Repository navigation
Bump golang.org/x/net to v0.61.0 in adapter and operator - #232
Merged
Merged
Conversation
wu-sheng
approved these changes
Oct 18, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
Bumps
golang.org/x/netto v0.61.0 in both Go modules:adapter: v0.58.0 → v0.61.0operator: v0.57.0 → v0.61.0x/net v0.60.0 fixes the HTTP/2 advisories GO-2026-6608 through GO-2026-6617 that
govulncheckreports against both modules. The othergolang.org/x/*changes (crypto, sync, sys, term, text, and mod/tools in adapter) are whatgo get+go mod tidypull in for that release. Thegodirective is unchanged (1.26.3).Test
go build ./...andgo vet ./...pass inadapterandoperatorgo testpasses for the operator packages outsidetest/e2egovulncheck ./...no longer reports anygolang.org/x/*findings in either module (the remaining findings are standard-librarynet/httpones, fixed by building with Go 1.26.9+)