build(deps): bump golang.org/x/crypto from 0.28.0 to 0.31.0
Metadata
Current evaluation
Closed because golang.org/x/crypto is already up-to-date. The update is no longer required, so the pull request was abandoned without merging.
Suggested action: —
No scores available.
Issue body
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.28.0 to 0.31.0.
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909"><code>b4f1988</code></a> ssh: make the public key cache a 1-entry FIFO cache</li>
<li><a href="https://github.com/golang/crypto/commit/7042ebcbe097f305ba3a93f9a22b4befa4b83d29"><code>7042ebc</code></a> openpgp/clearsign: just use rand.Reader in tests</li>
<li><a href="https://github.com/golang/crypto/commit/3e90321ac7bcee3d924ed63ed3ad97be2079cb56"><code>3e90321</code></a> go.mod: update golang.org/x dependencies</li>
<li><a href="https://github.com/golang/crypto/commit/8c4e668694ccbaa1be4785da7e7a40f2ef93152b"><code>8c4e668</code></a> x509roots/fallback: update bundle</li>
<li><a href="https://github.com/golang/crypto/commit/6018723c74059e3b91c84268b212c2f6cdab1f64"><code>6018723</code></a> go.mod: update golang.org/x dependencies</li>
<li><a href="https://github.com/golang/crypto/commit/71ed71b4faf97caafd1863fed003e9ac311f10ee"><code>71ed71b</code></a> README: don't recommend go get</li>
<li><a href="https://github.com/golang/crypto/commit/750a45fe5e473d5afa193e9088f3d135e64eca26"><code>750a45f</code></a> sha3: add MarshalBinary, AppendBinary, and UnmarshalBinary</li>
<li><a href="https://github.com/golang/crypto/commit/36b172546bd03a74c79e109ec84c599b672ea9e4"><code>36b1725</code></a> sha3: avoid trailing permutation</li>
<li><a href="https://github.com/golang/crypto/commit/80ea76eb17c0c52f5d5d04e833d6aeb6b062d81d"><code>80ea76e</code></a> sha3: fix padding for long cSHAKE parameters</li>
<li><a href="https://github.com/golang/crypto/commit/c17aa50fbd32393e5d52fa65ca51cbfff0a75aea"><code>c17aa50</code></a> sha3: avoid buffer copy</li>
<li>Additional commits viewable in <a href="https://github.com/golang/crypto/compare/v0.28.0...v0.31.0">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/canonical/fetch-service/network/alerts).
</details>
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.6-35b-a3b | — | — | Closed because golang.org/x/crypto is already up-to-date. The update is no longer required, so the pull request was abandoned without merging. |
Update history
| Date | Change |
|---|---|
| created |
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #527 build(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 | fetch-service | closed | Closed as a duplicate of pull request 526. The golang.org/x/crypto update to 0.45.0 was handled by the referenced pull request instead. Dependabot acknowledged the closure and stopped tracking this version. | |
| #435 fix(deps): update module golang.org/x/crypto to v0.41.0 - autoclosed | fetch-service | closed | Renovate automatically closed this dependency update for golang.org/x/crypto to v0.41.0. Despite approval and passing CI checks, the pull request was autoclosed, indicating it was superseded or abandoned. | |
| #505 fix(deps): update module golang.org/x/crypto to v0.44.0 - abandoned | fetch-service | closed | Abandoned and closed. The golang.org/x/crypto v0.44.0 update was flagged for autoclosing but skipped due to branch modifications, requiring manual closure. | |
| #568 fix(deps): update module golang.org/x/crypto to v0.50.0 - autoclosed | fetch-service | closed | The dependency update PR for golang.org/x/crypto to v0.50.0 was autoclosed without merging. Despite passing CI and receiving approval, the branch was automatically closed, indicating it was superseded or already applied. | |
| #639 fix(deps): update module golang.org/x/crypto to v0.55.0 - autoclosed | fetch-service | closed | Dependency update PR for golang.org/x/crypto to v0.55.0 was abandoned and autoclosed without merging. Renovate automatically closed it after the OSV scanner check failed. Transitive dependencies were also updated. | |
| #1200 build(deps): bump cryptography from 41.0.2 to 41.0.3 | charmcraft | closed | Automated update for cryptography to 41.0.3 was closed as unnecessary. The dependency bot confirmed the package is already current, so the request was abandoned without review or merge. | |
| #1395 build(deps): bump cryptography from 41.0.4 to 41.0.6 | charmcraft | closed | Closed without merging. Dependabot automatically closed the update because the cryptography dependency was already at the latest version, making the PR redundant. | |
| #405 fix(deps): update module golang.org/x/crypto to v0.40.0 | fetch-service | merged | Merged automated dependency update upgrading golang.org/x/crypto to v0.40.0. Transitive dependencies golang.org/x/net, golang.org/x/sys, and golang.org/x/text were also updated. Approved by two reviewers and passed all CI checks. | |
| #546 fix(deps): update module golang.org/x/crypto to v0.46.0 | fetch-service | merged | Merged automated dependency update bumping golang.org/x/crypto to v0.46.0. The change also updated golang.org/x/sys to v0.39.0 and golang.org/x/text to v0.32.0. Approved by two reviewers with all CI checks passing before merge. | |
| #4457 build(deps): bump cryptography from 41.0.4 to 41.0.6 | snapcraft | closed | Automated dependency update to cryptography 41.0.6 was closed without merging. The package was already updated in the repository, rendering the change obsolete. |