Skip to content

[9.5] (backport #21684) build(deps): bump golang.org/x/net from 0.57.0 to 0.58.0 in the golang-org-x group - #21692

Open
mergify[bot] wants to merge 2 commits into
9.5from
mergify/bp/9.5/pr-21684
Open

[9.5] (backport #21684) build(deps): bump golang.org/x/net from 0.57.0 to 0.58.0 in the golang-org-x group#21692
mergify[bot] wants to merge 2 commits into
9.5from
mergify/bp/9.5/pr-21684

Conversation

@mergify

@mergify mergify Bot commented Aug 17, 2026

Copy link
Copy Markdown
Contributor

Bumps the golang-org-x group with 1 update: golang.org/x/net.

Updates golang.org/x/net from 0.57.0 to 0.58.0

Commits
  • acc78e0 go.mod: update golang.org/x dependencies
  • 90d10f0 internal/http3: delete invalid Content-Length if declared in server handler
  • 08abf4d internal/http3: infer headers when Content-Encoding is set but is empty
  • 8d10596 http2: avoid deadlocks in wrapped ClientConn state callback
  • 99c3b0a http2/hpack: build the table lookup maps lazily, only for encoders
  • 5a920b1 http3: rework registration to allow using a fake network
  • 7fd2842 quic: return an error from Accept after PacketConn reader exits
  • 825111d quic: avoid busy-loop when keep-alive is blocked by congestion control
  • a02ddfa http/httpproxy: prioritize lowercase proxy environment variables
  • 574e5eb quic: halt conn goroutines on close when listener exits early
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

This is an automatic backport of pull request #21684 done by [Mergify](https://mergify.com).

…g-org-x group (#21684)

* build(deps): bump golang.org/x/net in the golang-org-x group

Bumps the golang-org-x group with 1 update: [golang.org/x/net](https://github.com/golang/net).

Updates `golang.org/x/net` from 0.57.0 to 0.58.0
- [Commits](golang/net@v0.57.0...v0.58.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.58.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang-org-x
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update NOTICE.txt and NOTICE-fips.txt

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: obltmachine <150269514+obltmachine@users.noreply.github.com>
(cherry picked from commit 1096b06)

# Conflicts:
#	go.mod
#	go.sum
@mergify mergify Bot added backport conflicts There is a conflict in the backported pull request labels Aug 17, 2026
@mergify
mergify Bot requested a review from a team as a code owner August 17, 2026 20:54
@mergify mergify Bot added the backport label Aug 17, 2026
@mergify

mergify Bot commented Aug 17, 2026

Copy link
Copy Markdown
Contributor Author

Cherry-pick of 1096b06 has failed:

On branch mergify/bp/9.5/pr-21684
Your branch is up to date with 'origin/9.5'.

You are currently cherry-picking commit 1096b06a.
  (fix conflicts and run "git cherry-pick --continue")
  (use "git cherry-pick --skip" to skip this patch)
  (use "git cherry-pick --abort" to cancel the cherry-pick operation)

Changes to be committed:
	modified:   NOTICE-fips.txt
	modified:   NOTICE.txt

Unmerged paths:
  (use "git add <file>..." to mark resolution)
	both modified:   go.mod
	both modified:   go.sum

To fix up this pull request, you can check it out locally. See documentation: https://docs.github.com/en/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/checking-out-pull-requests-locally

@mergify mergify Bot added the conflicts There is a conflict in the backported pull request label Aug 17, 2026
@github-actions

Copy link
Copy Markdown
Contributor

🤖 GitHub comments

Just comment with:

  • run docs-build : Re-trigger the docs validation. (use unformatted text in the comment!)

Keep 9.5's newer x/exp and take x/crypto 0.55.0 required by x/net 0.58.0.
@infra-vault-gh-plugin-prod

Copy link
Copy Markdown

💚 Build Succeeded

History

@isaacaflores2
isaacaflores2 enabled auto-merge (squash) August 18, 2026 18:41
@mergify mergify Bot added the queued label Aug 18, 2026
@mergify

mergify Bot commented Aug 18, 2026

Copy link
Copy Markdown
Contributor Author

Merge Queue Status

This pull request spent 11 minutes 44 seconds in the queue, including 10 minutes 46 seconds running CI.

Waiting for
  • check-success=test (macos-latest)
  • any of:
    • check-success=test (windows-2025)
    • check-success=test (windows-latest)
All conditions

Reason

The merge conditions cannot be satisfied due to failing checks

  • test (macos-latest)
  • lint
  • buildkite/docs-build-pr
  • CLA

Failing checks:

Hint

You may have to fix your CI before adding the pull request to the queue again.
If you update this pull request, to fix the CI, it will automatically be requeued once the queue conditions match again.
If you think this was a flaky issue instead, you can requeue the pull request, without updating it, by posting a @mergifyio queue comment.

Tick the box to put this pull request back in the merge queue (same as @mergifyio queue).

  • Requeue this pull request

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport conflicts There is a conflict in the backported pull request dequeued

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants