Bump golang.org/x/crypto, golang.org/x/net, and golang.org/x/text to address security vulnerabilities - #203
Open
johncollinson2001 wants to merge 2 commits into
Open
Conversation
…atest versions in /tests/end-to-end-tests
Contributor
There was a problem hiding this comment.
Pull request overview
Updates Go dependencies in the tests/end-to-end-tests module to newer versions, aligning end-to-end test tooling with the latest available security/performance fixes from the golang.org/x libraries.
Changes:
- Bump
golang.org/x/cryptofromv0.51.0tov0.52.0. - Bump
golang.org/x/netfromv0.54.0tov0.55.0. - Bump
golang.org/x/sysfromv0.44.0tov0.45.0. - Regenerate corresponding
go.sumentries for the updated versions.
Reviewed changes
Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.
| File | Description |
|---|---|
| tests/end-to-end-tests/go.mod | Updates indirect dependency versions for golang.org/x/crypto, golang.org/x/net, and golang.org/x/sys in the e2e test module. |
| tests/end-to-end-tests/go.sum | Updates checksums to match the bumped golang.org/x/* module versions. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
…org/x/sys, golang.org/x/sync, golang.org/x/term, and golang.org/x/text to latest versions in /tests/end-to-end-tests
johncollinson2001
enabled auto-merge (squash)
July 24, 2026 15:09
johncollinson2001
changed the title
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
Update
golang.org/xdependencies to resolve security vulnerabilities identified by a Grype scan:golang.org/x/textgolang.org/x/netgolang.org/x/cryptoThe following transitive dependencies were also updated as a result of
go mod tidy:golang.org/x/sys: v0.44.0 → v0.47.0golang.org/x/term: v0.43.0 → v0.45.0golang.org/x/tools: v0.44.0 → v0.47.0golang.org/x/sync: v0.20.0 → v0.22.0golang.org/x/mod: v0.35.0 → v0.37.0Type of change
🔲 New feature (a change which adds functionality)
🔲 Bug fix (a change which fixes an issue)
🔲 Refactoring (code cleanup or optimisation)
🔲 Testing (new tests, or improvements to existing tests)
🔲 Pipelines (changes to pipelines and workflows)
🔲 Documentation (changes to documentation)
✅ Other (something that's not listed here - please explain)
Security vulnerability remediation — bump Go packages to address Grype scan findings.
Checklist
🔲 My code aligns with the style of this project
🔲 I have added comments in hard to understand areas
🔲 I have added tests that prove my change works
🔲 I have updated the documentation
✅ If merging into main, I'm aware that the PR should be squash merged with a commit message that adheres to the semantic release format
Additional Information
Please provide any additional information or context related to this pull request.