Update golang.org/x/crypto and github.com/golang-jwt/jwt

[Twsouza]

What is the feature/update/fix?

This release includes security patches for several vulnerabilities in dependencies used by the Convox v2 rack. These updates address critical security issues in the following packages:

1. golang-jwt/jwt/v4 - Fixed two vulnerabilities:

   • GO-2024-3250: Denial of service vulnerability
   • GO-2025-3553 (CVE-2025-30204): Excessive memory allocation during header parsing that could lead to denial of service attacks

2. golang.org/x/crypto - Fixed vulnerability:

   • GO-2025-3487 (CVE-2025-22869): SSH servers implementing file transfer protocols were vulnerable to denial of service attacks from clients that complete key exchange slowly or not at all

These security updates ensure your Convox rack is protected against potential denial of service attacks and other exploits that could affect system stability and security.

---

How to use it?

This security update is automatically applied when you update your rack to the latest version. No additional configuration is required to benefit from these security fixes.

To apply the update:

$ convox rack update

After updating, verify your rack is running the latest version:

$ convox rack

---

Does it have a breaking change?

No, there are no breaking changes introduced with these security fixes. All functionality remains the same while improving the security posture of your Convox rack.

---

Requirements

To receive these security fixes, you must update to rack version 20250513194500 or newer.

• Check your rack's version with convox rack
• Update your rack with convox rack update

We strongly recommend updating at your earliest convenience to ensure your environment is protected against these known vulnerabilities.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 35.34%. Comparing base (cb21bd7) to head (10004dc).
Report is 1 commits behind head on master.

Additional details and impacted files

@@           Coverage Diff           @@
##           master    #3760   +/-   ##
=======================================
  Coverage   35.34%   35.34%           
=======================================
  Files         208      208           
  Lines       20958    20958           
=======================================
  Hits         7407     7407           
  Misses      12165    12165           
  Partials     1386     1386           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.