unboundsoftware/gitlab-cleanup-handler
6
0
Fork 0
Code Issues 1 Pull Requests 1 Actions 2 Packages Projects Releases 32 Activity

fix(deps): bump golang.org/x/text to v0.39.0 and golang.org/x/net to v0.56.0 #463

Merged
argoyle merged 1 commits from fix-vuln-x-text-x-net into main 2026-08-09 18:31:27 +00:00
Conversation 0 Commits 1 Files Changed 2
+12 -12
argoyle commented 2026-08-09 18:24:22 +00:00
Owner
Copy Link
Copy Source

Fixes govulncheck failures in CI:

  • GO-2026-5970 — infinite loop on invalid input in golang.org/x/text (v0.37.0 → v0.39.0), reachable via gitlab.RestClient.projectApiCall → http.Client.Do
  • GO-2026-5942 — panic parsing invalid SVCB/HTTPS RR in golang.org/x/net/dns/dnsmessage (v0.55.0 → v0.56.0)

go mod tidy also pulled x/sys v0.46.0 and x/term v0.44.0.

govulncheck ./... now reports no vulnerabilities; go test -race ./... passes.

Fixes govulncheck failures in CI: - **GO-2026-5970** — infinite loop on invalid input in `golang.org/x/text` (v0.37.0 → v0.39.0), reachable via `gitlab.RestClient.projectApiCall` → `http.Client.Do` - **GO-2026-5942** — panic parsing invalid SVCB/HTTPS RR in `golang.org/x/net/dns/dnsmessage` (v0.55.0 → v0.56.0) `go mod tidy` also pulled `x/sys` v0.46.0 and `x/term` v0.44.0. `govulncheck ./...` now reports no vulnerabilities; `go test -race ./...` passes.
argoyle added 1 commit 2026-08-09 18:24:24 +00:00
fix(deps): bump golang.org/x/text to v0.39.0 and golang.org/x/net to v0.56.0
gitlab-cleanup-handler / test (push) Skipped
gitlab-cleanup-handler / vulnerabilities (push) Skipped
gitlab-cleanup-handler / build (push) Skipped
gitlab-cleanup-handler / vulnerabilities (pull_request) Successful in 1m1s
Details
gitlab-cleanup-handler / test (pull_request) Successful in 1m17s
Details
gitlab-cleanup-handler / build (pull_request) Successful in 5m10s
Details
917b460c10 
Fixes GO-2026-5970 (infinite loop on invalid input in x/text) and GO-2026-5942 (panic parsing invalid SVCB/HTTPS RR in x/net/dns/dnsmessage) reported by govulncheck in CI.
argoyle scheduled this pull request to auto merge when all checks succeed 2026-08-09 18:24:51 +00:00
argoyle merged commit b43a3e8edd into main 2026-08-09 18:31:27 +00:00
argoyle deleted branch fix-vuln-x-text-x-net 2026-08-09 18:31:28 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
dependencies
Pull requests that update a dependency file
 docker
go
security
Pull requests that address a security vulnerability
 severity:moderate
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
acctest (Shiny Acctest) argoyle (Joakim Olsson) buildtools (Buildtools) kubernetes (Kubernetes) releaser (Unbound Releaser) renovate (Renovate Bot)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unboundsoftware/gitlab-cleanup-handler#463