Repository navigation

Update module golang.org/x/crypto to v0.59.0 [SECURITY] - #606

Open

renovate-update-app[bot] wants to merge 1 commit into

stackstate-7.78.2from

renovate/go-golang.org-x-crypto-vulnerability

Open

Update module golang.org/x/crypto to v0.59.0 [SECURITY]#606
renovate-update-app[bot] wants to merge 1 commit into
stackstate-7.78.2from
renovate/go-golang.org-x-crypto-vulnerability

renovate-update-app Bot commented Nov 12, 2026

This PR contains the following updates:

Package	Change	Age	Confidence
golang.org/x/crypto	`v0.58.0` → `v0.59.0`

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

More information

Details

The golang.org/x/crypto/openpgp package is unsafe by design, has numerous known security issues, is not maintained, and should not be used.

If you are required to interoperate with OpenPGP systems and need a maintained package, consider github.com/ProtonMail/go-crypto/openpgp which is a maintained fork that aims to be a drop-in replacement for this package.

Severity

Unknown

References

This data is provided by OSV and the Go Vulnerability Database (CC-BY 4.0).

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.


          Update module golang.org/x/crypto to v0.59.0 [SECURITY]

3672a48

renovate-update-app Bot added the security label

renovate-update-app Bot enabled auto-merge

November 12, 2026 01:34

renovate-update-app Bot commented Nov 12, 2026

Author

ℹ️ Artifact update notice

File name: comp/core/tagger/fx-remote/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

3 additional dependencies were updated

Details:

Package	Change
`golang.org/x/sync`	`v0.24.0` -> `v0.25.0`
`golang.org/x/sys`	`v0.49.0` -> `v0.50.0`
`golang.org/x/text`	`v0.43.0` -> `v0.44.0`

File name: comp/core/tagger/impl-remote/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

3 additional dependencies were updated

Details:

Package	Change
`golang.org/x/sync`	`v0.24.0` -> `v0.25.0`
`golang.org/x/sys`	`v0.49.0` -> `v0.50.0`
`golang.org/x/text`	`v0.43.0` -> `v0.44.0`

File name: comp/otelcol/collector-contrib/impl/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

6 additional dependencies were updated

Details:

Package	Change
`golang.org/x/mod`	`v0.41.0` -> `v0.42.0`
`golang.org/x/sync`	`v0.24.0` -> `v0.25.0`
`golang.org/x/sys`	`v0.49.0` -> `v0.50.0`
`golang.org/x/term`	`v0.47.0` -> `v0.48.0`
`golang.org/x/text`	`v0.43.0` -> `v0.44.0`
`golang.org/x/tools`	`v0.51.0` -> `v0.52.0`

File name: comp/otelcol/ddflareextension/impl/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

6 additional dependencies were updated

Details:

Package	Change
`golang.org/x/mod`	`v0.41.0` -> `v0.42.0`
`golang.org/x/sync`	`v0.24.0` -> `v0.25.0`
`golang.org/x/sys`	`v0.49.0` -> `v0.50.0`
`golang.org/x/term`	`v0.47.0` -> `v0.48.0`
`golang.org/x/text`	`v0.43.0` -> `v0.44.0`
`golang.org/x/tools`	`v0.51.0` -> `v0.52.0`

File name: comp/otelcol/ddprofilingextension/impl/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

4 additional dependencies were updated

Details:

Package	Change
`golang.org/x/sync`	`v0.24.0` -> `v0.25.0`
`golang.org/x/sys`	`v0.49.0` -> `v0.50.0`
`golang.org/x/term`	`v0.47.0` -> `v0.48.0`
`golang.org/x/text`	`v0.43.0` -> `v0.44.0`

File name: comp/otelcol/otlp/components/exporter/datadogexporter/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

3 additional dependencies were updated

Details:

Package	Change
`golang.org/x/sync`	`v0.24.0` -> `v0.25.0`
`golang.org/x/sys`	`v0.49.0` -> `v0.50.0`
`golang.org/x/text`	`v0.43.0` -> `v0.44.0`

File name: comp/otelcol/otlp/components/exporter/logsagentexporter/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

3 additional dependencies were updated

Details:

Package	Change
`golang.org/x/sync`	`v0.24.0` -> `v0.25.0`
`golang.org/x/sys`	`v0.49.0` -> `v0.50.0`
`golang.org/x/text`	`v0.43.0` -> `v0.44.0`

File name: comp/otelcol/otlp/components/exporter/serializerexporter/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

3 additional dependencies were updated

Details:

Package	Change
`golang.org/x/sync`	`v0.24.0` -> `v0.25.0`
`golang.org/x/sys`	`v0.49.0` -> `v0.50.0`
`golang.org/x/text`	`v0.43.0` -> `v0.44.0`

File name: comp/otelcol/otlp/components/processor/infraattributesprocessor/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

3 additional dependencies were updated

Details:

Package	Change
`golang.org/x/sync`	`v0.24.0` -> `v0.25.0`
`golang.org/x/sys`	`v0.49.0` -> `v0.50.0`
`golang.org/x/text`	`v0.43.0` -> `v0.44.0`

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

7 additional dependencies were updated

Details:

Package	Change
`golang.org/x/mod`	`v0.41.0` -> `v0.42.0`
`golang.org/x/sync`	`v0.24.0` -> `v0.25.0`
`golang.org/x/sys`	`v0.49.0` -> `v0.50.0`
`golang.org/x/text`	`v0.43.0` -> `v0.44.0`
`golang.org/x/tools`	`v0.51.0` -> `v0.52.0`
`golang.org/x/telemetry`	`v0.0.0-20260924152758-ed294f943157` -> `v0.0.0-20261009151841-97e8ea77aa2a`
`golang.org/x/term`	`v0.47.0` -> `v0.48.0`

File name: internal/tools/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

6 additional dependencies were updated

Details:

Package	Change
`golang.org/x/mod`	`v0.41.0` -> `v0.42.0`
`golang.org/x/sync`	`v0.24.0` -> `v0.25.0`
`golang.org/x/sys`	`v0.49.0` -> `v0.50.0`
`golang.org/x/term`	`v0.47.0` -> `v0.48.0`
`golang.org/x/text`	`v0.43.0` -> `v0.44.0`
`golang.org/x/tools`	`v0.51.0` -> `v0.52.0`

File name: pkg/config/remote/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

3 additional dependencies were updated

Details:

Package	Change
`golang.org/x/sync`	`v0.24.0` -> `v0.25.0`
`golang.org/x/sys`	`v0.49.0` -> `v0.50.0`
`golang.org/x/text`	`v0.43.0` -> `v0.44.0`

File name: pkg/trace/otel/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

3 additional dependencies were updated

Details:

Package	Change
`golang.org/x/sync`	`v0.24.0` -> `v0.25.0`
`golang.org/x/sys`	`v0.49.0` -> `v0.50.0`
`golang.org/x/text`	`v0.43.0` -> `v0.44.0`

File name: pkg/util/grpc/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

3 additional dependencies were updated

Details:

Package	Change
`golang.org/x/sync`	`v0.24.0` -> `v0.25.0`
`golang.org/x/sys`	`v0.49.0` -> `v0.50.0`
`golang.org/x/text`	`v0.43.0` -> `v0.44.0`

renovatee-approver-stackvista Bot approved these changes

View reviewed changes

renovatee-approver-stackvista Bot left a comment

Auto-approving verified Renovate commits with native automerge enabled.

This branch has not been deployed

No deployments

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels