Skip to content

Conversation

cluster-stack-bot[bot]
Copy link
Contributor

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
golang.org/x/oauth2 v0.24.0 -> v0.27.0 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2025-22868

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.


Configuration

📅 Schedule: Branch creation - "" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

| datasource | package             | from    | to      |
| ---------- | ------------------- | ------- | ------- |
| go         | golang.org/x/oauth2 | v0.24.0 | v0.27.0 |
@cluster-stack-bot
Copy link
Contributor Author

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.22.0 -> 1.23.0
go (toolchain) 1.22.9 -> 1.23.11

@cluster-stack-bot cluster-stack-bot bot added the size/S Denotes a PR that changes 20-50 lines, ignoring generated files. label Jul 19, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
size/S Denotes a PR that changes 20-50 lines, ignoring generated files. type/minor update/go
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants