Skip to content

Bump golang.org/x/crypto from 0.31.0 to 0.45.0 - #96

Merged
openshift-merge-bot[bot] merged 1 commit into
masterfrom
dependabot/go_modules/golang.org/x/crypto-0.45.0
Apr 2, 2026
Merged

Bump golang.org/x/crypto from 0.31.0 to 0.45.0#96
openshift-merge-bot[bot] merged 1 commit into
masterfrom
dependabot/go_modules/golang.org/x/crypto-0.45.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 10, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps golang.org/x/crypto from 0.31.0 to 0.45.0.

Commits
  • 4e0068c go.mod: update golang.org/x dependencies
  • e79546e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs
  • f91f7a7 ssh/agent: prevent panic on malformed constraint
  • 2df4153 acme/autocert: let automatic renewal work with short lifetime certs
  • bcf6a84 acme: pass context to request
  • b4f2b62 ssh: fix error message on unsupported cipher
  • 79ec3a5 ssh: allow to bind to a hostname in remote forwarding
  • 122a78f go.mod: update golang.org/x dependencies
  • c0531f9 all: eliminate vet diagnostics
  • 0997000 all: fix some comments
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Mar 10, 2026
@openshift-ci
openshift-ci Bot requested review from andfasano and dtantsur March 10, 2026 13:59
@openshift-ci openshift-ci Bot added the needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. label Mar 10, 2026
@openshift-ci

openshift-ci Bot commented Mar 10, 2026

Copy link
Copy Markdown

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a openshift-metal3 member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@dtantsur

dtantsur commented Apr 1, 2026

Copy link
Copy Markdown
Member

/ok-to-test

I wonder if this project is salvageable..

@openshift-ci openshift-ci Bot added ok-to-test Indicates a non-member PR verified by an org member that is safe to test. and removed needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. labels Apr 1, 2026
@dtantsur

dtantsur commented Apr 2, 2026

Copy link
Copy Markdown
Member

/ok-to-test

https://github.com/dependabot rebase

@dependabot
Bump golang.org/x/crypto from 0.31.0 to 0.45.0
4bc0163 
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.31.0 to 0.45.0.
- [Commits](golang/crypto@v0.31.0...v0.45.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.45.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/golang.org/x/crypto-0.45.0 branch from 8c7e30d to 4bc0163 Compare April 2, 2026 17:04
@dtantsur

dtantsur commented Apr 2, 2026

Copy link
Copy Markdown
Member

/approve
/lgtm

@openshift-ci openshift-ci Bot added the lgtm Indicates that a PR is ready to be merged. label Apr 2, 2026
@openshift-ci

openshift-ci Bot commented Apr 2, 2026

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: dtantsur

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci Bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Apr 2, 2026
@openshift-merge-bot
openshift-merge-bot Bot merged commit 05291d4 into master Apr 2, 2026
7 checks passed
@dependabot
dependabot Bot deleted the dependabot/go_modules/golang.org/x/crypto-0.45.0 branch April 2, 2026 17:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@andfasano andfasano Awaiting requested review from andfasano
@dtantsur dtantsur Awaiting requested review from dtantsur

Assignees

@dtantsur dtantsur

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. dependencies Pull requests that update a dependency file go Pull requests that update go code lgtm Indicates that a PR is ready to be merged. ok-to-test Indicates a non-member PR verified by an org member that is safe to test.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@dtantsur