chore(deps): weekly safe go updates · 1 package

[mendral-app]

Packages bumped

Package	Old	New	Type
cuelang.org/go	v0.17.0	v0.17.1	patch

Per-package detail

cuelang.org/go v0.17.0 → v0.17.1

Changelog highlights (bugfix-only release):

• Fixed several v0.17.0 regressions: panic on some disjunctions, spurious "invalid interpolation" errors, spurious "field not allowed" errors, spurious "structural cycle" errors involving comprehensions or self references
• Fixed two regressions causing evaluation hangs
• Fixed two long-standing hangs on self-referencing configurations
• Fixed panic in cue exp gengotypes when a definition references a definition from another package via embedding
• Module replacements now subject to minimum-version selection

Impact on this codebase: cuelang.org/go is the CUE evaluation engine used throughout backend/internal/evaluation/. This patch stabilizes the evaluator — all fixes are for panics/hangs that could surface on complex CUE inputs. No API changes, no behavioral shifts for correct inputs.

Files modified

• backend/go.mod
• backend/go.sum

Skipped this ecosystem

Package	Current	Latest	Reason
github.com/gin-gonic/gin	v1.12.0	v1.12.0	Already at latest stable
github.com/go-git/go-git/v5	v5.19.1	v5.19.1	Already at latest stable
github.com/joho/godotenv	v1.5.1	v1.6.0-pre.4	Only pre-release available
golang.org/x/crypto	v0.54.0	v0.54.0	Already at latest
golang.org/x/net	v0.57.0	v0.57.0	Already at latest
golang.org/x/sys	v0.47.0	v0.47.0	Already at latest
golang.org/x/text	v0.40.0	v0.40.0	Already at latest
golang.org/x/sync	v0.22.0	v0.22.0	Already at latest
google.golang.org/protobuf	v1.36.11	v1.36.11	Already at latest

---

Note

Created by Mendral. Tag @mendral-app with feedback or questions.

• View implementation session