[Bug]: Vulnerable dependencies in v0.8.0 (x/net, x/text, stdlib)

[flrnx23]

Please try to fill out as much of the information below as you can. Thank you!

• Yes, I've searched similar issues on GitHub and didn't find any.

Which version contains the bug?

0.8.0

Describe the bug

The v0.8.0 binary bundles Go dependencies with known high-severity vulnerabilities:

CVE	Package	Installed	Fixed Version	Severity
GO-2026-5942	golang.org/x/net	v0.55.0	v0.56.0	High
GO-2026-4970	golang/stdlib	1.26.4	1.25.12 / 1.26.5 / 1.27.0-rc.2	High
GO-2026-5970	golang.org/x/text	v0.37.0	v0.39.0	High
GO-2026-5856	golang/stdlib	1.26.4	1.25.12 / 1.26.5 / 1.27.0-rc.2	Medium

A patch release with bumped dependencies would be appreciated.

How to recreate the bug?

Inspect the Go build info embedded in the v0.8.0 binary (e.g. via go version -m check_prometheus). The reported module versions contain known vulnerabilities.

[martialblog]

Hi,

The newest (pre) release is built with updated dependencies and the latest Go version:

https://github.com/NETWAYS/check_prometheus/releases/tag/v0.9.0-rc1