Skip to content

build(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0#447

Merged
zliang-akamai merged 1 commit into
devfrom
dependabot/go_modules/golang.org/x/crypto-0.53.0
Jul 14, 2026
Merged

build(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0#447
zliang-akamai merged 1 commit into
devfrom
dependabot/go_modules/golang.org/x/crypto-0.53.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 9, 2026

Copy link
Copy Markdown
Contributor

Bumps golang.org/x/crypto from 0.53.0 to 0.54.0.

Commits
  • cdce021 go.mod: update golang.org/x dependencies
  • d9474cc openpgp: make the deprecation message more explicit
  • 7626c50 ssh: verify declared key type matches decoded key in authorized_keys
  • 0471e79 ssh/agent: enforce strict limits on DSA key parameters
  • 6435c37 ssh: sanitize client disconnect messages
  • 7d695da ssh/agent: drain channel stderr in agent forwarders
  • 5b7f841 acme/autocert: fix data race in Manager.createCert
  • 0b316e7 argon2: update RFC 9106 parameter recommendations
  • 55aec0a x509roots/fallback: update bundle
  • 5f2de1a internal: remove wycheproof tests
  • See full diff in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies dependency updates usually from dependabot go labels Jun 9, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner June 9, 2026 06:32
@dependabot dependabot Bot added the dependencies dependency updates usually from dependabot label Jun 9, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner June 9, 2026 06:32
@dependabot dependabot Bot added the go label Jun 9, 2026
@dependabot
dependabot Bot requested review from mawilk90 and zliang-akamai and removed request for a team June 9, 2026 06:32
@dependabot @github

dependabot Bot commented on behalf of github Jul 9, 2026

Copy link
Copy Markdown
Contributor Author

A newer version of golang.org/x/crypto exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.

@zliang-akamai

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Jul 14, 2026

Copy link
Copy Markdown
Contributor Author

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@zliang-akamai

Copy link
Copy Markdown
Member

@dependabot recreate

@dependabot dependabot Bot changed the title build(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 build(deps): bump golang.org/x/crypto from 0.52.0 to 0.54.0 Jul 14, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/golang.org/x/crypto-0.53.0 branch from a5facaa to 6e1905c Compare July 14, 2026 03:19
@zliang-akamai

Copy link
Copy Markdown
Member

@dependabot recreate

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.53.0 to 0.54.0.
- [Commits](golang/crypto@v0.53.0...v0.54.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.53.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): bump golang.org/x/crypto from 0.52.0 to 0.54.0 build(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 Jul 14, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/golang.org/x/crypto-0.53.0 branch from 6e1905c to c5d7295 Compare July 14, 2026 03:23
@zliang-akamai
zliang-akamai merged commit 963d0b7 into dev Jul 14, 2026
12 checks passed
@zliang-akamai
zliang-akamai deleted the dependabot/go_modules/golang.org/x/crypto-0.53.0 branch July 14, 2026 03:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies dependency updates usually from dependabot

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants