Skip to content

THREESCALE-15102 Fix GO-2026-5026: bump golang.org/x/net to v0.55.0#1179

Merged
borisurbanik merged 1 commit into
3scale:masterfrom
borisurbanik:THREESCALE-15102-GO-2026-5026-idna
Jun 19, 2026
Merged

THREESCALE-15102 Fix GO-2026-5026: bump golang.org/x/net to v0.55.0#1179
borisurbanik merged 1 commit into
3scale:masterfrom
borisurbanik:THREESCALE-15102-GO-2026-5026-idna

Conversation

@borisurbanik

Copy link
Copy Markdown
Contributor

Bumps golang.org/x/net from v0.43.0 to v0.55.0 to fix GO-2026-5026 (failure to reject ASCII-only Punycode-encoded labels in x/net/idna).

Also bumps transitive hard requirements of x/net@v0.55.0:

  • golang.org/x/text v0.29.0 -> v0.37.0
  • golang.org/x/sys v0.35.0 -> v0.45.0
  • golang.org/x/sync v0.17.0 -> v0.20.0
  • golang.org/x/term v0.34.0 -> v0.43.0
  • golang.org/x/mod v0.27.0 -> v0.35.0 (via x/text)
  • golang.org/x/tools v0.36.0 -> v0.44.0 (via x/text)

Bumps golang.org/x/net from v0.43.0 to v0.55.0 to fix GO-2026-5026
(failure to reject ASCII-only Punycode-encoded labels in x/net/idna).

Also bumps transitive hard requirements of x/net@v0.55.0:
- golang.org/x/text v0.29.0 -> v0.37.0
- golang.org/x/sys v0.35.0 -> v0.45.0
- golang.org/x/sync v0.17.0 -> v0.20.0
- golang.org/x/term v0.34.0 -> v0.43.0
- golang.org/x/mod v0.27.0 -> v0.35.0 (via x/text)
- golang.org/x/tools v0.36.0 -> v0.44.0 (via x/text)
@borisurbanik borisurbanik requested a review from a team as a code owner June 11, 2026 19:27
@borisurbanik

Copy link
Copy Markdown
Contributor Author

/retest

1 similar comment
@borisurbanik

Copy link
Copy Markdown
Contributor Author

/retest

@tkan145

tkan145 commented Jun 19, 2026

Copy link
Copy Markdown
Contributor

/lgtm
/approve

@borisurbanik borisurbanik merged commit 80f198c into 3scale:master Jun 19, 2026
20 checks passed
@borisurbanik borisurbanik deleted the THREESCALE-15102-GO-2026-5026-idna branch June 19, 2026 08:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants