Skip to content

Bump the all group across 1 directory with 3 updates - #336

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/all-065113a914
Closed

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/all-065113a914

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 15, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the all group with 2 updates in the / directory: go.step.sm/crypto and golang.org/x/net.

Updates go.step.sm/crypto from 0.89.0 to 0.90.0

Release notes

Sourced from go.step.sm/crypto's releases.

Release v0.90.0

What's Changed

Dependencies

Full Changelog: smallstep/crypto@v0.89.0...v0.90.0

Release v0.90.0-rc2

No release notes provided.

Release v0.90.0-rc1

No release notes provided.

Commits
  • 142c769 v0.90.0 release
  • 6cbffdf Merge pull request #1123 from smallstep/mariano/mldsa-stub-fix
  • e476767 Complete mldsa package
  • e07e85b Merge pull request #1098 from smallstep/mariano/pq-cloudkms
  • 9b9058f Upgrade x/crypto
  • 1d89cdd Modernize benchmarks and use b.Lool()
  • 3e3cd44 Clarify comments for generate methods.
  • f2cf7e1 Allow ML-DSA-xx, Ed25519, and X25519 as kty
  • 44b50c6 Run go fix on windows, linux, and using Go 1.26.8
  • c4e93fb Merge pull request #1118 from smallstep/dependabot/go_modules/github.com/aws/...
  • Additional commits viewable in compare view

Updates golang.org/x/net from 0.58.0 to 0.59.0

Commits
  • 540d04c go.mod: update golang.org/x dependencies
  • 20eef7f quic: clear fast-path receive buffer on stream reset
  • c23af1b internal/http3: fix compilation error due to missed symbol name update
  • eda109f internal/http3: send appropriate error codes in STOP_SENDING frames
  • 12e0501 internal/http3: server header size limits
  • d89285e quic: add Stream.StopSending, and rework stream/application errors
  • d34deae quic: ensure Endpoint.Close waits for connection loops to exit
  • 55577aa http2: use IDNA Lookup profile, not raw Punycode translation
  • b22627e internal/http3: handle a nil TLSConfig in newQUICConfig
  • 6e98b0d internal/http3: report endpoint creation errors from initEndpoint
  • Additional commits viewable in compare view

Updates google.golang.org/genproto/googleapis/rpc from 0.0.0-20260803160001-6ac0973c030d to 0.0.0-20260807164820-c8921c73eeea

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all group with 2 updates in the / directory: [go.step.sm/crypto](https://github.com/smallstep/crypto) and [golang.org/x/net](https://github.com/golang/net).


Updates `go.step.sm/crypto` from 0.89.0 to 0.90.0
- [Release notes](https://github.com/smallstep/crypto/releases)
- [Commits](smallstep/crypto@v0.89.0...v0.90.0)

Updates `golang.org/x/net` from 0.58.0 to 0.59.0
- [Commits](golang/net@v0.58.0...v0.59.0)

Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20260803160001-6ac0973c030d to 0.0.0-20260807164820-c8921c73eeea
- [Commits](https://github.com/googleapis/go-genproto/commits)

---
updated-dependencies:
- dependency-name: go.step.sm/crypto
  dependency-version: 0.90.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: golang.org/x/net
  dependency-version: 0.59.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: google.golang.org/genproto/googleapis/rpc
  dependency-version: 0.0.0-20260807164820-c8921c73eeea
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 15, 2026
@dependabot
dependabot Bot requested review from a team and maraino as code owners September 15, 2026 15:42
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 15, 2026
@github-actions github-actions Bot added the needs triage Waiting for discussion / prioritization by team label Sep 15, 2026
@github-actions
github-actions Bot enabled auto-merge September 15, 2026 15:43
@dependabot @github

dependabot Bot commented on behalf of github Sep 22, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 22, 2026
auto-merge was automatically disabled September 22, 2026 15:42

Pull request was closed

@dependabot
dependabot Bot deleted the dependabot/go_modules/all-065113a914 branch September 22, 2026 15:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code needs triage Waiting for discussion / prioritization by team

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant