Skip to content

deps: bump golang.org/x/net from 0.59.0 to 0.60.0 in the go-deps group - #10

Merged
annaveretennykova merged 2 commits into
mainfrom
dependabot/go_modules/go-deps-3645c87e83
Oct 14, 2026
Merged

annaveretennykova merged 2 commits into
mainfrom
dependabot/go_modules/go-deps-3645c87e83

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 12, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-deps group with 1 update: golang.org/x/net.

Updates golang.org/x/net from 0.59.0 to 0.60.0

Commits
  • 18ece0c http2: prevent crash due to HPACK encoder race
  • 2d03f9d http2: avoid 2x refund on stream close with buffered data
  • cc7d34f http2: avoid excessive work on initial window changes
  • 57f4235 http2: apply header limits to Trailer headers too
  • 01e3d03 http2: coalesce dials via wrapped Transport.RoundTrip
  • 2824783 http2: delete malformed framing-related headers
  • b13c0c1 internal/http3: delete HTTP/3 package
  • 520c891 quic: off-path support in loss/congestion/rtt
  • 656874f quic: determine local address for connections
  • a818e16 quic: add a pathAddrs type, holding a local/peer address pair
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-deps group with 1 update: [golang.org/x/net](https://github.com/golang/net).


Updates `golang.org/x/net` from 0.59.0 to 0.60.0
- [Commits](golang/net@v0.59.0...v0.60.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.60.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies A Dependabot-opened update. label Oct 12, 2026
@annaveretennykova

Copy link
Copy Markdown
Member

/lgtm

@annaveretennykova

Copy link
Copy Markdown
Member

/approve

@github-actions github-actions Bot added lgtm Looks good to me. Set by /lgtm from someone with write access. approved Approved to merge. Set by /approve (write access). With lgtm and no do-not-merge/*, gate passes. labels Oct 14, 2026
@annaveretennykova
annaveretennykova merged commit b180f03 into main Oct 14, 2026
14 checks passed
@annaveretennykova
annaveretennykova deleted the dependabot/go_modules/go-deps-3645c87e83 branch October 14, 2026 10:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Approved to merge. Set by /approve (write access). With lgtm and no do-not-merge/*, gate passes. dependencies A Dependabot-opened update. lgtm Looks good to me. Set by /lgtm from someone with write access.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant