Skip to content

Update golang.org/x/crypto and grpc - #8

Merged
johnmaguire merged 1 commit into
mainfrom
dependabot-catchup
Nov 6, 2026
Merged

johnmaguire merged 1 commit into
mainfrom
dependabot-catchup

Conversation

@nbrownus

@nbrownus nbrownus commented Nov 6, 2026

Copy link
Copy Markdown
Contributor

Fixes the 12 open critical and high Dependabot alerts. Vanta wants them closed by Nov 28.

  • golang.org/x/crypto v0.50.0 to v0.52.0 (indirect)
  • google.golang.org/grpc v1.79.3 to v1.83.1 (indirect), which brings x/net, x/sys, x/text and genproto along

Builds, go vet is clean, and the client and provider tests pass locally.

Fixes the open Dependabot alerts on golang.org/x/crypto (v0.52.0) and google.golang.org/grpc (v1.83.1).
@johnmaguire
johnmaguire merged commit 0c5b77b into main Nov 6, 2026
3 checks passed
@johnmaguire
johnmaguire deleted the dependabot-catchup branch November 6, 2026 13:49
@johnmaguire

Copy link
Copy Markdown
Member

Nice! I was going to put up the same PR today.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants