Skip to content

build(deps): bump golang.org/x/crypto from 0.55.0 to 0.57.0 - #38

Closed
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/go_modules/golang.org/x/crypto-0.57.0
Closed

dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/go_modules/golang.org/x/crypto-0.57.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 12, 2026 •

Copy link
Copy Markdown
Contributor

Bumps golang.org/x/crypto from 0.55.0 to 0.57.0.

Commits
  • 3f62bf1 go.mod: update golang.org/x dependencies
  • 86efde5 ssh: reject unexpected message types on established channels
  • a6cdac6 ssh: drop traffic on undecided channels
  • 39dc44e ssh: don't skip the source-address critical option in CheckCert
  • afebf4c x509roots/fallback/bundle: make subjectsEqual stricter on Go 1.27+
  • 89f4e9b x509roots/fallback: update bundle
  • 71488c4 ssh/knownhosts: compare only public key portions for revocation
  • 82adefa ssh: synchronize unexpected response test
  • c757c98 all: upgrade go directive to at least 1.26.0 [generated]
  • 593c81a ssh: correctly ignore pre-banner lines
  • Additional commits viewable in compare view

@dependabot @github

dependabot Bot commented on behalf of github Sep 12, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, go. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.55.0 to 0.57.0.
- [Commits](golang/crypto@v0.55.0...v0.57.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.57.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/golang.org/x/crypto-0.57.0 branch from f007def to e33cb1a Compare October 1, 2026 13:13
@TeoSlayer

Copy link
Copy Markdown
Contributor

Closing: golang.org/x/crypto 0.57.0 raises the go directive from 1.25.11 to 1.26.0 and the test job fails on the updated branch. This should come back with a planned move to a patched Go 1.26.

@TeoSlayer TeoSlayer closed this Oct 1, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 1, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/go_modules/golang.org/x/crypto-0.57.0 branch October 1, 2026 14:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant