Skip to content

Bump golang.org/x/crypto from 0.49.0 to 0.52.0 - #5862

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/golang.org/x/crypto-0.52.0
Open

Bump golang.org/x/crypto from 0.49.0 to 0.52.0#5862
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/golang.org/x/crypto-0.52.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 8, 2026

Copy link
Copy Markdown
Contributor

Bumps golang.org/x/crypto from 0.49.0 to 0.52.0.

Commits
  • a1c0d99 go.mod: update golang.org/x dependencies
  • 3c7c869 ssh: fix deadlock on unexpected channel responses
  • 533fb3f ssh: fix source-address critical option bypass
  • abbc44d ssh: fix incorrect operator order
  • e052873 ssh: fix infinite loop on large channel writes due to integer overflow
  • b61cf85 ssh: enforce user presence verification for security keys
  • 9c2cd33 ssh: enforce strict limits on DSA key parameters
  • 8907318 ssh: reject RSA keys with excessively large moduli
  • ffd87b4 ssh: fix panic when authority callbacks are nil
  • 4e7a738 ssh: fix deadlock on unexpected global responses
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 8, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 8, 2026 04:38
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 8, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 8, 2026 04:38
@dependabot dependabot Bot added the go Pull requests that update go code label Jul 8, 2026
@dependabot
dependabot Bot requested review from renaudhartert-db and removed request for a team July 8, 2026 04:38
@dependabot
dependabot Bot temporarily deployed to test-trigger-is July 8, 2026 04:38 Inactive
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/golang.org/x/crypto-0.52.0 branch from 98719fd to d7f0e26 Compare July 15, 2026 11:22
@dependabot
dependabot Bot temporarily deployed to test-trigger-is July 15, 2026 11:22 Inactive
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/golang.org/x/crypto-0.52.0 branch from d7f0e26 to edda45e Compare July 16, 2026 04:54
@dependabot
dependabot Bot temporarily deployed to test-trigger-is July 16, 2026 04:55 Inactive
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/golang.org/x/crypto-0.52.0 branch from edda45e to b2274c3 Compare July 17, 2026 17:04
@dependabot
dependabot Bot temporarily deployed to test-trigger-is July 17, 2026 17:04 Inactive
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/golang.org/x/crypto-0.52.0 branch from b2274c3 to 868af7d Compare July 28, 2026 10:48
@dependabot
dependabot Bot temporarily deployed to test-trigger-is July 28, 2026 10:48 Inactive
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/golang.org/x/crypto-0.52.0 branch from 868af7d to 9dfed99 Compare July 28, 2026 12:33
@dependabot
dependabot Bot temporarily deployed to test-trigger-is July 28, 2026 12:33 Inactive
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/golang.org/x/crypto-0.52.0 branch from 9dfed99 to 205ffbc Compare July 30, 2026 04:59
@dependabot
dependabot Bot temporarily deployed to test-trigger-is July 30, 2026 04:59 Inactive
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.49.0 to 0.52.0.
- [Commits](golang/crypto@v0.49.0...v0.52.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.52.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/golang.org/x/crypto-0.52.0 branch from 205ffbc to d6edeeb Compare August 5, 2026 05:56
@dependabot
dependabot Bot temporarily deployed to test-trigger-is August 5, 2026 05:56 Inactive
@github-actions

github-actions Bot commented Aug 5, 2026

Copy link
Copy Markdown
Contributor

Unit tests

If this PR is from a fork, the tests check runs offline against a pre-warmed Go module cache because fork PRs cannot authenticate to the internal Go module proxy.

If this PR changes go.mod or go.sum, the tests check will fail until a maintainer warms the cache for it:

Actions -> Warm Go Cache -> Run workflow -> pr_number = 5862

Re-run the failed check once the cache warming completes.

Integration tests

Integration tests don't run automatically for external contributors; an authorized user can run them manually by following the instructions below:

Trigger:
go/deco-tests-run/terraform

Inputs:

  • PR number: 5862
  • Commit SHA: d6edeebff69baa0510055f89bcb14f9f76ecc1a1

Checks will be approved automatically on success.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants