Bump golang.org/x/crypto to v0.52.0

d1e24ae·

Soph·1w ago·2 files·+3 added/-3 removed

Closes 13 open Dependabot alerts (7 critical, 3 high, 3 medium), all in the x/crypto SSH implementation. The dependency is pulled in transitively via go-git and ProtonMail openpgp; go-git still requires v0.51.0 and has no newer release, so we pin the indirect dependency directly via MVS.

Co-Authored-By: Claude Opus 4.8 (1M context) noreply@anthropic.com

Sessions

01KX37KN6NXDTV10FKNCBPTP2YView transcript

Changes

2

• Mgo.mod+1/-1

• Mgo.sum+2/-2

24 unmodified lines

25
26
27
28
28
29
30
31

24 unmodified lines

github.com/pmezard/go-difflib v1.0.0 // indirect
    github.com/sergi/go-diff v1.4.0 // indirect
    github.com/spf13/pflag v1.0.9 // indirect
    golang.org/x/crypto v0.51.0 // indirect
    golang.org/x/crypto v0.52.0 // indirect
    golang.org/x/net v0.55.0 // indirect
    golang.org/x/sync v0.20.0 // indirect
    golang.org/x/sys v0.45.0 // indirect

Mgo.mod+1/-1

50 unmodified lines

51
52
53
54
55
54
55
56
57
58

50 unmodified lines

github.com/stretchr/testify v1.11.1 h1:7s2iGBzp5EwR7/aIZr8ao5+dra3wiQyKjjFuvgVKu7U=
github.com/stretchr/testify v1.11.1/go.mod h1:wZwfW3scLgRK+23gO65QZefKpKQRnfz6sD981Nm4B6U=
go.yaml.in/yaml/v3 v3.0.4/go.mod h1:DhzuOOF2ATzADvBadXxruRBLzYTpT36CKvDb3+aBEFg=
golang.org/x/crypto v0.51.0 h1:IBPXwPfKxY7cWQZ38ZCIRPI50YLeevDLlLnyC5wRGTI=
golang.org/x/crypto v0.51.0/go.mod h1:8AdwkbraGNABw2kOX6YFPs3WM22XqI4EXEd8g+x7Oc8=
golang.org/x/crypto v0.52.0 h1:RMs7fP2rXdep0CftQlK8Uf+kibLm7qkCcradZWYz988=
golang.org/x/crypto v0.52.0/go.mod h1:1QgfPxDqh0T2M/elOJtp9RvuR95kVjir0e6/BvEmGbc=
golang.org/x/net v0.55.0 h1:bcvxaJn3e1U6InsFWt1JUq1aSjnRxLzT2rtD2KfkDF8=
golang.org/x/net v0.55.0/go.mod h1:L5U2KuzuOe1lY7Z+aWVIKK6qEeJXnXV9yzGA+WCHJww=
golang.org/x/sync v0.20.0 h1:e0PTpb7pjO8GAtTs2dQ6jYa5BWYlMuX047Dco/pItO4=

Mgo.sum+2/-2