Skip to content

fix(deps): vuln minor: golang.org/x/mod, golang.org/x/text, google.golang.org/grpc [local_tests/golang] - #1329

Draft
gh-worker-campaigns-3e9aa4[bot] wants to merge 1 commit into
mainfrom
engraver-auto-version-upgrade/minorpatch/go/golang/3-1786985734
Draft

fix(deps): vuln minor: golang.org/x/mod, golang.org/x/text, google.golang.org/grpc [local_tests/golang]#1329
gh-worker-campaigns-3e9aa4[bot] wants to merge 1 commit into
mainfrom
engraver-auto-version-upgrade/minorpatch/go/golang/3-1786985734

Conversation

@gh-worker-campaigns-3e9aa4

Copy link
Copy Markdown
Contributor

Summary: High-severity security update — 3 packages upgraded (MINOR changes included)

Manifests changed:

  • local_tests/golang (go)

✅ Action Required: Please review the changes below. If they look good, approve and merge this PR.


Updates

Package From To Type Dep Type Vulnerabilities Fixed
google.golang.org/grpc v1.80.0 v1.83.0 minor Transitive 2 HIGH
golang.org/x/mod v0.36.0 v0.40.0 minor Transitive 2 UNKNOWN
golang.org/x/text v0.38.0 v0.41.0 minor Transitive 1 UNKNOWN

Security Details

🚨 Critical & High Severity (2 fixed)
Package CVE Severity Summary Unsafe Version Fixed In Case
google.golang.org/grpc GO-2026-6061 HIGH Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc v1.80.0 1.82.1 -
google.golang.org/grpc GHSA-hrxh-6v49-42gf HIGH gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities v1.80.0 1.82.1 -
ℹ️ Other Vulnerabilities (3)
Package CVE Severity Summary Unsafe Version Fixed In Case
golang.org/x/mod GO-2026-6180 unknown Ignore unrelated, unauthenticated hashes in Lookup in golang.org/x/mod/sumdb v0.36.0 0.40.0 -
golang.org/x/mod GO-2026-6179 unknown Fix transparency log tile verification bypass in golang.org/x/mod/sumdb/tlog v0.36.0 0.40.0 -
golang.org/x/text GO-2026-5970 unknown Infinite loop on invalid input in golang.org/x/text v0.38.0 0.39.0 -

Review Checklist

Standard review:

  • Review changes for compatibility with your code
  • Check for breaking changes in release notes
  • Run tests locally or wait for CI
  • Approve and merge this PR

Update Mode: all_vulns

🤖 Generated by DataDog Automated Dependency Management System

@datadog-prod-us1-4

datadog-prod-us1-4 Bot commented Aug 17, 2026

Copy link
Copy Markdown

Pipelines

⚠️ Warnings

🚦 3 Pipeline jobs failed

Bottlecap (Rust) | Audit

View in Datadog · View in GitHub Actions

Critical vulnerabilities found in the audit process, marking check as failed.

DataDog/datadog-lambda-extension | e2e-test-status (amd64)

View in Datadog · View in GitLab

DataDog/datadog-lambda-extension | e2e-test-status (amd64, fips)

View in Datadog · View in GitLab

Useful? React with 👍 / 👎

This comment will be updated automatically if new data arrives.
🔗 Commit SHA: ffb044d | Docs | View more details | Give us feedback!

…org/grpc [local_tests/golang]

Co-authored-by: gh-worker-campaigns-3e9aa4[bot] <244854796+gh-worker-campaigns-3e9aa4[bot]@users.noreply.github.com>
@gh-worker-campaigns-3e9aa4

Copy link
Copy Markdown
Contributor Author

Auto-rebase complete

Branch is up to date with main — rebased onto fbf128d.


Auto-Rebase · Add no-auto-rebase to opt out

@dd-octo-sts-09fbc5
dd-octo-sts-09fbc5 Bot force-pushed the engraver-auto-version-upgrade/minorpatch/go/golang/3-1786985734 branch from b311eb5 to ffb044d Compare August 18, 2026 10:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants