From e099ca9b0eb7cdffced52e207dd1de0cabe2affb Mon Sep 17 00:00:00 2001
From: github-merge-queue
 <118344674+github-merge-queue@users.noreply.github.com>
Date: Wed, 28 Oct 2026 05:35:28 +0000
Subject: [PATCH 1/2] Bump dependencies with known vulnerabilities

---
 go.mod | 2 +-
 go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/go.mod b/go.mod
index 6a9cc4e00d8..6400cb56abe 100644
--- a/go.mod
+++ b/go.mod
@@ -37,7 +37,7 @@ require (
 	go.yaml.in/yaml/v3 v3.0.5 // MIT AND Apache-2.0
 	golang.org/x/crypto v0.58.0 // BSD-3-Clause
 	golang.org/x/mod v0.42.0 // BSD-3-Clause
-	golang.org/x/net v0.61.0 // BSD-3-Clause
+	golang.org/x/net v0.62.0 // BSD-3-Clause
 	golang.org/x/oauth2 v0.37.0 // BSD-3-Clause
 	golang.org/x/sync v0.24.0 // BSD-3-Clause
 	golang.org/x/sys v0.49.0 // BSD-3-Clause
diff --git a/go.sum b/go.sum
index 8df9f7473c1..1dc6ba564ff 100644
--- a/go.sum
+++ b/go.sum
@@ -206,8 +206,8 @@ golang.org/x/exp v0.0.0-20240222234643-814bf88cf225 h1:LfspQV/FYTatPTr/3HzIcmiUF
 golang.org/x/exp v0.0.0-20240222234643-814bf88cf225/go.mod h1:CxmFvTBINI24O/j8iY7H1xHzx2i4OsyguNBmN/uPtqc=
 golang.org/x/mod v0.42.0 h1:ICeL3t2L30ljSPHHxDnR4fqVcBt/zR2zJAb9juavmQg=
 golang.org/x/mod v0.42.0/go.mod h1:u5fzIrRInkL8MaO1cbRkUHT64v303YIT5KEqpNr7jRs=
-golang.org/x/net v0.61.0 h1:RR+6j/BTBCrggOLugxa+66R8FvoN6MHlzDlZIbN9YFw=
-golang.org/x/net v0.61.0/go.mod h1:WgDCOTH8iwtB66T4/GfI94AHo/hhdb7Hah9NDseQfiI=
+golang.org/x/net v0.62.0 h1:18ELalfM5+XNRwzM2nYqXsZQ9ByS1uhj2O/U7+5jqRY=
+golang.org/x/net v0.62.0/go.mod h1:WgDCOTH8iwtB66T4/GfI94AHo/hhdb7Hah9NDseQfiI=
 golang.org/x/oauth2 v0.37.0 h1:JUlcxA8oAtauLfiH8FX2/FkAWHAdi0QtGCGc+hofE98=
 golang.org/x/oauth2 v0.37.0/go.mod h1:IxwZNxUULJmpBFf9K/9NTMSIfZZuvuTy1gGxhigP/58=
 golang.org/x/sync v0.24.0 h1:iqiDrGoDgyuvAKrhLQthUEzU/R378N78gXbBjxed7oA=

From c47143a7d426716dda3176aad0daf3d4a357811a Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Wed, 28 Oct 2026 05:35:36 +0000
Subject: [PATCH 2/2] Add changelog fragment

---
 .nextchanges/dependency-updates/7213.md | 1 +
 1 file changed, 1 insertion(+)
 create mode 100644 .nextchanges/dependency-updates/7213.md

diff --git a/.nextchanges/dependency-updates/7213.md b/.nextchanges/dependency-updates/7213.md
new file mode 100644
index 00000000000..16a4c96c9e2
--- /dev/null
+++ b/.nextchanges/dependency-updates/7213.md
@@ -0,0 +1 @@
+* Bump dependencies with known vulnerabilities. ([#7213](https://github.com/databricks/cli/pull/7213))