Skip to content
This repository was archived by the owner on Jul 30, 2026. It is now read-only.

chore(deps): update module golang.org/x/text to v0.39.0 [security] - #1888

Open
oep-renovate[bot] wants to merge 1 commit into
mainfrom
renovate/go-golang.org-x-text-vulnerability
Open

oep-renovate[bot] wants to merge 1 commit into
mainfrom
renovate/go-golang.org-x-text-vulnerability

Conversation

@oep-renovate

@oep-renovate oep-renovate Bot commented Jul 22, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
golang.org/x/text v0.32.0 → v0.39.0 age confidence
golang.org/x/text v0.37.0 → v0.39.0 age confidence

Infinite loop on invalid input in golang.org/x/text

CVE-2026-56852 / GO-2026-5970

More information

Details

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.

Severity

Unknown

References

This data is provided by OSV and the Go Vulnerability Database (CC-BY 4.0).


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@oep-renovate

oep-renovate Bot commented Jul 22, 2026

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: interactive_ai/services/inference_gateway/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 1 additional dependency was updated

Details:

Package Change
golang.org/x/sync v0.19.0 -> v0.21.0
File name: libs/grpc_interfaces/src/grpc_interfaces/account_service/go/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.24.0 -> 1.25.0
File name: libs/grpc_interfaces/src/grpc_interfaces/credit_system/go/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.24.0 -> 1.25.0
File name: libs/grpc_interfaces/src/grpc_interfaces/model_mesh/go/pb/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.24.0 -> 1.25.0
File name: libs/grpc_interfaces/src/grpc_interfaces/model_registration/go/pb/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.24.0 -> 1.25.0
File name: libs/grpc_interfaces/src/grpc_interfaces/predict/go/pb/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.24.0 -> 1.25.0
File name: platform/services/account/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 1 additional dependency was updated

Details:

Package Change
golang.org/x/sync v0.19.0 -> v0.21.0
File name: platform/services/auth_proxy/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.24.0 -> 1.25.0

Signed-off-by: oep-renovate[bot] <212772560+oep-renovate[bot]@users.noreply.github.com>
@oep-renovate
oep-renovate Bot force-pushed the renovate/go-golang.org-x-text-vulnerability branch from 7c8be9e to d4c7cd1 Compare July 24, 2026 03:18
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants