Skip to content

chore: update Go version to 1.25.0 and upgrade golang.org/x/net to v0…#1116

Open
chowyu12 wants to merge 2 commits intogo-resty:v2from
chowyu12:v2
Open

chore: update Go version to 1.25.0 and upgrade golang.org/x/net to v0…#1116
chowyu12 wants to merge 2 commits intogo-resty:v2from
chowyu12:v2

Conversation

@chowyu12
Copy link
Copy Markdown

@chowyu12 chowyu12 commented Mar 2, 2026

fixed: vulnerabilities:
[GO-2026-4441]Infinite parsing loop in golang.org/x/net
golang.org/x/net/html Fixed in v0.45.0.
[GO-2026-4559] Sending certain HTTP/2 frames can cause a server to panic in golang.org/x/net
golang.org/x/net/http2 Fixed in v0.51.0.

@jeevatkm
Copy link
Copy Markdown
Member

@chowyu12 Thanks for submitting PR. I'm sorry for the delayed response.

The same situation occurred earlier. I updated the Go version while addressing upstream issues like this PR. Subsequently, I received a question: #1102. Since then, I’ve been contemplating whether to update the package and bump the Go version when there are no changes in the Resty. Typically, Resty users can certainly update their transitive dependencies to the latest or the version they require.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

2 participants