From e2e2d45961dd4b2b30172be1f0a49b911cee468f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 11 Dec 2024 10:41:25 +0000
Subject: [PATCH] =?UTF-8?q?=E2=AC=86=EF=B8=8F=20Bump=20golang.org/x/crypto?=
=?UTF-8?q?=20from=200.29.0=20to=200.30.0=20in=20/utils=20(#524)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from
0.29.0 to 0.30.0.
Commits
7042ebc
openpgp/clearsign: just use rand.Reader in tests
3e90321
go.mod: update golang.org/x dependencies
8c4e668
x509roots/fallback: update bundle
- See full diff in compare
view
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
You can trigger a rebase of this PR by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
---------
Signed-off-by: dependabot[bot]
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Monty Bot
Co-authored-by: Adrien CABARBAYE
---
changes/20241210181120.bugfix | 1 +
changes/20241210181124.bugfix | 1 +
changes/20241210181153.bugfix | 1 +
changes/20241210181159.bugfix | 1 +
changes/20241210181223.bugfix | 1 +
changes/20241210181227.bugfix | 1 +
changes/20241210181253.bugfix | 1 +
changes/20241210181256.bugfix | 1 +
utils/go.mod | 2 +-
utils/go.sum | 6 +++---
10 files changed, 12 insertions(+), 4 deletions(-)
create mode 100644 changes/20241210181120.bugfix
create mode 100644 changes/20241210181124.bugfix
create mode 100644 changes/20241210181153.bugfix
create mode 100644 changes/20241210181159.bugfix
create mode 100644 changes/20241210181223.bugfix
create mode 100644 changes/20241210181227.bugfix
create mode 100644 changes/20241210181253.bugfix
create mode 100644 changes/20241210181256.bugfix
diff --git a/changes/20241210181120.bugfix b/changes/20241210181120.bugfix
new file mode 100644
index 0000000000..4f1a03b0cc
--- /dev/null
+++ b/changes/20241210181120.bugfix
@@ -0,0 +1 @@
+Dependency upgrade: crypto-0.30.0
diff --git a/changes/20241210181124.bugfix b/changes/20241210181124.bugfix
new file mode 100644
index 0000000000..4f1a03b0cc
--- /dev/null
+++ b/changes/20241210181124.bugfix
@@ -0,0 +1 @@
+Dependency upgrade: crypto-0.30.0
diff --git a/changes/20241210181153.bugfix b/changes/20241210181153.bugfix
new file mode 100644
index 0000000000..4f1a03b0cc
--- /dev/null
+++ b/changes/20241210181153.bugfix
@@ -0,0 +1 @@
+Dependency upgrade: crypto-0.30.0
diff --git a/changes/20241210181159.bugfix b/changes/20241210181159.bugfix
new file mode 100644
index 0000000000..4f1a03b0cc
--- /dev/null
+++ b/changes/20241210181159.bugfix
@@ -0,0 +1 @@
+Dependency upgrade: crypto-0.30.0
diff --git a/changes/20241210181223.bugfix b/changes/20241210181223.bugfix
new file mode 100644
index 0000000000..4f1a03b0cc
--- /dev/null
+++ b/changes/20241210181223.bugfix
@@ -0,0 +1 @@
+Dependency upgrade: crypto-0.30.0
diff --git a/changes/20241210181227.bugfix b/changes/20241210181227.bugfix
new file mode 100644
index 0000000000..4f1a03b0cc
--- /dev/null
+++ b/changes/20241210181227.bugfix
@@ -0,0 +1 @@
+Dependency upgrade: crypto-0.30.0
diff --git a/changes/20241210181253.bugfix b/changes/20241210181253.bugfix
new file mode 100644
index 0000000000..4f1a03b0cc
--- /dev/null
+++ b/changes/20241210181253.bugfix
@@ -0,0 +1 @@
+Dependency upgrade: crypto-0.30.0
diff --git a/changes/20241210181256.bugfix b/changes/20241210181256.bugfix
new file mode 100644
index 0000000000..4f1a03b0cc
--- /dev/null
+++ b/changes/20241210181256.bugfix
@@ -0,0 +1 @@
+Dependency upgrade: crypto-0.30.0
diff --git a/utils/go.mod b/utils/go.mod
index 5dfb187433..03d43d0aee 100644
--- a/utils/go.mod
+++ b/utils/go.mod
@@ -42,7 +42,7 @@ require (
go.uber.org/atomic v1.11.0
go.uber.org/goleak v1.3.0
go.uber.org/zap v1.27.0
- golang.org/x/crypto v0.29.0
+ golang.org/x/crypto v0.30.0
golang.org/x/exp v0.0.0-20230905200255-921286631fa9
golang.org/x/mod v0.17.0
golang.org/x/net v0.31.0
diff --git a/utils/go.sum b/utils/go.sum
index 223c87ef4e..564d872b0d 100644
--- a/utils/go.sum
+++ b/utils/go.sum
@@ -256,8 +256,8 @@ golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5y
golang.org/x/crypto v0.0.0-20220622213112-05595931fe9d/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
golang.org/x/crypto v0.3.1-0.20221117191849-2c476679df9a/go.mod h1:hebNnKkNXi2UzZN1eVRvBB7co0a+JxK6XbPiWVs/3J4=
golang.org/x/crypto v0.7.0/go.mod h1:pYwdfH91IfpZVANVyUOhSIPZaFoJGxTFbZhFTx+dXZU=
-golang.org/x/crypto v0.29.0 h1:L5SG1JTTXupVV3n6sUqMTeWbjAyfPwoda2DLX8J8FrQ=
-golang.org/x/crypto v0.29.0/go.mod h1:+F4F4N5hv6v38hfeYwTdx20oUvLLc+QfrE9Ax9HtgRg=
+golang.org/x/crypto v0.30.0 h1:RwoQn3GkWiMkzlX562cLB7OxWvjH1L8xutO2WoJcRoY=
+golang.org/x/crypto v0.30.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk=
golang.org/x/exp v0.0.0-20230905200255-921286631fa9 h1:GoHiUyI/Tp2nVkLI2mCxVkOjsbSXD66ic0XW0js0R9g=
golang.org/x/exp v0.0.0-20230905200255-921286631fa9/go.mod h1:S2oDrQGGwySpoQPVqRShND87VCbxmc6bL1Yd2oYrm6k=
golang.org/x/mod v0.4.2/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
@@ -334,7 +334,7 @@ golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuX
golang.org/x/term v0.2.0/go.mod h1:TVmDHMZPmdnySmBfhjOoOdhjzdE1h4u1VwSiw2l1Nuc=
golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
golang.org/x/term v0.6.0/go.mod h1:m6U89DPEgQRMq3DNkDClhWw02AUbt2daBVO4cn4Hv9U=
-golang.org/x/term v0.26.0 h1:WEQa6V3Gja/BhNxg540hBip/kkaYtRg3cxg4oXSw4AU=
+golang.org/x/term v0.27.0 h1:WP60Sv1nlK1T6SupCHbXzSaN0b9wUmsPoRS9b61A23Q=
golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=