chore(deps): update module golang.org/x/net to v0.45.0 [security] (main)

[oep-renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
golang.org/x/net	v0.38.0 → v0.45.0

---

Quadratic parsing complexity in golang.org/x/net/html

CVE-2025-47911 / GHSA-w4gw-w5jq-g9jh / GO-2026-4440

More information

Details

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Severity

Unknown

References

• https://go.dev/cl/709876
• https://github.com/golang/vulndb/issues/4440
• https://groups.google.com/g/golang-announce/c/jnQcOYpiR2c

This data is provided by OSV and the Go Vulnerability Database (CC-BY 4.0).

---

Infinite parsing loop in golang.org/x/net

CVE-2025-58190 / GO-2026-4441

More information

Details

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Severity

Unknown

References

• https://groups.google.com/g/golang-announce/c/jnQcOYpiR2c
• https://github.com/golang/vulndb/issues/4441
• https://go.dev/cl/709875

This data is provided by OSV and the Go Vulnerability Database (CC-BY 4.0).

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[oep-renovate]

ℹ️ Artifact update notice

File name: libs/grpc_interfaces/src/grpc_interfaces/account_service/go/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 2 additional dependencies were updated

Details:

Package	Change
golang.org/x/sys	v0.31.0 -> v0.36.0
golang.org/x/text	v0.23.0 -> v0.29.0

File name: libs/grpc_interfaces/src/grpc_interfaces/credit_system/go/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 2 additional dependencies were updated

Details:

Package	Change
golang.org/x/sys	v0.31.0 -> v0.36.0
golang.org/x/text	v0.23.0 -> v0.29.0

File name: libs/grpc_interfaces/src/grpc_interfaces/model_mesh/go/pb/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 2 additional dependencies were updated

Details:

Package	Change
golang.org/x/sys	v0.31.0 -> v0.36.0
golang.org/x/text	v0.23.0 -> v0.29.0

File name: libs/grpc_interfaces/src/grpc_interfaces/model_registration/go/pb/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 2 additional dependencies were updated

Details:

Package	Change
golang.org/x/sys	v0.31.0 -> v0.36.0
golang.org/x/text	v0.23.0 -> v0.29.0

File name: libs/grpc_interfaces/src/grpc_interfaces/predict/go/pb/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 2 additional dependencies were updated

Details:

Package	Change
golang.org/x/sys	v0.31.0 -> v0.36.0
golang.org/x/text	v0.23.0 -> v0.29.0

File name: platform/services/auth_proxy/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 2 additional dependencies were updated

Details:

Package	Change
golang.org/x/sys	v0.31.0 -> v0.36.0
golang.org/x/text	v0.23.0 -> v0.29.0