Skip to content

build(deps): bump the golang-x group with 6 updates - #246

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/golang-x-e6f3c3ba28
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/golang-x-e6f3c3ba28

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the golang-x group with 6 updates:

Package From To
golang.org/x/crypto 0.36.0 0.58.0
golang.org/x/net 0.38.0 0.60.0
golang.org/x/sync 0.12.0 0.24.0
golang.org/x/sys 0.31.0 0.49.0
golang.org/x/term 0.30.0 0.47.0
golang.org/x/text 0.23.0 0.43.0

Updates golang.org/x/crypto from 0.36.0 to 0.58.0

Commits
  • 8fdf07b go.mod: update golang.org/x dependencies
  • 2437861 salsa20: fix keystream reuse in LoongArch LSX tail
  • c3db4df acme: prefer test log helpers in test contexts
  • 4e01a84 acme: adds support for profiles draft
  • 8f0f111 ssh: check that no Unicode-aware string function is used
  • b39ff6d ssh: add certificate algorithms for ML-DSA keys
  • 4465db3 ssh: add the ML-DSA public key algorithms
  • 83e695b ssh: implement ETM mode for CBC ciphers
  • 946083a ssh: only drop a trailing carriage return
  • 543dde9 ssh: accept known_hosts entries with a multi-word comment
  • Additional commits viewable in compare view

Updates golang.org/x/net from 0.38.0 to 0.60.0

Commits
  • 18ece0c http2: prevent crash due to HPACK encoder race
  • 2d03f9d http2: avoid 2x refund on stream close with buffered data
  • cc7d34f http2: avoid excessive work on initial window changes
  • 57f4235 http2: apply header limits to Trailer headers too
  • 01e3d03 http2: coalesce dials via wrapped Transport.RoundTrip
  • 2824783 http2: delete malformed framing-related headers
  • b13c0c1 internal/http3: delete HTTP/3 package
  • 520c891 quic: off-path support in loss/congestion/rtt
  • 656874f quic: determine local address for connections
  • a818e16 quic: add a pathAddrs type, holding a local/peer address pair
  • Additional commits viewable in compare view

Updates golang.org/x/sync from 0.12.0 to 0.24.0

Commits
  • 36f2d70 errgroup: modernize the usage of closures in goroutines
  • f75267d semaphore: panic on negative capacity
  • 3ffd83c all: upgrade go directive to at least 1.26.0 [generated]
  • 1eb64d4 semaphore: panic on negative weights
  • 5071ed6 all: fix some comments to improve readability
  • ec11c4a errgroup: fix a typo in the documentation
  • 1a58307 all: modernize interface{} -> any
  • 3172ca5 all: upgrade go directive to at least 1.25.0 [generated]
  • 2a180e2 errgroup: use consistent read for SetLimit panic
  • 1966f53 errgroup: fix some typos in comment
  • Additional commits viewable in compare view

Updates golang.org/x/sys from 0.31.0 to 0.49.0

Commits
  • b6b8557 unix/linux: unify ppc64x syscall wrappers
  • aab6988 unix: add PrctlArg5Ptr
  • cdfd984 unix: pass fcntl data as unsafe.Pointer in FcntlF{lock,store} on darwin
  • 782b836 unix/linux: don't warn about closed stderr from child process
  • 61592fb unix: return syscall error in *listxattrNS on BSD
  • c136fda unix/linux/Dockerfile: update to Go 1.26.8
  • f1d0d79 unix: pass xattr data as unsafe.Pointer in BSD xattr syscalls
  • 67f850b unix: update linux to v7.2
  • eb1f659 unix: add O_EXEC and O_SEARCH on darwin
  • 51bc731 unix: add Mmsghdr for linux
  • Additional commits viewable in compare view

Updates golang.org/x/term from 0.30.0 to 0.47.0

Commits
  • 0851034 go.mod: update golang.org/x dependencies
  • 6226200 go.mod: update golang.org/x dependencies
  • 7c2fb74 term: process bytes returned with a read error
  • 3963fce all: upgrade go directive to at least 1.26.0 [generated]
  • 9f69229 go.mod: update golang.org/x dependencies
  • 3b43943 go.mod: update golang.org/x dependencies
  • 3c3e485 go.mod: update golang.org/x dependencies
  • 52b71d3 go.mod: update golang.org/x dependencies
  • 9d2dc07 go.mod: update golang.org/x dependencies
  • d954e03 all: upgrade go directive to at least 1.25.0 [generated]
  • Additional commits viewable in compare view

Updates golang.org/x/text from 0.23.0 to 0.43.0

Commits
  • ac40b0f go.mod: update golang.org/x dependencies
  • 6dcc5b6 unicode/bidi: avoid quadratic behavior in Paragraph.Order and Paragraph.Line
  • d0ecd29 secure/bidirule: lazily precompute ASCII table
  • fafe4a0 go.mod: update golang.org/x dependencies
  • f53c316 unicode/norm: don't truncate runes in the recomposition map key
  • 37867f6 unicode/norm: let any starter block composition in compose
  • 0dd525f unicode/norm: compose non-Hangul runes after a Hangul syllable
  • bac26e5 unicode/norm: avoid improper ErrShortDst return in Form.transform
  • 4f55186 unicode/norm: simplify short source detection in Form.transform
  • a1b6c10 unicode/norm: prevent decomposeSegment from moving backwards
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the golang-x group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.36.0` | `0.58.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.38.0` | `0.60.0` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.12.0` | `0.24.0` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.31.0` | `0.49.0` |
| [golang.org/x/term](https://github.com/golang/term) | `0.30.0` | `0.47.0` |
| [golang.org/x/text](https://github.com/golang/text) | `0.23.0` | `0.43.0` |


Updates `golang.org/x/crypto` from 0.36.0 to 0.58.0
- [Commits](golang/crypto@v0.36.0...v0.58.0)

Updates `golang.org/x/net` from 0.38.0 to 0.60.0
- [Commits](golang/net@v0.38.0...v0.60.0)

Updates `golang.org/x/sync` from 0.12.0 to 0.24.0
- [Commits](golang/sync@v0.12.0...v0.24.0)

Updates `golang.org/x/sys` from 0.31.0 to 0.49.0
- [Commits](golang/sys@v0.31.0...v0.49.0)

Updates `golang.org/x/term` from 0.30.0 to 0.47.0
- [Commits](golang/term@v0.30.0...v0.47.0)

Updates `golang.org/x/text` from 0.23.0 to 0.43.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.23.0...v0.43.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.58.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang-x
- dependency-name: golang.org/x/net
  dependency-version: 0.60.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang-x
- dependency-name: golang.org/x/sync
  dependency-version: 0.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang-x
- dependency-name: golang.org/x/sys
  dependency-version: 0.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang-x
- dependency-name: golang.org/x/term
  dependency-version: 0.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang-x
- dependency-name: golang.org/x/text
  dependency-version: 0.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang-x
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 14, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants