crypto from 0.33.0 to 0.37.0 #564

New issue

Closed

opened 2026-03-04 00:26:36 +03:00 by kerem · 0 comments

kerem commented

2026-03-04 00:26:36 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/SignTools/SignTools/pull/561
Author: @dependabot[bot]
Created: 4/7/2025
Status: ❌ Closed

Base: master ← Head: dependabot/go_modules/golang.org/x/crypto-0.37.0

📝 Commits (1)

d6e97da fix(deps): bump golang.org/x/crypto from 0.33.0 to 0.37.0

📊 Changes

2 files changed (+10 additions, -11 deletions)

View changed files

📝 go.mod (+4 -5)
📝 go.sum (+6 -6)

📄 Description

Bumps golang.org/x/crypto from 0.33.0 to 0.37.0.

Commits

959f8f3 go.mod: update golang.org/x dependencies
769bcd6 ssh: use the configured rand in kex init
d0a798f cryptobyte: fix typo 'octects' into 'octets' for asn1.go
acbcbef acme: remove unnecessary []byte conversion
376eb14 x509roots: support constrained roots
b369b72 crypto/internal/poly1305: implement function update in assembly on loong64
6b853fb ssh/knownhosts: check more than one key
49bf5b8 go.mod: update golang.org/x dependencies
24852b6 ssh: add decode support for banners
bbc689c ssh: use a more straightforward return value
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/SignTools/SignTools/pull/561 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 4/7/2025 **Status:** ❌ Closed **Base:** `master` ← **Head:** `dependabot/go_modules/golang.org/x/crypto-0.37.0` --- ### 📝 Commits (1) - [`d6e97da`](https://github.com/SignTools/SignTools/commit/d6e97da9581adba1d06d2307fc59aa903c85a1e9) fix(deps): bump golang.org/x/crypto from 0.33.0 to 0.37.0 ### 📊 Changes **2 files changed** (+10 additions, -11 deletions) <details> <summary>View changed files</summary> 📝 `go.mod` (+4 -5) 📝 `go.sum` (+6 -6) </details> ### 📄 Description Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.33.0 to 0.37.0. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/golang/crypto/commit/959f8f3db0fb8c3fb1f9507101058dda21e1fdcf"><code>959f8f3</code></a> go.mod: update golang.org/x dependencies</li> <li><a href="https://github.com/golang/crypto/commit/769bcd6997ac6f3154e27b73b3587295f7720e66"><code>769bcd6</code></a> ssh: use the configured rand in kex init</li> <li><a href="https://github.com/golang/crypto/commit/d0a798f774735c176ed0d3500ac986957a02660f"><code>d0a798f</code></a> cryptobyte: fix typo 'octects' into 'octets' for asn1.go</li> <li><a href="https://github.com/golang/crypto/commit/acbcbef23f9b1b3b7c64673f0ed8baa83475edbe"><code>acbcbef</code></a> acme: remove unnecessary []byte conversion</li> <li><a href="https://github.com/golang/crypto/commit/376eb1400636d0d687bee5520daadb5fdeac3311"><code>376eb14</code></a> x509roots: support constrained roots</li> <li><a href="https://github.com/golang/crypto/commit/b369b723c8ad46b179f3a49d57bfc7d6a2740cdf"><code>b369b72</code></a> crypto/internal/poly1305: implement function update in assembly on loong64</li> <li><a href="https://github.com/golang/crypto/commit/6b853fbea37a941d918ac0760a5492802df42b9b"><code>6b853fb</code></a> ssh/knownhosts: check more than one key</li> <li><a href="https://github.com/golang/crypto/commit/49bf5b80c8108983f588ecabd7bf996e6e63a515"><code>49bf5b8</code></a> go.mod: update golang.org/x dependencies</li> <li><a href="https://github.com/golang/crypto/commit/24852b6b3fe89f0f239f5e7181473a28e39ae814"><code>24852b6</code></a> ssh: add decode support for banners</li> <li><a href="https://github.com/golang/crypto/commit/bbc689cf5cfb1b9f9ea88939690590d3521c2487"><code>bbc689c</code></a> ssh: use a more straightforward return value</li> <li>Additional commits viewable in <a href="https://github.com/golang/crypto/compare/v0.33.0...v0.37.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/crypto&package-manager=go_modules&previous-version=0.33.0&new-version=0.37.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>