Skip to content

chore(deps): bump x/crypto to v0.52.0 (OSV advisory 2026-05-22)#26

Merged
mastermanas805 merged 1 commit into
masterfrom
chore/osv-advisory-2026-05-22
May 22, 2026
Merged

chore(deps): bump x/crypto to v0.52.0 (OSV advisory 2026-05-22)#26
mastermanas805 merged 1 commit into
masterfrom
chore/osv-advisory-2026-05-22

Conversation

@mastermanas805
Copy link
Copy Markdown
Member

Summary

  • Bumps golang.org/x/crypto v0.50.0 → v0.52.0 to clear 13 newly-published OSV advisories reddening the scan / osv-scan CI check.
  • Advisories: GO-2026-5005, 5006, 5013-5021, 5023, 5033 (mostly ssh/agent pathological-input panics). All transitive (// indirect), all fixed in v0.52.0.
  • go mod tidy pulled benign sibling minor bumps: x/net, x/sys, x/term, x/text.
  • Chose the real fix (bump) over suppression since a fixed version exists.

Test plan

  • go build ./... green
  • go vet ./... green
  • go test ./... -short green
  • osv-scanner scan source ./go.mod → No issues found
  • CI osv-scan + coverage gates green

🤖 Generated with Claude Code

Resolves 13 newly-published x/crypto advisories (GO-2026-5005/5006/
5013-5021/5023/5033, mostly ssh/agent panics) flagged by the osv-scan
CI check. All transitive (// indirect) but a real fix exists in v0.52.0,
so bump rather than suppress. Pulls benign sibling x/net, x/sys, x/term,
x/text minor updates via go mod tidy. build + vet + test gate green;
osv-scanner reports no issues.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@mastermanas805 mastermanas805 merged commit 25dda90 into master May 22, 2026
10 checks passed
@mastermanas805 mastermanas805 deleted the chore/osv-advisory-2026-05-22 branch May 22, 2026 03:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant