Skip to content

Bump golang.org/x/crypto from 0.45.0 to 0.52.0#296

Open
masatomo57 wants to merge 2 commits into
rubenv:masterfrom
masatomo57:bump-x-crypto-v0.52.0
Open

Bump golang.org/x/crypto from 0.45.0 to 0.52.0#296
masatomo57 wants to merge 2 commits into
rubenv:masterfrom
masatomo57:bump-x-crypto-v0.52.0

Conversation

@masatomo57

Copy link
Copy Markdown

Updated golang.org/x/crypto to v0.52.0 to address CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-42508, CVE-2026-46595.

golang.org/x/crypto v0.52.0 requires go 1.25.0, so the go directive and CI matrix have been updated accordingly (1.23/1.24 -> 1.24/1.25).

Updated golang.org/x/crypto to v0.52.0 to address CVE-2026-39830,
CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834,
CVE-2026-42508, CVE-2026-46595.

golang.org/x/crypto v0.52.0 requires go 1.25.0, so the go directive
and CI matrix have been updated accordingly (1.23/1.24 -> 1.24/1.25).
@masatomo57

Copy link
Copy Markdown
Author

Hi @rubenv, friendly ping on this PR.
Let me know if any changes are needed. Thanks!

@rubenv

rubenv commented Jun 19, 2026

Copy link
Copy Markdown
Owner

@masatomo57 still something wrong with the linter.

golangci-lint v2.1 is built with Go 1.24 and cannot type-check code
whose go.mod declares go 1.25.0, causing the lint job to fail after the
Go version bump. v2.4+ adds Go 1.25 support; use v2.5.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01W4bfsyYKQNj8aP5rGsCFkf
@masatomo57

Copy link
Copy Markdown
Author

@rubenv
This PR bumps go.mod to Go 1.25, but v2.1 doesn't support Go 1.25 (added in v2.4). I've bumped it to v2.5 — golangci-lint run ./... passes locally now. Could you re-run CI? 🙏

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants