From 8c73e69b04377b25d5900a90246de8b9562bc445 Mon Sep 17 00:00:00 2001
From: "chainloop-platform[bot]"
 <266818671+chainloop-platform[bot]@users.noreply.github.com>
Date: Wed, 29 Jul 2026 00:27:18 +0000
Subject: [PATCH] fix: upgrade extras/dagger golang.org/x/net to v0.56.0 for
 GO-2026-5942

---
 extras/dagger/go.mod | 2 +-
 extras/dagger/go.sum | 2 ++
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/extras/dagger/go.mod b/extras/dagger/go.mod
index 0fb88a34b..b6772c1f3 100644
--- a/extras/dagger/go.mod
+++ b/extras/dagger/go.mod
@@ -15,7 +15,7 @@ require (
 	go.opentelemetry.io/otel/metric v1.43.0 // indirect
 	go.opentelemetry.io/proto/otlp v1.10.0 // indirect
 	golang.org/x/net v0.56.0 // indirect
-	golang.org/x/sys v0.45.0 // indirect
+	golang.org/x/sys v0.46.0 // indirect
 	golang.org/x/text v0.39.0 // indirect
 	google.golang.org/genproto/googleapis/api v0.0.0-20260414002931-afd174a4e478 // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20260414002931-afd174a4e478 // indirect
diff --git a/extras/dagger/go.sum b/extras/dagger/go.sum
index f929a50bf..a17f52eda 100644
--- a/extras/dagger/go.sum
+++ b/extras/dagger/go.sum
@@ -87,6 +87,8 @@ golang.org/x/sync v0.21.0 h1:HLII4xRRTtCRkxYp4HNFF0Js/Og6q2i++KXbg0gHCwM=
 golang.org/x/sync v0.21.0/go.mod h1:9xrNwdLfx4jkKbNva9FpL6vEN7evnE43NNNJQ2LF3+0=
 golang.org/x/sys v0.45.0 h1:dO4czNzziLiiXplLQgBCEpCvXQ3dnkn0SdaZSYdQ+FY=
 golang.org/x/sys v0.45.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=
+golang.org/x/sys v0.46.0 h1:noSf2Fq6F8DBgS+LysIkx7rIExoNHJsxOAtPp4rthXw=
+golang.org/x/sys v0.46.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=
 golang.org/x/text v0.37.0 h1:Cqjiwd9eSg8e0QAkyCaQTNHFIIzWtidPahFWR83rTrc=
 golang.org/x/text v0.37.0/go.mod h1:a5sjxXGs9hsn/AJVwuElvCAo9v8QYLzvavO5z2PiM38=
 golang.org/x/text v0.39.0 h1:UbZz4pLOvn600D6Oh6GGEI6VAmndrEBLv8/6BEXzyus=