Skip to content

chore(deps): update module golang.org/x/text to v0.39.0 [security]#125

Open
deckhouse-BOaTswain wants to merge 1 commit into
mainfrom
renovate/go-golang.org-x-text-vulnerability
Open

chore(deps): update module golang.org/x/text to v0.39.0 [security]#125
deckhouse-BOaTswain wants to merge 1 commit into
mainfrom
renovate/go-golang.org-x-text-vulnerability

Conversation

@deckhouse-BOaTswain

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
golang.org/x/text v0.37.0 -> v0.39.0 age confidence

Infinite loop on invalid input in golang.org/x/text

CVE-2026-56852 / GO-2026-5970

More information

Details

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.

Severity

Unknown

References

This data is provided by OSV and the Go Vulnerability Database (CC-BY 4.0).


Configuration

📅 Schedule: Branch creation - "" in timezone UTC, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@deckhouse-BOaTswain deckhouse-BOaTswain added dependencies Pull requests that update a dependency file renovate security labels Jul 21, 2026
@deckhouse-BOaTswain

Copy link
Copy Markdown
Contributor Author

ℹ Artifact update notice

File name: examples/basic-example-module/hooks/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 1 additional dependency was updated

Details:

Package Change
golang.org/x/sync v0.20.0 -> v0.21.0
File name: examples/common-hooks/tls-certificate/hooks/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 1 additional dependency was updated

Details:

Package Change
golang.org/x/sync v0.20.0 -> v0.21.0
File name: examples/dependency-example-module/hooks/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 1 additional dependency was updated

Details:

Package Change
golang.org/x/sync v0.20.0 -> v0.21.0
File name: examples/example-module/hooks/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 1 additional dependency was updated

Details:

Package Change
golang.org/x/sync v0.20.0 -> v0.21.0
File name: examples/settings-check/hooks/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 1 additional dependency was updated

Details:

Package Change
golang.org/x/sync v0.20.0 -> v0.21.0
File name: examples/single-file-app-example/hooks/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 1 additional dependency was updated

Details:

Package Change
golang.org/x/sync v0.20.0 -> v0.21.0
File name: examples/single-file-example/hooks/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 1 additional dependency was updated

Details:

Package Change
golang.org/x/sync v0.20.0 -> v0.21.0
File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 1 additional dependency was updated

Details:

Package Change
golang.org/x/sync v0.20.0 -> v0.21.0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file renovate security

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants