Skip to content

rebase: bump the golang-dependencies group across 1 directory with 2 updates - #6475

Open
dependabot[bot] wants to merge 1 commit into
develfrom
dependabot/go_modules/golang-dependencies-7f59598ec7
Open

rebase: bump the golang-dependencies group across 1 directory with 2 updates#6475
dependabot[bot] wants to merge 1 commit into
develfrom
dependabot/go_modules/golang-dependencies-7f59598ec7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 17, 2026

Copy link
Copy Markdown
Contributor

Bumps the golang-dependencies group with 2 updates in the / directory: golang.org/x/crypto and golang.org/x/net.

Updates golang.org/x/crypto from 0.54.0 to 0.55.0

Commits
  • f44d03d go.mod: update golang.org/x dependencies
  • 5ed4944 crypto/internal/poly1305: provide optimised assembly for riscv64
  • b07833c ssh: return window credit for discarded extended data
  • d701c51 acme: fix nil pointer dereference in pebble test error reporting
  • 999d053 ssh: fix parsing of GSSAPI payloads offering multiple mechanisms
  • 90f76b8 ssh: reject certificate signature keys before recursing
  • b53964a ssh: permit empty but non-nil HostKeyAlgorithms, KeyExchanges, Ciphers, MACs
  • 626e40f ssh: drain stderr on forwarded TCP and Unix channels
  • 31914c6 x509roots/fallback: update bundle
  • f2135b8 all: clean up minor issues found by staticcheck
  • Additional commits viewable in compare view

Updates golang.org/x/net from 0.57.0 to 0.58.0

Commits
  • acc78e0 go.mod: update golang.org/x dependencies
  • 90d10f0 internal/http3: delete invalid Content-Length if declared in server handler
  • 08abf4d internal/http3: infer headers when Content-Encoding is set but is empty
  • 8d10596 http2: avoid deadlocks in wrapped ClientConn state callback
  • 99c3b0a http2/hpack: build the table lookup maps lazily, only for encoders
  • 5a920b1 http3: rework registration to allow using a fake network
  • 7fd2842 quic: return an error from Accept after PacketConn reader exits
  • 825111d quic: avoid busy-loop when keep-alive is blocked by congestion control
  • a02ddfa http/httpproxy: prioritize lowercase proxy environment variables
  • 574e5eb quic: halt conn goroutines on close when listener exits early
  • Additional commits viewable in compare view

@dependabot dependabot Bot added the rebase update the version of an external component label Aug 17, 2026
@dependabot
dependabot Bot requested review from a team as code owners August 17, 2026 20:53
@dependabot dependabot Bot added the rebase update the version of an external component label Aug 17, 2026
nixpanic
nixpanic previously approved these changes Aug 18, 2026
…updates

Bumps the golang-dependencies group with 2 updates in the / directory: [golang.org/x/crypto](https://github.com/golang/crypto) and [golang.org/x/net](https://github.com/golang/net).


Updates `golang.org/x/crypto` from 0.54.0 to 0.55.0
- [Commits](golang/crypto@v0.54.0...v0.55.0)

Updates `golang.org/x/net` from 0.57.0 to 0.58.0
- [Commits](golang/net@v0.57.0...v0.58.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.55.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang-dependencies
- dependency-name: golang.org/x/net
  dependency-version: 0.58.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title rebase: bump the golang-dependencies group with 2 updates rebase: bump the golang-dependencies group across 1 directory with 2 updates Aug 24, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/golang-dependencies-7f59598ec7 branch from be92543 to dc98023 Compare August 24, 2026 20:52
@mergify
mergify Bot dismissed nixpanic’s stale review August 24, 2026 20:54

Pull request has been modified.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

rebase update the version of an external component

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant