Uh oh!
There was an error while loading. Please reload this page.
chore(deps): bump grpc and x/net to patch dependabot alerts - #100
Conversation
Resolves two dependabot alerts on main: - HIGH google.golang.org/grpc: xDS RBAC and HTTP/2 vulnerabilities (fixed 1.82.1) - MEDIUM golang.org/x/net: HTML parser DoS (fixed 0.55.0) Both are indirect deps; go mod tidy also pulled x/sys 0.42.0->0.45.0, x/text 0.34.0->0.37.0, and the matching genproto/googleapis/rpc. build/vet/ test/lint all green.
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: Path: .coderabbit.yaml Review profile: CHILL Plan: Enterprise Run ID: ⛔ Files ignored due to path filters (1)
📒 Files selected for processing (1)
Included review availability: Your plan provides up to 12 included reviews per hour; 7 remain after this review. WalkthroughThe pull request updates selected indirect Go dependencies in ChangesGo dependency updates
Estimated code review effort: 1 (Trivial) | ~5 minutes Merge Risk:⚪ Minimal · up to This change updates indirect Go dependencies to patched versions and adjusts their checksums; no actionable merge-blocking risk remains after normal checks and review. 🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
Full details: Docstring CoverageExplanation No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.) ✨ Finishing Touches🧪 Generate unit tests (beta)
Comment |
Uh oh!
There was an error while loading. Please reload this page.
Resolves the two open dependabot alerts on
main:google.golang.org/grpc1.81.1 → 1.82.1 — xDS RBAC and HTTP/2 vulnerabilities.golang.org/x/net0.51.0 → 0.55.0 — HTML parser DoS.Both are indirect deps.
go mod tidyalso pulled the matchingx/sys0.42.0→0.45.0,x/text0.34.0→0.37.0, andgenproto/googleapis/rpc.Test plan
go build ./...,go vet ./...,go test ./...,golangci-lint run ./...— all green locally.Summary by CodeRabbit