Skip to content

build(deps): bump golang.org/x/crypto from 0.28.0 to 0.52.0 in /lambda/health-check/coap/client in the go_modules group across 1 directory - #1104

Open
dependabot[bot] wants to merge 1 commit into
sagafrom
dependabot/go_modules/lambda/health-check/coap/client/go_modules-5a9c29dde4
Open

build(deps): bump golang.org/x/crypto from 0.28.0 to 0.52.0 in /lambda/health-check/coap/client in the go_modules group across 1 directory#1104
dependabot[bot] wants to merge 1 commit into
sagafrom
dependabot/go_modules/lambda/health-check/coap/client/go_modules-5a9c29dde4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Dec 12, 2024

Copy link
Copy Markdown

Bumps the go_modules group with 1 update in the /lambda/health-check/coap/client directory: golang.org/x/crypto.

Updates golang.org/x/crypto from 0.28.0 to 0.52.0

Commits
  • a1c0d99 go.mod: update golang.org/x dependencies
  • 3c7c869 ssh: fix deadlock on unexpected channel responses
  • 533fb3f ssh: fix source-address critical option bypass
  • abbc44d ssh: fix incorrect operator order
  • e052873 ssh: fix infinite loop on large channel writes due to integer overflow
  • b61cf85 ssh: enforce user presence verification for security keys
  • 9c2cd33 ssh: enforce strict limits on DSA key parameters
  • 8907318 ssh: reject RSA keys with excessively large moduli
  • ffd87b4 ssh: fix panic when authority callbacks are nil
  • 4e7a738 ssh: fix deadlock on unexpected global responses
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies go Pull requests that update Go code labels Dec 12, 2024
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/lambda/health-check/coap/client/go_modules-5a9c29dde4 branch from 9d4bae4 to 3ac4fc7 Compare December 28, 2024 23:42
@coderbyheart

Copy link
Copy Markdown
Member

@dependabot rebase

Bumps the go_modules group with 1 update in the /lambda/health-check/coap/client directory: [golang.org/x/crypto](https://github.com/golang/crypto).


Updates `golang.org/x/crypto` from 0.28.0 to 0.52.0
- [Commits](golang/crypto@v0.28.0...v0.52.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.31.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump golang.org/x/crypto from 0.28.0 to 0.31.0 in /lambda/health-check/coap/client in the go_modules group across 1 directory build(deps): bump golang.org/x/crypto from 0.28.0 to 0.52.0 in /lambda/health-check/coap/client in the go_modules group across 1 directory Aug 17, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/lambda/health-check/coap/client/go_modules-5a9c29dde4 branch from 3ac4fc7 to 51bc7e3 Compare August 17, 2026 18:37
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addedgolang/​github.com/​pion/​dtls/​v2@​v2.2.8-0.20240501061905-2c36d63320a07199100100100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant