Skip to content

chore: bump the x group with 9 updates#609

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/x-f138592dd3
Open

chore: bump the x group with 9 updates#609
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/x-f138592dd3

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Aug 25, 2025

Bumps the x group with 9 updates:

Package From To
golang.org/x/crypto 0.26.0 0.41.0
golang.org/x/mod 0.20.0 0.26.0
golang.org/x/net 0.28.0 0.42.0
golang.org/x/oauth2 0.22.0 0.30.0
golang.org/x/sync 0.8.0 0.16.0
golang.org/x/sys 0.24.0 0.35.0
golang.org/x/term 0.23.0 0.34.0
golang.org/x/text 0.17.0 0.28.0
golang.org/x/tools 0.24.0 0.35.0

Updates golang.org/x/crypto from 0.26.0 to 0.41.0

Commits
  • ef5341b go.mod: update golang.org/x dependencies
  • b999374 acme: fix pebble subprocess output data race
  • c247dea x509roots/fallback: store bundle certs directly in DER
  • 1fda731 acme: increase pebble test waitForServer attempts
  • 1b4c3d2 x509roots/fallback: update bundle
  • b903b53 acme: capture pebble test subprocess stdout/stderr
  • 459a9db go.mod: update golang.org/x dependencies
  • 74e709a ssh: add AlgorithmNegotiationError
  • b3790b8 acme: fix TLSALPN01ChallengeCert for IP address identifiers
  • 1dc4269 acme: add Pebble integration testing
  • Additional commits viewable in compare view

Updates golang.org/x/mod from 0.20.0 to 0.26.0

Commits
  • ea04085 go.mod: update golang.org/x dependencies
  • 9d33331 x/mod: add the ignore directive
  • ae88a97 all: change from sort functions to slices functions
  • dc121ce all: upgrade go directive to at least 1.23.0 [generated]
  • 52289f1 modfile: fix trailing empty lines in require blocks
  • dec0365 sumdb: make data tiles by Server compatible with sum.golang.org
  • c8a7319 x/mod: fix handling of vendored packages with '/vendor' in non-top-level paths
  • 9cd0e4c x/mod: remove vendor/modules.txt from module download
  • 46a3137 zip: set GIT_DIR in test when using bare repositories
  • 3afcd4e go.mod: set go version to 1.22.0
  • Additional commits viewable in compare view

Updates golang.org/x/net from 0.28.0 to 0.42.0

Commits
  • 76358aa go.mod: update golang.org/x dependencies
  • 6e41cae go.mod: update golang.org/x dependencies
  • 15f7d40 http2: correctly wrap ErrFrameTooLarge in Framer.ReadFrame
  • ef33bc0 internal/http3: use bubbled context in synctest tests
  • 919c6bc http2: use an array instead of a map in typeFrameParser
  • bae01a7 trace: add missing td tag
  • 7d6e62a go.mod: update golang.org/x dependencies
  • ea0c1d9 internal/timeseries: use built-in max/min to simplify the code
  • 3e7a445 quic: skip packet numbers for optimistic ack defense
  • 3f563d3 quic: use an enum for sentPacket state
  • Additional commits viewable in compare view

Updates golang.org/x/oauth2 from 0.22.0 to 0.30.0

Commits
  • cf14319 oauth2: fix expiration time window check
  • 32d34ef internal: include clientID in auth style cache key
  • 2d34e30 oauth2: replace a magic number with AuthStyleUnknown
  • 696f7b3 all: modernize with doc links and any
  • 471209b oauth2: drop dependency on go-cmp
  • 6968da2 oauth2: sync Token.ExpiresIn from internal Token
  • d2c4e0a oauth2: context instead of golang.org/x/net/context in doc
  • 883dc3c endpoints: add various endpoints from stale CLs
  • 1c06e87 all: make use of oauth.Token.ExpiresIn
  • 65c15a3 oauth2: remove extra period
  • Additional commits viewable in compare view

Updates golang.org/x/sync from 0.8.0 to 0.16.0

Commits
  • 7fad2c9 errgroup: revert propagation of panics
  • 8a14946 errgroup: remove duplicated comment
  • 1869c69 all: replace deprecated ioutil
  • d1ac909 sync/errgroup: PanicError.Error print stack trace
  • 506c70f errgroup: propagate panic and Goexit through Wait
  • 396f3a0 errgroup: document calling Go before Wait
  • b637f27 errgroup: drop support for Go versions before 1.20
  • 960bf1f all: upgrade go directive to at least 1.23.0 [generated]
  • fe3591b sync/errgroup: improve documentation for semaphore limit behavior
  • 913fb63 singleflight: fix typo in singleflight_test.go
  • Additional commits viewable in compare view

Updates golang.org/x/sys from 0.24.0 to 0.35.0

Commits
  • 5b936e1 unix/linux: update to Linux kernel 6.16, Go to 1.24.5
  • 3a82703 unix: remove redundant xnu version check for {p}readv/{p}writev
  • 9920300 unix: add missing nft conntrack constants
  • ad4e0fc unix: remove redundant word in comment
  • 084ad87 unix: fix //sys decl after CL 548795
  • 751c3c6 unix: add missing NFT_PAYLOAD_* consts on linux
  • 0c740cc unix: update Go to 1.24.3
  • d62d31c unix: update Linux constants and types to v6.14
  • 3d9a6b8 windows: add WSADuplicateSocket
  • c0a9559 cpu: add crypto extensions detection for riscv64
  • Additional commits viewable in compare view

Updates golang.org/x/term from 0.23.0 to 0.34.0

Commits
  • a35244d go.mod: update golang.org/x dependencies
  • 4f53e0c term: allow multi-line bracketed paste to not create single line with verbati...
  • 27f29d8 term: remove duplicate flag and add comment on windows
  • 30da5dd go.mod: update golang.org/x dependencies
  • 2ec7864 go.mod: update golang.org/x dependencies
  • a809085 term: support pluggable history
  • 5d2308b go.mod: update golang.org/x dependencies
  • e770ddd x/term: disabling auto-completion around GetPassword()
  • 04218fd go.mod: update golang.org/x dependencies
  • 208db03 all: upgrade go directive to at least 1.23.0 [generated]
  • Additional commits viewable in compare view

Updates golang.org/x/text from 0.17.0 to 0.28.0

Commits
  • 425d715 go.mod: update golang.org/x dependencies
  • b6d2645 go.mod: update golang.org/x dependencies
  • 8072180 go.mod: update golang.org/x dependencies
  • 6cacac1 go.mod: update tagx:ignore'd golang.org/x dependencies
  • 700cc20 go.mod: update golang.org/x dependencies
  • 4890c57 go.mod: update golang.org/x dependencies
  • 566b44f go.mod: update golang.org/x dependencies
  • d5156da collate/build: do not use println in tests
  • 221d88c x/text: fix scientific notation by removing extraneous spaces
  • b18c107 internal/export/unicode: change C comment to mention unassigned code points
  • Additional commits viewable in compare view

Updates golang.org/x/tools from 0.24.0 to 0.35.0

Commits
  • 50ec2f1 go.mod: update golang.org/x dependencies
  • 197c6c1 gopls/internal/mcp: more tuning of tools and prompts
  • 9563af6 gopls/internal/mcp: include module paths in workspace summaries
  • 88a4eb3 gopls/internal/cmd: wait for startup log in TestMCPCommandHTTP
  • 4738c7c gopls/internal/cmd: avoid the use of channels in the sessions API
  • ae18417 gopls/internal/filewatcher: skip test for unsupported OS
  • 8391b17 gopls/doc: document Zed editor
  • 778fe21 gopls/internal/util/tokeninternal: move from internal/tokeninternal
  • 0343b70 internal/jsonrpc2/stack: move from internal/stack
  • 8c9f4cc gopls/internal/filewatcher: refactor filewatcher to pass in handler func
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the x group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.26.0` | `0.41.0` |
| [golang.org/x/mod](https://github.com/golang/mod) | `0.20.0` | `0.26.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.28.0` | `0.42.0` |
| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.22.0` | `0.30.0` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.8.0` | `0.16.0` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.24.0` | `0.35.0` |
| [golang.org/x/term](https://github.com/golang/term) | `0.23.0` | `0.34.0` |
| [golang.org/x/text](https://github.com/golang/text) | `0.17.0` | `0.28.0` |
| [golang.org/x/tools](https://github.com/golang/tools) | `0.24.0` | `0.35.0` |


Updates `golang.org/x/crypto` from 0.26.0 to 0.41.0
- [Commits](golang/crypto@v0.26.0...v0.41.0)

Updates `golang.org/x/mod` from 0.20.0 to 0.26.0
- [Commits](golang/mod@v0.20.0...v0.26.0)

Updates `golang.org/x/net` from 0.28.0 to 0.42.0
- [Commits](golang/net@v0.28.0...v0.42.0)

Updates `golang.org/x/oauth2` from 0.22.0 to 0.30.0
- [Commits](golang/oauth2@v0.22.0...v0.30.0)

Updates `golang.org/x/sync` from 0.8.0 to 0.16.0
- [Commits](golang/sync@v0.8.0...v0.16.0)

Updates `golang.org/x/sys` from 0.24.0 to 0.35.0
- [Commits](golang/sys@v0.24.0...v0.35.0)

Updates `golang.org/x/term` from 0.23.0 to 0.34.0
- [Commits](golang/term@v0.23.0...v0.34.0)

Updates `golang.org/x/text` from 0.17.0 to 0.28.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.17.0...v0.28.0)

Updates `golang.org/x/tools` from 0.24.0 to 0.35.0
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](golang/tools@v0.24.0...v0.35.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: x
- dependency-name: golang.org/x/mod
  dependency-version: 0.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: x
- dependency-name: golang.org/x/net
  dependency-version: 0.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: x
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: x
- dependency-name: golang.org/x/sync
  dependency-version: 0.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: x
- dependency-name: golang.org/x/sys
  dependency-version: 0.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: x
- dependency-name: golang.org/x/term
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: x
- dependency-name: golang.org/x/text
  dependency-version: 0.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: x
- dependency-name: golang.org/x/tools
  dependency-version: 0.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: x
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 25, 2025
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github Nov 17, 2025

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants