chore(deps): bump golang.org/x/crypto from 0.40.0 to 0.45.0#576
Conversation
There was a problem hiding this comment.
Pull request overview
This PR updates the Go toolchain from 1.23.12 to 1.24.10 and bumps golang.org/x/crypto from 0.40.0 to 0.45.0 to address security vulnerabilities CVE-2025-58181 and CVE-2025-47914. The update also includes fixes for Go 1.24.x compatibility issues, specifically addressing "non-constant format string" warnings.
Key Changes:
- Go version bump from 1.23.12 to 1.24.10 across all configuration files
- Security update:
golang.org/x/cryptofrom 0.40.0 to 0.45.0 - Transitive dependency updates for golang.org/x/* packages (mod, net, sync, sys, term, text, tools)
- Code fix: Removed redundant
fmt.Sprintfwrapper in logging call to fix Go 1.24.x "non-constant format string" warning
Reviewed changes
Copilot reviewed 4 out of 5 changed files in this pull request and generated 1 comment.
Show a summary per file
| File | Description |
|---|---|
| go.mod | Updates Go version to 1.24.10 and bumps golang.org/x/crypto to 0.45.0 along with transitive dependencies |
| go.sum | Updates checksums for all bumped dependencies |
| builder/vsphere/supervisor/step_import_image.go | Removes redundant fmt.Sprintf wrapper in logger.Info call for Go 1.24.x compatibility |
| .go-version | Updates Go version specification to 1.24.10 |
| README.md | Updates documentation to reflect Go 1.24.10 requirement |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
64adeb0 to
43f5797
Compare
- Bumps golang.org/x/crypto from 0.40.0 to 0.45.0. - Bumps github.com/hashicorp/packer-plugin-sdk from 0.6.0 to 0.6.4. - Requires a bump of Go to 1.24.0 or later; using latest 1.24.10. - Applies fix to "non-constant format string" in Go 1.24.x. Ref: - CVE-2025-58181 - CVE-2025-47914 Signed-off-by: Ryan Johnson <ryan.johnson@broadcom.com>
43f5797 to
7af00cf
Compare
|
I'm going to lock this pull request because it has been closed for 30 days. This helps our maintainers find and focus on the active issues. If you have found a problem that seems related to this change, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further. |
Description
Ref:
Resolved Issues
Changes to Security Controls
None.