Bump golang.org/x/text to v0.39.0 for CVE-2026-56852
Upgrade the indirect golang.org/x/text dependency from v0.38.0 to v0.39.0 to remediate CVE-2026-56852. Running go mod tidy also carried along golang.org/x/tools and golang.org/x/telemetry to their matching versions. Signed-off-by: Sacha Al Himdani <sacha@probo.com>
This commit is contained in:
6
go.mod
6
go.mod
@@ -151,7 +151,7 @@ require (
|
||||
github.com/youmark/pkcs8 v0.0.0-20240726163527-a2c0da244d78 // indirect
|
||||
go.yaml.in/yaml/v3 v3.0.4 // indirect
|
||||
go.yaml.in/yaml/v4 v4.0.0-rc.6 // indirect
|
||||
golang.org/x/telemetry v0.0.0-20260610154732-fb80ec83bdd9 // indirect
|
||||
golang.org/x/telemetry v0.0.0-20260625142307-59b4966ccb57 // indirect
|
||||
gopkg.in/warnings.v0 v0.1.2 // indirect
|
||||
k8s.io/klog/v2 v2.140.0 // indirect
|
||||
)
|
||||
@@ -250,8 +250,8 @@ require (
|
||||
golang.org/x/net v0.56.0
|
||||
golang.org/x/sys v0.46.0 // indirect
|
||||
golang.org/x/term v0.44.0
|
||||
golang.org/x/text v0.38.0 // indirect
|
||||
golang.org/x/tools v0.46.0 // indirect
|
||||
golang.org/x/text v0.39.0 // indirect
|
||||
golang.org/x/tools v0.47.0 // indirect
|
||||
google.golang.org/genproto/googleapis/api v0.0.0-20260526163538-3dc84a4a5aaa // indirect
|
||||
google.golang.org/genproto/googleapis/rpc v0.0.0-20260622175928-b703f567277d // indirect
|
||||
google.golang.org/grpc v1.81.1 // indirect
|
||||
|
||||
Reference in New Issue
Block a user