NotificationsYou must be signed in to change notification settings
Fork928
Star10.1k

chore: bump the x group across 1 directory with 6 updates#17272

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to ourterms of service andprivacy statement. We’ll occasionally send you account related emails.

Already on GitHub?Sign in to your account

Jump to bottom

Merged

github-actions merged 1 commit intomainfromdependabot/go_modules/x-7eaec66cda

Apr 7, 2025

Merged

chore: bump the x group across 1 directory with 6 updates#17272

github-actions merged 1 commit intomainfromdependabot/go_modules/x-7eaec66cda

Apr 7, 2025

Conversation

Copy link

Contributor

dependabotbot commented on behalf ofgithubApr 7, 2025

Bumps the x group with 3 updates in the / directory:golang.org/x/crypto,golang.org/x/net andgolang.org/x/oauth2.

Updatesgolang.org/x/crypto from 0.36.0 to 0.37.0

Commits

959f8f3 go.mod: update golang.org/x dependencies
769bcd6 ssh: use the configured rand in kex init
d0a798f cryptobyte: fix typo 'octects' into 'octets' for asn1.go
acbcbef acme: remove unnecessary []byte conversion
376eb14 x509roots: support constrained roots
b369b72 crypto/internal/poly1305: implement function update in assembly on loong64
6b853fb ssh/knownhosts: check more than one key
See full diff incompare view

Updatesgolang.org/x/net from 0.37.0 to 0.38.0

Commits

e1fcd82 html: properly handle trailing solidus in unquoted attribute value in foreign...
ebed060 internal/http3: fix build of tests with GOEXPERIMENT=nosynctest
1f1fa29 publicsuffix: regenerate table
1215081 http2: improve error when server sends HTTP/1
312450e html: ensure <search> tag closes <p> and update tests
09731f9 http2: improve handling of lost PING in Server
55989e2 http2/h2c: use ResponseController for hijacking connections
2914f46 websocket: re-recommend gorilla/websocket
See full diff incompare view

Updatesgolang.org/x/oauth2 from 0.28.0 to 0.29.0

Commits

65c15a3 oauth2: remove extra period
ce56909 jws: improve fix forCVE-2025-22868
See full diff incompare view

Updatesgolang.org/x/sync from 0.12.0 to 0.13.0

Commits

396f3a0 errgroup: document calling Go before Wait
See full diff incompare view

Updatesgolang.org/x/sys from 0.31.0 to 0.32.0

Commits

01aaa83 all: simplify code by using modern Go constructs
1b2bd6b windows: replace all StringToUTF16 calls with UTF16FromString
1c3b72f unix: update Linux kernel to 6.14
c175b6b windows: add cmsghdr and pktinfo structures
3330b5e unix: support Readv, Preadv, Writev and Pwritev for darwin
7401cce cpu: replace specific instructions with WORD in the function get_cpucfg on lo...
b8f7da6 cpu: add support for detecting cpu features on loong64
f2ce62c windows: add constants for PMTUD socket options
See full diff incompare view

Updatesgolang.org/x/term from 0.30.0 to 0.31.0

Commits

5d2308b go.mod: update golang.org/x dependencies
e770ddd x/term: disabling auto-completion around GetPassword()
See full diff incompare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting@dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

chore: bump the x group across 1 directory with 6 updates

d974b55

Bumps the x group with 3 updates in the / directory: [golang.org/x/crypto](https://github.com/golang/crypto), [golang.org/x/net](https://github.com/golang/net) and [golang.org/x/oauth2](https://github.com/golang/oauth2).Updates `golang.org/x/crypto` from 0.36.0 to 0.37.0- [Commits](golang/crypto@v0.36.0...v0.37.0)Updates `golang.org/x/net` from 0.37.0 to 0.38.0- [Commits](golang/net@v0.37.0...v0.38.0)Updates `golang.org/x/oauth2` from 0.28.0 to 0.29.0- [Commits](golang/oauth2@v0.28.0...v0.29.0)Updates `golang.org/x/sync` from 0.12.0 to 0.13.0- [Commits](golang/sync@v0.12.0...v0.13.0)Updates `golang.org/x/sys` from 0.31.0 to 0.32.0- [Commits](golang/sys@v0.31.0...v0.32.0)Updates `golang.org/x/term` from 0.30.0 to 0.31.0- [Commits](golang/term@v0.30.0...v0.31.0)---updated-dependencies:- dependency-name: golang.org/x/crypto  dependency-version: 0.37.0  dependency-type: direct:production  update-type: version-update:semver-minor  dependency-group: x- dependency-name: golang.org/x/net  dependency-version: 0.38.0  dependency-type: direct:production  update-type: version-update:semver-minor  dependency-group: x- dependency-name: golang.org/x/oauth2  dependency-version: 0.29.0  dependency-type: direct:production  update-type: version-update:semver-minor  dependency-group: x- dependency-name: golang.org/x/sync  dependency-version: 0.13.0  dependency-type: direct:production  update-type: version-update:semver-minor  dependency-group: x- dependency-name: golang.org/x/sys  dependency-version: 0.32.0  dependency-type: direct:production  update-type: version-update:semver-minor  dependency-group: x- dependency-name: golang.org/x/term  dependency-version: 0.31.0  dependency-type: direct:production  update-type: version-update:semver-minor  dependency-group: x...Signed-off-by: dependabot[bot] <support@github.com>