Skip to content

fix(deps): update module golang.org/x/text to v0.41.0 [security] - autoclosed - #497

Closed
ccf-release-bot[bot] wants to merge 1 commit into
mainfrom
renovate/go-golang.org-x-text-vulnerability
Closed

ccf-release-bot[bot] wants to merge 1 commit into
mainfrom
renovate/go-golang.org-x-text-vulnerability

Conversation

@ccf-release-bot

@ccf-release-bot ccf-release-bot Bot commented Oct 12, 2026 •

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
golang.org/x/text v0.40.0 → v0.41.0 age confidence

Panic parsing crafted input in x/text/secure/precis in golang.org/x/text

CVE-2026-56851 / GO-2026-6629

More information

Details

The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer.

Severity

Unknown

References

This data is provided by OSV and the Go Vulnerability Database (CC-BY 4.0).


Configuration

📅 Schedule: (in timezone UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

@ccf-release-bot

ccf-release-bot Bot commented Oct 12, 2026 •

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 3 additional dependencies were updated

Details:

Package Change
golang.org/x/mod v0.37.0 -> v0.38.0
golang.org/x/net v0.56.0 -> v0.57.0
golang.org/x/tools v0.47.0 -> v0.48.0

@coderabbitai

coderabbitai Bot commented Oct 12, 2026 •

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: 0247f2ca-b7d2-418e-993f-77c3a92cf489

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@ccf-release-bot
ccf-release-bot Bot force-pushed the renovate/go-golang.org-x-text-vulnerability branch from 570b7e3 to 8d7e954 Compare October 13, 2026 14:18
@ccf-release-bot ccf-release-bot Bot changed the title fix(deps): update module golang.org/x/text to v0.41.0 [security] fix(deps): update module golang.org/x/text to v0.41.0 [security] - autoclosed Oct 13, 2026
@ccf-release-bot ccf-release-bot Bot closed this Oct 13, 2026
@ccf-release-bot
ccf-release-bot Bot deleted the renovate/go-golang.org-x-text-vulnerability branch October 13, 2026 15:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants