Skip to content

Commit a463f69

Browse files
committed
deps: update golang.org/x/text to v0.39.0
Solves the vulnerability reported by govulncheck: Vulnerability #1: GO-2026-5970 Infinite loop on invalid input in golang.org/x/text More info: https://pkg.go.dev/vuln/GO-2026-5970 Module: golang.org/x/text Found in: golang.org/x/text@v0.37.0 Fixed in: golang.org/x/text@v0.39.0 The dependency appears to not have been updated automatically because the GitHub Advisory [1] is still marked as unreviewed, which causes it to not be included in dependabot alerts, and in turn to not be picked by renovate. [1]: GHSA-jpjm-c3r5-q96r Signed-off-by: Marco Iorio <marco.iorio@isovalent.com>
1 parent 972ac0e commit a463f69

6 files changed

Lines changed: 24 additions & 21 deletions

File tree

go.mod

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -53,7 +53,7 @@ require (
5353
golang.org/x/oauth2 v0.34.0 // indirect
5454
golang.org/x/sys v0.45.0 // indirect
5555
golang.org/x/term v0.43.0 // indirect
56-
golang.org/x/text v0.37.0 // indirect
56+
golang.org/x/text v0.39.0 // indirect
5757
golang.org/x/time v0.14.0 // indirect
5858
google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af // indirect
5959
gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect

go.sum

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -113,8 +113,8 @@ golang.org/x/sys v0.45.0 h1:dO4czNzziLiiXplLQgBCEpCvXQ3dnkn0SdaZSYdQ+FY=
113113
golang.org/x/sys v0.45.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=
114114
golang.org/x/term v0.43.0 h1:S4RLU2sB31O/NCl+zFN9Aru9A/Cq2aqKpTZJ6B+DwT4=
115115
golang.org/x/term v0.43.0/go.mod h1:lrhlHNdQJHO+1qVYiHfFKVuVioJIheAc3fBSMFYEIsk=
116-
golang.org/x/text v0.37.0 h1:Cqjiwd9eSg8e0QAkyCaQTNHFIIzWtidPahFWR83rTrc=
117-
golang.org/x/text v0.37.0/go.mod h1:a5sjxXGs9hsn/AJVwuElvCAo9v8QYLzvavO5z2PiM38=
116+
golang.org/x/text v0.39.0 h1:UbZz4pLOvn600D6Oh6GGEI6VAmndrEBLv8/6BEXzyus=
117+
golang.org/x/text v0.39.0/go.mod h1:3UwRclnC2g0TU9x8PZiyfOajCd1zaUNHF9cvqcQZ+ZM=
118118
golang.org/x/time v0.14.0 h1:MRx4UaLrDotUKUdCIqzPC48t1Y9hANFKIRpNx+Te8PI=
119119
golang.org/x/time v0.14.0/go.mod h1:eL/Oa2bBBK0TkX57Fyni+NgnyQQN4LitPmob2Hjnqw4=
120120
google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af h1:+5/Sw3GsDNlEmu7TfklWKPdQ0Ykja5VEmq2i817+jbI=

vendor/golang.org/x/text/unicode/norm/forminfo.go

Lines changed: 8 additions & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

vendor/golang.org/x/text/unicode/norm/iter.go

Lines changed: 2 additions & 6 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

vendor/golang.org/x/text/unicode/norm/normalize.go

Lines changed: 10 additions & 10 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

vendor/modules.txt

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -215,7 +215,7 @@ golang.org/x/sys/windows
215215
# golang.org/x/term v0.43.0
216216
## explicit; go 1.25.0
217217
golang.org/x/term
218-
# golang.org/x/text v0.37.0
218+
# golang.org/x/text v0.39.0
219219
## explicit; go 1.25.0
220220
golang.org/x/text/encoding
221221
golang.org/x/text/encoding/internal

0 commit comments

Comments
 (0)