fix(deps): bump golang.org/x/net to v0.55.0 #304

Merged

argoyle merged 1 commits from fix-x-net-vuln into main 2026-05-25 06:23:20 +00:00

Conversation 0 Commits 1 Files Changed 2

+12 -12

argoyle commented 2026-05-25 05:48:58 +00:00

Owner

Copy Link

Copy Source

Fixes GO-2026-5026 — failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna (reachable via the k8s client LimitRange.Delete path).

• golang.org/x/net v0.53.0 → v0.55.0
• go mod tidy also bumped x/sys, x/term, x/text

govulncheck ./... → No vulnerabilities found.

Fixes **GO-2026-5026** — failure to reject ASCII-only Punycode-encoded labels in `golang.org/x/net/idna` (reachable via the k8s client `LimitRange.Delete` path). - `golang.org/x/net` v0.53.0 → v0.55.0 - `go mod tidy` also bumped x/sys, x/term, x/text `govulncheck ./...` → No vulnerabilities found.

argoyle added 1 commit 2026-05-25 05:48:59 +00:00

fix(deps): bump golang.org/x/net to v0.55.0 ... 4b5a1ef061

Fixes GO-2026-5026 (Punycode label rejection failure in golang.org/x/net/idna).
go mod tidy also bumped x/sys, x/term, x/text.

argoyle scheduled this pull request to auto merge when all checks succeed 2026-05-25 05:49:20 +00:00

argoyle merged commit 8202ed57f1 into main 2026-05-25 06:23:20 +00:00

argoyle deleted branch fix-x-net-vuln 2026-05-25 06:23:21 +00:00

releaser referenced this pull request 2026-05-25 06:24:52 +00:00

chore(release): prepare for 1.6.7 #306

releaser referenced this pull request 2026-06-03 05:50:39 +00:00

chore(release): prepare for 1.6.7 #309

releaser referenced this pull request 2026-06-06 09:50:20 +00:00

chore(release): prepare for 1.6.7 #311

releaser referenced this pull request 2026-06-10 04:24:46 +00:00

chore(release): prepare for 1.6.7 #313

releaser referenced this pull request 2026-06-11 05:57:42 +00:00

chore(release): prepare for 1.6.7 #315

argoyle referenced this issue from a commit 2026-06-11 08:08:09 +00:00

chore(release): prepare for 1.6.7 (#315)

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

dependencies

Pull requests that update a dependency file

docker

go

security

Pull requests that address a security vulnerability

severity:moderate

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

acctest (Shiny Acctest) argoyle (Joakim Olsson) buildtools (Buildtools) kubernetes (Kubernetes) peter (Peter Svensson) releaser (Unbound Releaser) renovate (Renovate Bot)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: unboundsoftware/default-request-adder#304