From d4755bb475098789e77db7a15f6b7d92e6216fc8 Mon Sep 17 00:00:00 2001 From: Steven van der Vegt Date: Fri, 31 Jul 2026 08:27:01 +0200 Subject: [PATCH] fix(deps): upgrade google.golang.org/grpc to v1.82.1 to fix GO-2026-6061 Assisted-by: AI --- docs/pages/release_notes.rst | 1 + go.mod | 2 +- go.sum | 4 ++-- 3 files changed, 4 insertions(+), 3 deletions(-) diff --git a/docs/pages/release_notes.rst b/docs/pages/release_notes.rst index 634ee954c..f2a1e923c 100644 --- a/docs/pages/release_notes.rst +++ b/docs/pages/release_notes.rst @@ -7,6 +7,7 @@ Unreleased **************** ## Security +* Upgrade google.golang.org/grpc to v1.82.1 to address `GO-2026-6061 `_ (vulnerabilities in the HTTP/2 transport server implementation and the xDS RBAC authorization engine). * Upgrade go.opentelemetry.io/otel to v1.44.0 to address `GO-2026-5158 `_ (baggage header parsing did not cap raw header length, allowing denial-of-service through excessively large headers). * Upgrade golang.org/x/text to v0.39.0 to address `GO-2026-5970 `_ (norm.Iter could enter an infinite loop on input containing invalid UTF-8 bytes). diff --git a/go.mod b/go.mod index 1e34ff482..67ebea270 100644 --- a/go.mod +++ b/go.mod @@ -54,7 +54,7 @@ require ( go.uber.org/mock v0.6.0 golang.org/x/crypto v0.53.0 golang.org/x/time v0.15.0 - google.golang.org/grpc v1.81.1 + google.golang.org/grpc v1.82.1 google.golang.org/protobuf v1.36.11 gopkg.in/Regis24GmbH/go-phonetics.v2 v2.0.3 gopkg.in/yaml.v3 v3.0.1 diff --git a/go.sum b/go.sum index 9d879da51..f2b4c4131 100644 --- a/go.sum +++ b/go.sum @@ -745,8 +745,8 @@ google.golang.org/genproto/googleapis/api v0.0.0-20260526163538-3dc84a4a5aaa h1: google.golang.org/genproto/googleapis/api v0.0.0-20260526163538-3dc84a4a5aaa/go.mod h1:q4lMZS6kskjT5HvCPrnnypcDPVJqT/f4nfxmkE7gryY= google.golang.org/genproto/googleapis/rpc v0.0.0-20260526163538-3dc84a4a5aaa h1:mZHHdPZl0dbGHCflZgAq/Q468DWVFcU2whhB2KAo8fk= google.golang.org/genproto/googleapis/rpc v0.0.0-20260526163538-3dc84a4a5aaa/go.mod h1:4Hqkh8ycfw05ld/3BWL7rJOSfebL2Q+DVDeRgYgxUU8= -google.golang.org/grpc v1.81.1 h1:VnnIIZ88UzOOKLukQi+ImGz8O1Wdp8nAGGnvOfEIWQQ= -google.golang.org/grpc v1.81.1/go.mod h1:xGH9GfzOyMTGIOXBJmXt+BX/V0kcdQbdcuwQ/zNw42I= +google.golang.org/grpc v1.82.1 h1:NnAxzGRA0677vCa4BUkOAnO5+FfQqVl9iUXeD0IqcGE= +google.golang.org/grpc v1.82.1/go.mod h1:yzTZ1TB1Z3SG+LIYaI+WiE8D5+PZ3ArnrSp8zF3+/ZA= google.golang.org/protobuf v1.36.11 h1:fV6ZwhNocDyBLK0dj+fg8ektcVegBBuEolpbTQyBNVE= google.golang.org/protobuf v1.36.11/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco= gopkg.in/Regis24GmbH/go-diacritics.v2 v2.0.3 h1:rz88vn1OH2B9kKorR+QCrcuw6WbizVwahU2Y9Q09xqU=