Skip to content

build(deps): cherry-pick golang.org/x/crypto bump to release-1.3#1994

Merged
TerryHowe merged 3 commits into
oras-project:release-1.3from
TerryHowe:cherry-pick/crypto-bump
Mar 7, 2026
Merged

build(deps): cherry-pick golang.org/x/crypto bump to release-1.3#1994
TerryHowe merged 3 commits into
oras-project:release-1.3from
TerryHowe:cherry-pick/crypto-bump

Conversation

@TerryHowe

Copy link
Copy Markdown
Member

Summary

Cherry-pick of #1908 to the release-1.3 branch.

Bumps golang.org/x/crypto from 0.40.0 to 0.45.0, along with transitive dependency updates:

  • golang.org/x/sys 0.35.0 -> 0.38.0
  • golang.org/x/term 0.34.0 -> 0.37.0

Test plan

  • CI passes (unit tests, linting)
  • go mod tidy produces no diff

Cherry-pick of oras-project#1908 to release-1.3 branch.

Bumps golang.org/x/crypto from 0.40.0 to 0.45.0, along with
transitive dependency updates for golang.org/x/sys and golang.org/x/term.

Signed-off-by: Terry Howe <terrylhowe@gmail.com>
@codecov

codecov Bot commented Mar 4, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 87.28%. Comparing base (c3ede38) to head (5ea4de4).
⚠️ Report is 1 commits behind head on release-1.3.

Additional details and impacted files
@@               Coverage Diff               @@
##           release-1.3    #1994      +/-   ##
===============================================
+ Coverage        87.21%   87.28%   +0.07%     
===============================================
  Files              143      143              
  Lines             5528     5528              
===============================================
+ Hits              4821     4825       +4     
+ Misses             420      416       -4     
  Partials           287      287              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@sabre1041 sabre1041 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@FeynmanZhou FeynmanZhou left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@sabre1041 sabre1041 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@TerryHowe TerryHowe merged commit 1228ea0 into oras-project:release-1.3 Mar 7, 2026
8 checks passed
@TerryHowe TerryHowe deleted the cherry-pick/crypto-bump branch March 7, 2026 13:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants