Skip to content

chore(deps): weekly safe go updates · 7 packages - #253

Merged
drappier-charles merged 1 commit into
mainfrom
mendral/deps/weekly-safe-go-20260720
Jul 27, 2026
Merged

chore(deps): weekly safe go updates · 7 packages#253
drappier-charles merged 1 commit into
mainfrom
mendral/deps/weekly-safe-go-20260720

Conversation

@mendral-app

@mendral-app mendral-app Bot commented Jul 20, 2026

Copy link
Copy Markdown
Contributor

Packages bumped

Package Old New Type
github.com/fsnotify/fsnotify v1.9.0 v1.10.1 direct
golang.org/x/crypto v0.52.0 v0.54.0 direct
golang.org/x/net v0.55.0 v0.57.0 indirect
golang.org/x/text v0.37.0 v0.40.0 indirect
golang.org/x/tools v0.44.0 v0.48.0 indirect
golang.org/x/arch v0.16.0 v0.29.0 indirect
golang.org/x/oauth2 v0.35.0 v0.36.0 indirect
Per-package detail

fsnotify v1.9.0 → v1.10.1

  • Fixed nil pointer dereference and race condition on Windows
  • Fixed file descriptor leak in Close() on kqueue (macOS/BSD)
  • Fixed races during concurrent watch add/remove on inotify (Linux)
  • v1.10.1 hotfix: removing watches no longer affects sibling watches sharing a path prefix
  • Impact: used for file watching in the sandbox API; fixes stability issues under concurrent operations

golang.org/x/crypto v0.52.0 → v0.54.0

  • Standard library extension — security patches and new cipher suites
  • Impact: used for SSH/crypto operations in the sandbox API

golang.org/x/net, text, tools, arch, oauth2

  • Standard library extensions maintained by the Go team
  • No breaking changes within minor versions — security patches, performance improvements, and new features only
  • Impact: indirect dependencies pulled by direct deps; no API-level changes affecting this codebase

Files modified

  • sandbox-api/go.mod
  • sandbox-api/go.sum
  • sandbox-api/integration-tests/go.mod
  • sandbox-api/integration-tests/go.sum
Skipped this ecosystem
Package Current Latest Reason
github.com/getsentry/sentry-go v0.47.0 v0.48.0 7-day cooldown (released 2026-07-15)
github.com/gin-gonic/gin v1.10.0 v1.12.0 Open PR #250
github.com/junegunn/fzf v0.67.0 v0.74.0 Open PR #250
github.com/swaggo/swag v1.16.4 v1.16.6 Open PR #250
golang.org/x/sys v0.45.0 v0.47.0 Open PR #250 (also pulled as transitive here)
github.com/modelcontextprotocol/go-sdk v1.6.1 Open PR #220
github.com/creack/pty v1.1.24 v1.1.24 Already latest
github.com/google/uuid v1.6.0 v1.6.0 Already latest
github.com/gorilla/websocket v1.5.3 v1.5.3 Already latest
github.com/vishvananda/netlink v1.3.1 v1.3.1 Already latest
google.golang.org/protobuf v1.36.11 v1.36.11 Already latest

Note

Created by Mendral. Tag @mendral-app with feedback or questions.

Bump fsnotify v1.9.0→v1.10.1, golang.org/x/crypto v0.52.0→v0.54.0,
golang.org/x/net v0.55.0→v0.57.0, golang.org/x/text v0.37.0→v0.40.0,
golang.org/x/tools v0.44.0→v0.48.0, golang.org/x/arch v0.16.0→v0.29.0,
golang.org/x/oauth2 v0.35.0→v0.36.0
@mendral-app
mendral-app Bot requested a review from a team July 20, 2026 09:14
@mendral-app
mendral-app Bot marked this pull request as ready for review July 20, 2026 09:27
@drappier-charles
drappier-charles merged commit 91d1c6a into main Jul 27, 2026
1 check passed
@drappier-charles
drappier-charles deleted the mendral/deps/weekly-safe-go-20260720 branch July 27, 2026 21:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant