Skip to content

chore(deps): bump golang.org/x/crypto from 0.40.0 to 0.52.0 in /test/integration - #724

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/test/integration/golang.org/x/crypto-0.52.0
Open

chore(deps): bump golang.org/x/crypto from 0.40.0 to 0.52.0 in /test/integration#724
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/test/integration/golang.org/x/crypto-0.52.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 10, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps golang.org/x/crypto from 0.40.0 to 0.52.0.

Commits
  • a1c0d99 go.mod: update golang.org/x dependencies
  • 3c7c869 ssh: fix deadlock on unexpected channel responses
  • 533fb3f ssh: fix source-address critical option bypass
  • abbc44d ssh: fix incorrect operator order
  • e052873 ssh: fix infinite loop on large channel writes due to integer overflow
  • b61cf85 ssh: enforce user presence verification for security keys
  • 9c2cd33 ssh: enforce strict limits on DSA key parameters
  • 8907318 ssh: reject RSA keys with excessively large moduli
  • ffd87b4 ssh: fix panic when authority callbacks are nil
  • 4e7a738 ssh: fix deadlock on unexpected global responses
  • Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 10, 2026
@dependabot
dependabot Bot requested review from a team, apeabody, sleighton2022 and yliaog as code owners July 10, 2026 17:10
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 10, 2026
@dpebot

dpebot commented Jul 10, 2026

Copy link
Copy Markdown
Collaborator

/gcbrun

@amandakarina

amandakarina commented Aug 6, 2026

Copy link
Copy Markdown
Collaborator

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/go_modules/test/integration/golang.org/x/crypto-0.52.0 branch from f14b133 to 0f65e3f Compare August 6, 2026 12:19
@dpebot

dpebot commented Aug 6, 2026

Copy link
Copy Markdown
Collaborator

/gcbrun

@amandakarina

amandakarina commented Aug 6, 2026

Copy link
Copy Markdown
Collaborator

@dependabot recreate

@dependabot
dependabot Bot force-pushed the dependabot/go_modules/test/integration/golang.org/x/crypto-0.52.0 branch from 0f65e3f to a53d32f Compare August 7, 2026 00:15
@dpebot

dpebot commented Aug 7, 2026

Copy link
Copy Markdown
Collaborator

/gcbrun

@amandakarina
amandakarina force-pushed the dependabot/go_modules/test/integration/golang.org/x/crypto-0.52.0 branch from a53d32f to d9fb02b Compare August 31, 2026 11:52
@dpebot

dpebot commented Aug 31, 2026

Copy link
Copy Markdown
Collaborator

/gcbrun

@dependabot @amandakarina
chore(deps): bump golang.org/x/crypto in /test/integration
5040427 
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.40.0 to 0.52.0.
- [Commits](golang/crypto@v0.40.0...v0.52.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.52.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@amandakarina
amandakarina force-pushed the dependabot/go_modules/test/integration/golang.org/x/crypto-0.52.0 branch from d9fb02b to 5040427 Compare September 1, 2026 16:05
@dpebot

dpebot commented Sep 1, 2026

Copy link
Copy Markdown
Collaborator

/gcbrun

@apeabody apeabody mentioned this pull request Sep 1, 2026
Open
apeabody added a commit that referenced this pull request Sep 1, 2026
@apeabody
chore(deps): bump dependencies in test/integration
29374a4 
- Updates cft/developer-tools to 1.28 to support Go >= 1.25.0

Combines the following Dependabot PRs:
- #739: bump github.com/gorilla/websocket from 1.5.0 to 1.5.3
- #724: bump golang.org/x/crypto from 0.40.0 to 0.52.0 (supersedes #518)
- #718: bump golang.org/x/net from 0.42.0 to 0.55.0
- #696: bump github.com/jackc/pgx/v5 from 5.7.1 to 5.9.2
- #691: bump github.com/moby/spdystream from 0.5.0 to 0.5.1
- #675: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.69.0 to 1.97.3
- #674: bump github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream from 1.6.7 to 1.7.8
- #673: bump github.com/aws/aws-sdk-go-v2/service/lambda from 1.69.0 to 1.88.5
- #672: bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs from 1.44.0 to 1.65.0
amandakarina pushed a commit that referenced this pull request Sep 2, 2026
@apeabody @amandakarina
chore(deps): bump dependencies in test/integration
30567f5 
- Updates cft/developer-tools to 1.28 to support Go >= 1.25.0

Combines the following Dependabot PRs:
- #739: bump github.com/gorilla/websocket from 1.5.0 to 1.5.3
- #724: bump golang.org/x/crypto from 0.40.0 to 0.52.0 (supersedes #518)
- #718: bump golang.org/x/net from 0.42.0 to 0.55.0
- #696: bump github.com/jackc/pgx/v5 from 5.7.1 to 5.9.2
- #691: bump github.com/moby/spdystream from 0.5.0 to 0.5.1
- #675: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.69.0 to 1.97.3
- #674: bump github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream from 1.6.7 to 1.7.8
- #673: bump github.com/aws/aws-sdk-go-v2/service/lambda from 1.69.0 to 1.88.5
- #672: bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs from 1.44.0 to 1.65.0
amandakarina pushed a commit that referenced this pull request Sep 4, 2026
@apeabody @amandakarina
chore(deps): bump dependencies in test/integration
8374f1d 
- Updates cft/developer-tools to 1.28 to support Go >= 1.25.0

Combines the following Dependabot PRs:
- #739: bump github.com/gorilla/websocket from 1.5.0 to 1.5.3
- #724: bump golang.org/x/crypto from 0.40.0 to 0.52.0 (supersedes #518)
- #718: bump golang.org/x/net from 0.42.0 to 0.55.0
- #696: bump github.com/jackc/pgx/v5 from 5.7.1 to 5.9.2
- #691: bump github.com/moby/spdystream from 0.5.0 to 0.5.1
- #675: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.69.0 to 1.97.3
- #674: bump github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream from 1.6.7 to 1.7.8
- #673: bump github.com/aws/aws-sdk-go-v2/service/lambda from 1.69.0 to 1.88.5
- #672: bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs from 1.44.0 to 1.65.0
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@apeabody apeabody Awaiting requested review from apeabody apeabody is a code owner
@sleighton2022 sleighton2022 Awaiting requested review from sleighton2022 sleighton2022 is a code owner
@yliaog yliaog Awaiting requested review from yliaog yliaog is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@dpebot @amandakarina