From 19b95b62335dce4aba738c09591cf264dad5d49b Mon Sep 17 00:00:00 2001 From: github-merge-queue <118344674+github-merge-queue@users.noreply.github.com> Date: Fri, 16 Oct 2026 05:40:57 +0000 Subject: [PATCH 1/2] Bump dependencies with known vulnerabilities --- go.mod | 2 +- go.sum | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/go.mod b/go.mod index d6385c07216..28037963598 100644 --- a/go.mod +++ b/go.mod @@ -38,7 +38,7 @@ require ( go.yaml.in/yaml/v3 v3.0.5 // MIT AND Apache-2.0 golang.org/x/crypto v0.57.0 // BSD-3-Clause golang.org/x/mod v0.41.0 // BSD-3-Clause - golang.org/x/net v0.59.0 // BSD-3-Clause + golang.org/x/net v0.60.0 // BSD-3-Clause golang.org/x/oauth2 v0.37.0 // BSD-3-Clause golang.org/x/sync v0.24.0 // BSD-3-Clause golang.org/x/sys v0.48.0 // BSD-3-Clause diff --git a/go.sum b/go.sum index f82cd6140de..64cbaf9012f 100644 --- a/go.sum +++ b/go.sum @@ -206,8 +206,8 @@ golang.org/x/exp v0.0.0-20240222234643-814bf88cf225 h1:LfspQV/FYTatPTr/3HzIcmiUF golang.org/x/exp v0.0.0-20240222234643-814bf88cf225/go.mod h1:CxmFvTBINI24O/j8iY7H1xHzx2i4OsyguNBmN/uPtqc= golang.org/x/mod v0.41.0 h1:qJmnOUb4YB+FsEuM3HcWucdZASCPGhsX6uljO6pog0c= golang.org/x/mod v0.41.0/go.mod h1:Ek9pY8RKWXwsWvd3rQiHYtMqkjSUV+s1Rj7j4H5Ur6o= -golang.org/x/net v0.59.0 h1:5zfYln+w5XCxwrnMMJPufRgNoXEaGxl0wo5GqPXyues= -golang.org/x/net v0.59.0/go.mod h1:2DA/G1UfVbCpQPeWTmMPGY7Cs2PkBkwu743bVX5PIVg= +golang.org/x/net v0.60.0 h1:79p50tfZlm0J9YfoDsSi639qSXNGVwEzOPLCxM2FsYU= +golang.org/x/net v0.60.0/go.mod h1:2DA/G1UfVbCpQPeWTmMPGY7Cs2PkBkwu743bVX5PIVg= golang.org/x/oauth2 v0.37.0 h1:JUlcxA8oAtauLfiH8FX2/FkAWHAdi0QtGCGc+hofE98= golang.org/x/oauth2 v0.37.0/go.mod h1:IxwZNxUULJmpBFf9K/9NTMSIfZZuvuTy1gGxhigP/58= golang.org/x/sync v0.24.0 h1:iqiDrGoDgyuvAKrhLQthUEzU/R378N78gXbBjxed7oA= From df3c5eb6cdd12f9ce3b77036da5a03372b7dad19 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Fri, 16 Oct 2026 05:41:04 +0000 Subject: [PATCH 2/2] Add changelog fragment --- .nextchanges/dependency-updates/7083.md | 1 + 1 file changed, 1 insertion(+) create mode 100644 .nextchanges/dependency-updates/7083.md diff --git a/.nextchanges/dependency-updates/7083.md b/.nextchanges/dependency-updates/7083.md new file mode 100644 index 00000000000..0ea29a7b03e --- /dev/null +++ b/.nextchanges/dependency-updates/7083.md @@ -0,0 +1 @@ +* Bump dependencies with known vulnerabilities. ([#7083](https://github.com/databricks/cli/pull/7083))