Skip to content

VULN UPGRADE: golang.org/x/oauth2 (minor → v0.34.0) [gcp/observability] - #4

Closed
campaigner-prod[bot] wants to merge 1 commit into
masterfrom
engraver-auto-version-upgrade/minorpatch/go/observability/1-1767839658
Closed

VULN UPGRADE: golang.org/x/oauth2 (minor → v0.34.0) [gcp/observability]#4
campaigner-prod[bot] wants to merge 1 commit into
masterfrom
engraver-auto-version-upgrade/minorpatch/go/observability/1-1767839658

Conversation

@campaigner-prod

Copy link
Copy Markdown

Summary: High-severity security update — 1 package upgraded (MINOR changes included)

Manifests changed:

  • gcp/observability (go)

Updates

Package From To Type Vulnerabilities Fixed
golang.org/x/oauth2 v0.25.0 v0.34.0 minor 1 HIGH, 1 UNKNOWN

Security Details

🚨 Critical & High Severity (1 fixed)
Package CVE Severity Summary Unsafe Version Fixed In
golang.org/x/oauth2 GHSA-6v2p-p543-phr9 HIGH golang.org/x/oauth2 Improper Validation of Syntactic Correctness of Input vulnerability v0.25.0 0.27.0
ℹ️ Other Vulnerabilities (1)
Package CVE Severity Summary Unsafe Version Fixed In
golang.org/x/oauth2 GO-2025-3488 unknown Unexpected memory consumption during token parsing in golang.org/x/oauth2 v0.25.0 0.27.0

Review Checklist

Enhanced review recommended for this update:

  • Review changes for compatibility with your code
  • Check release notes for breaking changes
  • Run integration tests to verify service behavior
  • Test in staging environment before production
  • Monitor key metrics after deployment

Update Mode: Vulnerability Remediation (High)

🤖 Generated by DataDog Automated Dependency Management System

@codecov-commenter

codecov-commenter commented Jan 8, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 83.17%. Comparing base (e95a4b7) to head (2198c7e).

Additional details and impacted files
@@            Coverage Diff             @@
##           master       #4      +/-   ##
==========================================
- Coverage   83.27%   83.17%   -0.10%     
==========================================
  Files         387      387              
  Lines       30872    30872              
==========================================
- Hits        25709    25679      -30     
- Misses       3859     3879      +20     
- Partials     1304     1314      +10     

see 31 files with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@campaigner-prod campaigner-prod Bot closed this Feb 8, 2026
@campaigner-prod
campaigner-prod Bot deleted the engraver-auto-version-upgrade/minorpatch/go/observability/1-1767839658 branch February 8, 2026 14:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant