Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Apr 24, 2025

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
golang.org/x/crypto v0.31.0 -> v0.35.0 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2025-22869

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.


Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the type: dependencies This involves updating, adding or removing a dependency label Apr 24, 2025
@renovate
Copy link
Contributor Author

renovate bot commented Apr 24, 2025

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.21 -> 1.23.0

@renovate renovate bot changed the title chore(deps): update module golang.org/x/crypto to v0.35.0 [SECURITY] chore(deps): update module golang.org/x/crypto to v0.35.0 [SECURITY] - autoclosed Jun 25, 2025
@renovate renovate bot closed this Jun 25, 2025
@renovate renovate bot deleted the renovate/go-golang.org-x-crypto-vulnerability branch June 25, 2025 21:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

type: dependencies This involves updating, adding or removing a dependency

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants