fix(deps): update module golang.org/x/crypto to v0.57.0
Metadata
Current evaluation
Renovate PR #643 was closed unmerged; x/crypto v0.57.0 never reached main, which remains on v0.55.0.
Resolution: closed stale
Reason: No commit or merged PR applied v0.57.0, and the current go.mod still requires golang.org/x/crypto v0.55.0. Unit tests, linters, and OSV scanning were failing, and no maintainer resolution was recorded.
Evaluated by: mr-cal-bot
No scores available.
Issue body
This PR contains the following updates:
| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [golang.org/x/crypto](https://pkg.go.dev/golang.org/x/crypto) | [`v0.55.0` → `v0.57.0`](https://cs.opensource.google/go/x/crypto/+/refs/tags/v0.55.0...refs/tags/v0.57.0) |  |  |
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- At any time (no schedule defined)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/fetch-service).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC42MS4xIiwidXBkYXRlZEluVmVyIjoiNDQuMTEyLjAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed stale | Renovate PR #643 was closed unmerged; x/crypto v0.57.0 never reached main, which remains on v0.55.0. | |
| stealth/space-bunny-alpha | — | closed stale | Renovate's x/crypto v0.57.0 update was closed unmerged; main remains on v0.55.0, with no resolving commit or superseding PR identified. | |
| stealth/space-bunny-alpha |
Impact:
42
Quick Win:
7
Complexity:
25
Confidence:
93
Actionability:
22
|
keep open | Renovate updates x/crypto v0.55.0→v0.57.0, plus Go 1.25.11→1.26.0, x/sys, and x/text. Unit tests, linters, and OSV scanning fail; snap checks are pending. | |
| stealth/space-bunny-alpha |
Impact:
40
Quick Win:
7
Complexity:
30
Confidence:
91
Actionability:
25
|
keep open | Renovate updates x/crypto to v0.57.0 and also raises Go, x/sys and x/text versions. Linters, unit tests and OSV scanning fail; snap tests remain pending. | |
| qwen/qwen3.6-35b-a3b |
Impact:
40
Quick Win:
36
Staleness:
15
Complexity:
10
Confidence:
60
|
needs review | Renovate PR updating golang.org/x/crypto from v0.55.0 to v0.57.0, plus go 1.25.11→1.26.0, x/sys, and x/text. CI failing on unit-tests, snap-tests, linters, and OSV-scanner. | |
| qwen/qwen3.6-35b-a3b |
Impact:
35
Quick Win:
33
Staleness:
5
Complexity:
5
Confidence:
70
|
needs review | Dependency update for golang.org/x/crypto v0.55.0 → v0.57.0, plus go directive and related dependencies. CI has some failures. |
Update history
| Date | Change |
|---|---|
| closed | |
| updated | |
| updated | |
| updated | |
| updated | |
| created |
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #632 fix(deps): update module golang.org/x/crypto to v0.54.0 | fetch-service | merged | Renovate PR #632 merged to main as commit 0808b7d, bumping golang.org/x/crypto v0.53.0 to v0.54.0, plus x/net to v0.56.0 and x/text to v0.40.0. | |
| #617 fix(deps): update module golang.org/x/crypto to v0.53.0 | fetch-service | merged | Renovate PR #617 merged to main as commit 24ce0e5, bumping golang.org/x/crypto v0.52.0 to v0.53.0 (plus x/sys v0.46.0 and x/text v0.38.0) after 1 approval. | |
| #639 fix(deps): update module golang.org/x/crypto to v0.55.0 - autoclosed | fetch-service | closed | Renovate PR to bump golang.org/x/crypto v0.54.0→v0.55.0 was autoclosed: PR #620 (commit 7a78f94, x/net v0.58.0) already landed x/crypto v0.55.0 and x/text v0.41.0 as indirect deps, making it obsolete. | |
| #435 fix(deps): update module golang.org/x/crypto to v0.41.0 - autoclosed | fetch-service | closed | Renovate update #435 was autoclosed unmerged; x/crypto was later advanced to v0.43.0 by merged PR #453 (commit 07296f4). | |
| #453 fix(deps): update module golang.org/x/crypto to v0.43.0 | fetch-service | merged | Renovate PR #453 bumping golang.org/x/crypto v0.42.0 -> v0.43.0 (plus x/sys v0.37.0, x/text v0.30.0) was approved and merged into main as commit 07296f4. | |
| #555 fix(deps): update module golang.org/x/crypto to v0.47.0 | fetch-service | closed | Closed unmerged after the sync check failed; Renovate ignored v0.47.0 pending a newer release, and later dependency updates superseded it. | |
| #505 fix(deps): update module golang.org/x/crypto to v0.44.0 - abandoned | fetch-service | closed | Renovate's x/crypto v0.43.0->v0.44.0 bump (#505) was closed unmerged after the branch was hand-edited (CI linters/snap-tests red); x/crypto later advanced via #526 (v0.45.0, security). | |
| #620 fix(deps): update module golang.org/x/net to v0.58.0 | fetch-service | merged | Renovate dependency bump PR merged into main as commit 7a78f94, raising golang.org/x/net v0.56.0 → v0.58.0 (plus x/crypto v0.55.0, x/text v0.41.0). | |
| #405 fix(deps): update module golang.org/x/crypto to v0.40.0 | fetch-service | merged | Renovate PR #405 merged into main via commit b1022d8, bumping golang.org/x/crypto v0.36.0 -> v0.40.0 plus x/net, x/sys, x/text. Approved by 2 reviewers, all CI checks green. | |
| #546 fix(deps): update module golang.org/x/crypto to v0.46.0 | fetch-service | merged | Renovate PR merged as commit 90bec85, bumping golang.org/x/crypto v0.45.0 -> v0.46.0 in go.mod/go.sum, with x/sys v0.38.0 -> v0.39.0 and x/text v0.31.0 -> v0.32.0 pulled in by go get. |