prometheus/internal
Julien Pivotto 4ed5d059b2 build: bump golang.org/x/net and OpenTelemetry to fix CVEs
Updates the minimum versions of vulnerable dependencies reported by
govulncheck:

- golang.org/x/net v0.48.0 -> v0.55.0 (GO-2026-5026, GO-2026-4918)
- go.opentelemetry.io/otel/... v1.36.0/v1.39.0 -> v1.43.0 (GO-2026-4985)

This raises the go directive to 1.25.0, as required by the upgraded
dependencies.

Signed-off-by: Julien Pivotto <291750+roidelapluie@users.noreply.github.com>
2026-06-16 11:33:47 +02:00
..
tools build: bump golang.org/x/net and OpenTelemetry to fix CVEs 2026-06-16 11:33:47 +02:00