← Back to issue list

fix(deps): update module golang.org/x/crypto to v0.40.0

View original Github issue

Metadata

Project
fetch-service
Number
#405
Type
pull request
State
merged
Author
renovate[bot]
Labels
Created
Updated
Closed

Current evaluation

Merged automated dependency update upgrading golang.org/x/crypto to v0.40.0. Transitive dependencies golang.org/x/net, golang.org/x/sys, and golang.org/x/text were also updated. Approved by two reviewers and passed all CI checks.

Suggested action:

No scores available.

Issue body

This PR contains the following updates: | Package | Change | Age | Confidence | |---|---|---|---| | golang.org/x/crypto | `v0.36.0` -> `v0.40.0` | [![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2fcrypto/v0.40.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2fcrypto/v0.36.0/v0.40.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/fetch-service). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC42Mi4xIiwidXBkYXRlZEluVmVyIjoiNDEuMjMuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Evaluation history

Date Model Scores Action Summary
qwen/qwen3.6-35b-a3b Merged automated dependency update upgrading golang.org/x/crypto to v0.40.0. Transitive dependencies golang.org/x/net, golang.org/x/sys, and golang.org/x/text were also updated. Approved by two reviewers and passed all CI checks.

Update history

Date Change
created

Related issues

Issue Project State Summary Similarity
#546 fix(deps): update module golang.org/x/crypto to v0.46.0 fetch-service merged Merged automated dependency update bumping golang.org/x/crypto to v0.46.0. The change also updated golang.org/x/sys to v0.39.0 and golang.org/x/text to v0.32.0. Approved by two reviewers with all CI checks passing before merge.
95%
#321 fix(deps): update module golang.org/x/net to v0.35.0 fetch-service merged Merged automated dependency update upgrading golang.org/x/net to v0.35.0. Transitive dependencies golang.org/x/crypto, golang.org/x/sys, and golang.org/x/text were also updated. Approved by two reviewers and passed CI checks prior to merge.
94%
#610 fix(deps): update module golang.org/x/crypto to v0.52.0 fetch-service merged Merged dependency update for golang.org/x/crypto to v0.52.0, including transitive updates to x/net, x/sys, and x/text. Approved by two reviewers and cleared all CI checks after initial OSV test failures were resolved.
93%
#453 fix(deps): update module golang.org/x/crypto to v0.43.0 fetch-service merged Merged automated dependency update upgrading golang.org/x/crypto to v0.43.0. The change also updated golang.org/x/sys to v0.37.0 and golang.org/x/text to v0.30.0. All CI checks passed and reviewers approved the update prior to merge.
93%
#617 fix(deps): update module golang.org/x/crypto to v0.53.0 fetch-service merged Merged automated dependency update upgrading golang.org/x/crypto to v0.53.0. The change also bumped golang.org/x/sys to v0.46.0 and golang.org/x/text to v0.38.0. Approved by reviewers and merged after passing CI checks.
93%
#468 fix(deps): update module golang.org/x/net to v0.45.0 fetch-service merged Merged automated dependency update. Upgraded golang.org/x/net to v0.45.0, which also updated golang.org/x/crypto, golang.org/x/sys, and golang.org/x/text. Approved by two reviewers and passed all CI checks.
92%
#436 fix(deps): update module golang.org/x/net to v0.43.0 fetch-service merged Merged automated dependency update upgrading golang.org/x/net to v0.43.0, alongside transitive bumps to crypto, sys, and text modules. Approved by two reviewers and merged after passing core CI checks.
92%
#526 fix(deps): update module golang.org/x/crypto to v0.45.0 [security] fetch-service merged Merged security update upgrading golang.org/x/crypto to v0.45.0 to address CVE-2025-58181 and CVE-2025-47914. Approved by two reviewers, passed CI, and merged alongside updates to golang.org/x/net, golang.org/x/sys, and golang.org/x/text.
92%
#205 fix(deps): update module golang.org/x/net to v0.30.0 fetch-service merged Merged automated dependency update upgrading golang.org/x/net to v0.30.0. The go get command also bumped golang.org/x/crypto, golang.org/x/sys, and golang.org/x/text. Approved by two reviewers and passed CI checks.
92%
#569 fix(deps): update module golang.org/x/net to v0.53.0 fetch-service merged Merged automated dependency update for golang.org/x/net to v0.53.0. go get also updated golang.org/x/crypto, golang.org/x/sys, and golang.org/x/text. Approved by two reviewers and passed all CI checks before manual merge.
91%