Skip to content

fix(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 in /lib/ocrypto in the external group across 1 directory#3585

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/lib/ocrypto/external-e6feaebc15
Open

fix(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 in /lib/ocrypto in the external group across 1 directory#3585
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/lib/ocrypto/external-e6feaebc15

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 8, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the external group with 1 update in the /lib/ocrypto directory: golang.org/x/crypto.

Updates golang.org/x/crypto from 0.52.0 to 0.53.0

Commits
  • 45460e0 go.mod: update golang.org/x dependencies
  • d37c95e pkcs12: limit PBKDF iteration count to prevent CPU exhaustion
  • e2ffffe ssh: reject incomplete gssapi-with-mic configurations
  • 60e158a ssh/test: isolate CLI tests from user SSH config and agent
  • 1b77d23 ssh/knownhosts: reject lines with multiple or unknown markers
  • 3872a2b ssh/knownhosts: verify declared key type matches decoded key
  • 9f72ecc ssh/knownhosts: treat only ASCII space and tab as whitespace
  • 8f405a4 ssh: validate ECDSA curve matches expected algorithm
  • bb41b3d ssh: improve DH GEX group selection using PreferredBits
  • e04e721 ssh/agent: validate ed25519 private key length in Add
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jun 8, 2026
@dependabot dependabot Bot requested review from a team as code owners June 8, 2026 17:54
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jun 8, 2026
@github-actions

github-actions Bot commented Jun 8, 2026

Copy link
Copy Markdown
Contributor

X-Test Failure Report

✅ go@main-pull-3585
✅ java@main-pull-3585
✅ js@main-pull-3585
✅ java@main-v0.9.0
✅ js@main-v0.9.0
cukes-report
govulncheck-failure-2
opentdfplatformWAUMSZ.dockerbuild
govulncheck-failure-8
govulncheck-failure-3
govulncheck-failure-0
govulncheck-failure-1
govulncheck-failure-5

@dependabot dependabot Bot force-pushed the dependabot/go_modules/lib/ocrypto/external-e6feaebc15 branch from ca7d32e to 12c8239 Compare June 9, 2026 17:53
@github-actions

github-actions Bot commented Jun 9, 2026

Copy link
Copy Markdown
Contributor
Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 178.858096ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 93.801966ms

Benchmark Statistics

Name № Requests Avg Duration Min Duration Max Duration

Bulk Benchmark Results

Metric Value
Total Decrypts 100
Successful Decrypts 100
Failed Decrypts 0
Total Time 405.207084ms
Throughput 246.79 requests/second

TDF3 Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 43.994476417s
Average Latency 437.325726ms
Throughput 113.65 requests/second

@github-actions

github-actions Bot commented Jun 9, 2026

Copy link
Copy Markdown
Contributor

X-Test Failure Report

✅ go@main-pull-3585
✅ java@main-pull-3585
✅ js@main-pull-3585
cukes-report
govulncheck-failure-8
opentdfplatformD7PC0X.dockerbuild
govulncheck-failure-2
govulncheck-failure-5
govulncheck-failure-0
govulncheck-failure-3
govulncheck-failure-1

@dependabot dependabot Bot force-pushed the dependabot/go_modules/lib/ocrypto/external-e6feaebc15 branch from 12c8239 to ad27cae Compare June 10, 2026 17:54
@github-actions

github-actions Bot commented Jun 10, 2026

Copy link
Copy Markdown
Contributor
Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 330.787124ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 88.154512ms

Benchmark Statistics

Name № Requests Avg Duration Min Duration Max Duration

Bulk Benchmark Results

Metric Value
Total Decrypts 100
Successful Decrypts 100
Failed Decrypts 0
Total Time 467.226828ms
Throughput 214.03 requests/second

TDF3 Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 43.081666997s
Average Latency 428.697705ms
Throughput 116.06 requests/second

@github-actions

github-actions Bot commented Jun 10, 2026

Copy link
Copy Markdown
Contributor

X-Test Results

✅ go@main-pull-3585
✅ go@main-v0.9.0
✅ java@main-pull-3585
✅ java@main-v0.9.0
✅ js@main-pull-3585
✅ js@main-v0.9.0
cukes-report
opentdfplatformQPNQSD.dockerbuild
govulncheck-failure-3
govulncheck-failure-2
govulncheck-failure-1
govulncheck-failure-8
govulncheck-failure-5
govulncheck-failure-0

@dependabot
fix(deps): bump golang.org/x/crypto
68a7afa 
Bumps the external group with 1 update in the /lib/ocrypto directory: [golang.org/x/crypto](https://github.com/golang/crypto).


Updates `golang.org/x/crypto` from 0.52.0 to 0.53.0
- [Commits](golang/crypto@v0.52.0...v0.53.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.53.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/go_modules/lib/ocrypto/external-e6feaebc15 branch from ad27cae to 68a7afa Compare June 11, 2026 17:53
@github-actions

github-actions Bot commented Jun 11, 2026

Copy link
Copy Markdown
Contributor
Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 188.081368ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 95.963338ms

Benchmark Statistics

Name № Requests Avg Duration Min Duration Max Duration

Bulk Benchmark Results

Metric Value
Total Decrypts 100
Successful Decrypts 100
Failed Decrypts 0
Total Time 460.38744ms
Throughput 217.21 requests/second

TDF3 Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 47.526083152s
Average Latency 473.71334ms
Throughput 105.21 requests/second

@github-actions

github-actions Bot commented Jun 11, 2026

Copy link
Copy Markdown
Contributor

⚠️ Govulncheck found vulnerabilities ⚠️

The following modules have known vulnerabilities:

  • examples
  • otdfctl
  • sdk
  • service
  • lib/fixtures
  • tests-bdd

See the workflow run for details.

@github-actions

github-actions Bot commented Jun 11, 2026

Copy link
Copy Markdown
Contributor

X-Test Results

✅ go@main-pull-3585
✅ go@main-v0.9.0
✅ java@main-pull-3585
✅ java@main-v0.9.0
✅ js@main-pull-3585
✅ js@main-v0.9.0
cukes-report
govulncheck-failure-1
opentdfplatformZKLK3H.dockerbuild
govulncheck-failure-3
govulncheck-failure-8
govulncheck-failure-2
govulncheck-failure-5
govulncheck-failure-0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

comp:lib:ocrypto dependencies Pull requests that update a dependency file go Pull requests that update Go code size/s

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants