Skip to content

Bump golang.org/x/net from 0.54.0 to 0.55.0 - #109

Merged
andrewtavis merged 3 commits into
mainfrom
dependabot/go_modules/golang.org/x/net-0.55.0
Oct 26, 2026
Merged

andrewtavis merged 3 commits into
mainfrom
dependabot/go_modules/golang.org/x/net-0.55.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 6, 2026

Copy link
Copy Markdown
Contributor

Bumps golang.org/x/net from 0.54.0 to 0.55.0.

Commits
  • 7770ec4 go.mod: update golang.org/x dependencies
  • 4ece7b6 html: escape greater-than symbol in doctype identifiers
  • 08be507 html: improve Noah's Ark clause performance
  • a8fb2fe html: properly render fostered elements in foreign content
  • 0dc5b7a html: properly check namespace in "in body" any other end tag
  • a452f3c html: ignore duplicate attributes during tokenization
  • f865199 quic: fix appendMaxDataFrame erroneously accumulating sentLimit
  • 210ed3c quic: establish a "happened-before" relationship between stream write and read
  • ad8140e quic: fix buffer slicing when handling overlapping stream data
  • 23ee2ef http2: avoid API changes when built with go1.27
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [golang.org/x/net](https://github.com/golang/net) from 0.54.0 to 0.55.0.
- [Commits](golang/net@v0.54.0...v0.55.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.55.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 6, 2026
@andrewtavis

Copy link
Copy Markdown
Member

@DeleMike, I assume that this PR and #110 are good to bring in, but then the testing coverage that we have so far doesn't mean that we can just assume. Maybe we can start merging in these PRs confidently once we have say 50% coverage?

@DeleMike

DeleMike commented Oct 7, 2026

Copy link
Copy Markdown
Member

I agree. I will also try to run through a lot of test issues

@andrewtavis

Copy link
Copy Markdown
Member

@DeleMike, now that we're at 70% coverage (❗🎉), do you think we're good to start merging in some of these dependabot changes on passing tests?

@DeleMike

Copy link
Copy Markdown
Member

Yes, it's totally fine! @andrewtavis

@andrewtavis andrewtavis left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Tests are passing on an indirect dependency, so merging in :)

@andrewtavis
andrewtavis merged commit dcdb4db into main Oct 26, 2026
2 checks passed
@andrewtavis
andrewtavis deleted the dependabot/go_modules/golang.org/x/net-0.55.0 branch October 26, 2026 17:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants