chore(deps): update module golang.org/x/text to v0.39.0 [security] - #208

Open

alaudaa-renovate[bot] wants to merge 1 commit into

mainfrom

renovate/go-golang.org-x-text-vulnerability

alaudaa-renovate Bot commented Jul 29, 2026

Contributor

This PR contains the following updates:

Package	Change	Age	Confidence
golang.org/x/text	`v0.31.0` -> `v0.39.0`
golang.org/x/text	`v0.36.0` -> `v0.39.0`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Infinite loop on invalid input in golang.org/x/text

CVE-2026-56852 / GO-2026-5970

More information

Details

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.

Severity

Unknown

References

This data is provided by OSV and the Go Vulnerability Database (CC-BY 4.0).

Configuration

📅 Schedule: Branch creation - "" in timezone Asia/Shanghai, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.


          chore(deps): update module golang.org/x/text to v0.39.0 [security]

alaudaa-renovate Bot added the dependencies label

alaudaa-renovate Bot commented Jul 29, 2026

Contributor Author

ℹ Artifact update notice

File name: artifact-scanner/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

1 additional dependency was updated

Details:

Package	Change
`golang.org/x/sync`	`v0.20.0` -> `v0.21.0`

File name: dependabot/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

3 additional dependencies were updated

Details:

Package	Change
`golang.org/x/net`	`v0.53.0` -> `v0.56.0`
`golang.org/x/sys`	`v0.43.0` -> `v0.46.0`
`golang.org/x/tools`	`v0.43.0` -> `v0.47.0`

File name: plugin-releaser/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

3 additional dependencies were updated

Details:

Package	Change
`golang.org/x/net`	`v0.53.0` -> `v0.56.0`
`golang.org/x/sys`	`v0.43.0` -> `v0.46.0`
`golang.org/x/tools`	`v0.43.0` -> `v0.47.0`

File name: pr-cli/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

4 additional dependencies were updated

Details:

Package	Change
`golang.org/x/net`	`v0.53.0` -> `v0.56.0`
`golang.org/x/sys`	`v0.43.0` -> `v0.46.0`
`golang.org/x/term`	`v0.42.0` -> `v0.44.0`
`golang.org/x/tools`	`v0.43.0` -> `v0.47.0`

File name: roadmap-planner/backend/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

1 additional dependency was updated

Details:

Package	Change
`golang.org/x/sync`	`v0.20.0` -> `v0.21.0`

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels