Skip to content

build(deps): bump github.com/moby/spdystream from 0.5.0 to 0.5.1#11674

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/github.com/moby/spdystream-0.5.1
Closed

build(deps): bump github.com/moby/spdystream from 0.5.0 to 0.5.1#11674
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/github.com/moby/spdystream-0.5.1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 16, 2026

Bumps github.com/moby/spdystream from 0.5.0 to 0.5.1.

Release notes

Sourced from github.com/moby/spdystream's releases.

v0.5.1

What's Changed

Security

Fix memory amplification in SPDY frame parsing leads to denial of service (CVE-2026-35469 / GHSA-pc3f-x583-g7j2)

Changes

Full Changelog: moby/spdystream@v0.5.0...v0.5.1

Commits
  • c59e5d7 Merge pull request #109 from thaJeztah/use_ioutil
  • 2fd0155 use ioutil.Discard for go1.13 compatibility
  • ef6121f Merge commit from fork
  • 241cec9 compare with signed Int for 32-bit Arm
  • 21c3864 Add options to customize limits
  • acf9b45 spdy: update godoc for MaxDataLength
  • eb63605 spdy: limit header-size and header-count
  • 2f21da4 spdy: fix header block byte accounting
  • 5976b66 spdy: enforce 24-bit frame length limits
  • cf0ec5d Guard against oversized SPDY frames
  • Additional commits viewable in compare view

@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Apr 16, 2026
@dependabot dependabot bot requested review from a team as code owners April 16, 2026 20:50
Copilot AI review requested due to automatic review settings April 16, 2026 20:50
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Apr 16, 2026
@dependabot dependabot bot review requested due to automatic review settings April 16, 2026 20:50
@github-actions
Copy link
Copy Markdown

github-actions bot commented Apr 16, 2026

Unit Tests

    2 files  ±0    415 suites  ±0   6m 56s ⏱️ +13s
4 872 tests ±0  4 870 ✅ ±0  2 💤 ±0  0 ❌ ±0 
5 774 runs  ±0  5 772 ✅ ±0  2 💤 ±0  0 ❌ ±0 

Results for commit 3cbd2a7. ± Comparison against base commit 7b65978.

♻️ This comment has been updated with latest results.

@lakshmimsft
Copy link
Copy Markdown
Contributor

@dependabot rebase

Copilot AI review requested due to automatic review settings April 17, 2026 20:39
@dependabot dependabot bot force-pushed the dependabot/go_modules/github.com/moby/spdystream-0.5.1 branch from 56afb99 to c650d99 Compare April 17, 2026 20:39
@dependabot dependabot bot review requested due to automatic review settings April 17, 2026 20:39
Bumps [github.com/moby/spdystream](https://github.com/moby/spdystream) from 0.5.0 to 0.5.1.
- [Release notes](https://github.com/moby/spdystream/releases)
- [Commits](moby/spdystream@v0.5.0...v0.5.1)

---
updated-dependencies:
- dependency-name: github.com/moby/spdystream
  dependency-version: 0.5.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/go_modules/github.com/moby/spdystream-0.5.1 branch from c650d99 to 3cbd2a7 Compare April 20, 2026 22:21
@dependabot dependabot bot requested review from Copilot and removed request for Copilot April 20, 2026 22:21
@radius-functional-tests
Copy link
Copy Markdown

radius-functional-tests bot commented Apr 20, 2026

Radius functional test overview

🔍 Go to test action run

Click here to see the test run details
Name Value
Repository radius-project/radius
Commit ref 3cbd2a7
Unique ID funce482750108
Image tag pr-funce482750108
  • gotestsum 1.13.0
  • KinD: v0.29.0
  • Dapr: 1.14.4
  • Azure KeyVault CSI driver: 1.4.2
  • Azure Workload identity webhook: 1.3.0
  • Bicep recipe location ghcr.io/radius-project/dev/test/testrecipes/test-bicep-recipes/<name>:pr-funce482750108
  • Terraform recipe location http://tf-module-server.radius-test-tf-module-server.svc.cluster.local/<name>.zip (in cluster)
  • applications-rp test image location: ghcr.io/radius-project/dev/applications-rp:pr-funce482750108
  • dynamic-rp test image location: ghcr.io/radius-project/dev/dynamic-rp:pr-funce482750108
  • controller test image location: ghcr.io/radius-project/dev/controller:pr-funce482750108
  • ucp test image location: ghcr.io/radius-project/dev/ucpd:pr-funce482750108
  • deployment-engine test image location: ghcr.io/radius-project/deployment-engine:latest

Test Status

⌛ Building Radius and pushing container images for functional tests...
✅ Container images build succeeded
⌛ Publishing Bicep Recipes for functional tests...
✅ Recipe publishing succeeded
⌛ Starting ucp-cloud functional tests...
⌛ Starting corerp-cloud functional tests...
✅ ucp-cloud functional tests succeeded
✅ corerp-cloud functional tests succeeded

@lakshmimsft
Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Apr 20, 2026

Looks like this PR is already up-to-date with main! If you'd still like to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Apr 20, 2026

Looks like github.com/moby/spdystream is up-to-date now, so this is no longer needed.

@dependabot dependabot bot closed this Apr 20, 2026
@dependabot dependabot bot deleted the dependabot/go_modules/github.com/moby/spdystream-0.5.1 branch April 20, 2026 23:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant