Upgrading golang.org/x/net 0.59 to 0.60
Unknownv0.59.0 → v0.60.0Security5
UnknownUpgrade verdict
DepDelta hasn't looked for this range's notes yet, so breaking changes can't be ruled out.
In plain terms
- DepDelta hasn't finished looking for the notes in this range, so it can't rule out breaking changes yet.
- Their commits are listed with this comparison.
Must act Top 3 of 5 that need code or config changes
What you must change
Security5
HTTP/2 server memory exhaustion due to Trailer headers in net/http
HTTP/2 transport accepts malformed framing-related headers in net/http
Excessive CPU consumption from repeated initial window changes in net/http
Double flow control refund on HTTP/2 server streams in net/http
HTTP/2 server crash due to HPACK encoder race in net/http