Skip to content

Commit af5ff5a

Browse files
committed
CVE-2025-22869: upgrade golang.org/x/crypto to v0.35.0
Signed-off-by: Henry Wang <[email protected]>
1 parent 937e328 commit af5ff5a

File tree

3 files changed

+13
-12
lines changed

3 files changed

+13
-12
lines changed

go.mod

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -135,12 +135,12 @@ require (
135135
go.opentelemetry.io/auto/sdk v1.1.0 // indirect
136136
go.opentelemetry.io/otel/metric v1.34.0 // indirect
137137
go.opentelemetry.io/proto/otlp v1.5.0 // indirect
138-
golang.org/x/crypto v0.32.0 // indirect
138+
golang.org/x/crypto v0.35.0 // indirect
139139
golang.org/x/exp v0.0.0-20241108190413-2d47ceb2692f // indirect
140140
golang.org/x/net v0.34.0 // indirect
141141
golang.org/x/oauth2 v0.27.0 // indirect
142-
golang.org/x/term v0.28.0 // indirect
143-
golang.org/x/text v0.21.0 // indirect
142+
golang.org/x/term v0.29.0 // indirect
143+
golang.org/x/text v0.22.0 // indirect
144144
golang.org/x/time v0.7.0 // indirect
145145
google.golang.org/genproto/googleapis/api v0.0.0-20250115164207-1a7da9e5054f // indirect
146146
gopkg.in/inf.v0 v0.9.1 // indirect

go.sum

Lines changed: 6 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -388,8 +388,8 @@ golang.org/x/crypto v0.13.0/go.mod h1:y6Z2r+Rw4iayiXXAIxJIDAJ1zMW4yaTpebo8fPOliY
388388
golang.org/x/crypto v0.19.0/go.mod h1:Iy9bg/ha4yyC70EfRS8jz+B6ybOBKMaSxLj6P6oBDfU=
389389
golang.org/x/crypto v0.23.0/go.mod h1:CKFgDieR+mRhux2Lsu27y0fO304Db0wZe70UKqHu0v8=
390390
golang.org/x/crypto v0.30.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk=
391-
golang.org/x/crypto v0.32.0 h1:euUpcYgM8WcP71gNpTqQCn6rC2t6ULUPiOzfWaXVVfc=
392-
golang.org/x/crypto v0.32.0/go.mod h1:ZnnJkOaASj8g0AjIduWNlq2NRxL0PlBrbKVyZ6V/Ugc=
391+
golang.org/x/crypto v0.35.0 h1:b15kiHdrGCHrP6LvwaQ3c03kgNhhiMgvlhxHQhmg2Xs=
392+
golang.org/x/crypto v0.35.0/go.mod h1:dy7dXNW32cAb/6/PRuTNsix8T+vJAqvuIy5Bli/x0YQ=
393393
golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
394394
golang.org/x/exp v0.0.0-20241108190413-2d47ceb2692f h1:XdNn9LlyWAhLVp6P/i8QYBW+hlyhrhei9uErw2B5GJo=
395395
golang.org/x/exp v0.0.0-20241108190413-2d47ceb2692f/go.mod h1:D5SMRVC3C2/4+F/DB1wZsLRnSNimn2Sp/NPsCrsv8ak=
@@ -476,8 +476,8 @@ golang.org/x/term v0.12.0/go.mod h1:owVbMEjm3cBLCHdkQu9b1opXd4ETQWc3BhuQGKgXgvU=
476476
golang.org/x/term v0.17.0/go.mod h1:lLRBjIVuehSbZlaOtGMbcMncT+aqLLLmKrsjNrUguwk=
477477
golang.org/x/term v0.20.0/go.mod h1:8UkIAJTvZgivsXaD6/pH6U9ecQzZ45awqEOzuCvwpFY=
478478
golang.org/x/term v0.27.0/go.mod h1:iMsnZpn0cago0GOrHO2+Y7u7JPn5AylBrcoWkElMTSM=
479-
golang.org/x/term v0.28.0 h1:/Ts8HFuMR2E6IP/jlo7QVLZHggjKQbhu/7H0LJFr3Gg=
480-
golang.org/x/term v0.28.0/go.mod h1:Sw/lC2IAUZ92udQNf3WodGtn4k/XoLyZoh8v/8uiwek=
479+
golang.org/x/term v0.29.0 h1:L6pJp37ocefwRRtYPKSWOWzOtWSxVajvz2ldH/xi3iU=
480+
golang.org/x/term v0.29.0/go.mod h1:6bl4lRlvVuDgSf3179VpIxBF0o10JUpXWOnI7nErv7s=
481481
golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
482482
golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
483483
golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
@@ -486,8 +486,9 @@ golang.org/x/text v0.9.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8=
486486
golang.org/x/text v0.13.0/go.mod h1:TvPlkZtksWOMsz7fbANvkp4WM8x/WCo/om8BMLbz+aE=
487487
golang.org/x/text v0.14.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU=
488488
golang.org/x/text v0.15.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU=
489-
golang.org/x/text v0.21.0 h1:zyQAAkrwaneQ066sspRyJaG9VNi/YJ1NfzcGB3hZ/qo=
490489
golang.org/x/text v0.21.0/go.mod h1:4IBbMaMmOPCJ8SecivzSH54+73PCFmPWxNTLm+vZkEQ=
490+
golang.org/x/text v0.22.0 h1:bofq7m3/HAFvbF51jz3Q9wLg3jkvSPuiZu/pD1XwgtM=
491+
golang.org/x/text v0.22.0/go.mod h1:YRoo4H8PVmsu+E3Ou7cqLVH8oXWIHVoX0jqUWALQhfY=
491492
golang.org/x/time v0.7.0 h1:ntUhktv3OPE6TgYxXWv9vKvUSJyIFJlyohwbkEwPrKQ=
492493
golang.org/x/time v0.7.0/go.mod h1:3BpzKBy/shNhVucY/MWOyx10tF3SFh9QdLuxbVysPQM=
493494
golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=

vendor/modules.txt

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -576,8 +576,8 @@ go.opentelemetry.io/proto/otlp/collector/trace/v1
576576
go.opentelemetry.io/proto/otlp/common/v1
577577
go.opentelemetry.io/proto/otlp/resource/v1
578578
go.opentelemetry.io/proto/otlp/trace/v1
579-
# golang.org/x/crypto v0.32.0
580-
## explicit; go 1.20
579+
# golang.org/x/crypto v0.35.0
580+
## explicit; go 1.23.0
581581
golang.org/x/crypto/cast5
582582
golang.org/x/crypto/cryptobyte
583583
golang.org/x/crypto/cryptobyte/asn1
@@ -626,10 +626,10 @@ golang.org/x/sys/windows/registry
626626
golang.org/x/sys/windows/svc
627627
golang.org/x/sys/windows/svc/debug
628628
golang.org/x/sys/windows/svc/mgr
629-
# golang.org/x/term v0.28.0
629+
# golang.org/x/term v0.29.0
630630
## explicit; go 1.18
631631
golang.org/x/term
632-
# golang.org/x/text v0.21.0
632+
# golang.org/x/text v0.22.0
633633
## explicit; go 1.18
634634
golang.org/x/text/secure/bidirule
635635
golang.org/x/text/transform

0 commit comments

Comments
 (0)