Skip to content

Bump golang.org/x/net to 0.56.0, golang.org/x/sys to 0.46.0 and golang.org/x/text to 0.39.0 - #71827

Merged
jason810496 merged 6 commits into
apache:mainfrom
Nordix:fix/go-sdk/go.mod_dep_updates
Aug 20, 2026
Merged

Bump golang.org/x/net to 0.56.0, golang.org/x/sys to 0.46.0 and golang.org/x/text to 0.39.0#71827
jason810496 merged 6 commits into
apache:mainfrom
Nordix:fix/go-sdk/go.mod_dep_updates

Conversation

@ivonaest

Copy link
Copy Markdown
Contributor

Update indirect Go dependencies in go-sdk/ to address known CVEs:

  • golang.org/x/net 0.55.0 → 0.56.0
  • golang.org/x/sys 0.45.0 → 0.46.0
  • golang.org/x/text 0.37.0 → 0.39.0

Build and all tests pass.

…g.org/x/text to 0.39.0

Signed-off-by: ivonaest <ivona.cvija@est.tech>

@jason810496 jason810496 left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We need to fix the go.mod in Lang-SDK k8s test as well, thanks.

  Check lang-SDK Go example module is tidy against the Go SDK..................................................Failed
  - hook id: check-go-example-mod-tidy
  - exit code: 1

    ERROR: kubernetes-tests/lang_sdk/go_example is not tidy.

    It is a separate Go module that resolves the SDK via a `replace` onto go-sdk,
    so it keeps its own copy of the SDK's indirect requirements. A dependency moved in
    go-sdk without this module being re-tidied, which breaks the
    'Kubernetes tests / K8S Lang-SDK' bundle build on every pull request once merged.

    Fix it in this PR by running:

        (cd kubernetes-tests/lang_sdk/go_example && go mod tidy)

    and committing the resulting go.mod / go.sum changes.

Signed-off-by: ivonaest <ivona.cvija@est.tech>

@jason810496 jason810496 left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I didn't find any security or compatibility regression, thanks.

@jason810496
jason810496 merged commit 900f4d3 into apache:main Aug 20, 2026
95 checks passed
@ivonaest
ivonaest deleted the fix/go-sdk/go.mod_dep_updates branch August 20, 2026 08:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants