Skip to content

chore(deps): update module golang.org/x/net to v0.51.0 [security]#414

Merged
NumaryBot merged 1 commit intomainfrom
renovate/go-golang.org-x-net-vulnerability
Mar 2, 2026
Merged

chore(deps): update module golang.org/x/net to v0.51.0 [security]#414
NumaryBot merged 1 commit intomainfrom
renovate/go-golang.org-x-net-vulnerability

Conversation

@NumaryBot
Copy link
Contributor

This PR contains the following updates:

Package Type Update Change
golang.org/x/net indirect minor v0.50.0 -> v0.51.0

Sending certain HTTP/2 frames can cause a server to panic in golang.org/x/net

CVE-2026-27141 / GO-2026-4559

More information

Details

Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic

Severity

Unknown

References

This data is provided by OSV and the Go Vulnerability Database (CC-BY 4.0).


Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@NumaryBot NumaryBot requested a review from a team as a code owner February 28, 2026 02:47
@NumaryBot NumaryBot enabled auto-merge (squash) February 28, 2026 02:47
@coderabbitai
Copy link
Contributor

coderabbitai bot commented Feb 28, 2026

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (2)
  • tools/utils/go.mod is excluded by !**/*.mod
  • tools/utils/go.sum is excluded by !**/*.sum, !**/*.sum

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch renovate/go-golang.org-x-net-vulnerability

Tip

Try Coding Plans. Let us write the prompt for your AI agent so you can ship faster (with fewer bugs).
Share your feedback on Discord.


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@NumaryBot NumaryBot merged commit 62d6c48 into main Mar 2, 2026
7 of 11 checks passed
@NumaryBot NumaryBot deleted the renovate/go-golang.org-x-net-vulnerability branch March 2, 2026 08:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants