Skip to content

chore(deps): update module github.com/jackc/pgx/v5 to v5.9.0 [security]#192

Open
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/go-github.com-jackc-pgx-v5-vulnerability
Open

chore(deps): update module github.com/jackc/pgx/v5 to v5.9.0 [security]#192
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/go-github.com-jackc-pgx-v5-vulnerability

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Apr 16, 2026

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
github.com/jackc/pgx/v5 v5.7.4v5.9.0 age adoption passing confidence

CVE-2026-33816 in github.com/jackc/pgx

CVE-2026-33816 / GO-2026-4772

More information

Details

Memory-safety vulnerability in github.com/jackc/pgx/v5.

Severity

Unknown

References

No references.

This data is provided by OSV and the Go Vulnerability Database (CC-BY 4.0).


Release Notes

jackc/pgx (github.com/jackc/pgx/v5)

v5.9.0

Compare Source

v5.8.0

Compare Source

v5.7.6

Compare Source

v5.7.5

Compare Source


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • ""
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the security label Apr 16, 2026
@renovate renovate bot requested a review from a team as a code owner April 16, 2026 08:44
@renovate renovate bot added the security label Apr 16, 2026
@renovate
Copy link
Copy Markdown
Contributor Author

renovate bot commented Apr 16, 2026

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 8 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.22.0 -> 1.25.0
github.com/stretchr/testify v1.9.0 -> v1.11.1
golang.org/x/crypto v0.31.0 -> v0.41.0
golang.org/x/net v0.33.0 -> v0.43.0
golang.org/x/sync v0.10.0 -> v0.17.0
golang.org/x/sys v0.28.0 -> v0.35.0
golang.org/x/term v0.27.0 -> v0.34.0
golang.org/x/text v0.21.0 -> v0.29.0
golang.org/x/tools v0.28.0 -> v0.36.0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants