From 32d22db9c1a773d4de83711f7004387271011923 Mon Sep 17 00:00:00 2001 From: "timmy.yuan" Date: Wed, 28 Oct 2026 17:22:21 +0800 Subject: [PATCH] chore(cpworker): bump golang.org/x/net to v0.55.0 in the integration test modules Clears Dependabot alerts #45 and #46 (CVE-2026-25680, GHSA-5cv4-jp36-h3mw, DoS in the x/net/html parser). Both modules pull x/net only indirectly via gopacket/pcapgo -> x/net/bpf and never import x/net/html, so the vulnerable code was not built; the bump is to clear the alerts. x/net v0.55.0 requires Go 1.25, so the go directive moves to 1.25.0 in cpworker/tests/integration (from 1.24.1) and helpers/zmq_receiver (from 1.23.0), matching cpdaemon/go.mod which CI's setup-go already uses. golang.org/x/sys follows to v0.45.0. --- cpworker/tests/integration/go.mod | 6 +++--- cpworker/tests/integration/go.sum | 8 ++++---- cpworker/tests/integration/helpers/zmq_receiver/go.mod | 6 +++--- cpworker/tests/integration/helpers/zmq_receiver/go.sum | 8 ++++---- 4 files changed, 14 insertions(+), 14 deletions(-) diff --git a/cpworker/tests/integration/go.mod b/cpworker/tests/integration/go.mod index c22ecefa..c86da4d4 100644 --- a/cpworker/tests/integration/go.mod +++ b/cpworker/tests/integration/go.mod @@ -1,10 +1,10 @@ module github.com/netis-cloud-probe/cloud-probe/cpworker/tests/integration -go 1.24.1 +go 1.25.0 require github.com/google/gopacket v1.1.19 require ( - golang.org/x/net v0.38.0 // indirect - golang.org/x/sys v0.31.0 // indirect + golang.org/x/net v0.55.0 // indirect + golang.org/x/sys v0.45.0 // indirect ) diff --git a/cpworker/tests/integration/go.sum b/cpworker/tests/integration/go.sum index 681d36f4..7130d763 100644 --- a/cpworker/tests/integration/go.sum +++ b/cpworker/tests/integration/go.sum @@ -6,13 +6,13 @@ golang.org/x/lint v0.0.0-20200302205851-738671d3881b/go.mod h1:3xt1FjdF8hUf6vQPI golang.org/x/mod v0.1.1-0.20191105210325-c90efee705ee/go.mod h1:QqPTAvyqsEbceGzBzNggFXnrqF1CaUcvgkdR5Ot7KZg= golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg= golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s= -golang.org/x/net v0.38.0 h1:vRMAPTMaeGqVhG5QyLJHqNDwecKTomGeqbnfZyKlBI8= -golang.org/x/net v0.38.0/go.mod h1:ivrbrMbzFq5J41QOQh0siUuly180yBYtLp+CKbEaFx8= +golang.org/x/net v0.55.0 h1:bcvxaJn3e1U6InsFWt1JUq1aSjnRxLzT2rtD2KfkDF8= +golang.org/x/net v0.55.0/go.mod h1:L5U2KuzuOe1lY7Z+aWVIKK6qEeJXnXV9yzGA+WCHJww= golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= -golang.org/x/sys v0.31.0 h1:ioabZlmFYtWhL+TRYpcnNlLwhyxaM9kWTDEmfnprqik= -golang.org/x/sys v0.31.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k= +golang.org/x/sys v0.45.0 h1:dO4czNzziLiiXplLQgBCEpCvXQ3dnkn0SdaZSYdQ+FY= +golang.org/x/sys v0.45.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw= golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= golang.org/x/tools v0.0.0-20200130002326-2f3ba24bd6e7/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28= golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= diff --git a/cpworker/tests/integration/helpers/zmq_receiver/go.mod b/cpworker/tests/integration/helpers/zmq_receiver/go.mod index 7b4b8296..1976de47 100644 --- a/cpworker/tests/integration/helpers/zmq_receiver/go.mod +++ b/cpworker/tests/integration/helpers/zmq_receiver/go.mod @@ -1,6 +1,6 @@ module github.com/netis-cloud-probe/cloud-probe/cpworker/tests/integration/helpers/zmq_receiver -go 1.23.0 +go 1.25.0 require ( github.com/google/gopacket v1.1.19 @@ -8,6 +8,6 @@ require ( ) require ( - golang.org/x/net v0.38.0 // indirect - golang.org/x/sys v0.31.0 // indirect + golang.org/x/net v0.55.0 // indirect + golang.org/x/sys v0.45.0 // indirect ) diff --git a/cpworker/tests/integration/helpers/zmq_receiver/go.sum b/cpworker/tests/integration/helpers/zmq_receiver/go.sum index e8a3f518..bf4212bc 100644 --- a/cpworker/tests/integration/helpers/zmq_receiver/go.sum +++ b/cpworker/tests/integration/helpers/zmq_receiver/go.sum @@ -8,13 +8,13 @@ golang.org/x/lint v0.0.0-20200302205851-738671d3881b/go.mod h1:3xt1FjdF8hUf6vQPI golang.org/x/mod v0.1.1-0.20191105210325-c90efee705ee/go.mod h1:QqPTAvyqsEbceGzBzNggFXnrqF1CaUcvgkdR5Ot7KZg= golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg= golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s= -golang.org/x/net v0.38.0 h1:vRMAPTMaeGqVhG5QyLJHqNDwecKTomGeqbnfZyKlBI8= -golang.org/x/net v0.38.0/go.mod h1:ivrbrMbzFq5J41QOQh0siUuly180yBYtLp+CKbEaFx8= +golang.org/x/net v0.55.0 h1:bcvxaJn3e1U6InsFWt1JUq1aSjnRxLzT2rtD2KfkDF8= +golang.org/x/net v0.55.0/go.mod h1:L5U2KuzuOe1lY7Z+aWVIKK6qEeJXnXV9yzGA+WCHJww= golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= -golang.org/x/sys v0.31.0 h1:ioabZlmFYtWhL+TRYpcnNlLwhyxaM9kWTDEmfnprqik= -golang.org/x/sys v0.31.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k= +golang.org/x/sys v0.45.0 h1:dO4czNzziLiiXplLQgBCEpCvXQ3dnkn0SdaZSYdQ+FY= +golang.org/x/sys v0.45.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw= golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= golang.org/x/tools v0.0.0-20200130002326-2f3ba24bd6e7/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28= golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=