Skip to content

chore(deps): bump the golang-x group across 1 directory with 4 updates - #1990

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/golang-x-56020c8187
Open

chore(deps): bump the golang-x group across 1 directory with 4 updates#1990
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/golang-x-56020c8187

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 20, 2026

Copy link
Copy Markdown
Contributor

Bumps the golang-x group with 3 updates in the / directory: golang.org/x/crypto, golang.org/x/net and golang.org/x/tools.

Updates golang.org/x/crypto from 0.54.0 to 0.55.0

Commits
  • f44d03d go.mod: update golang.org/x dependencies
  • 5ed4944 crypto/internal/poly1305: provide optimised assembly for riscv64
  • b07833c ssh: return window credit for discarded extended data
  • d701c51 acme: fix nil pointer dereference in pebble test error reporting
  • 999d053 ssh: fix parsing of GSSAPI payloads offering multiple mechanisms
  • 90f76b8 ssh: reject certificate signature keys before recursing
  • b53964a ssh: permit empty but non-nil HostKeyAlgorithms, KeyExchanges, Ciphers, MACs
  • 626e40f ssh: drain stderr on forwarded TCP and Unix channels
  • 31914c6 x509roots/fallback: update bundle
  • f2135b8 all: clean up minor issues found by staticcheck
  • Additional commits viewable in compare view

Updates golang.org/x/net from 0.57.0 to 0.58.0

Commits
  • acc78e0 go.mod: update golang.org/x dependencies
  • 90d10f0 internal/http3: delete invalid Content-Length if declared in server handler
  • 08abf4d internal/http3: infer headers when Content-Encoding is set but is empty
  • 8d10596 http2: avoid deadlocks in wrapped ClientConn state callback
  • 99c3b0a http2/hpack: build the table lookup maps lazily, only for encoders
  • 5a920b1 http3: rework registration to allow using a fake network
  • 7fd2842 quic: return an error from Accept after PacketConn reader exits
  • 825111d quic: avoid busy-loop when keep-alive is blocked by congestion control
  • a02ddfa http/httpproxy: prioritize lowercase proxy environment variables
  • 574e5eb quic: halt conn goroutines on close when listener exits early
  • Additional commits viewable in compare view

Updates golang.org/x/text from 0.40.0 to 0.41.0

Commits
  • acdba66 go.mod: update golang.org/x dependencies
  • 02aa981 secure/precis: fix short destination buffer handling in Nickname profile
  • See full diff in compare view

Updates golang.org/x/tools from 0.48.0 to 0.49.0

Commits
  • 18332fe go.mod: update golang.org/x dependencies
  • a5c4651 gopls/internal/protocol/command: fix struct field name in comment
  • 7d08a06 present, cmd/present, cmd/present2md: document lack of security hardening
  • e8a4348 refactor/satisfy: fix "the the" typo
  • 54624f9 internal/typesinternal: suppress jsonv2 warning
  • c117dde gopls/internal/golang: normalize instantiated fields before rename
  • b5b860c gopls/internal/mcp: report one-based reference line numbers
  • bf54bcd gopls/internal/golang/completion: avoid SEGV from double deslicing
  • 4b32d66 refactor/satisfy/find.go: fix panic on type errors
  • e6da7e4 gopls/internal/protocol/semtok: instructions for modifier/type changes
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 20, 2026
@dependabot
dependabot Bot requested review from a team as code owners August 20, 2026 03:23
@dependabot
dependabot Bot requested a review from crozzy August 20, 2026 03:23
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 20, 2026
@dependabot dependabot Bot changed the title chore(deps): bump the golang-x group with 4 updates chore(deps): bump the golang-x group across 1 directory with 4 updates Aug 20, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/golang-x-56020c8187 branch 2 times, most recently from 6c98161 to a4321bc Compare August 20, 2026 16:00
@crozzy

crozzy commented Aug 21, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

Bumps the golang-x group with 3 updates in the / directory: [golang.org/x/crypto](https://github.com/golang/crypto), [golang.org/x/net](https://github.com/golang/net) and [golang.org/x/tools](https://github.com/golang/tools).


Updates `golang.org/x/crypto` from 0.54.0 to 0.55.0
- [Commits](golang/crypto@v0.54.0...v0.55.0)

Updates `golang.org/x/net` from 0.57.0 to 0.58.0
- [Commits](golang/net@v0.57.0...v0.58.0)

Updates `golang.org/x/text` from 0.40.0 to 0.41.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.40.0...v0.41.0)

Updates `golang.org/x/tools` from 0.48.0 to 0.49.0
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](golang/tools@v0.48.0...v0.49.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.55.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang-x
- dependency-name: golang.org/x/net
  dependency-version: 0.58.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang-x
- dependency-name: golang.org/x/text
  dependency-version: 0.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang-x
- dependency-name: golang.org/x/tools
  dependency-version: 0.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang-x
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/golang-x-56020c8187 branch from a4321bc to b34f7fb Compare August 21, 2026 15:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Development

Successfully merging this pull request may close these issues.

1 participant