Uh oh!
There was an error while loading. Please reload this page.
chore: bump vendor/zoekt to upgrade golang.org/x/net and golang.org/x/crypto (CVEs) - #1412
Conversation
…g/x/crypto (CVEs) Advances the vendor/zoekt submodule to sourcebot-dev/zoekt#16, which upgrades golang.org/x/net v0.53.0 -> v0.55.0 and golang.org/x/crypto v0.50.0 -> v0.52.0 to address the Trivy container-scan HIGH CVEs: - x/net: CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502, CVE-2026-42506 - x/crypto: CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39835, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@brendan-kellam your pull request is missing a changelog! |
Uh oh!
There was an error while loading. Please reload this page.
Caution Review failedThe pull request is closed. ℹ️ Recent review info⚙️ Run configurationConfiguration used: Organization UI Review profile: CHILL Plan: Pro Run ID: 📒 Files selected for processing (1)
WalkthroughThe vendor/zoekt git submodule reference is updated from commit 3d1f49a3e6d367e714da1a00450efad2fd1a318c to commit 58f59f14543881234affea940a8cf4240eb60b4b. No other code changes are present in this diff. ChangesZoekt Submodule Update
Estimated code review effort: 1 (Trivial) | ~2 minutes Possibly related PRs
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Summary
Advances the
vendor/zoektsubmodule from3d1f49a→58f59f1(sourcebot-dev/zoekt#16), which upgrades:golang.org/x/netv0.53.0 → v0.55.0golang.org/x/cryptov0.50.0 → v0.52.0This clears the Trivy container-scan HIGH CVEs originating from the zoekt binary.
CVEs addressed
golang.org/x/net— SOU-1417, 1418, 1419, 1420, 1430, 1431golang.org/x/crypto— SOU-1421, 1422, 1423, 1424, 1429, 1432, 1433, 1434Notes
Pointer-only change (matches prior submodule bump #1290). The upstream zoekt PR was verified with
go build ./...clean.🤖 Generated with Claude Code
Summary by CodeRabbit