Skip to content

chore(deps): update module golang.org/x/crypto to v0.43.0 [security]#117

Merged
NumaryBot merged 1 commit intomainfrom
renovate/go-golang.org-x-crypto-vulnerability
Nov 14, 2025
Merged

chore(deps): update module golang.org/x/crypto to v0.43.0 [security]#117
NumaryBot merged 1 commit intomainfrom
renovate/go-golang.org-x-crypto-vulnerability

Conversation

@NumaryBot
Copy link
Contributor

This PR contains the following updates:

Package Type Update Change
golang.org/x/crypto indirect minor v0.41.0 -> v0.43.0

Potential denial of service in golang.org/x/crypto/ssh/agent

CVE-2025-47913 / GO-2025-4116

More information

Details

SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.

Severity

Unknown

References

This data is provided by OSV and the Go Vulnerability Database (CC-BY 4.0).


Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@NumaryBot NumaryBot enabled auto-merge (squash) November 14, 2025 10:59
@NumaryBot
Copy link
Contributor Author

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 4 additional dependencies were updated

Details:

Package Change
golang.org/x/text v0.29.0 -> v0.30.0
golang.org/x/net v0.43.0 -> v0.45.0
golang.org/x/sys v0.35.0 -> v0.37.0
golang.org/x/tools v0.36.0 -> v0.37.0

@NumaryBot NumaryBot merged commit a0efe65 into main Nov 14, 2025
6 of 11 checks passed
@NumaryBot NumaryBot deleted the renovate/go-golang.org-x-crypto-vulnerability branch November 14, 2025 11:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants