Skip to content

fix(deps): bump golang.org/x/crypto from 0.49.0 to 0.51.0 in /lib/ocrypto in the external group across 1 directory#3462

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/lib/ocrypto/external-f5d6e98b80
Open

fix(deps): bump golang.org/x/crypto from 0.49.0 to 0.51.0 in /lib/ocrypto in the external group across 1 directory#3462
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/lib/ocrypto/external-f5d6e98b80

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 12, 2026 •
edited
Loading

Bumps the external group with 1 update in the /lib/ocrypto directory: golang.org/x/crypto.

Updates golang.org/x/crypto from 0.49.0 to 0.51.0

Commits
  • b8a14a8 go.mod: update golang.org/x dependencies
  • 9d9d507 x509roots/fallback/bundle: fix bundle test with Go 1.27+
  • fd0b90d acme: include Problem in OrderError.Error
  • b9e5359 pbkdf2: turn into a wrapper for crypto/pbkdf2
  • cc0e4fc hkdf: forward Extract to the standard library
  • a8e9237 x509roots/fallback: update bundle
  • 03ca0dc go.mod: update golang.org/x dependencies
  • 8400f4a ssh: respect signer's algorithm preference in pickSignatureAlgorithm
  • 81c6cb3 ssh: swap cbcMinPaddingSize to cbcMinPacketSize to get encLength
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels May 12, 2026
@dependabot dependabot Bot requested review from a team as code owners May 12, 2026 01:03
@dependabot dependabot Bot mentioned this pull request May 12, 2026
Closed
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 12, 2026

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 172.33472ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 99.326352ms

Benchmark Statistics

Name № Requests Avg Duration Min Duration Max Duration

Bulk Benchmark Results

Metric Value
Total Decrypts 100
Successful Decrypts 100
Failed Decrypts 0
Total Time 443.404402ms
Throughput 225.53 requests/second

TDF3 Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 43.332712629s
Average Latency 431.831144ms
Throughput 115.39 requests/second

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 12, 2026

X-Test Results

✅ go-pull-3462
bats-test-results
✅ go-v0.9.0
✅ java-pull-3462
✅ js-pull-3462
✅ java-v0.9.0
✅ js-v0.9.0
cukes-report
govulncheck-failure-8
opentdfplatformAPZBB6.dockerbuild
govulncheck-failure-3
govulncheck-failure-2
govulncheck-failure-0
govulncheck-failure-1
govulncheck-failure-5

@dependabot dependabot Bot force-pushed the dependabot/go_modules/lib/ocrypto/external-f5d6e98b80 branch from d4e414f to 8cfb60b Compare May 12, 2026 22:31
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 12, 2026

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 192.140814ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 102.639359ms

Benchmark Statistics

Name № Requests Avg Duration Min Duration Max Duration

Bulk Benchmark Results

Metric Value
Total Decrypts 100
Successful Decrypts 100
Failed Decrypts 0
Total Time 402.2122ms
Throughput 248.62 requests/second

TDF3 Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 43.501185319s
Average Latency 433.407553ms
Throughput 114.94 requests/second

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 12, 2026

X-Test Results

✅ go-pull-3462
✅ go-v0.9.0
✅ java-pull-3462
✅ java-v0.9.0
✅ js-pull-3462
bats-test-results
✅ js-v0.9.0
cukes-report
opentdfplatformQCQFVV.dockerbuild
govulncheck-failure-8
govulncheck-failure-1
govulncheck-failure-3
govulncheck-failure-5
govulncheck-failure-2
govulncheck-failure-0

@dependabot dependabot Bot force-pushed the dependabot/go_modules/lib/ocrypto/external-f5d6e98b80 branch from 8cfb60b to 1ab3678 Compare May 13, 2026 18:24
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 13, 2026

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 194.188592ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 108.614248ms

Benchmark Statistics

Name № Requests Avg Duration Min Duration Max Duration

Bulk Benchmark Results

Metric Value
Total Decrypts 100
Successful Decrypts 100
Failed Decrypts 0
Total Time 423.295884ms
Throughput 236.24 requests/second

TDF3 Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 43.965925247s
Average Latency 437.706357ms
Throughput 113.72 requests/second

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 13, 2026

X-Test Results

✅ go-pull-3462
bats-test-results
✅ go-v0.9.0
✅ java-pull-3462
✅ js-pull-3462
✅ java-v0.9.0
✅ js-v0.9.0
cukes-report
opentdfplatformNHT0J6.dockerbuild
govulncheck-failure-3
govulncheck-failure-8
govulncheck-failure-1
govulncheck-failure-5
govulncheck-failure-2
govulncheck-failure-0

@dependabot dependabot Bot force-pushed the dependabot/go_modules/lib/ocrypto/external-f5d6e98b80 branch from 1ab3678 to f1032ac Compare May 14, 2026 17:55
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 14, 2026

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 205.578425ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 106.343171ms

Benchmark Statistics

Name № Requests Avg Duration Min Duration Max Duration

Bulk Benchmark Results

Metric Value
Total Decrypts 100
Successful Decrypts 100
Failed Decrypts 0
Total Time 439.951813ms
Throughput 227.30 requests/second

TDF3 Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 46.315813825s
Average Latency 461.094792ms
Throughput 107.95 requests/second

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 14, 2026

X-Test Results

✅ go-pull-3462
bats-test-results
✅ java-pull-3462
✅ go-v0.9.0
✅ java-v0.9.0
✅ js-pull-3462
✅ js-v0.9.0
cukes-report
opentdfplatformJGSEU0.dockerbuild
govulncheck-failure-1
govulncheck-failure-8
govulncheck-failure-3
govulncheck-failure-5
govulncheck-failure-0
govulncheck-failure-2

@dependabot dependabot Bot force-pushed the dependabot/go_modules/lib/ocrypto/external-f5d6e98b80 branch from f1032ac to 5c384eb Compare May 15, 2026 17:55
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 15, 2026

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 174.765565ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 94.674859ms

Benchmark Statistics

Name № Requests Avg Duration Min Duration Max Duration

Bulk Benchmark Results

Metric Value
Total Decrypts 100
Successful Decrypts 100
Failed Decrypts 0
Total Time 446.978019ms
Throughput 223.72 requests/second

TDF3 Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 44.129956895s
Average Latency 439.793285ms
Throughput 113.30 requests/second

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 15, 2026

X-Test Results

✅ go@main-pull-3462
bats-test-results
✅ go@main-v0.9.0
✅ java@main-pull-3462
✅ java@main-v0.9.0
✅ js@main-pull-3462
✅ js@main-v0.9.0
cukes-report
opentdfplatformBD9VE0.dockerbuild
govulncheck-failure-3
govulncheck-failure-2
govulncheck-failure-8
govulncheck-failure-5
govulncheck-failure-1
govulncheck-failure-0

@dependabot dependabot Bot force-pushed the dependabot/go_modules/lib/ocrypto/external-f5d6e98b80 branch from 5c384eb to 833f314 Compare May 19, 2026 03:21
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 19, 2026

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 184.45839ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 90.142073ms

Benchmark Statistics

Name № Requests Avg Duration Min Duration Max Duration

Bulk Benchmark Results

Metric Value
Total Decrypts 100
Successful Decrypts 100
Failed Decrypts 0
Total Time 427.789045ms
Throughput 233.76 requests/second

TDF3 Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 44.017624712s
Average Latency 438.432096ms
Throughput 113.59 requests/second

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 19, 2026

X-Test Results

✅ go@main-pull-3462
✅ go@main-v0.9.0
✅ java@main-pull-3462
✅ js@main-pull-3462
✅ java@main-v0.9.0
✅ js@main-v0.9.0
cukes-report
opentdfplatformZWS71O.dockerbuild
govulncheck-failure-8
govulncheck-failure-1
govulncheck-failure-3
govulncheck-failure-0
govulncheck-failure-2
govulncheck-failure-5

@dependabot
fix(deps): bump golang.org/x/crypto
4424958 
Bumps the external group with 1 update in the /lib/ocrypto directory: [golang.org/x/crypto](https://github.com/golang/crypto).


Updates `golang.org/x/crypto` from 0.49.0 to 0.51.0
- [Commits](golang/crypto@v0.49.0...v0.51.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/go_modules/lib/ocrypto/external-f5d6e98b80 branch from 833f314 to 4424958 Compare May 20, 2026 02:10
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 20, 2026

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 135.659858ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 82.291882ms

Benchmark Statistics

Name № Requests Avg Duration Min Duration Max Duration

Bulk Benchmark Results

Metric Value
Total Decrypts 100
Successful Decrypts 100
Failed Decrypts 0
Total Time 334.381157ms
Throughput 299.06 requests/second

TDF3 Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 34.993871321s
Average Latency 348.454495ms
Throughput 142.88 requests/second

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 20, 2026

⚠️ Govulncheck found vulnerabilities ⚠️

The following modules have known vulnerabilities:

  • examples
  • otdfctl
  • sdk
  • service
  • lib/fixtures
  • tests-bdd

See the workflow run for details.

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 20, 2026

X-Test Results

✅ go@main-pull-3462
✅ go@main-v0.9.0
✅ java@main-pull-3462
✅ java@main-v0.9.0
✅ js@main-pull-3462
✅ js@main-v0.9.0
cukes-report
opentdfplatform8O6ZE5.dockerbuild
govulncheck-failure-3
govulncheck-failure-8
govulncheck-failure-2
govulncheck-failure-5
govulncheck-failure-0
govulncheck-failure-1

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

comp:lib:ocrypto dependencies Pull requests that update a dependency file go Pull requests that update Go code size/xs

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants