Skip to content

chore(deps): bump golang.org/x/net from 0.56.0 to 0.57.0#291

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/golang.org/x/net-0.57.0
Open

chore(deps): bump golang.org/x/net from 0.56.0 to 0.57.0#291
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/golang.org/x/net-0.57.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 9, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps golang.org/x/net from 0.56.0 to 0.57.0.

Commits
  • b8f09f6 go.mod: update golang.org/x dependencies
  • f05f21b idna: reject all-ASCII xn-- labels on all Go versions
  • 0f748cf internal/http3: clean up stream I/O methods usages in tests
  • 0bb961e internal/http3: add net/http.ResponseController support
  • 0ca694d webdav: document Dir's lack of defense against filesystem modification
  • bd5f1dc http2: initialize Transport on NewClientConn
  • 488ff63 bpf: add security considerations to package docs
  • 93d1f25 xsrftoken: avoid token collisions
  • 5a3baee internal/http3: prevent panic in QPACK decoder due to overflow
  • See full diff in compare view

@dependabot dependabot Bot assigned iggy Jul 9, 2026
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 9, 2026
@dependabot dependabot Bot mentioned this pull request Jul 9, 2026
Closed
@github-actions

github-actions Bot commented Jul 9, 2026 •
edited
Loading

Copy link
Copy Markdown

❌MegaLinter analysis: Error

Descriptor Linter Files Fixed Errors Warnings Elapsed time
✅ ACTION actionlint 4 0 0 0.12s
✅ API spectral 2 0 0 2.49s
✅ COPYPASTE jscpd yes no no 2.22s
✅ DOCKERFILE hadolint 1 0 0 0.1s
✅ GO golangci-lint yes yes no no 60.85s
✅ GO revive yes no no 1.81s
✅ MARKDOWN markdownlint 2 0 0 0 0.73s
✅ MARKDOWN markdown-table-formatter 2 0 0 0 0.31s
✅ REPOSITORY checkov yes no no 45.87s
✅ REPOSITORY gitleaks yes no no 0.39s
✅ REPOSITORY git_diff yes no no 0.01s
✅ REPOSITORY grype yes no no 89.89s
✅ REPOSITORY secretlint yes no no 0.84s
✅ REPOSITORY syft yes no no 3.59s
❌ REPOSITORY trivy yes 1 no 25.08s
✅ REPOSITORY trivy-sbom yes no no 3.18s
✅ REPOSITORY trufflehog yes no no 4.71s
✅ SPELL lychee 14 0 0 0.11s
✅ YAML prettier 12 0 0 0 0.84s
✅ YAML v8r 12 0 0 16.21s
✅ YAML yamllint 12 0 0 0.84s

Detailed Issues

❌ REPOSITORY / trivy - 1 error 
2026-07-22T04:31:20Z	INFO	[vulndb] Need to update DB
2026-07-22T04:31:20Z	INFO	[vulndb] Downloading vulnerability DB...
2026-07-22T04:31:20Z	INFO	[vulndb] Downloading artifact...	repo="mirror.gcr.io/aquasec/trivy-db:2"
1.48 MiB / 101.24 MiB [>_____________________________________________________________] 1.46% ? p/s ?17.04 MiB / 101.24 MiB [---------->_________________________________________________] 16.83% ? p/s ?40.97 MiB / 101.24 MiB [------------------------>___________________________________] 40.47% ? p/s ?59.66 MiB / 101.24 MiB [--------------------------->___________________] 58.92% 95.74 MiB p/s ETA 0s76.03 MiB / 101.24 MiB [----------------------------------->___________] 75.10% 95.74 MiB p/s ETA 0s93.75 MiB / 101.24 MiB [------------------------------------------->___] 92.60% 95.74 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 94.09 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 94.09 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 94.09 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 88.02 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 88.02 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 88.02 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 82.35 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 82.35 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 82.35 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 77.03 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 77.03 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 77.03 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 72.06 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 72.06 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 72.06 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 67.41 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 67.41 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 67.41 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 63.06 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 63.06 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 63.06 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 59.00 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 59.00 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 59.00 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 55.19 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 55.19 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 55.19 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 51.63 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 51.63 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 51.63 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 48.30 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 48.30 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 48.30 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 45.18 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 45.18 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 45.18 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 42.27 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 42.27 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 42.27 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 39.54 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 39.54 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 39.54 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 36.99 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 36.99 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 36.99 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 34.60 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 34.60 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 34.60 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 32.37 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 32.37 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 32.37 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 30.28 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 30.28 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 30.28 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 28.33 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 28.33 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 28.33 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 26.50 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 26.50 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 26.50 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------------] 100.00% 7.70 MiB p/s 13s2026-07-22T04:31:35Z	INFO	[vulndb] Artifact successfully downloaded	repo="mirror.gcr.io/aquasec/trivy-db:2"
2026-07-22T04:31:35Z	INFO	[vuln] Vulnerability scanning is enabled
2026-07-22T04:31:35Z	INFO	[misconfig] Misconfiguration scanning is enabled
2026-07-22T04:31:35Z	INFO	[checks-client] Need to update the checks bundle
2026-07-22T04:31:35Z	INFO	[checks-client] Downloading the checks bundle...
234.65 KiB / 234.65 KiB [--------------------------------------------------------->] 100.00% ? p/s ?234.65 KiB / 234.65 KiB [-----------------------------------------------] 100.00% 2.99 MiB p/s 300ms2026-07-22T04:31:44Z	INFO	Number of language-specific files	num=1
2026-07-22T04:31:44Z	INFO	[gomod] Detecting vulnerabilities...
2026-07-22T04:31:44Z	INFO	Detected config files	num=2
2026-07-22T04:31:44Z	WARN	Using severities from other vendors for some vulnerabilities. Read https://trivy.dev/docs/v0.69/guide/scanner/vulnerability#severity-selection for details.

Report Summary

┌──────────────────┬────────────┬─────────────────┬───────────────────┐
│      Target      │    Type    │ Vulnerabilities │ Misconfigurations │
├──────────────────┼────────────┼─────────────────┼───────────────────┤
│ go.mod           │   gomod    │        2        │         -         │
├──────────────────┼────────────┼─────────────────┼───────────────────┤
│ Dockerfile       │ dockerfile │        -        │         0         │
├──────────────────┼────────────┼─────────────────┼───────────────────┤
│ Dockerfile.local │ dockerfile │        -        │         0         │
└──────────────────┴────────────┴─────────────────┴───────────────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://trivy.dev/docs/v0.69/guide/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


go.mod (gomod)
==============
Total: 2 (UNKNOWN: 1, LOW: 1, MEDIUM: 0, HIGH: 0, CRITICAL: 0)

┌─────────────────────────────────────────┬─────────────────────┬──────────┬──────────┬───────────────────┬───────────────┬────────────────────────────────────────────────────────────┐
│                 Library                 │    Vulnerability    │ Severity │  Status  │ Installed Version │ Fixed Version │                           Title                            │
├─────────────────────────────────────────┼─────────────────────┼──────────┼──────────┼───────────────────┼───────────────┼────────────────────────────────────────────────────────────┤
│ github.com/oapi-codegen/oapi-codegen/v2 │ GHSA-rjwr-m7qx-3fjr │ LOW      │ fixed    │ v2.5.0            │ 2.7.1         │ oapi-codegen: OpenAPI Server Description Escapes Generated │
│                                         │                     │          │          │                   │               │ Go Comment and Injects Executable Code...                  │
│                                         │                     │          │          │                   │               │ https://github.com/advisories/GHSA-rjwr-m7qx-3fjr          │
├─────────────────────────────────────────┼─────────────────────┼──────────┼──────────┼───────────────────┼───────────────┼────────────────────────────────────────────────────────────┤
│ golang.org/x/crypto                     │ GO-2026-5932        │ UNKNOWN  │ affected │ v0.54.0           │               │ The golang.org/x/crypto/openpgp package is unmaintained,   │
│                                         │                     │          │          │                   │               │ unsafe by design, and has known security...                │
└─────────────────────────────────────────┴─────────────────────┴──────────┴──────────┴───────────────────┴───────────────┴────────────────────────────────────────────────────────────┘

📣 Notices:
  - Version 0.72.0 of Trivy is now available, current version is 0.69.1

To suppress version checks, run Trivy scans with the --skip-version-check flag

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

  • Documentation: Custom Flavors
  • Command: npx mega-linter-runner@9.4.0 --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,API_SPECTRAL,COPYPASTE_JSCPD,DOCKERFILE_HADOLINT,GO_GOLANGCI_LINT,GO_REVIVE,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_GIT_DIFF,REPOSITORY_GITLEAKS,REPOSITORY_GRYPE,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,SPELL_LYCHEE,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

MegaLinter is graciously provided by OX Security
Show us your support by starring ⭐ the repository

@dependabot
chore(deps): bump golang.org/x/net from 0.56.0 to 0.57.0
599a91f 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.56.0 to 0.57.0.
- [Commits](golang/net@v0.56.0...v0.57.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.57.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump golang.org/x/net from 0.55.0 to 0.57.0 chore(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 Jul 22, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/golang.org/x/net-0.57.0 branch from 9b1795f to 599a91f Compare July 22, 2026 04:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@iggy iggy

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@iggy