Skip to content

Comments

Update golang.org/x/crypto to v0.46.0#393

Merged
the-mann merged 3 commits intoaws-cwa-devfrom
update-crypto-library
Dec 11, 2025
Merged

Update golang.org/x/crypto to v0.46.0#393
the-mann merged 3 commits intoaws-cwa-devfrom
update-crypto-library

Conversation

@the-mann
Copy link

@the-mann the-mann commented Dec 10, 2025

Description

Updating golang.org/x/crypto to v0.46.0

find . -name "go.mod" -exec grep -l "golang.org/x/crypto" {} \; | xargs -I {} dirname {} | xargs -I {} sh -c 'cd {} && go get -u golang.org/x/crypto@latest && go mod tidy'

note: govulncheck will fail because we use an old version of go in this repo, but this does not apply when building internally. go version will be bumped when we merge from upstream

Copy link

@okankoAMZ okankoAMZ left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can you add a note in the desc about this:

This scan found no other vulnerabilities in packages you import or modules you
require.
Use '-show verbose' for more details.
make[2]: *** [../../Makefile.Common:236: govulncheck] Error 3
make[1]: *** [Makefile:231: connector/datadogconnector] Error 2
make[1]: Leaving directory '/home/runner/work/opentelemetry-collector-contrib/opentelemetry-collector-contrib'
make: *** [Makefile:194: gogovulncheck] Error 2

It is a bit confusing we are bumping the crypto library but vulcheck is still failing

@the-mann the-mann merged commit 5faee86 into aws-cwa-dev Dec 11, 2025
343 of 402 checks passed
@the-mann the-mann deleted the update-crypto-library branch December 11, 2025 17:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants