fix(deps): bump golang.org/x/net to v0.53.0 #292

Merged
argoyle merged 1 commits from fix-x-net-vuln into main 2026-05-12 15:00:35 +00:00
Owner

Fixes govulncheck finding GO-2026-4918: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2.

Bumps golang.org/x/net v0.49.0 → v0.53.0 (plus related x/sys, x/term, x/text via go mod tidy).

Fixes govulncheck finding GO-2026-4918: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2. Bumps golang.org/x/net v0.49.0 → v0.53.0 (plus related x/sys, x/term, x/text via go mod tidy).
argoyle added 1 commit 2026-05-12 11:44:11 +00:00
fix(deps): bump golang.org/x/net to v0.53.0 for GO-2026-4918
default-request-adder / vulnerabilities (pull_request) Successful in 1m46s
default-request-adder / test (pull_request) Successful in 1m58s
default-request-adder / build (pull_request) Successful in 52m36s
eb50889101
argoyle scheduled this pull request to auto merge when all checks succeed 2026-05-12 11:44:25 +00:00
argoyle merged commit 918e3660fd into main 2026-05-12 15:00:35 +00:00
argoyle deleted branch fix-x-net-vuln 2026-05-12 15:00:36 +00:00
Sign in to join this conversation.