hashicorp / hashicorp/consul-template
Upgrade request from golang.org/x/net v0.34.0 to golang.org/x/net v0.36.0
Open
- Dominant language
- Go
- Stars
- 4.8k
- Forks
- 801
- Avg merge
- 4h 5m
- Merged PRs (30d)
- 6
Description
Latest consul-template release 0.40.0 is having golang.org/x/net v0.34.0 please upgrade it to golang.org/x/net v0.36.0
This CVE-2025-22870 need 0.36.0 version.
Contributor guide
Research direction
Start by locating the dependency declaration for golang.org/x/net v0.34.0 in the repository and check how dependency upgrades are validated. Update it to v0.36.0, then run the repository's existing checks to confirm the upgrade resolves the reported CVE without regressions.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- security
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Clearly specified
- Newbie friendliness
- 48/100