Skip to content

chore(deps): weekly safe go updates · 4 packages - #334

Open
mendral-app[bot] wants to merge 1 commit into
mainfrom
mendral/deps/weekly-safe-go-20260622
Open

chore(deps): weekly safe go updates · 4 packages#334
mendral-app[bot] wants to merge 1 commit into
mainfrom
mendral/deps/weekly-safe-go-20260622

Conversation

@mendral-app

@mendral-app mendral-app Bot commented Jun 22, 2026

Copy link
Copy Markdown
Contributor

Packages bumped

Package Old New Published
golang.org/x/crypto v0.36.0 v0.53.0 2026-06-08
golang.org/x/net v0.38.0 v0.56.0 2026-06-09
golang.org/x/text v0.30.0 v0.38.0 2026-06-08
golang.org/x/sync v0.20.0 v0.21.0 2026-06-04
Per-package detail

golang.org/x/crypto v0.36.0 → v0.53.0

  • 18 known advisories on v0.36.0 (GO-2025-4116, GO-2025-4134, GO-2025-4135, GO-2026-5005 through GO-2026-5033). Resolves all.
  • Indirect dependency used transitively via google.golang.org/grpc and golang.org/x/net. No direct imports in this codebase.

golang.org/x/net v0.38.0 → v0.56.0

  • 9 known advisories on v0.38.0 (GO-2026-4440, GO-2026-4441, GO-2026-4918, GO-2026-5025 through GO-2026-5030). Resolves all.
  • Indirect dependency. Used transitively; no direct net/http2 or net/html imports from this repo.

golang.org/x/text v0.30.0 → v0.38.0

  • No known advisories on current version. Updated for consistency with the x/ family.
  • Indirect dependency via charmbracelet packages and golang.org/x/net.

golang.org/x/sync v0.20.0 → v0.21.0

  • No known advisories. Minor version bump.
  • Indirect dependency via charmbracelet/bubbletea.

Files modified

  • go.mod
  • go.sum
Skipped this ecosystem
Package Current Latest Reason
github.com/getsentry/sentry-go v0.44.1 v0.47.0 Open PR #332
github.com/jedib0t/go-pretty/v6 v6.7.9 v6.8.1 Open PR #322
github.com/blaxel-ai/sdk-go v0.18.0 v0.22.0 Open PR #311
github.com/Masterminds/semver/v3 v3.4.0 v3.5.0 Open PR #295
github.com/charmbracelet/lipgloss v1.1.1-pseudo Pinned to pseudo-version; no newer stable tag
github.com/charmbracelet/huh/spinner v0.0.0-pseudo No tagged releases available
github.com/google/goexpect v0.0.0-pseudo No tagged releases; archived upstream
All other direct deps latest Already at latest stable version

Note

Created by Mendral. Tag @mendral-app with feedback or questions.

- golang.org/x/crypto v0.36.0 → v0.53.0
- golang.org/x/net v0.38.0 → v0.56.0
- golang.org/x/text v0.30.0 → v0.38.0
- golang.org/x/sync v0.20.0 → v0.21.0

Resolves 18 known advisories in x/crypto and 9 in x/net.
@mendral-app
mendral-app Bot requested a review from a team June 22, 2026 09:11
@mendral-app
mendral-app Bot marked this pull request as ready for review June 22, 2026 09:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants