← Back to issue list

build(deps): update golang.org/x/net to 0.38.0

View original Github issue

Metadata

Project
fetch-service
Number
#387
Type
pull request
State
merged
Author
cmatsuoka
Labels
—
Created
Updated
Closed

Current evaluation

Merged Dependabot-style bump of golang.org/x/net to v0.38.0 in go.mod/go.sum (commit 52444a8, 3 approvals); shipped in fetch-service 0.8.0 and later superseded by v0.42.0 (#406) and v0.43.0 (#436).

Resolution: closed resolved

Reason: The PR itself was merged, landing as commit 52444a8 "build(deps): update golang.org/x/net to 0.38.0 (#387)" which bumped go.mod and go.sum (2 files, +18/-26). The change is recorded in docs/changelog.rst under the 0.8.0 (2025-07-02) release.

Evaluated by: mr-cal-bot

No scores available.

Issue body

- [x] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)? -----

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha — closed resolved Merged Dependabot-style bump of golang.org/x/net to v0.38.0 in go.mod/go.sum (commit 52444a8, 3 approvals); shipped in fetch-service 0.8.0 and later superseded by v0.42.0 (#406) and v0.43.0 (#436).
stealth/space-bunny-alpha — closed resolved Merged PR #387 updated golang.org/x/net to v0.38.0 in commit 52444a8, with three reviewer approvals and changes to two files.
stealth/space-bunny-alpha — closed resolved Merged PR #387 (52444a8) upgraded golang.org/x/net to v0.38.0 after approval by three reviewers.
qwen/qwen3.6-35b-a3b — — Merged maintainer cmatsuoka's dependency update to golang.org/x/net v0.38.0. Approved by three reviewers, the change modifies two files (+18/-26).

Update history

Date Change
created

Related work

  • Related To: canonical/fetch-service#406 (confidence 92%)

    Later bump of golang.org/x/net to v0.42.0 (commit 56f55f9), superseding the 0.38.0 pin from #387

  • Related To: canonical/fetch-service#436 (confidence 88%)

    Further bump to golang.org/x/net v0.43.0 (commit 2f3bc76); dependency now at v0.58.0 via #620

  • Related To: canonical/fetch-service#318 (confidence 55%)

    Earlier security-tagged x/net update to v0.33.0, same recurring dependency line

Related issues

Issue Project State Summary Similarity
#358 build(deps): bump golang.org/x/net from 0.35.0 to 0.36.0 fetch-service closed Dependabot's golang.org/x/net 0.35.0→0.36.0 bump was closed unmerged on 2025-06-24, superseded by PR #387 which updated x/net to 0.38.0 and merged in commit 52444a8.
86%
#406 fix(deps): update module golang.org/x/net to v0.42.0 fetch-service merged Renovate dependency bump merged: golang.org/x/net updated v0.41.0 -> v0.42.0 in go.mod/go.sum via commit 56f55f9, approved by 2 reviewers with all CI checks green.
86%
#85 build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0 fetch-service closed Dependabot's golang.org/x/net 0.22.0→0.23.0 bump (fetch-service#85) was closed unmerged as superseded by the security fix PR #86, merged in commit a461af7.
84%
#471 fix(deps): update module golang.org/x/net to v0.46.0 fetch-service merged Renovate dependency bump of golang.org/x/net v0.45.0 -> v0.46.0 merged into main (approved by 2 reviewers, all CI green) via commit 80d3332.
84%
#49 fix(deps): update module golang.org/x/net to v0.21.0 fetch-service merged Renovate PR #49 merged as commit 6805fea, bumping golang.org/x/net from v0.17.0 to v0.21.0 in go.mod/go.sum. Approved by 2 reviewers; later superseded by #57 (v0.22.0) and #86 (v0.23.0).
82%
#454 fix(deps): update module golang.org/x/net to v0.44.0 fetch-service closed Renovate PR bumping golang.org/x/net v0.43.0->v0.44.0 was closed unmerged and superseded by #468, which merged as 957f5d6 with a direct bump to v0.45.0.
82%
#468 fix(deps): update module golang.org/x/net to v0.45.0 fetch-service merged Renovate dependency bump of golang.org/x/net v0.43.0 -> v0.45.0 merged to main via commit 957f5d6 (go.mod/go.sum, +12/-4), also pulling x/crypto v0.42.0, x/sys v0.36.0, x/text v0.29.0.
82%
#611 fix(deps): update module golang.org/x/net to v0.55.0 fetch-service merged Renovate PR #611 bumping golang.org/x/net v0.54.0→v0.55.0 was approved and merged into main as commit c2b11c8, updating go.mod/go.sum (+3/-1). It was later superseded by #620 (v0.58.0, commit 7a78f94).
81%
#321 fix(deps): update module golang.org/x/net to v0.35.0 fetch-service merged Renovate PR merged as commit 560fcab, bumping golang.org/x/net v0.33.0 -> v0.35.0 in go.mod/go.sum plus transitive x/crypto v0.33.0, x/sys v0.30.0, x/text v0.22.0.
81%
#318 fix(deps): update module golang.org/x/net to v0.33.0 [security] fetch-service merged Merged as commit 66fe12f, upgrading golang.org/x/net from v0.30.0 to v0.33.0 to address CVE-2024-45338; shipped in v0.6.0.
81%