fix(deps): update module golang.org/x/net to v0.37.0 - autoclosed
Metadata
Current evaluation
Autoclosed Renovate PR bumping golang.org/x/net v0.35.0 -> v0.37.0 (plus go 1.24.1, x/crypto, x/sys, x/text). Superseded by merged PR #387 (commit 52444a8) which landed v0.38.0 instead.
Resolution: closed superseded
Reason: The PR was never merged and was closed automatically by Renovate after 577 days idle; the only comment is the bot's own artifact update notice from 2025-03-04. The go.mod history shows commit 52444a8 (PR #387, 'build(deps): update golang.org/x/net to 0.38.0') landed a higher version, superseding the v0.37.0 bump, with later bumps in #406, #436 and #468 continuing the upgrade.
Evaluated by: mr-cal-bot
No scores available.
Issue body
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| golang.org/x/net | `v0.35.0` -> `v0.37.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/fetch-service).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xODUuNCIsInVwZGF0ZWRJblZlciI6IjM5LjE4NS40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed superseded | Autoclosed Renovate PR bumping golang.org/x/net v0.35.0 -> v0.37.0 (plus go 1.24.1, x/crypto, x/sys, x/text). Superseded by merged PR #387 (commit 52444a8) which landed v0.38.0 instead. | |
| stealth/space-bunny-alpha | — | closed superseded | Renovate's v0.37.0 update was autoclosed and superseded by merged PR #387 (52444a8), which updated golang.org/x/net to v0.38.0. | |
| qwen/qwen3.6-35b-a3b | — | — | Renovate automatically closed the dependency update for golang.org/x/net v0.37.0 without merging. The branch was abandoned and changes were not applied to the repository. |
Update history
| Date | Change |
|---|---|
| created |
Related work
-
Superseded By:
canonical/fetch-service#387
(confidence 95%)
Merged bump of golang.org/x/net to v0.38.0 (commit 52444a8), a later version than the v0.37.0 proposed here.
-
Related To:
canonical/fetch-service#406
(confidence 55%)
Subsequent golang.org/x/net bump to v0.42.0, confirming the upgrade path moved forward without this PR.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #287 fix(deps): update module golang.org/x/net to v0.33.0 - autoclosed | fetch-service | closed | Renovate PR to bump golang.org/x/net v0.30.0 -> v0.33.0 was autoclosed as a duplicate of security PR #318, which merged as commit 66fe12f with the same v0.33.0 update. | |
| #506 fix(deps): update module golang.org/x/net to v0.47.0 - autoclosed | fetch-service | closed | Renovate PR #506 was autoclosed unmerged after 13 days; x/net v0.47.0 was instead introduced by merged PR #526 (commit ead7f12). | |
| #359 fix(deps): update module golang.org/x/net to v0.38.0 [security] - autoclosed | fetch-service | closed | Renovate's x/net v0.38.0 security bump was autoclosed unmerged: `go get` for go.sum failed downloading go1.23.10 (GOSUMDB=off). The same bump landed later via merged PR #387 (commit 52444a8). | |
| #70 fix(deps): update module golang.org/x/net to v0.24.0 - autoclosed | fetch-service | closed | Autoclosed unmerged; the dependency update was later superseded by merged PR #118 (697f4ff), which upgraded golang.org/x/net to v0.26.0. | |
| #321 fix(deps): update module golang.org/x/net to v0.35.0 | fetch-service | merged | Renovate PR merged as commit 560fcab, bumping golang.org/x/net v0.33.0 -> v0.35.0 in go.mod/go.sum plus transitive x/crypto v0.33.0, x/sys v0.30.0, x/text v0.22.0. | |
| #454 fix(deps): update module golang.org/x/net to v0.44.0 | fetch-service | closed | Renovate PR bumping golang.org/x/net v0.43.0->v0.44.0 was closed unmerged and superseded by #468, which merged as 957f5d6 with a direct bump to v0.45.0. | |
| #569 fix(deps): update module golang.org/x/net to v0.53.0 | fetch-service | merged | Renovate PR #569 bumped golang.org/x/net v0.47.0 → v0.53.0 (plus x/crypto, x/sys, x/text transitively); approved and merged as commit a481105. | |
| #57 fix(deps): update module golang.org/x/net to v0.22.0 | fetch-service | merged | Merged Renovate PR #57, updating golang.org/x/net from v0.21.0 to v0.22.0; commit a843b3f records the dependency bump. | |
| #138 fix(deps): update module golang.org/x/net to v0.27.0 | fetch-service | merged | Renovate PR merged into main as commit 2657256, bumping golang.org/x/net v0.26.0 -> v0.27.0 in go.mod/go.sum, with transitive bumps of golang.org/x/crypto v0.25.0 and golang.org/x/sys v0.22.0. | |
| #647 fix(deps): update module golang.org/x/net to v0.59.0 | fetch-service | closed | Renovate PR #647 was closed unmerged after failing checks; x/net remains at v0.58.0 and no resolving commit landed. |