Skip to content

chore(deps): bump the go-deps group across 1 directory with 6 updates - #3

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-deps-35077ffa2f
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-deps-35077ffa2f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 9, 2026

Copy link
Copy Markdown

Bumps the go-deps group with 6 updates in the / directory:

Package From To
golang.org/x/crypto 0.49.0 0.53.0
github.com/ThalesGroup/crypto11 1.2.6 1.6.1
github.com/miekg/dns 1.1.70 1.1.72
github.com/sirosfoundation/go-cryptoutil 0.2.0 0.5.0
github.com/sirosfoundation/go-trust 0.0.0-20260108214437-2745da0592da 0.6.0
go.mongodb.org/mongo-driver 1.17.6 1.17.9

Updates golang.org/x/crypto from 0.49.0 to 0.53.0

Commits
  • 45460e0 go.mod: update golang.org/x dependencies
  • d37c95e pkcs12: limit PBKDF iteration count to prevent CPU exhaustion
  • e2ffffe ssh: reject incomplete gssapi-with-mic configurations
  • 60e158a ssh/test: isolate CLI tests from user SSH config and agent
  • 1b77d23 ssh/knownhosts: reject lines with multiple or unknown markers
  • 3872a2b ssh/knownhosts: verify declared key type matches decoded key
  • 9f72ecc ssh/knownhosts: treat only ASCII space and tab as whitespace
  • 8f405a4 ssh: validate ECDSA curve matches expected algorithm
  • bb41b3d ssh: improve DH GEX group selection using PreferredBits
  • e04e721 ssh/agent: validate ed25519 private key length in Add
  • Additional commits viewable in compare view

Updates github.com/ThalesGroup/crypto11 from 1.2.6 to 1.6.1

Release notes

Sourced from github.com/ThalesGroup/crypto11's releases.

v1.6.0

What's Changed

Full Changelog: eclipse-keypont/crypto11@v1.5.0...v1.6.0

v1.5.0

What's Changed

Full Changelog: eclipse-keypont/crypto11@v1.4.1...v1.5.0

v1.4.2-rc

  • update to go1.23.9

Full Changelog: eclipse-keypont/crypto11@v1.4.0...v1.4.2-rc

v1.4.1

What's Changed

New Contributors

Full Changelog: eclipse-keypont/crypto11@v1.4.0...v1.4.1

v1.4.0

What's Changed

New Contributors

Full Changelog: eclipse-keypont/crypto11@v1.3.0...v1.4.0

v1.3.0

What's Changed

New Contributors

Full Changelog: eclipse-keypont/crypto11@v1.2.1...v1.3.0

Commits

Updates github.com/miekg/dns from 1.1.70 to 1.1.72

Commits

Updates github.com/sirosfoundation/go-cryptoutil from 0.2.0 to 0.5.0

Commits
  • 7111e0e chore: update sbom workflow to use @​main
  • a6499dd Add SBOM generation workflow (#1)
  • 2508484 Merge pull request #3 from sirosfoundation/ai-findings-autofix/ber_test.go
  • b73dc93 fix: address review comments on encodeASN1Length
  • cae5db1 Apply suggested fix to ber_test.go from Copilot Autofix
  • 0813547 Merge pull request #4 from sirosfoundation/test/ber-coverage
  • deb8673 test: increase ber.go coverage from 61.4% to 91.6%
  • e8111f3 Update README with additional badges
  • cbf3b87 Merge pull request #2 from sirosfoundation/copilot/add-error-checks-for-signa...
  • 3e51f14 Add error checks for key generation, signing, and marshaling in TestNormalize...
  • Additional commits viewable in compare view

Updates github.com/sirosfoundation/go-trust from 0.0.0-20260108214437-2745da0592da to 0.6.0

Release notes

Sourced from github.com/sirosfoundation/go-trust's releases.

v0.6.0

No release notes provided.

v0.5.0

No release notes provided.

v0.5.0-oidf1

No release notes provided.

v0.4.1

No release notes provided.

v0.4.0

What's Changed

New Contributors

Full Changelog: sirosfoundation/go-trust@v0.3.0...v0.4.0

Commits

Updates go.mongodb.org/mongo-driver from 1.17.6 to 1.17.9

Release notes

Sourced from go.mongodb.org/mongo-driver's releases.

MongoDB Go Driver 1.17.9

The MongoDB Go Driver Team is pleased to release version 1.17.9 of the official MongoDB Go Driver.

Release Highlights

This release fixes a bug caused by variable shadowing.

What's Changed

🐛 Fixed

Full Changelog: mongodb/mongo-go-driver@v1.17.8...v1.17.9

For a full list of tickets included in this release, please see the list of fixed issues.

Documentation for the Go Driver can be found on pkg.go.dev and the MongoDB documentation site. BSON library documentation is also available on pkg.go.dev. Questions and inquiries can be asked on the MongoDB Developer Community. Bugs can be reported in the Go Driver project in the MongoDB JIRA where a list of current issues can be found. Your feedback on the Go Driver is greatly appreciated!

MongoDB Go Driver 1.17.8

The MongoDB Go Driver Team is pleased to release version 1.17.8 of the official MongoDB Go Driver.

Release Highlights

This release adds a deprecation notice to go.mongodb.org/mongo-driver, indicating users should migrate to go.mongodb.org/mongo-driver/v2. See the V2 migration guide for more information.

What's Changed

✨ New Features

Full Changelog: mongodb/mongo-go-driver@v1.17.7...v1.17.8

For a full list of tickets included in this release, please see the list of fixed issues.

Documentation for the Go Driver can be found on pkg.go.dev and the MongoDB documentation site. BSON library documentation is also available on pkg.go.dev. Questions and inquiries can be asked on the MongoDB Developer Community. Bugs can be reported in the Go Driver project in the MongoDB JIRA where a list of current issues can be found. Your feedback on the Go Driver is greatly appreciated!

MongoDB Go Driver 1.17.7

The MongoDB Go Driver Team is pleased to release version 1.17.7 of the official MongoDB Go Driver.

Release Highlights

This release removes the deprecation notice from options.MergeClientOptions and fixes buffer handling in GSSAPI error description and username functions.

What's Changed

... (truncated)

Commits
  • 3b10ae6 BUMP v1.17.9
  • f490802 GODRIVER-3793 Fix variable shadowing in rtt monitor (#2317)
  • 5ac5a1e BUMP v1.17.8
  • f378649 Revert dry-run release bump
  • 08c2b98 BUMP v1.17.8
  • fafe527 GODRIVER-3773 Deprecate v1 (#2312)
  • eb01e7e BUMP v1.17.7
  • 3c55093 GODRIVER-3766 Remove deprecation notice for MergeClientOptions (#2294)
  • f6163bf GODRIVER-3770 Remove libasan from gssapi tests in CI (#2293)
  • 6798963 GODRIVER-3770 Fix buffer handling in GSSAPI error description and username fu...
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jun 9, 2026
Bumps the go-deps group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.49.0` | `0.53.0` |
| [github.com/ThalesGroup/crypto11](https://github.com/ThalesGroup/crypto11) | `1.2.6` | `1.6.1` |
| [github.com/miekg/dns](https://github.com/miekg/dns) | `1.1.70` | `1.1.72` |
| [github.com/sirosfoundation/go-cryptoutil](https://github.com/sirosfoundation/go-cryptoutil) | `0.2.0` | `0.5.0` |
| [github.com/sirosfoundation/go-trust](https://github.com/sirosfoundation/go-trust) | `0.0.0-20260108214437-2745da0592da` | `0.6.0` |
| [go.mongodb.org/mongo-driver](https://github.com/mongodb/mongo-go-driver) | `1.17.6` | `1.17.9` |



Updates `golang.org/x/crypto` from 0.49.0 to 0.53.0
- [Commits](golang/crypto@v0.49.0...v0.53.0)

Updates `github.com/ThalesGroup/crypto11` from 1.2.6 to 1.6.1
- [Release notes](https://github.com/ThalesGroup/crypto11/releases)
- [Commits](https://github.com/ThalesGroup/crypto11/commits/v1.6.1)

Updates `github.com/miekg/dns` from 1.1.70 to 1.1.72
- [Commits](miekg/dns@v1.1.70...v1.1.72)

Updates `github.com/sirosfoundation/go-cryptoutil` from 0.2.0 to 0.5.0
- [Release notes](https://github.com/sirosfoundation/go-cryptoutil/releases)
- [Commits](sirosfoundation/go-cryptoutil@v0.2.0...v0.5.0)

Updates `github.com/sirosfoundation/go-trust` from 0.0.0-20260108214437-2745da0592da to 0.6.0
- [Release notes](https://github.com/sirosfoundation/go-trust/releases)
- [Changelog](https://github.com/sirosfoundation/go-trust/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sirosfoundation/go-trust/commits/v0.6.0)

Updates `go.mongodb.org/mongo-driver` from 1.17.6 to 1.17.9
- [Release notes](https://github.com/mongodb/mongo-go-driver/releases)
- [Commits](mongodb/mongo-go-driver@v1.17.6...v1.17.9)

---
updated-dependencies:
- dependency-name: github.com/miekg/dns
  dependency-version: 1.1.72
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/sirosfoundation/go-cryptoutil
  dependency-version: 0.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/sirosfoundation/go-trust
  dependency-version: 0.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/ThalesGroup/crypto11
  dependency-version: 1.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: go.mongodb.org/mongo-driver
  dependency-version: 1.17.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: golang.org/x/crypto
  dependency-version: 0.53.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump the go-deps group with 6 updates chore(deps): bump the go-deps group across 1 directory with 6 updates Jun 16, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/go-deps-35077ffa2f branch from f4ce906 to 1b9747b Compare June 16, 2026 02:24
@dependabot @github

dependabot Bot commented on behalf of github Jul 14, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 14, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/go-deps-35077ffa2f branch July 14, 2026 02:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants