Skip to content

Bump golang.org/x/net to v0.35.0 - #402

Closed
atanzu wants to merge 1 commit into
masterfrom
mark.kirichenko/bump-golang-x-net
Closed

atanzu wants to merge 1 commit into
masterfrom
mark.kirichenko/bump-golang-x-net

Conversation

@atanzu

@atanzu atanzu commented Aug 25, 2026

Copy link
Copy Markdown
Contributor

Fixes Dependabot alerts:

Fixes Dependabot alerts #3, #4, #5, #6, #7, #8, #9, #10, #11, #12:
- CVE-2022-41723 (GHSA-vvpx-j8f3-3w6h) - fix at v0.7.0
- CVE-2022-27664 (GHSA-69cg-p879-7622) - fix at v0.0.0-20220906165146-f3363e06e74c
- CVE-2021-31525 (GHSA-h86h-8ppg-mxmh) - fix at v0.0.0-20210428140749-89ef3d95e781
- CVE-2021-33194 (GHSA-83g2-8m93-v3w7) - fix at v0.0.0-20210520170846-37e1c6afe023
- CVE-2022-41721 (GHSA-fxg5-wq6x-vr4w) - fix at v0.1.1-0.20221104162952-702349b0e862
- CVE-2023-39325 (GHSA-4374-p667-p6c8) - fix at v0.17.0
- CVE-2023-3978 (GHSA-2wrh-6pvc-2jm9) - fix at v0.13.0
- CVE-2023-44487 (GHSA-qppj-fm5r-hxr3) - fix at v0.17.0
- CVE-2023-45288 (GHSA-4v7x-pqxf-cx7m) - fix at v0.23.0
- CVE-2022-41717 (GHSA-xrjj-mj9h-534m) - fix at v0.4.0

v0.35.0 is the latest version compatible with go 1.13.
Alerts #14, #15, #16 require go 1.23+ and cannot be fixed without bumping the Go version.
@datadog-prod-us1-5

Copy link
Copy Markdown

Code Coverage

🛑 Gate Violations

🎯 1 Code Coverage issue detected

A Patch coverage percentage gate may be blocking this PR.

• Patch coverage: no data available (threshold: 90.00%)

ℹ️ Info

🎯 Code Coverage (details)
• Patch Coverage: No data available
• Overall Coverage: 84.55% (-0.50%)

Useful? React with 👍 / 👎

This comment will be updated automatically if new data arrives.
🔗 Commit SHA: 0e0f3fc | Docs | View more details | Give us feedback!

@atanzu

atanzu commented Aug 25, 2026

Copy link
Copy Markdown
Contributor Author

Instead of bumping, let's get rid of it completely.

@atanzu atanzu closed this Aug 25, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant