fix(deps): update module github.com/protonmail/go-crypto to v1.1.5
Metadata
Current evaluation
Superseded by pull request #348. The dependency update for github.com/ProtonMail/go-crypto to v1.1.5 was closed without merging, and Renovate will ignore this specific version.
Suggested action: —
No scores available.
Issue body
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [github.com/ProtonMail/go-crypto](https://redirect.github.com/ProtonMail/go-crypto) | `v1.0.0` -> `v1.1.5` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
---
### Release Notes
<details>
<summary>ProtonMail/go-crypto (github.com/ProtonMail/go-crypto)</summary>
### [`v1.1.5`](https://redirect.github.com/ProtonMail/go-crypto/releases/tag/v1.1.5)
[Compare Source](https://redirect.github.com/ProtonMail/go-crypto/compare/v1.1.4...v1.1.5)
#### What's Changed
- Check binding signature details against primary key by [@​twiss](https://redirect.github.com/twiss) in [https://github.com/ProtonMail/go-crypto/pull/264](https://redirect.github.com/ProtonMail/go-crypto/pull/264)
**Full Changelog**: https://github.com/ProtonMail/go-crypto/compare/v1.1.4...v1.1.5
### [`v1.1.4`](https://redirect.github.com/ProtonMail/go-crypto/releases/tag/v1.1.4)
[Compare Source](https://redirect.github.com/ProtonMail/go-crypto/compare/v1.1.3...v1.1.4)
#### What's Changed
- Emit armor headers in sorted order by [@​andrewgdotcom](https://redirect.github.com/andrewgdotcom) in [https://github.com/ProtonMail/go-crypto/pull/255](https://redirect.github.com/ProtonMail/go-crypto/pull/255)
- Reduce memory usage when AEAD en/decrypting large messages by [@​twiss](https://redirect.github.com/twiss) in [https://github.com/ProtonMail/go-crypto/pull/259](https://redirect.github.com/ProtonMail/go-crypto/pull/259)
- Update artifact actions to v4 by [@​twiss](https://redirect.github.com/twiss) in [https://github.com/ProtonMail/go-crypto/pull/260](https://redirect.github.com/ProtonMail/go-crypto/pull/260)
**Full Changelog**: https://github.com/ProtonMail/go-crypto/compare/v1.1.3...v1.1.4
### [`v1.1.3`](https://redirect.github.com/ProtonMail/go-crypto/releases/tag/v1.1.3)
[Compare Source](https://redirect.github.com/ProtonMail/go-crypto/compare/v1.1.2...v1.1.3)
#### What's Changed
- Add argon2 test vector for 32-bit platforms by [@​lubux](https://redirect.github.com/lubux) in [https://github.com/ProtonMail/go-crypto/pull/245](https://redirect.github.com/ProtonMail/go-crypto/pull/245)
- Validate argon2 params on read by [@​lubux](https://redirect.github.com/lubux) in [https://github.com/ProtonMail/go-crypto/pull/246](https://redirect.github.com/ProtonMail/go-crypto/pull/246)
- Adapt aead preferences on key generation by [@​lubux](https://redirect.github.com/lubux) in [https://github.com/ProtonMail/go-crypto/pull/248](https://redirect.github.com/ProtonMail/go-crypto/pull/248)
- Improve AEAD handling by [@​twiss](https://redirect.github.com/twiss) in [https://github.com/ProtonMail/go-crypto/pull/247](https://redirect.github.com/ProtonMail/go-crypto/pull/247)
- Improve error message for decryption with a session key by [@​lubux](https://redirect.github.com/lubux) in [https://github.com/ProtonMail/go-crypto/pull/237](https://redirect.github.com/ProtonMail/go-crypto/pull/237)
- Flag to allow signing key decryption by [@​lubux](https://redirect.github.com/lubux) in [https://github.com/ProtonMail/go-crypto/pull/251](https://redirect.github.com/ProtonMail/go-crypto/pull/251)
**Full Changelog**: https://github.com/ProtonMail/go-crypto/compare/v1.1.2...v1.1.3
### [`v1.1.2`](https://redirect.github.com/ProtonMail/go-crypto/releases/tag/v1.1.2)
[Compare Source](https://redirect.github.com/ProtonMail/go-crypto/compare/v1.1.1...v1.1.2)
#### What's Changed
- Cleartext Framework: Exclude the line-ending separator when decoding plaintext by [@​lubux](https://redirect.github.com/lubux) in [https://github.com/ProtonMail/go-crypto/pull/242](https://redirect.github.com/ProtonMail/go-crypto/pull/242)
**Full Changelog**: https://github.com/ProtonMail/go-crypto/compare/v1.1.1...v1.1.2
### [`v1.1.1`](https://redirect.github.com/ProtonMail/go-crypto/releases/tag/v1.1.1)
[Compare Source](https://redirect.github.com/ProtonMail/go-crypto/compare/v1.1.0...v1.1.1)
#### What's Changed
- Fix `clearsign.Encode` backwards compatibility [#​239](https://redirect.github.com/ProtonMail/go-crypto/issues/239) by [@​mdosch](https://redirect.github.com/mdosch) in [https://github.com/ProtonMail/go-crypto/pull/240](https://redirect.github.com/ProtonMail/go-crypto/pull/240)
**Full Changelog**: https://github.com/ProtonMail/go-crypto/compare/v1.1.0...v1.1.1
### [`v1.1.0`](https://redirect.github.com/ProtonMail/go-crypto/releases/tag/v1.1.0)
[Compare Source](https://redirect.github.com/ProtonMail/go-crypto/compare/v1.0.0...v1.1.0)
#### What's Changed
This release adds full support for the new version of the OpenPGP standard, [RFC 9580](https://www.rfc-editor.org/rfc/rfc9580.html). In addition, the release introduces an improved non-backwards compatible v2 API. The API in the `openpgp` package remains fully backwards compatible while the new v2 API is located in a separate `v2` package in `openpgp`.
For the full changes since `v1.0.0`, see the previous release notes. For the full changelog, see https://github.com/ProtonMail/go-crypto/compare/v1.0.0...v1.1.0.
Changes since `v1.1.0-beta.0`:
- Replace expiring curve448 integration test vector by [@​lubux](https://redirect.github.com/lubux)
- Validate input key size in SEIPDv2 decryption by [@​lubux](https://redirect.github.com/lubux)
**Changelog since `v1.1.0-beta.0`**: https://github.com/ProtonMail/go-crypto/compare/v1.1.0-beta.0...v1.1.0.
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/fetch-service).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS45Mi4wIiwidXBkYXRlZEluVmVyIjoiMzkuMTA3LjAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.6-35b-a3b | — | — | Superseded by pull request #348. The dependency update for github.com/ProtonMail/go-crypto to v1.1.5 was closed without merging, and Renovate will ignore this specific version. |
Update history
| Date | Change |
|---|---|
| created |
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #286 fix(deps): update module github.com/protonmail/go-crypto to v1.1.3 | fetch-service | closed | The dependency update to github.com/protonmail/go-crypto v1.1.3 was abandoned and closed without merging. Renovate confirmed the action and will ignore this update, waiting for a newer version instead. | |
| #350 fix(deps): update module github.com/protonmail/go-crypto to v1.1.6 | fetch-service | merged | Merged automated dependency update upgrading github.com/ProtonMail/go-crypto from v1.1.5 to v1.1.6. Approved by two reviewers, passed CI, and merged into main. | |
| #390 fix(deps): update module github.com/protonmail/go-crypto to v1.3.0 | fetch-service | merged | Merged automated dependency update for github.com/ProtonMail/go-crypto from v1.2.0 to v1.3.0. Approved by three reviewers, passed CI checks, and modified two files. | |
| #578 fix(deps): update module github.com/protonmail/go-crypto to v1.4.0 | fetch-service | merged | Merged automated dependency update upgrading github.com/ProtonMail/go-crypto to v1.4.0 and github.com/cloudflare/circl to v1.6.2. All required CI checks passed. Changes applied to go.mod. | |
| #379 fix(deps): update module github.com/protonmail/go-crypto to v1.2.0 | fetch-service | merged | Merged automated dependency update upgrading github.com/ProtonMail/go-crypto to v1.2.0 and github.com/cloudflare/circl to v1.6.0. Approved by two reviewers and passed CI checks. | |
| #584 fix(deps): update module github.com/protonmail/go-crypto to v1.4.1 | fetch-service | merged | Merged automated dependency update upgrading github.com/ProtonMail/go-crypto from v1.4.0 to v1.4.1. The release fixes invalid ECC key point handling. Approved by two reviewers and merged after passing CI checks, with automerge disabled. | |
| #555 fix(deps): update module golang.org/x/crypto to v0.47.0 | fetch-service | closed | Updating golang.org/x/crypto to v0.47.0 was closed without merging due to a failing sync check. Renovate will ignore this update and await a newer version. | |
| #435 fix(deps): update module golang.org/x/crypto to v0.41.0 - autoclosed | fetch-service | closed | Renovate automatically closed this dependency update for golang.org/x/crypto to v0.41.0. Despite approval and passing CI checks, the pull request was autoclosed, indicating it was superseded or abandoned. | |
| #632 fix(deps): update module golang.org/x/crypto to v0.54.0 | fetch-service | merged | Merged dependency update generated by Renovate, upgrading golang.org/x/crypto to v0.54.0. The change also automatically bumped golang.org/x/net to v0.56.0 and golang.org/x/text to v0.40.0. Approved and merged into main. | |
| #454 fix(deps): update module golang.org/x/net to v0.44.0 | fetch-service | closed | Abandoned. The PR updating golang.org/x/net to v0.44.0 was closed without merging. Renovate will ignore this specific update, leaving the dependency unchanged. |