fix(security): patch Docker Scout CVEs in x/net and Alpine packages
CI / test (pull_request) Successful in 2m26s
CI / lint (pull_request) Successful in 51s
CI / vulncheck (pull_request) Successful in 46s

Upgrade golang.org/x/net v0.54.0 → v0.55.0 (CVE-2026-41589 critical,
CVE-2025-60876, CVE-2026-42502, CVE-2026-42506, CVE-2026-25681,
CVE-2026-35414). Add apk upgrade to Dockerfile for openssh and busybox
CVEs (CVE-2026-25680, CVE-2026-27136, CVE-2026-35386, CVE-2026-35387,
CVE-2026-35388).
This commit is contained in:
2026-05-29 20:05:28 -04:00
parent ec898ff943
commit 13a0860dd3
3 changed files with 4 additions and 3 deletions
+1 -1
View File
@@ -53,7 +53,7 @@ require (
golang.org/x/crypto v0.52.0 // indirect
golang.org/x/exp v0.0.0-20240719175910-8a7402abbf56 // indirect
golang.org/x/mod v0.35.0 // indirect
golang.org/x/net v0.54.0 // indirect
golang.org/x/net v0.55.0 // indirect
golang.org/x/sync v0.20.0 // indirect
golang.org/x/sys v0.45.0 // indirect
golang.org/x/text v0.37.0 // indirect