Skip to content

Bump golang.org/x/crypto from 0.45.0 to 0.52.0 in /examples/cost-analysis-export - #5895

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/examples/cost-analysis-export/golang.org/x/crypto-0.52.0
Open

Bump golang.org/x/crypto from 0.45.0 to 0.52.0 in /examples/cost-analysis-export#5895
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/examples/cost-analysis-export/golang.org/x/crypto-0.52.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 5, 2026

Copy link
Copy Markdown
Contributor

Bumps golang.org/x/crypto from 0.45.0 to 0.52.0.

Commits
  • a1c0d99 go.mod: update golang.org/x dependencies
  • 3c7c869 ssh: fix deadlock on unexpected channel responses
  • 533fb3f ssh: fix source-address critical option bypass
  • abbc44d ssh: fix incorrect operator order
  • e052873 ssh: fix infinite loop on large channel writes due to integer overflow
  • b61cf85 ssh: enforce user presence verification for security keys
  • 9c2cd33 ssh: enforce strict limits on DSA key parameters
  • 8907318 ssh: reject RSA keys with excessively large moduli
  • ffd87b4 ssh: fix panic when authority callbacks are nil
  • 4e7a738 ssh: fix deadlock on unexpected global responses
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.45.0 to 0.52.0.
- [Commits](golang/crypto@v0.45.0...v0.52.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.52.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 5, 2026
@dependabot
dependabot Bot requested review from a team and a lite review from Copilot August 5, 2026 19:43
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 5, 2026
@dependabot
dependabot Bot requested review from Daniel Sol (danielsollondon) and removed request for Copilot August 5, 2026 19:43
@dependabot dependabot Bot added the go Pull requests that update go code label Aug 5, 2026
@dependabot
dependabot Bot requested a review from Copilot August 5, 2026 19:43
@dependabot
dependabot Bot requested review from a team and Jorge Palma (palma21) as code owners August 5, 2026 19:43

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Note

Copilot was unable to run its full agentic suite in this review.

Updates the cost-analysis-export example’s Go toolchain/dependency metadata to newer Go and golang.org/x/* module versions.

Changes:

  • Bumped the go version directive in go.mod
  • Updated indirect golang.org/x/crypto, golang.org/x/net, golang.org/x/sys, and golang.org/x/text versions (and corresponding go.sum entries)

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.

File Description
examples/cost-analysis-export/go.mod Updates the Go language version directive and bumps indirect golang.org/x/* dependencies
examples/cost-analysis-export/go.sum Refreshes checksums to match the updated transitive module versions

module github.com/Azure/aks-cost-analysis-export

go 1.24.3
go 1.25.0
@github-advanced-security

Copy link
Copy Markdown

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

  • The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
  • Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
  • You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants