Skip to content

Conversation

@renovate-coveooss
Copy link

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
golang.org/x/oauth2 v0.5.0 -> v0.27.0 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2025-22868

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.


Configuration

📅 Schedule: Branch creation - "" in timezone America/Toronto, Automerge - "after 9:00am and before 12:00pm on tuesday, wednesday, thursday" in timezone America/Toronto.

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@renovate-coveooss
Copy link
Author

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.19 -> 1.23.0

@renovate-coveooss renovate-coveooss bot changed the title fix(deps): update module golang.org/x/oauth2 to v0.27.0 [security] fix(deps): update module golang.org/x/oauth2 to v0.27.0 [security] - autoclosed Jul 22, 2025
@renovate-coveooss renovate-coveooss bot deleted the renovate/go-golang.org-x-oauth2-vulnerability branch July 22, 2025 18:06
@renovate-coveooss renovate-coveooss bot changed the title fix(deps): update module golang.org/x/oauth2 to v0.27.0 [security] - autoclosed fix(deps): update module golang.org/x/oauth2 to v0.27.0 [security] Jul 22, 2025
@renovate-coveooss renovate-coveooss bot reopened this Jul 22, 2025
@renovate-coveooss renovate-coveooss bot force-pushed the renovate/go-golang.org-x-oauth2-vulnerability branch from 65f6817 to 1edb66b Compare July 22, 2025 18:36
@renovate-coveooss renovate-coveooss bot force-pushed the renovate/go-golang.org-x-oauth2-vulnerability branch from 1edb66b to f3e9bbb Compare August 27, 2025 11:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant