From 6758ba62d07304d98f75459588ed9ec6b52fc707 Mon Sep 17 00:00:00 2001 From: Sebastiaan van Stijn Date: Tue, 10 Nov 2026 20:23:34 +0100 Subject: [PATCH 1/4] vendor: golang.org/x/sync v0.25.0 full diff: https://github.com/golang/sync/compare/v0.24.0...v0.25.0 Signed-off-by: Sebastiaan van Stijn --- vendor.mod | 2 +- vendor.sum | 4 ++-- vendor/modules.txt | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/vendor.mod b/vendor.mod index 3db227e61b..3ae3619bc4 100644 --- a/vendor.mod +++ b/vendor.mod @@ -61,7 +61,7 @@ require ( go.opentelemetry.io/otel/sdk/metric v1.47.0 go.opentelemetry.io/otel/trace v1.47.0 go.yaml.in/yaml/v3 v3.0.6 - golang.org/x/sync v0.24.0 + golang.org/x/sync v0.25.0 golang.org/x/sys v0.50.0 golang.org/x/term v0.47.0 golang.org/x/text v0.43.0 diff --git a/vendor.sum b/vendor.sum index ac0b1629ca..3883c97f86 100644 --- a/vendor.sum +++ b/vendor.sum @@ -200,8 +200,8 @@ golang.org/x/net v0.62.0/go.mod h1:WgDCOTH8iwtB66T4/GfI94AHo/hhdb7Hah9NDseQfiI= golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.0.0-20190911185100-cd5d95a43a6e/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.0.0-20201020160332-67f06af15bc9/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= -golang.org/x/sync v0.24.0 h1:iqiDrGoDgyuvAKrhLQthUEzU/R378N78gXbBjxed7oA= -golang.org/x/sync v0.24.0/go.mod h1:sUUOizhqBxiL6pEWpqNLUiaJn1ShEbZ6BBqskPbjZm0= +golang.org/x/sync v0.25.0 h1:dJnifr0nMV8/SBnBvdo4eSGGnrc3O4FFx6IqvtLcmRs= +golang.org/x/sync v0.25.0/go.mod h1:sUUOizhqBxiL6pEWpqNLUiaJn1ShEbZ6BBqskPbjZm0= golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= diff --git a/vendor/modules.txt b/vendor/modules.txt index 690ea42de1..8dafbad87f 100644 --- a/vendor/modules.txt +++ b/vendor/modules.txt @@ -412,7 +412,7 @@ golang.org/x/net/internal/httpcommon golang.org/x/net/internal/httpsfv golang.org/x/net/internal/timeseries golang.org/x/net/trace -# golang.org/x/sync v0.24.0 +# golang.org/x/sync v0.25.0 ## explicit; go 1.26.0 golang.org/x/sync/errgroup # golang.org/x/sys v0.50.0 From bc9b8d9a153a9b2aa0dd4b7ef1710bd2864cc59d Mon Sep 17 00:00:00 2001 From: Sebastiaan van Stijn Date: Tue, 10 Nov 2026 20:24:26 +0100 Subject: [PATCH 2/4] vendor: golang.org/x/mod v0.43.0 no changes in vendored code full diff: https://github.com/golang/mod/compare/v0.42.0...v0.43.0 Signed-off-by: Sebastiaan van Stijn --- vendor.mod | 2 +- vendor.sum | 4 ++-- vendor/modules.txt | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/vendor.mod b/vendor.mod index 3ae3619bc4..b001994a04 100644 --- a/vendor.mod +++ b/vendor.mod @@ -102,7 +102,7 @@ require ( go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.47.0 // indirect go.opentelemetry.io/otel/log v1.47.0 // indirect go.opentelemetry.io/proto/otlp v1.11.0 // indirect - golang.org/x/mod v0.42.0 // indirect + golang.org/x/mod v0.43.0 // indirect golang.org/x/net v0.62.0 // indirect golang.org/x/time v0.16.0 // indirect google.golang.org/genproto/googleapis/api v0.0.0-20260928230214-8a89bd6388cc // indirect diff --git a/vendor.sum b/vendor.sum index 3883c97f86..9fa1b27260 100644 --- a/vendor.sum +++ b/vendor.sum @@ -189,8 +189,8 @@ golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8U golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto= golang.org/x/mod v0.2.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA= golang.org/x/mod v0.3.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA= -golang.org/x/mod v0.42.0 h1:ICeL3t2L30ljSPHHxDnR4fqVcBt/zR2zJAb9juavmQg= -golang.org/x/mod v0.42.0/go.mod h1:u5fzIrRInkL8MaO1cbRkUHT64v303YIT5KEqpNr7jRs= +golang.org/x/mod v0.43.0 h1:MFuq5J6s35W9D3IjkwyWc9vHh0nENOrt5K8Iof4ofmg= +golang.org/x/mod v0.43.0/go.mod h1:4ec1JnuyBz5+FIVhg86UsA39YG8BpnrZdJYSNHmGzHY= golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg= golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s= golang.org/x/net v0.0.0-20200226121028-0de0cce0169b/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s= diff --git a/vendor/modules.txt b/vendor/modules.txt index 8dafbad87f..0a735199b2 100644 --- a/vendor/modules.txt +++ b/vendor/modules.txt @@ -396,7 +396,7 @@ go.opentelemetry.io/proto/otlp/trace/v1 # go.yaml.in/yaml/v3 v3.0.6 ## explicit; go 1.16 go.yaml.in/yaml/v3 -# golang.org/x/mod v0.42.0 +# golang.org/x/mod v0.43.0 ## explicit; go 1.26.0 golang.org/x/mod/internal/lazyregexp golang.org/x/mod/modfile From 83d2f9c986a9d1c945d9b836a19a1abe8f3fd0ab Mon Sep 17 00:00:00 2001 From: Sebastiaan van Stijn Date: Tue, 10 Nov 2026 20:25:24 +0100 Subject: [PATCH 3/4] vendor: golang.org/x/term v0.48.0 no changes in vendored code - go.mod: update golang.org/x dependencies full diff: https://github.com/golang/term/compare/v0.47.0...v0.48.0 Signed-off-by: Sebastiaan van Stijn --- vendor.mod | 2 +- vendor.sum | 4 ++-- vendor/modules.txt | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/vendor.mod b/vendor.mod index b001994a04..9c3a15af16 100644 --- a/vendor.mod +++ b/vendor.mod @@ -63,7 +63,7 @@ require ( go.yaml.in/yaml/v3 v3.0.6 golang.org/x/sync v0.25.0 golang.org/x/sys v0.50.0 - golang.org/x/term v0.47.0 + golang.org/x/term v0.48.0 golang.org/x/text v0.43.0 gotest.tools/v3 v3.5.2 tags.cncf.io/container-device-interface v1.1.1 diff --git a/vendor.sum b/vendor.sum index 9fa1b27260..25ff032e1d 100644 --- a/vendor.sum +++ b/vendor.sum @@ -208,8 +208,8 @@ golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f/go.mod h1:h1NjWce9XRLGQEsW7w golang.org/x/sys v0.1.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.50.0 h1:dkKZEFTEKaLr1sjhs0WiKqoi8Jj5nHbS3Njmx1UoMJs= golang.org/x/sys v0.50.0/go.mod h1:hNLxWAXmnKAxqDtdwIYC4bM9oQPEecfsnNMuSxOs3og= -golang.org/x/term v0.47.0 h1:cpyOwQkr2Nzxe2p6KnrTG7Ei2wtzjsuSjhpXXepZ/BM= -golang.org/x/term v0.47.0/go.mod h1:efAfAuG6RKABvg1ArGebRkvX6LXul14SM67o2e4mUCY= +golang.org/x/term v0.48.0 h1:G6UU1eiSB8nl3DzeUGt7Mg+2SctI8tPS6Z5/mBt6cOk= +golang.org/x/term v0.48.0/go.mod h1:BRDLHCZr2SUjIeBHHpRyQeC9xzSAVbzY2rvKgafnHf4= golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= golang.org/x/text v0.43.0 h1:1QivrlhwAsnMOcqgOdl9my7s9OyZl8O5/UGUTJVXoWc= diff --git a/vendor/modules.txt b/vendor/modules.txt index 0a735199b2..ebe0f9fa78 100644 --- a/vendor/modules.txt +++ b/vendor/modules.txt @@ -421,7 +421,7 @@ golang.org/x/sys/plan9 golang.org/x/sys/unix golang.org/x/sys/windows golang.org/x/sys/windows/registry -# golang.org/x/term v0.47.0 +# golang.org/x/term v0.48.0 ## explicit; go 1.26.0 golang.org/x/term # golang.org/x/text v0.43.0 From c55feebf74c0218dd1b4ea8109bfa1e2bb6ad6e6 Mon Sep 17 00:00:00 2001 From: Sebastiaan van Stijn Date: Tue, 10 Nov 2026 20:26:15 +0100 Subject: [PATCH 4/4] vendor: golang.org/x/text v0.44.0 - internal/export/idna: avoid excessive work in Punycode encoding - language: count '_' alongside '-' in ParseAcceptLanguage guard - go.mod: update golang.org/x dependencies full diff: https://github.com/golang/text/compare/v0.43.0...v0.44.0 Signed-off-by: Sebastiaan van Stijn --- vendor.mod | 2 +- vendor.sum | 4 ++-- vendor/golang.org/x/text/language/parse.go | 4 +++- vendor/modules.txt | 2 +- 4 files changed, 7 insertions(+), 5 deletions(-) diff --git a/vendor.mod b/vendor.mod index 9c3a15af16..cb5e2bf7ae 100644 --- a/vendor.mod +++ b/vendor.mod @@ -64,7 +64,7 @@ require ( golang.org/x/sync v0.25.0 golang.org/x/sys v0.50.0 golang.org/x/term v0.48.0 - golang.org/x/text v0.43.0 + golang.org/x/text v0.44.0 gotest.tools/v3 v3.5.2 tags.cncf.io/container-device-interface v1.1.1 ) diff --git a/vendor.sum b/vendor.sum index 25ff032e1d..c6d7b9e13b 100644 --- a/vendor.sum +++ b/vendor.sum @@ -212,8 +212,8 @@ golang.org/x/term v0.48.0 h1:G6UU1eiSB8nl3DzeUGt7Mg+2SctI8tPS6Z5/mBt6cOk= golang.org/x/term v0.48.0/go.mod h1:BRDLHCZr2SUjIeBHHpRyQeC9xzSAVbzY2rvKgafnHf4= golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= -golang.org/x/text v0.43.0 h1:1QivrlhwAsnMOcqgOdl9my7s9OyZl8O5/UGUTJVXoWc= -golang.org/x/text v0.43.0/go.mod h1:hbSIYA/amXcRXTFSZqh8tWHEoqRvvbKPJ2uz/KU+a+s= +golang.org/x/text v0.44.0 h1:YItdp/mQNGnsmrgpcdA5yQ3bnRxCfo/Tj/iByGW9GGo= +golang.org/x/text v0.44.0/go.mod h1:S4FR1waQ9LbjQTls97SyRjDaUUVkaM+cXwwuG/G+MwY= golang.org/x/time v0.16.0 h1:vMb6ptszcQMkcwiRTAuNNU50gom6++Q/6gY2hDM6VDE= golang.org/x/time v0.16.0/go.mod h1:rVKOqvZeKvrDKTQiAHJ7wmwP0RzleSphoEA9RcdLA0s= golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ= diff --git a/vendor/golang.org/x/text/language/parse.go b/vendor/golang.org/x/text/language/parse.go index 053336e286..65b53b915b 100644 --- a/vendor/golang.org/x/text/language/parse.go +++ b/vendor/golang.org/x/text/language/parse.go @@ -166,7 +166,9 @@ func ParseAcceptLanguage(s string) (tag []Tag, q []float32, err error) { } }() - if strings.Count(s, "-") > 1000 { + // The BCP 47 scanner aliases '_' to '-' in scanner.init + // (internal/language/parse.go); the guard must count both. + if strings.Count(s, "-")+strings.Count(s, "_") > 1000 { return nil, nil, errTagListTooLarge } diff --git a/vendor/modules.txt b/vendor/modules.txt index ebe0f9fa78..708b2282a0 100644 --- a/vendor/modules.txt +++ b/vendor/modules.txt @@ -424,7 +424,7 @@ golang.org/x/sys/windows/registry # golang.org/x/term v0.48.0 ## explicit; go 1.26.0 golang.org/x/term -# golang.org/x/text v0.43.0 +# golang.org/x/text v0.44.0 ## explicit; go 1.26.0 golang.org/x/text/feature/plural golang.org/x/text/internal