Skip to content

fix(deps): vuln minor: golang.org/x/text, google.golang.org/grpc [local_tests/golang] - #1317

Draft
gh-worker-campaigns-3e9aa4[bot] wants to merge 1 commit into
mainfrom
engraver-auto-version-upgrade/minorpatch/go/golang/3-1785790517
Draft

fix(deps): vuln minor: golang.org/x/text, google.golang.org/grpc [local_tests/golang]#1317
gh-worker-campaigns-3e9aa4[bot] wants to merge 1 commit into
mainfrom
engraver-auto-version-upgrade/minorpatch/go/golang/3-1785790517

Conversation

@gh-worker-campaigns-3e9aa4

Copy link
Copy Markdown
Contributor

Summary: High-severity security update — 2 packages upgraded (MINOR changes included)

Manifests changed:

  • local_tests/golang (go)

✅ Action Required: Please review the changes below. If they look good, approve and merge this PR.


Updates

Package From To Type Dep Type Vulnerabilities Fixed
google.golang.org/grpc v1.80.0 v1.83.0 minor Transitive 2 HIGH
golang.org/x/text v0.38.0 v0.40.0 minor Transitive 1 UNKNOWN

Security Details

🚨 Critical & High Severity (2 fixed)
Package CVE Severity Summary Unsafe Version Fixed In Case
google.golang.org/grpc GO-2026-6061 HIGH Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc v1.80.0 1.82.1 -
google.golang.org/grpc GHSA-hrxh-6v49-42gf HIGH gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities v1.80.0 1.82.1 -
ℹ️ Other Vulnerabilities (1)
Package CVE Severity Summary Unsafe Version Fixed In Case
golang.org/x/text GO-2026-5970 unknown Infinite loop on invalid input in golang.org/x/text v0.38.0 0.39.0 -

Review Checklist

Standard review:

  • Review changes for compatibility with your code
  • Check for breaking changes in release notes
  • Run tests locally or wait for CI
  • Approve and merge this PR

Update Mode: all_vulns

🤖 Generated by DataDog Automated Dependency Management System

@datadog-datadog-us1-prod

datadog-datadog-us1-prod Bot commented Aug 3, 2026

Copy link
Copy Markdown

Pipelines  Tests

⚠️ Warnings

🚦 1 Pipeline job failed

DataDog/datadog-lambda-extension | cargo check   View in Datadog   GitLab

ℹ️ Info

🔄 Datadog auto-retried 2 jobs - 0 passed on retry View in Datadog

Useful? React with 👍 / 👎

This comment will be updated automatically if new data arrives.
🔗 Commit SHA: 1214d6f | Docs | Datadog PR Page | Give us feedback!

…sts/golang]

Co-authored-by: gh-worker-campaigns-3e9aa4[bot] <244854796+gh-worker-campaigns-3e9aa4[bot]@users.noreply.github.com>
@gh-worker-campaigns-3e9aa4

Copy link
Copy Markdown
Contributor Author

Auto-rebase complete

Branch is up to date with main — rebased onto 52bbfb9.


Auto-Rebase · Add no-auto-rebase to opt out

@dd-octo-sts-4191dd
dd-octo-sts-4191dd Bot force-pushed the engraver-auto-version-upgrade/minorpatch/go/golang/3-1785790517 branch from 8d3a679 to 1214d6f Compare August 4, 2026 18:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants