Visitar URL original
build(deps): bump golang.org/x/net to v0.55.0 (#1308) · modelcontextprotocol/registry@66cc039 · GitHub
Skip to content

Commit 66cc039

Browse files
rdimitrovclaude
rdimitrov
and
claude
authored
build(deps): bump golang.org/x/net to v0.55.0 (#1308)
## Summary - Bumps `golang.org/x/net` from v0.53.0 to v0.55.0 to fix [GO-2026-5026](https://pkg.go.dev/vuln/GO-2026-5026) (failure to reject ASCII-only Punycode-encoded labels in `golang.org/x/net/idna`). - govulncheck flagged the vuln via `auth.DefaultHTTPKeyFetcher.FetchKey` → `http.Client.Do` → `idna.ToASCII` at `internal/api/handlers/v0/auth/http.go:191`. - Also brings in associated `x/crypto`, `x/sys`, `x/text` bumps via `go mod tidy`. This unblocks open dependabot PRs (e.g. #1298) that are failing CI on the same govulncheck finding despite not touching the root module. ## Test plan - [x] `go build ./...` - [x] `govulncheck` no longer reports GO-2026-5026 locally - [ ] CI passes 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
1 parent 5fe2c79 commit 66cc039

2 files changed

Lines changed: 12 additions & 12 deletions

File tree

‎go.mod‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -70,12 +70,12 @@ require (
7070
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.61.0 // indirect
7171
go.opentelemetry.io/otel/trace v1.43.0 // indirect
7272
go.yaml.in/yaml/v2 v2.4.4 // indirect
73-
golang.org/x/crypto v0.50.0 // indirect
74-
golang.org/x/net v0.53.0 // indirect
73+
golang.org/x/crypto v0.51.0 // indirect
74+
golang.org/x/net v0.55.0 // indirect
7575
golang.org/x/oauth2 v0.36.0 // indirect
7676
golang.org/x/sync v0.20.0 // indirect
77-
golang.org/x/sys v0.44.0 // indirect
78-
golang.org/x/text v0.36.0 // indirect
77+
golang.org/x/sys v0.45.0 // indirect
78+
golang.org/x/text v0.37.0 // indirect
7979
golang.org/x/time v0.15.0 // indirect
8080
google.golang.org/api v0.274.0 // indirect
8181
google.golang.org/genproto v0.0.0-20260319201613-d00831a3d3e7 // indirect

‎go.sum‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -158,21 +158,21 @@ go.uber.org/goleak v1.3.0 h1:2K3zAYmnTNqV73imy9J1T3WC+gmCePx2hEGkimedGto=
158158
go.uber.org/goleak v1.3.0/go.mod h1:CoHD4mav9JJNrW/WLlf7HGZPjdw8EucARQHekz1X6bE=
159159
go.yaml.in/yaml/v2 v2.4.4 h1:tuyd0P+2Ont/d6e2rl3be67goVK4R6deVxCUX5vyPaQ=
160160
go.yaml.in/yaml/v2 v2.4.4/go.mod h1:gMZqIpDtDqOfM0uNfy0SkpRhvUryYH0Z6wdMYcacYXQ=
161-
golang.org/x/crypto v0.50.0 h1:zO47/JPrL6vsNkINmLoo/PH1gcxpls50DNogFvB5ZGI=
162-
golang.org/x/crypto v0.50.0/go.mod h1:3muZ7vA7PBCE6xgPX7nkzzjiUq87kRItoJQM1Yo8S+Q=
161+
golang.org/x/crypto v0.51.0 h1:IBPXwPfKxY7cWQZ38ZCIRPI50YLeevDLlLnyC5wRGTI=
162+
golang.org/x/crypto v0.51.0/go.mod h1:8AdwkbraGNABw2kOX6YFPs3WM22XqI4EXEd8g+x7Oc8=
163163
golang.org/x/mod v0.36.0 h1:JJjpVx6myfUsUdAzZuOSTTmRE0PfZeNWzzvKrP7amb4=
164164
golang.org/x/mod v0.36.0/go.mod h1:moc6ELqsWcOw5Ef3xVprK5ul/MvtVvkIXLziUOICjUQ=
165-
golang.org/x/net v0.53.0 h1:d+qAbo5L0orcWAr0a9JweQpjXF19LMXJE8Ey7hwOdUA=
166-
golang.org/x/net v0.53.0/go.mod h1:JvMuJH7rrdiCfbeHoo3fCQU24Lf5JJwT9W3sJFulfgs=
165+
golang.org/x/net v0.55.0 h1:bcvxaJn3e1U6InsFWt1JUq1aSjnRxLzT2rtD2KfkDF8=
166+
golang.org/x/net v0.55.0/go.mod h1:L5U2KuzuOe1lY7Z+aWVIKK6qEeJXnXV9yzGA+WCHJww=
167167
golang.org/x/oauth2 v0.36.0 h1:peZ/1z27fi9hUOFCAZaHyrpWG5lwe0RJEEEeH0ThlIs=
168168
golang.org/x/oauth2 v0.36.0/go.mod h1:YDBUJMTkDnJS+A4BP4eZBjCqtokkg1hODuPjwiGPO7Q=
169169
golang.org/x/sync v0.20.0 h1:e0PTpb7pjO8GAtTs2dQ6jYa5BWYlMuX047Dco/pItO4=
170170
golang.org/x/sync v0.20.0/go.mod h1:9xrNwdLfx4jkKbNva9FpL6vEN7evnE43NNNJQ2LF3+0=
171171
golang.org/x/sys v0.1.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
172-
golang.org/x/sys v0.44.0 h1:ildZl3J4uzeKP07r2F++Op7E9B29JRUy+a27EibtBTQ=
173-
golang.org/x/sys v0.44.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=
174-
golang.org/x/text v0.36.0 h1:JfKh3XmcRPqZPKevfXVpI1wXPTqbkE5f7JA92a55Yxg=
175-
golang.org/x/text v0.36.0/go.mod h1:NIdBknypM8iqVmPiuco0Dh6P5Jcdk8lJL0CUebqK164=
172+
golang.org/x/sys v0.45.0 h1:dO4czNzziLiiXplLQgBCEpCvXQ3dnkn0SdaZSYdQ+FY=
173+
golang.org/x/sys v0.45.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=
174+
golang.org/x/text v0.37.0 h1:Cqjiwd9eSg8e0QAkyCaQTNHFIIzWtidPahFWR83rTrc=
175+
golang.org/x/text v0.37.0/go.mod h1:a5sjxXGs9hsn/AJVwuElvCAo9v8QYLzvavO5z2PiM38=
176176
golang.org/x/time v0.15.0 h1:bbrp8t3bGUeFOx08pvsMYRTCVSMk89u4tKbNOZbp88U=
177177
golang.org/x/time v0.15.0/go.mod h1:Y4YMaQmXwGQZoFaVFk4YpCt4FLQMYKZe9oeV/f4MSno=
178178
gonum.org/v1/gonum v0.17.0 h1:VbpOemQlsSMrYmn7T2OUvQ4dqxQXU+ouZFQsZOx50z4=

0 commit comments

Comments
 (0)