chore(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 in /runner - #498
chore(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 in /runner#498dependabot[bot] wants to merge 2 commits into
Conversation
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.52.0 to 0.53.0. - [Commits](golang/crypto@v0.52.0...v0.53.0) --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-version: 0.53.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
|
|
|
A newer version of golang.org/x/crypto exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged. |
|
@dependabot recreate |
|
Looks like golang.org/x/crypto is up-to-date now, so this is no longer needed. |
Bumps golang.org/x/crypto from 0.52.0 to 0.53.0.
Commits
45460e0go.mod: update golang.org/x dependenciesd37c95epkcs12: limit PBKDF iteration count to prevent CPU exhaustione2ffffessh: reject incomplete gssapi-with-mic configurations60e158assh/test: isolate CLI tests from user SSH config and agent1b77d23ssh/knownhosts: reject lines with multiple or unknown markers3872a2bssh/knownhosts: verify declared key type matches decoded key9f72eccssh/knownhosts: treat only ASCII space and tab as whitespace8f405a4ssh: validate ECDSA curve matches expected algorithmbb41b3dssh: improve DH GEX group selection using PreferredBitse04e721ssh/agent: validate ed25519 private key length in AddYou can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)