fix(deps): update module golang.org/x/crypto to v0.57.0
Metadata
Current evaluation
Dependency update for golang.org/x/crypto v0.55.0 → v0.57.0, plus go directive and related dependencies. CI has some failures.
Suggested action: needs review
Reason: This is a routine Renovate-generated dependency update that requires maintainer review. The PR has failing CI checks (unit-tests, linters, OSV-scanner) that need investigation before merging, and no maintainer has engaged with it yet.
Impact:
35
Quick Win:
33.25
Staleness:
5
Complexity:
5
Confidence:
70
Issue body
This PR contains the following updates:
| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [golang.org/x/crypto](https://pkg.go.dev/golang.org/x/crypto) | [`v0.55.0` → `v0.57.0`](https://cs.opensource.google/go/x/crypto/+/refs/tags/v0.55.0...refs/tags/v0.57.0) |  |  |
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- At any time (no schedule defined)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/fetch-service).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC42MS4xIiwidXBkYXRlZEluVmVyIjoiNDQuNjkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.6-35b-a3b |
Impact:
35
Quick Win:
33.25
Staleness:
5
Complexity:
5
Confidence:
70
|
needs review | Dependency update for golang.org/x/crypto v0.55.0 → v0.57.0, plus go directive and related dependencies. CI has some failures. |
Update history
| Date | Change |
|---|---|
| created |
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #617 fix(deps): update module golang.org/x/crypto to v0.53.0 | fetch-service | merged | Merged automated dependency update upgrading golang.org/x/crypto to v0.53.0. The change also bumped golang.org/x/sys to v0.46.0 and golang.org/x/text to v0.38.0. Approved by reviewers and merged after passing CI checks. | |
| #610 fix(deps): update module golang.org/x/crypto to v0.52.0 | fetch-service | merged | Merged dependency update for golang.org/x/crypto to v0.52.0, including transitive updates to x/net, x/sys, and x/text. Approved by two reviewers and cleared all CI checks after initial OSV test failures were resolved. | |
| #632 fix(deps): update module golang.org/x/crypto to v0.54.0 | fetch-service | merged | Merged dependency update generated by Renovate, upgrading golang.org/x/crypto to v0.54.0. The change also automatically bumped golang.org/x/net to v0.56.0 and golang.org/x/text to v0.40.0. Approved and merged into main. | |
| #639 fix(deps): update module golang.org/x/crypto to v0.55.0 - autoclosed | fetch-service | closed | Dependency update PR for golang.org/x/crypto to v0.55.0 was abandoned and autoclosed without merging. Renovate automatically closed it after the OSV scanner check failed. Transitive dependencies were also updated. | |
| #453 fix(deps): update module golang.org/x/crypto to v0.43.0 | fetch-service | merged | Merged automated dependency update upgrading golang.org/x/crypto to v0.43.0. The change also updated golang.org/x/sys to v0.37.0 and golang.org/x/text to v0.30.0. All CI checks passed and reviewers approved the update prior to merge. | |
| #546 fix(deps): update module golang.org/x/crypto to v0.46.0 | fetch-service | merged | Merged automated dependency update bumping golang.org/x/crypto to v0.46.0. The change also updated golang.org/x/sys to v0.39.0 and golang.org/x/text to v0.32.0. Approved by two reviewers with all CI checks passing before merge. | |
| #405 fix(deps): update module golang.org/x/crypto to v0.40.0 | fetch-service | merged | Merged automated dependency update upgrading golang.org/x/crypto to v0.40.0. Transitive dependencies golang.org/x/net, golang.org/x/sys, and golang.org/x/text were also updated. Approved by two reviewers and passed all CI checks. | |
| #526 fix(deps): update module golang.org/x/crypto to v0.45.0 [security] | fetch-service | merged | Merged security update upgrading golang.org/x/crypto to v0.45.0 to address CVE-2025-58181 and CVE-2025-47914. Approved by two reviewers, passed CI, and merged alongside updates to golang.org/x/net, golang.org/x/sys, and golang.org/x/text. | |
| #620 fix(deps): update module golang.org/x/net to v0.58.0 | fetch-service | merged | Merged an automated dependency update. Updated golang.org/x/net to v0.58.0, with golang.org/x/crypto to v0.55.0 and golang.org/x/text to v0.41.0. Approved by one reviewer and merged despite a failing OSV-scanner check. | |
| #568 fix(deps): update module golang.org/x/crypto to v0.50.0 - autoclosed | fetch-service | closed | The dependency update PR for golang.org/x/crypto to v0.50.0 was autoclosed without merging. Despite passing CI and receiving approval, the branch was automatically closed, indicating it was superseded or already applied. |