Skip to content
This repository was archived by the owner on Jul 6, 2026. It is now read-only.

fix x/net vulnerability#14

Merged
jwcesign merged 1 commit into
mainfrom
codex/fix-x-net-cve-2026-25680
Jul 6, 2026
Merged

fix x/net vulnerability#14
jwcesign merged 1 commit into
mainfrom
codex/fix-x-net-cve-2026-25680

Conversation

@jwcesign

@jwcesign jwcesign commented Jul 6, 2026

Copy link
Copy Markdown
Contributor

Summary

Fixes the Dependabot/Vanta golang.org/x/net < 0.55.0 finding for CVE-2026-25680.

This updates golang.org/x/net to v0.55.0, refreshes related golang.org/x/* modules, and syncs vendor/ with go mod vendor.

Validation

  • GOTOOLCHAIN=auto go test ./...

Signed-off-by: jwcesign <[email protected]>
@gitautomator

gitautomator Bot commented Jul 6, 2026

Copy link
Copy Markdown

Thanks to your contribution, the maintainers will review it as soon as they can!

@gitautomator gitautomator Bot added bug Something isn't working dependencies Pull requests that update a dependency file labels Jul 6, 2026
@jwcesign

jwcesign commented Jul 6, 2026

Copy link
Copy Markdown
Contributor Author

/approve

@gitautomator

gitautomator Bot commented Jul 6, 2026

Copy link
Copy Markdown

Unable to retrieve the maintainers' list. Please verify the .github/gitautomator.yaml configuration.

@gitautomator

gitautomator Bot commented Jul 6, 2026

Copy link
Copy Markdown

Unknown labels: lgtm, please add them for this repository.

@jwcesign
jwcesign merged commit f574d21 into main Jul 6, 2026
7 checks passed
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

bug Something isn't working dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants