Skip to content

fix(deps): vuln minor: github.com/aws/aws-cdk-go/awscdk/v2, golang.org/x/mod [integration_tests/stacks] - #676

Closed
gh-worker-campaigns-3e9aa4[bot] wants to merge 1 commit into
mainfrom
engraver-auto-version-upgrade/minorpatch/go/stacks/4-1786986995
Closed

fix(deps): vuln minor: github.com/aws/aws-cdk-go/awscdk/v2, golang.org/x/mod [integration_tests/stacks]#676
gh-worker-campaigns-3e9aa4[bot] wants to merge 1 commit into
mainfrom
engraver-auto-version-upgrade/minorpatch/go/stacks/4-1786986995

Conversation

@gh-worker-campaigns-3e9aa4

Copy link
Copy Markdown
Contributor

Summary: Security update — 2 packages upgraded (MINOR changes included)

Manifests changed:

  • integration_tests/stacks (go)

✅ Action Required: Please review the changes below. If they look good, approve and merge this PR.


Updates

Package From To Type Dep Type Vulnerabilities Fixed
github.com/aws/aws-cdk-go/awscdk/v2 v2.151.0 v2.265.0 minor Direct 1 LOW
golang.org/x/mod v0.22.0 v0.40.0 minor Transitive 2 UNKNOWN

Security Details

ℹ️ Other Vulnerabilities (3)
Package CVE Severity Summary Unsafe Version Fixed In Case
github.com/aws/aws-cdk-go/awscdk/v2 GHSA-464c-974j-9xm6 LOW AWS CDK CodeBuild S3 Log Encryption Boolean Inversion v2.151.0 2.253.0 -
golang.org/x/mod GO-2026-6179 unknown Fix transparency log tile verification bypass in golang.org/x/mod/sumdb/tlog v0.22.0 0.40.0 -
golang.org/x/mod GO-2026-6180 unknown Ignore unrelated, unauthenticated hashes in Lookup in golang.org/x/mod/sumdb v0.22.0 0.40.0 -

Review Checklist

Standard review:

  • Review changes for compatibility with your code
  • Check for breaking changes in release notes
  • Run tests locally or wait for CI
  • Approve and merge this PR

Update Mode: all_vulns

🤖 Generated by DataDog Automated Dependency Management System

@datadog-prod-us1-4

datadog-prod-us1-4 Bot commented Aug 17, 2026

Copy link
Copy Markdown

Pipelines

Unblock PR with BitsAI

⚠️ Warnings

🚦 1 Pipeline job failed

tests | integration-tests — 🔧 Needs a code fix, caused by this PR

View in Datadog · View in GitHub Actions

Panic: TypeError: Cannot read properties of undefined (reading 'value') at /home/runner/go/pkg/mod/github.com/aws/jsii-runtime-go/runtime/runtime.go:253

📋 Copy prompt for your agent
CI on my pull request is failing. Help me find and fix the root cause of each failing job below — they were flagged as caused by changes in this PR, so focus on the diff. For each job, explain the failure and propose a fix.

Branch: engraver-auto-version-upgrade/minorpatch/go/stacks/4-1786986995

tests | integration-tests
Commit: e35933a72fe86d24a264ca9d7c5e4d69dfc15293
Error (code / test):
Panic: TypeError: Cannot read properties of undefined (reading 'value') at /home/runner/go/pkg/mod/github.com/aws/jsii-runtime-go/runtime/runtime.go:253
CI job: https://github.com/DataDog/datadog-cdk-constructs/actions/runs/32509060204/job/96855910848

Useful? React with 👍 / 👎

This comment will be updated automatically if new data arrives.
🔗 Commit SHA: e35933a | Docs | View more details | Give us feedback!

…od [integration_tests/stacks]

Co-authored-by: gh-worker-campaigns-3e9aa4[bot] <244854796+gh-worker-campaigns-3e9aa4[bot]@users.noreply.github.com>
@gh-worker-campaigns-3e9aa4

Copy link
Copy Markdown
Contributor Author

Auto-rebase complete

Branch is up to date with main — rebased onto ed5549c.


Auto-Rebase · Add no-auto-rebase to opt out

@dd-octo-sts-aad58d
dd-octo-sts-aad58d Bot force-pushed the engraver-auto-version-upgrade/minorpatch/go/stacks/4-1786986995 branch from fbf2a04 to e35933a Compare August 21, 2026 17:36
@gh-worker-campaigns-3e9aa4
gh-worker-campaigns-3e9aa4 Bot deleted the engraver-auto-version-upgrade/minorpatch/go/stacks/4-1786986995 branch August 25, 2026 10:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants