Skip to content

chore: bump golang.org/x/net, caddyserver/certmagic and github-actions#2505

Open
alexandre-daubois wants to merge 1 commit into
php:mainfrom
alexandre-daubois:chore/dependency-bumps
Open

chore: bump golang.org/x/net, caddyserver/certmagic and github-actions#2505
alexandre-daubois wants to merge 1 commit into
php:mainfrom
alexandre-daubois:chore/dependency-bumps

Conversation

@alexandre-daubois

Copy link
Copy Markdown
Member

Supersedes #2493, #2494 and #2498

Copilot AI review requested due to automatic review settings July 6, 2026 08:05

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR consolidates several dependency update PRs by bumping core Go module dependencies (including golang.org/x/net and related x/* modules), updating the Caddy module’s certmagic dependency, and refreshing pinned GitHub Actions versions used in CI workflows.

Changes:

  • Bump golang.org/x/net to v0.56.0 (and related golang.org/x/{crypto,sync,sys,text} versions) in the root module.
  • Bump github.com/caddyserver/certmagic to v0.25.4 (and related golang.org/x/* indirects) in caddy/.
  • Update multiple GitHub Actions pins (e.g., actions/checkout, actions/cache, Docker actions, golangci-lint-action, and dependabot/fetch-metadata).

Reviewed changes

Copilot reviewed 11 out of 13 changed files in this pull request and generated 1 comment.

Show a summary per file
File Description
go.mod Bumps golang.org/x/net and related golang.org/x/* indirect versions.
go.sum Updates sums corresponding to the bumped root Go module dependencies.
caddy/go.mod Bumps certmagic plus related indirect golang.org/x/* versions for the Caddy module.
caddy/go.sum Updates sums corresponding to the bumped Caddy module dependencies.
.github/workflows/windows.yaml Updates actions/checkout pin for the Windows workflow.
.github/workflows/translate.yaml Updates actions/checkout pin for the translation workflow.
.github/workflows/tests.yaml Updates actions/checkout and golangci-lint-action pins for test/lint jobs.
.github/workflows/static.yaml Updates actions/checkout and Docker action pins used by the static build workflow.
.github/workflows/sanitizers.yaml Updates actions/checkout and actions/cache pins for sanitizer runs.
.github/workflows/release.yaml Updates actions/checkout pin for the release workflow.
.github/workflows/lint.yaml Updates actions/checkout pin for the lint workflow.
.github/workflows/docker.yaml Updates actions/checkout and Docker action pins for Docker build workflows.
.github/workflows/dependabot.yaml Updates dependabot/fetch-metadata pin used by the Dependabot auto-merge workflow.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread .github/workflows/dependabot.yaml
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants