fix(deps): update module golang.org/x/net to v0.35.0
Metadata
Current evaluation
Renovate PR merged as commit 560fcab, bumping golang.org/x/net v0.33.0 -> v0.35.0 in go.mod/go.sum plus transitive x/crypto v0.33.0, x/sys v0.30.0, x/text v0.22.0.
Resolution: closed resolved
Reason: The PR was approved by 2 reviewers and merged into main via commit 560fcab ("fix(deps): update module golang.org/x/net to v0.35.0 (#321)"), completing the dependency upgrade.
Evaluated by: mr-cal-bot
No scores available.
Issue body
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| golang.org/x/net | `v0.33.0` -> `v0.35.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/fetch-service).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44NS4wIiwidXBkYXRlZEluVmVyIjoiMzkuMTY0LjEiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Renovate PR merged as commit 560fcab, bumping golang.org/x/net v0.33.0 -> v0.35.0 in go.mod/go.sum plus transitive x/crypto v0.33.0, x/sys v0.30.0, x/text v0.22.0. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged #321 via commit 560fcab, upgrading golang.org/x/net from v0.33.0 to v0.35.0 and updating x/crypto, x/sys, and x/text transitively. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged automated dependency update upgrading golang.org/x/net to v0.35.0. Transitive dependencies golang.org/x/crypto, golang.org/x/sys, and golang.org/x/text were also updated. Approved by two reviewers and passed CI checks prior to merge. |
Update history
| Date | Change |
|---|---|
| created |
Related work
-
Related To:
canonical/fetch-service#318
(confidence 90%)
Predecessor security bump to golang.org/x/net v0.33.0 (CVE-2024-45338), merged as 66fe12f; this PR builds on it.
-
Related To:
canonical/fetch-service#387
(confidence 70%)
Follow-up Renovate bump of golang.org/x/net to 0.38.0 (commit 52444a8), showing this upgrade was later superseded by newer versions (now v0.58.0).
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #138 fix(deps): update module golang.org/x/net to v0.27.0 | fetch-service | merged | Renovate PR merged into main as commit 2657256, bumping golang.org/x/net v0.26.0 -> v0.27.0 in go.mod/go.sum, with transitive bumps of golang.org/x/crypto v0.25.0 and golang.org/x/sys v0.22.0. | |
| #205 fix(deps): update module golang.org/x/net to v0.30.0 | fetch-service | merged | Renovate PR merged, bumping golang.org/x/net v0.28.0 → v0.30.0 (plus x/crypto v0.28.0, x/sys v0.26.0, x/text v0.19.0) via merge commit 75380f2, later released in v0.3.0 (#261). | |
| #468 fix(deps): update module golang.org/x/net to v0.45.0 | fetch-service | merged | Renovate dependency bump of golang.org/x/net v0.43.0 -> v0.45.0 merged to main via commit 957f5d6 (go.mod/go.sum, +12/-4), also pulling x/crypto v0.42.0, x/sys v0.36.0, x/text v0.29.0. | |
| #181 fix(deps): update module golang.org/x/net to v0.28.0 | fetch-service | merged | Renovate PR merged as commit fe9d69a, bumping golang.org/x/net v0.27.0->v0.28.0 in go.mod/go.sum, plus x/crypto v0.26.0, x/sys v0.23.0 and x/text v0.17.0 pulled in by `go get`. | |
| #569 fix(deps): update module golang.org/x/net to v0.53.0 | fetch-service | merged | Renovate PR #569 bumped golang.org/x/net v0.47.0 → v0.53.0 (plus x/crypto, x/sys, x/text transitively); approved and merged as commit a481105. | |
| #620 fix(deps): update module golang.org/x/net to v0.58.0 | fetch-service | merged | Renovate dependency bump PR merged into main as commit 7a78f94, raising golang.org/x/net v0.56.0 → v0.58.0 (plus x/crypto v0.55.0, x/text v0.41.0). | |
| #118 fix(deps): update module golang.org/x/net to v0.26.0 | fetch-service | merged | Renovate PR merged (commit 697f4ff): bumped golang.org/x/net v0.25.0 -> v0.26.0, with golang.org/x/crypto v0.24.0 and x/sys v0.21.0 pulled in transitively via go get. Approved by 2 reviewers, no unresolved comments. | |
| #436 fix(deps): update module golang.org/x/net to v0.43.0 | fetch-service | merged | Renovate bump of golang.org/x/net v0.42.0 -> v0.43.0 merged as commit 2f3bc76, also pulling transitive x/crypto v0.41.0, x/sys v0.35.0 and x/text v0.28.0. Later superseded by v0.45.0 (#468) and further bumps. | |
| #546 fix(deps): update module golang.org/x/crypto to v0.46.0 | fetch-service | merged | Renovate PR merged as commit 90bec85, bumping golang.org/x/crypto v0.45.0 -> v0.46.0 in go.mod/go.sum, with x/sys v0.38.0 -> v0.39.0 and x/text v0.31.0 -> v0.32.0 pulled in by go get. | |
| #405 fix(deps): update module golang.org/x/crypto to v0.40.0 | fetch-service | merged | Renovate PR #405 merged into main via commit b1022d8, bumping golang.org/x/crypto v0.36.0 -> v0.40.0 plus x/net, x/sys, x/text. Approved by 2 reviewers, all CI checks green. |