Skip to content

Conversation

renovate-bot
Copy link
Contributor

@renovate-bot renovate-bot commented Sep 25, 2025

This PR contains the following updates:

Package Change Age Confidence
golang.org/x/oauth2 v0.23.0 -> v0.27.0 age confidence

GitHub Vulnerability Alerts

CVE-2025-22868

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.


Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@dpebot
Copy link
Collaborator

dpebot commented Sep 25, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/go-golang.org-x-oauth2-vulnerability branch from 07d97c3 to a7d7f29 Compare September 26, 2025 17:09
@dpebot
Copy link
Collaborator

dpebot commented Sep 26, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/go-golang.org-x-oauth2-vulnerability branch from a7d7f29 to 2b9372a Compare October 1, 2025 22:55
@dpebot
Copy link
Collaborator

dpebot commented Oct 1, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/go-golang.org-x-oauth2-vulnerability branch from 2b9372a to 745c9de Compare October 8, 2025 00:54
@dpebot
Copy link
Collaborator

dpebot commented Oct 8, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/go-golang.org-x-oauth2-vulnerability branch from 745c9de to 78e7988 Compare October 10, 2025 02:08
@dpebot
Copy link
Collaborator

dpebot commented Oct 10, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/go-golang.org-x-oauth2-vulnerability branch from 78e7988 to 2bbf079 Compare October 10, 2025 18:09
@dpebot
Copy link
Collaborator

dpebot commented Oct 10, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/go-golang.org-x-oauth2-vulnerability branch from 2bbf079 to 99ff1a3 Compare October 15, 2025 01:12
@dpebot
Copy link
Collaborator

dpebot commented Oct 15, 2025

/gcbrun

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants