build(deps): update go-crypto to v1.1.5
Metadata
Current evaluation
Merged PR #348 (commit 53e26a0) bumped github.com/ProtonMail/go-crypto to v1.1.5; shipped in fetch-service 0.7.0 (2025-04-08) as "fix(deps): update go-crypto to v1.1.5".
Resolution: closed resolved
Reason: The PR was merged with two approvals and zero unresolved comments, landing as commit 53e26a0 "build(deps): update go-crypto to v1.1.5 (#348)" in go.mod. docs/changelog.rst line 159 confirms the change was released in version 0.7.0 (2025-04-08).
Evaluated by: mr-cal-bot
No scores available.
Issue body
- [x] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)?
-----
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #348 (commit 53e26a0) bumped github.com/ProtonMail/go-crypto to v1.1.5; shipped in fetch-service 0.7.0 (2025-04-08) as "fix(deps): update go-crypto to v1.1.5". | |
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #348 updated go-crypto to v1.1.5 after two approvals, integrating the dependency bump into fetch-service. | |
| qwen/qwen3.6-35b-a3b | — | — | go-crypto v1.1.5 update merged after approval from two reviewers and passing CI checks. The dependency bump was successfully integrated into the codebase. |
Update history
| Date | Change |
|---|---|
| created |
Related work
-
Superseded By:
canonical/fetch-service#390
(confidence 80%)
Later dependency bump to go-crypto v1.3.0 (commit 5c2348c), shipped in 0.7.1; go.mod now pins v1.5.2 after #578, #584, #650 and #658.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #350 fix(deps): update module github.com/protonmail/go-crypto to v1.1.6 | fetch-service | merged | Renovate PR #350 bumped github.com/ProtonMail/go-crypto v1.1.5 -> v1.1.6 and was merged into main via commit de96aa0, updating go.mod and go.sum. | |
| #390 fix(deps): update module github.com/protonmail/go-crypto to v1.3.0 | fetch-service | merged | Renovate PR #390 merged, bumping github.com/ProtonMail/go-crypto v1.2.0 to v1.3.0 in commit 5c2348c. Later superseded by go-crypto v1.4.0/v1.4.1/v1.5.1/v1.5.2. | |
| #322 fix(deps): update module github.com/protonmail/go-crypto to v1.1.5 | fetch-service | closed | Renovate PR bumping ProtonMail/go-crypto v1.0.0 -> v1.1.5 was closed unmerged by maintainer cmatsuoka on 2025-02-23 as "Superseded by #348", which landed the same bump in commit 53e26a0. | |
| #584 fix(deps): update module github.com/protonmail/go-crypto to v1.4.1 | fetch-service | merged | Renovate PR merged, bumping github.com/ProtonMail/go-crypto from v1.4.0 to v1.4.1 (go.mod/go.sum) in commit 68bf1a2. Later superseded by v1.5.1 (#650) and v1.5.2 (#658). | |
| #650 fix(deps): update module github.com/protonmail/go-crypto to v1.5.1 | fetch-service | merged | Renovate PR #650 merged into main, bumping github.com/ProtonMail/go-crypto v1.4.1 -> v1.5.1 in go.mod/go.sum (+3/-1), picking up upstream hardening for malformed OpenPGP input. Superseded later by #658 (v1.5.2). | |
| #286 fix(deps): update module github.com/protonmail/go-crypto to v1.1.3 | fetch-service | closed | Renovate PR to bump github.com/ProtonMail/go-crypto v1.0.0 -> v1.1.3 was approved but closed unmerged; Renovate ignored v1.1.3 and a later PR landed v1.1.5 instead. | |
| #578 fix(deps): update module github.com/protonmail/go-crypto to v1.4.0 | fetch-service | merged | Renovate PR merged as commit bf599c8, bumping github.com/ProtonMail/go-crypto v1.3.0 → v1.4.0 (also pulling cloudflare/circl v1.6.1 → v1.6.2). Later superseded by #584 (v1.4.1), #650 (v1.5.1) and #658 (v1.5.2). | |
| #379 fix(deps): update module github.com/protonmail/go-crypto to v1.2.0 | fetch-service | merged | Renovate dependency bump of github.com/ProtonMail/go-crypto v1.1.6 -> v1.2.0 (plus transitive circl v1.3.7 -> v1.6.0) was approved by two reviewers and merged into main in commit 7ad8f54, changing go.mod/go.sum. | |
| #658 fix(deps): update module github.com/protonmail/go-crypto to v1.5.2 | fetch-service | merged | Renovate PR #658 bumped github.com/ProtonMail/go-crypto from v1.5.1 to v1.5.2 (RSA key prime-ordering serialization fix) and was merged into main, updating go.mod/go.sum (+3/-1). | |
| #500 build(deps): update go to 1.24.9 | fetch-service | merged | Merged PR canonical/fetch-service#500 (commit c67f817) by upils bumped go.mod from go 1.24.6 to 1.24.9, a 1-line change fixing several Go security vulnerabilities. Approved by 2 reviewers with all CI green; later superseded by #613 to Go 1.25.x. |