umputun / reproxy

79%

master: 80%

LAST BUILD ON BRANCH fix/bump-x-net

branch: fix/bump-x-net

CHANGE BRANCH

x

Reset

• fix/bump-x-net
• add-X-Forwarded-URL
• assets-cache
• assets404
• basic-auth
• chore/go-1.26-and-deps
• ci/workflow-hardening
• dependabot/docker/goreleaser/goreleaser-v1.25.1
• dependabot/github_actions/github-actions-updates-a2e7793ad6
• dependabot/go_modules/go-modules-updates-07f3a6036d
• dependabot/go_modules/go-modules-updates-1d93b033d5
• dependabot/go_modules/go-modules-updates-89f9fe7d2d
• dependabot/go_modules/go-modules-updates-a76f434722
• dependabot/go_modules/go-modules-updates-b6eb7de9c2
• dependabot/go_modules/go-modules-updates-b9a07c6e8d
• dependabot/go_modules/go-modules-updates-c2f73b432e
• dependabot/go_modules/go-modules-updates-c741a0ad90
• dependabot/go_modules/golang.org/x/crypto-0.45.0
• dependabot/go_modules/golang.org/x/net-0.23.0
• dependabot/go_modules/golang.org/x/net-0.38.0
• dependabot/go_modules/golang.org/x/text-0.3.8
• dependabot/npm_and_yarn/site/browserslist-4.16.6
• dependabot/npm_and_yarn/site/follow-redirects-1.14.7
• dependabot/npm_and_yarn/site/follow-redirects-1.14.8
• dependabot/npm_and_yarn/site/markdown-it-12.3.2
• dependabot/npm_and_yarn/site/minimist-1.2.6
• dependabot/npm_and_yarn/site/nanoid-3.2.0
• dependabot/npm_and_yarn/site/normalize-url-4.5.1
• dependabot/npm_and_yarn/site/shell-quote-1.7.3
• dependabot/npm_and_yarn/site/ws-7.4.6
• docker-maker
• docker-multi-routes
• dockerhub
• drop-default-conflict
• dynamic-server
• feat/low-cardinality-metrics
• feature/add-dns-providers
• feature/upstream-connection-limits
• fix-dbl-headers
• fix-header-parsing
• fix/catchall-default-route-dedup
• fix/ci-security-hardening
• fix/critical-major-audit-findings
• fix/docker-api-version-240
• fix/dynamic-ssl-fqdns-207
• fix/file-provider-debounce
• fix/metrics-flusher-sse-streaming
• fix/roundrobin-shrinking-n
• fqdn-async-discovery
• header-comma
• lb-selector
• libdns-update
• limit-ips
• listen
• maint/deps-update-nov2025
• master
• max-request-url
• mgmt
• mime-cache
• multi-match
• multi-static
• nice-error
• paskal/dependabot-disable-updates
• paskal/dependabot-security-updates
• paskal/docker-user-improvements
• paskal/dockerfile-improvements
• per-route-auth
• per-route-timeout-throttle
• plugin-headers
• redirect
• refs/tags/v0.1.0
• refs/tags/v0.10.0
• refs/tags/v0.11.0
• refs/tags/v0.2.0
• refs/tags/v0.3.0
• refs/tags/v0.4.0
• refs/tags/v0.5.0
• refs/tags/v0.5.1
• refs/tags/v0.6.0
• refs/tags/v0.6.1
• refs/tags/v0.6.2
• refs/tags/v0.7.0
• refs/tags/v0.8.0
• refs/tags/v0.9.0
• refs/tags/v1.0.0
• refs/tags/v1.1.0
• refs/tags/v1.1.1
• refs/tags/v1.2.0
• refs/tags/v1.2.1
• refs/tags/v1.2.2
• refs/tags/v1.2.3
• refs/tags/v1.3.0
• refs/tags/v1.4.0
• refs/tags/v1.5.0
• refs/tags/v1.6.0
• release-automation
• rpc
• server-simple-pattern
• spa
• throttle

Build # 28688450015

Build Type

Pull #257

github

Committed by paskal

Commit Message

Bump golang.org/x/net to v0.55.0 to fix GO-2026-5026

golang.org/x/net v0.54.0 is affected by GO-2026-5026 (idna: failure to
reject ASCII-only Punycode-encoded labels), reachable from the TLS
certificate path via certmagic's GetCertificate -> idna.ToASCII.
govulncheck confirmed the trace before the bump and reports zero
affected vulnerabilities after.

x/sys is pulled to v0.45.0 as a transitive requirement. Vendored tree
updated to match.

Pull Request Pull Request #257: Bump golang.org/x/net to v0.55.0 to fix GO-2026-5026

Coverage Stats

2609 of 3282 relevant lines covered (79.49%)

38.32 hits per line