/x/text to v0.39.0 and golang.org/x/net to v0.56.0
default-request-adder / build (push) Skipped
default-request-adder / test (pull_request) Successful in 1m13s
default-request-adder / vulnerabilities (pull_request) Successful in 1m23s
default-request-adder / build (pull_request) Successful in 1h17m28s

Fixes GO-2026-5970 (infinite loop on invalid input in x/text, reachable via client-go) and GO-2026-5942 (panic parsing invalid SVCB/HTTPS RR in x/net/dns/dnsmessage). Renovate does not bump these indirect dependencies.
This commit is contained in:
2026-08-09 20:33:22 +02:00
parent 63fb9babb5
commit 92af2593d5
2 changed files with 12 additions and 12 deletions
+4 -4
View File
@@ -29,11 +29,11 @@ require (
github.com/x448/float16 v0.8.4 // indirect
go.yaml.in/yaml/v2 v2.4.3 // indirect
go.yaml.in/yaml/v3 v3.0.4 // indirect
golang.org/x/net v0.55.0 // indirect
golang.org/x/net v0.56.0 // indirect
golang.org/x/oauth2 v0.34.0 // indirect
golang.org/x/sys v0.45.0 // indirect
golang.org/x/term v0.43.0 // indirect
golang.org/x/text v0.37.0 // indirect
golang.org/x/sys v0.46.0 // indirect
golang.org/x/term v0.44.0 // indirect
golang.org/x/text v0.39.0 // indirect
golang.org/x/time v0.14.0 // indirect
google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af // indirect
gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect