Skip to content

build(deps): bump the crypto-hardware group across 1 directory with 2 updates - #13766

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/crypto-hardware-10a08ecba5
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/crypto-hardware-10a08ecba5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the crypto-hardware group with 2 updates in the / directory: github.com/zondax/ledger-filecoin-go and golang.org/x/crypto.

Updates github.com/zondax/ledger-filecoin-go from 1.2.2 to 1.2.3

Release notes

Sourced from github.com/zondax/ledger-filecoin-go's releases.

v1.2.3

What's Changed

Full Changelog: Zondax/ledger-filecoin-go@v1.2.2...v1.2.3

Commits
  • 5286e92 Merge pull request #68 from Zondax/deps/roundup-dependabot
  • 08aa025 chore(deps): roundup open Dependabot PRs
  • See full diff in compare view

Updates golang.org/x/crypto from 0.54.0 to 0.55.0

Commits
  • f44d03d go.mod: update golang.org/x dependencies
  • 5ed4944 crypto/internal/poly1305: provide optimised assembly for riscv64
  • b07833c ssh: return window credit for discarded extended data
  • d701c51 acme: fix nil pointer dereference in pebble test error reporting
  • 999d053 ssh: fix parsing of GSSAPI payloads offering multiple mechanisms
  • 90f76b8 ssh: reject certificate signature keys before recursing
  • b53964a ssh: permit empty but non-nil HostKeyAlgorithms, KeyExchanges, Ciphers, MACs
  • 626e40f ssh: drain stderr on forwarded TCP and Unix channels
  • 31914c6 x509roots/fallback: update bundle
  • f2135b8 all: clean up minor issues found by staticcheck
  • Additional commits viewable in compare view

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 1, 2026
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 1, 2026
@github-project-automation github-project-automation Bot moved this to 📌 Triage in FilOz Sep 1, 2026
@rvagg rvagg added the skip/changelog This change does not require CHANGELOG.md update label Sep 4, 2026
rvagg
rvagg previously approved these changes Sep 4, 2026
@github-project-automation github-project-automation Bot moved this from 📌 Triage to ✔️ Approved by reviewer in FilOz Sep 4, 2026
@rvagg
rvagg dismissed their stale review September 4, 2026 03:49

Withdrawing pending an updated transitive gRPC version: v1.82.1 remains affected by CVE-2026-84304; v1.83.1 contains the fix.

… updates

Bumps the crypto-hardware group with 2 updates in the / directory: [github.com/zondax/ledger-filecoin-go](https://github.com/zondax/ledger-filecoin-go) and [golang.org/x/crypto](https://github.com/golang/crypto).


Updates `github.com/zondax/ledger-filecoin-go` from 1.2.2 to 1.2.3
- [Release notes](https://github.com/zondax/ledger-filecoin-go/releases)
- [Commits](Zondax/ledger-filecoin-go@v1.2.2...v1.2.3)

Updates `golang.org/x/crypto` from 0.54.0 to 0.55.0
- [Commits](golang/crypto@v0.54.0...v0.55.0)

---
updated-dependencies:
- dependency-name: github.com/zondax/ledger-filecoin-go
  dependency-version: 1.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: crypto-hardware
- dependency-name: golang.org/x/crypto
  dependency-version: 0.55.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crypto-hardware
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): bump the crypto-hardware group with 2 updates build(deps): bump the crypto-hardware group across 1 directory with 2 updates Sep 4, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/crypto-hardware-10a08ecba5 branch from 4d973ba to dee3d36 Compare September 4, 2026 04:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file skip/changelog This change does not require CHANGELOG.md update

Projects

Status: ✔️ Approved by reviewer

Development

Successfully merging this pull request may close these issues.

1 participant