fix(deps): update module github.com/protonmail/go-crypto to v1.4.1
Metadata
Current evaluation
Merged automated dependency update upgrading github.com/ProtonMail/go-crypto from v1.4.0 to v1.4.1. The release fixes invalid ECC key point handling. Approved by two reviewers and merged after passing CI checks, with automerge disabled.
Suggested action: —
No scores available.
Issue body
This PR contains the following updates:
| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [github.com/ProtonMail/go-crypto](https://redirect.github.com/ProtonMail/go-crypto) | `v1.4.0` → `v1.4.1` |  |  |
---
### Release Notes
<details>
<summary>ProtonMail/go-crypto (github.com/ProtonMail/go-crypto)</summary>
### [`v1.4.1`](https://redirect.github.com/ProtonMail/go-crypto/releases/tag/v1.4.1)
[Compare Source](https://redirect.github.com/ProtonMail/go-crypto/compare/v1.4.0...v1.4.1)
#### What's Changed
- Properly handle ECC keys with invalid points in [#​304](https://redirect.github.com/ProtonMail/go-crypto/pull/304)
**Full Changelog**: <https://github.com/ProtonMail/go-crypto/compare/v1.4.0...v1.4.1>
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/fetch-service).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.6-35b-a3b | — | — | Merged automated dependency update upgrading github.com/ProtonMail/go-crypto from v1.4.0 to v1.4.1. The release fixes invalid ECC key point handling. Approved by two reviewers and merged after passing CI checks, with automerge disabled. |
Update history
| Date | Change |
|---|---|
| created |
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #350 fix(deps): update module github.com/protonmail/go-crypto to v1.1.6 | fetch-service | merged | Merged automated dependency update upgrading github.com/ProtonMail/go-crypto from v1.1.5 to v1.1.6. Approved by two reviewers, passed CI, and merged into main. | |
| #390 fix(deps): update module github.com/protonmail/go-crypto to v1.3.0 | fetch-service | merged | Merged automated dependency update for github.com/ProtonMail/go-crypto from v1.2.0 to v1.3.0. Approved by three reviewers, passed CI checks, and modified two files. | |
| #379 fix(deps): update module github.com/protonmail/go-crypto to v1.2.0 | fetch-service | merged | Merged automated dependency update upgrading github.com/ProtonMail/go-crypto to v1.2.0 and github.com/cloudflare/circl to v1.6.0. Approved by two reviewers and passed CI checks. | |
| #578 fix(deps): update module github.com/protonmail/go-crypto to v1.4.0 | fetch-service | merged | Merged automated dependency update upgrading github.com/ProtonMail/go-crypto to v1.4.0 and github.com/cloudflare/circl to v1.6.2. All required CI checks passed. Changes applied to go.mod. | |
| #286 fix(deps): update module github.com/protonmail/go-crypto to v1.1.3 | fetch-service | closed | The dependency update to github.com/protonmail/go-crypto v1.1.3 was abandoned and closed without merging. Renovate confirmed the action and will ignore this update, waiting for a newer version instead. | |
| #322 fix(deps): update module github.com/protonmail/go-crypto to v1.1.5 | fetch-service | closed | Superseded by pull request #348. The dependency update for github.com/ProtonMail/go-crypto to v1.1.5 was closed without merging, and Renovate will ignore this specific version. | |
| #348 build(deps): update go-crypto to v1.1.5 | fetch-service | merged | go-crypto v1.1.5 update merged after approval from two reviewers and passing CI checks. The dependency bump was successfully integrated into the codebase. | |
| #405 fix(deps): update module golang.org/x/crypto to v0.40.0 | fetch-service | merged | Merged automated dependency update upgrading golang.org/x/crypto to v0.40.0. Transitive dependencies golang.org/x/net, golang.org/x/sys, and golang.org/x/text were also updated. Approved by two reviewers and passed all CI checks. | |
| #546 fix(deps): update module golang.org/x/crypto to v0.46.0 | fetch-service | merged | Merged automated dependency update bumping golang.org/x/crypto to v0.46.0. The change also updated golang.org/x/sys to v0.39.0 and golang.org/x/text to v0.32.0. Approved by two reviewers with all CI checks passing before merge. | |
| #526 fix(deps): update module golang.org/x/crypto to v0.45.0 [security] | fetch-service | merged | Merged security update upgrading golang.org/x/crypto to v0.45.0 to address CVE-2025-58181 and CVE-2025-47914. Approved by two reviewers, passed CI, and merged alongside updates to golang.org/x/net, golang.org/x/sys, and golang.org/x/text. |