Bump golang.org/x/text to v0.39.0 for CVE-2026-56852

Upgrade the indirect golang.org/x/text dependency from v0.38.0 to
v0.39.0 to remediate CVE-2026-56852. Running go mod tidy also carried
along golang.org/x/tools and golang.org/x/telemetry to their matching
versions.

Signed-off-by: Sacha Al Himdani <sacha@probo.com>
This commit is contained in:
Sacha Al Himdani
2026-07-15 18:27:16 +02:00
parent f14d8115b6
commit e62524b160
2 changed files with 9 additions and 9 deletions

6
go.mod
View File

@@ -151,7 +151,7 @@ require (
github.com/youmark/pkcs8 v0.0.0-20240726163527-a2c0da244d78 // indirect
go.yaml.in/yaml/v3 v3.0.4 // indirect
go.yaml.in/yaml/v4 v4.0.0-rc.6 // indirect
golang.org/x/telemetry v0.0.0-20260610154732-fb80ec83bdd9 // indirect
golang.org/x/telemetry v0.0.0-20260625142307-59b4966ccb57 // indirect
gopkg.in/warnings.v0 v0.1.2 // indirect
k8s.io/klog/v2 v2.140.0 // indirect
)
@@ -250,8 +250,8 @@ require (
golang.org/x/net v0.56.0
golang.org/x/sys v0.46.0 // indirect
golang.org/x/term v0.44.0
golang.org/x/text v0.38.0 // indirect
golang.org/x/tools v0.46.0 // indirect
golang.org/x/text v0.39.0 // indirect
golang.org/x/tools v0.47.0 // indirect
google.golang.org/genproto/googleapis/api v0.0.0-20260526163538-3dc84a4a5aaa // indirect
google.golang.org/genproto/googleapis/rpc v0.0.0-20260622175928-b703f567277d // indirect
google.golang.org/grpc v1.81.1 // indirect