supabase / auth / 29899212170
72%

DEFAULT BRANCH: master
Ran
Jobs 1
Files 196
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 71.742% (+0.01%) from 71.731%
29899212170

push

github

web-flow 
fix: upgrade to x/text@v0.39.0 GO-2026-5970 (#2636)

## What kind of change does this PR introduce?

Upgrade to `golang.org/x/text@v0.39.0`.

```bash
Vulnerability #1: GO-2026-5970
    Infinite loop on invalid input in golang.org/x/text
  More info: https://pkg.go.dev/vuln/GO-2026-5970
  Module: golang.org/x/text
    Found in: golang.org/x/text@v0.36.0
    Fixed in: golang.org/x/text@v0.39.0
    Example traces found:
      #1: internal/indexworker/indexworker.go:62:19: indexworker.CreateIndexes calls pop.Connection.Open, which eventually calls norm.Form.Properties
      #2: internal/indexworker/indexworker.go:62:19: indexworker.CreateIndexes calls pop.Connection.Open, which eventually calls norm.Form.Span
      #3: internal/indexworker/indexworker.go:62:19: indexworker.CreateIndexes calls pop.Connection.Open, which eventually calls norm.Form.Transform
```

## What is the current behavior?

```bash
モ go get golang.org/x/text@v0.39.0
...
モ ./tools/bin/govulncheck ./...
=== Symbol Results ===

Vulnerability #1: GO-2026-5970
    Infinite loop on invalid input in golang.org/x/text
  More info: https://pkg.go.dev/vuln/GO-2026-5970
  Module: golang.org/x/text
    Found in: golang.org/x/text@v0.36.0
    Fixed in: golang.org/x/text@v0.39.0
    Example traces found:
      #1: internal/indexworker/indexworker.go:62:19: indexworker.CreateIndexes calls pop.Connection.Open, which eventually calls norm.Form.Properties
      #2: internal/indexworker/indexworker.go:62:19: indexworker.CreateIndexes calls pop.Connection.Open, which eventually calls norm.Form.Span
      #3: internal/indexworker/indexworker.go:62:19: indexworker.CreateIndexes calls pop.Connection.Open, which eventually calls norm.Form.Transform

Vulnerability #2: GO-2026-5004
    SQL Injection via placeholder confusion with dollar quoted string literals
    in github.com/jackc/pgx
  More info: https://pkg.go.dev/vuln/GO-2026-5004
  Module: github.com/jackc/pgx/v4
    Found in: github.com/jackc/pgx/v4@v4.1... (continued)

18092 of 25218 relevant lines covered (71.74%)

666.46 hits per line

Jobs
ID Job ID Ran Files Coverage
1 29899212170.1 196
71.74
 GitHub Action Run
Source Files on build 29899212170