krz/gitbay

Bump golang.org/x/crypto to v0.56.0 !177

merged merged by cmc on 2026-09-03 00:03 UTC · krz/gitbay:bump-x-crypto into main

Discussion

cmc

govulncheck flags GO-2026-6354 GO-2026-6355 in golang.org/x/crypto@v0.55.0, reached through ssh.NewServerConn in internal/sshd. Fixed in v0.56.0. Audit is clean after the bump; sshd, sig, and the SSH e2e tests pass.