Skip to content

chore: bump golang.org/x/net from 0.53.0 to 0.54.0#329

Open
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/go_modules/golang.org/x/net-0.54.0
Open

chore: bump golang.org/x/net from 0.53.0 to 0.54.0#329
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/go_modules/golang.org/x/net-0.54.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 12, 2026

Bumps golang.org/x/net from 0.53.0 to 0.54.0.

Commits
  • b138e06 go.mod: update golang.org/x dependencies
  • 689f70a quic: fix wrong final size being used for RESET_STREAM frame
  • 208f306 http3: increase handshake timeout
  • 49810da http2: enable net/http wrapping when go >= 1.27
  • 5e11a5a quic: fix data race in streamForFrame
  • 8c63081 http2: use empty Transport rather than DefaultTransport in http2wrap
  • fc7b466 http2: add http2wrap test
  • 15c2cb1 http2: avoid overflowing 32-bit int when http2wrap enabled
  • 6465188 http2: add wrapped Server
  • 72f419a http2: add wrapped ClientConn
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels May 12, 2026
RiSKeD
RiSKeD previously approved these changes May 13, 2026
@dependabot dependabot Bot dismissed RiSKeD’s stale review May 13, 2026 06:26

The merge-base changed after approval.

@dependabot dependabot Bot force-pushed the dependabot/go_modules/golang.org/x/net-0.54.0 branch from e0964a8 to 8a014ae Compare May 13, 2026 06:26
@RiSKeD RiSKeD force-pushed the dependabot/go_modules/golang.org/x/net-0.54.0 branch from 8a014ae to aa20cc8 Compare May 13, 2026 06:26
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.50.0 to 0.51.0.
- [Commits](golang/crypto@v0.50.0...v0.51.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Fabian Wienand <fabian.wienand@blindspot.software>
@RiSKeD RiSKeD force-pushed the dependabot/go_modules/golang.org/x/net-0.54.0 branch 2 times, most recently from 31d68f6 to cc65cfc Compare May 13, 2026 06:37
golangci-lint flagged SA1019 against golang.org/x/net/http2/h2c, which
upstream marked deprecated in favor of the http.Server.Protocols field
introduced in Go 1.24.

- cmds/dutagent/dutagent.go, cmds/exp/dutserver/dutserver.go: drop the
  h2c.NewHandler + http2.Server wrapper; configure http.Server with
  Protocols = {HTTP1, UnencryptedHTTP2} for the same behavior.

Signed-off-by: Fabian Wienand <fabian.wienand@blindspot.software>
@RiSKeD RiSKeD force-pushed the dependabot/go_modules/golang.org/x/net-0.54.0 branch from cc65cfc to bb2fe56 Compare May 13, 2026 06:37
@RiSKeD RiSKeD requested a review from jenstopp May 13, 2026 06:39
@jenstopp
Copy link
Copy Markdown
Member

Not sure if we should commit to a Dependabot PR?!

@RiSKeD
Copy link
Copy Markdown
Contributor

RiSKeD commented May 13, 2026

@jenstopp It was necessary because the update deprecated parts of the package we are using.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants