Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

bot: Bump golang.org/x/crypto from 0.11.0 to 0.12.0 #1760

Closed

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 7, 2023

Bumps golang.org/x/crypto from 0.11.0 to 0.12.0.

Commits
  • b4ddeed go.mod: update golang.org/x dependencies
  • edc325d ssh: fix call to Fatalf from a non-test goroutine
  • eab9315 ssh: add diffie-hellman-group16-sha512 kex
  • ddfa821 ssh: ignore invalid MACs and KEXs just like we do for ciphers
  • d08e19b x509roots/fallback: update bundle
  • 12e1fcd internal/wycheproof: skip all tests in short test mode
  • 3f8f064 ssh: prefer sha256 based RSA key algorithms
  • 5df3b59 ssh: disable client agent tests on Windows
  • 2e82bdd fix TestValidTerminalMode: missing output from echo SHELL $SHELL
  • 64e0e99 ssh: fix RSA certificate and public key authentication with older clients
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.11.0 to 0.12.0.
- [Commits](golang/crypto@v0.11.0...v0.12.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Related to dependencies label Aug 7, 2023
@codecov
Copy link

codecov bot commented Aug 7, 2023

Codecov Report

Patch coverage has no change and project coverage change: +0.06% 🎉

Comparison is base (9d75c45) 75.58% compared to head (81d8833) 75.63%.

Impacted file tree graph

@@             Coverage Diff             @@
##           develop    #1760      +/-   ##
===========================================
+ Coverage    75.58%   75.63%   +0.06%     
===========================================
  Files          209      209              
  Lines        21900    21900              
===========================================
+ Hits         16551    16564      +13     
+ Misses        4196     4188       -8     
+ Partials      1153     1148       -5     
Flag Coverage Δ
all-tests 75.63% <ø> (+0.06%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

see 7 files with indirect coverage changes


Continue to review full report in Codecov by Sentry.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 9d75c45...81d8833. Read the comment docs.

@github-actions github-actions bot mentioned this pull request Aug 7, 2023
fredcarle pushed a commit that referenced this pull request Aug 7, 2023
✅ This PR was created by the Combine PRs action by combining the
following PRs:
#1760 bot: Bump golang.org/x/crypto from 0.11.0 to 0.12.0
#1755 bot: Bump vite from 4.4.8 to 4.4.9 in /playground
#1754 bot: Bump @typescript-eslint/parser from 5.62.0 to 6.2.1 in
/playground
#1753 bot: Bump react-hook-form from 7.45.2 to 7.45.4 in /playground

⚠️ The following PRs were left out due to merge conflicts:
#1759 bot: Bump go.uber.org/zap from 1.24.0 to 1.25.0
#1758 bot: Bump golang.org/x/net from 0.12.0 to 0.14.0

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Aug 7, 2023

Looks like golang.org/x/crypto is up-to-date now, so this is no longer needed.

@dependabot dependabot bot closed this Aug 7, 2023
@dependabot dependabot bot deleted the dependabot/go_modules/golang.org/x/crypto-0.12.0 branch August 7, 2023 19:30
shahzadlone pushed a commit to shahzadlone/defradb that referenced this pull request Feb 23, 2024
✅ This PR was created by the Combine PRs action by combining the
following PRs:
sourcenetwork#1760 bot: Bump golang.org/x/crypto from 0.11.0 to 0.12.0
sourcenetwork#1755 bot: Bump vite from 4.4.8 to 4.4.9 in /playground
sourcenetwork#1754 bot: Bump @typescript-eslint/parser from 5.62.0 to 6.2.1 in
/playground
sourcenetwork#1753 bot: Bump react-hook-form from 7.45.2 to 7.45.4 in /playground

⚠️ The following PRs were left out due to merge conflicts:
sourcenetwork#1759 bot: Bump go.uber.org/zap from 1.24.0 to 1.25.0
sourcenetwork#1758 bot: Bump golang.org/x/net from 0.12.0 to 0.14.0

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Related to dependencies
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants