Skip to content

fix(deps): remediate GO-2026-5970 - #60

Merged
Scetrov merged 1 commit into
mainfrom
fix/remediate-go-2026-5970
Jul 22, 2026
Merged

fix(deps): remediate GO-2026-5970#60
Scetrov merged 1 commit into
mainfrom
fix/remediate-go-2026-5970

Conversation

@Scetrov

@Scetrov Scetrov commented Jul 22, 2026

Copy link
Copy Markdown
Owner

Summary

  • update golang.org/x/text to v0.40.0, resolving GO-2026-5970
  • pin PTerm's upstream synchronization fix so the race-enabled suite passes
  • add OpenSpec proposal, design, specification, and verification record

Validation

  • make test
  • go test -race -count=1 ./...
  • govulncheck -show verbose ./...
  • go mod verify
  • pre-commit run --all-files

Follow-up

  • After merge, verify the next OpenSSF Scorecard Vulnerabilities result no longer reports GO-2026-5970.

@Scetrov
Scetrov merged commit 840d113 into main Jul 22, 2026
7 checks passed
@Scetrov
Scetrov deleted the fix/remediate-go-2026-5970 branch July 22, 2026 18:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant