Skip to content

chore(deps): update module golang.org/x/net to v0.53.0 [security]#2051

Merged
Prashansa-K merged 1 commit into
mainfrom
renovate/go-golang.org-x-net-vulnerability
May 11, 2026
Merged

chore(deps): update module golang.org/x/net to v0.53.0 [security]#2051
Prashansa-K merged 1 commit into
mainfrom
renovate/go-golang.org-x-net-vulnerability

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented May 8, 2026

This PR contains the following updates:

Package Change Age Confidence
golang.org/x/net v0.52.0v0.53.0 age confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

CVE-2026-33814 / GO-2026-4918

More information

Details

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.

Severity

Unknown

References

This data is provided by OSV and the Go Vulnerability Database (CC-BY 4.0).


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • ""
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies Pull requests that update a dependency file label May 8, 2026
@CLAassistant
Copy link
Copy Markdown

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

1 similar comment
@CLAassistant
Copy link
Copy Markdown

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

@codecov-commenter
Copy link
Copy Markdown

codecov-commenter commented May 8, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 32.61%. Comparing base (3b479f5) to head (66fc276).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #2051      +/-   ##
==========================================
+ Coverage   32.57%   32.61%   +0.04%     
==========================================
  Files          77       77              
  Lines        7132     7132              
==========================================
+ Hits         2323     2326       +3     
+ Misses       4613     4611       -2     
+ Partials      196      195       -1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@renovate renovate Bot force-pushed the renovate/go-golang.org-x-net-vulnerability branch 3 times, most recently from 0e8d400 to 73969b6 Compare May 11, 2026 05:24
@Prashansa-K Prashansa-K enabled auto-merge (squash) May 11, 2026 06:07
@renovate renovate Bot force-pushed the renovate/go-golang.org-x-net-vulnerability branch from 73969b6 to 8d6f240 Compare May 11, 2026 06:08
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate renovate Bot force-pushed the renovate/go-golang.org-x-net-vulnerability branch from 8d6f240 to 66fc276 Compare May 11, 2026 06:10
@Prashansa-K Prashansa-K merged commit df7c0e2 into main May 11, 2026
41 of 42 checks passed
@Prashansa-K Prashansa-K deleted the renovate/go-golang.org-x-net-vulnerability branch May 11, 2026 06:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants