Skip to content

chore(deps): bump the external group across 1 directory with 2 updates - #1017

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/go_modules/dev/external-798e4131c5
Open

dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/go_modules/dev/external-798e4131c5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the external group with 2 updates in the / directory: github.com/cloudflare/cfssl and golang.org/x/net.

Updates github.com/cloudflare/cfssl from 1.6.5 to 1.7.1

Release notes

Sourced from github.com/cloudflare/cfssl's releases.

v1.7.1

Changelog

  • ab47f0d984778865b3f5b5adf6ba336a15b96c31 Merge pull request #1450 from upodroid/k8s-arches
  • f26318e529daed741c4d24d8c0fae0270d1435eb build releases for riscv64 and ppc64le

v1.7.0

Changelog

  • 5c9bfdfe467e4f17966af9a20b49c0a9dee130ea Add scripts to regenerate {api,bundler,ubiquity}'s testdata
  • 2adc622098396c4b83672b5dd7651a38e6bd0ee7 Create semgrep.yml
  • faaff55b279b375f62632875b2da82754e313c10 Fixes #1237 partially by updating test data certificates to be valid
  • dd8f9ef9972b61f6bf26299e45cab04326b4f7e4 Github actions linter uses golangci-lint@v1.57
  • adad8d85bdef30103bfc3eb0268c139dceb414c4 Merge pull request #1 from ang-cloudflare/fix-pr-1434-review-findings
  • 12a0addeae31a6bf4c49afbda9531411a628e0f9 Merge pull request #1055 from akoserwal/master
  • 361a3a54f913d85daedbc43499dddd6ed68001eb Merge pull request #1364 from cloudflare/dependabot/go_modules/golang.org/x/crypto-0.21.0
  • 03f268137ca459ea7aa159bf1886e3e22a75418d Merge pull request #1365 from cloudflare/dependabot/go_modules/github.com/go-sql-driver/mysql-1.8.0
  • d6d030a38b1426c8c7632186cd41f4cdfe71c2c3 Merge pull request #1368 from cloudflare/dependabot/go_modules/github.com/google/certificate-transparency-go-1.1.8
  • 91b63b5bb6cc84899849f1aa352c3a44e66b42b9 Merge pull request #1395 from cloudflare/hrushikeshdeshpande-creating-semgrep-yml
  • cb0a0a3b9daf7ba477e106f2f013dd68267f0190 Merge pull request #1408 from mitch292/mitch292/certificate-transparency-go-bump
  • 730ee589c51ba8e1c4a8b704849915274d03b8d3 Merge pull request #1409 from mitch292/mitch292/revert-ct-go-upgrade
  • 1c1bc0be9c8ca9ff17757979947137a2cccf0bd1 Merge pull request #1410 from mitch292/mitch292/1237-fix-test-cases
  • 6d2d0b221d8a0880220bfefeb00c3f8a2646f53a Merge pull request #1412 from mitch292/mitch292/fix-linting
  • b898d2f02a1504d7f4a585d32ed6a48c28c748af Merge pull request #1415 from mitch292/mitch292/go-version
  • ed8df49712657524e8647cb7a9576422baa2faa1 Merge pull request #1416 from cloudflare/mschwarzl/dockerignore
  • 82408a199099610d358a0971598c48a8802cae8a Merge pull request #1434 from elukey/master
  • e429e72785df640e0dd3320dc895d4dd03c66cdb Merge pull request #1436 from mitch292/fix-copy-extensions-security-bypass
  • 7d5fdbba3b50af687f2969380f6495fcb766fa3f Merge pull request #1445 from ang-cloudflare/ang/SECENG-13957
  • e71a023cf3e626cf0f5918b61e35c9210fa7a973 Merge pull request #1447 from cloudflare/dianatran/goreleaser-v2
  • 800f0c598693e3ece8de1cb8c0369f38b0e064b3 Migrate goreleaser config to v2 and limit build parallelism
  • 62db3517d76250c5ff72454479b3caec0f04e2da Regenerate api's testdata
  • 214a1542c73570eda26ed3004f0ffe71c91957ba Regenerate bundler's testdata
  • f8821d5ee2580d7a3dd92099d1ca328e9d74da34 Regenerate ubiquity's testdata
  • 14f61be73922e6aebb8643da11749396c1b36ba4 Revert "Upgrade certificate-transparency-go from v1.1.8 to v1.3.1"
  • 05f2d4f4a7438b74e8fb0ffe675fa7e1c0783f36 SECENG-13957: feat: add ML-DSA-44/65/87 post-quantum key support
  • 038e4d2d9c553bd005aaedc4ef4252dd2b7cb73d Update README
  • 2bc4eb0b45ebe4215d0de8706dbaf719dfa995a0 Update READMe
  • 2312d45cb95ed214d2a5c39096ac243aabe2dcd8 Update certstore_development and sqlit_test dbs after testdata update
  • a40f86c2accf3b46c04b7b3ed02135f98eb9210d Update repository to reflect required min go version of 1.20
  • d3645c109d4bd68ac47d497fdfce90ab8d5eb44d Update semgrep.yml
  • 1a73d78a1852001b7b9c21f3eceea0e721ea6a6c Upgrade certificate-transparency-go from v1.1.8 to v1.3.1
  • b4650b5dac4b567206399a44ac3edb4d1f86a7a2 build(deps): bump github.com/go-sql-driver/mysql from 1.7.1 to 1.8.0
  • a421aee8370e9323f00a284fb6be14a3abdcf8ee build(deps): bump github.com/google/certificate-transparency-go
  • d13ac5d73889ff76cc769995bfbbde431c0e1341 build(deps): bump golang.org/x/crypto from 0.19.0 to 0.21.0
  • ea2095dd50d3250b5d8ec830ce82189e0b5888f2 fix: preserve regenerated fixture coverage
  • 8994bdd4398559c224da53efab300128974b33a0 fix: prevent CSR extensions from overriding CA-managed key usage in copy_extensions
  • cd8a4ded61b2df01b3d520361d966c4e581bc02e ignore .git to .dockerignore
Commits
  • ab47f0d Merge pull request #1450 from upodroid/k8s-arches
  • f26318e build releases for riscv64 and ppc64le
  • e71a023 Merge pull request #1447 from cloudflare/dianatran/goreleaser-v2
  • 800f0c5 Migrate goreleaser config to v2 and limit build parallelism
  • 7d5fdbb Merge pull request #1445 from ang-cloudflare/ang/SECENG-13957
  • 05f2d4f SECENG-13957: feat: add ML-DSA-44/65/87 post-quantum key support
  • 82408a1 Merge pull request #1434 from elukey/master
  • adad8d8 Merge pull request #1 from ang-cloudflare/fix-pr-1434-review-findings
  • ea2095d fix: preserve regenerated fixture coverage
  • e429e72 Merge pull request #1436 from mitch292/fix-copy-extensions-security-bypass
  • Additional commits viewable in compare view

Updates golang.org/x/net from 0.58.0 to 0.61.0

Commits
  • c1d31df go.mod: update golang.org/x dependencies
  • 8456a20 quic: properly check for allowed frame types in a packet
  • 18ece0c http2: prevent crash due to HPACK encoder race
  • 2d03f9d http2: avoid 2x refund on stream close with buffered data
  • cc7d34f http2: avoid excessive work on initial window changes
  • 57f4235 http2: apply header limits to Trailer headers too
  • 01e3d03 http2: coalesce dials via wrapped Transport.RoundTrip
  • 2824783 http2: delete malformed framing-related headers
  • b13c0c1 internal/http3: delete HTTP/3 package
  • 520c891 quic: off-path support in loss/congestion/rtt
  • Additional commits viewable in compare view

@dependabot dependabot Bot added the Type: Maintenance Updating phrasing or wording to make things clearer or removing ambiguity. label Oct 14, 2026
@coderabbitai

coderabbitai Bot commented Oct 14, 2026 •

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 9d1aa073-cf7a-40c8-adfc-67c9ddd5a45a

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

Bumps the external group with 2 updates in the / directory: [github.com/cloudflare/cfssl](https://github.com/cloudflare/cfssl) and [golang.org/x/net](https://github.com/golang/net).


Updates `github.com/cloudflare/cfssl` from 1.6.5 to 1.7.1
- [Release notes](https://github.com/cloudflare/cfssl/releases)
- [Changelog](https://github.com/cloudflare/cfssl/blob/master/CHANGELOG)
- [Commits](cloudflare/cfssl@v1.6.5...v1.7.1)

Updates `golang.org/x/net` from 0.58.0 to 0.61.0
- [Commits](golang/net@v0.58.0...v0.61.0)

---
updated-dependencies:
- dependency-name: github.com/cloudflare/cfssl
  dependency-version: 1.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: golang.org/x/net
  dependency-version: 0.61.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump the external group with 2 updates chore(deps): bump the external group across 1 directory with 2 updates Oct 20, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/dev/external-798e4131c5 branch from 30adb9d to 1ad586a Compare October 20, 2026 05:31
@dogancanbakir

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Oct 20, 2026

Copy link
Copy Markdown
Contributor Author

Looks like this PR is already up-to-date with dev! If you'd still like to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Type: Maintenance Updating phrasing or wording to make things clearer or removing ambiguity.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant