Skip to content

chore(deps): update golang.org/x packages to v0.35.0 #167

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
renovate wants to merge 1 commit into from
Closed

chore(deps): update golang.org/x packages to v0.35.0 #167

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 2 additions & 4 deletions go.mod
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,8 +1,6 @@
module github.com/sheldonhull/magetools

Check failure on line 1 in go.mod

View workflow job for this annotation

GitHub Actions / Trunk Check

osv-scanner(CVE-2025-47910) 

[existing] CrossOriginProtection insecure bypass patterns not limited to exact matches in net/http. Current version of 'stdlib' is vulnerable: 1.25.0.

Check failure on line 1 in go.mod

View workflow job for this annotation

GitHub Actions / Trunk Check

osv-scanner(CVE-2025-47912) 

[existing] Insufficient validation of bracketed IPv6 hostnames in net/url. Current version of 'stdlib' is vulnerable: 1.25.0.

Check failure on line 1 in go.mod

View workflow job for this annotation

GitHub Actions / Trunk Check

osv-scanner(CVE-2025-58183) 

[existing] Unbounded allocation when parsing GNU sparse map in archive/tar. Current version of 'stdlib' is vulnerable: 1.25.0.

Check failure on line 1 in go.mod

View workflow job for this annotation

GitHub Actions / Trunk Check

osv-scanner(CVE-2025-58185) 

[existing] Parsing DER payload can cause memory exhaustion in encoding/asn1. Current version of 'stdlib' is vulnerable: 1.25.0.

Check failure on line 1 in go.mod

View workflow job for this annotation

GitHub Actions / Trunk Check

osv-scanner(CVE-2025-58186) 

[existing] Lack of limit when parsing cookies can cause memory exhaustion in net/http. Current version of 'stdlib' is vulnerable: 1.25.0.

Check failure on line 1 in go.mod

View workflow job for this annotation

GitHub Actions / Trunk Check

osv-scanner(CVE-2025-58187) 

[existing] Quadratic complexity when checking name constraints in crypto/x509. Current version of 'stdlib' is vulnerable: 1.25.0.

Check failure on line 1 in go.mod

View workflow job for this annotation

GitHub Actions / Trunk Check

osv-scanner(CVE-2025-58188) 

[existing] Panic when validating certificates with DSA public keys in crypto/x509. Current version of 'stdlib' is vulnerable: 1.25.0.

Check failure on line 1 in go.mod

View workflow job for this annotation

GitHub Actions / Trunk Check

osv-scanner(CVE-2025-58189) 

[existing] ALPN negotiation error contains attacker controlled information in crypto/tls. Current version of 'stdlib' is vulnerable: 1.25.0.

Check failure on line 1 in go.mod

View workflow job for this annotation

GitHub Actions / Trunk Check

osv-scanner(CVE-2025-61723) 

[existing] Quadratic complexity when parsing some invalid inputs in encoding/pem. Current version of 'stdlib' is vulnerable: 1.25.0.

Check failure on line 1 in go.mod

View workflow job for this annotation

GitHub Actions / Trunk Check

osv-scanner(CVE-2025-61724) 

[existing] Excessive CPU consumption in Reader.ReadResponse in net/textproto. Current version of 'stdlib' is vulnerable: 1.25.0.

Check failure on line 1 in go.mod

View workflow job for this annotation

GitHub Actions / Trunk Check

osv-scanner(CVE-2025-61725) 

[existing] Excessive CPU consumption in ParseAddress in net/mail. Current version of 'stdlib' is vulnerable: 1.25.0.

Check failure on line 1 in go.mod

View workflow job for this annotation

GitHub Actions / Trunk Check

osv-scanner(CVE-2025-61726) 

[existing] Memory exhaustion in query parameter parsing in net/url. Current version of 'stdlib' is vulnerable: 1.25.0.

Check failure on line 1 in go.mod

View workflow job for this annotation

GitHub Actions / Trunk Check

osv-scanner(CVE-2025-61727) 

[existing] Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509. Current version of 'stdlib' is vulnerable: 1.25.0.

Check failure on line 1 in go.mod

View workflow job for this annotation

GitHub Actions / Trunk Check

osv-scanner(CVE-2025-61728) 

[existing] Excessive CPU consumption when building archive index in archive/zip. Current version of 'stdlib' is vulnerable: 1.25.0.

Check failure on line 1 in go.mod

View workflow job for this annotation

GitHub Actions / Trunk Check

osv-scanner(CVE-2025-61729) 

[existing] Excessive resource consumption when printing error string for host certificate validation in crypto/x509. Current version of 'stdlib' is vulnerable: 1.25.0.

Check failure on line 1 in go.mod

View workflow job for this annotation

GitHub Actions / Trunk Check

osv-scanner(CVE-2025-61730) 

[existing] Handshake messages may be processed at the incorrect encryption level in crypto/tls. Current version of 'stdlib' is vulnerable: 1.25.0.

Check failure on line 1 in go.mod

View workflow job for this annotation

GitHub Actions / Trunk Check

osv-scanner(CVE-2025-68121) 

[existing] Unexpected session resumption in crypto/tls. Current version of 'stdlib' is vulnerable: 1.25.0.

Check failure on line 1 in go.mod

View workflow job for this annotation

GitHub Actions / Trunk Check

osv-scanner(CVE-2026-25679) 

[existing] Incorrect parsing of IPv6 host literals in net/url. Current version of 'stdlib' is vulnerable: 1.25.0.

Check failure on line 1 in go.mod

View workflow job for this annotation

GitHub Actions / Trunk Check

osv-scanner(CVE-2026-27139) 

[existing] FileInfo can escape from a Root in os. Current version of 'stdlib' is vulnerable: 1.25.0.

Check failure on line 1 in go.mod

View workflow job for this annotation

GitHub Actions / Trunk Check

osv-scanner(CVE-2026-27142) 

[existing] URLs in meta content attribute actions are not escaped in html/template. Current version of 'stdlib' is vulnerable: 1.25.0.

Check failure on line 1 in go.mod

View workflow job for this annotation

GitHub Actions / Trunk Check

osv-scanner(CVE-2026-32280) 

[existing] Unexpected work during chain building in crypto/x509. Current version of 'stdlib' is vulnerable: 1.25.0.

Check failure on line 1 in go.mod

View workflow job for this annotation

GitHub Actions / Trunk Check

osv-scanner(CVE-2026-32281) 

[existing] Inefficient policy validation in crypto/x509. Current version of 'stdlib' is vulnerable: 1.25.0.

Check failure on line 1 in go.mod

View workflow job for this annotation

GitHub Actions / Trunk Check

osv-scanner(CVE-2026-32282) 

[existing] TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix. Current version of 'stdlib' is vulnerable: 1.25.0.

Check failure on line 1 in go.mod

View workflow job for this annotation

GitHub Actions / Trunk Check

osv-scanner(CVE-2026-32283) 

[existing] Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls. Current version of 'stdlib' is vulnerable: 1.25.0.

Check failure on line 1 in go.mod

View workflow job for this annotation

GitHub Actions / Trunk Check

osv-scanner(CVE-2026-32288) 

[existing] Unbounded allocation for old GNU sparse in archive/tar. Current version of 'stdlib' is vulnerable: 1.25.0.

Check failure on line 1 in go.mod

View workflow job for this annotation

GitHub Actions / Trunk Check

osv-scanner(CVE-2026-32289) 

[existing] JsBraceDepth Context Tracking Bugs (XSS) in html/template. Current version of 'stdlib' is vulnerable: 1.25.0.

go 1.21

toolchain go1.22.3
go 1.25.0

require (
al.essio.dev/pkg/shellescape v1.5.0
Expand All @@ -12,7 +10,7 @@
github.com/matryer/is v1.4.1
github.com/pterm/pterm v0.12.79
github.com/ztrue/tracerr v0.4.0
golang.org/x/mod v0.20.0
golang.org/x/mod v0.35.0
)

require (
Expand Down
8 changes: 4 additions & 4 deletions go.sum
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -99,8 +99,8 @@ golang.org/x/exp v0.0.0-20220909182711-5c715a9e8561 h1:MDc5xs78ZrZr3HMQugiXOAkSZ
golang.org/x/exp v0.0.0-20220909182711-5c715a9e8561/go.mod h1:cyybsKvd6eL0RnXn6p/Grxp8F5bW7iYuBgsNCOHpMYE=
golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
golang.org/x/mod v0.8.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
golang.org/x/mod v0.20.0 h1:utOm6MM3R3dnawAiJgn0y+xvuYRsm1RKM/4giyfDgV0=
golang.org/x/mod v0.20.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c=
golang.org/x/mod v0.35.0 h1:Ww1D637e6Pg+Zb2KrWfHQUnH2dQRLBQyAtpr/haaJeM=
golang.org/x/mod v0.35.0/go.mod h1:+GwiRhIInF8wPm+4AoT6L0FA1QWAad3OMdTRx4tFYlU=
golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
Expand Down Expand Up @@ -139,8 +139,8 @@ golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGm
golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
golang.org/x/tools v0.6.0/go.mod h1:Xwgl3UAJ/d3gWutnCtw505GrjyAbvKui8lOU390QaIU=
golang.org/x/tools v0.21.1-0.20240508182429-e35e4ccd0d2d h1:vU5i/LfpvrRCpgM/VPfJLg5KjxD3E+hfT1SH+d9zLwg=
golang.org/x/tools v0.21.1-0.20240508182429-e35e4ccd0d2d/go.mod h1:aiJjzUbINMkxbQROHiO6hDPo2LHcIPhhQsa9DLh0yGk=
golang.org/x/tools v0.43.0 h1:12BdW9CeB3Z+J/I/wj34VMl8X+fEXBxVR90JeMX5E7s=
golang.org/x/tools v0.43.0/go.mod h1:uHkMso649BX2cZK6+RpuIPXS3ho2hZo4FVwfoy1vIk0=
golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
Expand Down
2 changes: 1 addition & 1 deletion vendor/golang.org/x/mod/modfile/print.go
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

9 changes: 7 additions & 2 deletions vendor/golang.org/x/mod/modfile/read.go
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

134 changes: 101 additions & 33 deletions vendor/golang.org/x/mod/modfile/rule.go
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

8 changes: 3 additions & 5 deletions vendor/golang.org/x/mod/modfile/work.go
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Loading
Loading