[PR #7008] build(deps): bump github.com/gopacket/gopacket from 1.4.0 to 1.7.0 #30091

Open
opened 2026-08-05 08:10:04 -04:00 by saavagebueno · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/netbirdio/netbird/pull/7008
Author: @dependabot[bot]
Created: 7/30/2026
Status: 🔄 Open

Base: mainHead: dependabot/go_modules/github.com/gopacket/gopacket-1.7.0


📝 Commits (1)

  • 800ce43 build(deps): bump github.com/gopacket/gopacket from 1.4.0 to 1.7.0

📊 Changes

2 files changed (+3 additions, -3 deletions)

View changed files

📝 go.mod (+1 -1)
📝 go.sum (+2 -2)

📄 Description

Bumps github.com/gopacket/gopacket from 1.4.0 to 1.7.0.

Release notes

Sourced from github.com/gopacket/gopacket's releases.

v1.7.0

Compatibility

The minimum supported Go version is now 1.25. golang.org/x/net v0.55.0 requires go 1.25.0, which raises this module's go directive with it. If you're stuck on Go 1.24 or older, stay on v1.6.1.

Fixed

  • reassembly: closeHalfConnection now returns every buffered page to the page cache instead of only the first one. pageCache.replace nils p.next before pooling, so the old loop terminated after one iteration. The leaked pages permanently inflated the pc.used counter checked against MaxBufferedPagesTotal — on long-running captures with that limit set, the assembler would eventually treat the buffer as full for every connection and force-flush out-of-order data instead of reassembling it. Triggered by a FIN/RST arriving while out-of-order segments are buffered beyond it. (#161, google/gopacket#856)
  • layers: IPv4 SerializeTo rejects option lengths below 2 instead of producing a malformed header. (#159)

Dependencies

  • golang.org/x/net 0.39.0 → 0.55.0, golang.org/x/sys 0.32.0 → 0.45.0 (#162)

CI

  • setup-go now reads the Go version from go.mod instead of a hardcoded constraint, and tests run under sudo use the setup-go toolchain — sudo's secure_path had been silently resolving go to the runner's system installation. (#162)
  • actions/checkout bumped from 6 to 7. (#160)

Full Changelog: https://github.com/gopacket/gopacket/compare/v1.6.1...v1.7.0

v1.6.1

Full Changelog: https://github.com/gopacket/gopacket/compare/v1.6.0...v1.6.1

v1.6.0

What's Changed

New Contributors

Full Changelog: https://github.com/gopacket/gopacket/compare/v1.5.0...v1.6.0

v1.5.0

... (truncated)

Commits
  • d338185 build(deps): bump golang.org/x/net from 0.39.0 to 0.55.0 (#162)
  • 067005e Fix reassembly closeHalfConnections list traversal (#161)
  • 4ff01f2 fix(ip4): reject option length below 2 in SerializeTo (#159)
  • 5d6a732 build(deps): bump actions/checkout from 6 to 7 (#160)
  • 7611908 Merge commit from fork
  • 145859d Merge commit from fork
  • 95d1ae3 gre: add bounds checking (#154)
  • 7d7d998 feat: apple pktapv1 support (#153)
  • 600bed8 ip6defrag: implements an IPv6 defragmenter (#151)
  • f64f2a0 fix(lcm): add bounds check around fingerprint (#152)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/netbirdio/netbird/pull/7008 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 7/30/2026 **Status:** 🔄 Open **Base:** `main` ← **Head:** `dependabot/go_modules/github.com/gopacket/gopacket-1.7.0` --- ### 📝 Commits (1) - [`800ce43`](https://github.com/netbirdio/netbird/commit/800ce436f988f4f05c1f3e6025bb034666d96ddd) build(deps): bump github.com/gopacket/gopacket from 1.4.0 to 1.7.0 ### 📊 Changes **2 files changed** (+3 additions, -3 deletions) <details> <summary>View changed files</summary> 📝 `go.mod` (+1 -1) 📝 `go.sum` (+2 -2) </details> ### 📄 Description Bumps [github.com/gopacket/gopacket](https://github.com/gopacket/gopacket) from 1.4.0 to 1.7.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/gopacket/gopacket/releases">github.com/gopacket/gopacket's releases</a>.</em></p> <blockquote> <h2>v1.7.0</h2> <h2>Compatibility</h2> <p><strong>The minimum supported Go version is now 1.25.</strong> golang.org/x/net v0.55.0 requires go 1.25.0, which raises this module's <code>go</code> directive with it. If you're stuck on Go 1.24 or older, stay on v1.6.1.</p> <h2>Fixed</h2> <ul> <li><strong>reassembly</strong>: <code>closeHalfConnection</code> now returns every buffered page to the page cache instead of only the first one. <code>pageCache.replace</code> nils <code>p.next</code> before pooling, so the old loop terminated after one iteration. The leaked pages permanently inflated the <code>pc.used</code> counter checked against <code>MaxBufferedPagesTotal</code> — on long-running captures with that limit set, the assembler would eventually treat the buffer as full for every connection and force-flush out-of-order data instead of reassembling it. Triggered by a FIN/RST arriving while out-of-order segments are buffered beyond it. (<a href="https://redirect.github.com/gopacket/gopacket/issues/161">#161</a>, <a href="https://redirect.github.com/google/gopacket/issues/856">google/gopacket#856</a>)</li> <li><strong>layers</strong>: IPv4 <code>SerializeTo</code> rejects option lengths below 2 instead of producing a malformed header. (<a href="https://redirect.github.com/gopacket/gopacket/issues/159">#159</a>)</li> </ul> <h2>Dependencies</h2> <ul> <li>golang.org/x/net 0.39.0 → 0.55.0, golang.org/x/sys 0.32.0 → 0.45.0 (<a href="https://redirect.github.com/gopacket/gopacket/issues/162">#162</a>)</li> </ul> <h2>CI</h2> <ul> <li>setup-go now reads the Go version from <code>go.mod</code> instead of a hardcoded constraint, and tests run under sudo use the setup-go toolchain — sudo's <code>secure_path</code> had been silently resolving <code>go</code> to the runner's system installation. (<a href="https://redirect.github.com/gopacket/gopacket/issues/162">#162</a>)</li> <li>actions/checkout bumped from 6 to 7. (<a href="https://redirect.github.com/gopacket/gopacket/issues/160">#160</a>)</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/gopacket/gopacket/compare/v1.6.1...v1.7.0">https://github.com/gopacket/gopacket/compare/v1.6.1...v1.7.0</a></p> <h2>v1.6.1</h2> <p><strong>Full Changelog</strong>: <a href="https://github.com/gopacket/gopacket/compare/v1.6.0...v1.6.1">https://github.com/gopacket/gopacket/compare/v1.6.0...v1.6.1</a></p> <h2>v1.6.0</h2> <h2>What's Changed</h2> <ul> <li>DNS parsing: handle naming authority pointer RFC3403 by <a href="https://github.com/dreadl0ck"><code>@​dreadl0ck</code></a> in <a href="https://redirect.github.com/gopacket/gopacket/pull/141">gopacket/gopacket#141</a></li> <li>Diameter protocol parsing support by <a href="https://github.com/dreadl0ck"><code>@​dreadl0ck</code></a> in <a href="https://redirect.github.com/gopacket/gopacket/pull/140">gopacket/gopacket#140</a></li> <li>Bump actions/checkout from 5 to 6 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/gopacket/gopacket/pull/144">gopacket/gopacket#144</a></li> <li>Add MPTCP option length check by <a href="https://github.com/A14m0"><code>@​A14m0</code></a> in <a href="https://redirect.github.com/gopacket/gopacket/pull/145">gopacket/gopacket#145</a></li> <li>Industrial Protocols Round 2: Modbus, EN/IP, CIP by <a href="https://github.com/dreadl0ck"><code>@​dreadl0ck</code></a> in <a href="https://redirect.github.com/gopacket/gopacket/pull/142">gopacket/gopacket#142</a></li> <li>fix(geneve): clear Options slice to prevent indefinite growth on reuse by <a href="https://github.com/deeproot-cloud"><code>@​deeproot-cloud</code></a> in <a href="https://redirect.github.com/gopacket/gopacket/pull/146">gopacket/gopacket#146</a></li> <li>Differentiate between expected and unexpected EOFs in NgReader by <a href="https://github.com/ericpauley"><code>@​ericpauley</code></a> in <a href="https://redirect.github.com/gopacket/gopacket/pull/150">gopacket/gopacket#150</a></li> <li>fix(lcm): add bounds check around fingerprint by <a href="https://github.com/Edholm"><code>@​Edholm</code></a> in <a href="https://redirect.github.com/gopacket/gopacket/pull/152">gopacket/gopacket#152</a></li> <li>ip6defrag: implements an IPv6 defragmenter by <a href="https://github.com/txthinking"><code>@​txthinking</code></a> in <a href="https://redirect.github.com/gopacket/gopacket/pull/151">gopacket/gopacket#151</a></li> <li>feat: apple pktapv1 support by <a href="https://github.com/ruokeqx1"><code>@​ruokeqx1</code></a> in <a href="https://redirect.github.com/gopacket/gopacket/pull/153">gopacket/gopacket#153</a></li> <li>gre: add bounds checking by <a href="https://github.com/mattypiper"><code>@​mattypiper</code></a> in <a href="https://redirect.github.com/gopacket/gopacket/pull/154">gopacket/gopacket#154</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/A14m0"><code>@​A14m0</code></a> made their first contribution in <a href="https://redirect.github.com/gopacket/gopacket/pull/145">gopacket/gopacket#145</a></li> <li><a href="https://github.com/deeproot-cloud"><code>@​deeproot-cloud</code></a> made their first contribution in <a href="https://redirect.github.com/gopacket/gopacket/pull/146">gopacket/gopacket#146</a></li> <li><a href="https://github.com/ericpauley"><code>@​ericpauley</code></a> made their first contribution in <a href="https://redirect.github.com/gopacket/gopacket/pull/150">gopacket/gopacket#150</a></li> <li><a href="https://github.com/Edholm"><code>@​Edholm</code></a> made their first contribution in <a href="https://redirect.github.com/gopacket/gopacket/pull/152">gopacket/gopacket#152</a></li> <li><a href="https://github.com/txthinking"><code>@​txthinking</code></a> made their first contribution in <a href="https://redirect.github.com/gopacket/gopacket/pull/151">gopacket/gopacket#151</a></li> <li><a href="https://github.com/ruokeqx1"><code>@​ruokeqx1</code></a> made their first contribution in <a href="https://redirect.github.com/gopacket/gopacket/pull/153">gopacket/gopacket#153</a></li> <li><a href="https://github.com/mattypiper"><code>@​mattypiper</code></a> made their first contribution in <a href="https://redirect.github.com/gopacket/gopacket/pull/154">gopacket/gopacket#154</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/gopacket/gopacket/compare/v1.5.0...v1.6.0">https://github.com/gopacket/gopacket/compare/v1.5.0...v1.6.0</a></p> <h2>v1.5.0</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/gopacket/gopacket/commit/d33818550d69d4ae2bb340b6e26cd67af4f46dbd"><code>d338185</code></a> build(deps): bump golang.org/x/net from 0.39.0 to 0.55.0 (<a href="https://redirect.github.com/gopacket/gopacket/issues/162">#162</a>)</li> <li><a href="https://github.com/gopacket/gopacket/commit/067005edec269db94dde7c17f9ebf07fc276fbb2"><code>067005e</code></a> Fix reassembly closeHalfConnections list traversal (<a href="https://redirect.github.com/gopacket/gopacket/issues/161">#161</a>)</li> <li><a href="https://github.com/gopacket/gopacket/commit/4ff01f2ac30bc051f59e31620407fe3659cb4671"><code>4ff01f2</code></a> fix(ip4): reject option length below 2 in SerializeTo (<a href="https://redirect.github.com/gopacket/gopacket/issues/159">#159</a>)</li> <li><a href="https://github.com/gopacket/gopacket/commit/5d6a732dfc0f039c840863476548593eed80f189"><code>5d6a732</code></a> build(deps): bump actions/checkout from 6 to 7 (<a href="https://redirect.github.com/gopacket/gopacket/issues/160">#160</a>)</li> <li><a href="https://github.com/gopacket/gopacket/commit/76119086f5936aacd7088bdf97d565501bb6c4cc"><code>7611908</code></a> Merge commit from fork</li> <li><a href="https://github.com/gopacket/gopacket/commit/145859d0eaee1a6f5925ffb93851c976449c3311"><code>145859d</code></a> Merge commit from fork</li> <li><a href="https://github.com/gopacket/gopacket/commit/95d1ae3e197eee3a25d24abb7b079a60b578854d"><code>95d1ae3</code></a> gre: add bounds checking (<a href="https://redirect.github.com/gopacket/gopacket/issues/154">#154</a>)</li> <li><a href="https://github.com/gopacket/gopacket/commit/7d7d99886603711d5c1c718372724d23c1bfde32"><code>7d7d998</code></a> feat: apple pktapv1 support (<a href="https://redirect.github.com/gopacket/gopacket/issues/153">#153</a>)</li> <li><a href="https://github.com/gopacket/gopacket/commit/600bed85dd6ee4667fc39a3d397627977ae11ba4"><code>600bed8</code></a> ip6defrag: implements an IPv6 defragmenter (<a href="https://redirect.github.com/gopacket/gopacket/issues/151">#151</a>)</li> <li><a href="https://github.com/gopacket/gopacket/commit/f64f2a0b69402ed9ca7c6aad97b8391efa5ea790"><code>f64f2a0</code></a> fix(lcm): add bounds check around fingerprint (<a href="https://redirect.github.com/gopacket/gopacket/issues/152">#152</a>)</li> <li>Additional commits viewable in <a href="https://github.com/gopacket/gopacket/compare/v1.4.0...v1.7.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/gopacket/gopacket&package-manager=go_modules&previous-version=1.4.0&new-version=1.7.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
saavagebueno added the pull-request label 2026-08-05 08:10:04 -04:00
Sign in to join this conversation.
No Label pull-request
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: DYNR/netbird#30091