fix(deps): patch jackc/pgx/v5 to 5.9.0 (integration tests)#392
fix(deps): patch jackc/pgx/v5 to 5.9.0 (integration tests)#392
Conversation
Bumps tests/integration/golang/jackc/pgx/v5 from 5.7.2 -> 5.9.0, addressing CVE-2026-33816 (memory-safety vulnerability in pgx v5). Side effects of pgx 5.9.0's transitive requirements: stretchr/testify 1.8.1 -> 1.11.1 and go directive 1.24.0 -> 1.25.0. These changes are limited to the Go integration test workspace and do not affect the proxy production code (which is Rust).
|
Warning Rate limit exceeded
To keep reviews running without waiting, you can enable usage-based add-on for your organization. This allows additional reviews beyond the hourly cap. Account admins can enable it under billing. ⌛ How to resolve this issue?After the wait time has elapsed, a review can be triggered using the We recommend that you space out your commits to avoid hitting the rate limit. 🚦 How do rate limits work?CodeRabbit enforces hourly rate limits for each developer per organization. Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout. Please see our FAQ for further information. ℹ️ Review info⚙️ Run configurationConfiguration used: defaults Review profile: CHILL Plan: Pro Run ID: ⛔ Files ignored due to path filters (1)
📒 Files selected for processing (1)
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Bumps
github.com/jackc/pgx/v55.7.2 → 5.9.0 intests/integration/golang/.Addresses CVE-2026-33816 / GHSA-9jj7-4m8r-rfcm — memory-safety vulnerability in pgx v5 (CVSS 9.8).
Notes
stretchr/testify1.8.1 → 1.11.1 andgodirective 1.24.0 → 1.25.0.This is an automated security patch update.