Upgrading golang.org/x/mod 0.39 to 0.40
Unknownv0.39.0 → v0.40.0Security2
SecurityFix transparency log tile verification bypass in golang.org/x/mod/sumdb/tlogCVE-2026-56865 ↗
UnknownUpgrade verdict
DepDelta hasn't looked for this range's notes yet, so breaking changes can't be ruled out.
In plain terms
- DepDelta hasn't finished looking for the notes in this range, so it can't rule out breaking changes yet.
- Their commits are listed with this comparison.
Must act 2 items need code or config changes
Moves golang.org/x/tools v0.48.0 → v0.49.0. Your build may pick other versions.
What you must change
Security2
Fix transparency log tile verification bypass in golang.org/x/mod/sumdb/tlog
Ignore unrelated, unauthenticated hashes in Lookup in golang.org/x/mod/sumdb