{"id":3922,"name":"github.com/cloudflare/circl","ecosystem":"go","repository_url":"https://github.com/cloudflare/circl","issues_count":2078,"created_at":"2025-06-06T16:30:16.892Z","updated_at":"2025-06-06T16:30:16.892Z","purl":"pkg:golang/github.com/cloudflare/circl","metadata":{"id":3506096,"name":"github.com/cloudflare/circl","ecosystem":"go","description":"Package circl provides a collection of cryptographic primitives. The goal\nof this module is to be used as a tool for experimental deployment of\ncryptographic algorithms targeting Post-Quantum (PQ) and Elliptic\nCurve Cryptography (ECC).\n\nFollowing blog post describes ideas behind CIRCL in more details:\nhttps://blog.cloudflare.com/introducing-circl/","homepage":"https://github.com/cloudflare/circl","licenses":"BSD-3-Clause","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/cloudflare/circl","keywords_array":[],"namespace":"github.com/cloudflare","versions_count":17,"first_release_published_at":"2019-07-10T17:39:44.000Z","latest_release_published_at":"2025-04-09T16:57:45.000Z","latest_release_number":"v1.6.1","last_synced_at":"2025-06-05T13:31:19.666Z","created_at":"2022-04-10T20:39:09.759Z","updated_at":"2025-06-05T13:31:19.666Z","registry_url":"https://pkg.go.dev/github.com/cloudflare/circl","install_command":"go get github.com/cloudflare/circl","documentation_url":"https://pkg.go.dev/github.com/cloudflare/circl#section-documentation","metadata":{},"repo_metadata":{"uuid":"147963112","full_name":"cloudflare/circl","owner":"cloudflare","description":"CIRCL: Cloudflare Interoperable Reusable Cryptographic Library","archived":false,"fork":false,"pushed_at":"2023-03-10T09:50:44.000Z","size":11516,"stargazers_count":911,"open_issues_count":38,"forks_count":101,"subscribers_count":43,"default_branch":"main","last_synced_at":"2023-03-13T14:22:24.613Z","etag":null,"topics":["circl","cryptography","csidh","dilithium","ed25519","ed448","elliptic-curves","go","golang","hpke","kyber","pki","post-quantum","sidh","sike"],"latest_commit_sha":null,"homepage":"http://blog.cloudflare.com/introducing-circl","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"logo_url":null,"metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":null,"security":null,"support":null}},"created_at":"2018-09-08T19:20:52.000Z","updated_at":"2023-03-10T18:38:54.000Z","dependencies_parsed_at":"2023-02-16T13:01:23.143Z","dependency_job_id":null,"html_url":"https://github.com/cloudflare/circl","commit_stats":null,"repository_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl","tags_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/tags","manifests_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudflare%2Fcircl/manifests","owner_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":108921946,"host_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names"},"owner_record":{"login":"cloudflare","name":"Cloudflare","uuid":"314135","kind":"organization","description":"","email":null,"website":"https://www.cloudflare.com","location":"San Francisco, London, Austin, Lisbon, Singapore","twitter":null,"company":null,"avatar_url":"https://avatars.githubusercontent.com/u/314135?v=4","repositories_count":335,"last_synced_at":"2023-02-19T23:09:41.506Z","metadata":{"has_sponsors_listing":false},"owner_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudflare"},"tags":[{"name":"v1.3.2","sha":"769d73f14c245a9a54a860640516c1b799a398d0","kind":"commit","published_at":"2023-01-31T00:03:24.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.2","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.2"},{"name":"v1.3.1","sha":"459b64f53bc65c6ef18923652e59d8d28da75057","kind":"tag","published_at":"2022-12-19T10:53:14.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.1","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.1"},{"name":"v1.3.0","sha":"c56c51d2526f71be07939782d59d1a98744e062c","kind":"commit","published_at":"2022-11-11T01:07:31.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.3.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.3.0"},{"name":"v1.2.0","sha":"f18784e287f0c586dcbb2c5b7045d7f3080d119b","kind":"commit","published_at":"2022-06-15T00:49:08.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.2.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.2.0"},{"name":"v1.1.0","sha":"0518755fbebe2aeb3cf6e71ac533b61602ec8e4a","kind":"commit","published_at":"2021-10-13T00:08:50.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.1.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.1.0"},{"name":"v1.0.0","sha":"a03c5a147111a46165b047f49053ec510d5582b4","kind":"commit","published_at":"2019-07-10T17:39:44.000Z","download_url":"https://codeload.github.com/cloudflare/circl/tar.gz/v1.0.0","html_url":"https://github.com/cloudflare/circl/releases/tag/v1.0.0"}]},"repo_metadata_updated_at":"2023-03-21T18:40:08.206Z","dependent_packages_count":6861,"downloads":null,"downloads_period":null,"dependent_repos_count":2787,"rankings":{"downloads":null,"dependent_repos_count":0.15489030073409496,"dependent_packages_count":0.10312187470173503,"stargazers_count":2.0620225166717154,"forks_count":2.5657404891727036,"docker_downloads_count":0.10789411437606079,"average":0.998733859131262},"purl":"pkg:golang/github.com/cloudflare/circl","advisories":[{"uuid":"GSA_kwCzR0hTQS05NzYzLTRmOTQtZ2ZjaM4AA4Ql","url":"https://github.com/advisories/GHSA-9763-4f94-gfch","title":"CIRCL's Kyber: timing side-channel (kyberslash2)","description":"### Impact\nOn some platforms, when an attacker can time decapsulation of Kyber on forged cipher texts, they could possibly learn (parts of) the secret key.\n\nDoes not apply to ephemeral usage, such as when used in the regular way in TLS.\n\n### Patches\nPatched in 1.3.7.\n\n### References\n- [kyberslash.cr.yp.to](https://kyberslash.cr.yp.to/)","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2024-01-08T16:45:05.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://github.com/cloudflare/circl/security/advisories/GHSA-9763-4f94-gfch","https://github.com/cloudflare/circl/commit/75ef91e8a2f438e6ce2b6e620d236add8be1887d","https://kyberslash.cr.yp.to","https://github.com/advisories/GHSA-9763-4f94-gfch"],"source_kind":"github","identifiers":["GHSA-9763-4f94-gfch"],"repository_url":"https://github.com/cloudflare/circl","blast_radius":0.0,"packages":[{"versions":[{"first_patched_version":"1.3.7","vulnerable_version_range":"\u003c 1.3.7"}],"ecosystem":"go","package_name":"github.com/cloudflare/circl"}],"created_at":"2024-01-08T17:05:55.681Z","updated_at":"2024-05-20T22:00:45.000Z"},{"uuid":"GSA_kwCzR0hTQS0ycTg5LTQ4NWMtOWoyeM4AAzSj","url":"https://github.com/advisories/GHSA-2q89-485c-9j2x","title":"Improper random reading in CIRCL","description":"### Impact\nWhen sampling randomness for a shared secret, the implementation of Kyber and FrodoKEM, did not check whether `crypto/rand.Read()` returns an error. In rare deployment cases (error thrown by the `Read()` function), this could lead to a predictable shared secret.\n\nThe tkn20 and blindrsa components did not check whether enough randomness was returned from the user provided randomness source. Typically the user provides `crypto/rand.Reader`, which in the vast majority of cases will always return the right number random bytes. In the cases where it does not, or the user provides a source that does not, the blinding for blindrsa is weak and integrity of the plaintext is not ensured in tkn20.\n\n\n### Patches\nThe fix was introduced in CIRCL v. 1.3.3\n","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2023-05-11T20:40:54.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.3,"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:N","references":["https://github.com/cloudflare/circl/security/advisories/GHSA-2q89-485c-9j2x","https://nvd.nist.gov/vuln/detail/CVE-2023-1732","https://github.com/cloudflare/circl/commit/ff8d91225f8954b4970b6d6382d2e4c78f4a4cf8","https://github.com/cloudflare/circl/releases/tag/v1.3.3","https://github.com/advisories/GHSA-2q89-485c-9j2x"],"source_kind":"github","identifiers":["GHSA-2q89-485c-9j2x","CVE-2023-1732"],"repository_url":"https://github.com/cloudflare/circl","blast_radius":18.25922593418051,"packages":[{"versions":[{"first_patched_version":"1.3.3","vulnerable_version_range":"\u003c 1.3.3"}],"ecosystem":"go","package_name":"github.com/cloudflare/circl"}],"created_at":"2023-05-11T21:03:21.160Z","updated_at":"2023-11-06T05:06:21.000Z"}],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/cloudflare/circl","docker_dependents_count":1835,"docker_downloads_count":6747227080,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/cloudflare/circl","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/cloudflare/circl/dependencies","status":null,"funding_links":[],"critical":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcloudflare%2Fcircl/related_packages","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":1882879,"maintainers_count":0,"namespaces_count":723926,"keywords_count":97872,"github":"golang","metadata":{"funded_packages_count":39346},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2025-06-06T05:22:27.920Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},"unique_repositories_count":1709,"unique_repositories_count_past_30_days":3,"recent_issues":[{"uuid":"4645029829","node_id":"PR_kwDOPmeGcs7liw1w","number":4,"state":"open","title":"Bump the go_modules group across 14 directories with 13 updates","user":"dependabot[bot]","labels":["size/XL","dependencies","go"],"assignees":[],"locked":false,"comments_count":7,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-06-11T23:45:54.000Z","updated_at":"2026-06-11T23:47:54.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"go_modules","update_count":13,"packages":[{"name":"github.com/go-jose/go-jose/v4","old_version":"4.1.0","new_version":"4.1.4","repository_url":"https://github.com/go-jose/go-jose"},{"name":"github.com/jackc/pgx/v5","old_version":"5.7.5","new_version":"5.9.2","repository_url":"https://github.com/jackc/pgx"},{"name":"github.com/openfga/openfga","old_version":"1.8.13","new_version":"1.16.0","repository_url":"https://github.com/openfga/openfga"},{"name":"github.com/Azure/go-ntlmssp","old_version":"0.0.0-20220621081337-cb9428e4ac1e","new_version":"0.1.1","repository_url":"https://github.com/Azure/go-ntlmssp"},{"name":"github.com/buger/jsonparser","old_version":"1.1.1","new_version":"1.1.2","repository_url":"https://github.com/buger/jsonparser"},{"name":"github.com/cloudflare/circl","old_version":"1.6.1","new_version":"1.6.3","repository_url":"https://github.com/cloudflare/circl"},{"name":"go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp","old_version":"1.37.0","new_version":"1.43.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 7 updates in the /apps/iam directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) | `4.1.0` | `4.1.4` |\n| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.7.5` | `5.9.2` |\n| [github.com/openfga/openfga](https://github.com/openfga/openfga) | `1.8.13` | `1.16.0` |\n| [github.com/Azure/go-ntlmssp](https://github.com/Azure/go-ntlmssp) | `0.0.0-20220621081337-cb9428e4ac1e` | `0.1.1` |\n| [github.com/buger/jsonparser](https://github.com/buger/jsonparser) | `1.1.1` | `1.1.2` |\n| [github.com/cloudflare/circl](https://github.com/cloudflare/circl) | `1.6.1` | `1.6.3` |\n| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.43.0` |\n\nBumps the go_modules group with 5 updates in the /apps/plugins directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.41.0` |\n| [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.43.0` |\n| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.41.0` | `0.45.0` |\n| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.74.2` | `1.79.3` |\n| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.43.0` |\n\nBumps the go_modules group with 1 update in the /apps/preferences directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go).\nBumps the go_modules group with 4 updates in the /apps/provisioning directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [golang.org/x/crypto](https://github.com/golang/crypto) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 2 updates in the /apps/secret directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 4 updates in the /apps/shorturl directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go).\nBumps the go_modules group with 4 updates in the /pkg/aggregator directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [golang.org/x/crypto](https://github.com/golang/crypto) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 3 updates in the /pkg/apimachinery directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [golang.org/x/crypto](https://github.com/golang/crypto) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 4 updates in the /pkg/apiserver directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [golang.org/x/crypto](https://github.com/golang/crypto) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 4 updates in the /pkg/build directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go).\nBumps the go_modules group with 1 update in the /pkg/codegen directory: [github.com/expr-lang/expr](https://github.com/expr-lang/expr).\nBumps the go_modules group with 1 update in the /pkg/plugins/codegen directory: [github.com/expr-lang/expr](https://github.com/expr-lang/expr).\nBumps the go_modules group with 4 updates in the /pkg/promlib directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [github.com/buger/jsonparser](https://github.com/buger/jsonparser).\nBumps the go_modules group with 1 update in the /pkg/semconv directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go).\n\nUpdates `github.com/go-jose/go-jose/v4` from 4.1.0 to 4.1.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-jose/go-jose/releases\"\u003egithub.com/go-jose/go-jose/v4's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.1.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003eFixes Panic in JWE decryption. See \u003ca href=\"https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\"\u003ehttps://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4\"\u003ehttps://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.1.3\u003c/h2\u003e\n\u003cp\u003eThis release drops Go 1.23 support as that Go release is no longer supported. With that, we can drop \u003ccode\u003ex/crypto\u003c/code\u003e and no longer have any external dependencies in go-jose outside of the standard library!\u003c/p\u003e\n\u003cp\u003eThis release fixes a bug where a critical b64 header was ignored if in an unprotected header. It is now rejected instead of ignored.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemove Go 1.23 support by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/205\"\u003ego-jose/go-jose#205\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReject JWS with an unprotected critical b64 header by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/210\"\u003ego-jose/go-jose#210\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.2...v4.1.3\"\u003ehttps://github.com/go-jose/go-jose/compare/v4.1.2...v4.1.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.1.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003ego-jose v4.1.2 improves some documentation, errors, and removes the only 3rd-party dependency.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate go-jose documentation by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/198\"\u003ego-jose/go-jose#198\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove dependency on testify by \u003ca href=\"https://github.com/wardviaene\"\u003e\u003ccode\u003e@​wardviaene\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/197\"\u003ego-jose/go-jose#197\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove error message for invalid private keys by \u003ca href=\"https://github.com/ProjectMutilation\"\u003e\u003ccode\u003e@​ProjectMutilation\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/195\"\u003ego-jose/go-jose#195\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eJWK unsupported error when unmarshalling by \u003ca href=\"https://github.com/fprojetto\"\u003e\u003ccode\u003e@​fprojetto\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/191\"\u003ego-jose/go-jose#191\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd JSONWebKey type to makeJWERecipient by \u003ca href=\"https://github.com/alvarolivie\"\u003e\u003ccode\u003e@​alvarolivie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/200\"\u003ego-jose/go-jose#200\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etestutils/assert: remove True, Nil, NotNil by \u003ca href=\"https://github.com/jsha\"\u003e\u003ccode\u003e@​jsha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/202\"\u003ego-jose/go-jose#202\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wardviaene\"\u003e\u003ccode\u003e@​wardviaene\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/197\"\u003ego-jose/go-jose#197\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fprojetto\"\u003e\u003ccode\u003e@​fprojetto\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/191\"\u003ego-jose/go-jose#191\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alvarolivie\"\u003e\u003ccode\u003e@​alvarolivie\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/200\"\u003ego-jose/go-jose#200\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.1...v4.1.2\"\u003ehttps://github.com/go-jose/go-jose/compare/v4.1.1...v4.1.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.1.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDrop go-cmp dependency by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/186\"\u003ego-jose/go-jose#186\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ejws: improve performance and allocations for ParseSignedCompact by \u003ca href=\"https://github.com/drakkan\"\u003e\u003ccode\u003e@​drakkan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/188\"\u003ego-jose/go-jose#188\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd missing quote to unknown curve message \u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/170\"\u003e#170\u003c/a\u003e by \u003ca href=\"https://github.com/sudhanvaghebbale\"\u003e\u003ccode\u003e@​sudhanvaghebbale\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/189\"\u003ego-jose/go-jose#189\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix incorrect validation by \u003ca href=\"https://github.com/ProjectMutilation\"\u003e\u003ccode\u003e@​ProjectMutilation\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/192\"\u003ego-jose/go-jose#192\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRestore Go 1.23 compatibility by \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/193\"\u003ego-jose/go-jose#193\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/drakkan\"\u003e\u003ccode\u003e@​drakkan\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/188\"\u003ego-jose/go-jose#188\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sudhanvaghebbale\"\u003e\u003ccode\u003e@​sudhanvaghebbale\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/189\"\u003ego-jose/go-jose#189\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ProjectMutilation\"\u003e\u003ccode\u003e@​ProjectMutilation\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/192\"\u003ego-jose/go-jose#192\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/193\"\u003ego-jose/go-jose#193\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/0e59876635f3dbf46d7b5e97b52bb75a3f96e7d9\"\u003e\u003ccode\u003e0e59876\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/ddffdbcec8bdadea8e02a20bdf19239878228215\"\u003e\u003ccode\u003eddffdbc\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 5 to 6 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/213\"\u003e#213\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/5348b9a4ba4559d2266b5af89fb5353cd1a5360a\"\u003e\u003ccode\u003e5348b9a\u003c/code\u003e\u003c/a\u003e Reject JWS with an unprotected critical b64 header (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/210\"\u003e#210\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/9153a5e4549c95e97a84e41e6375dc90eac54241\"\u003e\u003ccode\u003e9153a5e\u003c/code\u003e\u003c/a\u003e Bump actions/setup-python from 5 to 6 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/208\"\u003e#208\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/2126e17f8791f6a234e63b2e4e8cb9fac8605c3a\"\u003e\u003ccode\u003e2126e17\u003c/code\u003e\u003c/a\u003e Bump actions/setup-go from 5 to 6 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/209\"\u003e#209\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/9860c65054c4821d1e7c22200422b04181f58ebc\"\u003e\u003ccode\u003e9860c65\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 4 to 5 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/206\"\u003e#206\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/14239fdb15b88e1c42e41621ef24f1112cf31b5a\"\u003e\u003ccode\u003e14239fd\u003c/code\u003e\u003c/a\u003e Remove Go 1.23 support (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/205\"\u003e#205\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/a16e15813482ca5e9a679b7f5bb42ddfae616d43\"\u003e\u003ccode\u003ea16e158\u003c/code\u003e\u003c/a\u003e Update CI to run on Go 1.24 and 1.25 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/204\"\u003e#204\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/a1565a41aa008ae6545e0f50a636d254de5b4596\"\u003e\u003ccode\u003ea1565a4\u003c/code\u003e\u003c/a\u003e testutils/assert: remove True, Nil, NotNil (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/202\"\u003e#202\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/3a80e136a96e747bf44049414eadc02828df4d33\"\u003e\u003ccode\u003e3a80e13\u003c/code\u003e\u003c/a\u003e jwe: accept non-pointer JSONWebKey in Recipient (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/200\"\u003e#200\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.0...v4.1.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/jackc/pgx/v5` from 5.7.5 to 5.9.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jackc/pgx/blob/master/CHANGELOG.md\"\u003egithub.com/jackc/pgx/v5's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e5.9.2 (April 18, 2026)\u003c/h1\u003e\n\u003cp\u003eFix SQL Injection via placeholder confusion with dollar quoted string literals (GHSA-j88v-2chj-qfwx)\u003c/p\u003e\n\u003cp\u003eSQL injection can occur when:\u003c/p\u003e\n\u003col\u003e\n\u003cli\u003eThe non-default simple protocol is used.\u003c/li\u003e\n\u003cli\u003eA dollar quoted string literal is used in the SQL query.\u003c/li\u003e\n\u003cli\u003eThat query contains text that would be would be interpreted outside as a placeholder outside of a string literal.\u003c/li\u003e\n\u003cli\u003eThe value of that placeholder is controllable by the attacker.\u003c/li\u003e\n\u003c/ol\u003e\n\u003cp\u003ee.g.\u003c/p\u003e\n\u003cpre lang=\"go\"\u003e\u003ccode\u003eattackValue := `$tag$; drop table canary; --`\n_, err = tx.Exec(ctx, `select $tag$ $1 $tag$, $1`, pgx.QueryExecModeSimpleProtocol, attackValue)\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003eThis is unlikely to occur outside of a contrived scenario.\u003c/p\u003e\n\u003ch1\u003e5.9.1 (March 22, 2026)\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix: batch result format corruption when using cached prepared statements (reported by Dirkjan Bussink)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e5.9.0 (March 21, 2026)\u003c/h1\u003e\n\u003cp\u003eThis release includes a number of new features such as SCRAM-SHA-256-PLUS support, OAuth authentication support, and\nPostgreSQL protocol 3.2 support.\u003c/p\u003e\n\u003cp\u003eIt significantly reduces the amount of network traffic when using prepared statements (which are used automatically by\ndefault) by avoiding unnecessary Describe Portal messages. This also reduces local memory usage.\u003c/p\u003e\n\u003cp\u003eIt also includes multiple fixes for potential DoS due to panic or OOM if connected to a malicious server that sends\ndeliberately malformed messages.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRequire Go 1.25+\u003c/li\u003e\n\u003cli\u003eAdd SCRAM-SHA-256-PLUS support (Adam Brightwell)\u003c/li\u003e\n\u003cli\u003eAdd OAuth authentication support for PostgreSQL 18 (David Schneider)\u003c/li\u003e\n\u003cli\u003eAdd PostgreSQL protocol 3.2 support (Dirkjan Bussink)\u003c/li\u003e\n\u003cli\u003eAdd tsvector type support (Adam Brightwell)\u003c/li\u003e\n\u003cli\u003eSkip Describe Portal for cached prepared statements reducing network round trips\u003c/li\u003e\n\u003cli\u003eMake LoadTypes query easier to support on \u0026quot;postgres-like\u0026quot; servers (Jelte Fennema-Nio)\u003c/li\u003e\n\u003cli\u003eDefault empty user to current OS user matching libpq behavior (ShivangSrivastava)\u003c/li\u003e\n\u003cli\u003eOptimize LRU statement cache with custom linked list and node pooling (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eOptimize date scanning by replacing regex with manual parsing (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eOptimize pgio append/set functions with direct byte shifts (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eMake RowsAffected faster (Abhishek Chanda)\u003c/li\u003e\n\u003cli\u003eFix: Pipeline.Close panic when server sends multiple FATAL errors (Varun Chawla)\u003c/li\u003e\n\u003cli\u003eFix: ContextWatcher goroutine leak (Hank Donnay)\u003c/li\u003e\n\u003cli\u003eFix: stdlib discard connections with open transactions in ResetSession (Jeremy Schneider)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/0aeabbcf11d859229c1f0b20e710d3596c76bf27\"\u003e\u003ccode\u003e0aeabbc\u003c/code\u003e\u003c/a\u003e Release v5.9.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/60644f84918a8af66d14a4b0d865d4edafd955da\"\u003e\u003ccode\u003e60644f8\u003c/code\u003e\u003c/a\u003e Fix SQL sanitizer bugs with dollar-quoted strings and placeholder overflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/a5680bc945aa7c6ebac2778d859ee7b4ba86db60\"\u003e\u003ccode\u003ea5680bc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jackc/pgx/issues/2531\"\u003e#2531\u003c/a\u003e from dolmen-go/godoc-add-links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/e34e4524007062710c6a4fb9c8655b75a486b5cd\"\u003e\u003ccode\u003ee34e452\u003c/code\u003e\u003c/a\u003e doc: Add godoc links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/08c9bb1f0d8fa6cc10ed8c713e68b1baa64dfe2c\"\u003e\u003ccode\u003e08c9bb1\u003c/code\u003e\u003c/a\u003e Fix Stringer types encoded as text instead of numeric value in composite fields\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/96b4dbdfd0458cb425bf8454d292a23978872cc8\"\u003e\u003ccode\u003e96b4dbd\u003c/code\u003e\u003c/a\u003e Remove unstable test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/acf88e0065682e8948696d26fa6438669c4cabee\"\u003e\u003ccode\u003eacf88e0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jackc/pgx/issues/2526\"\u003e#2526\u003c/a\u003e from abrightwell/abrightwell-min-proto\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/2f81f1fc03bef99593e92c64ad9cac954c00e8e6\"\u003e\u003ccode\u003e2f81f1f\u003c/code\u003e\u003c/a\u003e Update \u003ccode\u003emax_protocol_version\u003c/code\u003e and \u003ccode\u003emin_protocol_version\u003c/code\u003e defaults\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/4e4eaedb47b7b3cfba0a1b0a9e6a3f015764f046\"\u003e\u003ccode\u003e4e4eaed\u003c/code\u003e\u003c/a\u003e Release v5.9.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/62731882651a90348febb43b2119b5f8bd9272de\"\u003e\u003ccode\u003e6273188\u003c/code\u003e\u003c/a\u003e Fix batch result format corruption when using cached prepared statements\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jackc/pgx/compare/v5.7.5...v5.9.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/openfga/openfga` from 1.8.13 to 1.16.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/openfga/openfga/releases\"\u003egithub.com/openfga/openfga's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.16.0\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded datastore ping timeout (PingTimeout) and datastore ping retry timeout (PingRetryMaxElapsedTime) configurations. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3113\"\u003e#3113\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReport \u003ccode\u003eallowed\u003c/code\u003e result and \u003ccode\u003etuple_key\u003c/code\u003e on Check and experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e resolution trace spans. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3116\"\u003e#3116\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed cache key collisions in experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e union resolution by moving result caching from the union node level to the individual edge level, preventing collisions across requests that share edges but differ in object or relation. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3117\"\u003e#3117\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a bug in experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e where in-flight goroutines cancelled by a union short-circuit or recursive resolution could cache a false result, causing subsequent requests to incorrectly return false without querying the datastore. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3125\"\u003e#3125\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e returning an error when v2Check fails; Check now falls back to the standard algorithm instead. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3126\"\u003e#3126\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed OIDC authentication rejecting valid tokens after issuer key rotation by enabling JWKS refresh on unknown \u003ccode\u003ekid\u003c/code\u003e (rate-limited to once per minute). \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3101\"\u003e#3101\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate toolchain Go version to 1.26.3 to address the Go standard library vulnerabilities documented in the \u003ca href=\"https://go.dev/doc/devel/release#go1.26.3\"\u003eGo 1.26.3 release notes\u003c/a\u003e. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3115\"\u003e#3115\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andrey-berenda\"\u003e\u003ccode\u003e@​andrey-berenda\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3101\"\u003eopenfga/openfga#3101\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/openfga/openfga/compare/v1.15.1...v1.16.0\"\u003ehttps://github.com/openfga/openfga/compare/v1.15.1...v1.16.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.15.1\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReuse a single MySQL container across tests by replacing the test fixture implementation, improving test performance and reducing resource usage. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3042\"\u003e#3042\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a potential panic within command error handling. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3091\"\u003e#3091\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a bug that propagated expected errors from list objects when a path short-circuits. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3096\"\u003e#3096\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed cache key collisions in experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e for edges in unions with multiple branches (direct types, wildcards, TTU paths, or intersections). \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3097\"\u003e#3097\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a bug in the bounded tuple reader that would cause semaphore token leaks under context cancelation. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3106\"\u003e#3106\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a bug that could cause deadlocks in check by holding message streams open indefinitely upon error. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3111\"\u003e#3111\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/openfga/openfga/compare/v1.15.0...v1.15.1\"\u003ehttps://github.com/openfga/openfga/compare/v1.15.0...v1.15.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.15.0\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImplemented edge pruning in the list objects pipeline algorithm. This introduces a measurable improvement to request latency for larger, more complex authorization models. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3075\"\u003e#3075\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e query cache being skipped when the cache controller returns a zero invalidation time (e.g., on cold start or when disabled), despite the cache controller documenting that zero time should allow cache use. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3086\"\u003e#3086\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate toolchain Go version to 1.26.2 to address the Go standard library vulnerabilities documented in the \u003ca href=\"https://go.dev/doc/devel/release#go1.26.2\"\u003eGo 1.26.2 release notes\u003c/a\u003e. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3084\"\u003e#3084\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/openfga/openfga/blob/main/CHANGELOG.md\"\u003egithub.com/openfga/openfga's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.16.0] - 2026-05-20\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded datastore ping timeout (PingTimeout) and datastore ping retry timeout (PingRetryMaxElapsedTime) configurations. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3113\"\u003e#3113\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReport \u003ccode\u003eallowed\u003c/code\u003e result and \u003ccode\u003etuple_key\u003c/code\u003e on Check and experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e resolution trace spans. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3116\"\u003e#3116\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed cache key collisions in experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e union resolution by moving result caching from the union node level to the individual edge level, preventing collisions across requests that share edges but differ in object or relation. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3117\"\u003e#3117\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a bug in experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e where in-flight goroutines cancelled by a union short-circuit or recursive resolution could cache a false result, causing subsequent requests to incorrectly return false without querying the datastore. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3125\"\u003e#3125\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e returning an error when v2Check fails; Check now falls back to the standard algorithm instead. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3126\"\u003e#3126\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed OIDC authentication rejecting valid tokens after issuer key rotation by enabling JWKS refresh on unknown \u003ccode\u003ekid\u003c/code\u003e (rate-limited to once per minute). \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3101\"\u003e#3101\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate toolchain Go version to 1.26.3 to address the Go standard library vulnerabilities documented in the \u003ca href=\"https://go.dev/doc/devel/release#go1.26.3\"\u003eGo 1.26.3 release notes\u003c/a\u003e. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3115\"\u003e#3115\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.15.1] - 2026-05-06\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReuse a single MySQL container across tests by replacing the test fixture implementation, improving test performance and reducing resource usage. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3042\"\u003e#3042\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a potential panic within command error handling. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3091\"\u003e#3091\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a bug that propagated expected errors from list objects when a path short-circuits. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3096\"\u003e#3096\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed cache key collisions in experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e for edges in unions with multiple branches (direct types, wildcards, TTU paths, or intersections). \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3097\"\u003e#3097\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a bug in the bounded tuple reader that would cause semaphore token leaks under context cancelation. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3106\"\u003e#3106\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a bug that could cause deadlocks in check by holding message streams open indefinitely upon error. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3111\"\u003e#3111\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.15.0] - 2026-04-27\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImplemented edge pruning in the list objects pipeline algorithm. This introduces a measurable improvement to request latency for larger, more complex authorization models. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3075\"\u003e#3075\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e query cache being skipped when the cache controller returns a zero invalidation time (e.g., on cold start or when disabled), despite the cache controller documenting that zero time should allow cache use. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3086\"\u003e#3086\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate toolchain Go version to 1.26.2 to address the Go standard library vulnerabilities documented in the \u003ca href=\"https://go.dev/doc/devel/release#go1.26.2\"\u003eGo 1.26.2 release notes\u003c/a\u003e. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3084\"\u003e#3084\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.14.2] - 2026-04-14\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUse delimiter in contextual tuple key in experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e, and add validation in v2Check. Thanks to \u003ca href=\"https://github.com/0xmrma\"\u003e\u003ccode\u003e@​0xmrma\u003c/code\u003e\u003c/a\u003e for reporting this bug. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3064\"\u003e#3064\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.14.1] - 2026-04-10\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded configuration for the server shutdown timeout. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2976\"\u003e#2976\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd jitter to internal cache TTLs to spread expirations and reduce thundering herd effects. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3033\"\u003e#3033\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMade some minor changes in ListObjects to reduce heap allocations. Results in minor latency reduction. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3043\"\u003e#3043\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove cache key generation performance by removing \u003ccode\u003efmt\u003c/code\u003e usage and extend control-character sanitization to all cache key inputs (tuples, conditions, context). \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3006\"\u003e#3006\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReuse a single PostgreSQL container across tests by replacing the test fixture implementation, improving test performance and reducing resource usage. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3018\"\u003e#3018\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/165291872c4577a54200b9ddc7c966d3e89d6c2d\"\u003e\u003ccode\u003e1652918\u003c/code\u003e\u003c/a\u003e release: update changelog for release \u003ccode\u003ev1.16.0\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3139\"\u003e#3139\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/d42f9f3dea688db5f284e47048b06a2dbd8eecf6\"\u003e\u003ccode\u003ed42f9f3\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/ece3b9ef965a7a790c433d889538319569639527\"\u003e\u003ccode\u003eece3b9e\u003c/code\u003e\u003c/a\u003e fix: unintentional zeroing of slice values by setting slice to nil (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3135\"\u003e#3135\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/5b39f175c241f5f9691bacb8ce6721ecad8c9179\"\u003e\u003ccode\u003e5b39f17\u003c/code\u003e\u003c/a\u003e increase the check v2 trace information fidelity (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3134\"\u003e#3134\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/b6d0028e02c9d3df3f5c93633f736f5192d9b2b6\"\u003e\u003ccode\u003eb6d0028\u003c/code\u003e\u003c/a\u003e feat: add datastore ping and ping retry configurations (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3113\"\u003e#3113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/e669ac8b710f9902bbed3fb1f9784ef57e8e8a9a\"\u003e\u003ccode\u003ee669ac8\u003c/code\u003e\u003c/a\u003e fix: prevent v2Check strategies returning spurious false on context cancellat...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/857e432cc7c02115b1ec7dd9e0d6b6dd5f8e3d10\"\u003e\u003ccode\u003e857e432\u003c/code\u003e\u003c/a\u003e fix(authn/oidc): refresh JWKS on unknown kid to handle key rotation (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3101\"\u003e#3101\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/8c9e0bf3547877643ff7b31cb4a95f939c10b48d\"\u003e\u003ccode\u003e8c9e0bf\u003c/code\u003e\u003c/a\u003e fix: v2Check falls back to v1 on errors (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3126\"\u003e#3126\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/c30681262a8cccb3e55e60d065b10cbe3e889323\"\u003e\u003ccode\u003ec306812\u003c/code\u003e\u003c/a\u003e fix: don't cache false results from cancelled-context goroutines in v2Check (...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/39113898dc97af10df8c1660f01d014b2cc1d230\"\u003e\u003ccode\u003e3911389\u003c/code\u003e\u003c/a\u003e make union cache key unique by including the node input's label (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3117\"\u003e#3117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/openfga/openfga/compare/v1.8.13...v1.16.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel` from 1.37.0 to 1.43.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02\u003c/h2\u003e\n\u003cp\u003eThis release is the last to support [Go 1.24].\nThe next release will require at least [Go 1.25].\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSupport testing of [Go 1.26]. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902\"\u003e#7902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003eBaggage\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/propagation\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e and \u003ccode\u003eNew\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/baggage\u003c/code\u003e to comply with W3C Baggage specification limits.\n\u003ccode\u003eNew\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e now return partial baggage along with an error when limits are exceeded.\nErrors from baggage extraction are reported to the global error handler. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880\"\u003e#7880\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.40.0/0.62.0/0.16.0] 2026-02-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eAlwaysRecord\u003c/code\u003e sampler in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7724\"\u003e#7724\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eEnabled\u003c/code\u003e method to all synchronous instrument interfaces (\u003ccode\u003eFloat64Counter\u003c/code\u003e, \u003ccode\u003eFloat64UpDownCounter\u003c/code\u003e, \u003ccode\u003eFloat64Histogram\u003c/code\u003e, \u003ccode\u003eFloat64Gauge\u003c/code\u003e, \u003ccode\u003eInt64Counter\u003c/code\u003e, \u003ccode\u003eInt64UpDownCounter\u003c/code\u003e, \u003ccode\u003eInt64Histogram\u003c/code\u003e, \u003ccode\u003eInt64Gauge\u003c/code\u003e,) in \u003ccode\u003ego.opentelemetry.io/otel/metric\u003c/code\u003e.\nThis stabilizes the synchronous instrument enabled feature, allowing users to check if an instrument will process measurements before performing computationally expensive operations. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7763\"\u003e#7763\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.39.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.39.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.38.0.\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7783\"\u003e#7783\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7789\"\u003e#7789\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove the concurrent performance of \u003ccode\u003eHistogramReservoir\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/exemplar\u003c/code\u003e by 4x. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7443\"\u003e#7443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove the concurrent performance of \u003ccode\u003eFixedSizeReservoir\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/exemplar\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7447\"\u003e#7447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent histogram measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7474\"\u003e#7474\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent synchronous gauge measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7478\"\u003e#7478\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/stdout/stdoutmetric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7492\"\u003e#7492\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eExporter\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/prometheus\u003c/code\u003e ignores metrics with the scope \u003ccode\u003ego.opentelemetry.io/contrib/bridges/prometheus\u003c/code\u003e.\nThis prevents scrape failures when the Prometheus exporter is misconfigured to get data from the Prometheus bridge. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7688\"\u003e#7688\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent exponential histogram measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7702\"\u003e#7702\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003erpc.grpc.status_code\u003c/code\u003e attribute in the experimental metrics emitted from \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e is replaced with the \u003ccode\u003erpc.response.status_code\u003c/code\u003e attribute to align with the semantic conventions. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854\"\u003e#7854\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003erpc.grpc.status_code\u003c/code\u003e attribute in the experimental metrics emitted from \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e is replaced with the \u003ccode\u003erpc.response.status_code\u003c/code\u003e attribute to align with the semantic conventions. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854\"\u003e#7854\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix bad log message when key-value pairs are dropped because of key duplication in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eDroppedAttributes\u003c/code\u003e on \u003ccode\u003eRecord\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e to not count the non-attribute key-value pairs dropped because of key duplication. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eSetAttributes\u003c/code\u003e on \u003ccode\u003eRecord\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e to not log that attributes are dropped when they are actually not dropped. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to correctly handle HTTP/2 \u003ccode\u003eGOAWAY\u003c/code\u003e frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7794\"\u003e#7794\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003eioreg\u003c/code\u003e command on Darwin (macOS). (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7818\"\u003e#7818\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4575a9774dd9415ffc858dd34955493b0031065a\"\u003e\u003ccode\u003e4575a97\u003c/code\u003e\u003c/a\u003e Release 1.41.0/0.63.0/0.17.0/0.0.15 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7977\"\u003e#7977\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/66fc10d9dff9653c65bcca111b965137d06f09aa\"\u003e\u003ccode\u003e66fc10d\u003c/code\u003e\u003c/a\u003e fix: add error handling for insecure HTTP endpoints with TLS client configura...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/76e6eec88f186f06a0708b5620324d2b002d9a97\"\u003e\u003ccode\u003e76e6eec\u003c/code\u003e\u003c/a\u003e chore(deps): update github/codeql-action action to v4.32.5 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7980\"\u003e#7980\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0d50f9008c8c93fe49a7caa45c88c30370479d27\"\u003e\u003ccode\u003e0d50f90\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Generate semconv/v1.40.0\u0026quot; (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7978\"\u003e#7978\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c38a4a57c320b6098ca5c92f0a85201034780b1f\"\u003e\u003ccode\u003ec38a4a5\u003c/code\u003e\u003c/a\u003e Generate semconv/v1.40.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7929\"\u003e#7929\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0f1a22484ec52d6beb1efdb0fa1b63a31e7405af\"\u003e\u003ccode\u003e0f1a224\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/securego/gosec/v2 to v2.23.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7899\"\u003e#7899\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c79ebf43eb1cff6dd76a33bb1549f2c082dab604\"\u003e\u003ccode\u003ec79ebf4\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/daixiang0/gci to v0.14.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7973\"\u003e#7973\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f75815746541d0d4ac84e1c5955bdcd1a2df2d7d\"\u003e\u003ccode\u003ef758157\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/sonatard/noctx to v0.5.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7968\"\u003e#7968\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/92a11645724515630187def073ae39f1b6cb3c69\"\u003e\u003ccode\u003e92a1164\u003c/code\u003e\u003c/a\u003e fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to d566b...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/3cd7c27e840ea3114115459db2e299a27fffaff8\"\u003e\u003ccode\u003e3cd7c27\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/protonmail/go-crypto to v1.4.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7969\"\u003e#7969\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.37.0...v1.41.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/sdk` from 1.37.0 to 1.43.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/sdk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.43.0/0.65.0/0.19.0] 2026-04-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eIsRandom\u003c/code\u003e and \u003ccode\u003eWithRandom\u003c/code\u003e on \u003ccode\u003eTraceFlags\u003c/code\u003e, and \u003ccode\u003eIsRandom\u003c/code\u003e on \u003ccode\u003eSpanContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e for \u003ca href=\"https://www.w3.org/TR/trace-context-2/#random-trace-id-flag\"\u003eW3C Trace Context Level 2 Random Trace ID Flag\u003c/a\u003e support. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012\"\u003e#8012\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd service detection with \u003ccode\u003eWithService\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642\"\u003e#7642\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eDefaultWithContext\u003c/code\u003e and \u003ccode\u003eEnvironmentWithContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to support plumbing \u003ccode\u003econtext.Context\u003c/code\u003e through default and environment detectors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051\"\u003e#8051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd support for per-series start time tracking for cumulative metrics in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true\u003c/code\u003e to enable. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060\"\u003e#8060\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithCardinalityLimitSelector\u003c/code\u003e for metric reader for configuring cardinality limits specific to the instrument kind. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855\"\u003e#7855\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce the \u003ccode\u003eEMPTY\u003c/code\u003e Type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to reflect that an empty value is now a valid value, with \u003ccode\u003eINVALID\u003c/code\u003e remaining as a deprecated alias of \u003ccode\u003eEMPTY\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove slice handling in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to optimize short slice values with fixed-size fast paths. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039\"\u003e#8039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of span metric recording in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e by returning early if self-observability is not enabled. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067\"\u003e#8067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove formatting of metric data diffs in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073\"\u003e#8073\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeprecated\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eINVALID\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. Use \u003ccode\u003eEMPTY\u003c/code\u003e instead. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReturn spec-compliant \u003ccode\u003eTraceIdRatioBased\u003c/code\u003e description. This is a breaking behavioral change, but it is necessary to\nmake the implementation \u003ca href=\"https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased\"\u003espec-compliant\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027\"\u003e#8027\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a race condition in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056\"\u003e#8056\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003ekenv\u003c/code\u003e command on BSD. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to correctly handle HTTP2 GOAWAY frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.40.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985\"\u003e#7985\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9276201a64b623606e3eaa0d61ae8ee6d62756c0\"\u003e\u003ccode\u003e9276201\u003c/code\u003e\u003c/a\u003e Release v1.43.0 / v0.65.0 / v0.19.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8128\"\u003e#8128\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/61b8c9466c4e6b17e69b622279fe9b63fb15c89a\"\u003e\u003ccode\u003e61b8c94\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8131\"\u003e#8131\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/97a086e82ffe01502f4c620e9c447efa229e2a23\"\u003e\u003ccode\u003e97a086e\u003c/code\u003e\u003c/a\u003e chore(deps): update github.com/golangci/dupl digest to c99c5cf (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8122\"\u003e#8122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/5e363de517dba6db62736b2f5cdef0e0929b4cd0\"\u003e\u003ccode\u003e5e363de\u003c/code\u003e\u003c/a\u003e limit response body size for OTLP HTTP exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/35214b60138eac8dec97a2d2b851d8c8471680c7\"\u003e\u003ccode\u003e35214b6\u003c/code\u003e\u003c/a\u003e Use an absolute path when calling bsd kenv (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/290024ceaf695f9cdbf29a0c6731a317d92bc361\"\u003e\u003ccode\u003e290024c\u003c/code\u003e\u003c/a\u003e fix(deps): update module google.golang.org/grpc to v1.80.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8121\"\u003e#8121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/e70658e098033d6bb5ec1b399de16bbb2642f6dc\"\u003e\u003ccode\u003ee70658e\u003c/code\u003e\u003c/a\u003e fix: support getBody in otelploghttp (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4afe468e3b4859c949a1c1e8d92684d43d86ef8a\"\u003e\u003ccode\u003e4afe468\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 9d38bb4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8117\"\u003e#8117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b9ca729776309e3c08fe700c131797a3b4d10634\"\u003e\u003ccode\u003eb9ca729\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8115\"\u003e#8115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/69472ec56cb7674d55ca2e2bcb04dea73228ab79\"\u003e\u003ccode\u003e69472ec\u003c/code\u003e\u003c/a\u003e chore(deps): update fossas/fossa-action action to v1.9.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8118\"\u003e#8118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.37.0...v1.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.41.0 to 0.50.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/4e0068c0098be10d7025c99ab7c50ce454c1f0f9\"\u003e\u003ccode\u003e4e0068c\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e79546e28b85ea53dd37afe1c4102746ef553b9c\"\u003e\u003ccode\u003ee79546e\u003c/code\u003e\u003c/a\u003e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f91f7a7c31bf90b39c1de895ad116a2bacc88748\"\u003e\u003ccode\u003ef91f7a7\u003c/code\u003e\u003c/a\u003e ssh/agent: prevent panic on malformed constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/2df4153a0311bdfea44376e0eb6ef2faefb0275b\"\u003e\u003ccode\u003e2df4153\u003c/code\u003e\u003c/a\u003e acme/autocert: let automatic renewal work with short lifetime certs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/bcf6a849efcf4702fa5172cb0998b46c3da1e989\"\u003e\u003ccode\u003ebcf6a84\u003c/code\u003e\u003c/a\u003e acme: pass context to request\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b4f2b62076abeee4e43fb59544dac565715fbf1e\"\u003e\u003ccode\u003eb4f2b62\u003c/code\u003e\u003c/a\u003e ssh: fix error message on unsupported cipher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/79ec3a51fcc7fbd2691d56155d578225ccc542e2\"\u003e\u003ccode\u003e79ec3a5\u003c/code\u003e\u003c/a\u003e ssh: allow to bind to a hostname in remote forwarding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/122a78f140d9d3303ed3261bc374bbbca149140f\"\u003e\u003ccode\u003e122a78f\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/c0531f9c34514ad5c5551e2d6ce569ca673a8afd\"\u003e\u003ccode\u003ec0531f9\u003c/code\u003e\u003c/a\u003e all: eliminate vet diagnostics\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/0997000b45e3a40598272081bcad03ffd21b8adb\"\u003e\u003ccode\u003e0997000\u003c/code\u003e\u003c/a\u003e all: fix some comments\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.41.0...v0.45.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google.golang.org/grpc` from 1.74.2 to 1.80.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc-go/releases\"\u003egoogle.golang.org/grpc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 1.79.3\u003c/h2\u003e\n\u003ch1\u003eSecurity\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eserver: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted \u0026quot;deny\u0026quot; rules in interceptors like \u003ccode\u003egrpc/authz\u003c/code\u003e. Any request with a non-canonical path is now immediately rejected with an \u003ccode\u003eUnimplemented\u003c/code\u003e error. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.2\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003estats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8874\"\u003egrpc/grpc-go#8874\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.1\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003egrpc: Remove the \u003ccode\u003e-dev\u003c/code\u003e suffix from the User-Agent header. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8902\"\u003egrpc/grpc-go#8902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.0\u003c/h2\u003e\n\u003ch1\u003eAPI Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003emem: Add experimental API \u003ccode\u003eSetDefaultBufferPool\u003c/code\u003e to change the default buffer pool. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8806\"\u003e#8806\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/vanja-p\"\u003e\u003ccode\u003e@​vanja-p\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eexperimental/stats: Update \u003ccode\u003eMetricsRecorder\u003c/code\u003e to require embedding the new \u003ccode\u003eUnimplementedMetricsRecorder\u003c/code\u003e (a no-op struct) in all implementations for forward compatibility. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBehavior Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ebalancer/weightedtarget: Remove handling of \u003ccode\u003eAddresses\u003c/code\u003e and only handle \u003ccode\u003eEndpoints\u003c/code\u003e in resolver updates. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8841\"\u003e#8841\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eNew Features\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eexperimental/stats: Add support for asynchronous gauge metrics through the new \u003ccode\u003eAsyncMetricReporter\u003c/code\u003e and \u003ccode\u003eRegisterAsyncReporter\u003c/code\u003e APIs. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epickfirst: Add support for weighted random shuffling of endpoints, as described in \u003ca href=\"https://redirect.github.com/grpc/proposal/pull/535\"\u003egRFC A113\u003c/a\u003e.\n\u003cul\u003e\n\u003cli\u003eThis is enabled by default, and can be turned off using the environment variable \u003ccode\u003eGRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds: Implement \u003ccode\u003e:authority\u003c/code\u003e rewriting, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A81-xds-authority-rewriting.md\"\u003egRFC A81\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8779\"\u003e#8779\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebalancer/randomsubsetting: Implement the \u003ccode\u003erandom_subsetting\u003c/code\u003e LB policy, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A68-random-subsetting.md\"\u003egRFC A68\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8650\"\u003e#8650\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/marek-szews\"\u003e\u003ccode\u003e@​marek-szews\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/tls: Fix a bug where the port was not stripped from the authority override before validation. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8726\"\u003e#8726\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/Atul1710\"\u003e\u003ccode\u003e@​Atul1710\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds/priority: Fix a bug causing delayed failover to lower-priority clusters when a higher-priority cluster is stuck in \u003ccode\u003eCONNECTING\u003c/code\u003e state. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8813\"\u003e#8813\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ehealth: Fix a bug where health checks failed for clients using legacy compression options (\u003ccode\u003eWithDecompressor\u003c/code\u003e or \u003ccode\u003eRPCDecompressor\u003c/code\u003e). (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8765\"\u003e#8765\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/sanki92\"\u003e\u003ccode\u003e@​sanki92\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003etransport: Fix an issue where the HTTP/2 server could skip header size checks when terminating a stream early. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8769\"\u003e#8769\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eserver: Propagate status detail headers, if available, when terminating a stream during request header processing. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8754\"\u003e#8754\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ePerformance Improvements\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/alts: Optimize read buffer alignment to reduce copies. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8791\"\u003e#8791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emem: Optimize pooling and creation of \u003ccode\u003ebuffer\u003c/code\u003e objects.  (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8784\"\u003e#8784\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etransport: Reduce slice re-allocations by reserving slice capacity. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8797\"\u003e#8797\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/dda86dbd9cecb8b35b58c73d507d81d67761205f\"\u003e\u003ccode\u003edda86db\u003c/code\u003e\u003c/a\u003e Change version to 1.79.3 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8983\"\u003e#8983\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/72186f163e75a065c39e6f7df9b6dea07fbdeff5\"\u003e\u003ccode\u003e72186f1\u003c/code\u003e\u003c/a\u003e grpc: enforce strict path checking for incoming requests on the server (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/97ca3522b239edf6813e2b1106924e9d55e89d43\"\u003e\u003ccode\u003e97ca352\u003c/code\u003e\u003c/a\u003e Changing version to 1.79.3-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8954\"\u003e#8954\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/8902ab6efea590f5b3861126559eaa26fa9783b2\"\u003e\u003ccode\u003e8902ab6\u003c/code\u003e\u003c/a\u003e Change the version to release 1.79.2 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8947\"\u003e#8947\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/a9286705aa689bee321ec674323b6896284f3e02\"\u003e\u003ccode\u003ea928670\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8874\"\u003e#8874\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8904\"\u003e#8904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/06df3638c0bcee88197b1033b3ba83e1eb8bc010\"\u003e\u003ccode\u003e06df363\u003c/code\u003e\u003c/a\u003e Change version to 1.79.2-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8903\"\u003e#8903\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/782f2de44f597af18a120527e7682a6670d84289\"\u003e\u003ccode\u003e782f2de\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8902\"\u003e#8902\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/850eccbb2257bd2de6ac28ee88a7172ab6175629\"\u003e\u003ccode\u003e850eccb\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8851\"\u003e#8851\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/765ff056b6890f6c8341894df4e9668e9bfc18ef\"\u003e\u003ccode\u003e765ff05\u003c/code\u003e\u003c/a\u003e Change version to 1.79.0 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8850\"\u003e#8850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/68804be0e78ed0365bb5a576dedc12e2168ed63e\"\u003e\u003ccode\u003e68804be\u003c/code\u003e\u003c/a\u003e Cherry pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8896\"\u003e#8896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/grpc/grpc-go/compare/v1.74.2...v1.79.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/Azure/go-ntlmssp` from 0.0.0-20220621081337-cb9428e4ac1e to 0.1.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Azure/go-ntlmssp/releases\"\u003egithub.com/Azure/go-ntlmssp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.1.1\u003c/h2\u003e\n\u003cp\u003eFix CVE-2026-32952: A malicious NTLM challenge message can causes an slice out of bounds panic, which can crash any Go process using ntlmssp.Negotiator as an HTTP transport.\u003c/p\u003e\n\u003ch2\u003ev0.1.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump minimum required version to Go 1.24 by \u003ca href=\"https://github.com/qmuntal\"\u003e\u003ccode\u003e@​qmuntal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Azure/go-ntlmssp/pull/53\"\u003eAzure/go-ntlmssp#53\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix OOM in NTLM negotiator by avoiding buffering of seekable request bodies by \u003ca href=\"https://github.com/Copilot\"\u003e\u003ccode\u003e@​Copilot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Azure/go-ntlmssp/pull/54\"\u003eAzure/go-ntlmssp#54\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDon't modify the rountripped request by \u003ca href=\"https://github.com/qmuntal\"\u003e\u003ccode\u003e@​qmuntal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Azure/go-ntlmssp/pull/57\"\u003eAzure/go-ntlmssp#57\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a race occurring when the wrapped Rountripper closes the request body in another goroutine by \u003ca href=\"https://github.com/qmuntal\"\u003e\u003ccode\u003e@​qmuntal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Azure/go-ntlmssp/pull/58\"\u003eAzure/go-ntlmssp#58\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a race occurring when the wrapped Rountripper reads request fields in another goroutine by \u003ca href=\"https://github.com/qmuntal\"\u003e\u003ccode\u003e@​qmuntal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Azure/go-ntlmssp/pull/59\"\u003eAzure/go-ntlmssp#59\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eOnly perform basic auth if requested by the server by \u003ca href=\"https://github.com/qmuntal\"\u003e\u003ccode\u003e@​qmuntal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Azure/go-ntlmssp/pull/60\"\u003eAzure/go-ntlmssp#60\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDon't pass the original body in the client handshake request by \u003ca href=\"https://github.com/qmuntal\"\u003e\u003ccode\u003e@​qmuntal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Azure/go-ntlmssp/pull/61\"\u003eAzure/go-ntlmssp#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRe...\n\n_Description has been truncated_","html_url":"https://github.com/OneFineStarstuff/grafana/pull/4","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/OneFineStarstuff%2Fgrafana/issues/4","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/4/packages"},{"uuid":"4599154007","node_id":"PR_kwDOI8Bmh87jNp85","number":586,"state":"open","title":"chore(deps): bump the go_modules group across 1 directory with 3 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":6,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-06-05T18:23:47.000Z","updated_at":"2026-06-05T18:31:40.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"go_modules","update_count":3,"packages":[{"name":"google.golang.org/grpc","old_version":"1.70.0","new_version":"1.79.3","repository_url":"https://github.com/grpc/grpc-go"},{"name":"github.com/cloudflare/circl","old_version":"1.6.1","new_version":"1.6.3","repository_url":"https://github.com/cloudflare/circl"},{"name":"go.opentelemetry.io/otel/sdk","old_version":"1.34.0","new_version":"1.39.0"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 2 updates in the / directory: [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [github.com/cloudflare/circl](https://github.com/cloudflare/circl).\n\nUpdates `google.golang.org/grpc` from 1.70.0 to 1.79.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc-go/releases\"\u003egoogle.golang.org/grpc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 1.79.3\u003c/h2\u003e\n\u003ch1\u003eSecurity\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eserver: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted \u0026quot;deny\u0026quot; rules in interceptors like \u003ccode\u003egrpc/authz\u003c/code\u003e. Any request with a non-canonical path is now immediately rejected with an \u003ccode\u003eUnimplemented\u003c/code\u003e error. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.2\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003estats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8874\"\u003egrpc/grpc-go#8874\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.1\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003egrpc: Remove the \u003ccode\u003e-dev\u003c/code\u003e suffix from the User-Agent header. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8902\"\u003egrpc/grpc-go#8902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.0\u003c/h2\u003e\n\u003ch1\u003eAPI Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003emem: Add experimental API \u003ccode\u003eSetDefaultBufferPool\u003c/code\u003e to change the default buffer pool. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8806\"\u003e#8806\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/vanja-p\"\u003e\u003ccode\u003e@​vanja-p\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eexperimental/stats: Update \u003ccode\u003eMetricsRecorder\u003c/code\u003e to require embedding the new \u003ccode\u003eUnimplementedMetricsRecorder\u003c/code\u003e (a no-op struct) in all implementations for forward compatibility. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBehavior Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ebalancer/weightedtarget: Remove handling of \u003ccode\u003eAddresses\u003c/code\u003e and only handle \u003ccode\u003eEndpoints\u003c/code\u003e in resolver updates. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8841\"\u003e#8841\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eNew Features\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eexperimental/stats: Add support for asynchronous gauge metrics through the new \u003ccode\u003eAsyncMetricReporter\u003c/code\u003e and \u003ccode\u003eRegisterAsyncReporter\u003c/code\u003e APIs. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epickfirst: Add support for weighted random shuffling of endpoints, as described in \u003ca href=\"https://redirect.github.com/grpc/proposal/pull/535\"\u003egRFC A113\u003c/a\u003e.\n\u003cul\u003e\n\u003cli\u003eThis is enabled by default, and can be turned off using the environment variable \u003ccode\u003eGRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds: Implement \u003ccode\u003e:authority\u003c/code\u003e rewriting, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A81-xds-authority-rewriting.md\"\u003egRFC A81\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8779\"\u003e#8779\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebalancer/randomsubsetting: Implement the \u003ccode\u003erandom_subsetting\u003c/code\u003e LB policy, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A68-random-subsetting.md\"\u003egRFC A68\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8650\"\u003e#8650\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/marek-szews\"\u003e\u003ccode\u003e@​marek-szews\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/tls: Fix a bug where the port was not stripped from the authority override before validation. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8726\"\u003e#8726\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/Atul1710\"\u003e\u003ccode\u003e@​Atul1710\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds/priority: Fix a bug causing delayed failover to lower-priority clusters when a higher-priority cluster is stuck in \u003ccode\u003eCONNECTING\u003c/code\u003e state. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8813\"\u003e#8813\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ehealth: Fix a bug where health checks failed for clients using legacy compression options (\u003ccode\u003eWithDecompressor\u003c/code\u003e or \u003ccode\u003eRPCDecompressor\u003c/code\u003e). (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8765\"\u003e#8765\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/sanki92\"\u003e\u003ccode\u003e@​sanki92\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003etransport: Fix an issue where the HTTP/2 server could skip header size checks when terminating a stream early. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8769\"\u003e#8769\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eserver: Propagate status detail headers, if available, when terminating a stream during request header processing. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8754\"\u003e#8754\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ePerformance Improvements\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/alts: Optimize read buffer alignment to reduce copies. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8791\"\u003e#8791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emem: Optimize pooling and creation of \u003ccode\u003ebuffer\u003c/code\u003e objects.  (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8784\"\u003e#8784\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etransport: Reduce slice re-allocations by reserving slice capacity. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8797\"\u003e#8797\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/dda86dbd9cecb8b35b58c73d507d81d67761205f\"\u003e\u003ccode\u003edda86db\u003c/code\u003e\u003c/a\u003e Change version to 1.79.3 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8983\"\u003e#8983\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/72186f163e75a065c39e6f7df9b6dea07fbdeff5\"\u003e\u003ccode\u003e72186f1\u003c/code\u003e\u003c/a\u003e grpc: enforce strict path checking for incoming requests on the server (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/97ca3522b239edf6813e2b1106924e9d55e89d43\"\u003e\u003ccode\u003e97ca352\u003c/code\u003e\u003c/a\u003e Changing version to 1.79.3-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8954\"\u003e#8954\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/8902ab6efea590f5b3861126559eaa26fa9783b2\"\u003e\u003ccode\u003e8902ab6\u003c/code\u003e\u003c/a\u003e Change the version to release 1.79.2 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8947\"\u003e#8947\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/a9286705aa689bee321ec674323b6896284f3e02\"\u003e\u003ccode\u003ea928670\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8874\"\u003e#8874\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8904\"\u003e#8904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/06df3638c0bcee88197b1033b3ba83e1eb8bc010\"\u003e\u003ccode\u003e06df363\u003c/code\u003e\u003c/a\u003e Change version to 1.79.2-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8903\"\u003e#8903\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/782f2de44f597af18a120527e7682a6670d84289\"\u003e\u003ccode\u003e782f2de\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8902\"\u003e#8902\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/850eccbb2257bd2de6ac28ee88a7172ab6175629\"\u003e\u003ccode\u003e850eccb\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8851\"\u003e#8851\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/765ff056b6890f6c8341894df4e9668e9bfc18ef\"\u003e\u003ccode\u003e765ff05\u003c/code\u003e\u003c/a\u003e Change version to 1.79.0 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8850\"\u003e#8850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/68804be0e78ed0365bb5a576dedc12e2168ed63e\"\u003e\u003ccode\u003e68804be\u003c/code\u003e\u003c/a\u003e Cherry pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8896\"\u003e#8896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/grpc/grpc-go/compare/v1.70.0...v1.79.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/cloudflare/circl` from 1.6.1 to 1.6.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cloudflare/circl/releases\"\u003egithub.com/cloudflare/circl's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eCIRCL v1.6.3\u003c/h2\u003e\n\u003cp\u003eFix a bug on ecc/p384 scalar multiplication.\u003c/p\u003e\n\u003ch3\u003eWhat's Changed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esign/mldsa: Check opts for nil value  by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/582\"\u003ecloudflare/circl#582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eecc/p384: Point addition must handle point doubling case. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/583\"\u003ecloudflare/circl#583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease CIRCL v1.6.3 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/584\"\u003ecloudflare/circl#584\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNew SLH-DSA, improvements in ML-DSA for arm64.\u003c/li\u003e\n\u003cli\u003eTested compilation on WASM.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize pairing product computation by moving exponentiations to G1. by \u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esign: Adding SLH-DSA signature by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/512\"\u003ecloudflare/circl#512\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate code generators to CIRCL v1.6.1. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/548\"\u003ecloudflare/circl#548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eML-DSA: Add preliminary Wycheproof test vectors by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/552\"\u003ecloudflare/circl#552\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ego fmt by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/554\"\u003ecloudflare/circl#554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egz-compressing test vectors, use of HexBytes and ReadGzip functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/555\"\u003ecloudflare/circl#555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Removes use of elliptic Marshal and Unmarshal functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/556\"\u003ecloudflare/circl#556\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport encoding/decoding ML-DSA private keys (as long as they contain seeds) by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/559\"\u003ecloudflare/circl#559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to golangci-lint v2 by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/560\"\u003ecloudflare/circl#560\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreparation for ARM64 Implementation of poly operations for dilithium package. by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eprepare power2Round for custom implementations in assembly by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/564\"\u003ecloudflare/circl#564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eARM64 implementation for poly.PackLe16 by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/563\"\u003ecloudflare/circl#563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polyMulBy2toD by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/565\"\u003ecloudflare/circl#565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polySub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/566\"\u003ecloudflare/circl#566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: add byteLen method for short groups and RandomScalar uses rand.Int by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/568\"\u003ecloudflare/circl#568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of poly.Add/Sub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/572\"\u003ecloudflare/circl#572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Adding cryptobyte marshaling to scalars by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/569\"\u003ecloudflare/circl#569\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumping up to Go1.25 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/574\"\u003ecloudflare/circl#574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: Including WASM compilation. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/577\"\u003ecloudflare/circl#577\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to using package-declared HPKE errors for shortkem instead of standard library errors by \u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease v1.6.2 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/579\"\u003ecloudflare/circl#579\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/24ae53c5d6f7fe18203adc125ba3ed76a38703e1\"\u003e\u003ccode\u003e24ae53c\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/581020bd4a836b8ce7bd4e414ba2884c07dbc906\"\u003e\u003ccode\u003e581020b\u003c/code\u003e\u003c/a\u003e Rename method to oddMultiplesProjective.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/12209a4566605692a8402594e367a5aed5148460\"\u003e\u003ccode\u003e12209a4\u003c/code\u003e\u003c/a\u003e Removing unused cmov for jacobian points.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/fcba359f4178645d2c9e50f29ab6966337da4b95\"\u003e\u003ccode\u003efcba359\u003c/code\u003e\u003c/a\u003e ecc/p384: use of complete projective formulas for scalar multiplication.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/5e1bae8d8c2df4e717c2c5c2d5b5d60b629b2ac6\"\u003e\u003ccode\u003e5e1bae8\u003c/code\u003e\u003c/a\u003e ecc/p384: handle point doubling in point addition with Jacobian coordinates.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/341604685ff97e8f7440ae4b4711ba1c118c648c\"\u003e\u003ccode\u003e3416046\u003c/code\u003e\u003c/a\u003e Check opts for nil value.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/a763d47a6dce43d1f4f7b697d1d7810463a526f6\"\u003e\u003ccode\u003ea763d47\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3c70bf9ad53b681fbe5ba6067e454a86549fee8a\"\u003e\u003ccode\u003e3c70bf9\u003c/code\u003e\u003c/a\u003e Bump x/crypto x/sys dependencies.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3f0f15b2bfe67bad81a35e8aec81ae42ca78349d\"\u003e\u003ccode\u003e3f0f15b\u003c/code\u003e\u003c/a\u003e Revert to using package-declared HPKE errors for shortkem instead of standard...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/23491bd573cf29b6f567057a158203a2c9dfa30d\"\u003e\u003ccode\u003e23491bd\u003c/code\u003e\u003c/a\u003e Adding generic Power2Round method.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/sdk` from 1.34.0 to 1.39.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/sdk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.39.0/0.61.0/0.15.0/0.0.14] 2025-12-05\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eGreatly reduce the cost of recording metrics in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e using hashing for map keys. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7175\"\u003e#7175\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithInstrumentationAttributeSet\u003c/code\u003e option to \u003ccode\u003ego.opentelemetry.io/otel/log\u003c/code\u003e, \u003ccode\u003ego.opentelemetry.io/otel/metric\u003c/code\u003e, and \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e packages.\nThis provides a concurrent-safe and performant alternative to \u003ccode\u003eWithInstrumentationAttributes\u003c/code\u003e by accepting a pre-constructed \u003ccode\u003eattribute.Set\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7287\"\u003e#7287\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability for the Prometheus exporter in \u003ccode\u003ego.opentelemetry.io/otel/exporters/prometheus\u003c/code\u003e.\nCheck the \u003ccode\u003ego.opentelemetry.io/otel/exporters/prometheus/internal/x\u003c/code\u003e package documentation for more information. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7345\"\u003e#7345\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7353\"\u003e#7353\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd temporality selector functions \u003ccode\u003eDeltaTemporalitySelector\u003c/code\u003e, \u003ccode\u003eCumulativeTemporalitySelector\u003c/code\u003e, \u003ccode\u003eLowMemoryTemporalitySelector\u003c/code\u003e to \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7434\"\u003e#7434\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics for simple log processor in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7548\"\u003e#7548\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7459\"\u003e#7459\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7486\"\u003e#7486\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics for simple span processor in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7374\"\u003e#7374\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7512\"\u003e#7512\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics for manual reader in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7524\"\u003e#7524\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics for periodic reader in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7571\"\u003e#7571\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eOTEL_EXPORTER_OTLP_LOGS_INSECURE\u003c/code\u003e and \u003ccode\u003eOTEL_EXPORTER_OTLP_INSECURE\u003c/code\u003e environmental variables in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7608\"\u003e#7608\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eEnabled\u003c/code\u003e method to the \u003ccode\u003eProcessor\u003c/code\u003e interface in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e.\nAll \u003ccode\u003eProcessor\u003c/code\u003e implementations now include an \u003ccode\u003eEnabled\u003c/code\u003e method. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7639\"\u003e#7639\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.38.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.38.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.38.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.37.0.\u003c/code\u003e(\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7648\"\u003e#7648\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eDistinct\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e is no longer guaranteed to uniquely identify an attribute set.\nCollisions between \u003ccode\u003eDistinct\u003c/code\u003e values for different Sets are possible with extremely high cardinality (billions of series per instrument), but are highly unlikely. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7175\"\u003e#7175\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithInstrumentationAttributes\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e synchronously de-duplicates the passed attributes instead of delegating it to the returned \u003ccode\u003eTracerOption\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7266\"\u003e#7266\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithInstrumentationAttributes\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/meter\u003c/code\u003e synchronously de-duplicates the passed attributes instead of delegating it to the returned \u003ccode\u003eMeterOption\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7266\"\u003e#7266\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithInstrumentationAttributes\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/log\u003c/code\u003e synchronously de-duplicates the passed attributes instead of delegating it to the returned \u003ccode\u003eLoggerOption\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7266\"\u003e#7266\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRename the \u003ccode\u003eOTEL_GO_X_SELF_OBSERVABILITY\u003c/code\u003e environment variable to \u003ccode\u003eOTEL_GO_X_OBSERVABILITY\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e, \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e, and \u003ccode\u003ego.opentelemetry.io/otel/exporters/stdout/stdouttrace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7302\"\u003e#7302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of histogram \u003ccode\u003eRecord\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e when min and max are disabled using \u003ccode\u003eNoMinMax\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7306\"\u003e#7306\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove error handling for dropped data during translation by using \u003ccode\u003eprometheus.NewInvalidMetric\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/prometheus\u003c/code\u003e.\n⚠️ \u003cstrong\u003eBreaking Change:\u003c/strong\u003e Previously, these cases were only logged and scrapes succeeded.\nNow, when translation would drop data (e.g., invalid label/value), the exporter emits a \u003ccode\u003eNewInvalidMetric\u003c/code\u003e, and Prometheus scrapes \u003cstrong\u003efail with HTTP 500\u003c/strong\u003e by default.\nTo preserve the prior behavior (scrapes succeed while errors are logged), configure your Prometheus HTTP handler with: \u003ccode\u003epromhttp.HandlerOpts{ ErrorHandling: promhttp.ContinueOnError }\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7363\"\u003e#7363\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReplace fnv hash with xxhash in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e for better performance. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7371\"\u003e#7371\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe default \u003ccode\u003eTranslationStrategy\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/exporters/prometheus\u003c/code\u003e is changed from \u003ccode\u003eotlptranslator.NoUTF8EscapingWithSuffixes\u003c/code\u003e to \u003ccode\u003eotlptranslator.UnderscoreEscapingWithSuffixes\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7421\"\u003e#7421\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7427\"\u003e#7427\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eInclude W3C TraceFlags (bits 0–7) in the OTLP \u003ccode\u003eSpan.Flags\u003c/code\u003e field in \u003ccode\u003ego.opentelemetry.io/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e and \u003ccode\u003ego.opentelemetry.io/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7438\"\u003e#7438\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003eErrorType\u003c/code\u003e function in \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.37.0\u003c/code\u003e now handles custom error types.\nIf an error implements an \u003ccode\u003eErrorType() string\u003c/code\u003e method, the return value of that method will be used as the error type. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7442\"\u003e#7442\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ccode\u003eWithInstrumentationAttributes\u003c/code\u003e options in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e, \u003ccode\u003ego.opentelemetry.io/otel/metric\u003c/code\u003e, and \u003ccode\u003ego.opentelemetry.io/otel/log\u003c/code\u003e to properly merge attributes when passed multiple times instead of replacing them.\nAttributes with duplicate keys will use the last value passed. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7300\"\u003e#7300\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe equality of \u003ccode\u003eattribute.Set\u003c/code\u003e when using the \u003ccode\u003eEqual\u003c/code\u003e method is not affected by the user overriding the empty set pointed to by \u003ccode\u003eattribute.EmptySet\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7357\"\u003e#7357\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/6ce14298b9d58647295280560205307768400496\"\u003e\u003ccode\u003e6ce1429\u003c/code\u003e\u003c/a\u003e Release v1.39.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7676\"\u003e#7676\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/12e421a7061c1ab5c25a1851ca168e1c3ac11bbb\"\u003e\u003ccode\u003e12e421a\u003c/code\u003e\u003c/a\u003e sdk/log: move Enabled method from FilterProcessor to Processor (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7639\"\u003e#7639\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/5982f16d244fafebffcfc92b4673dbeb565b4e7b\"\u003e\u003ccode\u003e5982f16\u003c/code\u003e\u003c/a\u003e fix(deps): update module golang.org/x/sys to v0.39.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7684\"\u003e#7684\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/928837830da34dea636b48a468149d480cc41058\"\u003e\u003ccode\u003e9288378\u003c/code\u003e\u003c/a\u003e chore(deps): update module golang.org/x/sync to v0.19.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7683\"\u003e#7683\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/ee3dfef45d9462e209d92e0651a58d2417c1305f\"\u003e\u003ccode\u003eee3dfef\u003c/code\u003e\u003c/a\u003e chore(deps): update github.com/securego/gosec/v2 digest to 41f28e2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7682\"\u003e#7682\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9345d1f64d874fa8df5f6ca4e14acaeb44532cd3\"\u003e\u003ccode\u003e9345d1f\u003c/code\u003e\u003c/a\u003e fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.7.2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7680\"\u003e#7680\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/d03b03395dc9436d79d5ba7b5ea77053b18a9915\"\u003e\u003ccode\u003ed03b033\u003c/code\u003e\u003c/a\u003e Check context prior to delaying retry in OTLP exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7678\"\u003e#7678\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/61765e78a620994b5922e34e776e029da1a2b983\"\u003e\u003ccode\u003e61765e7\u003c/code\u003e\u003c/a\u003e Fix flaky \u003ccode\u003eTestClientInstrumentation\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7677\"\u003e#7677\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/a54721cc8052fcd497d6f637a463d1aba787012c\"\u003e\u003ccode\u003ea54721c\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/go-git/go-billy/v5 to v5.7.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7679\"\u003e#7679\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/746d0860d70bb9c1e875afe1c7e41e9060387d46\"\u003e\u003ccode\u003e746d086\u003c/code\u003e\u003c/a\u003e chore(deps): update github/codeql-action action to v4.31.7 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7675\"\u003e#7675\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.34.0...v1.39.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/abcxyz/guardian/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/abcxyz/guardian/pull/586","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/abcxyz%2Fguardian/issues/586","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/586/packages"},{"uuid":"4554010034","node_id":"PR_kwDOQXHkUc7g7LQz","number":2,"state":"open","title":"build(deps): bump the go_modules group across 2 directories with 25 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":4,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-30T09:39:44.000Z","updated_at":"2026-05-30T09:41:11.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): bump","group_name":"go_modules","update_count":25,"packages":[{"name":"github.com/agentgateway/agentgateway","old_version":"0.10.6-0.20251108001651-54763bfe02e1","new_version":"0.12.0","repository_url":"https://github.com/agentgateway/agentgateway"},{"name":"google.golang.org/grpc","old_version":"1.76.0","new_version":"1.79.3","repository_url":"https://github.com/grpc/grpc-go"},{"name":"helm.sh/helm/v3","old_version":"3.19.2","new_version":"3.20.2","repository_url":"https://github.com/helm/helm"},{"name":"github.com/in-toto/in-toto-golang","old_version":"0.9.0","new_version":"0.11.0","repository_url":"https://github.com/in-toto/in-toto-golang"},{"name":"github.com/theupdateframework/go-tuf/v2","old_version":"2.0.2","new_version":"2.4.1","repository_url":"https://github.com/theupdateframework/go-tuf"},{"name":"github.com/anchore/quill","old_version":"0.5.1","new_version":"0.7.1","repository_url":"https://github.com/anchore/quill"},{"name":"github.com/buger/jsonparser","old_version":"1.1.1","new_version":"1.1.2","repository_url":"https://github.com/buger/jsonparser"},{"name":"github.com/cloudflare/circl","old_version":"1.6.1","new_version":"1.6.3","repository_url":"https://github.com/cloudflare/circl"},{"name":"github.com/go-git/go-billy/v5","old_version":"5.6.2","new_version":"5.9.0","repository_url":"https://github.com/go-git/go-billy"},{"name":"github.com/go-git/go-git/v5","old_version":"5.14.0","new_version":"5.19.1","repository_url":"https://github.com/go-git/go-git"},{"name":"github.com/moby/spdystream","old_version":"0.5.0","new_version":"0.5.1","repository_url":"https://github.com/moby/spdystream"},{"name":"github.com/sigstore/cosign/v2","old_version":"2.5.0","new_version":"2.6.2","repository_url":"https://github.com/sigstore/cosign"},{"name":"github.com/slack-go/slack","old_version":"0.17.3","new_version":"0.23.1","repository_url":"https://github.com/slack-go/slack"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 13 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/agentgateway/agentgateway](https://github.com/agentgateway/agentgateway) | `0.10.6-0.20251108001651-54763bfe02e1` | `0.12.0` |\n| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.76.0` | `1.79.3` |\n| [helm.sh/helm/v3](https://github.com/helm/helm) | `3.19.2` | `3.20.2` |\n| [github.com/in-toto/in-toto-golang](https://github.com/in-toto/in-toto-golang) | `0.9.0` | `0.11.0` |\n| [github.com/theupdateframework/go-tuf/v2](https://github.com/theupdateframework/go-tuf) | `2.0.2` | `2.4.1` |\n| [github.com/anchore/quill](https://github.com/anchore/quill) | `0.5.1` | `0.7.1` |\n| [github.com/buger/jsonparser](https://github.com/buger/jsonparser) | `1.1.1` | `1.1.2` |\n| [github.com/cloudflare/circl](https://github.com/cloudflare/circl) | `1.6.1` | `1.6.3` |\n| [github.com/go-git/go-billy/v5](https://github.com/go-git/go-billy) | `5.6.2` | `5.9.0` |\n| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.14.0` | `5.19.1` |\n| [github.com/moby/spdystream](https://github.com/moby/spdystream) | `0.5.0` | `0.5.1` |\n| [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) | `2.5.0` | `2.6.2` |\n| [github.com/slack-go/slack](https://github.com/slack-go/slack) | `0.17.3` | `0.23.1` |\n\nBumps the go_modules group with 3 updates in the /hack/utils/applier directory: [github.com/moby/spdystream](https://github.com/moby/spdystream), [golang.org/x/crypto](https://github.com/golang/crypto) and [golang.org/x/oauth2](https://github.com/golang/oauth2).\n\nUpdates `github.com/agentgateway/agentgateway` from 0.10.6-0.20251108001651-54763bfe02e1 to 0.12.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/agentgateway/agentgateway/releases\"\u003egithub.com/agentgateway/agentgateway's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.12.0\u003c/h2\u003e\n\u003cp\u003eAgentgateway is an open source project that is built on AI-native protocols to connect, secure, and observe agent-to-agent and agent-to-tool communication across any agent framework and environment.\u003c/p\u003e\n\u003cp\u003eThis release contains various bug fixes, and some major changes to the CEL expression language implementation.\u003c/p\u003e\n\u003ch2\u003eCEL\u003c/h2\u003e\n\u003cp\u003eThis release comes with a rewrite of the \u003ca href=\"https://agentgateway.dev/docs/local/latest/reference/cel/\"\u003eCEL implementation\u003c/a\u003e that powers policies such as authorization, rate limiting, access logging, etc. The new implementation is 5-500x faster depending on the expression; typical users can see up to a 50% increase in end-to-end throughput.\u003c/p\u003e\n\u003cp\u003eAdditionally, a new CEL playground is available in the UI to help troubleshoot and test CEL expressions.\u003c/p\u003e\n\u003cp\u003eWhile most of the changes are internal, a few minor behavioral changes are present\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFix MCP attributes not being available during logging (only authz)\u003c/li\u003e\n\u003cli\u003eBefore, we snapshotted the request once at an arbitrary (and inconsistent, across requests) time. Now, each execution consistently gets the 'current' view of the request and response. For example, during logging, manipulations from policies would be observed.\u003c/li\u003e\n\u003cli\u003eNew function names: \u003ccode\u003ebase64Encode\u003c/code\u003e -\u0026gt; \u003ccode\u003ebase64.encode\u003c/code\u003e (this comes from a bump in the library before forking it). The old name is available for backwards compat.\u003c/li\u003e\n\u003cli\u003eBefore, the top level variables were always present but could be \u003ccode\u003enull\u003c/code\u003e. Now, if they are not available they will fail to lookup instead of return \u003ccode\u003enull\u003c/code\u003e. For example, before \u003ccode\u003ehas(jwt)\u003c/code\u003e would always return \u003ccode\u003etrue\u003c/code\u003e; now it will only return \u003ccode\u003etrue\u003c/code\u003e if there is a JWT.\u003c/li\u003e\n\u003cli\u003eIts faster!\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSPIKE: Fork htpasswd-verify and upgrade deps by \u003ca href=\"https://github.com/markuskobler\"\u003e\u003ccode\u003e@​markuskobler\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/787\"\u003eagentgateway/agentgateway#787\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(mcp/openapi): improve path, query and header handling by \u003ca href=\"https://github.com/markuskobler\"\u003e\u003ccode\u003e@​markuskobler\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/866\"\u003eagentgateway/agentgateway#866\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDelete MCP-Authentication.md by \u003ca href=\"https://github.com/rinormaloku\"\u003e\u003ccode\u003e@​rinormaloku\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/872\"\u003eagentgateway/agentgateway#872\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ellm: properly use user-defined buffer limit by \u003ca href=\"https://github.com/howardjohn\"\u003e\u003ccode\u003e@​howardjohn\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/881\"\u003eagentgateway/agentgateway#881\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCEL 2.0 by \u003ca href=\"https://github.com/howardjohn\"\u003e\u003ccode\u003e@​howardjohn\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/877\"\u003eagentgateway/agentgateway#877\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emcp: update to rmcp 0.14.0 by \u003ca href=\"https://github.com/howardjohn\"\u003e\u003ccode\u003e@​howardjohn\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/885\"\u003eagentgateway/agentgateway#885\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(aws-sse): migrate to official AWS EventStream crates by \u003ca href=\"https://github.com/apexlnc\"\u003e\u003ccode\u003e@​apexlnc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/879\"\u003eagentgateway/agentgateway#879\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(llm): Implements count_tokens for Anthropic/Vertex/Bedrock providers by \u003ca href=\"https://github.com/markuskobler\"\u003e\u003ccode\u003e@​markuskobler\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/883\"\u003eagentgateway/agentgateway#883\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Feat] MCP target policies by \u003ca href=\"https://github.com/Jack-Kilrain\"\u003e\u003ccode\u003e@​Jack-Kilrain\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/862\"\u003eagentgateway/agentgateway#862\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport hostname in incoming HBONE connect by \u003ca href=\"https://github.com/ymesika\"\u003e\u003ccode\u003e@​ymesika\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/859\"\u003eagentgateway/agentgateway#859\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003elocal: fix regression in mcp backends by \u003ca href=\"https://github.com/howardjohn\"\u003e\u003ccode\u003e@​howardjohn\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/888\"\u003eagentgateway/agentgateway#888\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(llm): bedrock token counting and get_messages conversions by \u003ca href=\"https://github.com/markuskobler\"\u003e\u003ccode\u003e@​markuskobler\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/884\"\u003eagentgateway/agentgateway#884\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emcp: better propogate errors up by \u003ca href=\"https://github.com/howardjohn\"\u003e\u003ccode\u003e@​howardjohn\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/889\"\u003eagentgateway/agentgateway#889\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ellm e2e: add support for completions to anthropic via vertex by \u003ca href=\"https://github.com/howardjohn\"\u003e\u003ccode\u003e@​howardjohn\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/892\"\u003eagentgateway/agentgateway#892\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(ui): upgrade npm packages by \u003ca href=\"https://github.com/markuskobler\"\u003e\u003ccode\u003e@​markuskobler\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/894\"\u003eagentgateway/agentgateway#894\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egha: cache only on main by \u003ca href=\"https://github.com/howardjohn\"\u003e\u003ccode\u003e@​howardjohn\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/893\"\u003eagentgateway/agentgateway#893\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edeps: bump rust by \u003ca href=\"https://github.com/howardjohn\"\u003e\u003ccode\u003e@​howardjohn\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/899\"\u003eagentgateway/agentgateway#899\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExt Proc and Ext Authz: Treat Unset Header Append as Overwrite by \u003ca href=\"https://github.com/danehans\"\u003e\u003ccode\u003e@​danehans\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/906\"\u003eagentgateway/agentgateway#906\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emcp: enhance observability and route discovery plumbing by \u003ca href=\"https://github.com/apexlnc\"\u003e\u003ccode\u003e@​apexlnc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/901\"\u003eagentgateway/agentgateway#901\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd primitive TCP CEL logging support by \u003ca href=\"https://github.com/howardjohn\"\u003e\u003ccode\u003e@​howardjohn\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/916\"\u003eagentgateway/agentgateway#916\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: drop build from pull request by \u003ca href=\"https://github.com/howardjohn\"\u003e\u003ccode\u003e@​howardjohn\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/915\"\u003eagentgateway/agentgateway#915\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCEL playground by \u003ca href=\"https://github.com/howardjohn\"\u003e\u003ccode\u003e@​howardjohn\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/914\"\u003eagentgateway/agentgateway#914\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/danehans\"\u003e\u003ccode\u003e@​danehans\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/906\"\u003eagentgateway/agentgateway#906\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/agentgateway/agentgateway/compare/v0.11.3...v0.12.0\"\u003ehttps://github.com/agentgateway/agentgateway/compare/v0.11.3...v0.12.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.11.3\u003c/h2\u003e\n\u003cp\u003eAutomated release of v0.11.3.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/agentgateway/agentgateway/commits/v0.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google.golang.org/grpc` from 1.76.0 to 1.79.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc-go/releases\"\u003egoogle.golang.org/grpc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 1.79.3\u003c/h2\u003e\n\u003ch1\u003eSecurity\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eserver: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted \u0026quot;deny\u0026quot; rules in interceptors like \u003ccode\u003egrpc/authz\u003c/code\u003e. Any request with a non-canonical path is now immediately rejected with an \u003ccode\u003eUnimplemented\u003c/code\u003e error. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.2\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003estats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8874\"\u003egrpc/grpc-go#8874\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.1\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003egrpc: Remove the \u003ccode\u003e-dev\u003c/code\u003e suffix from the User-Agent header. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8902\"\u003egrpc/grpc-go#8902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.0\u003c/h2\u003e\n\u003ch1\u003eAPI Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003emem: Add experimental API \u003ccode\u003eSetDefaultBufferPool\u003c/code\u003e to change the default buffer pool. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8806\"\u003e#8806\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/vanja-p\"\u003e\u003ccode\u003e@​vanja-p\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eexperimental/stats: Update \u003ccode\u003eMetricsRecorder\u003c/code\u003e to require embedding the new \u003ccode\u003eUnimplementedMetricsRecorder\u003c/code\u003e (a no-op struct) in all implementations for forward compatibility. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBehavior Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ebalancer/weightedtarget: Remove handling of \u003ccode\u003eAddresses\u003c/code\u003e and only handle \u003ccode\u003eEndpoints\u003c/code\u003e in resolver updates. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8841\"\u003e#8841\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eNew Features\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eexperimental/stats: Add support for asynchronous gauge metrics through the new \u003ccode\u003eAsyncMetricReporter\u003c/code\u003e and \u003ccode\u003eRegisterAsyncReporter\u003c/code\u003e APIs. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epickfirst: Add support for weighted random shuffling of endpoints, as described in \u003ca href=\"https://redirect.github.com/grpc/proposal/pull/535\"\u003egRFC A113\u003c/a\u003e.\n\u003cul\u003e\n\u003cli\u003eThis is enabled by default, and can be turned off using the environment variable \u003ccode\u003eGRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds: Implement \u003ccode\u003e:authority\u003c/code\u003e rewriting, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A81-xds-authority-rewriting.md\"\u003egRFC A81\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8779\"\u003e#8779\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebalancer/randomsubsetting: Implement the \u003ccode\u003erandom_subsetting\u003c/code\u003e LB policy, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A68-random-subsetting.md\"\u003egRFC A68\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8650\"\u003e#8650\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/marek-szews\"\u003e\u003ccode\u003e@​marek-szews\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/tls: Fix a bug where the port was not stripped from the authority override before validation. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8726\"\u003e#8726\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/Atul1710\"\u003e\u003ccode\u003e@​Atul1710\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds/priority: Fix a bug causing delayed failover to lower-priority clusters when a higher-priority cluster is stuck in \u003ccode\u003eCONNECTING\u003c/code\u003e state. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8813\"\u003e#8813\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ehealth: Fix a bug where health checks failed for clients using legacy compression options (\u003ccode\u003eWithDecompressor\u003c/code\u003e or \u003ccode\u003eRPCDecompressor\u003c/code\u003e). (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8765\"\u003e#8765\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/sanki92\"\u003e\u003ccode\u003e@​sanki92\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003etransport: Fix an issue where the HTTP/2 server could skip header size checks when terminating a stream early. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8769\"\u003e#8769\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eserver: Propagate status detail headers, if available, when terminating a stream during request header processing. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8754\"\u003e#8754\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ePerformance Improvements\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/alts: Optimize read buffer alignment to reduce copies. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8791\"\u003e#8791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emem: Optimize pooling and creation of \u003ccode\u003ebuffer\u003c/code\u003e objects.  (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8784\"\u003e#8784\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etransport: Reduce slice re-allocations by reserving slice capacity. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8797\"\u003e#8797\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/dda86dbd9cecb8b35b58c73d507d81d67761205f\"\u003e\u003ccode\u003edda86db\u003c/code\u003e\u003c/a\u003e Change version to 1.79.3 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8983\"\u003e#8983\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/72186f163e75a065c39e6f7df9b6dea07fbdeff5\"\u003e\u003ccode\u003e72186f1\u003c/code\u003e\u003c/a\u003e grpc: enforce strict path checking for incoming requests on the server (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/97ca3522b239edf6813e2b1106924e9d55e89d43\"\u003e\u003ccode\u003e97ca352\u003c/code\u003e\u003c/a\u003e Changing version to 1.79.3-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8954\"\u003e#8954\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/8902ab6efea590f5b3861126559eaa26fa9783b2\"\u003e\u003ccode\u003e8902ab6\u003c/code\u003e\u003c/a\u003e Change the version to release 1.79.2 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8947\"\u003e#8947\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/a9286705aa689bee321ec674323b6896284f3e02\"\u003e\u003ccode\u003ea928670\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8874\"\u003e#8874\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8904\"\u003e#8904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/06df3638c0bcee88197b1033b3ba83e1eb8bc010\"\u003e\u003ccode\u003e06df363\u003c/code\u003e\u003c/a\u003e Change version to 1.79.2-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8903\"\u003e#8903\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/782f2de44f597af18a120527e7682a6670d84289\"\u003e\u003ccode\u003e782f2de\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8902\"\u003e#8902\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/850eccbb2257bd2de6ac28ee88a7172ab6175629\"\u003e\u003ccode\u003e850eccb\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8851\"\u003e#8851\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/765ff056b6890f6c8341894df4e9668e9bfc18ef\"\u003e\u003ccode\u003e765ff05\u003c/code\u003e\u003c/a\u003e Change version to 1.79.0 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8850\"\u003e#8850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/68804be0e78ed0365bb5a576dedc12e2168ed63e\"\u003e\u003ccode\u003e68804be\u003c/code\u003e\u003c/a\u003e Cherry pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8896\"\u003e#8896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/grpc/grpc-go/compare/v1.76.0...v1.79.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `helm.sh/helm/v3` from 3.19.2 to 3.20.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/helm/helm/releases\"\u003ehelm.sh/helm/v3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eHelm v3.20.2\u003c/h2\u003e\n\u003ch2\u003ev3.20.2\u003c/h2\u003e\n\u003cp\u003eHelm v3.20.2 is a security patch release. Users are encouraged to upgrade for the best experience.\u003c/p\u003e\n\u003cp\u003eThe community keeps growing, and we'd love to see you there!\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eJoin the discussion in \u003ca href=\"https://kubernetes.slack.com\"\u003eKubernetes Slack\u003c/a\u003e:\n\u003cul\u003e\n\u003cli\u003efor questions and just to hang out\u003c/li\u003e\n\u003cli\u003efor discussing PRs, code, and bugs\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eHang out at the Public Developer Call: Thursday, 9:30 Pacific via \u003ca href=\"https://zoom.us/j/696660622\"\u003eZoom\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eTest, debug, and contribute charts: \u003ca href=\"https://artifacthub.io/packages/search?kind=0\"\u003eArtifactHub/packages\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/security/advisories/GHSA-hr2v-4r36-88hr\"\u003eGHSA-hr2v-4r36-88hr\u003c/a\u003e Helm Chart extraction output directory collapse via \u003ccode\u003eChart.yaml\u003c/code\u003e name dot-segment\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eInstallation and Upgrading\u003c/h2\u003e\n\u003cp\u003eDownload Helm v3.20.2. The common platform binaries are here:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.20.2-darwin-amd64.tar.gz\"\u003eMacOS amd64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.20.2-darwin-amd64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 7de04301f28b902a74f6286ed941cadc86ee5e6a9086a18f2ccf1f548e99d618)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.20.2-darwin-arm64.tar.gz\"\u003eMacOS arm64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.20.2-darwin-arm64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 139c794c22f16b579d08ddd3008c8038b9bb2814f35b5bcca91f50a1f458978d)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-amd64.tar.gz\"\u003eLinux amd64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-amd64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 258e830a9e613c8a7a302d6059b4bb3b9758f2f3e1bb8ea0d707ce10a9a72fea)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-arm.tar.gz\"\u003eLinux arm\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-arm.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / a8a614c740399ff1ef32bcea6be6e4523f17e3376f9cf55c192cc48c8f2d1f19)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-arm64.tar.gz\"\u003eLinux arm64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-arm64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 5ea2d6bc2cda3f8edf985e028809f5a9278f404fb8ab24044de9b7cb9b79a691)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-386.tar.gz\"\u003eLinux i386\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-386.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 88e4c1834307cdbc9f3b80920e1a383e4ba50bb488fb0be1b1fbd4918bb6ae73)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-ppc64le.tar.gz\"\u003eLinux ppc64le\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-ppc64le.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 98bb26a2f3c0b0c1a50db3181dff192554e0c204a07427d98d6b01e259f23cbe)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-s390x.tar.gz\"\u003eLinux s390x\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-s390x.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 584dd77ef8096d6ef939a1822f72840e749fc8311b2b13ae94df5f786862a56b)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-riscv64.tar.gz\"\u003eLinux riscv64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-riscv64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 957391d0710d72678acd09959b5dc77888cd007a78a4b99944d3b2fc7e1895ca)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.20.2-windows-amd64.zip\"\u003eWindows amd64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.20.2-windows-amd64.zip.sha256sum\"\u003echecksum\u003c/a\u003e / 24e8e5b71bab4ee17e6f989931ecf4fb144f9916cbe9990c0b6b2ec7b925c454)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.20.2-windows-arm64.zip\"\u003eWindows arm64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.20.2-windows-arm64.zip.sha256sum\"\u003echecksum\u003c/a\u003e / 7c940a73a6882f50b69aec3282549da4a49917669db18fc503db930fb74b9789)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThe \u003ca href=\"https://helm.sh/docs/intro/quickstart/\"\u003eQuickstart Guide\u003c/a\u003e will get you going from there. For \u003cstrong\u003eupgrade instructions\u003c/strong\u003e or detailed installation notes, check the \u003ca href=\"https://helm.sh/docs/intro/install/\"\u003einstall guide\u003c/a\u003e. You can also use a \u003ca href=\"https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3\"\u003escript to install\u003c/a\u003e on any system with \u003ccode\u003ebash\u003c/code\u003e.\u003c/p\u003e\n\u003ch2\u003eWhat's Next\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e4.1.5 and 3.20.3 are the next patch (bug fix) releases and will be on April 8, 2026\u003c/li\u003e\n\u003cli\u003e4.2.0 and 3.21.0 are the next minor (feature) releases and will be on May 13, 2026\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: Chart dot-name path bug 8fb76d6ab555577e98e23b7500009537a471feee (George Jenkins)\u003c/li\u003e\n\u003cli\u003efix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow 3a8927e275c50cecde273872dad2a5576bd46375 (Terry Howe)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eHelm v3.20.1 is a patch release. Users are encouraged to upgrade for the best experience.\u003c/p\u003e\n\u003cp\u003eThe community keeps growing, and we'd love to see you there!\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eJoin the discussion in \u003ca href=\"https://kubernetes.slack.com\"\u003eKubernetes Slack\u003c/a\u003e:\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/8fb76d6ab555577e98e23b7500009537a471feee\"\u003e\u003ccode\u003e8fb76d6\u003c/code\u003e\u003c/a\u003e fix: Chart dot-name path bug\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/3a8927e275c50cecde273872dad2a5576bd46375\"\u003e\u003ccode\u003e3a8927e\u003c/code\u003e\u003c/a\u003e fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/a2369ca71c0ef633bf6e4fccd66d634eb379b371\"\u003e\u003ccode\u003ea2369ca\u003c/code\u003e\u003c/a\u003e chore(deps): bump the k8s-io group with 7 updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/90e10564f7ae746a153f3a03006e7061a54ad490\"\u003e\u003ccode\u003e90e1056\u003c/code\u003e\u003c/a\u003e add image index test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/911f2e908ae40b01ca95b857e94b8894043f64fd\"\u003e\u003ccode\u003e911f2e9\u003c/code\u003e\u003c/a\u003e fix pulling charts from OCI indices\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/76dad33fb1a2b6451920429b4f5f2dd575ea71bb\"\u003e\u003ccode\u003e76dad33\u003c/code\u003e\u003c/a\u003e Remove refactorring changes from coalesce_test.go\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/45c12f71407b6054a37d3e425d5293ee79a1ab37\"\u003e\u003ccode\u003e45c12f7\u003c/code\u003e\u003c/a\u003e Fix import\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/26c6f19f967941dbe53bfb5e52d419b3b3e46075\"\u003e\u003ccode\u003e26c6f19\u003c/code\u003e\u003c/a\u003e Update pkg/chart/common/util/coalesce_test.go\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/09f5129d49a14c9336cea6f33adf5f52889915ef\"\u003e\u003ccode\u003e09f5129\u003c/code\u003e\u003c/a\u003e Fix lint warning\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/417deb2b6b7504357b0f580b76f5eed1bb8a5270\"\u003e\u003ccode\u003e417deb2\u003c/code\u003e\u003c/a\u003e Preserve nil values in chart already\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/helm/helm/compare/v3.19.2...v3.20.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/in-toto/in-toto-golang` from 0.9.0 to 0.11.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/in-toto/in-toto-golang/releases\"\u003egithub.com/in-toto/in-toto-golang's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.11.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(deps): bump the all group with 2 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/453\"\u003ein-toto/in-toto-golang#453\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump the all group across 1 directory with 2 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/452\"\u003ein-toto/in-toto-golang#452\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/457\"\u003ein-toto/in-toto-golang#457\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/459\"\u003ein-toto/in-toto-golang#459\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ematch: Replace ^ with ! for negation in character classes by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/462\"\u003ein-toto/in-toto-golang#462\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/in-toto/in-toto-golang/compare/v0.10.0...v0.11.0\"\u003ehttps://github.com/in-toto/in-toto-golang/compare/v0.10.0...v0.11.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.10.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.54.0 to 1.55.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/232\"\u003ein-toto/in-toto-golang#232\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate maintainers and governance by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/233\"\u003ein-toto/in-toto-golang#233\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/234\"\u003ein-toto/in-toto-golang#234\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/spiffe/go-spiffe/v2 from 2.1.3 to 2.1.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/235\"\u003ein-toto/in-toto-golang#235\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/236\"\u003ein-toto/in-toto-golang#236\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix expired signature in test by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/241\"\u003ein-toto/in-toto-golang#241\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.8.0 to 0.9.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/240\"\u003ein-toto/in-toto-golang#240\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/spiffe/go-spiffe/v2 from 2.1.5 to 2.1.6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/239\"\u003ein-toto/in-toto-golang#239\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.55.0 to 1.56.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/242\"\u003ein-toto/in-toto-golang#242\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.56.0 to 1.56.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/243\"\u003ein-toto/in-toto-golang#243\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate GitHub Actions workflows by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/246\"\u003ein-toto/in-toto-golang#246\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.9.0 to 0.10.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/245\"\u003ein-toto/in-toto-golang#245\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremove linters that are no longer supported and add to make file by \u003ca href=\"https://github.com/pxp928\"\u003e\u003ccode\u003e@​pxp928\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/249\"\u003ein-toto/in-toto-golang#249\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd match products feature by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/237\"\u003ein-toto/in-toto-golang#237\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove unfinished link on record stop by \u003ca href=\"https://github.com/PradyumnaKrishna\"\u003e\u003ccode\u003e@​PradyumnaKrishna\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/248\"\u003ein-toto/in-toto-golang#248\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.56.1 to 1.56.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/250\"\u003ein-toto/in-toto-golang#250\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/secure-systems-lab/go-securesystemslib from 0.6.0 to 0.7.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/251\"\u003ein-toto/in-toto-golang#251\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.56.2 to 1.57.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/255\"\u003ein-toto/in-toto-golang#255\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd tests for coverage in envelope.go by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/256\"\u003ein-toto/in-toto-golang#256\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.10.0 to 0.11.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/257\"\u003ein-toto/in-toto-golang#257\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/setup-go from 4.0.1 to 4.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/258\"\u003ein-toto/in-toto-golang#258\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golangci/golangci-lint-action from 3.6.0 to 3.7.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/259\"\u003ein-toto/in-toto-golang#259\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixes filepath pattern matching in windows by \u003ca href=\"https://github.com/PradyumnaKrishna\"\u003e\u003ccode\u003e@​PradyumnaKrishna\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/254\"\u003ein-toto/in-toto-golang#254\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/checkout from 3.5.3 to 3.6.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/261\"\u003ein-toto/in-toto-golang#261\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/checkout from 3.6.0 to 4.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/262\"\u003ein-toto/in-toto-golang#262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.11.0 to 0.12.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/263\"\u003ein-toto/in-toto-golang#263\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.57.0 to 1.58.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/264\"\u003ein-toto/in-toto-golang#264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.58.0 to 1.58.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/266\"\u003ein-toto/in-toto-golang#266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDeprecate Provenance v1 struct in favor of /attestation protobufs by \u003ca href=\"https://github.com/marcelamelara\"\u003e\u003ccode\u003e@​marcelamelara\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/267\"\u003ein-toto/in-toto-golang#267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.58.1 to 1.58.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/269\"\u003ein-toto/in-toto-golang#269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/checkout from 4.0.0 to 4.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/270\"\u003ein-toto/in-toto-golang#270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDrop use of \u003ccode\u003eany\u003c/code\u003e for hash objects by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/238\"\u003ein-toto/in-toto-golang#238\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.12.0 to 0.13.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/271\"\u003ein-toto/in-toto-golang#271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/google/go-cmp from 0.5.9 to 0.6.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/273\"\u003ein-toto/in-toto-golang#273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.58.2 to 1.58.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/272\"\u003ein-toto/in-toto-golang#272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/net from 0.12.0 to 0.17.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/274\"\u003ein-toto/in-toto-golang#274\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.58.3 to 1.59.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/275\"\u003ein-toto/in-toto-golang#275\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/36d782ffb2ca3adbffcdce1fd971c23319dd4469\"\u003e\u003ccode\u003e36d782f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/462\"\u003e#462\u003c/a\u003e from in-toto/fix-negation-character\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/4a09e3bbc44bc687577b6532e57e8a4abfa5ddf4\"\u003e\u003ccode\u003e4a09e3b\u003c/code\u003e\u003c/a\u003e match: Replace ^ with ! for negation in character classes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/c3302e8bc36e46119f7ae17c07eb879ff3507caa\"\u003e\u003ccode\u003ec3302e8\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/459\"\u003e#459\u003c/a\u003e from in-toto/dependabot/go_modules/github.com/go-jose...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/016e87efbb55c6dd8772ce227002eeb1b6e3f593\"\u003e\u003ccode\u003e016e87e\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/5b9df76e685eaa0a950ea9ba3f4a5561e87e13ad\"\u003e\u003ccode\u003e5b9df76\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/457\"\u003e#457\u003c/a\u003e from in-toto/dependabot/go_modules/google.golang.org/...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/595b3fe0a13f481eb0ef898ccaff5e345e492a2f\"\u003e\u003ccode\u003e595b3fe\u003c/code\u003e\u003c/a\u003e chore(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/e396d248c9cf19f9e144f4e90c476af88742bf35\"\u003e\u003ccode\u003ee396d24\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/452\"\u003e#452\u003c/a\u003e from in-toto/dependabot/github_actions/all-502588e1ca\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/142b779059713332fe5c7856e98f1c564c6d6a09\"\u003e\u003ccode\u003e142b779\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/453\"\u003e#453\u003c/a\u003e from in-toto/dependabot/go_modules/all-d8ef5820aa\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/f741bcc43330554606b813fa0f8fe0c284fcdaea\"\u003e\u003ccode\u003ef741bcc\u003c/code\u003e\u003c/a\u003e chore(deps): bump the all group with 2 updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/c374dc9808137651fe8754eed363ec816cd59d2a\"\u003e\u003ccode\u003ec374dc9\u003c/code\u003e\u003c/a\u003e chore(deps): bump the all group across 1 directory with 2 updates\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/in-toto/in-toto-golang/compare/v0.9.0...v0.11.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/theupdateframework/go-tuf/v2` from 2.0.2 to 2.4.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/theupdateframework/go-tuf/releases\"\u003egithub.com/theupdateframework/go-tuf/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.4.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(deps): bump github.com/sigstore/sigstore from 1.10.3 to 1.10.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/718\"\u003etheupdateframework/go-tuf#718\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEnforce a stricter validation on the repo name for TAP 4 by \u003ca href=\"https://github.com/rdimitrov\"\u003e\u003ccode\u003e@​rdimitrov\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/720\"\u003etheupdateframework/go-tuf#720\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/theupdateframework/go-tuf/compare/v2.4.0...v2.4.1\"\u003ehttps://github.com/theupdateframework/go-tuf/compare/v2.4.0...v2.4.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.4.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd BitLength validation for SuccinctRoles by \u003ca href=\"https://github.com/rdimitrov\"\u003e\u003ccode\u003e@​rdimitrov\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/716\"\u003etheupdateframework/go-tuf#716\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd thread safety documentation for key types by \u003ca href=\"https://github.com/rdimitrov\"\u003e\u003ccode\u003e@​rdimitrov\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/715\"\u003etheupdateframework/go-tuf#715\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse restrictive permissions (0700) for cache directories by \u003ca href=\"https://github.com/rdimitrov\"\u003e\u003ccode\u003e@​rdimitrov\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/714\"\u003etheupdateframework/go-tuf#714\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBreaking change: Replace panic with error return in Key.ID() by \u003ca href=\"https://github.com/rdimitrov\"\u003e\u003ccode\u003e@​rdimitrov\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/713\"\u003etheupdateframework/go-tuf#713\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/theupdateframework/go-tuf/compare/v2.3.1...v2.4.0\"\u003ehttps://github.com/theupdateframework/go-tuf/compare/v2.3.1...v2.4.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.3.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(deps): bump golang.org/x/crypto from 0.40.0 to 0.45.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/702\"\u003etheupdateframework/go-tuf#702\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eResolve govulncheck errors by bumping go to 1.24.11 by \u003ca href=\"https://github.com/rdimitrov\"\u003e\u003ccode\u003e@​rdimitrov\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/707\"\u003etheupdateframework/go-tuf#707\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/704\"\u003etheupdateframework/go-tuf#704\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emodern go (1.20+) improvements by \u003ca href=\"https://github.com/udf2457\"\u003e\u003ccode\u003e@​udf2457\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/705\"\u003etheupdateframework/go-tuf#705\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/sigstore/sigstore from 1.9.5 to 1.10.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/706\"\u003etheupdateframework/go-tuf#706\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/secure-systems-lab/go-securesystemslib from 0.9.1 to 0.10.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/708\"\u003etheupdateframework/go-tuf#708\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePerform type assertion by \u003ca href=\"https://github.com/kommendorkapten\"\u003e\u003ccode\u003e@​kommendorkapten\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/710\"\u003etheupdateframework/go-tuf#710\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd tests for failing type assertions by \u003ca href=\"https://github.com/rdimitrov\"\u003e\u003ccode\u003e@​rdimitrov\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/711\"\u003etheupdateframework/go-tuf#711\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eVerify threshold is valid by \u003ca href=\"https://github.com/kommendorkapten\"\u003e\u003ccode\u003e@​kommendorkapten\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/712\"\u003etheupdateframework/go-tuf#712\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/theupdateframework/go-tuf/compare/v2.3.0...v2.3.1\"\u003ehttps://github.com/theupdateframework/go-tuf/compare/v2.3.0...v2.3.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.3.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate the config for govulncheck by \u003ca href=\"https://github.com/rdimitrov\"\u003e\u003ccode\u003e@​rdimitrov\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/697\"\u003etheupdateframework/go-tuf#697\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump Go to 1.24.9 by \u003ca href=\"https://github.com/rdimitrov\"\u003e\u003ccode\u003e@​rdimitrov\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/698\"\u003etheupdateframework/go-tuf#698\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/theupdateframework/go-tuf/compare/v2.2.0...v2.3.0\"\u003ehttps://github.com/theupdateframework/go-tuf/compare/v2.2.0...v2.3.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.2.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: treat http 403 as an updater error by \u003ca href=\"https://github.com/MDr164\"\u003e\u003ccode\u003e@​MDr164\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/687\"\u003etheupdateframework/go-tuf#687\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/sigstore/sigstore from 1.8.4 to 1.8.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/646\"\u003etheupdateframework/go-tuf#646\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/cenkalti/backoff/v5 from 5.0.2 to 5.0.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/690\"\u003etheupdateframework/go-tuf#690\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/secure-systems-lab/go-securesystemslib from 0.9.0 to 0.9.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/691\"\u003etheupdateframework/go-tuf#691\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/692\"\u003etheupdateframework/go-tuf#692\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/stretchr/testify from 1.11.0 to 1.11.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/693\"\u003etheupdateframework/go-tuf#693\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/694\"\u003etheupdateframework/go-tuf#694\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/theupdateframework/go-tuf/commit/d361e2ea24e427581343dee5c7a32b485d79fcc0\"\u003e\u003ccode\u003ed361e2e\u003c/code\u003e\u003c/a\u003e Enforce a stricter validation on the repo name for TAP 4 (\u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/issues/720\"\u003e#720\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/theupdateframework/go-tuf/commit/29aae36c83127913c24e881bc1f95dbb0f0961e6\"\u003e\u003ccode\u003e29aae36\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/sigstore/sigstore from 1.10.3 to 1.10.4 (\u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/issues/718\"\u003e#718\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/theupdateframework/go-tuf/commit/bde5f18dc95dfac365fc452ee4e278e5fd66d4b4\"\u003e\u003ccode\u003ebde5f18\u003c/code\u003e\u003c/a\u003e Replace panic with error return in Key.ID() (\u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/issues/713\"\u003e#713\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/theupdateframework/go-tuf/commit/f400bf4c20476804475d34239f01212e1041ec38\"\u003e\u003ccode\u003ef400bf4\u003c/code\u003e\u003c/a\u003e Use restrictive permissions (0700) for cache directories (\u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/issues/714\"\u003e#714\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/theupdateframework/go-tuf/commit/d2dbc180e74f4fe371392bb0b02d5a8659bc2fa4\"\u003e\u003ccode\u003ed2dbc18\u003c/code\u003e\u003c/a\u003e Add thread safety documentation for key types (\u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/issues/715\"\u003e#715\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/theupdateframework/go-tuf/commit/846cd4eccd92b1a333c89cb45cf4f179de74018f\"\u003e\u003ccode\u003e846cd4e\u003c/code\u003e\u003c/a\u003e Add BitLength validation for SuccinctRoles (\u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/issues/716\"\u003e#716\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/theupdateframework/go-tuf/commit/b38d91fdbc69dfe31fe9230d97dafe527ea854a0\"\u003e\u003ccode\u003eb38d91f\u003c/code\u003e\u003c/a\u003e Verify threshold is valid (\u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/issues/712\"\u003e#712\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/theupdateframework/go-tuf/commit/876cf2a82b320be6deb43f4ad629057b209a584e\"\u003e\u003ccode\u003e876cf2a\u003c/code\u003e\u003c/a\u003e Add tests for failing type assertions (\u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/issues/711\"\u003e#711\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/theupdateframework/go-tuf/commit/73345ab6b0eb7e59d525dac17a428f043074cef6\"\u003e\u003ccode\u003e73345ab\u003c/code\u003e\u003c/a\u003e Perform type assertion (\u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/issues/710\"\u003e#710\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/theupdateframework/go-tuf/commit/d3cdc4b2796d8c452ce17766f0cade2e80a3597d\"\u003e\u003ccode\u003ed3cdc4b\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/secure-systems-lab/go-securesystemslib from 0.9....\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/theupdateframework/go-tuf/compare/v2.0.2...v2.4.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/anchore/quill` from 0.5.1 to 0.7.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/anchore/quill/releases\"\u003egithub.com/anchore/quill's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003ev0.7.1\u003c/h1\u003e\n\u003ch3\u003eSecurity Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDo not allow for unbounded reads for user controlled input [\u003ca href=\"https://redirect.github.com/anchore/quill/pull/681\"\u003e#681\u003c/a\u003e \u003ca href=\"https://github.com/wagoodman\"\u003e\u003ccode\u003e@​wagoodman\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eAccount for excessive read limits in macho parsing [\u003ca href=\"https://redirect.github.com/anchore/quill/pull/682\"\u003e#682\u003c/a\u003e \u003ca href=\"https://github.com/wagoodman\"\u003e\u003ccode\u003e@​wagoodman\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eValidate developer log URL requests [\u003ca href=\"https://redirect.github.com/anchore/quill/pull/680\"\u003e#680\u003c/a\u003e \u003ca href=\"https://github.com/wagoodman\"\u003e\u003ccode\u003e@​wagoodman\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/anchore/quill/compare/v0.7.0...v0.7.1\"\u003e(Full Changelog)\u003c/a\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003ch1\u003ev0.7.0\u003c/h1\u003e\n\u003ch3\u003eAdded Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edry run signing and notarization process before running in production [\u003ca href=\"https://redirect.github.com/anchore/quill/issues/617\"\u003e#617\u003c/a\u003e \u003ca href=\"https://redirect.github.com/anchore/quill/pull/618\"\u003e#618\u003c/a\u003e \u003ca href=\"https://github.com/willmurphyscode\"\u003e\u003ccode\u003e@​willmurphyscode\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTeamID is not set during signing [\u003ca href=\"https://redirect.github.com/anchore/quill/issues/147\"\u003e#147\u003c/a\u003e \u003ca href=\"https://redirect.github.com/anchore/quill/pull/669\"\u003e#669\u003c/a\u003e \u003ca href=\"https://github.com/jflowers\"\u003e\u003ccode\u003e@​jflowers\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eAdditional Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTypo in install.sh help text [\u003ca href=\"https://redirect.github.com/anchore/quill/issues/546\"\u003e#546\u003c/a\u003e \u003ca href=\"https://redirect.github.com/anchore/quill/pull/549\"\u003e#549\u003c/a\u003e \u003ca href=\"https://github.com/popey\"\u003e\u003ccode\u003e@​popey\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003emigrate to latest tool ci patterns [\u003ca href=\"https://redirect.github.com/anchore/quill/pull/670\"\u003e#670\u003c/a\u003e \u003ca href=\"https://github.com/spiffcs\"\u003e\u003ccode\u003e@​spiffcs\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eupdate golang to v1.26 [\u003ca href=\"https://redirect.github.com/anchore/quill/pull/668\"\u003e#668\u003c/a\u003e \u003ca href=\"https://github.com/wagoodman\"\u003e\u003ccode\u003e@​wagoodman\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003edoc: Add llms.txt for the 🤖 🕷️ [\u003ca href=\"https://redirect.github.com/anchore/quill/pull/592\"\u003e#592\u003c/a\u003e \u003ca href=\"https://github.com/popey\"\u003e\u003ccode\u003e@​popey\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate dependencies [\u003ca href=\"https://redirect.github.com/anchore/quill/pull/627\"\u003e#627\u003c/a\u003e \u003ca href=\"https://github.com/wagoodman\"\u003e\u003ccode\u003e@​wagoodman\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eAdd periodic workflow to update certs [\u003ca href=\"https://redirect.github.com/anchore/quill/pull/608\"\u003e#608\u003c/a\u003e \u003ca href=\"https://github.com/wagoodman\"\u003e\u003ccode\u003e@​wagoodman\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003elint gh actions with zizmor [\u003ca href=\"https://redirect.github.com/anchore/quill/pull/581\"\u003e#581\u003c/a\u003e \u003ca href=\"https://github.com/willmurphyscode\"\u003e\u003ccode\u003e@​willmurphyscode\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eupdate to go 1.24.x [\u003ca href=\"https://redirect.github.com/anchore/quill/pull/543\"\u003e#543\u003c/a\u003e \u003ca href=\"https://github.com/westonsteimel\"\u003e\u003ccode\u003e@​westonsteimel\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eupdate runners to ubuntu-24.04 [\u003ca href=\"https://redirect.github.com/anchore/quill/pull/541\"\u003e#541\u003c/a\u003e \u003ca href=\"https://github.com/kzantow\"\u003e\u003ccode\u003e@​kzantow\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/anchore/quill/compare/v0.5.1...v0.7.0\"\u003e(Full Changelog)\u003c/a\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/quill/commit/9cdb0823ea1d2c45dcc11557f8c5cd7291c75d29\"\u003e\u003ccode\u003e9cdb082\u003c/code\u003e\u003c/a\u003e do not allow for unbounded reads for user controlled input (\u003ca href=\"https://redirect.github.com/anchore/quill/issues/681\"\u003e#681\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/quill/commit/80cf3fe082678af0ec4f9f8dd93f39189d2dc1fe\"\u003e\u003ccode\u003e80cf3fe\u003c/code\u003e\u003c/a\u003e account for excessive read limits in macho parsing code (\u003ca href=\"https://redirect.github.com/anchore/quill/issues/682\"\u003e#682\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/quill/commit/e41d66a517c2dc20ad8e9fbccffbdc6ba5ef0020\"\u003e\u003ccode\u003ee41d66a\u003c/code\u003e\u003c/a\u003e validate developer log URL requests (\u003ca href=\"https://redirect.github.com/anchore/quill/issues/680\"\u003e#680\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/quill/commit/899202c7eace3de7b3f4f7461bdfd1c4c38701db\"\u003e\u003ccode\u003e899202c\u003c/code\u003e\u003c/a\u003e update cred var values for p12 in release (\u003ca href=\"https://redirect.github.com/anchore/quill/issues/679\"\u003e#679\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/quill/commit/c73a37bd3b655633c1bd5466c2b2f65b2ae4032c\"\u003e\u003ccode\u003ec73a37b\u003c/code\u003e\u003c/a\u003e remove goreleaser config for release step + update tool refs (\u003ca href=\"https://redirect.github.com/anchore/quill/issues/678\"\u003e#678\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/quill/commit/95e119c6cb513a69f6b45d3e86a9fbcb2c77b669\"\u003e\u003ccode\u003e95e119c\u003c/code\u003e\u003c/a\u003e persist credentials for git (\u003ca href=\"https://redirect.github.com/anchore/quill/issues/677\"\u003e#677\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/quill/commit/02e765ab563811d7a3f0ede8df36977da92e8779\"\u003e\u003ccode\u003e02e765a\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/aws/aws-sdk-go-v2/config (\u003ca href=\"https://redirect.github.com/anchore/quill/issues/663\"\u003e#663\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/quill/commit/530bb7f3ddf667d262891b79fb15c0147d81cf11\"\u003e\u003ccode\u003e530bb7f\u003c/code\u003e\u003c/a\u003e add test notarize command (\u003ca href=\"https://redirect.github.com/anchore/quill/issues/618\"\u003e#618\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/quill/commit/3e8269c31055b1878a34c1954347254a42b37452\"\u003e\u003ccode\u003e3e8269c\u003c/code\u003e\u003c/a\u003e Set team ID during signing (\u003ca href=\"https://redirect.github.com/anchore/quill/issues/675\"\u003e#675\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/quill/commit/12b3e8eb4c06d7582da9725fad3bc7c268872752\"\u003e\u003ccode\u003e12b3e8e\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/blacktop/go-macho from 1.1.259 to 1.1.263 (\u003ca href=\"https://redirect.github.com/anchore/quill/issues/661\"\u003e#661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/anchore/quill/compare/v0.5.1...v0.7.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream` from 1.7.0 to 1.7.5\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/4599f78694cabb6853addabc6f92cb197fdb5647\"\u003e\u003ccode\u003e4599f78\u003c/code\u003e\u003c/a\u003e Release 2023-08-21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/2a439ce0fdda24816a5ea71c083765af67e93599\"\u003e\u003ccode\u003e2a439ce\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/46f31d76b34aefbc66bbfb08d2ef7e22267d4b66\"\u003e\u003ccode\u003e46f31d7\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/525486a4cfa9b8364ea5346a526dd1f92d3edc76\"\u003e\u003ccode\u003e525486a\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/b4e3176642b69937575f61f752f7d094fb6f4084\"\u003e\u003ccode\u003eb4e3176\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/2189\"\u003e#2189\u003c/a\u003e from aws/feat-presign-polly\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/30fe9b8de4c8538156248ae21b577a3e49170750\"\u003e\u003ccode\u003e30fe9b8\u003c/code\u003e\u003c/a\u003e Modify and Merge polly mod import\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f6c1d4839450e7f99850868570ff0c47850b72ca\"\u003e\u003ccode\u003ef6c1d48\u003c/code\u003e\u003c/a\u003e sync polly presigner from main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/396f97a998c5fab5bc7ee7bd4297c6d0f42b661e\"\u003e\u003ccode\u003e396f97a\u003c/code\u003e\u003c/a\u003e Release 2023-08-18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/08ab45438df135fc66f2eaf80032694ff2486db3\"\u003e\u003ccode\u003e08ab454\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/b50999bacbf780bf55d5c2b051c96e5c4467a5f6\"\u003e\u003ccode\u003eb50999b\u003c/code\u003e\u003c/a\u003e Update SDK's smithy-go dependency to v1.14.2\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/v1.7.0...service/m2/v1.7.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/buger/jsonparser` from 1.1.1 to 1.1.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/buger/jsonparser/releases\"\u003egithub.com/buger/jsonparser's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated travis to build for 1.13 to 1.15 by \u003ca href=\"https://github.com/janreggie\"\u003e\u003ccode\u003e@​janreggie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/225\"\u003ebuger/jsonparser#225\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\n\u003cul\u003e\n\u003cli\u003eeliminate 2 allocations in EachKey() by \u003ca href=\"https://github.com/Villenny\"\u003e\u003ccode\u003e@​Villenny\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/223\"\u003ebuger/jsonparser#223\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003efix issue \u003ca href=\"https://redirect.github.com/buger/jsonparser/issues/150\"\u003e#150\u003c/a\u003e (in deleting case) by \u003ca href=\"https://github.com/daria-kay\"\u003e\u003ccode\u003e@​daria-kay\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/226\"\u003ebuger/jsonparser#226\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efixing the oss-fuzz issue by \u003ca href=\"https://github.com/daria-kay\"\u003e\u003ccode\u003e@​daria-kay\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/227\"\u003ebuger/jsonparser#227\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix parseInt overflow check false negative by \u003ca href=\"https://github.com/carsonip\"\u003e\u003ccode\u003e@​carsonip\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/231\"\u003ebuger/jsonparser#231\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdded bespoke error for null cases by \u003ca href=\"https://github.com/jonomacd\"\u003e\u003ccode\u003e@​jonomacd\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/228\"\u003ebuger/jsonparser#228\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFuzzing: Add CIFuzz by \u003ca href=\"https://github.com/AdamKorcz\"\u003e\u003ccode\u003e@​AdamKorcz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/239\"\u003ebuger/jsonparser#239\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdded latest versions of go to tests by \u003ca href=\"https://github.com/moredure\"\u003e\u003ccode\u003e@​moredure\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/244\"\u003ebuger/jsonparser#244\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix EachKey pIdxFlags allocation by \u003ca href=\"https://github.com/unxcepted\"\u003e\u003ccode\u003e@​unxcepted\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/241\"\u003ebuger/jsonparser#241\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: prevent panic on negative slice index in Delete with malformed JSON (GO-2026-4514) by \u003ca href=\"https://github.com/dbarrosop\"\u003e\u003ccode\u003e@​dbarrosop\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/276\"\u003ebuger/jsonparser#276\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/janreggie\"\u003e\u003ccode\u003e@​janreggie\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/225\"\u003ebuger/jsonparser#225\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Villenny\"\u003e\u003ccode\u003e@​Villenny\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/223\"\u003ebuger/jsonparser#223\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/daria-kay\"\u003e\u003ccode\u003e@​daria-kay\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/226\"\u003ebuger/jsonparser#226\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/carsonip\"\u003e\u003ccode\u003e@​carsonip\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/231\"\u003ebuger/jsonparser#231\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jonomacd\"\u003e\u003ccode\u003e@​jonomacd\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/228\"\u003ebuger/jsonparser#228\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moredure\"\u003e\u003ccode\u003e@​moredure\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/244\"\u003ebuger/jsonparser#244\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/unxcepted\"\u003e\u003ccode\u003e@​unxcepted\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/241\"\u003ebuger/jsonparser#241\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dbarrosop\"\u003e\u003ccode\u003e@​dbarrosop\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/276\"\u003ebuger/jsonparser#276\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/buger/jsonparser/compare/v1.1.1...v1.1.2\"\u003ehttps://github.com/buger/jsonparser/compare/v1.1.1...v1.1.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/a69e7e01cd4ad67bdfd3ac2c080b9212af16f4b0\"\u003e\u003ccode\u003ea69e7e0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/buger/jsonparser/issues/276\"\u003e#276\u003c/a\u003e from dbarrosop/master\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/d3eacc0bab779d6cf98221f5268828fff287876e\"\u003e\u003ccode\u003ed3eacc0\u003c/code\u003e\u003c/a\u003e fix: prevent panic on negative slice index in Delete with malformed JSON (GO-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/61b32cfdfa0f5d368ef7c7daef28ce12d538740f\"\u003e\u003ccode\u003e61b32cf\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/buger/jsonparser/issues/241\"\u003e#241\u003c/a\u003e from unxcepted/master\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/2181e8398f18397c9cacbaea9889314bb585e868\"\u003e\u003ccode\u003e2181e83\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/buger/jsonparser/issues/244\"\u003e#244\u003c/a\u003e from ScaleChamp/patch-2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/1510b5194182fc2fb898f28cdbceb42fd7258bfa\"\u003e\u003ccode\u003e1510b51\u003c/code\u003e\u003c/a\u003e Added latest versions of go to tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/6fc2e488ed3cc4f1f1debec3b0c70715bd7be6fd\"\u003e\u003ccode\u003e6fc2e48\u003c/code\u003e\u003c/a\u003e fix: eachkey allocation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/a6f867eb7787e4ec54536b77b5d628ddf5c4f73d\"\u003e\u003ccode\u003ea6f867e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/buger/jsonparser/issues/239\"\u003e#239\u003c/a\u003e from AdamKorcz/cifuzz1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/cbc01fdbbe131706e89eeaaf0cd917760d8d3949\"\u003e\u003ccode\u003ecbc01fd\u003c/code\u003e\u003c/a\u003e Fuzzing: Add CIFuzz\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/dc92d6932a1272b4d8f485f798a88c3a75106256\"\u003e\u003ccode\u003edc92d69\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/buger/jsonparser/issues/228\"\u003e#228\u003c/a\u003e from jonomacd/null-handling\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/2d9d6343e8621ddc18c70749663f74bc584c0de4\"\u003e\u003ccode\u003e2d9d634\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/buger/jsonparser/issues/231\"\u003e#231\u003c/a\u003e from carsonip/fix-parseint-overflow-check\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/buger/jsonparser/compare/v1.1.1...v1.1.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/cloudflare/circl` from 1.6.1 to 1.6.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cloudflare/circl/releases\"\u003egithub.com/cloudflare/circl's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eCIRCL v1.6.3\u003c/h2\u003e\n\u003cp\u003eFix a bug on ecc/p384 scalar multiplication.\u003c/p\u003e\n\u003ch3\u003eWhat's Changed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esign/mldsa: Check opts for nil value  by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/582\"\u003ecloudflare/circl#582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eecc/p384: Point addition must handle point doubling case. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/583\"\u003ecloudflare/circl#583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease CIRCL v1.6.3 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/584\"\u003ecloudflare/circl#584\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNew SLH-DSA, improvements in ML-DSA for arm64.\u003c/li\u003e\n\u003cli\u003eTested compilation on WASM.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize pairing product computation by moving exponentiations to G1. by \u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esign: Adding SLH-DSA signature by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/512\"\u003ecloudflare/circl#512\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate code generators to CIRCL v1.6.1. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/548\"\u003ecloudflare/circl#548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eML-DSA: Add preliminary Wycheproof test vectors by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/552\"\u003ecloudflare/circl#552\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ego fmt by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/554\"\u003ecloudflare/circl#554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egz-compressing test vectors, use of HexBytes and ReadGzip functions. b...\n\n_Description has been truncated_\n\n\u003c!-- This is an auto-generated description by cubic. --\u003e\n---\n## Summary by cubic\nUpdate Go dependencies across the repo to pick up security fixes and performance improvements. Notable changes include gRPC and Helm security patches and a major `github.com/agentgateway/agentgateway` upgrade with faster CEL evaluation.\n\n- **Dependencies**\n  - `google.golang.org/grpc` → 1.79.3: fixes an auth bypass by rejecting malformed :path headers.\n  - `helm.sh/helm/v3` → 3.20.2: security patch for chart extraction path handling.\n  - `github.com/agentgateway/agentgateway` → 0.12.0: CEL rewrite with large perf gains and minor behavior tweaks.\n  - `github.com/buger/jsonparser` → 1.1.2: fixes panic on malformed JSON.\n  - `github.com/cloudflare/circl` → 1.6.3: bug fix in P-384 scalar multiplication.\n  - `github.com/sigstore/cosign/v2` → 2.6.2 and related `sigstore/*` bumps: supply chain signing updates.\n  - `github.com/moby/spdystream` → 0.5.1: patch applied in root and `hack/utils/applier`.\n  - Tooling/libs: Go 1.25.5, k8s libs v0.35.1, OpenTelemetry 1.39.0, `helm.sh/helm/v3` 3.20.2.\n\n- **Migration**\n  - Review CEL policies with `agentgateway` v0.12.0 (e.g., `base64.encode` naming and stricter variable lookups).\n  - Run an end-to-end smoke test to confirm routes with path-based auth still pass with gRPC’s stricter path validation.\n\n\u003csup\u003eWritten for commit f2d9194e186a8d9e9e41df92f41d5245e7adaa82. Summary will update on new commits.\u003c/sup\u003e\n\n\u003ca href=\"https://cubic.dev/pr/EmilynnJ/kgateway/pull/2?utm_source=github\" target=\"_blank\" rel=\"noopener noreferrer\" data-no-image-dialog=\"true\"\u003e\u003cpicture\u003e\u003csource media=\"(prefers-color-scheme: dark)\" srcset=\"https://cubic.dev/buttons/review-in-cubic-dark.svg\"\u003e\u003csource media=\"(prefers-color-scheme: light)\" srcset=\"https://cubic.dev/buttons/review-in-cubic-light.svg\"\u003e\u003cimg alt=\"Review in cubic\" src=\"https://cubic.dev/buttons/review-in-cubic-dark.svg\"\u003e\u003c/picture\u003e\u003c/a\u003e\n\n\u003c!-- End of auto-generated description by cubic. --\u003e\n\n\n\n\u003c!-- Macroscope's pull request summary starts here --\u003e\n\u003c!-- Macroscope will only edit the content between these invisible markers, and the markers themselves will not be visible in the GitHub rendered markdown. --\u003e\n\u003c!-- If you delete either of the start / end markers from your PR's description, Macroscope will append its summary at the bottom of the description. --\u003e\n\u003e [!NOTE]\n\u003e ### Bump Go dependencies across root and applier modules with 25 updates\n\u003e Updates [go.mod](https://github.com/EmilynnJ/kgateway/pull/2/files#diff-33ef32bf6c23acb95f5902d7097b7a1d5128ca061167ec0716715b0b9eeaa5f6) and [hack/utils/applier/go.mod](https://github.com/EmilynnJ/kgateway/pull/2/files#diff-7d16860419c22926d06b08ae9b67f33b83236c49e7008e3b4c652e3c87df9748) to their latest versions. Key upgrades include Kubernetes libraries to v0.35.1, Helm v3 to v3.20.2, agentgateway to v0.12.0, gRPC/protobuf, and extensive AWS SDK v1/v2 updates. Several indirect dependencies are removed (e.g. `go-chi/chi`, `mitchellh/mapstructure`, `sourcegraph/conc`) and new ones added (e.g. `moby/moby`, `coreos/go-oidc/v3`). Risk: transitive dependency additions and removals may surface unexpected build or runtime behavior in modules that relied on removed packages.\n\u003e\n\u003e \u003c!-- Macroscope's review summary starts here --\u003e\n\u003e\n\u003e \u003csup\u003e\u003ca href=\"https://app.macroscope.com\"\u003eMacroscope\u003c/a\u003e summarized f2d9194.\u003c/sup\u003e\n\u003e \u003c!-- Macroscope's review summary ends here --\u003e\n\u003e\n\u003c!-- macroscope-ui-refresh --\u003e\n\u003c!-- Macroscope's pull request summary ends here --\u003e","html_url":"https://github.com/EmilynnJ/kgateway/pull/2","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/EmilynnJ%2Fkgateway/issues/2","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2/packages"},{"uuid":"4442737548","node_id":"PR_kwDOPf3WO87bW9Ht","number":4,"state":"open","title":"chore(deps): bump the go_modules group across 2 directories with 8 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-14T02:52:17.000Z","updated_at":"2026-05-14T02:52:41.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"go_modules","update_count":8,"packages":[{"name":"github.com/docker/cli","old_version":"28.3.3+incompatible","new_version":"29.2.0+incompatible","repository_url":"https://github.com/docker/cli"},{"name":"github.com/go-git/go-git/v5","old_version":"5.16.2","new_version":"5.19.0","repository_url":"https://github.com/go-git/go-git"},{"name":"go.opentelemetry.io/otel","old_version":"1.37.0","new_version":"1.43.0"},{"name":"google.golang.org/grpc","old_version":"1.74.2","new_version":"1.79.3","repository_url":"https://github.com/grpc/grpc-go"},{"name":"github.com/cloudflare/circl","old_version":"1.6.1","new_version":"1.6.3"},{"name":"github.com/ethereum/go-ethereum","old_version":"1.16.8","new_version":"1.17.0","repository_url":"https://github.com/ethereum/go-ethereum"},{"name":"github.com/go-git/go-billy/v5","old_version":"5.6.2","new_version":"5.9.0"},{"name":"go.opentelemetry.io/otel/sdk","old_version":"1.36.0","new_version":"1.39.0"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 4 updates in the / directory: [github.com/docker/cli](https://github.com/docker/cli), [github.com/go-git/go-git/v5](https://github.com/go-git/go-git), [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [github.com/ethereum/go-ethereum](https://github.com/ethereum/go-ethereum).\nBumps the go_modules group with 2 updates in the /pkg directory: [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [github.com/ethereum/go-ethereum](https://github.com/ethereum/go-ethereum).\n\nUpdates `github.com/docker/cli` from 28.3.3+incompatible to 29.2.0+incompatible\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/0b9d1985dbf919678745f122b12b46f730b97d87\"\u003e\u003ccode\u003e0b9d198\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6764\"\u003e#6764\u003c/a\u003e from vvoland/update-docker\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/9c9ec7358833bb3e5622a166673744fca7fefac4\"\u003e\u003ccode\u003e9c9ec73\u003c/code\u003e\u003c/a\u003e vendor: github.com/moby/moby/client v0.2.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/bab3e81e1d8874a2d4f26afc02225ee537d0b15d\"\u003e\u003ccode\u003ebab3e81\u003c/code\u003e\u003c/a\u003e vendor: github.com/moby/moby/api v1.53.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/2e64fc162ab632a530f7191cc6af65c22356ea0d\"\u003e\u003ccode\u003e2e64fc1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6367\"\u003e#6367\u003c/a\u003e from thaJeztah/template_slicejoin\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/1f2ba2ac9d8c92870f7cce89dfa17d89d3375c19\"\u003e\u003ccode\u003e1f2ba2a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6760\"\u003e#6760\u003c/a\u003e from thaJeztah/container_create_fix_error\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/e34a3422cc32c808d2e8b0e0ef51112d53fa896d\"\u003e\u003ccode\u003ee34a342\u003c/code\u003e\u003c/a\u003e templates: make \u0026quot;join\u0026quot; work with non-string slices and map values\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/a86356d42f918968579e670b51bc85dc45982a33\"\u003e\u003ccode\u003ea86356d\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6763\"\u003e#6763\u003c/a\u003e from thaJeztah/bump_mapstructure\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/771660a17e56116eb32677a6d83c5210e5092194\"\u003e\u003ccode\u003e771660a\u003c/code\u003e\u003c/a\u003e vendor: github.com/go-viper/mapstructure/v2 v2.5.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/9cff36b35a828be8d137bc5de4983b7e3fef1614\"\u003e\u003ccode\u003e9cff36b\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6762\"\u003e#6762\u003c/a\u003e from thaJeztah/bump_x_deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/08ed2bc6e8bc49ad988ecd44633620a48fb10967\"\u003e\u003ccode\u003e08ed2bc\u003c/code\u003e\u003c/a\u003e cli/command/container: make injecting config.json failures a warning\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/docker/cli/compare/v28.3.3...v29.2.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-git/v5` from 5.16.2 to 5.19.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-git/releases\"\u003egithub.com/go-git/go-git/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.19.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.18.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2010\"\u003ego-git/go-git#2010\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Bump sha1cd and go-billy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2060\"\u003ego-git/go-git#2060\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Align object encoding with upstream by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2065\"\u003ego-git/go-git#2065\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.18.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eplumbing: transport/http, Add support for followRedirects policy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2004\"\u003ego-git/go-git#2004\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.17.1 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1941\"\u003ego-git/go-git#1941\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edotgit: skip writing pack files that already exist on disk by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1944\"\u003ego-git/go-git#1944\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e:warning: This release fixes a bug (\u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1942\"\u003ego-git/go-git#1942\u003c/a\u003e) that blocked some users from upgrading to \u003ccode\u003ev5.17.1\u003c/code\u003e. Thanks \u003ca href=\"https://github.com/pskrbasu\"\u003e\u003ccode\u003e@​pskrbasu\u003c/code\u003e\u003c/a\u003e for reporting it. :bow:\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.1...v5.17.2\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.1...v5.17.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/cloudflare/circl to v1.6.3 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1930\"\u003ego-git/go-git#1930\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/index, Improve v4 entry name validation by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1935\"\u003ego-git/go-git#1935\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/idxfile, Fix version and fanout checks by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1937\"\u003ego-git/go-git#1937\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.16.5 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1839\"\u003ego-git/go-git#1839\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: worktree, optimize infiles function for very large repos by \u003ca href=\"https://github.com/k-anshul\"\u003e\u003ccode\u003e@​k-anshul\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1853\"\u003ego-git/go-git#1853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: Add strict checks for supported extensions by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1861\"\u003ego-git/go-git#1861\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebackport, git: Improve Status() speed with new index.ModTime check by \u003ca href=\"https://github.com/cedric-appdirect\"\u003e\u003ccode\u003e@​cedric-appdirect\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1862\"\u003ego-git/go-git#1862\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003estorage: filesystem, Avoid overwriting loose obj files by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1864\"\u003ego-git/go-git#1864\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.16.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module golang.org/x/crypto to v0.45.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1744\"\u003ego-git/go-git#1744\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Bump Go test versions to 1.23-1.25 (v5) by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1746\"\u003ego-git/go-git#1746\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] git: worktree, Don't delete local untracked files when resetting worktree by \u003ca href=\"https://github.com/Ch00k\"\u003e\u003ccode\u003e@​Ch00k\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1800\"\u003ego-git/go-git#1800\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/bc930f4cbe095a3e1d49273655f73fcef7d41a42\"\u003e\u003ccode\u003ebc930f4\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2065\"\u003e#2065\u003c/a\u003e from go-git/commit-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/d315264343cead712aa9eb56475c2ec96f5ecef1\"\u003e\u003ccode\u003ed315264\u003c/code\u003e\u003c/a\u003e plumbing: object, Reset object before decode\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/6e1d34890a4dae8a0df738e531234bd60b7e9b66\"\u003e\u003ccode\u003e6e1d348\u003c/code\u003e\u003c/a\u003e plumbing: object, Align Tree handling with upstream\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/e134ba34cf95ed0167e5b1df36a933d7bde9d02d\"\u003e\u003ccode\u003ee134ba3\u003c/code\u003e\u003c/a\u003e tests: Skip double checks in Git v2.11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/1971422f6b1bec9176061b3293306981cfff981e\"\u003e\u003ccode\u003e1971422\u003c/code\u003e\u003c/a\u003e tests: Add git conformance tests for signing verification\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/a387aa8857a8fbba8e74b7f5485e9e030669ab5d\"\u003e\u003ccode\u003ea387aa8\u003c/code\u003e\u003c/a\u003e plumbing: object, Add ErrMalformedTag\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/f415670d906b5c6169d1fdc64f3f9f1d33eb6f9c\"\u003e\u003ccode\u003ef415670\u003c/code\u003e\u003c/a\u003e plumbing: object, Decode Tag headers via a state machine\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/5b0cd38a62e2336bb5f1a2ad0eb8ac8f9e7b740e\"\u003e\u003ccode\u003e5b0cd38\u003c/code\u003e\u003c/a\u003e plumbing: object, Reject multi-signature commits at Verify\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/fe8ed6223a6079d9fd84d853362a996e7df175fb\"\u003e\u003ccode\u003efe8ed62\u003c/code\u003e\u003c/a\u003e plumbing: object, Align Tag.EncodeWithoutSignature with Commit\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/98e337d5bdc4c0536a40ab7381b2231f7e0b15cd\"\u003e\u003ccode\u003e98e337d\u003c/code\u003e\u003c/a\u003e plumbing: object, Add support for Tag.SignatureSHA256\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.2...v5.19.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel` from 1.37.0 to 1.43.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.43.0/0.65.0/0.19.0] 2026-04-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eIsRandom\u003c/code\u003e and \u003ccode\u003eWithRandom\u003c/code\u003e on \u003ccode\u003eTraceFlags\u003c/code\u003e, and \u003ccode\u003eIsRandom\u003c/code\u003e on \u003ccode\u003eSpanContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e for \u003ca href=\"https://www.w3.org/TR/trace-context-2/#random-trace-id-flag\"\u003eW3C Trace Context Level 2 Random Trace ID Flag\u003c/a\u003e support. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012\"\u003e#8012\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd service detection with \u003ccode\u003eWithService\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642\"\u003e#7642\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eDefaultWithContext\u003c/code\u003e and \u003ccode\u003eEnvironmentWithContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to support plumbing \u003ccode\u003econtext.Context\u003c/code\u003e through default and environment detectors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051\"\u003e#8051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd support for per-series start time tracking for cumulative metrics in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true\u003c/code\u003e to enable. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060\"\u003e#8060\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithCardinalityLimitSelector\u003c/code\u003e for metric reader for configuring cardinality limits specific to the instrument kind. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855\"\u003e#7855\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce the \u003ccode\u003eEMPTY\u003c/code\u003e Type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to reflect that an empty value is now a valid value, with \u003ccode\u003eINVALID\u003c/code\u003e remaining as a deprecated alias of \u003ccode\u003eEMPTY\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove slice handling in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to optimize short slice values with fixed-size fast paths. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039\"\u003e#8039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of span metric recording in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e by returning early if self-observability is not enabled. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067\"\u003e#8067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove formatting of metric data diffs in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073\"\u003e#8073\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeprecated\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eINVALID\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. Use \u003ccode\u003eEMPTY\u003c/code\u003e instead. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReturn spec-compliant \u003ccode\u003eTraceIdRatioBased\u003c/code\u003e description. This is a breaking behavioral change, but it is necessary to\nmake the implementation \u003ca href=\"https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased\"\u003espec-compliant\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027\"\u003e#8027\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a race condition in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056\"\u003e#8056\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003ekenv\u003c/code\u003e command on BSD. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to correctly handle HTTP2 GOAWAY frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.40.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985\"\u003e#7985\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9276201a64b623606e3eaa0d61ae8ee6d62756c0\"\u003e\u003ccode\u003e9276201\u003c/code\u003e\u003c/a\u003e Release v1.43.0 / v0.65.0 / v0.19.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8128\"\u003e#8128\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/61b8c9466c4e6b17e69b622279fe9b63fb15c89a\"\u003e\u003ccode\u003e61b8c94\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8131\"\u003e#8131\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/97a086e82ffe01502f4c620e9c447efa229e2a23\"\u003e\u003ccode\u003e97a086e\u003c/code\u003e\u003c/a\u003e chore(deps): update github.com/golangci/dupl digest to c99c5cf (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8122\"\u003e#8122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/5e363de517dba6db62736b2f5cdef0e0929b4cd0\"\u003e\u003ccode\u003e5e363de\u003c/code\u003e\u003c/a\u003e limit response body size for OTLP HTTP exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/35214b60138eac8dec97a2d2b851d8c8471680c7\"\u003e\u003ccode\u003e35214b6\u003c/code\u003e\u003c/a\u003e Use an absolute path when calling bsd kenv (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/290024ceaf695f9cdbf29a0c6731a317d92bc361\"\u003e\u003ccode\u003e290024c\u003c/code\u003e\u003c/a\u003e fix(deps): update module google.golang.org/grpc to v1.80.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8121\"\u003e#8121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/e70658e098033d6bb5ec1b399de16bbb2642f6dc\"\u003e\u003ccode\u003ee70658e\u003c/code\u003e\u003c/a\u003e fix: support getBody in otelploghttp (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4afe468e3b4859c949a1c1e8d92684d43d86ef8a\"\u003e\u003ccode\u003e4afe468\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 9d38bb4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8117\"\u003e#8117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b9ca729776309e3c08fe700c131797a3b4d10634\"\u003e\u003ccode\u003eb9ca729\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8115\"\u003e#8115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/69472ec56cb7674d55ca2e2bcb04dea73228ab79\"\u003e\u003ccode\u003e69472ec\u003c/code\u003e\u003c/a\u003e chore(deps): update fossas/fossa-action action to v1.9.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8118\"\u003e#8118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.37.0...v1.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google.golang.org/grpc` from 1.74.2 to 1.79.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc-go/releases\"\u003egoogle.golang.org/grpc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 1.79.3\u003c/h2\u003e\n\u003ch1\u003eSecurity\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eserver: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted \u0026quot;deny\u0026quot; rules in interceptors like \u003ccode\u003egrpc/authz\u003c/code\u003e. Any request with a non-canonical path is now immediately rejected with an \u003ccode\u003eUnimplemented\u003c/code\u003e error. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.2\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003estats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8874\"\u003egrpc/grpc-go#8874\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.1\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003egrpc: Remove the \u003ccode\u003e-dev\u003c/code\u003e suffix from the User-Agent header. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8902\"\u003egrpc/grpc-go#8902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.0\u003c/h2\u003e\n\u003ch1\u003eAPI Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003emem: Add experimental API \u003ccode\u003eSetDefaultBufferPool\u003c/code\u003e to change the default buffer pool. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8806\"\u003e#8806\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/vanja-p\"\u003e\u003ccode\u003e@​vanja-p\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eexperimental/stats: Update \u003ccode\u003eMetricsRecorder\u003c/code\u003e to require embedding the new \u003ccode\u003eUnimplementedMetricsRecorder\u003c/code\u003e (a no-op struct) in all implementations for forward compatibility. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBehavior Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ebalancer/weightedtarget: Remove handling of \u003ccode\u003eAddresses\u003c/code\u003e and only handle \u003ccode\u003eEndpoints\u003c/code\u003e in resolver updates. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8841\"\u003e#8841\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eNew Features\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eexperimental/stats: Add support for asynchronous gauge metrics through the new \u003ccode\u003eAsyncMetricReporter\u003c/code\u003e and \u003ccode\u003eRegisterAsyncReporter\u003c/code\u003e APIs. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epickfirst: Add support for weighted random shuffling of endpoints, as described in \u003ca href=\"https://redirect.github.com/grpc/proposal/pull/535\"\u003egRFC A113\u003c/a\u003e.\n\u003cul\u003e\n\u003cli\u003eThis is enabled by default, and can be turned off using the environment variable \u003ccode\u003eGRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds: Implement \u003ccode\u003e:authority\u003c/code\u003e rewriting, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A81-xds-authority-rewriting.md\"\u003egRFC A81\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8779\"\u003e#8779\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebalancer/randomsubsetting: Implement the \u003ccode\u003erandom_subsetting\u003c/code\u003e LB policy, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A68-random-subsetting.md\"\u003egRFC A68\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8650\"\u003e#8650\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/marek-szews\"\u003e\u003ccode\u003e@​marek-szews\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/tls: Fix a bug where the port was not stripped from the authority override before validation. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8726\"\u003e#8726\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/Atul1710\"\u003e\u003ccode\u003e@​Atul1710\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds/priority: Fix a bug causing delayed failover to lower-priority clusters when a higher-priority cluster is stuck in \u003ccode\u003eCONNECTING\u003c/code\u003e state. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8813\"\u003e#8813\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ehealth: Fix a bug where health checks failed for clients using legacy compression options (\u003ccode\u003eWithDecompressor\u003c/code\u003e or \u003ccode\u003eRPCDecompressor\u003c/code\u003e). (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8765\"\u003e#8765\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/sanki92\"\u003e\u003ccode\u003e@​sanki92\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003etransport: Fix an issue where the HTTP/2 server could skip header size checks when terminating a stream early. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8769\"\u003e#8769\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eserver: Propagate status detail headers, if available, when terminating a stream during request header processing. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8754\"\u003e#8754\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ePerformance Improvements\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/alts: Optimize read buffer alignment to reduce copies. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8791\"\u003e#8791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emem: Optimize pooling and creation of \u003ccode\u003ebuffer\u003c/code\u003e objects.  (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8784\"\u003e#8784\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etransport: Reduce slice re-allocations by reserving slice capacity. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8797\"\u003e#8797\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/dda86dbd9cecb8b35b58c73d507d81d67761205f\"\u003e\u003ccode\u003edda86db\u003c/code\u003e\u003c/a\u003e Change version to 1.79.3 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8983\"\u003e#8983\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/72186f163e75a065c39e6f7df9b6dea07fbdeff5\"\u003e\u003ccode\u003e72186f1\u003c/code\u003e\u003c/a\u003e grpc: enforce strict path checking for incoming requests on the server (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/97ca3522b239edf6813e2b1106924e9d55e89d43\"\u003e\u003ccode\u003e97ca352\u003c/code\u003e\u003c/a\u003e Changing version to 1.79.3-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8954\"\u003e#8954\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/8902ab6efea590f5b3861126559eaa26fa9783b2\"\u003e\u003ccode\u003e8902ab6\u003c/code\u003e\u003c/a\u003e Change the version to release 1.79.2 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8947\"\u003e#8947\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/a9286705aa689bee321ec674323b6896284f3e02\"\u003e\u003ccode\u003ea928670\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8874\"\u003e#8874\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8904\"\u003e#8904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/06df3638c0bcee88197b1033b3ba83e1eb8bc010\"\u003e\u003ccode\u003e06df363\u003c/code\u003e\u003c/a\u003e Change version to 1.79.2-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8903\"\u003e#8903\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/782f2de44f597af18a120527e7682a6670d84289\"\u003e\u003ccode\u003e782f2de\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8902\"\u003e#8902\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/850eccbb2257bd2de6ac28ee88a7172ab6175629\"\u003e\u003ccode\u003e850eccb\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8851\"\u003e#8851\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/765ff056b6890f6c8341894df4e9668e9bfc18ef\"\u003e\u003ccode\u003e765ff05\u003c/code\u003e\u003c/a\u003e Change version to 1.79.0 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8850\"\u003e#8850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/68804be0e78ed0365bb5a576dedc12e2168ed63e\"\u003e\u003ccode\u003e68804be\u003c/code\u003e\u003c/a\u003e Cherry pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8896\"\u003e#8896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/grpc/grpc-go/compare/v1.74.2...v1.79.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/cloudflare/circl` from 1.6.1 to 1.6.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cloudflare/circl/releases\"\u003egithub.com/cloudflare/circl's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eCIRCL v1.6.3\u003c/h2\u003e\n\u003cp\u003eFix a bug on ecc/p384 scalar multiplication.\u003c/p\u003e\n\u003ch3\u003eWhat's Changed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esign/mldsa: Check opts for nil value  by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/582\"\u003ecloudflare/circl#582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eecc/p384: Point addition must handle point doubling case. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/583\"\u003ecloudflare/circl#583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease CIRCL v1.6.3 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/584\"\u003ecloudflare/circl#584\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNew SLH-DSA, improvements in ML-DSA for arm64.\u003c/li\u003e\n\u003cli\u003eTested compilation on WASM.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize pairing product computation by moving exponentiations to G1. by \u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esign: Adding SLH-DSA signature by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/512\"\u003ecloudflare/circl#512\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate code generators to CIRCL v1.6.1. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/548\"\u003ecloudflare/circl#548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eML-DSA: Add preliminary Wycheproof test vectors by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/552\"\u003ecloudflare/circl#552\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ego fmt by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/554\"\u003ecloudflare/circl#554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egz-compressing test vectors, use of HexBytes and ReadGzip functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/555\"\u003ecloudflare/circl#555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Removes use of elliptic Marshal and Unmarshal functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/556\"\u003ecloudflare/circl#556\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport encoding/decoding ML-DSA private keys (as long as they contain seeds) by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/559\"\u003ecloudflare/circl#559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to golangci-lint v2 by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/560\"\u003ecloudflare/circl#560\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreparation for ARM64 Implementation of poly operations for dilithium package. by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eprepare power2Round for custom implementations in assembly by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/564\"\u003ecloudflare/circl#564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eARM64 implementation for poly.PackLe16 by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/563\"\u003ecloudflare/circl#563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polyMulBy2toD by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/565\"\u003ecloudflare/circl#565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polySub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/566\"\u003ecloudflare/circl#566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: add byteLen method for short groups and RandomScalar uses rand.Int by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/568\"\u003ecloudflare/circl#568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of poly.Add/Sub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/572\"\u003ecloudflare/circl#572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Adding cryptobyte marshaling to scalars by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/569\"\u003ecloudflare/circl#569\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumping up to Go1.25 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/574\"\u003ecloudflare/circl#574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: Including WASM compilation. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/577\"\u003ecloudflare/circl#577\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to using package-declared HPKE errors for shortkem instead of standard library errors by \u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease v1.6.2 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/579\"\u003ecloudflare/circl#579\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/24ae53c5d6f7fe18203adc125ba3ed76a38703e1\"\u003e\u003ccode\u003e24ae53c\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/581020bd4a836b8ce7bd4e414ba2884c07dbc906\"\u003e\u003ccode\u003e581020b\u003c/code\u003e\u003c/a\u003e Rename method to oddMultiplesProjective.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/12209a4566605692a8402594e367a5aed5148460\"\u003e\u003ccode\u003e12209a4\u003c/code\u003e\u003c/a\u003e Removing unused cmov for jacobian points.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/fcba359f4178645d2c9e50f29ab6966337da4b95\"\u003e\u003ccode\u003efcba359\u003c/code\u003e\u003c/a\u003e ecc/p384: use of complete projective formulas for scalar multiplication.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/5e1bae8d8c2df4e717c2c5c2d5b5d60b629b2ac6\"\u003e\u003ccode\u003e5e1bae8\u003c/code\u003e\u003c/a\u003e ecc/p384: handle point doubling in point addition with Jacobian coordinates.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/341604685ff97e8f7440ae4b4711ba1c118c648c\"\u003e\u003ccode\u003e3416046\u003c/code\u003e\u003c/a\u003e Check opts for nil value.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/a763d47a6dce43d1f4f7b697d1d7810463a526f6\"\u003e\u003ccode\u003ea763d47\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3c70bf9ad53b681fbe5ba6067e454a86549fee8a\"\u003e\u003ccode\u003e3c70bf9\u003c/code\u003e\u003c/a\u003e Bump x/crypto x/sys dependencies.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3f0f15b2bfe67bad81a35e8aec81ae42ca78349d\"\u003e\u003ccode\u003e3f0f15b\u003c/code\u003e\u003c/a\u003e Revert to using package-declared HPKE errors for shortkem instead of standard...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/23491bd573cf29b6f567057a158203a2c9dfa30d\"\u003e\u003ccode\u003e23491bd\u003c/code\u003e\u003c/a\u003e Adding generic Power2Round method.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/ethereum/go-ethereum` from 1.16.8 to 1.17.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ethereum/go-ethereum/releases\"\u003egithub.com/ethereum/go-ethereum's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eEezo-Inlaid Circuitry (v1.17.0)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cp\u003eThis is a feature release, with all accumulated development from the last 3 months. See below for the highlights.\u003c/p\u003e\n\u003cp\u003eNote that this release contains multiple critical security fixes, as well as many bug fixes, and is recommended for all users. However, if you are cautious about upgrades, you can also install v1.16.9 which has just the critical security fixes. Specifically, this release fixes \u003ca href=\"https://github.com/ethereum/go-ethereum/security/advisories/GHSA-689v-6xwf-5jf3\"\u003eCVE-2026-26313\u003c/a\u003e, \u003ca href=\"https://github.com/ethereum/go-ethereum/security/advisories/GHSA-2gjw-fg97-vg3r\"\u003eCVE-2026-26314\u003c/a\u003e, \u003ca href=\"https://github.com/ethereum/go-ethereum/security/advisories/GHSA-m6j8-rg6r-7mv8\"\u003eCVE-2026-26315\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eWe recommend recreating your p2p node key after installing this update, which you can do by removing the \u003ccode\u003eDATADIR/geth/nodekey\u003c/code\u003e file before restarting geth. Note this will cause a change in the p2p node ID, which may break static peering setups.\u003c/p\u003e\n\u003ch2\u003eHighlights\u003c/h2\u003e\n\u003ch3\u003ePath-based Archive Node with Proofs\u003c/h3\u003e\n\u003cp\u003eThe path-based archive node can now serve proofs (via \u003ccode\u003eeth_getProof\u003c/code\u003e) for the state of older blocks.\u003c/p\u003e\n\u003cp\u003eYou can configure the block range that supports proving independently from other archive state availability. Specifically, you can use the \u003ccode\u003e--history.trienode\u003c/code\u003e command-line flag to set the amount of blocks for which tree nodes will be tracked.\u003c/p\u003e\n\u003cp\u003eThis feature is disabled by default. Note that state history cannot easily be recovered once deleted, as it can only be generated by processing blocks. However, you can enable trienode history (and/or state history) at any time to turn a full node into a partial archive node, keeping state from that point in time onwards.\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/32727\"\u003e#32727\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/32621\"\u003e#32621\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33551\"\u003e#33551\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/32981\"\u003e#32981\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33399\"\u003e#33399\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/32913\"\u003e#32913\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33303\"\u003e#33303\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33584\"\u003e#33584\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33329\"\u003e#33329\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33681\"\u003e#33681\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33103\"\u003e#33103\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33098\"\u003e#33098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33515\"\u003e#33515\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/32247\"\u003e#32247\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eEraE History Support\u003c/h3\u003e\n\u003cp\u003eGeth now suports the \u003ca href=\"https://redirect.github.com/eth-clients/e2store-format-specs/pull/16\"\u003eEraE\u003c/a\u003e file format, an archival format for post-merge chain history.\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/32157\"\u003e#32157\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33827\"\u003e#33827\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eOpenTelemetry Tracing\u003c/h3\u003e\n\u003cp\u003eOpenTelemetry tracing is now supported by the RPC server, including support for distributed tracing.\nWe have also added some tracing spans for block processing via the engine API, i.e. \u003ccode\u003eengine_newPayload\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33599\"\u003e#33599\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33452\"\u003e#33452\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33780\"\u003e#33780\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33521\"\u003e#33521\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eAll Changes\u003c/h2\u003e\n\u003ch3\u003eGeth CLI\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe \u003ccode\u003egeth version-check\u003c/code\u003e subcommand has been removed. This command checked the geth website for signed vulnerability notices, and would tell if updates are necessary  (\u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33498\"\u003e#33498\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThere is now a \u003ccode\u003e--miner.maxblobs\u003c/code\u003e command-line flag to set a limit on blobs included in built blocks (\u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33129\"\u003e#33129\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33302\"\u003e#33302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eGeth now supports continuous profiling with Grafana Pyroscope (\u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33623\"\u003e#33623\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eA rare bug that could halt block production in \u003ccode\u003egeth --dev\u003c/code\u003e mode was fixed (\u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33146\"\u003e#33146\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eA new \u003ccode\u003e--rpc.rangelimit\u003c/code\u003e flag configures the maximum block range for \u003ccode\u003eeth_getLogs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33163\"\u003e#33163\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003egeth --exitwhensynced\u003c/code\u003e will now set the \u003ccode\u003efinalized\u003c/code\u003e and \u003ccode\u003esafe\u003c/code\u003e block (\u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33038\"\u003e#33038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003egeth --ethstats\u003c/code\u003e now reports the newPayload processing time to the stats server (\u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33395\"\u003e#33395\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eA lot of minor issues in Geth's command-line flag processing have been fixed (\u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33379\"\u003e#33379\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33338\"\u003e#33338\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33330\"\u003e#33330\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/32999\"\u003e#32999\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33279\"\u003e#33279\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33252\"\u003e#33252\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003eevm blocktest\u003c/code\u003e command can now read filenames from stdin when no path is provided (\u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/32824\"\u003e#32824\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFork Implementation\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ethereum/go-ethereum/commit/0cf3d3ba4f7062fd2bbf2bda10972d528974e876\"\u003e\u003ccode\u003e0cf3d3b\u003c/code\u003e\u003c/a\u003e version: release go-ethereum v1.17.0 stable\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ethereum/go-ethereum/commit/9b78f45e337f01e66b505c35b74415751b2a0a28\"\u003e\u003ccode\u003e9b78f45\u003c/code\u003e\u003c/a\u003e crypto/secp256k1: fix coordinate check\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ethereum/go-ethereum/commit/c709c19b40f4b6655d7944c3fb0c36a14c6774d6\"\u003e\u003ccode\u003ec709c19\u003c/code\u003e\u003c/a\u003e eth/catalyst: add initial OpenTelemetry tracing for newPayload (\u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33521\"\u003e#33521\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ethereum/go-ethereum/commit/550ca91b179493e5c0394ee644efed3deefb890e\"\u003e\u003ccode\u003e550ca91\u003c/code\u003e\u003c/a\u003e consensus/misc: hardening header verification (\u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33860\"\u003e#33860\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ethereum/go-ethereum/commit/a4b3898f9041fd7c77130dc17ba2b80441a998af\"\u003e\u003ccode\u003ea4b3898\u003c/code\u003e\u003c/a\u003e internal/telemetry: don't create internal spans without parents (\u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33780\"\u003e#33780\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ethereum/go-ethereum/commit/0cba803fbafb12e9daaea53b76de847842ab3055\"\u003e\u003ccode\u003e0cba803\u003c/code\u003e\u003c/a\u003e eth/protocols/eth, eth/protocols/snap: delayed p2p message decoding (\u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33835\"\u003e#33835\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ethereum/go-ethereum/commit/ad88b68a467b6b3cb9d6a8a24f0ec74e8aa77565\"\u003e\u003ccode\u003ead88b68\u003c/code\u003e\u003c/a\u003e internal/download: show progress bar only if server gives length (\u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33842\"\u003e#33842\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ethereum/go-ethereum/commit/c50e5edfafe408d911f3cdd2191a6808dc95cb42\"\u003e\u003ccode\u003ec50e5ed\u003c/code\u003e\u003c/a\u003e cmd/geth, internal/telemetry: wire OpenTelemetry tracing via CLI flags (\u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33484\"\u003e#33484\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ethereum/go-ethereum/commit/d8b92cb9e60fc8785c84f1afb35e64c9312eb35d\"\u003e\u003ccode\u003ed8b92cb\u003c/code\u003e\u003c/a\u003e rpc,internal/telemetry: fix deferred spanEnd to capture errors via pointer (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ethereum/go-ethereum/commit/ac85a6f25449a7b96505637e18c988b3142d47bf\"\u003e\u003ccode\u003eac85a6f\u003c/code\u003e\u003c/a\u003e rlp: add back Iterator.Count, with fixes (\u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33841\"\u003e#33841\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ethereum/go-ethereum/compare/v1.16.8...v1.17.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-billy/v5` from 5.6.2 to 5.9.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-billy/releases\"\u003egithub.com/go-git/go-billy/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.9.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUse path.Clean instead of filepath.Clean in iofs.Open by \u003ca href=\"https://github.com/puerco\"\u003e\u003ccode\u003e@​puerco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/197\"\u003ego-git/go-billy#197\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDeprecate ChrootOS in favour of BoundOS by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/201\"\u003ego-git/go-billy#201\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGeneral Improvements by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/203\"\u003ego-git/go-billy#203\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eosfs: ChrootOS eval baseDir on creation by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/205\"\u003ego-git/go-billy#205\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRun go-git tests as part of integration tests by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/206\"\u003ego-git/go-billy#206\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.8.0...v5.9.0\"\u003ehttps://github.com/go-git/go-billy/compare/v5.8.0...v5.9.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.8.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module golang.org/x/net to v0.45.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/183\"\u003ego-git/go-billy#183\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Ensure Chmod behaviour across BoundOS and ChrootOS by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/187\"\u003ego-git/go-billy#187\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.7.0...v5.8.0\"\u003ehttps://github.com/go-git/go-billy/compare/v5.7.0...v5.8.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.7.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for Chmod on billy.Filesystem by \u003ca href=\"https://github.com/bitfehler\"\u003e\u003ccode\u003e@​bitfehler\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/171\"\u003ego-git/go-billy#171\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Update module golang.org/x/net to v0.38.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/177\"\u003ego-git/go-billy#177\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.6.2...v5.7.0\"\u003ehttps://github.com/go-git/go-billy/compare/v5.6.2...v5.7.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/237e529bb8de61704047f71a5ab1c8e6676492f1\"\u003e\u003ccode\u003e237e529\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-billy/issues/206\"\u003e#206\u003c/a\u003e from pjbgf/v5-improvements\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/04edb394b39979b5cbdec30ded6abdcb9f7786c5\"\u003e\u003ccode\u003e04edb39\u003c/code\u003e\u003c/a\u003e build: Add go-git integration test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/d8efefd33b2e8eeea1030e317bb0d71c5e918270\"\u003e\u003ccode\u003ed8efefd\u003c/code\u003e\u003c/a\u003e osfs: preserve empty ChrootOS base\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/07f2a0bf50e42d438d1d9d263c3c8a22598985b8\"\u003e\u003ccode\u003e07f2a0b\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-billy/issues/205\"\u003e#205\u003c/a\u003e from pjbgf/v5-improvements\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/25207c8468f1af656953cb5db7030aad5df1fe99\"\u003e\u003ccode\u003e25207c8\u003c/code\u003e\u003c/a\u003e build: Bump Go versions in workflows\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/2fda229d9ac0cb5ba654ebc824cfbb90248f82d9\"\u003e\u003ccode\u003e2fda229\u003c/code\u003e\u003c/a\u003e osfs: ChrootOS eval baseDir on creation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/427b27f32f22de11498a682c65cd5060a01ec168\"\u003e\u003ccode\u003e427b27f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-billy/issues/203\"\u003e#203\u003c/a\u003e from pjbgf/v5-improvements\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/7d5a23ece03edc171c1f63c8fa73f84c8428bf17\"\u003e\u003ccode\u003e7d5a23e\u003c/code\u003e\u003c/a\u003e chroot: Reject symlink loops\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/2c2287a233d2ee1e6cdce8956141f6d10505f3bf\"\u003e\u003ccode\u003e2c2287a\u003c/code\u003e\u003c/a\u003e util: avoid following symlinks in RemoveAll fallback\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/cbd88e9a9a2d7fe1065bbe083d8bf0c5fd7290de\"\u003e\u003ccode\u003ecbd88e9\u003c/code\u003e\u003c/a\u003e Fix mount path handling\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.6.2...v5.9.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/sdk` from 1.36.0 to 1.39.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/sdk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.39.0/0.61.0/0.15.0/0.0.14] 2025-12-05\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eGreatly reduce the cost of recording metrics in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e using hashing for map keys. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7175\"\u003e#7175\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithInstrumentationAttributeSet\u003c/code\u003e option to \u003ccode\u003ego.opentelemetry.io/otel/log\u003c/code\u003e, \u003ccode\u003ego.opentelemetry.io/otel/metric\u003c/code\u003e, and \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e packages.\nThis provides a concurrent-safe and performant alternative to \u003ccode\u003eWithInstrumentationAttributes\u003c/code\u003e by accepting a pre-constructed \u003ccode\u003eattribute.Set\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7287\"\u003e#7287\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability for the Prometheus exporter in \u003ccode\u003ego.opentelemetry.io/otel/exporters/prometheus\u003c/code\u003e.\nCheck the \u003ccode\u003ego.opentelemetry.io/otel/exporters/prometheus/internal/x\u003c/code\u003e package documentation for more information. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7345\"\u003e#7345\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7353\"\u003e#7353\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd temporality selector functions \u003ccode\u003eDeltaTemporalitySelector\u003c/code\u003e, \u003ccode\u003eCumulativeTemporalitySelector\u003c/code\u003e, \u003ccode\u003eLowMemoryTemporalitySelector\u003c/code\u003e to \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7434\"\u003e#7434\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics for simple log processor in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7548\"\u003e#7548\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7459\"\u003e#7459\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7486\"\u003e#7486\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics for simple span processor in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7374\"\u003e#7374\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7512\"\u003e#7512\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics for manual reader in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7524\"\u003e#7524\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics for periodic reader in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7571\"\u003e#7571\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eOTEL_EXPORTER_OTLP_LOGS_INSECURE\u003c/code\u003e and \u003ccode\u003eOTEL_EXPORTER_OTLP_INSECURE\u003c/code\u003e environmental variables in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7608\"\u003e#7608\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eEnabled\u003c/code\u003e method to the \u003ccode\u003eProcessor\u003c/code\u003e interface in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e.\nAll \u003ccode\u003eProcessor\u003c/code\u003e implementations now include an \u003ccode\u003eEnabled\u003c/code\u003e method. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7639\"\u003e#7639\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.38.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.38.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.38.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.37.0.\u003c/code\u003e(\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7648\"\u003e#7648\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eDistinct\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e is no longer guaranteed to uniquely identify an attribute set.\nCollisions between \u003ccode\u003eDistinct\u003c/code\u003e values for different Sets are possible with extremely high cardinality (billions of series per instrument), but are highly unlikely. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7175\"\u003e#7175\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithInstrumentationAttributes\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e synchronously de-duplicates the passed attributes instead of delegating it to the returned \u003ccode\u003eTracerOption\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7266\"\u003e#7266\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithInstrumentationAttributes\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/meter\u003c/code\u003e synchronously de-duplicates the passed attributes instead of delegating it to the returned \u003ccode\u003eMeterOption\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7266\"\u003e#7266\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithInstrumentationAttributes\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/log\u003c/code\u003e synchronously de-duplicates the passed attributes instead of delegating it to the returned \u003ccode\u003eLoggerOption\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7266\"\u003e#7266\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRename the \u003ccode\u003eOTEL_GO_X_SELF_OBSERVABILITY\u003c/code\u003e environment variable to \u003ccode\u003eOTEL_GO_X_OBSERVABILITY\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e, \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e, and \u003ccode\u003ego.opentelemetry.io/otel/exporters/stdout/stdouttrace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7302\"\u003e#7302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of histogram \u003ccode\u003eRecord\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e when min and max are disabled using \u003ccode\u003eNoMinMax\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7306\"\u003e#7306\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove error handling for dropped data during translation by using \u003ccode\u003eprometheus.NewInvalidMetric\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/prometheus\u003c/code\u003e.\n⚠️ \u003cstrong\u003eBreaking Change:\u003c/strong\u003e Previously, these cases were only logged and scrapes succeeded.\nNow, when translation would drop data (e.g., invalid label/value), the exporter emits a \u003ccode\u003eNewInvalidMetric\u003c/code\u003e, and Prometheus scrapes \u003cstrong\u003efail with HTTP 500\u003c/strong\u003e by default.\nTo preserve the prior behavior (scrapes succeed while errors are logged), configure your Prometheus HTTP handler with: \u003ccode\u003epromhttp.HandlerOpts{ ErrorHandling: promhttp.ContinueOnError }\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7363\"\u003e#7363\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReplace fnv hash with xxhash in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e for better performance. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7371\"\u003e#7371\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe default \u003ccode\u003eTranslationStrategy\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/exporters/prometheus\u003c/code\u003e is changed from \u003ccode\u003eotlptranslator.NoUTF8EscapingWithSuffixes\u003c/code\u003e to \u003ccode\u003eotlptranslator.UnderscoreEscapingWithSuffixes\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7421\"\u003e#7421\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7427\"\u003e#7427\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eInclude W3C TraceFlags (bits 0–7) in the OTLP \u003ccode\u003eSpan.Flags\u003c/code\u003e field in \u003ccode\u003ego.opentelemetry.io/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e and \u003ccode\u003ego.opentelemetry.io/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7438\"\u003e#7438\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003eErrorType\u003c/code\u003e function in \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.37.0\u003c/code\u003e now handles custom error types.\nIf an error implements an \u003ccode\u003eErrorType() string\u003c/code\u003e method, the return value of that method will be used as the error type. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7442\"\u003e#7442\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ccode\u003eWithInstrumentationAttributes\u003c/code\u003e options in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e, \u003ccode\u003ego.opentelemetry.io/otel/metric\u003c/code\u003e, and \u003ccode\u003ego.opentelemetry.io/otel/log\u003c/code\u003e to properly merge attributes when passed multiple times instead of replacing them.\nAttributes with duplicate keys will use the last value passed. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7300\"\u003e#7300\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe equality of \u003ccode\u003eattribute.Set\u003c/code\u003e when using the \u003ccode\u003eEqual\u003c/code\u003e method is not affected by the user overriding the empty set pointed to by \u003ccode\u003eattribute.EmptySet\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7357\"\u003e#7357\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/6ce14298b9d58647295280560205307768400496\"\u003e\u003ccode\u003e6ce1429\u003c/code\u003e\u003c/a\u003e Release v1.39.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7676\"\u003e#7676\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/12e421a7061c1ab5c25a1851ca168e1c3ac11bbb\"\u003e\u003ccode\u003e12e421a\u003c/code\u003e\u003c/a\u003e sdk/log: move Enabled method from FilterProcessor to Processor (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7639\"\u003e#7639\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/5982f16d244fafebffcfc92b4673dbeb565b4e7b\"\u003e\u003ccode\u003e5982f16\u003c/code\u003e\u003c/a\u003e fix(deps): update module golang.org/x/sys to v0.39.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7684\"\u003e#7684\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/928837830da34dea636b48a468149d480cc41058\"\u003e\u003ccode\u003e9288378\u003c/code\u003e\u003c/a\u003e chore(deps): update module golang.org/x/sync to v0.19.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7683\"\u003e#7683\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/ee3dfef45d9462e209d92e0651a58d2417c1305f\"\u003e\u003ccode\u003eee3dfef\u003c/code\u003e\u003c/a\u003e chore(deps): update github.com/securego/gosec/v2 digest to 41f28e2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7682\"\u003e#7682\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9345d1f64d874fa8df5f6ca4e14acaeb44532cd3\"\u003e\u003ccode\u003e9345d1f\u003c/code\u003e\u003c/a\u003e fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.7.2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7680\"\u003e#7680\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/d03b03395dc9436d79d5ba7b5ea77053b18a9915\"\u003e\u003ccode\u003ed03b033\u003c/code\u003e\u003c/a\u003e Check context prior to delaying retry in OTLP exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7678\"\u003e#7678\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/61765e78a620994b5922e34e776e029da1a2b983\"\u003e\u003ccode\u003e61765e7\u003c/code\u003e\u003c/a\u003e Fix flaky \u003ccode\u003eTestClientInstrumentation\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7677\"\u003e#7677\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/a54721cc8052fcd497d6f637a463d1aba787012c\"\u003e\u003ccode\u003ea54721c\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/go-git/go-billy/v5 to v5.7.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7679\"\u003e#7679\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/746d0860d70bb9c1e875afe1c7e41e9060387d46\"\u003e\u003ccode\u003e746d086\u003c/code\u003e\u003c/a\u003e chore(deps): update github/codeql-action action to v4.31.7 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7675\"\u003e#7675\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.36.0....\n\n_Description has been truncated_\n\n---\n\n🔄 This PR updates Go module dependencies across the project, bumping 8 packages including Docker CLI, go-git, OpenTelemetry, gRPC, and Ethereum libraries to their latest versions. The update also upgrades the Go version from 1.24.4 to 1.25.0 and includes both direct and indirect dependency updates.\n\n\u003cdetails\u003e\n\u003csummary\u003e🔍 \u003cstrong\u003eDetailed Analysis\u003c/strong\u003e\u003c/summary\u003e\n\n### Key Changes\n- **Go Version**: Upgraded from 1.24.4 to 1.25.0\n- **Docker Dependencies**: Updated docker/cli from v28.3.3 to v29.2.0 and docker/go-connections from v0.6.0 to v0.7.0\n- **Git Libraries**: Updated go-git/go-git from v5.16.2 to v5.19.0 and go-git/go-billy from v5.6.2 to v5.9.0\n- **OpenTelemetry**: Updated otel from v1.37.0 to v1.43.0 and related SDK components\n- **gRPC**: Updated from v1.74.2 to v1.79.3 across both main and pkg modules\n- **Testing**: Updated stretchr/testify from v1.10.0 to v1.11.1\n- **Cryptography**: Updated cloudflare/circl from v1.6.1 to v1.6.3 and ethereum/go-ethereum from v1.16.8 to v1.17.0\n\n### Technical Implementation\n```mermaid\nflowchart TD\n    A[Dependabot Scan] --\u003e B[Identify Updates]\n    B --\u003e C[Update go.mod files]\n    C --\u003e D[Update go.sum files]\n    D --\u003e E[Version Compatibility Check]\n    E --\u003e F[Security Patches Applied]\n    F --\u003e G[Ready for Merge]\n    \n    H[Main Module] --\u003e C\n    I[pkg/ Module] --\u003e C\n    \n    J[Direct Dependencies] --\u003e C\n    K[Indirect Dependencies] --\u003e C\n```\n\n### Impact\n- **Security Improvements**: Multiple security fixes included, particularly in gRPC v1.79.3 which addresses authorization bypass vulnerabilities\n- **Performance Enhancements**: OpenTelemetry v1.43.0 includes performance improvements for metric recording and attribute handling\n- **Feature Updates**: New capabilities in go-git v5.19.0 including improved object encoding and security hardening\n- **Compatibility**: Go 1.25.0 provides latest language features and standard library improvements\n- **Maintenance**: Automated dependency management ensures the project stays current with upstream security patches and bug fixes\n\n\u003c/details\u003e\n\n_Created with [Palmier](https://www.palmier.io)_","html_url":"https://github.com/GlacierEQ/cli/pull/4","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/GlacierEQ%2Fcli/issues/4","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/4/packages"},{"uuid":"4439284235","node_id":"PR_kwDOCact887bMAhf","number":5432,"state":"closed","title":"chore(deps): bump the go_modules group across 16 directories with 6 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-05-15T02:29:46.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-13T15:51:03.000Z","updated_at":"2026-05-15T02:29:55.000Z","time_to_close":124723,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"go_modules","update_count":6,"packages":[{"name":"github.com/go-git/go-git/v5","old_version":"5.13.2","new_version":"5.19.0","repository_url":"https://github.com/go-git/go-git"},{"name":"golang.org/x/net","old_version":"0.35.0","new_version":"0.53.0","repository_url":"https://github.com/golang/net"},{"name":"github.com/cloudflare/circl","old_version":"1.3.7","new_version":"1.6.3"},{"name":"github.com/go-git/go-billy/v5","old_version":"5.6.2","new_version":"5.9.0"},{"name":"golang.org/x/crypto","old_version":"0.33.0","new_version":"0.50.0"},{"name":"golang.org/x/image","old_version":"0.12.0","new_version":"0.38.0","repository_url":"https://github.com/golang/image"},{"name":"golang.org/x/net","old_version":"0.35.0","new_version":"0.38.0","repository_url":"https://github.com/golang/net"},{"name":"golang.org/x/crypto","old_version":"0.33.0","new_version":"0.36.0"},{"name":"golang.org/x/net","old_version":"0.23.0","new_version":"0.38.0","repository_url":"https://github.com/golang/net"},{"name":"golang.org/x/crypto","old_version":"0.21.0","new_version":"0.36.0"},{"name":"github.com/go-git/go-git/v5","old_version":"5.16.4","new_version":"5.19.0","repository_url":"https://github.com/go-git/go-git"},{"name":"github.com/go-git/go-billy/v5","old_version":"5.7.0","new_version":"5.9.0"},{"name":"golang.org/x/image","old_version":"0.35.0","new_version":"0.38.0","repository_url":"https://github.com/golang/image"},{"name":"github.com/go-git/go-git/v5","old_version":"5.16.4","new_version":"5.19.0","repository_url":"https://github.com/go-git/go-git"},{"name":"github.com/go-git/go-billy/v5","old_version":"5.7.0","new_version":"5.9.0"},{"name":"github.com/go-git/go-git/v5","old_version":"5.16.4","new_version":"5.19.0","repository_url":"https://github.com/go-git/go-git"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 2 updates in the /v2 directory: [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) and [golang.org/x/image](https://github.com/golang/image).\nBumps the go_modules group with 1 update in the /v2/examples/customlayout directory: [golang.org/x/net](https://github.com/golang/net).\nBumps the go_modules group with 1 update in the /v2/internal/staticanalysis/test/standard directory: [golang.org/x/net](https://github.com/golang/net).\nBumps the go_modules group with 2 updates in the /v3 directory: [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) and [golang.org/x/image](https://github.com/golang/image).\nBumps the go_modules group with 1 update in the /v3/examples/android directory: [github.com/go-git/go-git/v5](https://github.com/go-git/go-git).\nBumps the go_modules group with 1 update in the /v3/examples/dev directory: [github.com/go-git/go-git/v5](https://github.com/go-git/go-git).\nBumps the go_modules group with 1 update in the /v3/examples/file-association directory: [github.com/go-git/go-git/v5](https://github.com/go-git/go-git).\nBumps the go_modules group with 1 update in the /v3/examples/gin-example directory: [github.com/go-git/go-git/v5](https://github.com/go-git/go-git).\nBumps the go_modules group with 1 update in the /v3/examples/gin-routing directory: [github.com/go-git/go-git/v5](https://github.com/go-git/go-git).\nBumps the go_modules group with 1 update in the /v3/examples/gin-service directory: [github.com/go-git/go-git/v5](https://github.com/go-git/go-git).\nBumps the go_modules group with 1 update in the /v3/examples/ios directory: [github.com/go-git/go-git/v5](https://github.com/go-git/go-git).\nBumps the go_modules group with 1 update in the /v3/examples/notifications directory: [github.com/go-git/go-git/v5](https://github.com/go-git/go-git).\nBumps the go_modules group with 1 update in the /v3/examples/print directory: [github.com/go-git/go-git/v5](https://github.com/go-git/go-git).\nBumps the go_modules group with 1 update in the /v3/examples/server directory: [github.com/go-git/go-git/v5](https://github.com/go-git/go-git).\nBumps the go_modules group with 1 update in the /v3/tests/window-visibility-test directory: [github.com/go-git/go-git/v5](https://github.com/go-git/go-git).\nBumps the go_modules group with 1 update in the /webview2/scripts directory: [golang.org/x/net](https://github.com/golang/net).\n\nUpdates `github.com/go-git/go-git/v5` from 5.13.2 to 5.19.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-git/releases\"\u003egithub.com/go-git/go-git/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.19.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.18.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2010\"\u003ego-git/go-git#2010\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Bump sha1cd and go-billy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2060\"\u003ego-git/go-git#2060\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Align object encoding with upstream by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2065\"\u003ego-git/go-git#2065\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.18.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eplumbing: transport/http, Add support for followRedirects policy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2004\"\u003ego-git/go-git#2004\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.17.1 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1941\"\u003ego-git/go-git#1941\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edotgit: skip writing pack files that already exist on disk by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1944\"\u003ego-git/go-git#1944\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e:warning: This release fixes a bug (\u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1942\"\u003ego-git/go-git#1942\u003c/a\u003e) that blocked some users from upgrading to \u003ccode\u003ev5.17.1\u003c/code\u003e. Thanks \u003ca href=\"https://github.com/pskrbasu\"\u003e\u003ccode\u003e@​pskrbasu\u003c/code\u003e\u003c/a\u003e for reporting it. :bow:\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.1...v5.17.2\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.1...v5.17.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/cloudflare/circl to v1.6.3 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1930\"\u003ego-git/go-git#1930\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/index, Improve v4 entry name validation by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1935\"\u003ego-git/go-git#1935\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/idxfile, Fix version and fanout checks by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1937\"\u003ego-git/go-git#1937\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.16.5 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1839\"\u003ego-git/go-git#1839\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: worktree, optimize infiles function for very large repos by \u003ca href=\"https://github.com/k-anshul\"\u003e\u003ccode\u003e@​k-anshul\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1853\"\u003ego-git/go-git#1853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: Add strict checks for supported extensions by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1861\"\u003ego-git/go-git#1861\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebackport, git: Improve Status() speed with new index.ModTime check by \u003ca href=\"https://github.com/cedric-appdirect\"\u003e\u003ccode\u003e@​cedric-appdirect\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1862\"\u003ego-git/go-git#1862\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003estorage: filesystem, Avoid overwriting loose obj files by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1864\"\u003ego-git/go-git#1864\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.16.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module golang.org/x/crypto to v0.45.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1744\"\u003ego-git/go-git#1744\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Bump Go test versions to 1.23-1.25 (v5) by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1746\"\u003ego-git/go-git#1746\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] git: worktree, Don't delete local untracked files when resetting worktree by \u003ca href=\"https://github.com/Ch00k\"\u003e\u003ccode\u003e@​Ch00k\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1800\"\u003ego-git/go-git#1800\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/bc930f4cbe095a3e1d49273655f73fcef7d41a42\"\u003e\u003ccode\u003ebc930f4\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2065\"\u003e#2065\u003c/a\u003e from go-git/commit-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/d315264343cead712aa9eb56475c2ec96f5ecef1\"\u003e\u003ccode\u003ed315264\u003c/code\u003e\u003c/a\u003e plumbing: object, Reset object before decode\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/6e1d34890a4dae8a0df738e531234bd60b7e9b66\"\u003e\u003ccode\u003e6e1d348\u003c/code\u003e\u003c/a\u003e plumbing: object, Align Tree handling with upstream\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/e134ba34cf95ed0167e5b1df36a933d7bde9d02d\"\u003e\u003ccode\u003ee134ba3\u003c/code\u003e\u003c/a\u003e tests: Skip double checks in Git v2.11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/1971422f6b1bec9176061b3293306981cfff981e\"\u003e\u003ccode\u003e1971422\u003c/code\u003e\u003c/a\u003e tests: Add git conformance tests for signing verification\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/a387aa8857a8fbba8e74b7f5485e9e030669ab5d\"\u003e\u003ccode\u003ea387aa8\u003c/code\u003e\u003c/a\u003e plumbing: object, Add ErrMalformedTag\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/f415670d906b5c6169d1fdc64f3f9f1d33eb6f9c\"\u003e\u003ccode\u003ef415670\u003c/code\u003e\u003c/a\u003e plumbing: object, Decode Tag headers via a state machine\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/5b0cd38a62e2336bb5f1a2ad0eb8ac8f9e7b740e\"\u003e\u003ccode\u003e5b0cd38\u003c/code\u003e\u003c/a\u003e plumbing: object, Reject multi-signature commits at Verify\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/fe8ed6223a6079d9fd84d853362a996e7df175fb\"\u003e\u003ccode\u003efe8ed62\u003c/code\u003e\u003c/a\u003e plumbing: object, Align Tag.EncodeWithoutSignature with Commit\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/98e337d5bdc4c0536a40ab7381b2231f7e0b15cd\"\u003e\u003ccode\u003e98e337d\u003c/code\u003e\u003c/a\u003e plumbing: object, Add support for Tag.SignatureSHA256\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-git/compare/v5.13.2...v5.19.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.35.0 to 0.53.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/e1fcd82abba34df74614020343be8eb1fe85f0d9\"\u003e\u003ccode\u003ee1fcd82\u003c/code\u003e\u003c/a\u003e html: properly handle trailing solidus in unquoted attribute value in foreign...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/ebed060e8f30f20235f74808c22125fd86b15edd\"\u003e\u003ccode\u003eebed060\u003c/code\u003e\u003c/a\u003e internal/http3: fix build of tests with GOEXPERIMENT=nosynctest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/1f1fa29e0a46fffe18c43a9da8daa5a0b180dfa9\"\u003e\u003ccode\u003e1f1fa29\u003c/code\u003e\u003c/a\u003e publicsuffix: regenerate table\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/12150816f701c912a32a376754ab28dd3878833a\"\u003e\u003ccode\u003e1215081\u003c/code\u003e\u003c/a\u003e http2: improve error when server sends HTTP/1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/312450e473eae9f9e6173ad895c80bc5ea2f79ad\"\u003e\u003ccode\u003e312450e\u003c/code\u003e\u003c/a\u003e html: ensure \u0026lt;search\u0026gt; tag closes \u0026lt;p\u0026gt; and update tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/09731f9bf919b00b344c763894cd1920b3d96d90\"\u003e\u003ccode\u003e09731f9\u003c/code\u003e\u003c/a\u003e http2: improve handling of lost PING in Server\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/55989e24b972a90ab99308fdc7ea1fb58a96fef1\"\u003e\u003ccode\u003e55989e2\u003c/code\u003e\u003c/a\u003e http2/h2c: use ResponseController for hijacking connections\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/2914f46773171f4fa13e276df1135bafef677801\"\u003e\u003ccode\u003e2914f46\u003c/code\u003e\u003c/a\u003e websocket: re-recommend gorilla/websocket\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/99b3ae0643f9a2f9d820fcbba5f9e4c83b23bd48\"\u003e\u003ccode\u003e99b3ae0\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/85d1d54551b68719346cb9fec24b911da4e452a1\"\u003e\u003ccode\u003e85d1d54\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.35.0...v0.38.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/cloudflare/circl` from 1.3.7 to 1.6.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cloudflare/circl/releases\"\u003egithub.com/cloudflare/circl's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eCIRCL v1.6.3\u003c/h2\u003e\n\u003cp\u003eFix a bug on ecc/p384 scalar multiplication.\u003c/p\u003e\n\u003ch3\u003eWhat's Changed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esign/mldsa: Check opts for nil value  by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/582\"\u003ecloudflare/circl#582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eecc/p384: Point addition must handle point doubling case. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/583\"\u003ecloudflare/circl#583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease CIRCL v1.6.3 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/584\"\u003ecloudflare/circl#584\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNew SLH-DSA, improvements in ML-DSA for arm64.\u003c/li\u003e\n\u003cli\u003eTested compilation on WASM.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize pairing product computation by moving exponentiations to G1. by \u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esign: Adding SLH-DSA signature by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/512\"\u003ecloudflare/circl#512\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate code generators to CIRCL v1.6.1. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/548\"\u003ecloudflare/circl#548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eML-DSA: Add preliminary Wycheproof test vectors by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/552\"\u003ecloudflare/circl#552\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ego fmt by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/554\"\u003ecloudflare/circl#554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egz-compressing test vectors, use of HexBytes and ReadGzip functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/555\"\u003ecloudflare/circl#555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Removes use of elliptic Marshal and Unmarshal functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/556\"\u003ecloudflare/circl#556\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport encoding/decoding ML-DSA private keys (as long as they contain seeds) by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/559\"\u003ecloudflare/circl#559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to golangci-lint v2 by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/560\"\u003ecloudflare/circl#560\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreparation for ARM64 Implementation of poly operations for dilithium package. by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eprepare power2Round for custom implementations in assembly by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/564\"\u003ecloudflare/circl#564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eARM64 implementation for poly.PackLe16 by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/563\"\u003ecloudflare/circl#563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polyMulBy2toD by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/565\"\u003ecloudflare/circl#565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polySub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/566\"\u003ecloudflare/circl#566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: add byteLen method for short groups and RandomScalar uses rand.Int by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/568\"\u003ecloudflare/circl#568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of poly.Add/Sub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/572\"\u003ecloudflare/circl#572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Adding cryptobyte marshaling to scalars by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/569\"\u003ecloudflare/circl#569\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumping up to Go1.25 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/574\"\u003ecloudflare/circl#574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: Including WASM compilation. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/577\"\u003ecloudflare/circl#577\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to using package-declared HPKE errors for shortkem instead of standard library errors by \u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease v1.6.2 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/579\"\u003ecloudflare/circl#579\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixes some point checks on the FourQ curve.\u003c/li\u003e\n\u003cli\u003eHybrid KEM fails on low-order points.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/24ae53c5d6f7fe18203adc125ba3ed76a38703e1\"\u003e\u003ccode\u003e24ae53c\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/581020bd4a836b8ce7bd4e414ba2884c07dbc906\"\u003e\u003ccode\u003e581020b\u003c/code\u003e\u003c/a\u003e Rename method to oddMultiplesProjective.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/12209a4566605692a8402594e367a5aed5148460\"\u003e\u003ccode\u003e12209a4\u003c/code\u003e\u003c/a\u003e Removing unused cmov for jacobian points.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/fcba359f4178645d2c9e50f29ab6966337da4b95\"\u003e\u003ccode\u003efcba359\u003c/code\u003e\u003c/a\u003e ecc/p384: use of complete projective formulas for scalar multiplication.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/5e1bae8d8c2df4e717c2c5c2d5b5d60b629b2ac6\"\u003e\u003ccode\u003e5e1bae8\u003c/code\u003e\u003c/a\u003e ecc/p384: handle point doubling in point addition with Jacobian coordinates.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/341604685ff97e8f7440ae4b4711ba1c118c648c\"\u003e\u003ccode\u003e3416046\u003c/code\u003e\u003c/a\u003e Check opts for nil value.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/a763d47a6dce43d1f4f7b697d1d7810463a526f6\"\u003e\u003ccode\u003ea763d47\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3c70bf9ad53b681fbe5ba6067e454a86549fee8a\"\u003e\u003ccode\u003e3c70bf9\u003c/code\u003e\u003c/a\u003e Bump x/crypto x/sys dependencies.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3f0f15b2bfe67bad81a35e8aec81ae42ca78349d\"\u003e\u003ccode\u003e3f0f15b\u003c/code\u003e\u003c/a\u003e Revert to using package-declared HPKE errors for shortkem instead of standard...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/23491bd573cf29b6f567057a158203a2c9dfa30d\"\u003e\u003ccode\u003e23491bd\u003c/code\u003e\u003c/a\u003e Adding generic Power2Round method.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.3.7...v1.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-billy/v5` from 5.6.2 to 5.9.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-billy/releases\"\u003egithub.com/go-git/go-billy/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.9.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUse path.Clean instead of filepath.Clean in iofs.Open by \u003ca href=\"https://github.com/puerco\"\u003e\u003ccode\u003e@​puerco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/197\"\u003ego-git/go-billy#197\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDeprecate ChrootOS in favour of BoundOS by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/201\"\u003ego-git/go-billy#201\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGeneral Improvements by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/203\"\u003ego-git/go-billy#203\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eosfs: ChrootOS eval baseDir on creation by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/205\"\u003ego-git/go-billy#205\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRun go-git tests as part of integration tests by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/206\"\u003ego-git/go-billy#206\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.8.0...v5.9.0\"\u003ehttps://github.com/go-git/go-billy/compare/v5.8.0...v5.9.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.8.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module golang.org/x/net to v0.45.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/183\"\u003ego-git/go-billy#183\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Ensure Chmod behaviour across BoundOS and ChrootOS by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/187\"\u003ego-git/go-billy#187\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.7.0...v5.8.0\"\u003ehttps://github.com/go-git/go-billy/compare/v5.7.0...v5.8.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.7.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for Chmod on billy.Filesystem by \u003ca href=\"https://github.com/bitfehler\"\u003e\u003ccode\u003e@​bitfehler\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/171\"\u003ego-git/go-billy#171\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Update module golang.org/x/net to v0.38.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/177\"\u003ego-git/go-billy#177\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.6.2...v5.7.0\"\u003ehttps://github.com/go-git/go-billy/compare/v5.6.2...v5.7.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/237e529bb8de61704047f71a5ab1c8e6676492f1\"\u003e\u003ccode\u003e237e529\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-billy/issues/206\"\u003e#206\u003c/a\u003e from pjbgf/v5-improvements\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/04edb394b39979b5cbdec30ded6abdcb9f7786c5\"\u003e\u003ccode\u003e04edb39\u003c/code\u003e\u003c/a\u003e build: Add go-git integration test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/d8efefd33b2e8eeea1030e317bb0d71c5e918270\"\u003e\u003ccode\u003ed8efefd\u003c/code\u003e\u003c/a\u003e osfs: preserve empty ChrootOS base\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/07f2a0bf50e42d438d1d9d263c3c8a22598985b8\"\u003e\u003ccode\u003e07f2a0b\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-billy/issues/205\"\u003e#205\u003c/a\u003e from pjbgf/v5-improvements\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/25207c8468f1af656953cb5db7030aad5df1fe99\"\u003e\u003ccode\u003e25207c8\u003c/code\u003e\u003c/a\u003e build: Bump Go versions in workflows\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/2fda229d9ac0cb5ba654ebc824cfbb90248f82d9\"\u003e\u003ccode\u003e2fda229\u003c/code\u003e\u003c/a\u003e osfs: ChrootOS eval baseDir on creation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/427b27f32f22de11498a682c65cd5060a01ec168\"\u003e\u003ccode\u003e427b27f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-billy/issues/203\"\u003e#203\u003c/a\u003e from pjbgf/v5-improvements\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/7d5a23ece03edc171c1f63c8fa73f84c8428bf17\"\u003e\u003ccode\u003e7d5a23e\u003c/code\u003e\u003c/a\u003e chroot: Reject symlink loops\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/2c2287a233d2ee1e6cdce8956141f6d10505f3bf\"\u003e\u003ccode\u003e2c2287a\u003c/code\u003e\u003c/a\u003e util: avoid following symlinks in RemoveAll fallback\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/cbd88e9a9a2d7fe1065bbe083d8bf0c5fd7290de\"\u003e\u003ccode\u003ecbd88e9\u003c/code\u003e\u003c/a\u003e Fix mount path handling\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.6.2...v5.9.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.33.0 to 0.50.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/03ca0dcccbd37ba6be80adf74dde8d78a4d72817\"\u003e\u003ccode\u003e03ca0dc\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/8400f4a938077a7a7817ab7d163d148e371b320b\"\u003e\u003ccode\u003e8400f4a\u003c/code\u003e\u003c/a\u003e ssh: respect signer's algorithm preference in pickSignatureAlgorithm\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/81c6cb34a8fc386ed53293cd79e3c0c232ee7366\"\u003e\u003ccode\u003e81c6cb3\u003c/code\u003e\u003c/a\u003e ssh: swap cbcMinPaddingSize to cbcMinPacketSize to get encLength\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/982eaa62dfb7273603b97fc1835561450096f3bd\"\u003e\u003ccode\u003e982eaa6\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/159944f128e9b3fdeb5a5b9b102a961904601a87\"\u003e\u003ccode\u003e159944f\u003c/code\u003e\u003c/a\u003e ssh,acme: clean up tautological/impossible nil conditions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/a408498e55412f2ae2a058336f78889fb1ba6115\"\u003e\u003ccode\u003ea408498\u003c/code\u003e\u003c/a\u003e acme: only require prompt if server has terms of service\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/cab0f718548e8a858701b7b48161f44748532f58\"\u003e\u003ccode\u003ecab0f71\u003c/code\u003e\u003c/a\u003e all: upgrade go directive to at least 1.25.0 [generated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/2f26647a795e74e712b3aebc2655bca60b2686f9\"\u003e\u003ccode\u003e2f26647\u003c/code\u003e\u003c/a\u003e x509roots/fallback: update bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e08b06753d6a72f1fe375b6e0fefefb39917c165\"\u003e\u003ccode\u003ee08b067\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/7d0074ccc6f17acbf2ebb10db06d492e08f887dc\"\u003e\u003ccode\u003e7d0074c\u003c/code\u003e\u003c/a\u003e scrypt: fix panic on parameters \u0026lt;= 0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.33.0...v0.50.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/image` from 0.12.0 to 0.38.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/23ae9ed61c1d3343fb95015810f62dcbf444976e\"\u003e\u003ccode\u003e23ae9ed\u003c/code\u003e\u003c/a\u003e tiff: cap buffer growth to prevent OOM from malicious IFD offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/e589e60f29d0bbbf6400e250e024f93cbc4961ee\"\u003e\u003ccode\u003ee589e60\u003c/code\u003e\u003c/a\u003e webp: allow VP8L + VP8X(with alpha)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/fe7d73de74b8a1ad508c93cfcb245d44579163ff\"\u003e\u003ccode\u003efe7d73d\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/e3d762b1d37ed96e757e3bc0bfb44f7455589df3\"\u003e\u003ccode\u003ee3d762b\u003c/code\u003e\u003c/a\u003e all: upgrade go directive to at least 1.25.0 [generated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/833c6ed987962feaa3ec2624d8655421b25e2e0e\"\u003e\u003ccode\u003e833c6ed\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/bc7fe0b43a01586e7ca7c087a2e8a625e8397dcb\"\u003e\u003ccode\u003ebc7fe0b\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/c53c97f4ed88d55fafe963ee6e93cb357663d650\"\u003e\u003ccode\u003ec53c97f\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/9032ff7c7b86f42b9bebdf6133191648224aecc0\"\u003e\u003ccode\u003e9032ff7\u003c/code\u003e\u003c/a\u003e all: eliminate vet diagnostics\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/9c9d08c65c08567c997eccc8bde52fcc9369bea6\"\u003e\u003ccode\u003e9c9d08c\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/742b1b756d98a0c48b1fcf464a0c63fa50e1aa6b\"\u003e\u003ccode\u003e742b1b7\u003c/code\u003e\u003c/a\u003e all: fix some comments\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/image/compare/v0.12.0...v0.38.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.35.0 to 0.38.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/e1fcd82abba34df74614020343be8eb1fe85f0d9\"\u003e\u003ccode\u003ee1fcd82\u003c/code\u003e\u003c/a\u003e html: properly handle trailing solidus in unquoted attribute value in foreign...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/ebed060e8f30f20235f74808c22125fd86b15edd\"\u003e\u003ccode\u003eebed060\u003c/code\u003e\u003c/a\u003e internal/http3: fix build of tests with GOEXPERIMENT=nosynctest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/1f1fa29e0a46fffe18c43a9da8daa5a0b180dfa9\"\u003e\u003ccode\u003e1f1fa29\u003c/code\u003e\u003c/a\u003e publicsuffix: regenerate table\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/12150816f701c912a32a376754ab28dd3878833a\"\u003e\u003ccode\u003e1215081\u003c/code\u003e\u003c/a\u003e http2: improve error when server sends HTTP/1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/312450e473eae9f9e6173ad895c80bc5ea2f79ad\"\u003e\u003ccode\u003e312450e\u003c/code\u003e\u003c/a\u003e html: ensure \u0026lt;search\u0026gt; tag closes \u0026lt;p\u0026gt; and update tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/09731f9bf919b00b344c763894cd1920b3d96d90\"\u003e\u003ccode\u003e09731f9\u003c/code\u003e\u003c/a\u003e http2: improve handling of lost PING in Server\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/55989e24b972a90ab99308fdc7ea1fb58a96fef1\"\u003e\u003ccode\u003e55989e2\u003c/code\u003e\u003c/a\u003e http2/h2c: use ResponseController for hijacking connections\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/2914f46773171f4fa13e276df1135bafef677801\"\u003e\u003ccode\u003e2914f46\u003c/code\u003e\u003c/a\u003e websocket: re-recommend gorilla/websocket\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/99b3ae0643f9a2f9d820fcbba5f9e4c83b23bd48\"\u003e\u003ccode\u003e99b3ae0\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/85d1d54551b68719346cb9fec24b911da4e452a1\"\u003e\u003ccode\u003e85d1d54\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.35.0...v0.38.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.33.0 to 0.36.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/03ca0dcccbd37ba6be80adf74dde8d78a4d72817\"\u003e\u003ccode\u003e03ca0dc\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/8400f4a938077a7a7817ab7d163d148e371b320b\"\u003e\u003ccode\u003e8400f4a\u003c/code\u003e\u003c/a\u003e ssh: respect signer's algorithm preference in pickSignatureAlgorithm\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/81c6cb34a8fc386ed53293cd79e3c0c232ee7366\"\u003e\u003ccode\u003e81c6cb3\u003c/code\u003e\u003c/a\u003e ssh: swap cbcMinPaddingSize to cbcMinPacketSize to get encLength\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/982eaa62dfb7273603b97fc1835561450096f3bd\"\u003e\u003ccode\u003e982eaa6\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/159944f128e9b3fdeb5a5b9b102a961904601a87\"\u003e\u003ccode\u003e159944f\u003c/code\u003e\u003c/a\u003e ssh,acme: clean up tautological/impossible nil conditions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/a408498e55412f2ae2a058336f78889fb1ba6115\"\u003e\u003ccode\u003ea408498\u003c/code\u003e\u003c/a\u003e acme: only require prompt if server has terms of service\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/cab0f718548e8a858701b7b48161f44748532f58\"\u003e\u003ccode\u003ecab0f71\u003c/code\u003e\u003c/a\u003e all: upgrade go directive to at least 1.25.0 [generated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/2f26647a795e74e712b3aebc2655bca60b2686f9\"\u003e\u003ccode\u003e2f26647\u003c/code\u003e\u003c/a\u003e x509roots/fallback: update bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e08b06753d6a72f1fe375b6e0fefefb39917c165\"\u003e\u003ccode\u003ee08b067\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/7d0074ccc6f17acbf2ebb10db06d492e08f887dc\"\u003e\u003ccode\u003e7d0074c\u003c/code\u003e\u003c/a\u003e scrypt: fix panic on parameters \u0026lt;= 0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.33.0...v0.50.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.23.0 to 0.38.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/e1fcd82abba34df74614020343be8eb1fe85f0d9\"\u003e\u003ccode\u003ee1fcd82\u003c/code\u003e\u003c/a\u003e html: properly handle trailing solidus in unquoted attribute value in foreign...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/ebed060e8f30f20235f74808c22125fd86b15edd\"\u003e\u003ccode\u003eebed060\u003c/code\u003e\u003c/a\u003e internal/http3: fix build of tests with GOEXPERIMENT=nosynctest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/1f1fa29e0a46fffe18c43a9da8daa5a0b180dfa9\"\u003e\u003ccode\u003e1f1fa29\u003c/code\u003e\u003c/a\u003e publicsuffix: regenerate table\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/12150816f701c912a32a376754ab28dd3878833a\"\u003e\u003ccode\u003e1215081\u003c/code\u003e\u003c/a\u003e http2: improve error when server sends HTTP/1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/312450e473eae9f9e6173ad895c80bc5ea2f79ad\"\u003e\u003ccode\u003e312450e\u003c/code\u003e\u003c/a\u003e html: ensure \u0026lt;search\u0026gt; tag closes \u0026lt;p\u0026gt; and update tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/09731f9bf919b00b344c763894cd1920b3d96d90\"\u003e\u003ccode\u003e09731f9\u003c/code\u003e\u003c/a\u003e http2: improve handling of lost PING in Server\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/55989e24b972a90ab99308fdc7ea1fb58a96fef1\"\u003e\u003ccode\u003e55989e2\u003c/code\u003e\u003c/a\u003e http2/h2c: use ResponseController for hijacking connections\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/2914f46773171f4fa13e276df1135bafef677801\"\u003e\u003ccode\u003e2914f46\u003c/code\u003e\u003c/a\u003e websocket: re-recommend gorilla/websocket\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/99b3ae0643f9a2f9d820fcbba5f9e4c83b23bd48\"\u003e\u003ccode\u003e99b3ae0\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/85d1d54551b68719346cb9fec24b911da4e452a1\"\u003e\u003ccode\u003e85d1d54\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.35.0...v0.38.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.21.0 to 0.36.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/03ca0dcccbd37ba6be80adf74dde8d78a4d72817\"\u003e\u003ccode\u003e03ca0dc\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/8400f4a938077a7a7817ab7d163d148e371b320b\"\u003e\u003ccode\u003e8400f4a\u003c/code\u003e\u003c/a\u003e ssh: respect signer's algorithm preference in pickSignatureAlgorithm\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/81c6cb34a8fc386ed53293cd79e3c0c232ee7366\"\u003e\u003ccode\u003e81c6cb3\u003c/code\u003e\u003c/a\u003e ssh: swap cbcMinPaddingSize to cbcMinPacketSize to get encLength\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/982eaa62dfb7273603b97fc1835561450096f3bd\"\u003e\u003ccode\u003e982eaa6\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/159944f128e9b3fdeb5a5b9b102a961904601a87\"\u003e\u003ccode\u003e159944f\u003c/code\u003e\u003c/a\u003e ssh,acme: clean up tautological/impossible nil conditions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/a408498e55412f2ae2a058336f78889fb1ba6115\"\u003e\u003ccode\u003ea408498\u003c/code\u003e\u003c/a\u003e acme: only require prompt if server has terms of service\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/cab0f718548e8a858701b7b48161f44748532f58\"\u003e\u003ccode\u003ecab0f71\u003c/code\u003e\u003c/a\u003e all: upgrade go directive to at least 1.25.0 [generated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/2f26647a795e74e712b3aebc2655bca60b2686f9\"\u003e\u003ccode\u003e2f26647\u003c/code\u003e\u003c/a\u003e x509roots/fallback: update bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e08b06753d6a72f1fe375b6e0fefefb39917c165\"\u003e\u003ccode\u003ee08b067\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/7d0074ccc6f17acbf2ebb10db06d492e08f887dc\"\u003e\u003ccode\u003e7d0074c\u003c/code\u003e\u003c/a\u003e scrypt: fix panic on parameters \u0026lt;= 0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.33.0...v0.50.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-git/v5` from 5.16.4 to 5.19.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-git/releases\"\u003egithub.com/go-git/go-git/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.19.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.18.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2010\"\u003ego-git/go-git#2010\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Bump sha1cd and go-billy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2060\"\u003ego-git/go-git#2060\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Align object encoding with upstream by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2065\"\u003ego-git/go-git#2065\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.18.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eplumbing: transport/http, Add support for followRedirects policy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2004\"\u003ego-git/go-git#2004\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.17.1 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1941\"\u003ego-git/go-git#1941\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edotgit: skip writing pack files that already exist on disk by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1944\"\u003ego-git/go-git#1944\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e:warning: This release fixes a bug (\u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1942\"\u003ego-git/go-git#1942\u003c/a\u003e) that blocked some users from upgrading to \u003ccode\u003ev5.17.1\u003c/code\u003e. Thanks \u003ca href=\"https://github.com/pskrbasu\"\u003e\u003ccode\u003e@​pskrbasu\u003c/code\u003e\u003c/a\u003e for reporting it. :bow:\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.1...v5.17.2\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.1...v5.17.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/cloudflare/circl to v1.6.3 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1930\"\u003ego-git/go-git#1930\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/index, Improve v4 entry name validation by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1935\"\u003ego-git/go-git#1935\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/idxfile, Fix version and fanout checks by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1937\"\u003ego-git/go-git#1937\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.16.5 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1839\"\u003ego-git/go-git#1839\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: worktree, optimize infiles function for very large repos by \u003ca href=\"https://github.com/k-anshul\"\u003e\u003ccode\u003e@​k-anshul\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1853\"\u003ego-git/go-git#1853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: Add strict checks for supported extensions by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1861\"\u003ego-git/go-git#1861\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebackport, git: Improve Status() speed with new index.ModTime check by \u003ca href=\"https://github.com/cedric-appdirect\"\u003e\u003ccode\u003e@​cedric-appdirect\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1862\"\u003ego-git/go-git#1862\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003estorage: filesystem, Avoid overwriting loose obj files by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1864\"\u003ego-git/go-git#1864\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.16.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module golang.org/x/crypto to v0.45.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1744\"\u003ego-git/go-git#1744\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Bump Go test versions to 1.23-1.25 (v5) by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1746\"\u003ego-git/go-git#1746\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] git: worktree, Don't delete local untracked files when resetting worktree by \u003ca href=\"https://github.com/Ch00k\"\u003e\u003ccode\u003e@​Ch00k\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1800\"\u003ego-git/go-git#1800\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/bc930f4cbe095a3e1d49273655f73fcef7d41a42\"\u003e\u003ccode\u003ebc930f4\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2065\"\u003e#2065\u003c/a\u003e from go-git/commit-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/d315264343cead712aa9eb56475c2ec96f5ecef1\"\u003e\u003ccode\u003ed315264\u003c/code\u003e\u003c/a\u003e plumbing: object, Reset object before decode\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/6e1d34890a4dae8a0df738e531234bd60b7e9b66\"\u003e\u003ccode\u003e6e1d348\u003c/code\u003e\u003c/a\u003e plumbing: object, Align Tree handling with upstream\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/e134ba34cf95ed0167e5b1df36a933d7bde9d02d\"\u003e\u003ccode\u003ee134ba3\u003c/code\u003e\u003c/a\u003e tests: Skip double checks in Git v2.11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/1971422f6b1bec9176061b3293306981cfff981e\"\u003e\u003ccode\u003e1971422\u003c/code\u003e\u003c/a\u003e tests: Add git conformance tests for signing verification\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/a387aa8857a8fbba8e74b7f5485e9e030669ab5d\"\u003e\u003ccode\u003ea387aa8\u003c/code\u003e\u003c/a\u003e plumbing: object, Add ErrMalformedTag\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/f415670d906b5c6169d1fdc64f3f9f1d33eb6f9c\"\u003e\u003ccode\u003ef415670\u003c/code\u003e\u003c/a\u003e plumbing: object, Decode Tag headers via a state machine\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/5b0cd38a62e2336bb5f1a2ad0eb8ac8f9e7b740e\"\u003e\u003ccode\u003e5b0cd38\u003c/code\u003e\u003c/a\u003e plumbing: object, Reject multi-signature commits at Verify\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/fe8ed6223a6079d9fd84d853362a996e7df175fb\"\u003e\u003ccode\u003efe8ed62\u003c/code\u003e\u003c/a\u003e plumbing: object, Align Tag.EncodeWithoutSignature with Commit\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/98e337d5bdc4c0536a40ab7381b2231f7e0b15cd\"\u003e\u003ccode\u003e98e337d\u003c/code\u003e\u003c/a\u003e plumbing: object, Add support for Tag.SignatureSHA256\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-git/compare/v5.13.2...v5.19.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-billy/v5` from 5.7.0 to 5.9.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-billy/releases\"\u003egithub.com/go-git/go-billy/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.9.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUse path.Clean instead of filepath.Clean in iofs.Open by \u003ca href=\"https://github.com/puerco\"\u003e\u003ccode\u003e@​puerco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/197\"\u003ego-git/go-billy#197\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDeprecate ChrootOS in favour of BoundOS by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/201\"\u003ego-git/go-billy#201\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGeneral Improvements by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/203\"\u003ego-git/go-billy#203\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eosfs: ChrootOS eval baseDir on creation by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/205\"\u003ego-git/go-billy#205\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRun go-git tests as part of integration tests by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/206\"\u003ego-git/go-billy#206\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.8.0...v5.9.0\"\u003ehttps://github.com/go-git/go-billy/compare/v5.8.0...v5.9.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.8.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module golang.org/x/net to v0.45.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/183\"\u003ego-git/go-billy#183\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Ensure Chmod behaviour across BoundOS and ChrootOS by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/187\"\u003ego-git/go-billy#187\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.7.0...v5.8.0\"\u003ehttps://github.com/go-git/go-billy/compare/v5.7.0...v5.8.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.7.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for Chmod on billy.Filesystem by \u003ca href=\"https://github.com/bitfehler\"\u003e\u003ccode\u003e@​bitfehler\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/171\"\u003ego-git/go-billy#171\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Update module golang.org/x/net to v0.38.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/177\"\u003ego-git/go-billy#177\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.6.2...v5.7.0\"\u003ehttps://github.com/go-git/go-billy/compare/v5.6.2...v5.7.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/237e529bb8de61704047f71a5ab1c8e6676492f1\"\u003e\u003ccode\u003e237e529\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-billy/issues/206\"\u003e#206\u003c/a\u003e from pjbgf/v5-improvements\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/04edb394b39979b5cbdec30ded6abdcb9f7786c5\"\u003e\u003ccode\u003e04edb39\u003c/code\u003e\u003c/a\u003e build: Add go-git integration test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/d8efefd33b2e8eeea1030e317bb0d71c5e918270\"\u003e\u003ccode\u003ed8efefd\u003c/code\u003e\u003c/a\u003e osfs: preserve empty ChrootOS base\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/07f2a0bf50e42d438d1d9d263c3c8a22598985b8\"\u003e\u003ccode\u003e07f2a0b\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-billy/issues/205\"\u003e#205\u003c/a\u003e from pjbgf/v5-improvements\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/25207c8468f1af656953cb5db7030aad5df1fe99\"\u003e\u003ccode\u003e25207c8\u003c/code\u003e\u003c/a\u003e build: Bump Go versions in workflows\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/2fda229d9ac0cb5ba654ebc824cfbb90248f82d9\"\u003e\u003ccode\u003e2fda229\u003c/code\u003e\u003c/a\u003e osfs: ChrootOS eval baseDir on creation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/427b27f32f22de11498a682c65cd5060a01ec168\"\u003e\u003ccode\u003e427b27f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-billy/issues/203\"\u003e#203\u003c/a\u003e from pjbgf/v5-improvements\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/7d5a23ece03edc171c1f63c8fa73f84c8428bf17\"\u003e\u003ccode\u003e7d5a23e\u003c/code\u003e\u003c/a\u003e chroot: Reject symlink loops\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/2c2287a233d2ee1e6cdce8956141f6d10505f3bf\"\u003e\u003ccode\u003e2c2287a\u003c/code\u003e\u003c/a\u003e util: avoid following symlinks in RemoveAll fallback\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/cbd88e9a9a2d7fe1065bbe083d8bf0c5fd7290de\"\u003e\u003ccode\u003ecbd88e9\u003c/code\u003e\u003c/a\u003e Fix mount path handling\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.6.2...v5.9.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/image` from 0.35.0 to 0.38.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/23ae9ed61c1d3343fb95015810f62dcbf444976e\"\u003e\u003ccode\u003e23ae9ed\u003c/code\u003e\u003c/a\u003e tiff: cap buffer growth to prevent OOM from malicious IFD offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/e589e60f29d0bbbf6400e250e024f93cbc4961ee\"\u003e\u003ccode\u003ee589e60\u003c/code\u003e\u003c/a\u003e webp: allow VP8L + VP8X(with alpha)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/fe7d73de74b8a1ad508c93cfcb245d44579163ff\"\u003e\u003ccode\u003efe7d73d\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/e3d762b1d37ed96e757e3bc0bfb44f7455589df3\"\u003e\u003ccode\u003ee3d762b\u003c/code\u003e\u003c/a\u003e all: upgrade go directive to at least 1.25.0 [generated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/833c6ed987962feaa3ec2624d8655421b25e2e0e\"\u003e\u003ccode\u003e833c6ed\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/bc7fe0b43a01586e7ca7c087a2e8a625e8397dcb\"\u003e\u003ccode\u003ebc7fe0b\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/c53c97f4ed88d55fafe963ee6e93cb357663d650\"\u003e\u003ccode\u003ec53c97f\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/9032ff7c7b86f42b9bebdf6133191648224aecc0\"\u003e\u003ccode\u003e9032ff7\u003c/code\u003e\u003c/a\u003e all: eliminate vet diagnostics\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/9c9d08c65c08567c997eccc8bde52fcc9369bea6\"\u003e\u003ccode\u003e9c9d08c\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/742b1b756d98a0c48b1fcf464a0c63fa50e1aa6b\"\u003e\u003ccode\u003e742b1b7\u003c/code\u003e\u003c/a\u003e all: fix some comments\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/image/compare/v0.12.0...v0.38.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-git/v5` from 5.16.4 to 5.19.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-git/releases\"\u003egithub.com/go-git/go-git/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.19.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.18.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2010\"\u003ego-git/go-git#2010\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Bump sha1cd and go-billy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2060\"\u003ego-git/go-git#2060\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Align object encoding with upstream by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2065\"\u003ego-git/go-git#2065\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.18.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eplumbing: transport/http, Add support for followRedirects policy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2004\"\u003ego-git/go-git#2004\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.17.1 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1941\"\u003ego-git/go-git#1941\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edotgit: skip writing pack files that already exist on disk by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1944\"\u003ego-git/go-git#1944\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e:warning: This release fixes a bug (\u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1942\"\u003ego-git/go-git#1942\u003c/a\u003e) that blocked some users from upgrading to \u003ccode\u003ev5.17.1\u003c/code\u003e. Thanks \u003ca href=\"https://github.com/pskrbasu\"\u003e\u003ccode\u003e@​pskrbasu\u003c/code\u003e\u003c/a\u003e for reporting it. :bow:\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.1...v5.17.2\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.1...v5.17.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/cloudflare/circl to v1.6.3 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1930\"\u003ego-git/go-git#1930\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/index, Improve v4 entry name validation by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1935\"\u003ego-git/go-git#1935\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/idxfile, Fix version and fanout checks by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1937\"\u003ego-git/go-git#1937\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.16.5 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1839\"\u003ego-git/go-git#1839\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: worktree, optimize infiles function for very large repos by \u003ca href=\"https://github.com/k-anshul\"\u003e\u003ccode\u003e@​k-anshul\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1853\"\u003ego-git/go-git#1853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: Add strict checks for supported extensions by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1861\"\u003ego-git/go-git#1861\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebackport, git: Improve Status() speed with new index.ModTime check by \u003ca href=\"https://github.com/cedric-appdirect\"\u003e\u003ccode\u003e@​cedric-appdirect\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1862\"\u003ego-git/go-git#1862\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003estorage: filesystem, Avoid overwriting loose obj files by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1864\"\u003ego-git/go-git#1864\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.16.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module golang.org/x/crypto to v0.45.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1744\"\u003ego-git/go-git#1744\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Bump Go test versions to 1.23-1.25 (v5) by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1746\"\u003ego-git/go-git#1746\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] git: worktree, Don't delete local untracked files when resetting worktree by \u003ca href=\"https://github.com/Ch00k\"\u003e\u003ccode\u003e@​Ch00k\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1800\"\u003ego-git/go-git#1800\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/bc930f4cbe095a3e1d49273655f73fcef7d41a42\"\u003e\u003ccode\u003ebc930f4\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2065\"\u003e#2065\u003c/a\u003e from go-git/commit-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/d315264343cead712aa9eb56475c2ec96f5ecef1\"\u003e\u003ccode\u003ed315264\u003c/code\u003e\u003c/a\u003e plumbing: object, Reset object before decode\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/6e1d34890a4dae8a0df738e531234bd60b7e9b66\"\u003e\u003ccode\u003e6e1d348\u003c/code\u003e\u003c/a\u003e plumbing: object, Align Tree handling with upstream\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/e134ba34cf95ed0167e5b1df36a933d7bde9d02d\"\u003e\u003ccode\u003ee134ba3\u003c/code\u003e\u003c/a\u003e tests: Skip double checks in Git v2.11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/1971422f6b1bec9176061b3293306981cfff981e\"\u003e\u003ccode\u003e1971422\u003c/code\u003e\u003c/a\u003e tests: Add git conformance tests for signing verification\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/a387aa8857a8fbba8e74b7f5485e9e030669ab5d\"\u003e\u003ccode\u003ea387aa8\u003c/code\u003e\u003c/a\u003e plumbing: object, Add ErrMalformedTag\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/f415670d906b5c6169d1fdc64f3f9f1d33eb6f9c\"\u003e\u003ccode\u003ef415670\u003c/code\u003e\u003c/a\u003e plumbing: object, Decode Tag headers via a state machine\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/5b0cd38a62e2336bb5f1a2ad0eb8ac8f9e7b740e\"\u003e\u003ccode\u003e5b0cd38\u003c/code\u003e\u003c/a\u003e plumbing: object, Reject multi-signature commits at Verify\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/fe8ed6223a6079d9fd84d853362a996e7df175fb\"\u003e\u003ccode\u003efe8ed62\u003c/code\u003e\u003c/a\u003e plumbing: object, Align Tag.EncodeWithoutSignature with Commit\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/98e337d5bdc4c0536a40ab7381b2231f7e0b15cd\"\u003e\u003ccode\u003e98e337d\u003c/code\u003e\u003c/a\u003e plumbing: object, Add support for Tag.SignatureSHA256\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-git/compare/v5.13.2...v5.19.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-billy/v5` from 5.7.0 to 5.9.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-billy/releases\"\u003egithub.com/go-git/go-billy/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.9.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUse path.Clean instead of filepath.Clean in iofs.Open by \u003ca href=\"https://github.com/puerco\"\u003e\u003ccode\u003e@​puerco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/197\"\u003ego-git/go-billy#197\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDeprecate ChrootOS in favour of BoundOS by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/201\"\u003ego-git/go-billy#201\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGeneral Improvements by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/203\"\u003ego-git/go-billy#203\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eosfs: ChrootOS eval baseDir on creation by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/205\"\u003ego-git/go-billy#205\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRun go-git tests as part of integration tests by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/206\"\u003ego-git/go-billy#206\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.8.0...v5.9.0\"\u003ehttps://github.com/go-git/go-billy/compare/v5.8.0...v5.9.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.8.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module golang.org/x/net to v0.45.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/183\"\u003ego-git/go-billy#183\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Ensure Chmod behaviour across BoundOS and ChrootOS by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/187\"\u003ego-git/go-billy#187\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.7.0...v5.8.0\"\u003ehttps://github.com/go-git/go-billy/compare/v5.7.0...v5.8.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.7.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for Chmod on billy.Filesystem by \u003ca href=\"https://github.com/bitfehler\"\u003e\u003ccode\u003e@​bitfehler\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/171\"\u003ego-git/go-billy#171\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Update module golang.org/x/net to v0.38.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/177\"\u003ego-git/go-billy#177\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.6.2...v5.7.0\"\u003ehttps://github.com/go-git/go-billy/compare/v5.6.2...v5.7.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/237e529bb8de61704047f71a5ab1c8e6676492f1\"\u003e\u003ccode\u003e237e529\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-billy/issues/206\"\u003e#206\u003c/a\u003e from pjbgf/v5-improvements\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/04edb394b39979b5cbdec30ded6abdcb9f7786c5\"\u003e\u003ccode\u003e04edb39\u003c/code\u003e\u003c/a\u003e build: Add go-git integration test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/d8efefd33b2e8eeea1030e317bb0d71c5e918270\"\u003e\u003ccode\u003ed8efefd\u003c/code\u003e\u003c/a\u003e osfs: preserve empty ChrootOS base\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/07f2a0bf50e42d438d1d9d263c3c8a22598985b8\"\u003e\u003ccode\u003e07f2a0b\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-billy/issues/205\"\u003e#205\u003c/a\u003e from pjbgf/v5-improvements\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/25207c8468f1af656953cb5db7030aad5df1fe99\"\u003e\u003ccode\u003e25207c8\u003c/code\u003e\u003c/a\u003e build: Bump Go versions in workflows\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/2fda229d9ac0cb5ba654ebc824cfbb90248f82d9\"\u003e\u003ccode\u003e2fda229\u003c/code\u003e\u003c/a\u003e osfs: ChrootOS eval baseDir on creation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/427b27f32f22de11498a682c65cd5060a01ec168\"\u003e\u003ccode\u003e427b27f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-billy/issues/203\"\u003e#203\u003c/a\u003e from pjbgf/v5-improvements\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/7d5a23ece03edc171c1f63c8fa73f84c8428bf17\"\u003e\u003ccode\u003e7d5a23e\u003c/code\u003e\u003c/a\u003e chroot: Reject symlink loops\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/2c2287a233d2ee1e6cdce8956141f6d10505f3bf\"\u003e\u003ccode\u003e2c2287a\u003c/code\u003e\u003c/a\u003e util: avoid following symlinks in RemoveAll fallback\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/cbd88e9a9a2d7fe1065bbe083d8bf0c5fd7290de\"\u003e\u003ccode\u003ecbd88e9\u003c/code\u003e\u003c/a\u003e Fix mount path handling\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.6.2...v5.9.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-git/v5` from 5.16.4 to 5.19.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-git/releases\"\u003egithub.com/go-git/go-git/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2...\n\n_Description has been truncated_","html_url":"https://github.com/wailsapp/wails/pull/5432","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/wailsapp%2Fwails/issues/5432","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/5432/packages"},{"uuid":"4439249688","node_id":"PR_kwDOOQ8lIc7bL5Ju","number":11,"state":"closed","title":"chore(deps): bump the go_modules group across 1 directory with 13 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-05-14T22:24:50.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-13T15:45:41.000Z","updated_at":"2026-05-14T22:24:52.000Z","time_to_close":110349,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"go_modules","update_count":13,"packages":[{"name":"github.com/anchore/quill","old_version":"0.5.1","new_version":"0.7.1","repository_url":"https://github.com/anchore/quill"},{"name":"github.com/ulikunitz/xz","old_version":"0.5.12","new_version":"0.5.14","repository_url":"https://github.com/ulikunitz/xz"},{"name":"github.com/buger/jsonparser","old_version":"1.1.1","new_version":"1.1.2","repository_url":"https://github.com/buger/jsonparser"},{"name":"github.com/cloudflare/circl","old_version":"1.3.8","new_version":"1.6.3","repository_url":"https://github.com/cloudflare/circl"},{"name":"github.com/docker/cli","old_version":"27.5.0+incompatible","new_version":"29.2.0+incompatible","repository_url":"https://github.com/docker/cli"},{"name":"github.com/go-git/go-billy/v5","old_version":"5.6.1","new_version":"5.9.0","repository_url":"https://github.com/go-git/go-billy"},{"name":"github.com/go-git/go-git/v5","old_version":"5.13.1","new_version":"5.19.0","repository_url":"https://github.com/go-git/go-git"},{"name":"github.com/go-jose/go-jose/v4","old_version":"4.0.5","new_version":"4.1.4","repository_url":"https://github.com/go-jose/go-jose"},{"name":"github.com/opencontainers/runc","old_version":"1.1.14","new_version":"1.2.8","repository_url":"https://github.com/opencontainers/runc"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 9 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/anchore/quill](https://github.com/anchore/quill) | `0.5.1` | `0.7.1` |\n| [github.com/ulikunitz/xz](https://github.com/ulikunitz/xz) | `0.5.12` | `0.5.14` |\n| [github.com/buger/jsonparser](https://github.com/buger/jsonparser) | `1.1.1` | `1.1.2` |\n| [github.com/cloudflare/circl](https://github.com/cloudflare/circl) | `1.3.8` | `1.6.3` |\n| [github.com/docker/cli](https://github.com/docker/cli) | `27.5.0+incompatible` | `29.2.0+incompatible` |\n| [github.com/go-git/go-billy/v5](https://github.com/go-git/go-billy) | `5.6.1` | `5.9.0` |\n| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.13.1` | `5.19.0` |\n| [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) | `4.0.5` | `4.1.4` |\n| [github.com/opencontainers/runc](https://github.com/opencontainers/runc) | `1.1.14` | `1.2.8` |\n\n\nUpdates `github.com/anchore/quill` from 0.5.1 to 0.7.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/anchore/quill/releases\"\u003egithub.com/anchore/quill's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003ev0.7.1\u003c/h1\u003e\n\u003ch3\u003eSecurity Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDo not allow for unbounded reads for user controlled input [\u003ca href=\"https://redirect.github.com/anchore/quill/pull/681\"\u003e#681\u003c/a\u003e \u003ca href=\"https://github.com/wagoodman\"\u003e\u003ccode\u003e@​wagoodman\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eAccount for excessive read limits in macho parsing [\u003ca href=\"https://redirect.github.com/anchore/quill/pull/682\"\u003e#682\u003c/a\u003e \u003ca href=\"https://github.com/wagoodman\"\u003e\u003ccode\u003e@​wagoodman\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eValidate developer log URL requests [\u003ca href=\"https://redirect.github.com/anchore/quill/pull/680\"\u003e#680\u003c/a\u003e \u003ca href=\"https://github.com/wagoodman\"\u003e\u003ccode\u003e@​wagoodman\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/anchore/quill/compare/v0.7.0...v0.7.1\"\u003e(Full Changelog)\u003c/a\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003ch1\u003ev0.7.0\u003c/h1\u003e\n\u003ch3\u003eAdded Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edry run signing and notarization process before running in production [\u003ca href=\"https://redirect.github.com/anchore/quill/issues/617\"\u003e#617\u003c/a\u003e \u003ca href=\"https://redirect.github.com/anchore/quill/pull/618\"\u003e#618\u003c/a\u003e \u003ca href=\"https://github.com/willmurphyscode\"\u003e\u003ccode\u003e@​willmurphyscode\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTeamID is not set during signing [\u003ca href=\"https://redirect.github.com/anchore/quill/issues/147\"\u003e#147\u003c/a\u003e \u003ca href=\"https://redirect.github.com/anchore/quill/pull/669\"\u003e#669\u003c/a\u003e \u003ca href=\"https://github.com/jflowers\"\u003e\u003ccode\u003e@​jflowers\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eAdditional Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTypo in install.sh help text [\u003ca href=\"https://redirect.github.com/anchore/quill/issues/546\"\u003e#546\u003c/a\u003e \u003ca href=\"https://redirect.github.com/anchore/quill/pull/549\"\u003e#549\u003c/a\u003e \u003ca href=\"https://github.com/popey\"\u003e\u003ccode\u003e@​popey\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003emigrate to latest tool ci patterns [\u003ca href=\"https://redirect.github.com/anchore/quill/pull/670\"\u003e#670\u003c/a\u003e \u003ca href=\"https://github.com/spiffcs\"\u003e\u003ccode\u003e@​spiffcs\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eupdate golang to v1.26 [\u003ca href=\"https://redirect.github.com/anchore/quill/pull/668\"\u003e#668\u003c/a\u003e \u003ca href=\"https://github.com/wagoodman\"\u003e\u003ccode\u003e@​wagoodman\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003edoc: Add llms.txt for the 🤖 🕷️ [\u003ca href=\"https://redirect.github.com/anchore/quill/pull/592\"\u003e#592\u003c/a\u003e \u003ca href=\"https://github.com/popey\"\u003e\u003ccode\u003e@​popey\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate dependencies [\u003ca href=\"https://redirect.github.com/anchore/quill/pull/627\"\u003e#627\u003c/a\u003e \u003ca href=\"https://github.com/wagoodman\"\u003e\u003ccode\u003e@​wagoodman\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eAdd periodic workflow to update certs [\u003ca href=\"https://redirect.github.com/anchore/quill/pull/608\"\u003e#608\u003c/a\u003e \u003ca href=\"https://github.com/wagoodman\"\u003e\u003ccode\u003e@​wagoodman\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003elint gh actions with zizmor [\u003ca href=\"https://redirect.github.com/anchore/quill/pull/581\"\u003e#581\u003c/a\u003e \u003ca href=\"https://github.com/willmurphyscode\"\u003e\u003ccode\u003e@​willmurphyscode\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eupdate to go 1.24.x [\u003ca href=\"https://redirect.github.com/anchore/quill/pull/543\"\u003e#543\u003c/a\u003e \u003ca href=\"https://github.com/westonsteimel\"\u003e\u003ccode\u003e@​westonsteimel\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eupdate runners to ubuntu-24.04 [\u003ca href=\"https://redirect.github.com/anchore/quill/pull/541\"\u003e#541\u003c/a\u003e \u003ca href=\"https://github.com/kzantow\"\u003e\u003ccode\u003e@​kzantow\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/anchore/quill/compare/v0.5.1...v0.7.0\"\u003e(Full Changelog)\u003c/a\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/quill/commit/9cdb0823ea1d2c45dcc11557f8c5cd7291c75d29\"\u003e\u003ccode\u003e9cdb082\u003c/code\u003e\u003c/a\u003e do not allow for unbounded reads for user controlled input (\u003ca href=\"https://redirect.github.com/anchore/quill/issues/681\"\u003e#681\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/quill/commit/80cf3fe082678af0ec4f9f8dd93f39189d2dc1fe\"\u003e\u003ccode\u003e80cf3fe\u003c/code\u003e\u003c/a\u003e account for excessive read limits in macho parsing code (\u003ca href=\"https://redirect.github.com/anchore/quill/issues/682\"\u003e#682\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/quill/commit/e41d66a517c2dc20ad8e9fbccffbdc6ba5ef0020\"\u003e\u003ccode\u003ee41d66a\u003c/code\u003e\u003c/a\u003e validate developer log URL requests (\u003ca href=\"https://redirect.github.com/anchore/quill/issues/680\"\u003e#680\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/quill/commit/899202c7eace3de7b3f4f7461bdfd1c4c38701db\"\u003e\u003ccode\u003e899202c\u003c/code\u003e\u003c/a\u003e update cred var values for p12 in release (\u003ca href=\"https://redirect.github.com/anchore/quill/issues/679\"\u003e#679\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/quill/commit/c73a37bd3b655633c1bd5466c2b2f65b2ae4032c\"\u003e\u003ccode\u003ec73a37b\u003c/code\u003e\u003c/a\u003e remove goreleaser config for release step + update tool refs (\u003ca href=\"https://redirect.github.com/anchore/quill/issues/678\"\u003e#678\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/quill/commit/95e119c6cb513a69f6b45d3e86a9fbcb2c77b669\"\u003e\u003ccode\u003e95e119c\u003c/code\u003e\u003c/a\u003e persist credentials for git (\u003ca href=\"https://redirect.github.com/anchore/quill/issues/677\"\u003e#677\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/quill/commit/02e765ab563811d7a3f0ede8df36977da92e8779\"\u003e\u003ccode\u003e02e765a\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/aws/aws-sdk-go-v2/config (\u003ca href=\"https://redirect.github.com/anchore/quill/issues/663\"\u003e#663\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/quill/commit/530bb7f3ddf667d262891b79fb15c0147d81cf11\"\u003e\u003ccode\u003e530bb7f\u003c/code\u003e\u003c/a\u003e add test notarize command (\u003ca href=\"https://redirect.github.com/anchore/quill/issues/618\"\u003e#618\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/quill/commit/3e8269c31055b1878a34c1954347254a42b37452\"\u003e\u003ccode\u003e3e8269c\u003c/code\u003e\u003c/a\u003e Set team ID during signing (\u003ca href=\"https://redirect.github.com/anchore/quill/issues/675\"\u003e#675\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/quill/commit/12b3e8eb4c06d7582da9725fad3bc7c268872752\"\u003e\u003ccode\u003e12b3e8e\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/blacktop/go-macho from 1.1.259 to 1.1.263 (\u003ca href=\"https://redirect.github.com/anchore/quill/issues/661\"\u003e#661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/anchore/quill/compare/v0.5.1...v0.7.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/ulikunitz/xz` from 0.5.12 to 0.5.14\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ulikunitz/xz/commit/7184815834c4777e8fa665946721d5fe114c2c35\"\u003e\u003ccode\u003e7184815\u003c/code\u003e\u003c/a\u003e Preparation of release v0.5.14\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ulikunitz/xz/commit/88ddf1d0d98d688db65de034f48960b2760d2ae2\"\u003e\u003ccode\u003e88ddf1d\u003c/code\u003e\u003c/a\u003e Address Security Issue GHSA-jc7w-c686-c4v9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ulikunitz/xz/commit/c8314b8f21e9c5e25b52da07544cac14db277e89\"\u003e\u003ccode\u003ec8314b8\u003c/code\u003e\u003c/a\u003e Add new package xio with WriteCloserStack\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/ulikunitz/xz/compare/v0.5.12...v0.5.14\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.36.0 to 0.46.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/19acf81bd7bc7b558d18a550e8e023df2c33e742\"\u003e\u003ccode\u003e19acf81\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/3a1c6b4b61966d06b6469ad7bc15839ba76eeb89\"\u003e\u003ccode\u003e3a1c6b4\u003c/code\u003e\u003c/a\u003e x509roots/fallback: update bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f4602e40409257658159002a9af6aedb875949fb\"\u003e\u003ccode\u003ef4602e4\u003c/code\u003e\u003c/a\u003e ssh/agent: fix flaky test by ensuring a writeable home directory\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/4e0068c0098be10d7025c99ab7c50ce454c1f0f9\"\u003e\u003ccode\u003e4e0068c\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e79546e28b85ea53dd37afe1c4102746ef553b9c\"\u003e\u003ccode\u003ee79546e\u003c/code\u003e\u003c/a\u003e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f91f7a7c31bf90b39c1de895ad116a2bacc88748\"\u003e\u003ccode\u003ef91f7a7\u003c/code\u003e\u003c/a\u003e ssh/agent: prevent panic on malformed constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/2df4153a0311bdfea44376e0eb6ef2faefb0275b\"\u003e\u003ccode\u003e2df4153\u003c/code\u003e\u003c/a\u003e acme/autocert: let automatic renewal work with short lifetime certs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/bcf6a849efcf4702fa5172cb0998b46c3da1e989\"\u003e\u003ccode\u003ebcf6a84\u003c/code\u003e\u003c/a\u003e acme: pass context to request\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b4f2b62076abeee4e43fb59544dac565715fbf1e\"\u003e\u003ccode\u003eb4f2b62\u003c/code\u003e\u003c/a\u003e ssh: fix error message on unsupported cipher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/79ec3a51fcc7fbd2691d56155d578225ccc542e2\"\u003e\u003ccode\u003e79ec3a5\u003c/code\u003e\u003c/a\u003e ssh: allow to bind to a hostname in remote forwarding\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.36.0...v0.46.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream` from 1.6.3 to 1.7.5\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/4599f78694cabb6853addabc6f92cb197fdb5647\"\u003e\u003ccode\u003e4599f78\u003c/code\u003e\u003c/a\u003e Release 2023-08-21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/2a439ce0fdda24816a5ea71c083765af67e93599\"\u003e\u003ccode\u003e2a439ce\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/46f31d76b34aefbc66bbfb08d2ef7e22267d4b66\"\u003e\u003ccode\u003e46f31d7\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/525486a4cfa9b8364ea5346a526dd1f92d3edc76\"\u003e\u003ccode\u003e525486a\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/b4e3176642b69937575f61f752f7d094fb6f4084\"\u003e\u003ccode\u003eb4e3176\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/2189\"\u003e#2189\u003c/a\u003e from aws/feat-presign-polly\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/30fe9b8de4c8538156248ae21b577a3e49170750\"\u003e\u003ccode\u003e30fe9b8\u003c/code\u003e\u003c/a\u003e Modify and Merge polly mod import\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f6c1d4839450e7f99850868570ff0c47850b72ca\"\u003e\u003ccode\u003ef6c1d48\u003c/code\u003e\u003c/a\u003e sync polly presigner from main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/396f97a998c5fab5bc7ee7bd4297c6d0f42b661e\"\u003e\u003ccode\u003e396f97a\u003c/code\u003e\u003c/a\u003e Release 2023-08-18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/08ab45438df135fc66f2eaf80032694ff2486db3\"\u003e\u003ccode\u003e08ab454\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/b50999bacbf780bf55d5c2b051c96e5c4467a5f6\"\u003e\u003ccode\u003eb50999b\u003c/code\u003e\u003c/a\u003e Update SDK's smithy-go dependency to v1.14.2\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/service/odb/v1.6.3...service/m2/v1.7.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/buger/jsonparser` from 1.1.1 to 1.1.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/buger/jsonparser/releases\"\u003egithub.com/buger/jsonparser's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated travis to build for 1.13 to 1.15 by \u003ca href=\"https://github.com/janreggie\"\u003e\u003ccode\u003e@​janreggie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/225\"\u003ebuger/jsonparser#225\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\n\u003cul\u003e\n\u003cli\u003eeliminate 2 allocations in EachKey() by \u003ca href=\"https://github.com/Villenny\"\u003e\u003ccode\u003e@​Villenny\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/223\"\u003ebuger/jsonparser#223\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003efix issue \u003ca href=\"https://redirect.github.com/buger/jsonparser/issues/150\"\u003e#150\u003c/a\u003e (in deleting case) by \u003ca href=\"https://github.com/daria-kay\"\u003e\u003ccode\u003e@​daria-kay\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/226\"\u003ebuger/jsonparser#226\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efixing the oss-fuzz issue by \u003ca href=\"https://github.com/daria-kay\"\u003e\u003ccode\u003e@​daria-kay\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/227\"\u003ebuger/jsonparser#227\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix parseInt overflow check false negative by \u003ca href=\"https://github.com/carsonip\"\u003e\u003ccode\u003e@​carsonip\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/231\"\u003ebuger/jsonparser#231\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdded bespoke error for null cases by \u003ca href=\"https://github.com/jonomacd\"\u003e\u003ccode\u003e@​jonomacd\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/228\"\u003ebuger/jsonparser#228\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFuzzing: Add CIFuzz by \u003ca href=\"https://github.com/AdamKorcz\"\u003e\u003ccode\u003e@​AdamKorcz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/239\"\u003ebuger/jsonparser#239\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdded latest versions of go to tests by \u003ca href=\"https://github.com/moredure\"\u003e\u003ccode\u003e@​moredure\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/244\"\u003ebuger/jsonparser#244\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix EachKey pIdxFlags allocation by \u003ca href=\"https://github.com/unxcepted\"\u003e\u003ccode\u003e@​unxcepted\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/241\"\u003ebuger/jsonparser#241\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: prevent panic on negative slice index in Delete with malformed JSON (GO-2026-4514) by \u003ca href=\"https://github.com/dbarrosop\"\u003e\u003ccode\u003e@​dbarrosop\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/276\"\u003ebuger/jsonparser#276\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/janreggie\"\u003e\u003ccode\u003e@​janreggie\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/225\"\u003ebuger/jsonparser#225\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Villenny\"\u003e\u003ccode\u003e@​Villenny\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/223\"\u003ebuger/jsonparser#223\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/daria-kay\"\u003e\u003ccode\u003e@​daria-kay\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/226\"\u003ebuger/jsonparser#226\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/carsonip\"\u003e\u003ccode\u003e@​carsonip\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/231\"\u003ebuger/jsonparser#231\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jonomacd\"\u003e\u003ccode\u003e@​jonomacd\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/228\"\u003ebuger/jsonparser#228\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moredure\"\u003e\u003ccode\u003e@​moredure\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/244\"\u003ebuger/jsonparser#244\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/unxcepted\"\u003e\u003ccode\u003e@​unxcepted\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/241\"\u003ebuger/jsonparser#241\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dbarrosop\"\u003e\u003ccode\u003e@​dbarrosop\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/276\"\u003ebuger/jsonparser#276\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/buger/jsonparser/compare/v1.1.1...v1.1.2\"\u003ehttps://github.com/buger/jsonparser/compare/v1.1.1...v1.1.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/a69e7e01cd4ad67bdfd3ac2c080b9212af16f4b0\"\u003e\u003ccode\u003ea69e7e0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/buger/jsonparser/issues/276\"\u003e#276\u003c/a\u003e from dbarrosop/master\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/d3eacc0bab779d6cf98221f5268828fff287876e\"\u003e\u003ccode\u003ed3eacc0\u003c/code\u003e\u003c/a\u003e fix: prevent panic on negative slice index in Delete with malformed JSON (GO-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/61b32cfdfa0f5d368ef7c7daef28ce12d538740f\"\u003e\u003ccode\u003e61b32cf\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/buger/jsonparser/issues/241\"\u003e#241\u003c/a\u003e from unxcepted/master\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/2181e8398f18397c9cacbaea9889314bb585e868\"\u003e\u003ccode\u003e2181e83\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/buger/jsonparser/issues/244\"\u003e#244\u003c/a\u003e from ScaleChamp/patch-2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/1510b5194182fc2fb898f28cdbceb42fd7258bfa\"\u003e\u003ccode\u003e1510b51\u003c/code\u003e\u003c/a\u003e Added latest versions of go to tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/6fc2e488ed3cc4f1f1debec3b0c70715bd7be6fd\"\u003e\u003ccode\u003e6fc2e48\u003c/code\u003e\u003c/a\u003e fix: eachkey allocation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/a6f867eb7787e4ec54536b77b5d628ddf5c4f73d\"\u003e\u003ccode\u003ea6f867e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/buger/jsonparser/issues/239\"\u003e#239\u003c/a\u003e from AdamKorcz/cifuzz1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/cbc01fdbbe131706e89eeaaf0cd917760d8d3949\"\u003e\u003ccode\u003ecbc01fd\u003c/code\u003e\u003c/a\u003e Fuzzing: Add CIFuzz\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/dc92d6932a1272b4d8f485f798a88c3a75106256\"\u003e\u003ccode\u003edc92d69\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/buger/jsonparser/issues/228\"\u003e#228\u003c/a\u003e from jonomacd/null-handling\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/2d9d6343e8621ddc18c70749663f74bc584c0de4\"\u003e\u003ccode\u003e2d9d634\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/buger/jsonparser/issues/231\"\u003e#231\u003c/a\u003e from carsonip/fix-parseint-overflow-check\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/buger/jsonparser/compare/v1.1.1...v1.1.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/cloudflare/circl` from 1.3.8 to 1.6.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cloudflare/circl/releases\"\u003egithub.com/cloudflare/circl's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eCIRCL v1.6.3\u003c/h2\u003e\n\u003cp\u003eFix a bug on ecc/p384 scalar multiplication.\u003c/p\u003e\n\u003ch3\u003eWhat's Changed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esign/mldsa: Check opts for nil value  by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/582\"\u003ecloudflare/circl#582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eecc/p384: Point addition must handle point doubling case. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/583\"\u003ecloudflare/circl#583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease CIRCL v1.6.3 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/584\"\u003ecloudflare/circl#584\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNew SLH-DSA, improvements in ML-DSA for arm64.\u003c/li\u003e\n\u003cli\u003eTested compilation on WASM.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize pairing product computation by moving exponentiations to G1. by \u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esign: Adding SLH-DSA signature by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/512\"\u003ecloudflare/circl#512\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate code generators to CIRCL v1.6.1. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/548\"\u003ecloudflare/circl#548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eML-DSA: Add preliminary Wycheproof test vectors by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/552\"\u003ecloudflare/circl#552\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ego fmt by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/554\"\u003ecloudflare/circl#554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egz-compressing test vectors, use of HexBytes and ReadGzip functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/555\"\u003ecloudflare/circl#555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Removes use of elliptic Marshal and Unmarshal functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/556\"\u003ecloudflare/circl#556\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport encoding/decoding ML-DSA private keys (as long as they contain seeds) by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/559\"\u003ecloudflare/circl#559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to golangci-lint v2 by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/560\"\u003ecloudflare/circl#560\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreparation for ARM64 Implementation of poly operations for dilithium package. by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eprepare power2Round for custom implementations in assembly by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/564\"\u003ecloudflare/circl#564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eARM64 implementation for poly.PackLe16 by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/563\"\u003ecloudflare/circl#563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polyMulBy2toD by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/565\"\u003ecloudflare/circl#565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polySub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/566\"\u003ecloudflare/circl#566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: add byteLen method for short groups and RandomScalar uses rand.Int by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/568\"\u003ecloudflare/circl#568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of poly.Add/Sub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/572\"\u003ecloudflare/circl#572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Adding cryptobyte marshaling to scalars by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/569\"\u003ecloudflare/circl#569\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumping up to Go1.25 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/574\"\u003ecloudflare/circl#574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: Including WASM compilation. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/577\"\u003ecloudflare/circl#577\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to using package-declared HPKE errors for shortkem instead of standard library errors by \u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease v1.6.2 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/579\"\u003ecloudflare/circl#579\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixes some point checks on the FourQ curve.\u003c/li\u003e\n\u003cli\u003eHybrid KEM fails on low-order points.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/24ae53c5d6f7fe18203adc125ba3ed76a38703e1\"\u003e\u003ccode\u003e24ae53c\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/581020bd4a836b8ce7bd4e414ba2884c07dbc906\"\u003e\u003ccode\u003e581020b\u003c/code\u003e\u003c/a\u003e Rename method to oddMultiplesProjective.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/12209a4566605692a8402594e367a5aed5148460\"\u003e\u003ccode\u003e12209a4\u003c/code\u003e\u003c/a\u003e Removing unused cmov for jacobian points.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/fcba359f4178645d2c9e50f29ab6966337da4b95\"\u003e\u003ccode\u003efcba359\u003c/code\u003e\u003c/a\u003e ecc/p384: use of complete projective formulas for scalar multiplication.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/5e1bae8d8c2df4e717c2c5c2d5b5d60b629b2ac6\"\u003e\u003ccode\u003e5e1bae8\u003c/code\u003e\u003c/a\u003e ecc/p384: handle point doubling in point addition with Jacobian coordinates.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/341604685ff97e8f7440ae4b4711ba1c118c648c\"\u003e\u003ccode\u003e3416046\u003c/code\u003e\u003c/a\u003e Check opts for nil value.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/a763d47a6dce43d1f4f7b697d1d7810463a526f6\"\u003e\u003ccode\u003ea763d47\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3c70bf9ad53b681fbe5ba6067e454a86549fee8a\"\u003e\u003ccode\u003e3c70bf9\u003c/code\u003e\u003c/a\u003e Bump x/crypto x/sys dependencies.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3f0f15b2bfe67bad81a35e8aec81ae42ca78349d\"\u003e\u003ccode\u003e3f0f15b\u003c/code\u003e\u003c/a\u003e Revert to using package-declared HPKE errors for shortkem instead of standard...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/23491bd573cf29b6f567057a158203a2c9dfa30d\"\u003e\u003ccode\u003e23491bd\u003c/code\u003e\u003c/a\u003e Adding generic Power2Round method.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.3.8...v1.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/docker/cli` from 27.5.0+incompatible to 29.2.0+incompatible\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/0b9d1985dbf919678745f122b12b46f730b97d87\"\u003e\u003ccode\u003e0b9d198\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6764\"\u003e#6764\u003c/a\u003e from vvoland/update-docker\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/9c9ec7358833bb3e5622a166673744fca7fefac4\"\u003e\u003ccode\u003e9c9ec73\u003c/code\u003e\u003c/a\u003e vendor: github.com/moby/moby/client v0.2.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/bab3e81e1d8874a2d4f26afc02225ee537d0b15d\"\u003e\u003ccode\u003ebab3e81\u003c/code\u003e\u003c/a\u003e vendor: github.com/moby/moby/api v1.53.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/2e64fc162ab632a530f7191cc6af65c22356ea0d\"\u003e\u003ccode\u003e2e64fc1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6367\"\u003e#6367\u003c/a\u003e from thaJeztah/template_slicejoin\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/1f2ba2ac9d8c92870f7cce89dfa17d89d3375c19\"\u003e\u003ccode\u003e1f2ba2a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6760\"\u003e#6760\u003c/a\u003e from thaJeztah/container_create_fix_error\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/e34a3422cc32c808d2e8b0e0ef51112d53fa896d\"\u003e\u003ccode\u003ee34a342\u003c/code\u003e\u003c/a\u003e templates: make \u0026quot;join\u0026quot; work with non-string slices and map values\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/a86356d42f918968579e670b51bc85dc45982a33\"\u003e\u003ccode\u003ea86356d\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6763\"\u003e#6763\u003c/a\u003e from thaJeztah/bump_mapstructure\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/771660a17e56116eb32677a6d83c5210e5092194\"\u003e\u003ccode\u003e771660a\u003c/code\u003e\u003c/a\u003e vendor: github.com/go-viper/mapstructure/v2 v2.5.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/9cff36b35a828be8d137bc5de4983b7e3fef1614\"\u003e\u003ccode\u003e9cff36b\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6762\"\u003e#6762\u003c/a\u003e from thaJeztah/bump_x_deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/08ed2bc6e8bc49ad988ecd44633620a48fb10967\"\u003e\u003ccode\u003e08ed2bc\u003c/code\u003e\u003c/a\u003e cli/command/container: make injecting config.json failures a warning\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/docker/cli/compare/v27.5.0...v29.2.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-billy/v5` from 5.6.1 to 5.9.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-billy/releases\"\u003egithub.com/go-git/go-billy/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.9.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUse path.Clean instead of filepath.Clean in iofs.Open by \u003ca href=\"https://github.com/puerco\"\u003e\u003ccode\u003e@​puerco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/197\"\u003ego-git/go-billy#197\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDeprecate ChrootOS in favour of BoundOS by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/201\"\u003ego-git/go-billy#201\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGeneral Improvements by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/203\"\u003ego-git/go-billy#203\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eosfs: ChrootOS eval baseDir on creation by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/205\"\u003ego-git/go-billy#205\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRun go-git tests as part of integration tests by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/206\"\u003ego-git/go-billy#206\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.8.0...v5.9.0\"\u003ehttps://github.com/go-git/go-billy/compare/v5.8.0...v5.9.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.8.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module golang.org/x/net to v0.45.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/183\"\u003ego-git/go-billy#183\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Ensure Chmod behaviour across BoundOS and ChrootOS by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/187\"\u003ego-git/go-billy#187\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.7.0...v5.8.0\"\u003ehttps://github.com/go-git/go-billy/compare/v5.7.0...v5.8.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.7.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for Chmod on billy.Filesystem by \u003ca href=\"https://github.com/bitfehler\"\u003e\u003ccode\u003e@​bitfehler\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/171\"\u003ego-git/go-billy#171\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Update module golang.org/x/net to v0.38.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/177\"\u003ego-git/go-billy#177\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.6.2...v5.7.0\"\u003ehttps://github.com/go-git/go-billy/compare/v5.6.2...v5.7.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.6.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eEnable the \u003ccode\u003eiofs\u003c/code\u003e adapter to also return other interfaces from \u003ccode\u003eio/fs\u003c/code\u003e by \u003ca href=\"https://github.com/JAORMX\"\u003e\u003ccode\u003e@​JAORMX\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/102\"\u003ego-git/go-billy#102\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Bump dependencies by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/103\"\u003ego-git/go-billy#103\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JAORMX\"\u003e\u003ccode\u003e@​JAORMX\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/102\"\u003ego-git/go-billy#102\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.6.1...v5.6.2\"\u003ehttps://github.com/go-git/go-billy/compare/v5.6.1...v5.6.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/237e529bb8de61704047f71a5ab1c8e6676492f1\"\u003e\u003ccode\u003e237e529\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-billy/issues/206\"\u003e#206\u003c/a\u003e from pjbgf/v5-improvements\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/04edb394b39979b5cbdec30ded6abdcb9f7786c5\"\u003e\u003ccode\u003e04edb39\u003c/code\u003e\u003c/a\u003e build: Add go-git integration test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/d8efefd33b2e8eeea1030e317bb0d71c5e918270\"\u003e\u003ccode\u003ed8efefd\u003c/code\u003e\u003c/a\u003e osfs: preserve empty ChrootOS base\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/07f2a0bf50e42d438d1d9d263c3c8a22598985b8\"\u003e\u003ccode\u003e07f2a0b\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-billy/issues/205\"\u003e#205\u003c/a\u003e from pjbgf/v5-improvements\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/25207c8468f1af656953cb5db7030aad5df1fe99\"\u003e\u003ccode\u003e25207c8\u003c/code\u003e\u003c/a\u003e build: Bump Go versions in workflows\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/2fda229d9ac0cb5ba654ebc824cfbb90248f82d9\"\u003e\u003ccode\u003e2fda229\u003c/code\u003e\u003c/a\u003e osfs: ChrootOS eval baseDir on creation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/427b27f32f22de11498a682c65cd5060a01ec168\"\u003e\u003ccode\u003e427b27f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-billy/issues/203\"\u003e#203\u003c/a\u003e from pjbgf/v5-improvements\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/7d5a23ece03edc171c1f63c8fa73f84c8428bf17\"\u003e\u003ccode\u003e7d5a23e\u003c/code\u003e\u003c/a\u003e chroot: Reject symlink loops\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/2c2287a233d2ee1e6cdce8956141f6d10505f3bf\"\u003e\u003ccode\u003e2c2287a\u003c/code\u003e\u003c/a\u003e util: avoid following symlinks in RemoveAll fallback\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/cbd88e9a9a2d7fe1065bbe083d8bf0c5fd7290de\"\u003e\u003ccode\u003ecbd88e9\u003c/code\u003e\u003c/a\u003e Fix mount path handling\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.6.1...v5.9.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-git/v5` from 5.13.1 to 5.19.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-git/releases\"\u003egithub.com/go-git/go-git/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.19.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.18.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2010\"\u003ego-git/go-git#2010\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Bump sha1cd and go-billy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2060\"\u003ego-git/go-git#2060\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Align object encoding with upstream by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2065\"\u003ego-git/go-git#2065\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.18.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eplumbing: transport/http, Add support for followRedirects policy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2004\"\u003ego-git/go-git#2004\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.17.1 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1941\"\u003ego-git/go-git#1941\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edotgit: skip writing pack files that already exist on disk by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1944\"\u003ego-git/go-git#1944\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e:warning: This release fixes a bug (\u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1942\"\u003ego-git/go-git#1942\u003c/a\u003e) that blocked some users from upgrading to \u003ccode\u003ev5.17.1\u003c/code\u003e. Thanks \u003ca href=\"https://github.com/pskrbasu\"\u003e\u003ccode\u003e@​pskrbasu\u003c/code\u003e\u003c/a\u003e for reporting it. :bow:\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.1...v5.17.2\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.1...v5.17.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/cloudflare/circl to v1.6.3 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1930\"\u003ego-git/go-git#1930\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/index, Improve v4 entry name validation by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1935\"\u003ego-git/go-git#1935\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/idxfile, Fix version and fanout checks by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1937\"\u003ego-git/go-git#1937\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.16.5 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1839\"\u003ego-git/go-git#1839\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: worktree, optimize infiles function for very large repos by \u003ca href=\"https://github.com/k-anshul\"\u003e\u003ccode\u003e@​k-anshul\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1853\"\u003ego-git/go-git#1853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: Add strict checks for supported extensions by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1861\"\u003ego-git/go-git#1861\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebackport, git: Improve Status() speed with new index.ModTime check by \u003ca href=\"https://github.com/cedric-appdirect\"\u003e\u003ccode\u003e@​cedric-appdirect\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1862\"\u003ego-git/go-git#1862\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003estorage: filesystem, Avoid overwriting loose obj files by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1864\"\u003ego-git/go-git#1864\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.16.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module golang.org/x/crypto to v0.45.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1744\"\u003ego-git/go-git#1744\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Bump Go test versions to 1.23-1.25 (v5) by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1746\"\u003ego-git/go-git#1746\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] git: worktree, Don't delete local untracked files when resetting worktree by \u003ca href=\"https://github.com/Ch00k\"\u003e\u003ccode\u003e@​Ch00k\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1800\"\u003ego-git/go-git#1800\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/bc930f4cbe095a3e1d49273655f73fcef7d41a42\"\u003e\u003ccode\u003ebc930f4\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2065\"\u003e#2065\u003c/a\u003e from go-git/commit-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/d315264343cead712aa9eb56475c2ec96f5ecef1\"\u003e\u003ccode\u003ed315264\u003c/code\u003e\u003c/a\u003e plumbing: object, Reset object before decode\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/6e1d34890a4dae8a0df738e531234bd60b7e9b66\"\u003e\u003ccode\u003e6e1d348\u003c/code\u003e\u003c/a\u003e plumbing: object, Align Tree handling with upstream\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/e134ba34cf95ed0167e5b1df36a933d7bde9d02d\"\u003e\u003ccode\u003ee134ba3\u003c/code\u003e\u003c/a\u003e tests: Skip double checks in Git v2.11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/1971422f6b1bec9176061b3293306981cfff981e\"\u003e\u003ccode\u003e1971422\u003c/code\u003e\u003c/a\u003e tests: Add git conformance tests for signing verification\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/a387aa8857a8fbba8e74b7f5485e9e030669ab5d\"\u003e\u003ccode\u003ea387aa8\u003c/code\u003e\u003c/a\u003e plumbing: object, Add ErrMalformedTag\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/f415670d906b5c6169d1fdc64f3f9f1d33eb6f9c\"\u003e\u003ccode\u003ef415670\u003c/code\u003e\u003c/a\u003e plumbing: object, Decode Tag headers via a state machine\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/5b0cd38a62e2336bb5f1a2ad0eb8ac8f9e7b740e\"\u003e\u003ccode\u003e5b0cd38\u003c/code\u003e\u003c/a\u003e plumbing: object, Reject multi-signature commits at Verify\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/fe8ed6223a6079d9fd84d853362a996e7df175fb\"\u003e\u003ccode\u003efe8ed62\u003c/code\u003e\u003c/a\u003e plumbing: object, Align Tag.EncodeWithoutSignature with Commit\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/98e337d5bdc4c0536a40ab7381b2231f7e0b15cd\"\u003e\u003ccode\u003e98e337d\u003c/code\u003e\u003c/a\u003e plumbing: object, Add support for Tag.SignatureSHA256\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-git/compare/v5.13.1...v5.19.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-jose/go-jose/v4` from 4.0.5 to 4.1.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-jose/go-jose/releases\"\u003egithub.com/go-jose/go-jose/v4's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.1.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003eFixes Panic in JWE decryption. See \u003ca href=\"https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\"\u003ehttps://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4\"\u003ehttps://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.1.3\u003c/h2\u003e\n\u003cp\u003eThis release drops Go 1.23 support as that Go release is no longer supported. With that, we can drop \u003ccode\u003ex/crypto\u003c/code\u003e and no longer have any external dependencies in go-jose outside of the standard library!\u003c/p\u003e\n\u003cp\u003eThis release fixes a bug where a critical b64 header was ignored if in an unprotected header. It is now rejected instead of ignored.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemove Go 1.23 support by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/205\"\u003ego-jose/go-jose#205\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReject JWS with an unprotected critical b64 header by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/210\"\u003ego-jose/go-jose#210\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.2...v4.1.3\"\u003ehttps://github.com/go-jose/go-jose/compare/v4.1.2...v4.1.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.1.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003ego-jose v4.1.2 improves some documentation, errors, and removes the only 3rd-party dependency.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate go-jose documentation by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/198\"\u003ego-jose/go-jose#198\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove dependency on testify by \u003ca href=\"https://github.com/wardviaene\"\u003e\u003ccode\u003e@​wardviaene\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/197\"\u003ego-jose/go-jose#197\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove error message for invalid private keys by \u003ca href=\"https://github.com/ProjectMutilation\"\u003e\u003ccode\u003e@​ProjectMutilation\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/195\"\u003ego-jose/go-jose#195\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eJWK unsupported error when unmarshalling by \u003ca href=\"https://github.com/fprojetto\"\u003e\u003ccode\u003e@​fprojetto\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/191\"\u003ego-jose/go-jose#191\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd JSONWebKey type to makeJWERecipient by \u003ca href=\"https://github.com/alvarolivie\"\u003e\u003ccode\u003e@​alvarolivie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/200\"\u003ego-jose/go-jose#200\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etestutils/assert: remove True, Nil, NotNil by \u003ca href=\"https://github.com/jsha\"\u003e\u003ccode\u003e@​jsha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/202\"\u003ego-jose/go-jose#202\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wardviaene\"\u003e\u003ccode\u003e@​wardviaene\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/197\"\u003ego-jose/go-jose#197\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fprojetto\"\u003e\u003ccode\u003e@​fprojetto\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/191\"\u003ego-jose/go-jose#191\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alvarolivie\"\u003e\u003ccode\u003e@​alvarolivie\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/200\"\u003ego-jose/go-jose#200\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.1...v4.1.2\"\u003ehttps://github.com/go-jose/go-jose/compare/v4.1.1...v4.1.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.1.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDrop go-cmp dependency by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/186\"\u003ego-jose/go-jose#186\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ejws: improve performance and allocations for ParseSignedCompact by \u003ca href=\"https://github.com/drakkan\"\u003e\u003ccode\u003e@​drakkan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/188\"\u003ego-jose/go-jose#188\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd missing quote to unknown curve message \u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/170\"\u003e#170\u003c/a\u003e by \u003ca href=\"https://github.com/sudhanvaghebbale\"\u003e\u003ccode\u003e@​sudhanvaghebbale\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/189\"\u003ego-jose/go-jose#189\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix incorrect validation by \u003ca href=\"https://github.com/ProjectMutilation\"\u003e\u003ccode\u003e@​ProjectMutilation\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/192\"\u003ego-jose/go-jose#192\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRestore Go 1.23 compatibility by \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/193\"\u003ego-jose/go-jose#193\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/drakkan\"\u003e\u003ccode\u003e@​drakkan\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/188\"\u003ego-jose/go-jose#188\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sudhanvaghebbale\"\u003e\u003ccode\u003e@​sudhanvaghebbale\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/189\"\u003ego-jose/go-jose#189\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ProjectMutilation\"\u003e\u003ccode\u003e@​ProjectMutilation\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/192\"\u003ego-jose/go-jose#192\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/193\"\u003ego-jose/go-jose#193\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/0e59876635f3dbf46d7b5e97b52bb75a3f96e7d9\"\u003e\u003ccode\u003e0e59876\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/ddffdbcec8bdadea8e02a20bdf19239878228215\"\u003e\u003ccode\u003eddffdbc\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 5 to 6 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/213\"\u003e#213\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/5348b9a4ba4559d2266b5af89fb5353cd1a5360a\"\u003e\u003ccode\u003e5348b9a\u003c/code\u003e\u003c/a\u003e Reject JWS with an unprotected critical b64 header (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/210\"\u003e#210\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/9153a5e4549c95e97a84e41e6375dc90eac54241\"\u003e\u003ccode\u003e9153a5e\u003c/code\u003e\u003c/a\u003e Bump actions/setup-python from 5 to 6 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/208\"\u003e#208\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/2126e17f8791f6a234e63b2e4e8cb9fac8605c3a\"\u003e\u003ccode\u003e2126e17\u003c/code\u003e\u003c/a\u003e Bump actions/setup-go from 5 to 6 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/209\"\u003e#209\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/9860c65054c4821d1e7c22200422b04181f58ebc\"\u003e\u003ccode\u003e9860c65\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 4 to 5 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/206\"\u003e#206\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/14239fdb15b88e1c42e41621ef24f1112cf31b5a\"\u003e\u003ccode\u003e14239fd\u003c/code\u003e\u003c/a\u003e Remove Go 1.23 support (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/205\"\u003e#205\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/a16e15813482ca5e9a679b7f5bb42ddfae616d43\"\u003e\u003ccode\u003ea16e158\u003c/code\u003e\u003c/a\u003e Update CI to run on Go 1.24 and 1.25 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/204\"\u003e#204\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/a1565a41aa008ae6545e0f50a636d254de5b4596\"\u003e\u003ccode\u003ea1565a4\u003c/code\u003e\u003c/a\u003e testutils/assert: remove True, Nil, NotNil (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/202\"\u003e#202\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/3a80e136a96e747bf44049414eadc02828df4d33\"\u003e\u003ccode\u003e3a80e13\u003c/code\u003e\u003c/a\u003e jwe: accept non-pointer JSONWebKey in Recipient (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/200\"\u003e#200\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.0.5...v4.1.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-viper/mapstructure/v2` from 2.0.0 to 2.4.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-viper/mapstructure/releases\"\u003egithub.com/go-viper/mapstructure/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.4.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003erefactor: replace interface{} with any by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/115\"\u003ego-viper/mapstructure#115\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.0 to 3.29.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/114\"\u003ego-viper/mapstructure#114\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGeneric tests by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/118\"\u003ego-viper/mapstructure#118\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix godoc reference link in README.md by \u003ca href=\"https://github.com/peczenyj\"\u003e\u003ccode\u003e@​peczenyj\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/107\"\u003ego-viper/mapstructure#107\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add StringToTimeLocationHookFunc to convert strings to *time.Location by \u003ca href=\"https://github.com/ErfanMomeniii\"\u003e\u003ccode\u003e@​ErfanMomeniii\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/117\"\u003ego-viper/mapstructure#117\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add back previous StringToSlice as a weak function by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/119\"\u003ego-viper/mapstructure#119\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ErfanMomeniii\"\u003e\u003ccode\u003e@​ErfanMomeniii\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/117\"\u003ego-viper/mapstructure#117\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-viper/mapstructure/compare/v2.3.0...v2.4.0\"\u003ehttps://github.com/go-viper/mapstructure/compare/v2.3.0...v2.4.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.3.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 4.1.7 to 4.2.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/46\"\u003ego-viper/mapstructure#46\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golangci/golangci-lint-action from 6.1.0 to 6.1.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/47\"\u003ego-viper/mapstructure#47\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[enhancement] Add check for \u003ccode\u003ereflect.Value\u003c/code\u003e in \u003ccode\u003eComposeDecodeHookFunc\u003c/code\u003e by \u003ca href=\"https://github.com/mahadzaryab1\"\u003e\u003ccode\u003e@​mahadzaryab1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/52\"\u003ego-viper/mapstructure#52\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.0.2 to 5.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/51\"\u003ego-viper/mapstructure#51\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 4.2.0 to 4.2.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/50\"\u003ego-viper/mapstructure#50\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.1.0 to 5.2.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/55\"\u003ego-viper/mapstructure#55\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.2.0 to 5.3.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/58\"\u003ego-viper/mapstructure#58\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: add Go 1.24 to the test matrix by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/74\"\u003ego-viper/mapstructure#74\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golangci/golangci-lint-action from 6.1.1 to 6.5.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/72\"\u003ego-viper/mapstructure#72\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golangci/golangci-lint-action from 6.5.0 to 6.5.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/76\"\u003ego-viper/mapstructure#76\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.3.0 to 5.4.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/78\"\u003ego-viper/mapstructure#78\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add decode hook for netip.Prefix by \u003ca href=\"https://github.com/tklauser\"\u003e\u003ccode\u003e@​tklauser\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/85\"\u003ego-viper/mapstructure#85\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdates by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/86\"\u003ego-viper/mapstructure#86\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 2.13.4 to 3.28.15 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/87\"\u003ego-viper/mapstructure#87\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.4.0 to 5.5.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/93\"\u003ego-viper/mapstructure#93\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.15 to 3.28.17 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/92\"\u003ego-viper/mapstructure#92\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.17 to 3.28.19 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/97\"\u003ego-viper/mapstructure#97\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/96\"\u003ego-viper/mapstructure#96\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate README.md by \u003ca href=\"https://github.com/peczenyj\"\u003e\u003ccode\u003e@​peczenyj\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/90\"\u003ego-viper/mapstructure#90\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd omitzero tag. by \u003ca href=\"https://github.com/Crystalix007\"\u003e\u003ccode\u003e@​Crystalix007\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/98\"\u003ego-viper/mapstructure#98\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse error structs instead of duplicated strings by \u003ca href=\"https://github.com/m1k1o\"\u003e\u003ccode\u003e@​m1k1o\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/102\"\u003ego-viper/mapstructure#102\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.19 to 3.29.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/101\"\u003ego-viper/mapstructure#101\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add common error interface by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/105\"\u003ego-viper/mapstructure#105\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eupdate linter by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/106\"\u003ego-viper/mapstructure#106\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFeature allow unset pointer by \u003ca href=\"https://github.com/rostislaved\"\u003e\u003ccode\u003e@​rostislaved\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/80\"\u003ego-viper/mapstructure#80\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tklauser\"\u003e\u003ccode\u003e@​tklauser\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/85\"\u003ego-viper/mapstructure#85\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/peczenyj\"\u003e\u003ccode\u003e@​peczenyj\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/90\"\u003ego-viper/mapstructure#90\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Crystalix007\"\u003e\u003ccode\u003e@​Crystalix007\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/98\"\u003ego-viper/mapstructure#98\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rostislaved\"\u003e\u003ccode\u003e@​rostislaved\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/80\"\u003ego-viper/mapstructure#80\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-viper/mapstructure/compare/v2.2.1...v2.3.0\"\u003ehttps://github.com/go-viper/mapstructure/compare/v2.2.1...v2.3.0\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/b9794a5f0e73d425210d6614ed833067029155f5\"\u003e\u003ccode\u003eb9794a5\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/119\"\u003e#119\u003c/a\u003e from go-viper/string-to-weak-slice\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/17cdcb0741054e2a33938adf6bd1f2a5c0aa8f30\"\u003e\u003ccode\u003e17cdcb0\u003c/code\u003e\u003c/a\u003e feat: add back previous StringToSlice as a weak function\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/3caca3614c3ab2c5b5d359c44fdcd72058887b19\"\u003e\u003ccode\u003e3caca36\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/117\"\u003e#117\u003c/a\u003e from ErfanMomeniii/main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/9a861bc115f2b54ed4e494662f29c172d9ef046a\"\u003e\u003ccode\u003e9a861bc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/107\"\u003e#107\u003c/a\u003e from peczenyj/patch-2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/86ed5b59da0615fb8c3a413f401cdf0231f1234c\"\u003e\u003ccode\u003e86ed5b5\u003c/code\u003e\u003c/a\u003e refactor: update\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/ace5b4e8b3dec99468ffa9498e42fb09d177b0a6\"\u003e\u003ccode\u003eace5b4e\u003c/code\u003e\u003c/a\u003e chore: add interface any linter\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/1a4f1aef38bfa8549762aaf42c7c18a5d268e76e\"\u003e\u003ccode\u003e1a4f1ae\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/118\"\u003e#118\u003c/a\u003e from go-viper/generic-tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/a2689090ed4348033c36724d866faf1f911a9f63\"\u003e\u003ccode\u003ea268909\u003c/code\u003e\u003c/a\u003e fix: lint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/17f1fd44eb7606b109c9bb017c0a1c6d3e93b5cd\"\u003e\u003ccode\u003e17f1fd4\u003c/code\u003e\u003c/a\u003e test: add more comments\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/b48c8566836bf291bfee2b217d51fc36e8e61f6f\"\u003e\u003ccode\u003eb48c856\u003c/code\u003e\u003c/a\u003e test: expand tests\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-viper/mapstructure/compare/v2.0.0...v2.4.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/opencontainers/runc` from 1.1.14 to 1.2.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/opencontainers/runc/releases\"\u003egithub.com/opencontainers/runc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003erunc v1.2.8 -- \u0026quot;鳥籠の中に囚われた屈辱を\u0026quot;\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!NOTE]\nSome vendors were given a pre-release version of this release.\nThis public release includes two extra patches to fix regressions\ndiscovered very late during the embargo period and were thus not\nincluded in the pre-release versions. Please update to this version.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cp\u003eThis release contains fixes for three high-severity security\nvulnerabilities in runc (\u003ca href=\"https://github.com/opencontainers/runc/security/advisories/GHSA-9493-h29p-rfm2\"\u003eCVE-2025-31133\u003c/a\u003e, \u003ca href=\"https://github.com/opencontainers/runc/security/advisories/GHSA-qw9x-cqr3-wc7r\"\u003eCVE-2025-52565\u003c/a\u003e, and\n\u003ca href=\"https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm\"\u003eCVE-2025-52881\u003c/a\u003e). All three vulnerabilities ultimately allow (through\ndifferent methods) for full container breakouts by bypassing runc's\nrestrictions for writing to arbitrary \u003ccode\u003e/proc\u003c/code\u003e files.\u003c/p\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/opencontainers/runc/security/advisories/GHSA-9493-h29p-rfm2\"\u003eCVE-2025-31133\u003c/a\u003e exploits an issue with how masked paths are implemented in\nrunc. When masking files, runc will bind-mount the container's \u003ccode\u003e/dev/null\u003c/code\u003e\ninode on top of the file. However, if an attacker can replace \u003ccode\u003e/dev/null\u003c/code\u003e\nwith a symlink to some other procfs file, runc will instead bind-mount the\nsymlink target read-write. This issue affected all known runc versions.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/opencontainers/runc/security/advisories/GHSA-qw9x-cqr3-wc7r\"\u003eCVE-2025-52565\u003c/a\u003e is very similar in concept and application to\n\u003ca href=\"https://github.com/opencontainers/runc/security/advisories/GHSA-9493-h29p-rfm2\"\u003eCVE-2025-31133\u003c/a\u003e, except that it exploits a flaw in \u003ccode\u003e/dev/console\u003c/code\u003e\nbind-mounts. When creating the \u003ccode\u003e/dev/console\u003c/code\u003e bind-mount (to \u003ccode\u003e/dev/pts/$n\u003c/code\u003e),\nif an attacker replaces \u003ccode\u003e/dev/pts/$n\u003c/code\u003e with a symlink then runc will\nbind-mount the symlink target over \u003ccode\u003e/dev/console\u003c/code\u003e. This issue affected all\nversions of runc \u0026gt;= 1.0.0-rc3.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https:...\n\n_Description has been truncated_","html_url":"https://github.com/coutureb/goreleaser/pull/11","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/coutureb%2Fgoreleaser/issues/11","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/11/packages"},{"uuid":"4422142250","node_id":"PR_kwDOLYGZcc7aUL3N","number":884,"state":"open","title":"chore(deps): bump the go_modules group across 1 directory with 3 updates","user":"dependabot[bot]","labels":["dependencies","go","Stale"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-11T15:37:49.000Z","updated_at":"2026-06-12T03:49:55.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"go_modules","update_count":3,"packages":[{"name":"github.com/cloudflare/circl","old_version":"1.6.2","new_version":"1.6.3","repository_url":"https://github.com/cloudflare/circl"},{"name":"github.com/go-git/go-git/v5","old_version":"5.16.5","new_version":"5.19.0","repository_url":"https://github.com/go-git/go-git"},{"name":"github.com/open-policy-agent/opa","old_version":"0.69.0","new_version":"1.4.0","repository_url":"https://github.com/open-policy-agent/opa"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 3 updates in the /cliv2 directory: [github.com/cloudflare/circl](https://github.com/cloudflare/circl), [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) and [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa).\n\nUpdates `github.com/cloudflare/circl` from 1.6.2 to 1.6.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cloudflare/circl/releases\"\u003egithub.com/cloudflare/circl's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eCIRCL v1.6.3\u003c/h2\u003e\n\u003cp\u003eFix a bug on ecc/p384 scalar multiplication.\u003c/p\u003e\n\u003ch3\u003eWhat's Changed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esign/mldsa: Check opts for nil value  by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/582\"\u003ecloudflare/circl#582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eecc/p384: Point addition must handle point doubling case. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/583\"\u003ecloudflare/circl#583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease CIRCL v1.6.3 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/584\"\u003ecloudflare/circl#584\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/24ae53c5d6f7fe18203adc125ba3ed76a38703e1\"\u003e\u003ccode\u003e24ae53c\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/581020bd4a836b8ce7bd4e414ba2884c07dbc906\"\u003e\u003ccode\u003e581020b\u003c/code\u003e\u003c/a\u003e Rename method to oddMultiplesProjective.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/12209a4566605692a8402594e367a5aed5148460\"\u003e\u003ccode\u003e12209a4\u003c/code\u003e\u003c/a\u003e Removing unused cmov for jacobian points.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/fcba359f4178645d2c9e50f29ab6966337da4b95\"\u003e\u003ccode\u003efcba359\u003c/code\u003e\u003c/a\u003e ecc/p384: use of complete projective formulas for scalar multiplication.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/5e1bae8d8c2df4e717c2c5c2d5b5d60b629b2ac6\"\u003e\u003ccode\u003e5e1bae8\u003c/code\u003e\u003c/a\u003e ecc/p384: handle point doubling in point addition with Jacobian coordinates.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/341604685ff97e8f7440ae4b4711ba1c118c648c\"\u003e\u003ccode\u003e3416046\u003c/code\u003e\u003c/a\u003e Check opts for nil value.\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-git/v5` from 5.16.5 to 5.19.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-git/releases\"\u003egithub.com/go-git/go-git/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.19.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.18.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2010\"\u003ego-git/go-git#2010\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Bump sha1cd and go-billy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2060\"\u003ego-git/go-git#2060\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Align object encoding with upstream by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2065\"\u003ego-git/go-git#2065\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.18.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eplumbing: transport/http, Add support for followRedirects policy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2004\"\u003ego-git/go-git#2004\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.17.1 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1941\"\u003ego-git/go-git#1941\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edotgit: skip writing pack files that already exist on disk by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1944\"\u003ego-git/go-git#1944\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e:warning: This release fixes a bug (\u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1942\"\u003ego-git/go-git#1942\u003c/a\u003e) that blocked some users from upgrading to \u003ccode\u003ev5.17.1\u003c/code\u003e. Thanks \u003ca href=\"https://github.com/pskrbasu\"\u003e\u003ccode\u003e@​pskrbasu\u003c/code\u003e\u003c/a\u003e for reporting it. :bow:\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.1...v5.17.2\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.1...v5.17.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/cloudflare/circl to v1.6.3 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1930\"\u003ego-git/go-git#1930\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/index, Improve v4 entry name validation by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1935\"\u003ego-git/go-git#1935\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/idxfile, Fix version and fanout checks by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1937\"\u003ego-git/go-git#1937\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.16.5 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1839\"\u003ego-git/go-git#1839\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: worktree, optimize infiles function for very large repos by \u003ca href=\"https://github.com/k-anshul\"\u003e\u003ccode\u003e@​k-anshul\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1853\"\u003ego-git/go-git#1853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: Add strict checks for supported extensions by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1861\"\u003ego-git/go-git#1861\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebackport, git: Improve Status() speed with new index.ModTime check by \u003ca href=\"https://github.com/cedric-appdirect\"\u003e\u003ccode\u003e@​cedric-appdirect\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1862\"\u003ego-git/go-git#1862\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003estorage: filesystem, Avoid overwriting loose obj files by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1864\"\u003ego-git/go-git#1864\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/bc930f4cbe095a3e1d49273655f73fcef7d41a42\"\u003e\u003ccode\u003ebc930f4\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2065\"\u003e#2065\u003c/a\u003e from go-git/commit-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/d315264343cead712aa9eb56475c2ec96f5ecef1\"\u003e\u003ccode\u003ed315264\u003c/code\u003e\u003c/a\u003e plumbing: object, Reset object before decode\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/6e1d34890a4dae8a0df738e531234bd60b7e9b66\"\u003e\u003ccode\u003e6e1d348\u003c/code\u003e\u003c/a\u003e plumbing: object, Align Tree handling with upstream\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/e134ba34cf95ed0167e5b1df36a933d7bde9d02d\"\u003e\u003ccode\u003ee134ba3\u003c/code\u003e\u003c/a\u003e tests: Skip double checks in Git v2.11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/1971422f6b1bec9176061b3293306981cfff981e\"\u003e\u003ccode\u003e1971422\u003c/code\u003e\u003c/a\u003e tests: Add git conformance tests for signing verification\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/a387aa8857a8fbba8e74b7f5485e9e030669ab5d\"\u003e\u003ccode\u003ea387aa8\u003c/code\u003e\u003c/a\u003e plumbing: object, Add ErrMalformedTag\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/f415670d906b5c6169d1fdc64f3f9f1d33eb6f9c\"\u003e\u003ccode\u003ef415670\u003c/code\u003e\u003c/a\u003e plumbing: object, Decode Tag headers via a state machine\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/5b0cd38a62e2336bb5f1a2ad0eb8ac8f9e7b740e\"\u003e\u003ccode\u003e5b0cd38\u003c/code\u003e\u003c/a\u003e plumbing: object, Reject multi-signature commits at Verify\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/fe8ed6223a6079d9fd84d853362a996e7df175fb\"\u003e\u003ccode\u003efe8ed62\u003c/code\u003e\u003c/a\u003e plumbing: object, Align Tag.EncodeWithoutSignature with Commit\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/98e337d5bdc4c0536a40ab7381b2231f7e0b15cd\"\u003e\u003ccode\u003e98e337d\u003c/code\u003e\u003c/a\u003e plumbing: object, Add support for Tag.SignatureSHA256\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.5...v5.19.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/open-policy-agent/opa` from 0.69.0 to 1.4.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-policy-agent/opa/releases\"\u003egithub.com/open-policy-agent/opa's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.4.0\u003c/h2\u003e\n\u003cp\u003eThis release contains a security fix addressing CVE-2025-46569.\nIt also includes a mix of new features, bugfixes, and dependency updates.\u003c/p\u003e\n\u003ch4\u003eSecurity Fix: CVE-2025-46569 - OPA server Data API HTTP path injection of Rego (\u003ca href=\"https://github.com/open-policy-agent/opa/security/advisories/GHSA-6m8w-jc87-6cr7\"\u003eGHSA-6m8w-jc87-6cr7\u003c/a\u003e)\u003c/h4\u003e\n\u003cp\u003eA vulnerability in the OPA server's \u003ca href=\"https://www.openpolicyagent.org/docs/latest/rest-api/#data-api\"\u003eData API\u003c/a\u003e allows an attacker to craft the HTTP path in a way that injects Rego code into the query that is evaluated.\u003cbr /\u003e\nThe evaluation result cannot be made to return any other data than what is generated by the requested path, but this path can be misdirected, and the injected Rego code can be crafted to make the query succeed or fail; opening up for oracle attacks or, given the right circumstances, erroneous policy decision results.\nFurthermore, the injected code can be crafted to be computationally expensive, resulting in a Denial Of Service (DoS) attack.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eUsers are only impacted if all of the following apply:\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eOPA is deployed as a standalone server (rather than being used as a Go library)\u003c/li\u003e\n\u003cli\u003eThe OPA server is exposed outside of the local host in an untrusted environment.\u003c/li\u003e\n\u003cli\u003eThe configured \u003ca href=\"https://www.openpolicyagent.org/docs/latest/security/#authentication-and-authorization\"\u003eauthorization policy\u003c/a\u003e does not do exact matching of the input.path attribute when deciding if the request should be allowed.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eor, if all of the following apply:\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eOPA is deployed as a standalone server.\u003c/li\u003e\n\u003cli\u003eThe service connecting to OPA allows 3rd parties to insert unsanitised text into the path of the HTTP request to OPA’s Data API.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eNote: With \u003cstrong\u003eno\u003c/strong\u003e \u003ca href=\"https://www.openpolicyagent.org/docs/latest/security/#authentication-and-authorization\"\u003eAuthorization Policy\u003c/a\u003e configured for restricting API access (the default configuration), the RESTful \u003ca href=\"https://www.openpolicyagent.org/docs/latest/rest-api/#data-api\"\u003eData API\u003c/a\u003e provides access for managing Rego policies; and the RESTful \u003ca href=\"https://www.openpolicyagent.org/docs/latest/rest-api/#query-api\"\u003eQuery API\u003c/a\u003e facilitates advanced queries.\nFull access to these APIs provides both simpler, and broader access than what the security issue describes here can facilitate.\nAs such, OPA servers exposed to a network are \u003cstrong\u003enot\u003c/strong\u003e considered affected by the attack described here if they are knowingly not restricting access through an Authorization Policy.\u003c/p\u003e\n\u003cp\u003eThis issue affects all versions of OPA prior to 1.4.0.\u003c/p\u003e\n\u003cp\u003eSee the \u003ca href=\"https://github.com/open-policy-agent/opa/security/advisories/GHSA-6m8w-jc87-6cr7\"\u003eSecurity Advisory\u003c/a\u003e for more details.\u003c/p\u003e\n\u003cp\u003eReported by \u003ca href=\"https://github.com/GamrayW\"\u003e\u003ccode\u003e@​GamrayW\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/HyouKash\"\u003e\u003ccode\u003e@​HyouKash\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/AdrienIT\"\u003e\u003ccode\u003e@​AdrienIT\u003c/code\u003e\u003c/a\u003e, authored by \u003ca href=\"https://github.com/johanfylling\"\u003e\u003ccode\u003e@​johanfylling\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eRuntime, Tooling, SDK\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003east: Adding \u003ccode\u003erego_v1\u003c/code\u003e feature to \u003ccode\u003e--v0-compatible\u003c/code\u003e capabilities (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/pull/7474\"\u003e#7474\u003c/a\u003e) authored by \u003ca href=\"https://github.com/johanfylling\"\u003e\u003ccode\u003e@​johanfylling\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eexecutable: Add version and icon to OPA windows executable (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/3171\"\u003e#3171\u003c/a\u003e) authored by \u003ca href=\"https://github.com/sspaink\"\u003e\u003ccode\u003e@​sspaink\u003c/code\u003e\u003c/a\u003e reported by \u003ca href=\"https://github.com/christophwille\"\u003e\u003ccode\u003e@​christophwille\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eformat: Don't panic on format due to unexpected comments (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/6330\"\u003e#6330\u003c/a\u003e) authored by \u003ca href=\"https://github.com/sspaink\"\u003e\u003ccode\u003e@​sspaink\u003c/code\u003e\u003c/a\u003e reported by \u003ca href=\"https://github.com/sirpi\"\u003e\u003ccode\u003e@​sirpi\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eformat: Avoid modifying strings when formatting (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/6220\"\u003e#6220\u003c/a\u003e) authored by \u003ca href=\"https://github.com/sspaink\"\u003e\u003ccode\u003e@​sspaink\u003c/code\u003e\u003c/a\u003e reported by \u003ca href=\"https://github.com/zregvart\"\u003e\u003ccode\u003e@​zregvart\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eplugins/status: FIFO buffer channel for status events to prevent slow status API blocking (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/pull/7522\"\u003e#7522\u003c/a\u003e) authored by \u003ca href=\"https://github.com/sspaink\"\u003e\u003ccode\u003e@​sspaink\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eTopdown and Rego\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003egqlparser: Add JSON annotation in \u003ccode\u003einternal/gqlparser/ast\u003c/code\u003e to Position fields (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/pull/7509\"\u003e#7509\u003c/a\u003e) authored by \u003ca href=\"https://github.com/robmyersrobmyers\"\u003e\u003ccode\u003e@​robmyersrobmyers\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egraphql: Cache GraphQL schema parse results (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/pull/7457\"\u003e#7457\u003c/a\u003e) authored by \u003ca href=\"https://github.com/robmyersrobmyers\"\u003e\u003ccode\u003e@​robmyersrobmyers\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etopdown: Handling default functions in Partial Eval (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/7220\"\u003e#7220\u003c/a\u003e) authored by \u003ca href=\"https://github.com/johanfylling\"\u003e\u003ccode\u003e@​johanfylling\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etopdown: Fix wall clock time init for \u003ccode\u003ePartialRun()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/7490\"\u003e#7490\u003c/a\u003e) authored by \u003ca href=\"https://github.com/srenatus\"\u003e\u003ccode\u003e@​srenatus\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etopdown: Zero alloc lower/upper unless changed (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/pull/7472\"\u003e#7472\u003c/a\u003e) authored by \u003ca href=\"https://github.com/anderseknert\"\u003e\u003ccode\u003e@​anderseknert\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDocs, Website, Ecosystem\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadopters: Cloudsmith adds support for OPA (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/pull/7498\"\u003e#7498\u003c/a\u003e) authored by \u003ca href=\"https://github.com/ndouglas-cloudsmith\"\u003e\u003ccode\u003e@​ndouglas-cloudsmith\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md\"\u003egithub.com/open-policy-agent/opa's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.4.0\u003c/h2\u003e\n\u003cp\u003eThis release contains a security fix addressing CVE-2025-46569.\nIt also includes a mix of new features, bugfixes, and dependency updates.\u003c/p\u003e\n\u003ch4\u003eSecurity Fix: CVE-2025-46569 - OPA server Data API HTTP path injection of Rego (\u003ca href=\"https://github.com/open-policy-agent/opa/security/advisories/GHSA-6m8w-jc87-6cr7\"\u003eGHSA-6m8w-jc87-6cr7\u003c/a\u003e)\u003c/h4\u003e\n\u003cp\u003eA vulnerability in the OPA server's \u003ca href=\"https://www.openpolicyagent.org/docs/latest/rest-api/#data-api\"\u003eData API\u003c/a\u003e allows an attacker to craft the HTTP path in a way that injects Rego code into the query that is evaluated.\u003cbr /\u003e\nThe evaluation result cannot be made to return any other data than what is generated by the requested path, but this path can be misdirected, and the injected Rego code can be crafted to make the query succeed or fail; opening up for oracle attacks or, given the right circumstances, erroneous policy decision results.\nFurthermore, the injected code can be crafted to be computationally expensive, resulting in a Denial Of Service (DoS) attack.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eUsers are only impacted if all of the following apply:\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eOPA is deployed as a standalone server (rather than being used as a Go library)\u003c/li\u003e\n\u003cli\u003eThe OPA server is exposed outside of the local host in an untrusted environment.\u003c/li\u003e\n\u003cli\u003eThe configured \u003ca href=\"https://www.openpolicyagent.org/docs/latest/security/#authentication-and-authorization\"\u003eauthorization policy\u003c/a\u003e does not do exact matching of the input.path attribute when deciding if the request should be allowed.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eor, if all of the following apply:\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eOPA is deployed as a standalone server.\u003c/li\u003e\n\u003cli\u003eThe service connecting to OPA allows 3rd parties to insert unsanitised text into the path of the HTTP request to OPA’s Data API.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eNote: With \u003cstrong\u003eno\u003c/strong\u003e \u003ca href=\"https://www.openpolicyagent.org/docs/latest/security/#authentication-and-authorization\"\u003eAuthorization Policy\u003c/a\u003e configured for restricting API access (the default configuration), the RESTful \u003ca href=\"https://www.openpolicyagent.org/docs/latest/rest-api/#data-api\"\u003eData API\u003c/a\u003e provides access for managing Rego policies; and the RESTful \u003ca href=\"https://www.openpolicyagent.org/docs/latest/rest-api/#query-api\"\u003eQuery API\u003c/a\u003e facilitates advanced queries.\nFull access to these APIs provides both simpler, and broader access than what the security issue describes here can facilitate.\nAs such, OPA servers exposed to a network are \u003cstrong\u003enot\u003c/strong\u003e considered affected by the attack described here if they are knowingly not restricting access through an Authorization Policy.\u003c/p\u003e\n\u003cp\u003eThis issue affects all versions of OPA prior to 1.4.0.\u003c/p\u003e\n\u003cp\u003eSee the \u003ca href=\"https://github.com/open-policy-agent/opa/security/advisories/GHSA-6m8w-jc87-6cr7\"\u003eSecurity Advisory\u003c/a\u003e for more details.\u003c/p\u003e\n\u003cp\u003eReported by \u003ca href=\"https://github.com/GamrayW\"\u003e\u003ccode\u003e@​GamrayW\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/HyouKash\"\u003e\u003ccode\u003e@​HyouKash\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/AdrienIT\"\u003e\u003ccode\u003e@​AdrienIT\u003c/code\u003e\u003c/a\u003e, authored by \u003ca href=\"https://github.com/johanfylling\"\u003e\u003ccode\u003e@​johanfylling\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eRuntime, Tooling, SDK\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003east: Adding \u003ccode\u003erego_v1\u003c/code\u003e feature to \u003ccode\u003e--v0-compatible\u003c/code\u003e capabilities (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/pull/7474\"\u003e#7474\u003c/a\u003e) authored by \u003ca href=\"https://github.com/johanfylling\"\u003e\u003ccode\u003e@​johanfylling\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eexecutable: Add version and icon to OPA windows executable (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/3171\"\u003e#3171\u003c/a\u003e) authored by \u003ca href=\"https://github.com/sspaink\"\u003e\u003ccode\u003e@​sspaink\u003c/code\u003e\u003c/a\u003e reported by \u003ca href=\"https://github.com/christophwille\"\u003e\u003ccode\u003e@​christophwille\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eformat: Don't panic on format due to unexpected comments (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/6330\"\u003e#6330\u003c/a\u003e) authored by \u003ca href=\"https://github.com/sspaink\"\u003e\u003ccode\u003e@​sspaink\u003c/code\u003e\u003c/a\u003e reported by \u003ca href=\"https://github.com/sirpi\"\u003e\u003ccode\u003e@​sirpi\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eformat: Avoid modifying strings when formatting (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/6220\"\u003e#6220\u003c/a\u003e) authored by \u003ca href=\"https://github.com/sspaink\"\u003e\u003ccode\u003e@​sspaink\u003c/code\u003e\u003c/a\u003e reported by \u003ca href=\"https://github.com/zregvart\"\u003e\u003ccode\u003e@​zregvart\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eplugins/status: FIFO buffer channel for status events to prevent slow status API blocking (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/pull/7522\"\u003e#7522\u003c/a\u003e) authored by \u003ca href=\"https://github.com/sspaink\"\u003e\u003ccode\u003e@​sspaink\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eTopdown and Rego\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003egqlparser: Add JSON annotation in \u003ccode\u003einternal/gqlparser/ast\u003c/code\u003e to Position fields (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/pull/7509\"\u003e#7509\u003c/a\u003e) authored by \u003ca href=\"https://github.com/robmyersrobmyers\"\u003e\u003ccode\u003e@​robmyersrobmyers\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egraphql: Cache GraphQL schema parse results (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/pull/7457\"\u003e#7457\u003c/a\u003e) authored by \u003ca href=\"https://github.com/robmyersrobmyers\"\u003e\u003ccode\u003e@​robmyersrobmyers\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etopdown: Handling default functions in Partial Eval (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/7220\"\u003e#7220\u003c/a\u003e) authored by \u003ca href=\"https://github.com/johanfylling\"\u003e\u003ccode\u003e@​johanfylling\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etopdown: Fix wall clock time init for \u003ccode\u003ePartialRun()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/7490\"\u003e#7490\u003c/a\u003e) authored by \u003ca href=\"https://github.com/srenatus\"\u003e\u003ccode\u003e@​srenatus\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etopdown: Zero alloc lower/upper unless changed (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/pull/7472\"\u003e#7472\u003c/a\u003e) authored by \u003ca href=\"https://github.com/anderseknert\"\u003e\u003ccode\u003e@​anderseknert\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDocs, Website, Ecosystem\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/8b0720247e65b97fe7715ca15682fee4040df4d1\"\u003e\u003ccode\u003e8b07202\u003c/code\u003e\u003c/a\u003e Prepare v1.4.0 release (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/7541\"\u003e#7541\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/ad2063247a14711882f18c387a511fc8094aa79c\"\u003e\u003ccode\u003ead20632\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/24ff9cfb3ad0a6a5629f0b21458982d325ee03c5\"\u003e\u003ccode\u003e24ff9cf\u003c/code\u003e\u003c/a\u003e fix: return the raw strings when formatting (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/7525\"\u003e#7525\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/254f3bf0b9ee5faf1972ba31bbbe749bba19a000\"\u003e\u003ccode\u003e254f3bf\u003c/code\u003e\u003c/a\u003e fix(status plugin): make sure the latest status is read before manually trigg...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/9b5f6010c0503cd91eed8a56268a02d4895a42b4\"\u003e\u003ccode\u003e9b5f601\u003c/code\u003e\u003c/a\u003e docs: fix post merge badge (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/7532\"\u003e#7532\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/e4902774778da576da2a8f4b2fd50df6cc3da8b5\"\u003e\u003ccode\u003ee490277\u003c/code\u003e\u003c/a\u003e docs: Point path versioned requests to new sites (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/7531\"\u003e#7531\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/d65888c14f4cb2d67929590604415e35ba75f58c\"\u003e\u003ccode\u003ed65888c\u003c/code\u003e\u003c/a\u003e plugins/status: FIFO buffer channel for status events to prevent slow status ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/eb77d10971ec772c3ac4968d4abe3666037d0338\"\u003e\u003ccode\u003eeb77d10\u003c/code\u003e\u003c/a\u003e docs: update edge links to use /docs/edge/ path (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/7529\"\u003e#7529\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/f07d604b4f4b37c29324643cc75b82e3e0070aea\"\u003e\u003ccode\u003ef07d604\u003c/code\u003e\u003c/a\u003e docs: Set versioned docs links to point to archive (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/7528\"\u003e#7528\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/828b8cb1568bc2a3eba7d0b87101a6c0679eee06\"\u003e\u003ccode\u003e828b8cb\u003c/code\u003e\u003c/a\u003e docs: improve request headers documentation in REST APIs (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/7524\"\u003e#7524\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-policy-agent/opa/compare/v0.69.0...v1.4.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/SherfeyInv/clir/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/SherfeyInv/clir/pull/884","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/SherfeyInv%2Fclir/issues/884","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/884/packages"},{"uuid":"4422047799","node_id":"PR_kwDOMTAKjc7aT4Er","number":7,"state":"closed","title":"Bump the go_modules group across 5 directories with 8 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-05-13T21:32:33.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-11T15:24:15.000Z","updated_at":"2026-05-13T21:32:35.000Z","time_to_close":194898,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"go_modules","update_count":8,"packages":[{"name":"github.com/golang/glog","old_version":"1.1.1","new_version":"1.2.4","repository_url":"https://github.com/golang/glog"},{"name":"golang.org/x/net","old_version":"0.23.0","new_version":"0.38.0","repository_url":"https://github.com/golang/net"},{"name":"golang.org/x/oauth2","old_version":"0.7.0","new_version":"0.27.0","repository_url":"https://github.com/golang/oauth2"},{"name":"google.golang.org/grpc","old_version":"1.56.3","new_version":"1.79.3","repository_url":"https://github.com/grpc/grpc-go"},{"name":"github.com/golang/glog","old_version":"1.2.0","new_version":"1.2.4","repository_url":"https://github.com/golang/glog"},{"name":"golang.org/x/oauth2","old_version":"0.0.0-20200107190931-bf48bf16ab8d","new_version":"0.27.0","repository_url":"https://github.com/golang/oauth2"},{"name":"github.com/cloudflare/circl","old_version":"1.3.3","new_version":"1.6.3","repository_url":"https://github.com/cloudflare/circl"},{"name":"golang.org/x/crypto","old_version":"0.30.0","new_version":"0.45.0","repository_url":"https://github.com/golang/crypto"},{"name":"github.com/go-git/go-git/v5","old_version":"5.11.0","new_version":"5.19.0","repository_url":"https://github.com/go-git/go-git"},{"name":"github.com/golang/glog","old_version":"1.1.1","new_version":"1.2.4","repository_url":"https://github.com/golang/glog"},{"name":"github.com/golang/glog","old_version":"1.1.2","new_version":"1.2.4","repository_url":"https://github.com/golang/glog"},{"name":"golang.org/x/net","old_version":"0.15.0","new_version":"0.38.0","repository_url":"https://github.com/golang/net"},{"name":"golang.org/x/oauth2","old_version":"0.12.0","new_version":"0.27.0","repository_url":"https://github.com/golang/oauth2"},{"name":"google.golang.org/grpc","old_version":"1.57.0","new_version":"1.79.3","repository_url":"https://github.com/grpc/grpc-go"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 4 updates in the /.ci/magician directory: [github.com/golang/glog](https://github.com/golang/glog), [golang.org/x/net](https://github.com/golang/net), [golang.org/x/oauth2](https://github.com/golang/oauth2) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 1 update in the /mmv1 directory: [github.com/golang/glog](https://github.com/golang/glog).\nBumps the go_modules group with 4 updates in the /tools/go-changelog directory: [golang.org/x/oauth2](https://github.com/golang/oauth2), [github.com/cloudflare/circl](https://github.com/cloudflare/circl), [golang.org/x/crypto](https://github.com/golang/crypto) and [github.com/go-git/go-git/v5](https://github.com/go-git/go-git).\nBumps the go_modules group with 1 update in the /tools/issue-labeler directory: [github.com/golang/glog](https://github.com/golang/glog).\nBumps the go_modules group with 4 updates in the /tpgtools directory: [github.com/golang/glog](https://github.com/golang/glog), [golang.org/x/net](https://github.com/golang/net), [golang.org/x/oauth2](https://github.com/golang/oauth2) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\n\nUpdates `github.com/golang/glog` from 1.1.1 to 1.2.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/golang/glog/releases\"\u003egithub.com/golang/glog's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.2.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFail if log file already exists by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/74\"\u003egolang/glog#74\u003c/a\u003e:\n\u003cul\u003e\n\u003cli\u003eglog: Don't try to create/rotate a given syncBuffer twice in the same second\u003c/li\u003e\n\u003cli\u003eglog: introduce createInDir function as in internal version\u003c/li\u003e\n\u003cli\u003eglog: have createInDir fail if the file already exists\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.2.3...v1.2.4\"\u003ehttps://github.com/golang/glog/compare/v1.2.3...v1.2.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.2.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eglog: check that stderr is valid before using it by default by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/72\"\u003egolang/glog#72\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eglog: fix typo by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/73\"\u003egolang/glog#73\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.2.2...v1.2.3\"\u003ehttps://github.com/golang/glog/compare/v1.2.2...v1.2.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.2.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eglog: avoid calling user.Current() on windows by \u003ca href=\"https://github.com/bentekkie\"\u003e\u003ccode\u003e@​bentekkie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/69\"\u003egolang/glog#69\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.2.1...v1.2.2\"\u003ehttps://github.com/golang/glog/compare/v1.2.1...v1.2.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.2.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eglog: don't hold mutex when sync'ing by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/68\"\u003egolang/glog#68\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.2.0...v1.2.1\"\u003ehttps://github.com/golang/glog/compare/v1.2.0...v1.2.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.2.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eglog: add context variants and logsink tests by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/66\"\u003egolang/glog#66\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.1.2...v1.2.0\"\u003ehttps://github.com/golang/glog/compare/v1.1.2...v1.2.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.1.2\u003c/h2\u003e\n\u003cp\u003eBugfix release.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eglog: populate symlinks -log_link directory by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/64\"\u003egolang/glog#64\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.1.1...v1.1.2\"\u003ehttps://github.com/golang/glog/compare/v1.1.1...v1.1.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/a0e3c40a0ed0cecc58c84e7684d9ce55a54044ee\"\u003e\u003ccode\u003ea0e3c40\u003c/code\u003e\u003c/a\u003e glog: have createInDir fail if the file already exists\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/7139da234346c23dba05a8c588284c379b9c0bf8\"\u003e\u003ccode\u003e7139da2\u003c/code\u003e\u003c/a\u003e glog: introduce createInDir function as in internal version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/dd58629ba6ced28322bcb149ed86016fb1ec9a5b\"\u003e\u003ccode\u003edd58629\u003c/code\u003e\u003c/a\u003e glog: Don't try to create/rotate a given syncBuffer twice in the same second\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/04dbec0df8d03d5c187beaf5ce8e6c58e9fc82b5\"\u003e\u003ccode\u003e04dbec0\u003c/code\u003e\u003c/a\u003e glog: fix typo (\u003ca href=\"https://redirect.github.com/golang/glog/issues/73\"\u003e#73\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/459cf3b8151dcfd8aa971077774eaf0c804119e4\"\u003e\u003ccode\u003e459cf3b\u003c/code\u003e\u003c/a\u003e glog: check that stderr is valid before using it by default (\u003ca href=\"https://redirect.github.com/golang/glog/issues/72\"\u003e#72\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/97303146a4ffecf364d4300e07fca855d0062c43\"\u003e\u003ccode\u003e9730314\u003c/code\u003e\u003c/a\u003e glog: avoid calling user.Current() on windows (\u003ca href=\"https://redirect.github.com/golang/glog/issues/69\"\u003e#69\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/861d094757551d2f65d1003f0ec93bc92b254a5a\"\u003e\u003ccode\u003e861d094\u003c/code\u003e\u003c/a\u003e glog: don't hold mutex when sync'ing (\u003ca href=\"https://redirect.github.com/golang/glog/issues/68\"\u003e#68\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/b256bbe5d3f846c1d1ce73030c10973378e04cf0\"\u003e\u003ccode\u003eb256bbe\u003c/code\u003e\u003c/a\u003e glog: add context variants to most log functions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/bcf318487a966b61bca6189643b72648fa132e6e\"\u003e\u003ccode\u003ebcf3184\u003c/code\u003e\u003c/a\u003e glog/internal/logsink: add logsink tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/6b9d7f7df28d318a28dde3adb8a5e9ae9bf1abaf\"\u003e\u003ccode\u003e6b9d7f7\u003c/code\u003e\u003c/a\u003e glog: populate symlinks -log_link directory (\u003ca href=\"https://redirect.github.com/golang/glog/issues/64\"\u003e#64\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang/glog/compare/v1.1.1...v1.2.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.23.0 to 0.38.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/e1fcd82abba34df74614020343be8eb1fe85f0d9\"\u003e\u003ccode\u003ee1fcd82\u003c/code\u003e\u003c/a\u003e html: properly handle trailing solidus in unquoted attribute value in foreign...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/ebed060e8f30f20235f74808c22125fd86b15edd\"\u003e\u003ccode\u003eebed060\u003c/code\u003e\u003c/a\u003e internal/http3: fix build of tests with GOEXPERIMENT=nosynctest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/1f1fa29e0a46fffe18c43a9da8daa5a0b180dfa9\"\u003e\u003ccode\u003e1f1fa29\u003c/code\u003e\u003c/a\u003e publicsuffix: regenerate table\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/12150816f701c912a32a376754ab28dd3878833a\"\u003e\u003ccode\u003e1215081\u003c/code\u003e\u003c/a\u003e http2: improve error when server sends HTTP/1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/312450e473eae9f9e6173ad895c80bc5ea2f79ad\"\u003e\u003ccode\u003e312450e\u003c/code\u003e\u003c/a\u003e html: ensure \u0026lt;search\u0026gt; tag closes \u0026lt;p\u0026gt; and update tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/09731f9bf919b00b344c763894cd1920b3d96d90\"\u003e\u003ccode\u003e09731f9\u003c/code\u003e\u003c/a\u003e http2: improve handling of lost PING in Server\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/55989e24b972a90ab99308fdc7ea1fb58a96fef1\"\u003e\u003ccode\u003e55989e2\u003c/code\u003e\u003c/a\u003e http2/h2c: use ResponseController for hijacking connections\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/2914f46773171f4fa13e276df1135bafef677801\"\u003e\u003ccode\u003e2914f46\u003c/code\u003e\u003c/a\u003e websocket: re-recommend gorilla/websocket\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/99b3ae0643f9a2f9d820fcbba5f9e4c83b23bd48\"\u003e\u003ccode\u003e99b3ae0\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/85d1d54551b68719346cb9fec24b911da4e452a1\"\u003e\u003ccode\u003e85d1d54\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.23.0...v0.38.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/oauth2` from 0.7.0 to 0.27.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/681b4d8edca1bcfea5bce685d77ea7b82ed3e7b3\"\u003e\u003ccode\u003e681b4d8\u003c/code\u003e\u003c/a\u003e jws: split token into fixed number of parts\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/3f78298beea38fb76a3fbca33e3056f4b7eb5502\"\u003e\u003ccode\u003e3f78298\u003c/code\u003e\u003c/a\u003e all: upgrade go directive to at least 1.23.0 [generated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/109dabf9017129171d1807e485ca5633ecd095ac\"\u003e\u003ccode\u003e109dabf\u003c/code\u003e\u003c/a\u003e endpoints: add links/provider for Discord\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/ac571fa341c2a2b979d2b2c8341fd24767ef5d47\"\u003e\u003ccode\u003eac571fa\u003c/code\u003e\u003c/a\u003e oauth2: fix docs for Config.DeviceAuth\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/314ee5b92bf23c4973aa8e61eba3ff458e80eef2\"\u003e\u003ccode\u003e314ee5b\u003c/code\u003e\u003c/a\u003e endpoints: add patreon endpoint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/b9c813be7d0ec3262d46deb8677ba5cda93d95ec\"\u003e\u003ccode\u003eb9c813b\u003c/code\u003e\u003c/a\u003e google: add warning about externally-provided credentials\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/49a531d12a9ad6fa9f5a070d577ac752ada772c9\"\u003e\u003ccode\u003e49a531d\u003c/code\u003e\u003c/a\u003e all: make method and struct comments match the names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/22134a41033e44c2cd074106770ab5b7ca910d15\"\u003e\u003ccode\u003e22134a4\u003c/code\u003e\u003c/a\u003e README: don't recommend go get\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/3e6480915d39dd1a80fa460e56413857f02cc1b9\"\u003e\u003ccode\u003e3e64809\u003c/code\u003e\u003c/a\u003e x/oauth2: add Token.ExpiresIn\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/16a9973a41c72ea3e252e9c14be34fcaa2928211\"\u003e\u003ccode\u003e16a9973\u003c/code\u003e\u003c/a\u003e jwt: rename example to avoid vet error\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/oauth2/compare/v0.7.0...v0.27.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google.golang.org/grpc` from 1.56.3 to 1.79.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc-go/releases\"\u003egoogle.golang.org/grpc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 1.79.3\u003c/h2\u003e\n\u003ch1\u003eSecurity\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eserver: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted \u0026quot;deny\u0026quot; rules in interceptors like \u003ccode\u003egrpc/authz\u003c/code\u003e. Any request with a non-canonical path is now immediately rejected with an \u003ccode\u003eUnimplemented\u003c/code\u003e error. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.2\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003estats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8874\"\u003egrpc/grpc-go#8874\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.1\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003egrpc: Remove the \u003ccode\u003e-dev\u003c/code\u003e suffix from the User-Agent header. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8902\"\u003egrpc/grpc-go#8902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.0\u003c/h2\u003e\n\u003ch1\u003eAPI Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003emem: Add experimental API \u003ccode\u003eSetDefaultBufferPool\u003c/code\u003e to change the default buffer pool. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8806\"\u003e#8806\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/vanja-p\"\u003e\u003ccode\u003e@​vanja-p\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eexperimental/stats: Update \u003ccode\u003eMetricsRecorder\u003c/code\u003e to require embedding the new \u003ccode\u003eUnimplementedMetricsRecorder\u003c/code\u003e (a no-op struct) in all implementations for forward compatibility. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBehavior Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ebalancer/weightedtarget: Remove handling of \u003ccode\u003eAddresses\u003c/code\u003e and only handle \u003ccode\u003eEndpoints\u003c/code\u003e in resolver updates. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8841\"\u003e#8841\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eNew Features\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eexperimental/stats: Add support for asynchronous gauge metrics through the new \u003ccode\u003eAsyncMetricReporter\u003c/code\u003e and \u003ccode\u003eRegisterAsyncReporter\u003c/code\u003e APIs. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epickfirst: Add support for weighted random shuffling of endpoints, as described in \u003ca href=\"https://redirect.github.com/grpc/proposal/pull/535\"\u003egRFC A113\u003c/a\u003e.\n\u003cul\u003e\n\u003cli\u003eThis is enabled by default, and can be turned off using the environment variable \u003ccode\u003eGRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds: Implement \u003ccode\u003e:authority\u003c/code\u003e rewriting, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A81-xds-authority-rewriting.md\"\u003egRFC A81\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8779\"\u003e#8779\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebalancer/randomsubsetting: Implement the \u003ccode\u003erandom_subsetting\u003c/code\u003e LB policy, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A68-random-subsetting.md\"\u003egRFC A68\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8650\"\u003e#8650\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/marek-szews\"\u003e\u003ccode\u003e@​marek-szews\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/tls: Fix a bug where the port was not stripped from the authority override before validation. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8726\"\u003e#8726\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/Atul1710\"\u003e\u003ccode\u003e@​Atul1710\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds/priority: Fix a bug causing delayed failover to lower-priority clusters when a higher-priority cluster is stuck in \u003ccode\u003eCONNECTING\u003c/code\u003e state. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8813\"\u003e#8813\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ehealth: Fix a bug where health checks failed for clients using legacy compression options (\u003ccode\u003eWithDecompressor\u003c/code\u003e or \u003ccode\u003eRPCDecompressor\u003c/code\u003e). (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8765\"\u003e#8765\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/sanki92\"\u003e\u003ccode\u003e@​sanki92\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003etransport: Fix an issue where the HTTP/2 server could skip header size checks when terminating a stream early. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8769\"\u003e#8769\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eserver: Propagate status detail headers, if available, when terminating a stream during request header processing. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8754\"\u003e#8754\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ePerformance Improvements\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/alts: Optimize read buffer alignment to reduce copies. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8791\"\u003e#8791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emem: Optimize pooling and creation of \u003ccode\u003ebuffer\u003c/code\u003e objects.  (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8784\"\u003e#8784\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etransport: Reduce slice re-allocations by reserving slice capacity. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8797\"\u003e#8797\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/dda86dbd9cecb8b35b58c73d507d81d67761205f\"\u003e\u003ccode\u003edda86db\u003c/code\u003e\u003c/a\u003e Change version to 1.79.3 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8983\"\u003e#8983\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/72186f163e75a065c39e6f7df9b6dea07fbdeff5\"\u003e\u003ccode\u003e72186f1\u003c/code\u003e\u003c/a\u003e grpc: enforce strict path checking for incoming requests on the server (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/97ca3522b239edf6813e2b1106924e9d55e89d43\"\u003e\u003ccode\u003e97ca352\u003c/code\u003e\u003c/a\u003e Changing version to 1.79.3-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8954\"\u003e#8954\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/8902ab6efea590f5b3861126559eaa26fa9783b2\"\u003e\u003ccode\u003e8902ab6\u003c/code\u003e\u003c/a\u003e Change the version to release 1.79.2 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8947\"\u003e#8947\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/a9286705aa689bee321ec674323b6896284f3e02\"\u003e\u003ccode\u003ea928670\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8874\"\u003e#8874\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8904\"\u003e#8904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/06df3638c0bcee88197b1033b3ba83e1eb8bc010\"\u003e\u003ccode\u003e06df363\u003c/code\u003e\u003c/a\u003e Change version to 1.79.2-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8903\"\u003e#8903\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/782f2de44f597af18a120527e7682a6670d84289\"\u003e\u003ccode\u003e782f2de\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8902\"\u003e#8902\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/850eccbb2257bd2de6ac28ee88a7172ab6175629\"\u003e\u003ccode\u003e850eccb\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8851\"\u003e#8851\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/765ff056b6890f6c8341894df4e9668e9bfc18ef\"\u003e\u003ccode\u003e765ff05\u003c/code\u003e\u003c/a\u003e Change version to 1.79.0 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8850\"\u003e#8850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/68804be0e78ed0365bb5a576dedc12e2168ed63e\"\u003e\u003ccode\u003e68804be\u003c/code\u003e\u003c/a\u003e Cherry pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8896\"\u003e#8896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/grpc/grpc-go/compare/v1.56.3...v1.79.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/golang/glog` from 1.2.0 to 1.2.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/golang/glog/releases\"\u003egithub.com/golang/glog's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.2.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFail if log file already exists by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/74\"\u003egolang/glog#74\u003c/a\u003e:\n\u003cul\u003e\n\u003cli\u003eglog: Don't try to create/rotate a given syncBuffer twice in the same second\u003c/li\u003e\n\u003cli\u003eglog: introduce createInDir function as in internal version\u003c/li\u003e\n\u003cli\u003eglog: have createInDir fail if the file already exists\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.2.3...v1.2.4\"\u003ehttps://github.com/golang/glog/compare/v1.2.3...v1.2.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.2.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eglog: check that stderr is valid before using it by default by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/72\"\u003egolang/glog#72\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eglog: fix typo by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/73\"\u003egolang/glog#73\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.2.2...v1.2.3\"\u003ehttps://github.com/golang/glog/compare/v1.2.2...v1.2.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.2.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eglog: avoid calling user.Current() on windows by \u003ca href=\"https://github.com/bentekkie\"\u003e\u003ccode\u003e@​bentekkie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/69\"\u003egolang/glog#69\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.2.1...v1.2.2\"\u003ehttps://github.com/golang/glog/compare/v1.2.1...v1.2.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.2.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eglog: don't hold mutex when sync'ing by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/68\"\u003egolang/glog#68\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.2.0...v1.2.1\"\u003ehttps://github.com/golang/glog/compare/v1.2.0...v1.2.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.2.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eglog: add context variants and logsink tests by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/66\"\u003egolang/glog#66\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.1.2...v1.2.0\"\u003ehttps://github.com/golang/glog/compare/v1.1.2...v1.2.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.1.2\u003c/h2\u003e\n\u003cp\u003eBugfix release.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eglog: populate symlinks -log_link directory by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/64\"\u003egolang/glog#64\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.1.1...v1.1.2\"\u003ehttps://github.com/golang/glog/compare/v1.1.1...v1.1.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/a0e3c40a0ed0cecc58c84e7684d9ce55a54044ee\"\u003e\u003ccode\u003ea0e3c40\u003c/code\u003e\u003c/a\u003e glog: have createInDir fail if the file already exists\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/7139da234346c23dba05a8c588284c379b9c0bf8\"\u003e\u003ccode\u003e7139da2\u003c/code\u003e\u003c/a\u003e glog: introduce createInDir function as in internal version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/dd58629ba6ced28322bcb149ed86016fb1ec9a5b\"\u003e\u003ccode\u003edd58629\u003c/code\u003e\u003c/a\u003e glog: Don't try to create/rotate a given syncBuffer twice in the same second\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/04dbec0df8d03d5c187beaf5ce8e6c58e9fc82b5\"\u003e\u003ccode\u003e04dbec0\u003c/code\u003e\u003c/a\u003e glog: fix typo (\u003ca href=\"https://redirect.github.com/golang/glog/issues/73\"\u003e#73\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/459cf3b8151dcfd8aa971077774eaf0c804119e4\"\u003e\u003ccode\u003e459cf3b\u003c/code\u003e\u003c/a\u003e glog: check that stderr is valid before using it by default (\u003ca href=\"https://redirect.github.com/golang/glog/issues/72\"\u003e#72\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/97303146a4ffecf364d4300e07fca855d0062c43\"\u003e\u003ccode\u003e9730314\u003c/code\u003e\u003c/a\u003e glog: avoid calling user.Current() on windows (\u003ca href=\"https://redirect.github.com/golang/glog/issues/69\"\u003e#69\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/861d094757551d2f65d1003f0ec93bc92b254a5a\"\u003e\u003ccode\u003e861d094\u003c/code\u003e\u003c/a\u003e glog: don't hold mutex when sync'ing (\u003ca href=\"https://redirect.github.com/golang/glog/issues/68\"\u003e#68\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/b256bbe5d3f846c1d1ce73030c10973378e04cf0\"\u003e\u003ccode\u003eb256bbe\u003c/code\u003e\u003c/a\u003e glog: add context variants to most log functions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/bcf318487a966b61bca6189643b72648fa132e6e\"\u003e\u003ccode\u003ebcf3184\u003c/code\u003e\u003c/a\u003e glog/internal/logsink: add logsink tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/6b9d7f7df28d318a28dde3adb8a5e9ae9bf1abaf\"\u003e\u003ccode\u003e6b9d7f7\u003c/code\u003e\u003c/a\u003e glog: populate symlinks -log_link directory (\u003ca href=\"https://redirect.github.com/golang/glog/issues/64\"\u003e#64\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang/glog/compare/v1.1.1...v1.2.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/oauth2` from 0.0.0-20200107190931-bf48bf16ab8d to 0.27.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/681b4d8edca1bcfea5bce685d77ea7b82ed3e7b3\"\u003e\u003ccode\u003e681b4d8\u003c/code\u003e\u003c/a\u003e jws: split token into fixed number of parts\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/3f78298beea38fb76a3fbca33e3056f4b7eb5502\"\u003e\u003ccode\u003e3f78298\u003c/code\u003e\u003c/a\u003e all: upgrade go directive to at least 1.23.0 [generated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/109dabf9017129171d1807e485ca5633ecd095ac\"\u003e\u003ccode\u003e109dabf\u003c/code\u003e\u003c/a\u003e endpoints: add links/provider for Discord\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/ac571fa341c2a2b979d2b2c8341fd24767ef5d47\"\u003e\u003ccode\u003eac571fa\u003c/code\u003e\u003c/a\u003e oauth2: fix docs for Config.DeviceAuth\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/314ee5b92bf23c4973aa8e61eba3ff458e80eef2\"\u003e\u003ccode\u003e314ee5b\u003c/code\u003e\u003c/a\u003e endpoints: add patreon endpoint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/b9c813be7d0ec3262d46deb8677ba5cda93d95ec\"\u003e\u003ccode\u003eb9c813b\u003c/code\u003e\u003c/a\u003e google: add warning about externally-provided credentials\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/49a531d12a9ad6fa9f5a070d577ac752ada772c9\"\u003e\u003ccode\u003e49a531d\u003c/code\u003e\u003c/a\u003e all: make method and struct comments match the names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/22134a41033e44c2cd074106770ab5b7ca910d15\"\u003e\u003ccode\u003e22134a4\u003c/code\u003e\u003c/a\u003e README: don't recommend go get\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/3e6480915d39dd1a80fa460e56413857f02cc1b9\"\u003e\u003ccode\u003e3e64809\u003c/code\u003e\u003c/a\u003e x/oauth2: add Token.ExpiresIn\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/16a9973a41c72ea3e252e9c14be34fcaa2928211\"\u003e\u003ccode\u003e16a9973\u003c/code\u003e\u003c/a\u003e jwt: rename example to avoid vet error\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/oauth2/compare/v0.7.0...v0.27.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/cloudflare/circl` from 1.3.3 to 1.6.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cloudflare/circl/releases\"\u003egithub.com/cloudflare/circl's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eCIRCL v1.6.3\u003c/h2\u003e\n\u003cp\u003eFix a bug on ecc/p384 scalar multiplication.\u003c/p\u003e\n\u003ch3\u003eWhat's Changed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esign/mldsa: Check opts for nil value  by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/582\"\u003ecloudflare/circl#582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eecc/p384: Point addition must handle point doubling case. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/583\"\u003ecloudflare/circl#583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease CIRCL v1.6.3 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/584\"\u003ecloudflare/circl#584\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNew SLH-DSA, improvements in ML-DSA for arm64.\u003c/li\u003e\n\u003cli\u003eTested compilation on WASM.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize pairing product computation by moving exponentiations to G1. by \u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esign: Adding SLH-DSA signature by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/512\"\u003ecloudflare/circl#512\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate code generators to CIRCL v1.6.1. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/548\"\u003ecloudflare/circl#548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eML-DSA: Add preliminary Wycheproof test vectors by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/552\"\u003ecloudflare/circl#552\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ego fmt by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/554\"\u003ecloudflare/circl#554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egz-compressing test vectors, use of HexBytes and ReadGzip functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/555\"\u003ecloudflare/circl#555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Removes use of elliptic Marshal and Unmarshal functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/556\"\u003ecloudflare/circl#556\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport encoding/decoding ML-DSA private keys (as long as they contain seeds) by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/559\"\u003ecloudflare/circl#559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to golangci-lint v2 by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/560\"\u003ecloudflare/circl#560\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreparation for ARM64 Implementation of poly operations for dilithium package. by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eprepare power2Round for custom implementations in assembly by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/564\"\u003ecloudflare/circl#564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eARM64 implementation for poly.PackLe16 by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/563\"\u003ecloudflare/circl#563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polyMulBy2toD by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/565\"\u003ecloudflare/circl#565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polySub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/566\"\u003ecloudflare/circl#566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: add byteLen method for short groups and RandomScalar uses rand.Int by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/568\"\u003ecloudflare/circl#568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of poly.Add/Sub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/572\"\u003ecloudflare/circl#572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Adding cryptobyte marshaling to scalars by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/569\"\u003ecloudflare/circl#569\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumping up to Go1.25 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/574\"\u003ecloudflare/circl#574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: Including WASM compilation. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/577\"\u003ecloudflare/circl#577\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to using package-declared HPKE errors for shortkem instead of standard library errors by \u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease v1.6.2 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/579\"\u003ecloudflare/circl#579\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixes some point checks on the FourQ curve.\u003c/li\u003e\n\u003cli\u003eHybrid KEM fails on low-order points.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/24ae53c5d6f7fe18203adc125ba3ed76a38703e1\"\u003e\u003ccode\u003e24ae53c\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/581020bd4a836b8ce7bd4e414ba2884c07dbc906\"\u003e\u003ccode\u003e581020b\u003c/code\u003e\u003c/a\u003e Rename method to oddMultiplesProjective.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/12209a4566605692a8402594e367a5aed5148460\"\u003e\u003ccode\u003e12209a4\u003c/code\u003e\u003c/a\u003e Removing unused cmov for jacobian points.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/fcba359f4178645d2c9e50f29ab6966337da4b95\"\u003e\u003ccode\u003efcba359\u003c/code\u003e\u003c/a\u003e ecc/p384: use of complete projective formulas for scalar multiplication.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/5e1bae8d8c2df4e717c2c5c2d5b5d60b629b2ac6\"\u003e\u003ccode\u003e5e1bae8\u003c/code\u003e\u003c/a\u003e ecc/p384: handle point doubling in point addition with Jacobian coordinates.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/341604685ff97e8f7440ae4b4711ba1c118c648c\"\u003e\u003ccode\u003e3416046\u003c/code\u003e\u003c/a\u003e Check opts for nil value.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/a763d47a6dce43d1f4f7b697d1d7810463a526f6\"\u003e\u003ccode\u003ea763d47\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3c70bf9ad53b681fbe5ba6067e454a86549fee8a\"\u003e\u003ccode\u003e3c70bf9\u003c/code\u003e\u003c/a\u003e Bump x/crypto x/sys dependencies.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3f0f15b2bfe67bad81a35e8aec81ae42ca78349d\"\u003e\u003ccode\u003e3f0f15b\u003c/code\u003e\u003c/a\u003e Revert to using package-declared HPKE errors for shortkem instead of standard...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/23491bd573cf29b6f567057a158203a2c9dfa30d\"\u003e\u003ccode\u003e23491bd\u003c/code\u003e\u003c/a\u003e Adding generic Power2Round method.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.3.3...v1.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.30.0 to 0.45.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/4e0068c0098be10d7025c99ab7c50ce454c1f0f9\"\u003e\u003ccode\u003e4e0068c\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e79546e28b85ea53dd37afe1c4102746ef553b9c\"\u003e\u003ccode\u003ee79546e\u003c/code\u003e\u003c/a\u003e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f91f7a7c31bf90b39c1de895ad116a2bacc88748\"\u003e\u003ccode\u003ef91f7a7\u003c/code\u003e\u003c/a\u003e ssh/agent: prevent panic on malformed constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/2df4153a0311bdfea44376e0eb6ef2faefb0275b\"\u003e\u003ccode\u003e2df4153\u003c/code\u003e\u003c/a\u003e acme/autocert: let automatic renewal work with short lifetime certs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/bcf6a849efcf4702fa5172cb0998b46c3da1e989\"\u003e\u003ccode\u003ebcf6a84\u003c/code\u003e\u003c/a\u003e acme: pass context to request\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b4f2b62076abeee4e43fb59544dac565715fbf1e\"\u003e\u003ccode\u003eb4f2b62\u003c/code\u003e\u003c/a\u003e ssh: fix error message on unsupported cipher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/79ec3a51fcc7fbd2691d56155d578225ccc542e2\"\u003e\u003ccode\u003e79ec3a5\u003c/code\u003e\u003c/a\u003e ssh: allow to bind to a hostname in remote forwarding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/122a78f140d9d3303ed3261bc374bbbca149140f\"\u003e\u003ccode\u003e122a78f\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/c0531f9c34514ad5c5551e2d6ce569ca673a8afd\"\u003e\u003ccode\u003ec0531f9\u003c/code\u003e\u003c/a\u003e all: eliminate vet diagnostics\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/0997000b45e3a40598272081bcad03ffd21b8adb\"\u003e\u003ccode\u003e0997000\u003c/code\u003e\u003c/a\u003e all: fix some comments\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.30.0...v0.45.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-git/v5` from 5.11.0 to 5.19.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-git/releases\"\u003egithub.com/go-git/go-git/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.19.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.18.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2010\"\u003ego-git/go-git#2010\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Bump sha1cd and go-billy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2060\"\u003ego-git/go-git#2060\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Align object encoding with upstream by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2065\"\u003ego-git/go-git#2065\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.18.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eplumbing: transport/http, Add support for followRedirects policy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2004\"\u003ego-git/go-git#2004\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.17.1 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1941\"\u003ego-git/go-git#1941\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edotgit: skip writing pack files that already exist on disk by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1944\"\u003ego-git/go-git#1944\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e:warning: This release fixes a bug (\u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1942\"\u003ego-git/go-git#1942\u003c/a\u003e) that blocked some users from upgrading to \u003ccode\u003ev5.17.1\u003c/code\u003e. Thanks \u003ca href=\"https://github.com/pskrbasu\"\u003e\u003ccode\u003e@​pskrbasu\u003c/code\u003e\u003c/a\u003e for reporting it. :bow:\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.1...v5.17.2\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.1...v5.17.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/cloudflare/circl to v1.6.3 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1930\"\u003ego-git/go-git#1930\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/index, Improve v4 entry name validation by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1935\"\u003ego-git/go-git#1935\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/idxfile, Fix version and fanout checks by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1937\"\u003ego-git/go-git#1937\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.16.5 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1839\"\u003ego-git/go-git#1839\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: worktree, optimize infiles function for very large repos by \u003ca href=\"https://github.com/k-anshul\"\u003e\u003ccode\u003e@​k-anshul\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1853\"\u003ego-git/go-git#1853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: Add strict checks for supported extensions by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1861\"\u003ego-git/go-git#1861\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebackport, git: Improve Status() speed with new index.ModTime check by \u003ca href=\"https://github.com/cedric-appdirect\"\u003e\u003ccode\u003e@​cedric-appdirect\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1862\"\u003ego-git/go-git#1862\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003estorage: filesystem, Avoid overwriting loose obj files by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1864\"\u003ego-git/go-git#1864\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.16.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module golang.org/x/crypto to v0.45.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1744\"\u003ego-git/go-git#1744\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Bump Go test versions to 1.23-1.25 (v5) by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1746\"\u003ego-git/go-git#1746\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] git: worktree, Don't delete local untracked files when resetting worktree by \u003ca href=\"https://github.com/Ch00k\"\u003e\u003ccode\u003e@​Ch00k\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1800\"\u003ego-git/go-git#1800\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/bc930f4cbe095a3e1d49273655f73fcef7d41a42\"\u003e\u003ccode\u003ebc930f4\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2065\"\u003e#2065\u003c/a\u003e from go-git/commit-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/d315264343cead712aa9eb56475c2ec96f5ecef1\"\u003e\u003ccode\u003ed315264\u003c/code\u003e\u003c/a\u003e plumbing: object, Reset object before decode\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/6e1d34890a4dae8a0df738e531234bd60b7e9b66\"\u003e\u003ccode\u003e6e1d348\u003c/code\u003e\u003c/a\u003e plumbing: object, Align Tree handling with upstream\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/e134ba34cf95ed0167e5b1df36a933d7bde9d02d\"\u003e\u003ccode\u003ee134ba3\u003c/code\u003e\u003c/a\u003e tests: Skip double checks in Git v2.11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/1971422f6b1bec9176061b3293306981cfff981e\"\u003e\u003ccode\u003e1971422\u003c/code\u003e\u003c/a\u003e tests: Add git conformance tests for signing verification\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/a387aa8857a8fbba8e74b7f5485e9e030669ab5d\"\u003e\u003ccode\u003ea387aa8\u003c/code\u003e\u003c/a\u003e plumbing: object, Add ErrMalformedTag\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/f415670d906b5c6169d1fdc64f3f9f1d33eb6f9c\"\u003e\u003ccode\u003ef415670\u003c/code\u003e\u003c/a\u003e plumbing: object, Decode Tag headers via a state machine\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/5b0cd38a62e2336bb5f1a2ad0eb8ac8f9e7b740e\"\u003e\u003ccode\u003e5b0cd38\u003c/code\u003e\u003c/a\u003e plumbing: object, Reject multi-signature commits at Verify\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/fe8ed6223a6079d9fd84d853362a996e7df175fb\"\u003e\u003ccode\u003efe8ed62\u003c/code\u003e\u003c/a\u003e plumbing: object, Align Tag.EncodeWithoutSignature with Commit\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/98e337d5bdc4c0536a40ab7381b2231f7e0b15cd\"\u003e\u003ccode\u003e98e337d\u003c/code\u003e\u003c/a\u003e plumbing: object, Add support for Tag.SignatureSHA256\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-git/compare/v5.11.0...v5.19.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/golang/glog` from 1.1.1 to 1.2.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/golang/glog/releases\"\u003egithub.com/golang/glog's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.2.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFail if log file already exists by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/74\"\u003egolang/glog#74\u003c/a\u003e:\n\u003cul\u003e\n\u003cli\u003eglog: Don't try to create/rotate a given syncBuffer twice in the same second\u003c/li\u003e\n\u003cli\u003eglog: introduce createInDir function as in internal version\u003c/li\u003e\n\u003cli\u003eglog: have createInDir fail if the file already exists\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.2.3...v1.2.4\"\u003ehttps://github.com/golang/glog/compare/v1.2.3...v1.2.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.2.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eglog: check that stderr is valid before using it by default by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/72\"\u003egolang/glog#72\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eglog: fix typo by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/73\"\u003egolang/glog#73\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.2.2...v1.2.3\"\u003ehttps://github.com/golang/glog/compare/v1.2.2...v1.2.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.2.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eglog: avoid calling user.Current() on windows by \u003ca href=\"https://github.com/bentekkie\"\u003e\u003ccode\u003e@​bentekkie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/69\"\u003egolang/glog#69\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.2.1...v1.2.2\"\u003ehttps://github.com/golang/glog/compare/v1.2.1...v1.2.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.2.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eglog: don't hold mutex when sync'ing by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/68\"\u003egolang/glog#68\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.2.0...v1.2.1\"\u003ehttps://github.com/golang/glog/compare/v1.2.0...v1.2.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.2.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eglog: add context variants and logsink tests by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/66\"\u003egolang/glog#66\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.1.2...v1.2.0\"\u003ehttps://github.com/golang/glog/compare/v1.1.2...v1.2.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.1.2\u003c/h2\u003e\n\u003cp\u003eBugfix release.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eglog: populate symlinks -log_link directory by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/64\"\u003egolang/glog#64\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.1.1...v1.1.2\"\u003ehttps://github.com/golang/glog/compare/v1.1.1...v1.1.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/a0e3c40a0ed0cecc58c84e7684d9ce55a54044ee\"\u003e\u003ccode\u003ea0e3c40\u003c/code\u003e\u003c/a\u003e glog: have createInDir fail if the file already exists\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/7139da234346c23dba05a8c588284c379b9c0bf8\"\u003e\u003ccode\u003e7139da2\u003c/code\u003e\u003c/a\u003e glog: introduce createInDir function as in internal version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/dd58629ba6ced28322bcb149ed86016fb1ec9a5b\"\u003e\u003ccode\u003edd58629\u003c/code\u003e\u003c/a\u003e glog: Don't try to create/rotate a given syncBuffer twice in the same second\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/04dbec0df8d03d5c187beaf5ce8e6c58e9fc82b5\"\u003e\u003ccode\u003e04dbec0\u003c/code\u003e\u003c/a\u003e glog: fix typo (\u003ca href=\"https://redirect.github.com/golang/glog/issues/73\"\u003e#73\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/459cf3b8151dcfd8aa971077774eaf0c804119e4\"\u003e\u003ccode\u003e459cf3b\u003c/code\u003e\u003c/a\u003e glog: check that stderr is valid before using it by default (\u003ca href=\"https://redirect.github.com/golang/glog/issues/72\"\u003e#72\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/97303146a4ffecf364d4300e07fca855d0062c43\"\u003e\u003ccode\u003e9730314\u003c/code\u003e\u003c/a\u003e glog: avoid calling user.Current() on windows (\u003ca href=\"https://redirect.github.com/golang/glog/issues/69\"\u003e#69\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/861d094757551d2f65d1003f0ec93bc92b254a5a\"\u003e\u003ccode\u003e861d094\u003c/code\u003e\u003c/a\u003e glog: don't hold mutex when sync'ing (\u003ca href=\"https://redirect.github.com/golang/glog/issues/68\"\u003e#68\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/b256bbe5d3f846c1d1ce73030c10973378e04cf0\"\u003e\u003ccode\u003eb256bbe\u003c/code\u003e\u003c/a\u003e glog: add context variants to most log functions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/bcf318487a966b61bca6189643b72648fa132e6e\"\u003e\u003ccode\u003ebcf3184\u003c/code\u003e\u003c/a\u003e glog/internal/logsink: add logsink tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/6b9d7f7df28d318a28dde3adb8a5e9ae9bf1abaf\"\u003e\u003ccode\u003e6b9d7f7\u003c/code\u003e\u003c/a\u003e glog: populate symlinks -log_link directory (\u003ca href=\"https://redirect.github.com/golang/glog/issues/64\"\u003e#64\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang/glog/compare/v1.1.1...v1.2.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/golang/glog` from 1.1.2 to 1.2.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/golang/glog/releases\"\u003egithub.com/golang/glog's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.2.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFail if log file already exists by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/74\"\u003egolang/glog#74\u003c/a\u003e:\n\u003cul\u003e\n\u003cli\u003eglog: Don't try to create/rotate a given syncBuffer twice in the same second\u003c/li\u003e\n\u003cli\u003eglog: introduce createInDir function as in internal version\u003c/li\u003e\n\u003cli\u003eglog: have createInDir fail if the file already exists\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.2.3...v1.2.4\"\u003ehttps://github.com/golang/glog/compare/v1.2.3...v1.2.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.2.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eglog: check that stderr is valid before using it by default by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/72\"\u003egolang/glog#72\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eglog: fix typo by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/73\"\u003egolang/glog#73\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.2.2...v1.2.3\"\u003ehttps://github.com/golang/glog/compare/v1.2.2...v1.2.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.2.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eglog: avoid calling user.Current() on windows by \u003ca href=\"https://github.com/bentekkie\"\u003e\u003ccode\u003e@​bentekkie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/69\"\u003egolang/glog#69\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.2.1...v1.2.2\"\u003ehttps://github.com/golang/glog/compare/v1.2.1...v1.2.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.2.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eglog: don't hold mutex when sync'ing by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/68\"\u003egolang/glog#68\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.2.0...v1.2.1\"\u003ehttps://github.com/golang/glog/compare/v1.2.0...v1.2.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.2.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eglog: add context variants and logsink tests by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/66\"\u003egolang/glog#66\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.1.2...v1.2.0\"\u003ehttps://github.com/golang/glog/compare/v1.1.2...v1.2.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.1.2\u003c/h2\u003e\n\u003cp\u003eBugfix release.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eglog: populate symlinks -log_link directory by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/64\"\u003egolang/glog#64\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.1.1...v1.1.2\"\u003ehttps://github.com/golang/glog/compare/v1.1.1...v1.1.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/a0e3c40a0ed0cecc58c84e7684d9ce55a54044ee\"\u003e\u003ccode\u003ea0e3c40\u003c/code\u003e\u003c/a\u003e glog: have createInDir fail if the file already exists\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/7139da234346c23dba05a8c588284c379b9c0bf8\"\u003e\u003ccode\u003e7139da2\u003c/code\u003e\u003c/a\u003e glog: introduce createInDir function as in internal version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/dd58629ba6ced28322bcb149ed86016fb1ec9a5b\"\u003e\u003ccode\u003edd58629\u003c/code\u003e\u003c/a\u003e glog: Don't try to create/rotate a given syncBuffer twice in the same second\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/04dbec0df8d03d5c187beaf5ce8e6c58e9fc82b5\"\u003e\u003ccode\u003e04dbec0\u003c/code\u003e\u003c/a\u003e glog: fix typo (\u003ca href=\"https://redirect.github.com/golang/glog/issues/73\"\u003e#73\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/459cf3b8151dcfd8aa971077774eaf0c804119e4\"\u003e\u003ccode\u003e459cf3b\u003c/code\u003e\u003c/a\u003e glog: check that stderr is valid before using it by default (\u003ca href=\"https://redirect.github.com/golang/glog/issues/72\"\u003e#72\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/97303146a4ffecf364d4300e07fca855d0062c43\"\u003e\u003ccode\u003e9730314\u003c/code\u003e\u003c/a\u003e glog: avoid calling user.Current() on windows (\u003ca href=\"https://redirect.github.com/golang/glog/issues/69\"\u003e#69\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/861d094757551d2f65d1003f0ec93bc92b254a5a\"\u003e\u003ccode\u003e861d094\u003c/code\u003e\u003c/a\u003e glog: don't hold mutex when sync'ing (\u003ca href=\"https://redirect.github.com/golang/glog/issues/68\"\u003e#68\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/b256bbe5d3f846c1d1ce73030c10973378e04cf0\"\u003e\u003ccode\u003eb256bbe\u003c/code\u003e\u003c/a\u003e glog: add context variants to most log functions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/bcf318487a966b61bca6189643b72648fa132e6e\"\u003e\u003ccode\u003ebcf3184\u003c/code\u003e\u003c/a\u003e glog/internal/logsink: add logsink tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/6b9d7f7df28d318a28dde3adb8a5e9ae9bf1abaf\"\u003e\u003ccode\u003e6b9d7f7\u003c/code\u003e\u003c/a\u003e glog: populate symlinks -log_link directory (\u003ca href=\"https://redirect.github.com/golang/glog/issues/64\"\u003e#64\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang/glog/compare/v1.1.1...v1.2.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.15.0 to 0.38.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/e1fcd82abba34df74614020343be8eb1fe85f0d9\"\u003e\u003ccode\u003ee1fcd82\u003c/code\u003e\u003c/a\u003e html: properly handle trailing solidus in unquoted attribute value in foreign...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/ebed060e8f30f20235f74808c22125fd86b15edd\"\u003e\u003ccode\u003eebed060\u003c/code\u003e\u003c/a\u003e internal/http3: fix build of tests with GOEXPERIMENT=nosynctest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/1f1fa29e0a46fffe18c43a9da8daa5a0b180dfa9\"\u003e\u003ccode\u003e1f1fa29\u003c/code\u003e\u003c/a\u003e publicsuffix: regenerate table\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/12150816f701c912a32a376754ab28dd3878833a\"\u003e\u003ccode\u003e1215081\u003c/code\u003e\u003c/a\u003e http2: improve error when server sends HTTP/1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/312450e473eae9f9e6173ad895c80bc5ea2f79ad\"\u003e\u003ccode\u003e312450e\u003c/code\u003e\u003c/a\u003e html: ensure \u0026lt;search\u0026gt; tag closes \u0026lt;p\u0026gt; and update tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/09731f9bf919b00b344c763894cd1920b3d96d90\"\u003e\u003ccode\u003e09731f9\u003c/code\u003e\u003c/a\u003e http2: improve handling of lost PING in Server\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/55989e24b972a90ab99308fdc7ea1fb58a96fef1\"\u003e\u003ccode\u003e55989e2\u003c/code\u003e\u003c/a\u003e http2/h2c: use ResponseController for hijacking connections\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/2914f46773171f4fa13e276df1135bafef677801\"\u003e\u003ccode\u003e2914f46\u003c/code\u003e\u003c/a\u003e websocket: re-recommend gorilla/websocket\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/99b3ae0643f9a2f9d820fcbba5f9e4c83b23bd48\"\u003e\u003ccode\u003e99b3ae0\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/85d1d54551b68719346cb9fec24b911da4e452a1\"\u003e\u003ccode\u003e85d1d54\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.23.0...v0.38.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/oauth2` from 0.12.0 to 0.27.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/681b4d8edca1bcfea5bce685d77ea7b82ed3e7b3\"\u003e\u003ccode\u003e681b4d8\u003c/code\u003e\u003c/a\u003e jws: split token into fixed number of parts\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/3f78298beea38fb76a3fbca33e3056f4b7eb5502\"\u003e\u003ccode\u003e3f78298\u003c/code\u003e\u003c/a\u003e all: upgrade go directive to at least 1.23.0 [generated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/109dabf9017129171d1807e485ca5633ecd095ac\"\u003e\u003ccode\u003e109dabf\u003c/code\u003e\u003c/a\u003e endpoints: add links/provider for Discord\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/ac571fa341c2a2b979d2b2c8341fd24767ef5d47\"\u003e\u003ccode\u003eac571fa\u003c/code\u003e\u003c/a\u003e oauth2: fix docs for Config.DeviceAuth\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/314ee5b92bf23c4973aa8e61eba3ff458e80eef2\"\u003e\u003ccode\u003e314ee5b\u003c/code\u003e\u003c/a\u003e endpoints: add patreon endpoint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/b9c813be7d0ec3262d46deb8677ba5cda93d95ec\"\u003e\u003ccode\u003eb9c813b\u003c/code\u003e\u003c/a\u003e google: add warning about externally-provided credentials\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/49a531d12a9ad6fa9f5a070d577ac752ada772c9\"\u003e\u003ccode\u003e49a531d\u003c/code\u003e\u003c/a\u003e all: make method and struct comments match the names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/22134a41033e44c2cd074106770ab5b7ca910d15\"\u003e\u003ccode\u003e22134a4\u003c/code\u003e\u003c/a\u003e README: don't recommend go get\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/3e6480915d39dd1a80fa460e56413857f02cc1b9\"\u003e\u003ccode\u003e3e64809\u003c/code\u003e\u003c/a\u003e x/oauth2: add Token.ExpiresIn\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/16a9973a41c72ea3e252e9c14be34fcaa2928211\"\u003e\u003ccode\u003e16a9973\u003c/code\u003e\u003c/a\u003e jwt: rename example to avoid vet error\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/oauth2/compare/v0.7.0...v0.27.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google.golang.org/grpc` from 1.57.0 to 1.79.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc-go/releases\"\u003egoogle.golang.org/grpc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 1.79.3\u003c/h2\u003e\n\u003ch1\u003eSecurity\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eserver: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted \u0026quot;deny\u0026quot; rules in interceptors like \u003ccode\u003egrpc/authz\u003c/code\u003e. Any request with a non-canonical path is now immediately rejected with an \u003ccode\u003eUnimplemented\u003c/code\u003e error. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.2\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003estats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8874\"\u003egrpc/grpc-go#8874\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.1\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003egrpc: Remove the \u003ccode\u003e-dev\u003c/code\u003e suffix from the User-Agent header. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8902\"\u003egrpc/grpc-go#8902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.0\u003c/h2\u003e\n\u003ch1\u003eAPI Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003emem: Add experimental API \u003ccode\u003eSetDefaultBufferPool\u003c/code\u003e to change the default buffer pool. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8806\"\u003e#8806\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/vanja-p\"\u003e\u003ccode\u003e@​vanja-p\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eexperimental/stats: Update \u003ccode\u003eMetricsRecorder\u003c/code\u003e to require embedding the new \u003ccode\u003eUnimplementedMetricsRecorder\u003c/code\u003e (a no-op struct) in all implementations for forward compatibility. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBehavior Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ebalancer/weightedtarget: Remove handling of \u003ccode\u003eAddresses\u003c/code\u003e and only handle \u003ccode\u003eEndpoints\u003c/code\u003e in resolver updates. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8841\"\u003e#8841\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eNew Features\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eexperimental/stats: Add support for asynchronous gauge metrics through the new \u003ccode\u003eAsyncMetricReporter\u003c/code\u003e and \u003ccode\u003eRegisterAsyncReporter\u003c/code\u003e APIs. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epickfirst: Add support for weighted random shuffling of endpoints, as described in \u003ca href=\"https://redirect.github.com/grpc/proposal/pull/535\"\u003egRFC A113\u003c/a\u003e.\n\u003cul\u003e\n\u003cli\u003eThis is enabled by default, and can be turned off using the environment variable \u003ccode\u003eGRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds: Implement \u003ccode\u003e:authority\u003c/code\u003e rewriting, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A81-xds-authority-rewriting.md\"\u003egRFC A81\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8779\"\u003e#8779\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebalancer/randomsubsetting: Implement the \u003ccode\u003erandom_subsetting\u003c/code\u003e LB policy, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A68-random-subsetting.md\"\u003egRFC A68\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8650\"\u003e#8650\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/marek-szews\"\u003e\u003ccode\u003e@​marek-szews\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/tls: Fix a bug where the port was not stripped from the authority override before validation. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8726\"\u003e#8726\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/Atul1710\"\u003e\u003ccode\u003e@​Atul1710\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds/priority: Fix a bug causing delayed failover to lower-priority clusters when a higher-priority cluster is stuck in \u003ccode\u003eCONNECTING\u003c/code\u003e state. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8813\"\u003e#8813\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ehealth: Fix a bug where health checks failed for clients using legacy compression options (\u003ccode\u003eWithDecompressor\u003c/code\u003e or \u003ccode\u003eRPCDecompressor\u003c/code\u003e). (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8765\"\u003e#8765\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/sanki92\"\u003e\u003ccode\u003e@​sanki92\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003etransport: Fix an issue where the HTTP/2 server could skip header size checks when terminating a stream early. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8769\"\u003e#8769\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eserver: Propagate status detail headers, if available, when terminating a stream during request header processing. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8754\"\u003e#8754\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ePerformance Improvements\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/alts: Optimize read buffer alignment to reduce copies. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8791\"\u003e#8791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emem: Optimize pooling and creation of \u003ccode\u003ebuffer\u003c/code\u003e objects.  (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8784\"\u003e#8784\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etransport: Reduce slice re-allocations by reserving slice capacity. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8797\"\u003e#8797\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/dda86dbd9cecb8b35b58c73d507d81d67761205f\"\u003e\u003ccode\u003edda86db\u003c/code\u003e\u003c/a\u003e Change version to 1.79.3 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8983\"\u003e#8983\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/72186f163e75a065c39e6f7df9b6dea07fbdeff5\"\u003e\u003ccode\u003e72186f1\u003c/code\u003e\u003c/a\u003e grpc: enforce strict path checking for incoming requests on the server (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/97ca3522b239edf6813e2b1106924e9d55e89d43\"\u003e\u003ccode\u003e97ca352\u003c/code\u003e\u003c/a\u003e Changing version to 1.79.3-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8954\"\u003e#8954\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/...\n\n_Description has been truncated_","html_url":"https://github.com/YoutacRandS-VA/magic-modules/pull/7","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/YoutacRandS-VA%2Fmagic-modules/issues/7","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/7/packages"},{"uuid":"4368890856","node_id":"PR_kwDOSSZBe87Xo3FH","number":1,"state":"open","title":"deps(deps): Bump github.com/cloudflare/circl from 1.6.0 to 1.6.3 in the cloudflare-circl group","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-02T12:29:50.000Z","updated_at":"2026-05-02T12:29:51.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"deps(deps): Bump","packages":[{"name":"github.com/cloudflare/circl","old_version":"1.6.0","new_version":"1.6.3","repository_url":"https://github.com/cloudflare/circl"}],"path":"the cloudflare-circl group","ecosystem":"go"},"body":"Bumps the cloudflare-circl group with 1 update: [github.com/cloudflare/circl](https://github.com/cloudflare/circl).\n\nUpdates `github.com/cloudflare/circl` from 1.6.0 to 1.6.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cloudflare/circl/releases\"\u003egithub.com/cloudflare/circl's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eCIRCL v1.6.3\u003c/h2\u003e\n\u003cp\u003eFix a bug on ecc/p384 scalar multiplication.\u003c/p\u003e\n\u003ch3\u003eWhat's Changed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esign/mldsa: Check opts for nil value  by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/582\"\u003ecloudflare/circl#582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eecc/p384: Point addition must handle point doubling case. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/583\"\u003ecloudflare/circl#583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease CIRCL v1.6.3 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/584\"\u003ecloudflare/circl#584\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNew SLH-DSA, improvements in ML-DSA for arm64.\u003c/li\u003e\n\u003cli\u003eTested compilation on WASM.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize pairing product computation by moving exponentiations to G1. by \u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esign: Adding SLH-DSA signature by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/512\"\u003ecloudflare/circl#512\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate code generators to CIRCL v1.6.1. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/548\"\u003ecloudflare/circl#548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eML-DSA: Add preliminary Wycheproof test vectors by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/552\"\u003ecloudflare/circl#552\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ego fmt by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/554\"\u003ecloudflare/circl#554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egz-compressing test vectors, use of HexBytes and ReadGzip functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/555\"\u003ecloudflare/circl#555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Removes use of elliptic Marshal and Unmarshal functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/556\"\u003ecloudflare/circl#556\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport encoding/decoding ML-DSA private keys (as long as they contain seeds) by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/559\"\u003ecloudflare/circl#559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to golangci-lint v2 by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/560\"\u003ecloudflare/circl#560\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreparation for ARM64 Implementation of poly operations for dilithium package. by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eprepare power2Round for custom implementations in assembly by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/564\"\u003ecloudflare/circl#564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eARM64 implementation for poly.PackLe16 by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/563\"\u003ecloudflare/circl#563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polyMulBy2toD by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/565\"\u003ecloudflare/circl#565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polySub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/566\"\u003ecloudflare/circl#566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: add byteLen method for short groups and RandomScalar uses rand.Int by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/568\"\u003ecloudflare/circl#568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of poly.Add/Sub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/572\"\u003ecloudflare/circl#572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Adding cryptobyte marshaling to scalars by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/569\"\u003ecloudflare/circl#569\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumping up to Go1.25 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/574\"\u003ecloudflare/circl#574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: Including WASM compilation. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/577\"\u003ecloudflare/circl#577\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to using package-declared HPKE errors for shortkem instead of standard library errors by \u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease v1.6.2 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/579\"\u003ecloudflare/circl#579\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixes some point checks on the FourQ curve.\u003c/li\u003e\n\u003cli\u003eHybrid KEM fails on low-order points.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/24ae53c5d6f7fe18203adc125ba3ed76a38703e1\"\u003e\u003ccode\u003e24ae53c\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/581020bd4a836b8ce7bd4e414ba2884c07dbc906\"\u003e\u003ccode\u003e581020b\u003c/code\u003e\u003c/a\u003e Rename method to oddMultiplesProjective.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/12209a4566605692a8402594e367a5aed5148460\"\u003e\u003ccode\u003e12209a4\u003c/code\u003e\u003c/a\u003e Removing unused cmov for jacobian points.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/fcba359f4178645d2c9e50f29ab6966337da4b95\"\u003e\u003ccode\u003efcba359\u003c/code\u003e\u003c/a\u003e ecc/p384: use of complete projective formulas for scalar multiplication.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/5e1bae8d8c2df4e717c2c5c2d5b5d60b629b2ac6\"\u003e\u003ccode\u003e5e1bae8\u003c/code\u003e\u003c/a\u003e ecc/p384: handle point doubling in point addition with Jacobian coordinates.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/341604685ff97e8f7440ae4b4711ba1c118c648c\"\u003e\u003ccode\u003e3416046\u003c/code\u003e\u003c/a\u003e Check opts for nil value.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/a763d47a6dce43d1f4f7b697d1d7810463a526f6\"\u003e\u003ccode\u003ea763d47\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3c70bf9ad53b681fbe5ba6067e454a86549fee8a\"\u003e\u003ccode\u003e3c70bf9\u003c/code\u003e\u003c/a\u003e Bump x/crypto x/sys dependencies.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3f0f15b2bfe67bad81a35e8aec81ae42ca78349d\"\u003e\u003ccode\u003e3f0f15b\u003c/code\u003e\u003c/a\u003e Revert to using package-declared HPKE errors for shortkem instead of standard...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/23491bd573cf29b6f567057a158203a2c9dfa30d\"\u003e\u003ccode\u003e23491bd\u003c/code\u003e\u003c/a\u003e Adding generic Power2Round method.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.0...v1.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/cloudflare/circl\u0026package-manager=go_modules\u0026previous-version=1.6.0\u0026new-version=1.6.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/justinwoo280/ech-keymgr/pull/1","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/justinwoo280%2Fech-keymgr/issues/1","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1/packages"},{"uuid":"4366838237","node_id":"PR_kwDOAQ6W1c7Ximy1","number":446,"state":"closed","title":"Bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 in /src/hockeypuck","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-05-01T21:57:15.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-01T21:55:05.000Z","updated_at":"2026-05-01T21:57:25.000Z","time_to_close":130,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"github.com/cloudflare/circl","old_version":"1.6.1","new_version":"1.6.3","repository_url":"https://github.com/cloudflare/circl"}],"path":"/src/hockeypuck","ecosystem":"go"},"body":"Bumps [github.com/cloudflare/circl](https://github.com/cloudflare/circl) from 1.6.1 to 1.6.3.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cloudflare/circl/releases\"\u003egithub.com/cloudflare/circl's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eCIRCL v1.6.3\u003c/h2\u003e\n\u003cp\u003eFix a bug on ecc/p384 scalar multiplication.\u003c/p\u003e\n\u003ch3\u003eWhat's Changed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esign/mldsa: Check opts for nil value  by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/582\"\u003ecloudflare/circl#582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eecc/p384: Point addition must handle point doubling case. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/583\"\u003ecloudflare/circl#583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease CIRCL v1.6.3 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/584\"\u003ecloudflare/circl#584\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNew SLH-DSA, improvements in ML-DSA for arm64.\u003c/li\u003e\n\u003cli\u003eTested compilation on WASM.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize pairing product computation by moving exponentiations to G1. by \u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esign: Adding SLH-DSA signature by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/512\"\u003ecloudflare/circl#512\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate code generators to CIRCL v1.6.1. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/548\"\u003ecloudflare/circl#548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eML-DSA: Add preliminary Wycheproof test vectors by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/552\"\u003ecloudflare/circl#552\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ego fmt by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/554\"\u003ecloudflare/circl#554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egz-compressing test vectors, use of HexBytes and ReadGzip functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/555\"\u003ecloudflare/circl#555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Removes use of elliptic Marshal and Unmarshal functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/556\"\u003ecloudflare/circl#556\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport encoding/decoding ML-DSA private keys (as long as they contain seeds) by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/559\"\u003ecloudflare/circl#559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to golangci-lint v2 by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/560\"\u003ecloudflare/circl#560\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreparation for ARM64 Implementation of poly operations for dilithium package. by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eprepare power2Round for custom implementations in assembly by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/564\"\u003ecloudflare/circl#564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eARM64 implementation for poly.PackLe16 by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/563\"\u003ecloudflare/circl#563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polyMulBy2toD by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/565\"\u003ecloudflare/circl#565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polySub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/566\"\u003ecloudflare/circl#566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: add byteLen method for short groups and RandomScalar uses rand.Int by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/568\"\u003ecloudflare/circl#568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of poly.Add/Sub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/572\"\u003ecloudflare/circl#572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Adding cryptobyte marshaling to scalars by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/569\"\u003ecloudflare/circl#569\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumping up to Go1.25 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/574\"\u003ecloudflare/circl#574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: Including WASM compilation. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/577\"\u003ecloudflare/circl#577\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to using package-declared HPKE errors for shortkem instead of standard library errors by \u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease v1.6.2 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/579\"\u003ecloudflare/circl#579\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/24ae53c5d6f7fe18203adc125ba3ed76a38703e1\"\u003e\u003ccode\u003e24ae53c\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/581020bd4a836b8ce7bd4e414ba2884c07dbc906\"\u003e\u003ccode\u003e581020b\u003c/code\u003e\u003c/a\u003e Rename method to oddMultiplesProjective.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/12209a4566605692a8402594e367a5aed5148460\"\u003e\u003ccode\u003e12209a4\u003c/code\u003e\u003c/a\u003e Removing unused cmov for jacobian points.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/fcba359f4178645d2c9e50f29ab6966337da4b95\"\u003e\u003ccode\u003efcba359\u003c/code\u003e\u003c/a\u003e ecc/p384: use of complete projective formulas for scalar multiplication.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/5e1bae8d8c2df4e717c2c5c2d5b5d60b629b2ac6\"\u003e\u003ccode\u003e5e1bae8\u003c/code\u003e\u003c/a\u003e ecc/p384: handle point doubling in point addition with Jacobian coordinates.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/341604685ff97e8f7440ae4b4711ba1c118c648c\"\u003e\u003ccode\u003e3416046\u003c/code\u003e\u003c/a\u003e Check opts for nil value.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/a763d47a6dce43d1f4f7b697d1d7810463a526f6\"\u003e\u003ccode\u003ea763d47\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3c70bf9ad53b681fbe5ba6067e454a86549fee8a\"\u003e\u003ccode\u003e3c70bf9\u003c/code\u003e\u003c/a\u003e Bump x/crypto x/sys dependencies.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3f0f15b2bfe67bad81a35e8aec81ae42ca78349d\"\u003e\u003ccode\u003e3f0f15b\u003c/code\u003e\u003c/a\u003e Revert to using package-declared HPKE errors for shortkem instead of standard...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/23491bd573cf29b6f567057a158203a2c9dfa30d\"\u003e\u003ccode\u003e23491bd\u003c/code\u003e\u003c/a\u003e Adding generic Power2Round method.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/cloudflare/circl\u0026package-manager=go_modules\u0026previous-version=1.6.1\u0026new-version=1.6.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/hockeypuck/hockeypuck/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/hockeypuck/hockeypuck/pull/446","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/hockeypuck%2Fhockeypuck/issues/446","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/446/packages"},{"uuid":"4285717455","node_id":"PR_kwDOCLDSb87TeDEU","number":1061,"state":"open","title":"Bump github.com/cloudflare/circl from 1.3.7 to 1.6.3","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-04-17T22:47:10.000Z","updated_at":"2026-04-17T22:49:34.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"github.com/cloudflare/circl","old_version":"1.3.7","new_version":"1.6.3","repository_url":"https://github.com/cloudflare/circl"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/cloudflare/circl](https://github.com/cloudflare/circl) from 1.3.7 to 1.6.3.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cloudflare/circl/releases\"\u003egithub.com/cloudflare/circl's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eCIRCL v1.6.3\u003c/h2\u003e\n\u003cp\u003eFix a bug on ecc/p384 scalar multiplication.\u003c/p\u003e\n\u003ch3\u003eWhat's Changed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esign/mldsa: Check opts for nil value  by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/582\"\u003ecloudflare/circl#582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eecc/p384: Point addition must handle point doubling case. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/583\"\u003ecloudflare/circl#583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease CIRCL v1.6.3 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/584\"\u003ecloudflare/circl#584\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNew SLH-DSA, improvements in ML-DSA for arm64.\u003c/li\u003e\n\u003cli\u003eTested compilation on WASM.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize pairing product computation by moving exponentiations to G1. by \u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esign: Adding SLH-DSA signature by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/512\"\u003ecloudflare/circl#512\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate code generators to CIRCL v1.6.1. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/548\"\u003ecloudflare/circl#548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eML-DSA: Add preliminary Wycheproof test vectors by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/552\"\u003ecloudflare/circl#552\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ego fmt by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/554\"\u003ecloudflare/circl#554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egz-compressing test vectors, use of HexBytes and ReadGzip functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/555\"\u003ecloudflare/circl#555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Removes use of elliptic Marshal and Unmarshal functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/556\"\u003ecloudflare/circl#556\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport encoding/decoding ML-DSA private keys (as long as they contain seeds) by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/559\"\u003ecloudflare/circl#559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to golangci-lint v2 by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/560\"\u003ecloudflare/circl#560\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreparation for ARM64 Implementation of poly operations for dilithium package. by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eprepare power2Round for custom implementations in assembly by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/564\"\u003ecloudflare/circl#564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eARM64 implementation for poly.PackLe16 by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/563\"\u003ecloudflare/circl#563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polyMulBy2toD by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/565\"\u003ecloudflare/circl#565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polySub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/566\"\u003ecloudflare/circl#566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: add byteLen method for short groups and RandomScalar uses rand.Int by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/568\"\u003ecloudflare/circl#568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of poly.Add/Sub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/572\"\u003ecloudflare/circl#572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Adding cryptobyte marshaling to scalars by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/569\"\u003ecloudflare/circl#569\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumping up to Go1.25 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/574\"\u003ecloudflare/circl#574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: Including WASM compilation. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/577\"\u003ecloudflare/circl#577\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to using package-declared HPKE errors for shortkem instead of standard library errors by \u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease v1.6.2 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/579\"\u003ecloudflare/circl#579\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixes some point checks on the FourQ curve.\u003c/li\u003e\n\u003cli\u003eHybrid KEM fails on low-order points.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/24ae53c5d6f7fe18203adc125ba3ed76a38703e1\"\u003e\u003ccode\u003e24ae53c\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/581020bd4a836b8ce7bd4e414ba2884c07dbc906\"\u003e\u003ccode\u003e581020b\u003c/code\u003e\u003c/a\u003e Rename method to oddMultiplesProjective.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/12209a4566605692a8402594e367a5aed5148460\"\u003e\u003ccode\u003e12209a4\u003c/code\u003e\u003c/a\u003e Removing unused cmov for jacobian points.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/fcba359f4178645d2c9e50f29ab6966337da4b95\"\u003e\u003ccode\u003efcba359\u003c/code\u003e\u003c/a\u003e ecc/p384: use of complete projective formulas for scalar multiplication.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/5e1bae8d8c2df4e717c2c5c2d5b5d60b629b2ac6\"\u003e\u003ccode\u003e5e1bae8\u003c/code\u003e\u003c/a\u003e ecc/p384: handle point doubling in point addition with Jacobian coordinates.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/341604685ff97e8f7440ae4b4711ba1c118c648c\"\u003e\u003ccode\u003e3416046\u003c/code\u003e\u003c/a\u003e Check opts for nil value.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/a763d47a6dce43d1f4f7b697d1d7810463a526f6\"\u003e\u003ccode\u003ea763d47\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3c70bf9ad53b681fbe5ba6067e454a86549fee8a\"\u003e\u003ccode\u003e3c70bf9\u003c/code\u003e\u003c/a\u003e Bump x/crypto x/sys dependencies.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3f0f15b2bfe67bad81a35e8aec81ae42ca78349d\"\u003e\u003ccode\u003e3f0f15b\u003c/code\u003e\u003c/a\u003e Revert to using package-declared HPKE errors for shortkem instead of standard...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/23491bd573cf29b6f567057a158203a2c9dfa30d\"\u003e\u003ccode\u003e23491bd\u003c/code\u003e\u003c/a\u003e Adding generic Power2Round method.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.3.7...v1.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/cloudflare/circl\u0026package-manager=go_modules\u0026previous-version=1.3.7\u0026new-version=1.6.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/rocket-pool/smartnode/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/rocket-pool/smartnode/pull/1061","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/rocket-pool%2Fsmartnode/issues/1061","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1061/packages"},{"uuid":"4278495348","node_id":"PR_kwDOPz0Zb87TGw0p","number":37,"state":"closed","title":"Bump the go_modules group across 18 directories with 12 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-04-16T22:16:56.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-16T20:57:30.000Z","updated_at":"2026-04-16T22:16:58.000Z","time_to_close":4766,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"go_modules","update_count":12,"packages":[{"name":"github.com/go-jose/go-jose/v4","old_version":"4.1.2","new_version":"4.1.4","repository_url":"https://github.com/go-jose/go-jose"},{"name":"github.com/openfga/openfga","old_version":"1.10.0","new_version":"1.14.0","repository_url":"https://github.com/openfga/openfga"},{"name":"github.com/russellhaering/goxmldsig","old_version":"1.4.0","new_version":"1.6.0","repository_url":"https://github.com/russellhaering/goxmldsig"},{"name":"github.com/buger/jsonparser","old_version":"1.1.1","new_version":"1.1.2","repository_url":"https://github.com/buger/jsonparser"},{"name":"github.com/cloudflare/circl","old_version":"1.6.1","new_version":"1.6.3","repository_url":"https://github.com/cloudflare/circl"},{"name":"github.com/moby/spdystream","old_version":"0.5.0","new_version":"0.5.1","repository_url":"https://github.com/moby/spdystream"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 6 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) | `4.1.2` | `4.1.4` |\n| [github.com/openfga/openfga](https://github.com/openfga/openfga) | `1.10.0` | `1.14.0` |\n| [github.com/russellhaering/goxmldsig](https://github.com/russellhaering/goxmldsig) | `1.4.0` | `1.6.0` |\n| [github.com/buger/jsonparser](https://github.com/buger/jsonparser) | `1.1.1` | `1.1.2` |\n| [github.com/cloudflare/circl](https://github.com/cloudflare/circl) | `1.6.1` | `1.6.3` |\n| [github.com/moby/spdystream](https://github.com/moby/spdystream) | `0.5.0` | `0.5.1` |\n\nBumps the go_modules group with 1 update in the /.citools/src/air directory: [github.com/gohugoio/hugo](https://github.com/gohugoio/hugo).\nBumps the go_modules group with 3 updates in the /apps/alerting/notifications directory: [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go).\nBumps the go_modules group with 3 updates in the /apps/alerting/rules directory: [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go).\nBumps the go_modules group with 3 updates in the /apps/correlations directory: [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go).\nBumps the go_modules group with 3 updates in the /apps/dashboard directory: [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 4 updates in the /apps/iam directory: [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose), [github.com/openfga/openfga](https://github.com/openfga/openfga), [github.com/buger/jsonparser](https://github.com/buger/jsonparser) and [github.com/cloudflare/circl](https://github.com/cloudflare/circl).\nBumps the go_modules group with 3 updates in the /apps/investigations directory: [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go).\nBumps the go_modules group with 3 updates in the /apps/playlist directory: [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go).\nBumps the go_modules group with 4 updates in the /apps/plugins directory: [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go).\nBumps the go_modules group with 2 updates in the /apps/provisioning directory: [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 1 update in the /apps/secret directory: [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 4 updates in the /apps/shorturl directory: [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go).\nBumps the go_modules group with 2 updates in the /pkg/aggregator directory: [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 2 updates in the /pkg/apimachinery directory: [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 3 updates in the /pkg/apiserver directory: [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 3 updates in the /pkg/build directory: [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go).\nBumps the go_modules group with 3 updates in the /pkg/promlib directory: [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [github.com/buger/jsonparser](https://github.com/buger/jsonparser).\n\nUpdates `github.com/go-jose/go-jose/v4` from 4.1.2 to 4.1.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-jose/go-jose/releases\"\u003egithub.com/go-jose/go-jose/v4's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.1.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003eFixes Panic in JWE decryption. See \u003ca href=\"https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\"\u003ehttps://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4\"\u003ehttps://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.1.3\u003c/h2\u003e\n\u003cp\u003eThis release drops Go 1.23 support as that Go release is no longer supported. With that, we can drop \u003ccode\u003ex/crypto\u003c/code\u003e and no longer have any external dependencies in go-jose outside of the standard library!\u003c/p\u003e\n\u003cp\u003eThis release fixes a bug where a critical b64 header was ignored if in an unprotected header. It is now rejected instead of ignored.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemove Go 1.23 support by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/205\"\u003ego-jose/go-jose#205\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReject JWS with an unprotected critical b64 header by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/210\"\u003ego-jose/go-jose#210\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.2...v4.1.3\"\u003ehttps://github.com/go-jose/go-jose/compare/v4.1.2...v4.1.3\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/0e59876635f3dbf46d7b5e97b52bb75a3f96e7d9\"\u003e\u003ccode\u003e0e59876\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/ddffdbcec8bdadea8e02a20bdf19239878228215\"\u003e\u003ccode\u003eddffdbc\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 5 to 6 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/213\"\u003e#213\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/5348b9a4ba4559d2266b5af89fb5353cd1a5360a\"\u003e\u003ccode\u003e5348b9a\u003c/code\u003e\u003c/a\u003e Reject JWS with an unprotected critical b64 header (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/210\"\u003e#210\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/9153a5e4549c95e97a84e41e6375dc90eac54241\"\u003e\u003ccode\u003e9153a5e\u003c/code\u003e\u003c/a\u003e Bump actions/setup-python from 5 to 6 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/208\"\u003e#208\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/2126e17f8791f6a234e63b2e4e8cb9fac8605c3a\"\u003e\u003ccode\u003e2126e17\u003c/code\u003e\u003c/a\u003e Bump actions/setup-go from 5 to 6 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/209\"\u003e#209\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/9860c65054c4821d1e7c22200422b04181f58ebc\"\u003e\u003ccode\u003e9860c65\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 4 to 5 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/206\"\u003e#206\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/14239fdb15b88e1c42e41621ef24f1112cf31b5a\"\u003e\u003ccode\u003e14239fd\u003c/code\u003e\u003c/a\u003e Remove Go 1.23 support (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/205\"\u003e#205\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/a16e15813482ca5e9a679b7f5bb42ddfae616d43\"\u003e\u003ccode\u003ea16e158\u003c/code\u003e\u003c/a\u003e Update CI to run on Go 1.24 and 1.25 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/204\"\u003e#204\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.2...v4.1.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/openfga/openfga` from 1.10.0 to 1.14.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/openfga/openfga/releases\"\u003egithub.com/openfga/openfga's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.14.0\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003eopenfga_iter_query_duration_ms\u003c/code\u003e histogram metric to track storage iterator query latency across all storage backends, labeled by \u003ccode\u003esuccess\u003c/code\u003e. The metric is recorded in each backend's \u003ccode\u003efetchBuffer\u003c/code\u003e after error classification: infrastructure failures are labeled \u003ccode\u003esuccess=false\u003c/code\u003e; expected storage outcomes (\u003ccode\u003eErrNotFound\u003c/code\u003e, \u003ccode\u003eErrCollision\u003c/code\u003e, \u003ccode\u003eErrInvalidWriteInput\u003c/code\u003e) are labeled \u003ccode\u003esuccess=true\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3030\"\u003e#3030\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eChanged the ListObjects pipeline intersection algorithm to improve intersection performance. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3031\"\u003e#3031\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[BREAKING]\u003c/strong\u003e The Playground now only supports the \u003ccode\u003enone\u003c/code\u003e authentication method. Running the Playground with \u003ccode\u003epreshared\u003c/code\u003e key authentication is no longer supported. The server will error and not start if it detects this combination.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeprecated\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe built-in OpenFGA Playground is intended for development purposes only and is deprecated. It will be removed entirely in a future release.\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003e--playground-port\u003c/code\u003e flag and \u003ccode\u003eOPENFGA_PLAYGROUND_PORT\u003c/code\u003e environment variable are deprecated. Use \u003ccode\u003e--playground-addr\u003c/code\u003e (\u003ccode\u003eOPENFGA_PLAYGROUND_ADDR\u003c/code\u003e) instead to specify the full \u003ccode\u003ehost:port\u003c/code\u003e address for the Playground server. When \u003ccode\u003e--playground-addr\u003c/code\u003e is not set, the Playground binds to \u003ccode\u003e127.0.0.1\u003c/code\u003e using the port from \u003ccode\u003e--playground-port\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Write operations failing with \u003ccode\u003einvalid input syntax for type integer\u003c/code\u003e (SQLSTATE 22P02) when PostgreSQL is behind PgBouncer or a connection pooler using the simple query protocol. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3014\"\u003e#3014\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed PostgreSQL \u003ccode\u003eHandleSQLError\u003c/code\u003e and \u003ccode\u003eGetStore\u003c/code\u003e returning a wrapped error instead of \u003ccode\u003estorage.ErrNotFound\u003c/code\u003e when no rows are found. When using pgxpool directly, \u003ccode\u003eQueryRow().Scan()\u003c/code\u003e returns \u003ccode\u003epgx.ErrNoRows\u003c/code\u003e, not \u003ccode\u003esql.ErrNoRows\u003c/code\u003e; both are now handled. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3014\"\u003e#3014\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed the possibility of deadlocks within the ListObjects pipeline algorithm. Also added short-circuit enhancements that will reduce latency and message processing in certain scenarios. Cyclical edges now use as much memory as necessary to process deep and wide data hierarchies without the risk of a deadlock. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3028\"\u003e#3028\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed issue where BatchCheck calls with multiple checks for the same tuple could result in improper policy enforcement. \u003ca href=\"https://github.com/openfga/openfga/security/advisories/GHSA-jwvj-g8pc-cx45\"\u003eCVE-2026-34972\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/openfga/openfga/compare/v1.13.1...v1.14.0\"\u003ehttps://github.com/openfga/openfga/compare/v1.13.1...v1.14.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.13.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a security vulnerability (\u003ca href=\"https://github.com/openfga/openfga/security/advisories/GHSA-h6c8-cww8-35hf\"\u003eCVE-2026-33729\u003c/a\u003e) where Check requests with conditions and caching enabled could return incorrect cached results.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/openfga/openfga/compare/v1.13.0...v1.13.1\"\u003ehttps://github.com/openfga/openfga/compare/v1.13.0...v1.13.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.13.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAuthZen v1.0 Implementation by \u003ca href=\"https://github.com/aaguiarz\"\u003e\u003ccode\u003e@​aaguiarz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2875\"\u003eopenfga/openfga#2875\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: fix typos in RELEASES.md and Makefile by \u003ca href=\"https://github.com/kanywst\"\u003e\u003ccode\u003e@​kanywst\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2980\"\u003eopenfga/openfga#2980\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: capture panics in pipeline's base resolver, and return as errors. by \u003ca href=\"https://github.com/senojj\"\u003e\u003ccode\u003e@​senojj\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2994\"\u003eopenfga/openfga#2994\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eobservability: aggregate message statistics for each list-objects sender into a single span by \u003ca href=\"https://github.com/senojj\"\u003e\u003ccode\u003e@​senojj\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2993\"\u003eopenfga/openfga#2993\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: fix typos in comments by \u003ca href=\"https://github.com/archy-rock3t-cloud\"\u003e\u003ccode\u003e@​archy-rock3t-cloud\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2972\"\u003eopenfga/openfga#2972\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: Separate caches for v1 and v2 Check by \u003ca href=\"https://github.com/saad-h1\"\u003e\u003ccode\u003e@​saad-h1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2968\"\u003eopenfga/openfga#2968\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erelease: update changelog for release \u003ccode\u003ev1.13.0\u003c/code\u003e by \u003ca href=\"https://github.com/poovamraj\"\u003e\u003ccode\u003e@​poovamraj\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2997\"\u003eopenfga/openfga#2997\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kanywst\"\u003e\u003ccode\u003e@​kanywst\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2980\"\u003eopenfga/openfga#2980\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/openfga/openfga/compare/v1.12.1...v1.13.0\"\u003ehttps://github.com/openfga/openfga/compare/v1.12.1...v1.13.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.12.1\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe ListObjects \u0026quot;pipeline\u0026quot; algorithm ditches its custom Pipe implementation and replaces it with Go native channels. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2977\"\u003e#2977\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRefactor tuple validation and manipulation functions for optimal performance. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2984\"\u003e#2984\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/openfga/openfga/blob/main/CHANGELOG.md\"\u003egithub.com/openfga/openfga's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.14.0] - 2026-04-03\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003eopenfga_iter_query_duration_ms\u003c/code\u003e histogram metric to track storage iterator query latency across all storage backends, labeled by \u003ccode\u003esuccess\u003c/code\u003e. The metric is recorded in each backend's \u003ccode\u003efetchBuffer\u003c/code\u003e after error classification: infrastructure failures are labeled \u003ccode\u003esuccess=false\u003c/code\u003e; expected storage outcomes (\u003ccode\u003eErrNotFound\u003c/code\u003e, \u003ccode\u003eErrCollision\u003c/code\u003e, \u003ccode\u003eErrInvalidWriteInput\u003c/code\u003e) are labeled \u003ccode\u003esuccess=true\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3030\"\u003e#3030\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eChanged the ListObjects pipeline intersection algorithm to improve intersection performance. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3031\"\u003e#3031\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[BREAKING]\u003c/strong\u003e The Playground now only supports the \u003ccode\u003enone\u003c/code\u003e authentication method. Running the Playground with \u003ccode\u003epreshared\u003c/code\u003e key authentication is no longer supported. The server will error and not start if it detects this combination.\u003c/li\u003e\n\u003cli\u003eThe Playground is now disabled by default as a result of \u003ca href=\"https://github.com/openfga/openfga/security/advisories/GHSA-68m9-983m-f3v5\"\u003eGHSA-68m9-983m-f3v5\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeprecated\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe built-in OpenFGA Playground is intended for development purposes only and is deprecated. It will be removed entirely in a future release.\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003e--playground-port\u003c/code\u003e flag and \u003ccode\u003eOPENFGA_PLAYGROUND_PORT\u003c/code\u003e environment variable are deprecated. Use \u003ccode\u003e--playground-addr\u003c/code\u003e (\u003ccode\u003eOPENFGA_PLAYGROUND_ADDR\u003c/code\u003e) instead to specify the full \u003ccode\u003ehost:port\u003c/code\u003e address for the Playground server. When \u003ccode\u003e--playground-addr\u003c/code\u003e is not set, the Playground binds to \u003ccode\u003e127.0.0.1\u003c/code\u003e using the port from \u003ccode\u003e--playground-port\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Write operations failing with \u003ccode\u003einvalid input syntax for type integer\u003c/code\u003e (SQLSTATE 22P02) when PostgreSQL is behind PgBouncer or a connection pooler using the simple query protocol. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3014\"\u003e#3014\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed PostgreSQL \u003ccode\u003eHandleSQLError\u003c/code\u003e and \u003ccode\u003eGetStore\u003c/code\u003e returning a wrapped error instead of \u003ccode\u003estorage.ErrNotFound\u003c/code\u003e when no rows are found. When using pgxpool directly, \u003ccode\u003eQueryRow().Scan()\u003c/code\u003e returns \u003ccode\u003epgx.ErrNoRows\u003c/code\u003e, not \u003ccode\u003esql.ErrNoRows\u003c/code\u003e; both are now handled. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3014\"\u003e#3014\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed the possibility of deadlocks within the ListObjects pipeline algorithm. Also added short-circuit enhancements that will reduce latency and message processing in certain scenarios. Cyclical edges now use as much memory as necessary to process deep and wide data hierarchies without the risk of a deadlock. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3028\"\u003e#3028\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed issue where BatchCheck calls with multiple checks for the same tuple could result in improper policy enforcement. \u003ca href=\"https://github.com/openfga/openfga/security/advisories/GHSA-jwvj-g8pc-cx45\"\u003eCVE-2026-34972\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.13.1] - 2026-03-24\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a security vulnerability (\u003ca href=\"https://github.com/openfga/openfga/security/advisories/GHSA-h6c8-cww8-35hf\"\u003eCVE-2026-33729\u003c/a\u003e) where Check requests with conditions and caching enabled could return incorrect cached results.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.13.0] - 2026-03-23\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd AuthZen 1.0 experimental support. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2875\"\u003e#2875\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent recoverable panics in list objects from terminating the process. Return an error instead. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2994\"\u003e#2994\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.12.1] - 2026-03-19\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe ListObjects \u0026quot;pipeline\u0026quot; algorithm ditches its custom Pipe implementation and replaces it with Go native channels. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2977\"\u003e#2977\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRefactor tuple validation and manipulation functions for optimal performance. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2984\"\u003e#2984\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate grpc-go version to v1.79.3 and grpc-health-probe to v0.4.47. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2988\"\u003e#2988\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eOTEL_EXPORTER_OTLP_ENDPOINT\u003c/code\u003e not accepting URIs with schemes (e.g. \u003ccode\u003ehttp://host:4317\u003c/code\u003e). The scheme is now stripped before passing to the gRPC exporter, and an \u003ccode\u003ehttps://\u003c/code\u003e scheme enables TLS regardless of the \u003ccode\u003etrace.otlp.tls.enabled\u003c/code\u003e flag. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2981\"\u003e#2981\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.12.0] - 2026-03-13\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd AuthZen 1.0 experimental support. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2875\"\u003e#2875\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd configuration for maximum size of received gRPC message bytes. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2952\"\u003e#2952\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP gateway's internal gRPC client now uses dynamic TLS credentials that automatically update on certificate rotation via certwatcher, preventing connection failures when certificates are rotated (e.g., by cert-manager). \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2951\"\u003e#2951\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eTuple validation will now fail when any unicode control characters, or null bytes are present within a tuple string. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2963\"\u003e#2963\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed swapped format arguments in \u003ccode\u003eDecodeParameterType\u003c/code\u003e error message that reported required and found generic type counts in the wrong order. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2961\"\u003e#2961\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/40e6b410825813d1d394d7371c5ca31cad17f517\"\u003e\u003ccode\u003e40e6b41\u003c/code\u003e\u003c/a\u003e release: update changelog for release \u003ccode\u003ev1.14.0\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3040\"\u003e#3040\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/6b69a3b6f7aa4f3252f06bf77048bb7c8b9c7f23\"\u003e\u003ccode\u003e6b69a3b\u003c/code\u003e\u003c/a\u003e batch check cache (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3025\"\u003e#3025\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/81373f28921554ab41232af10f762180d461a776\"\u003e\u003ccode\u003e81373f2\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/1de968515cd4e0a98e809f5cc0e274d298824388\"\u003e\u003ccode\u003e1de9685\u003c/code\u003e\u003c/a\u003e feat: add stats on tuple iterator query (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3030\"\u003e#3030\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/68e053f3237d1b3ff2a98d4683eb6b96415aee55\"\u003e\u003ccode\u003e68e053f\u003c/code\u003e\u003c/a\u003e fix: remove unnecessary non-deterministic test (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3038\"\u003e#3038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/8373f2888c272c18d34cf3c096886671f3e73208\"\u003e\u003ccode\u003e8373f28\u003c/code\u003e\u003c/a\u003e remove unnecessary import (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3032\"\u003e#3032\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/342a78306ec83e025ee78ec7d17cdba2063d718a\"\u003e\u003ccode\u003e342a783\u003c/code\u003e\u003c/a\u003e perf: improve the intersection algorithm, reducing latency and memory use (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3\"\u003e#3\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/c75b5f0a4c6e503b1af04c8555f52ee4e037979d\"\u003e\u003ccode\u003ec75b5f0\u003c/code\u003e\u003c/a\u003e fix: ListObjects pipeline algorithm enhancements and fix for potential deadlo...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/1a44a05316e001165b3ea0e22e71a107c785ddc5\"\u003e\u003ccode\u003e1a44a05\u003c/code\u003e\u003c/a\u003e chore: Also update openfga/helm-charts in release script (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3010\"\u003e#3010\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/60dd7f563d36413e481cbfbd634e6549cef15588\"\u003e\u003ccode\u003e60dd7f5\u003c/code\u003e\u003c/a\u003e chore: update CICD to enforce GRPC healthprobe changes (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/2990\"\u003e#2990\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/openfga/openfga/compare/v1.10.0...v1.14.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/russellhaering/goxmldsig` from 1.4.0 to 1.6.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/russellhaering/goxmldsig/releases\"\u003egithub.com/russellhaering/goxmldsig's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.6.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eSecurity:\u003c/strong\u003e Fix possible signature validation bypass caused by loop variable capture in \u003ccode\u003evalidateSignature\u003c/code\u003e (GHSA-479m-364c-43vc)\u003c/li\u003e\n\u003cli\u003eBump minimum Go version to 1.23\u003c/li\u003e\n\u003cli\u003eBump \u003ccode\u003egithub.com/beevik/etree\u003c/code\u003e to v1.6.0\u003c/li\u003e\n\u003cli\u003eAdd fuzz tests for XML signature validation and canonicalization\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/russellhaering/goxmldsig/compare/v1.5.0...v1.6.0\"\u003ehttps://github.com/russellhaering/goxmldsig/compare/v1.5.0...v1.6.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.5.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump dependencies\u003c/li\u003e\n\u003cli\u003eUpdate GitHub workflows\u003c/li\u003e\n\u003cli\u003eSecurity hardening by \u003ca href=\"https://github.com/ahacker1-securesaml\"\u003e\u003ccode\u003e@​ahacker1-securesaml\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/russellhaering/goxmldsig/compare/v1.4.0...v1.5.0\"\u003ehttps://github.com/russellhaering/goxmldsig/compare/v1.4.0...v1.5.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/878c8c615feb628064040115d00e105a137fcfa7\"\u003e\u003ccode\u003e878c8c6\u003c/code\u003e\u003c/a\u003e Apply go fix ./...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/db3d1e31f7535d7f5debb49851b9e9a2ff08b936\"\u003e\u003ccode\u003edb3d1e3\u003c/code\u003e\u003c/a\u003e Fix loop variable capture bug in validateSignature\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/4f576b89acf01f68983ca5cb9dcebd0b460234bc\"\u003e\u003ccode\u003e4f576b8\u003c/code\u003e\u003c/a\u003e Bump dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/79c29ee3ed2da54553a4132b372ced83185fcf12\"\u003e\u003ccode\u003e79c29ee\u003c/code\u003e\u003c/a\u003e Rename FuzzValidate to FuzzValidateXML to avoid name collision\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/ac7bf745b9fd3d92460ad9be3459a97b0e3bf89f\"\u003e\u003ccode\u003eac7bf74\u003c/code\u003e\u003c/a\u003e Add fuzz tests for XML signature validation and canonicalization\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/a5805dfad93fc67a2106a1dc6d881df83769e3eb\"\u003e\u003ccode\u003ea5805df\u003c/code\u003e\u003c/a\u003e Bump github/codeql-action from 2.13.4 to 3.28.17 (\u003ca href=\"https://redirect.github.com/russellhaering/goxmldsig/issues/155\"\u003e#155\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/7dac9ec3b2a1a336d73ff091fba4131d186dfec6\"\u003e\u003ccode\u003e7dac9ec\u003c/code\u003e\u003c/a\u003e Update GitHub Workflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/1bf54ca740682fac1149814344c24c722fde8238\"\u003e\u003ccode\u003e1bf54ca\u003c/code\u003e\u003c/a\u003e Bump dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/e1c8a5b89d1d03089aa1a0ec546b33aaf80ee02f\"\u003e\u003ccode\u003ee1c8a5b\u003c/code\u003e\u003c/a\u003e Refactor to help eliminate potential vulnerabilities:\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/2ac5490a2441a3484e030c5cfeb02ce62886c01a\"\u003e\u003ccode\u003e2ac5490\u003c/code\u003e\u003c/a\u003e Refactor .verifyCertificate to obtain the certificate from an identifier from...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/russellhaering/goxmldsig/compare/v1.4.0...v1.6.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/sdk` from 1.38.0 to 1.42.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/sdk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.43.0/0.65.0/0.19.0] 2026-04-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eIsRandom\u003c/code\u003e and \u003ccode\u003eWithRandom\u003c/code\u003e on \u003ccode\u003eTraceFlags\u003c/code\u003e, and \u003ccode\u003eIsRandom\u003c/code\u003e on \u003ccode\u003eSpanContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e for \u003ca href=\"https://www.w3.org/TR/trace-context-2/#random-trace-id-flag\"\u003eW3C Trace Context Level 2 Random Trace ID Flag\u003c/a\u003e support. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012\"\u003e#8012\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd service detection with \u003ccode\u003eWithService\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642\"\u003e#7642\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eDefaultWithContext\u003c/code\u003e and \u003ccode\u003eEnvironmentWithContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to support plumbing \u003ccode\u003econtext.Context\u003c/code\u003e through default and environment detectors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051\"\u003e#8051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd support for per-series start time tracking for cumulative metrics in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true\u003c/code\u003e to enable. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060\"\u003e#8060\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithCardinalityLimitSelector\u003c/code\u003e for metric reader for configuring cardinality limits specific to the instrument kind. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855\"\u003e#7855\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce the \u003ccode\u003eEMPTY\u003c/code\u003e Type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to reflect that an empty value is now a valid value, with \u003ccode\u003eINVALID\u003c/code\u003e remaining as a deprecated alias of \u003ccode\u003eEMPTY\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove slice handling in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to optimize short slice values with fixed-size fast paths. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039\"\u003e#8039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of span metric recording in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e by returning early if self-observability is not enabled. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067\"\u003e#8067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove formatting of metric data diffs in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073\"\u003e#8073\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeprecated\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eINVALID\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. Use \u003ccode\u003eEMPTY\u003c/code\u003e instead. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReturn spec-compliant \u003ccode\u003eTraceIdRatioBased\u003c/code\u003e description. This is a breaking behavioral change, but it is necessary to\nmake the implementation \u003ca href=\"https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased\"\u003espec-compliant\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027\"\u003e#8027\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a race condition in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056\"\u003e#8056\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003ekenv\u003c/code\u003e command on BSD. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to correctly handle HTTP2 GOAWAY frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.40.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985\"\u003e#7985\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9276201a64b623606e3eaa0d61ae8ee6d62756c0\"\u003e\u003ccode\u003e9276201\u003c/code\u003e\u003c/a\u003e Release v1.43.0 / v0.65.0 / v0.19.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8128\"\u003e#8128\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/61b8c9466c4e6b17e69b622279fe9b63fb15c89a\"\u003e\u003ccode\u003e61b8c94\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8131\"\u003e#8131\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/97a086e82ffe01502f4c620e9c447efa229e2a23\"\u003e\u003ccode\u003e97a086e\u003c/code\u003e\u003c/a\u003e chore(deps): update github.com/golangci/dupl digest to c99c5cf (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8122\"\u003e#8122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/5e363de517dba6db62736b2f5cdef0e0929b4cd0\"\u003e\u003ccode\u003e5e363de\u003c/code\u003e\u003c/a\u003e limit response body size for OTLP HTTP exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/35214b60138eac8dec97a2d2b851d8c8471680c7\"\u003e\u003ccode\u003e35214b6\u003c/code\u003e\u003c/a\u003e Use an absolute path when calling bsd kenv (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/290024ceaf695f9cdbf29a0c6731a317d92bc361\"\u003e\u003ccode\u003e290024c\u003c/code\u003e\u003c/a\u003e fix(deps): update module google.golang.org/grpc to v1.80.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8121\"\u003e#8121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/e70658e098033d6bb5ec1b399de16bbb2642f6dc\"\u003e\u003ccode\u003ee70658e\u003c/code\u003e\u003c/a\u003e fix: support getBody in otelploghttp (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4afe468e3b4859c949a1c1e8d92684d43d86ef8a\"\u003e\u003ccode\u003e4afe468\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 9d38bb4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8117\"\u003e#8117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b9ca729776309e3c08fe700c131797a3b4d10634\"\u003e\u003ccode\u003eb9ca729\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8115\"\u003e#8115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/69472ec56cb7674d55ca2e2bcb04dea73228ab79\"\u003e\u003ccode\u003e69472ec\u003c/code\u003e\u003c/a\u003e chore(deps): update fossas/fossa-action action to v1.9.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8118\"\u003e#8118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.38.0...v1.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google.golang.org/grpc` from 1.75.1 to 1.79.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc-go/releases\"\u003egoogle.golang.org/grpc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 1.79.3\u003c/h2\u003e\n\u003ch1\u003eSecurity\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eserver: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted \u0026quot;deny\u0026quot; rules in interceptors like \u003ccode\u003egrpc/authz\u003c/code\u003e. Any request with a non-canonical path is now immediately rejected with an \u003ccode\u003eUnimplemented\u003c/code\u003e error. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.2\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003estats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8874\"\u003egrpc/grpc-go#8874\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.1\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003egrpc: Remove the \u003ccode\u003e-dev\u003c/code\u003e suffix from the User-Agent header. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8902\"\u003egrpc/grpc-go#8902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.0\u003c/h2\u003e\n\u003ch1\u003eAPI Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003emem: Add experimental API \u003ccode\u003eSetDefaultBufferPool\u003c/code\u003e to change the default buffer pool. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8806\"\u003e#8806\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/vanja-p\"\u003e\u003ccode\u003e@​vanja-p\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eexperimental/stats: Update \u003ccode\u003eMetricsRecorder\u003c/code\u003e to require embedding the new \u003ccode\u003eUnimplementedMetricsRecorder\u003c/code\u003e (a no-op struct) in all implementations for forward compatibility. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBehavior Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ebalancer/weightedtarget: Remove handling of \u003ccode\u003eAddresses\u003c/code\u003e and only handle \u003ccode\u003eEndpoints\u003c/code\u003e in resolver updates. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8841\"\u003e#8841\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eNew Features\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eexperimental/stats: Add support for asynchronous gauge metrics through the new \u003ccode\u003eAsyncMetricReporter\u003c/code\u003e and \u003ccode\u003eRegisterAsyncReporter\u003c/code\u003e APIs. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epickfirst: Add support for weighted random shuffling of endpoints, as described in \u003ca href=\"https://redirect.github.com/grpc/proposal/pull/535\"\u003egRFC A113\u003c/a\u003e.\n\u003cul\u003e\n\u003cli\u003eThis is enabled by default, and can be turned off using the environment variable \u003ccode\u003eGRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds: Implement \u003ccode\u003e:authority\u003c/code\u003e rewriting, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A81-xds-authority-rewriting.md\"\u003egRFC A81\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8779\"\u003e#8779\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebalancer/randomsubsetting: Implement the \u003ccode\u003erandom_subsetting\u003c/code\u003e LB policy, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A68-random-subsetting.md\"\u003egRFC A68\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8650\"\u003e#8650\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/marek-szews\"\u003e\u003ccode\u003e@​marek-szews\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/tls: Fix a bug where the port was not stripped from the authority override before validation. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8726\"\u003e#8726\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/Atul1710\"\u003e\u003ccode\u003e@​Atul1710\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds/priority: Fix a bug causing delayed failover to lower-priority clusters when a higher-priority cluster is stuck in \u003ccode\u003eCONNECTING\u003c/code\u003e state. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8813\"\u003e#8813\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ehealth: Fix a bug where health checks failed for clients using legacy compression options (\u003ccode\u003eWithDecompressor\u003c/code\u003e or \u003ccode\u003eRPCDecompressor\u003c/code\u003e). (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8765\"\u003e#8765\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/sanki92\"\u003e\u003ccode\u003e@​sanki92\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003etransport: Fix an issue where the HTTP/2 server could skip header size checks when terminating a stream early. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8769\"\u003e#8769\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eserver: Propagate status detail headers, if available, when terminating a stream during request header processing. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8754\"\u003e#8754\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ePerformance Improvements\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/alts: Optimize read buffer alignment to reduce copies. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8791\"\u003e#8791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emem: Optimize pooling and creation of \u003ccode\u003ebuffer\u003c/code\u003e objects.  (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8784\"\u003e#8784\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etransport: Reduce slice re-allocations by reserving slice capacity. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8797\"\u003e#8797\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/dda86dbd9cecb8b35b58c73d507d81d67761205f\"\u003e\u003ccode\u003edda86db\u003c/code\u003e\u003c/a\u003e Change version to 1.79.3 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8983\"\u003e#8983\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/72186f163e75a065c39e6f7df9b6dea07fbdeff5\"\u003e\u003ccode\u003e72186f1\u003c/code\u003e\u003c/a\u003e grpc: enforce strict path checking for incoming requests on the server (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/97ca3522b239edf6813e2b1106924e9d55e89d43\"\u003e\u003ccode\u003e97ca352\u003c/code\u003e\u003c/a\u003e Changing version to 1.79.3-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8954\"\u003e#8954\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/8902ab6efea590f5b3861126559eaa26fa9783b2\"\u003e\u003ccode\u003e8902ab6\u003c/code\u003e\u003c/a\u003e Change the version to release 1.79.2 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8947\"\u003e#8947\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/a9286705aa689bee321ec674323b6896284f3e02\"\u003e\u003ccode\u003ea928670\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8874\"\u003e#8874\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8904\"\u003e#8904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/06df3638c0bcee88197b1033b3ba83e1eb8bc010\"\u003e\u003ccode\u003e06df363\u003c/code\u003e\u003c/a\u003e Change version to 1.79.2-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8903\"\u003e#8903\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/782f2de44f597af18a120527e7682a6670d84289\"\u003e\u003ccode\u003e782f2de\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8902\"\u003e#8902\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/850eccbb2257bd2de6ac28ee88a7172ab6175629\"\u003e\u003ccode\u003e850eccb\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8851\"\u003e#8851\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/765ff056b6890f6c8341894df4e9668e9bfc18ef\"\u003e\u003ccode\u003e765ff05\u003c/code\u003e\u003c/a\u003e Change version to 1.79.0 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8850\"\u003e#8850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/68804be0e78ed0365bb5a576dedc12e2168ed63e\"\u003e\u003ccode\u003e68804be\u003c/code\u003e\u003c/a\u003e Cherry pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8896\"\u003e#8896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/grpc/grpc-go/compare/v1.75.1...v1.79.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream` from 1.6.11 to 1.7.8\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/e3b97d2a02cd4e27c40224f05aa1a7deba24abe2\"\u003e\u003ccode\u003ee3b97d2\u003c/code\u003e\u003c/a\u003e Release 2023-10-12\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/863010ddb23c242c2a5d49d9f40094a6a49b5525\"\u003e\u003ccode\u003e863010d\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/6946ef8b9149fe75ac1b427ca2c7f57cdcb64549\"\u003e\u003ccode\u003e6946ef8\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/6d93ded4536184d38a664b4b75dadd36cbd79878\"\u003e\u003ccode\u003e6d93ded\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/bebc232e7f65b02d0b519d11e73cf925c38e716f\"\u003e\u003ccode\u003ebebc232\u003c/code\u003e\u003c/a\u003e fix: fail to load config if configured profile doesn't exist (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/2309\"\u003e#2309\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/5de46742b7fb1b72d93d344ee81568800a707267\"\u003e\u003ccode\u003e5de4674\u003c/code\u003e\u003c/a\u003e fix DNS timeout error not retried (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/2300\"\u003e#2300\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/e155bb72a2ec20ec61db50fc3d4568e373fa4b63\"\u003e\u003ccode\u003ee155bb7\u003c/code\u003e\u003c/a\u003e Release 2023-10-06\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/9d342ba33937c562d215f317a37dea121ee9763d\"\u003e\u003ccode\u003e9d342ba\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/1df99141a143a38570d64a182ed972ce9e3dba65\"\u003e\u003ccode\u003e1df9914\u003c/code\u003e\u003c/a\u003e Update SDK's smithy-go dependency to v1.15.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/32ada3a191ac770b1b24164b667692183fc77ed9\"\u003e\u003ccode\u003e32ada3a\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/service/rum/v1.6.11...service/m2/v1.7.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/buger/jsonparser` from 1.1.1 to 1.1.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/buger/jsonparser/releases\"\u003egithub.com/buger/jsonparser's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated travis to build for 1.13 to 1.15 by \u003ca href=\"https://github.com/janreggie\"\u003e\u003ccode\u003e@​janreggie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/225\"\u003ebuger/jsonparser#225\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\n\u003cul\u003e\n\u003cli\u003eeliminate 2 allocations in EachKey() by \u003ca href=\"https://github.com/Villenny\"\u003e\u003ccode\u003e@​Villenny\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/223\"\u003ebuger/jsonparser#223\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003efix issue \u003ca href=\"https://redirect.github.com/buger/jsonparser/issues/150\"\u003e#150\u003c/a\u003e (in deleting case) by \u003ca href=\"https://github.com/daria-kay\"\u003e\u003ccode\u003e@​daria-kay\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/226\"\u003ebuger/jsonparser#226\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efixing the oss-fuzz issue by \u003ca href=\"https://github.com/daria-kay\"\u003e\u003ccode\u003e@​daria-kay\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/227\"\u003ebuger/jsonparser#227\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix parseInt overflow check false negative by \u003ca href=\"https://github.com/carsonip\"\u003e\u003ccode\u003e@​carsonip\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/231\"\u003ebuger/jsonparser#231\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdded bespoke error for null cases by \u003ca href=\"https://github.com/jonomacd\"\u003e\u003ccode\u003e@​jonomacd\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/228\"\u003ebuger/jsonparser#228\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFuzzing: Add CIFuzz by \u003ca href=\"https://github.com/AdamKorcz\"\u003e\u003ccode\u003e@​AdamKorcz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/239\"\u003ebuger/jsonparser#239\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdded latest versions of go to tests by \u003ca href=\"https://github.com/moredure\"\u003e\u003ccode\u003e@​moredure\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/244\"\u003ebuger/jsonparser#244\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix EachKey pIdxFlags allocation by \u003ca href=\"https://github.com/unxcepted\"\u003e\u003ccode\u003e@​unxcepted\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/241\"\u003ebuger/jsonparser#241\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: prevent panic on negative slice index in Delete with malformed JSON (GO-2026-4514) by \u003ca href=\"https://github.com/dbarrosop\"\u003e\u003ccode\u003e@​dbarrosop\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/276\"\u003ebuger/jsonparser#276\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/janreggie\"\u003e\u003ccode\u003e@​janreggie\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/225\"\u003ebuger/jsonparser#225\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Villenny\"\u003e\u003ccode\u003e@​Villenny\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/223\"\u003ebuger/jsonparser#223\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/daria-kay\"\u003e\u003ccode\u003e@​daria-kay\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/226\"\u003ebuger/jsonparser#226\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/carsonip\"\u003e\u003ccode\u003e@​carsonip\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/231\"\u003ebuger/jsonparser#231\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jonomacd\"\u003e\u003ccode\u003e@​jonomacd\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/228\"\u003ebuger/jsonparser#228\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moredure\"\u003e\u003ccode\u003e@​moredure\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/244\"\u003ebuger/jsonparser#244\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/unxcepted\"\u003e\u003ccode\u003e@​unxcepted\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/241\"\u003ebuger/jsonparser#241\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dbarrosop\"\u003e\u003ccode\u003e@​dbarrosop\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/276\"\u003ebuger/jsonparser#276\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/buger/jsonparser/compare/v1.1.1...v1.1.2\"\u003ehttps://github.com/buger/jsonparser/compare/v1.1.1...v1.1.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/a69e7e01cd4ad67bdfd3ac2c080b9212af16f4b0\"\u003e\u003ccode\u003ea69e7e0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/buger/jsonparser/issues/276\"\u003e#276\u003c/a\u003e from dbarrosop/master\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/d3eacc0bab779d6cf98221f5268828fff287876e\"\u003e\u003ccode\u003ed3eacc0\u003c/code\u003e\u003c/a\u003e fix: prevent panic on negative slice index in Delete with malformed JSON (GO-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/61b32cfdfa0f5d368ef7c7daef28ce12d538740f\"\u003e\u003ccode\u003e61b32cf\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/buger/jsonparser/issues/241\"\u003e#241\u003c/a\u003e from unxcepted/master\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/2181e8398f18397c9cacbaea9889314bb585e868\"\u003e\u003ccode\u003e2181e83\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/buger/jsonparser/issues/244\"\u003e#244\u003c/a\u003e from ScaleChamp/patch-2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/1510b5194182fc2fb898f28cdbceb42fd7258bfa\"\u003e\u003ccode\u003e1510b51\u003c/code\u003e\u003c/a\u003e Added latest versions of go to tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/6fc2e488ed3cc4f1f1debec3b0c70715bd7be6fd\"\u003e\u003ccode\u003e6fc2e48\u003c/code\u003e\u003c/a\u003e fix: eachkey allocation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/a6f867eb7787e4ec54536b77b5d628ddf5c4f73d\"\u003e\u003ccode\u003ea6f867e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/buger/jsonparser/issues/239\"\u003e#239\u003c/a\u003e from AdamKorcz/cifuzz1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/cbc01fdbbe131706e89eeaaf0cd917760d8d3949\"\u003e\u003ccode\u003ecbc01fd\u003c/code\u003e\u003c/a\u003e Fuzzing: Add CIFuzz\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/dc92d6932a1272b4d8f485f798a88c3a75106256\"\u003e\u003ccode\u003edc92d69\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/buger/jsonparser/issues/228\"\u003e#228\u003c/a\u003e from jonomacd/null-handling\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/2d9d6343e8621ddc18c70749663f74bc584c0de4\"\u003e\u003ccode\u003e2d9d634\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/buger/jsonparser/issues/231\"\u003e#231\u003c/a\u003e from carsonip/fix-parseint-overflow-check\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/buger/jsonparser/compare/v1.1.1...v1.1.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/cloudflare/circl` from 1.6.1 to 1.6.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cloudflare/circl/releases\"\u003egithub.com/cloudflare/circl's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eCIRCL v1.6.3\u003c/h2\u003e\n\u003cp\u003eFix a bug on ecc/p384 scalar multiplication.\u003c/p\u003e\n\u003ch3\u003eWhat's Changed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esign/mldsa: Check opts for nil value  by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/582\"\u003ecloudflare/circl#582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eecc/p384: Point addition must handle point doubling case. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/583\"\u003ecloudflare/circl#583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease CIRCL v1.6.3 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/584\"\u003ecloudflare/circl#584\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNew SLH-DSA, improvements in ML-DSA for arm64.\u003c/li\u003e\n\u003cli\u003eTested compilation on WASM.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize pairing product computation by moving exponentiations to G1. by \u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esign: Adding SLH-DSA signature by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/512\"\u003ecloudflare/circl#512\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate code generators to CIRCL v1.6.1. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/548\"\u003ecloudflare/circl#548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eML-DSA: Add preliminary Wycheproof test vectors by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/552\"\u003ecloudflare/circl#552\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ego fmt by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/554\"\u003ecloudflare/circl#554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egz-compressing test vectors, use of HexBytes and ReadGzip functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/555\"\u003ecloudflare/circl#555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Removes use of elliptic Marshal and Unmarshal functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/556\"\u003ecloudflare/circl#556\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport encoding/decoding ML-DSA private keys (as long as they contain seeds) by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/559\"\u003ecloudflare/circl#559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to golangci-lint v2 by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/560\"\u003ecloudflare/circl#560\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreparation for ARM64 Implementation of poly operations for dilithium package. by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eprepare power2Round for custom implementations in assembly by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/564\"\u003ecloudflare/circl#564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eARM64 implementation for poly.PackLe16 by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/563\"\u003ecloudflare/circl#563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polyMulBy2toD by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/565\"\u003ecloudflare/circl#565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polySub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/566\"\u003ecloudflare/circl#566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: add byteLen method for short groups and RandomScalar uses rand.Int by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/568\"\u003ecloudflare/circl#568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of poly.Add/Sub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/572\"\u003ecloudflare/circl#572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Adding cryptobyte marshaling to scalars by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/569\"\u003ecloudflare/circl#569\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumping up to Go1.25 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/574\"\u003ecloudflare/circl#574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: Including WASM compilation. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/577\"\u003ecloudflare/circl#577\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to using package-declared HPKE errors for shortkem instead of standard library errors by \u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease v1.6.2 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/579\"\u003ecloudflare/circl#579\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/24ae53c5d6f7fe18203adc125ba3ed76a38703e1\"\u003e\u003ccode\u003e24ae53c\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/581020bd4a836b8ce7bd4e414ba2884c07dbc906\"\u003e\u003ccode\u003e581020b\u003c/code\u003e\u003c/a\u003e Rename method to oddMultiplesProjective.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/12209a4566605692a8402594e367a5aed5148460\"\u003e\u003ccode\u003e12209a4\u003c/code\u003e\u003c/a\u003e Removing unused cmov for jacobian points.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/fcba359f4178645d2c9e50f29ab6966337da4b95\"\u003e\u003ccode\u003efcba359\u003c/code\u003e\u003c/a\u003e ecc/p384: use of complete projective formulas for scalar multiplication.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/5e1bae8d8c2df4e717c2c5c2d5b5d60b629b2ac6\"\u003e\u003ccode\u003e5e1bae8\u003c/code\u003e\u003c/a\u003e ecc/p384: handle point doubling in point addition with Jacobian coordinates.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/341604685ff97e8f7440ae4b4711ba1c118c648c\"\u003e\u003ccode\u003e3416046\u003c/code\u003e\u003c/a\u003e Check opts for nil value.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/a763d47a6dce43d1f4f7b697d1d7810463a526f6\"\u003e\u003ccode\u003ea763d47\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3c70bf9ad53b681fbe5ba6067e454a86549fee8a\"\u003e\u003ccode\u003e3c70bf9\u003c/code\u003e\u003c/a\u003e Bump x/crypto x/sys dependencies.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3f0f15b2bfe67bad81a35e8aec81ae42ca78349d\"\u003e\u003ccode\u003e3f0f15b\u003c/code\u003e\u003c/a\u003e Revert to using package-declared HPKE errors for shortkem instead of standard...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/23491bd573cf29b6f567057a158203a2c9dfa30d\"\u003e\u003ccode\u003e23491bd\u003c/code\u003e\u003c/a\u003e Adding generic Power2Round method.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/docker/docker` from 28.4.0+incompatible to 28.5.2+incompatible\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/docker/docker/releases\"\u003egithub.com/docker/docker's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev28.5.2\u003c/h2\u003e\n\u003ch2\u003e28.5.2\u003c/h2\u003e\n\u003cp\u003eFor a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.5.2\"\u003edocker/cli, 28.5.2 milestone\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.5.2\"\u003emoby/moby, 28.5.2 milestone\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!CAUTION]\nThis release contains fixes for three high-severity security vulnerabilities in runc:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/opencontainers/runc/security/advisories/GHSA-9493-h29p-rfm2\"\u003eCVE-2025-31133\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/opencontainers/runc/security/advisories/GHSA-qw9x-cqr3-wc7r\"\u003eCVE-2025-52565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/opencontainers/runc/security...\n\n_Description has been truncated_","html_url":"https://github.com/joe10832/grafana/pull/37","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/joe10832%2Fgrafana/issues/37","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/37/packages"},{"uuid":"4227417562","node_id":"PR_kwDOOuwU1c7Q7U0x","number":7,"state":"closed","title":"build(deps): bump the go_modules group across 3 directories with 5 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-04-17T22:39:12.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-08T20:25:42.000Z","updated_at":"2026-04-17T22:39:14.000Z","time_to_close":785610,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): bump","group_name":"go_modules","update_count":5,"packages":[{"name":"google.golang.org/grpc","old_version":"1.72.1","new_version":"1.79.3","repository_url":"https://github.com/grpc/grpc-go"},{"name":"github.com/cloudflare/circl","old_version":"1.6.1","new_version":"1.6.3","repository_url":"https://github.com/cloudflare/circl"},{"name":"github.com/go-git/go-git/v5","old_version":"5.16.0","new_version":"5.17.1","repository_url":"https://github.com/go-git/go-git"},{"name":"github.com/go-viper/mapstructure/v2","old_version":"2.2.1","new_version":"2.4.0","repository_url":"https://github.com/go-viper/mapstructure"},{"name":"golang.org/x/crypto","old_version":"0.38.0","new_version":"0.45.0"},{"name":"google.golang.org/grpc","old_version":"1.72.1","new_version":"1.79.3","repository_url":"https://github.com/grpc/grpc-go"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 1 update in the /bridge/opentracing/test directory: [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 3 updates in the /internal/tools directory: [github.com/cloudflare/circl](https://github.com/cloudflare/circl), [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) and [github.com/go-viper/mapstructure/v2](https://github.com/go-viper/mapstructure).\nBumps the go_modules group with 1 update in the /trace/internal/telemetry/test directory: [google.golang.org/grpc](https://github.com/grpc/grpc-go).\n\nUpdates `google.golang.org/grpc` from 1.72.1 to 1.79.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc-go/releases\"\u003egoogle.golang.org/grpc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 1.79.3\u003c/h2\u003e\n\u003ch1\u003eSecurity\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eserver: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted \u0026quot;deny\u0026quot; rules in interceptors like \u003ccode\u003egrpc/authz\u003c/code\u003e. Any request with a non-canonical path is now immediately rejected with an \u003ccode\u003eUnimplemented\u003c/code\u003e error. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.2\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003estats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8874\"\u003egrpc/grpc-go#8874\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.1\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003egrpc: Remove the \u003ccode\u003e-dev\u003c/code\u003e suffix from the User-Agent header. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8902\"\u003egrpc/grpc-go#8902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.0\u003c/h2\u003e\n\u003ch1\u003eAPI Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003emem: Add experimental API \u003ccode\u003eSetDefaultBufferPool\u003c/code\u003e to change the default buffer pool. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8806\"\u003e#8806\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/vanja-p\"\u003e\u003ccode\u003e@​vanja-p\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eexperimental/stats: Update \u003ccode\u003eMetricsRecorder\u003c/code\u003e to require embedding the new \u003ccode\u003eUnimplementedMetricsRecorder\u003c/code\u003e (a no-op struct) in all implementations for forward compatibility. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBehavior Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ebalancer/weightedtarget: Remove handling of \u003ccode\u003eAddresses\u003c/code\u003e and only handle \u003ccode\u003eEndpoints\u003c/code\u003e in resolver updates. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8841\"\u003e#8841\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eNew Features\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eexperimental/stats: Add support for asynchronous gauge metrics through the new \u003ccode\u003eAsyncMetricReporter\u003c/code\u003e and \u003ccode\u003eRegisterAsyncReporter\u003c/code\u003e APIs. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epickfirst: Add support for weighted random shuffling of endpoints, as described in \u003ca href=\"https://redirect.github.com/grpc/proposal/pull/535\"\u003egRFC A113\u003c/a\u003e.\n\u003cul\u003e\n\u003cli\u003eThis is enabled by default, and can be turned off using the environment variable \u003ccode\u003eGRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds: Implement \u003ccode\u003e:authority\u003c/code\u003e rewriting, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A81-xds-authority-rewriting.md\"\u003egRFC A81\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8779\"\u003e#8779\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebalancer/randomsubsetting: Implement the \u003ccode\u003erandom_subsetting\u003c/code\u003e LB policy, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A68-random-subsetting.md\"\u003egRFC A68\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8650\"\u003e#8650\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/marek-szews\"\u003e\u003ccode\u003e@​marek-szews\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/tls: Fix a bug where the port was not stripped from the authority override before validation. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8726\"\u003e#8726\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/Atul1710\"\u003e\u003ccode\u003e@​Atul1710\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds/priority: Fix a bug causing delayed failover to lower-priority clusters when a higher-priority cluster is stuck in \u003ccode\u003eCONNECTING\u003c/code\u003e state. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8813\"\u003e#8813\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ehealth: Fix a bug where health checks failed for clients using legacy compression options (\u003ccode\u003eWithDecompressor\u003c/code\u003e or \u003ccode\u003eRPCDecompressor\u003c/code\u003e). (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8765\"\u003e#8765\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/sanki92\"\u003e\u003ccode\u003e@​sanki92\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003etransport: Fix an issue where the HTTP/2 server could skip header size checks when terminating a stream early. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8769\"\u003e#8769\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eserver: Propagate status detail headers, if available, when terminating a stream during request header processing. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8754\"\u003e#8754\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ePerformance Improvements\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/alts: Optimize read buffer alignment to reduce copies. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8791\"\u003e#8791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emem: Optimize pooling and creation of \u003ccode\u003ebuffer\u003c/code\u003e objects.  (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8784\"\u003e#8784\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etransport: Reduce slice re-allocations by reserving slice capacity. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8797\"\u003e#8797\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/dda86dbd9cecb8b35b58c73d507d81d67761205f\"\u003e\u003ccode\u003edda86db\u003c/code\u003e\u003c/a\u003e Change version to 1.79.3 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8983\"\u003e#8983\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/72186f163e75a065c39e6f7df9b6dea07fbdeff5\"\u003e\u003ccode\u003e72186f1\u003c/code\u003e\u003c/a\u003e grpc: enforce strict path checking for incoming requests on the server (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/97ca3522b239edf6813e2b1106924e9d55e89d43\"\u003e\u003ccode\u003e97ca352\u003c/code\u003e\u003c/a\u003e Changing version to 1.79.3-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8954\"\u003e#8954\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/8902ab6efea590f5b3861126559eaa26fa9783b2\"\u003e\u003ccode\u003e8902ab6\u003c/code\u003e\u003c/a\u003e Change the version to release 1.79.2 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8947\"\u003e#8947\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/a9286705aa689bee321ec674323b6896284f3e02\"\u003e\u003ccode\u003ea928670\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8874\"\u003e#8874\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8904\"\u003e#8904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/06df3638c0bcee88197b1033b3ba83e1eb8bc010\"\u003e\u003ccode\u003e06df363\u003c/code\u003e\u003c/a\u003e Change version to 1.79.2-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8903\"\u003e#8903\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/782f2de44f597af18a120527e7682a6670d84289\"\u003e\u003ccode\u003e782f2de\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8902\"\u003e#8902\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/850eccbb2257bd2de6ac28ee88a7172ab6175629\"\u003e\u003ccode\u003e850eccb\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8851\"\u003e#8851\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/765ff056b6890f6c8341894df4e9668e9bfc18ef\"\u003e\u003ccode\u003e765ff05\u003c/code\u003e\u003c/a\u003e Change version to 1.79.0 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8850\"\u003e#8850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/68804be0e78ed0365bb5a576dedc12e2168ed63e\"\u003e\u003ccode\u003e68804be\u003c/code\u003e\u003c/a\u003e Cherry pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8896\"\u003e#8896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/grpc/grpc-go/compare/v1.72.1...v1.79.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/cloudflare/circl` from 1.6.1 to 1.6.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cloudflare/circl/releases\"\u003egithub.com/cloudflare/circl's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eCIRCL v1.6.3\u003c/h2\u003e\n\u003cp\u003eFix a bug on ecc/p384 scalar multiplication.\u003c/p\u003e\n\u003ch3\u003eWhat's Changed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esign/mldsa: Check opts for nil value  by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/582\"\u003ecloudflare/circl#582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eecc/p384: Point addition must handle point doubling case. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/583\"\u003ecloudflare/circl#583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease CIRCL v1.6.3 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/584\"\u003ecloudflare/circl#584\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNew SLH-DSA, improvements in ML-DSA for arm64.\u003c/li\u003e\n\u003cli\u003eTested compilation on WASM.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize pairing product computation by moving exponentiations to G1. by \u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esign: Adding SLH-DSA signature by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/512\"\u003ecloudflare/circl#512\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate code generators to CIRCL v1.6.1. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/548\"\u003ecloudflare/circl#548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eML-DSA: Add preliminary Wycheproof test vectors by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/552\"\u003ecloudflare/circl#552\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ego fmt by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/554\"\u003ecloudflare/circl#554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egz-compressing test vectors, use of HexBytes and ReadGzip functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/555\"\u003ecloudflare/circl#555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Removes use of elliptic Marshal and Unmarshal functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/556\"\u003ecloudflare/circl#556\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport encoding/decoding ML-DSA private keys (as long as they contain seeds) by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/559\"\u003ecloudflare/circl#559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to golangci-lint v2 by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/560\"\u003ecloudflare/circl#560\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreparation for ARM64 Implementation of poly operations for dilithium package. by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eprepare power2Round for custom implementations in assembly by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/564\"\u003ecloudflare/circl#564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eARM64 implementation for poly.PackLe16 by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/563\"\u003ecloudflare/circl#563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polyMulBy2toD by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/565\"\u003ecloudflare/circl#565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polySub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/566\"\u003ecloudflare/circl#566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: add byteLen method for short groups and RandomScalar uses rand.Int by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/568\"\u003ecloudflare/circl#568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of poly.Add/Sub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/572\"\u003ecloudflare/circl#572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Adding cryptobyte marshaling to scalars by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/569\"\u003ecloudflare/circl#569\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumping up to Go1.25 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/574\"\u003ecloudflare/circl#574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: Including WASM compilation. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/577\"\u003ecloudflare/circl#577\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to using package-declared HPKE errors for shortkem instead of standard library errors by \u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease v1.6.2 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/579\"\u003ecloudflare/circl#579\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/24ae53c5d6f7fe18203adc125ba3ed76a38703e1\"\u003e\u003ccode\u003e24ae53c\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/581020bd4a836b8ce7bd4e414ba2884c07dbc906\"\u003e\u003ccode\u003e581020b\u003c/code\u003e\u003c/a\u003e Rename method to oddMultiplesProjective.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/12209a4566605692a8402594e367a5aed5148460\"\u003e\u003ccode\u003e12209a4\u003c/code\u003e\u003c/a\u003e Removing unused cmov for jacobian points.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/fcba359f4178645d2c9e50f29ab6966337da4b95\"\u003e\u003ccode\u003efcba359\u003c/code\u003e\u003c/a\u003e ecc/p384: use of complete projective formulas for scalar multiplication.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/5e1bae8d8c2df4e717c2c5c2d5b5d60b629b2ac6\"\u003e\u003ccode\u003e5e1bae8\u003c/code\u003e\u003c/a\u003e ecc/p384: handle point doubling in point addition with Jacobian coordinates.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/341604685ff97e8f7440ae4b4711ba1c118c648c\"\u003e\u003ccode\u003e3416046\u003c/code\u003e\u003c/a\u003e Check opts for nil value.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/a763d47a6dce43d1f4f7b697d1d7810463a526f6\"\u003e\u003ccode\u003ea763d47\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3c70bf9ad53b681fbe5ba6067e454a86549fee8a\"\u003e\u003ccode\u003e3c70bf9\u003c/code\u003e\u003c/a\u003e Bump x/crypto x/sys dependencies.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3f0f15b2bfe67bad81a35e8aec81ae42ca78349d\"\u003e\u003ccode\u003e3f0f15b\u003c/code\u003e\u003c/a\u003e Revert to using package-declared HPKE errors for shortkem instead of standard...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/23491bd573cf29b6f567057a158203a2c9dfa30d\"\u003e\u003ccode\u003e23491bd\u003c/code\u003e\u003c/a\u003e Adding generic Power2Round method.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-git/v5` from 5.16.0 to 5.17.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-git/releases\"\u003egithub.com/go-git/go-git/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.17.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/cloudflare/circl to v1.6.3 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1930\"\u003ego-git/go-git#1930\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/index, Improve v4 entry name validation by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1935\"\u003ego-git/go-git#1935\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/idxfile, Fix version and fanout checks by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1937\"\u003ego-git/go-git#1937\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.16.5 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1839\"\u003ego-git/go-git#1839\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: worktree, optimize infiles function for very large repos by \u003ca href=\"https://github.com/k-anshul\"\u003e\u003ccode\u003e@​k-anshul\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1853\"\u003ego-git/go-git#1853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: Add strict checks for supported extensions by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1861\"\u003ego-git/go-git#1861\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebackport, git: Improve Status() speed with new index.ModTime check by \u003ca href=\"https://github.com/cedric-appdirect\"\u003e\u003ccode\u003e@​cedric-appdirect\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1862\"\u003ego-git/go-git#1862\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003estorage: filesystem, Avoid overwriting loose obj files by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1864\"\u003ego-git/go-git#1864\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.16.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module golang.org/x/crypto to v0.45.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1744\"\u003ego-git/go-git#1744\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Bump Go test versions to 1.23-1.25 (v5) by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1746\"\u003ego-git/go-git#1746\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] git: worktree, Don't delete local untracked files when resetting worktree by \u003ca href=\"https://github.com/Ch00k\"\u003e\u003ccode\u003e@​Ch00k\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1800\"\u003ego-git/go-git#1800\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExpand packfile checks by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1836\"\u003ego-git/go-git#1836\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.4...v5.16.5\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.4...v5.16.5\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.16.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebackport plumbing: format/idxfile, prevent panic by \u003ca href=\"https://github.com/swills\"\u003e\u003ccode\u003e@​swills\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1732\"\u003ego-git/go-git#1732\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[backport] build: test, Fix build on Windows. by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1734\"\u003ego-git/go-git#1734\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Update module golang.org/x/net to v0.38.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1742\"\u003ego-git/go-git#1742\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Update module github.com/cloudflare/circl to v1.6.1 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1741\"\u003ego-git/go-git#1741\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.13.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1743\"\u003ego-git/go-git#1743\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.3...v5.16.4\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.3...v5.16.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.16.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003einternal: Expand regex to fix build [5.x] by \u003ca href=\"https://github.com/baloo\"\u003e\u003ccode\u003e@​baloo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1644\"\u003ego-git/go-git#1644\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: raise timeouts for windows CI tests and disable CIFuzz [5.x] by \u003ca href=\"https://github.com/baloo\"\u003e\u003ccode\u003e@​baloo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1646\"\u003ego-git/go-git#1646\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eplumbing: support commits extra headers, support jujutsu signed commit [5.x] by \u003ca href=\"https://github.com/baloo\"\u003e\u003ccode\u003e@​baloo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1633\"\u003ego-git/go-git#1633\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.2...v5.16.3\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.2...v5.16.3\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/5e23dfd02db92644dc4a3358ceb297fce875b772\"\u003e\u003ccode\u003e5e23dfd\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1937\"\u003e#1937\u003c/a\u003e from pjbgf/idx-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/6b38a326816b80f64c20cc0e6113958b65c05a1c\"\u003e\u003ccode\u003e6b38a32\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1935\"\u003e#1935\u003c/a\u003e from pjbgf/index-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/cd757fcb856a2dcc5fff6c110320a8ff62e99513\"\u003e\u003ccode\u003ecd757fc\u003c/code\u003e\u003c/a\u003e plumbing: format/idxfile, Fix version and fanout checks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/3ec0d70cb687ae1da5f4d18faa4229bd971a8710\"\u003e\u003ccode\u003e3ec0d70\u003c/code\u003e\u003c/a\u003e plumbing: format/index, Fix tree extension invalidated entry parsing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/dbe10b6b425a2a4ea92a9d98e20cd68e15aede01\"\u003e\u003ccode\u003edbe10b6\u003c/code\u003e\u003c/a\u003e plumbing: format/index, Align V2/V3 long name and V4 prefix encoding with Git\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/e9b65df44cb97faeba148b47523a362beaecddf9\"\u003e\u003ccode\u003ee9b65df\u003c/code\u003e\u003c/a\u003e plumbing: format/index, Improve v4 entry name validation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/adad18daabddee04c5a889f0230035e74bca32c0\"\u003e\u003ccode\u003eadad18d\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1930\"\u003e#1930\u003c/a\u003e from go-git/renovate/releases/v5.x-go-github.com-clo...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/29470bd1d862c6e902996b8e8ff8eb7a0515a9be\"\u003e\u003ccode\u003e29470bd\u003c/code\u003e\u003c/a\u003e build: Update module github.com/cloudflare/circl to v1.6.3 [SECURITY]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/bdf06885bdaa3631cf6a2017108086c6f53dcf69\"\u003e\u003ccode\u003ebdf0688\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1864\"\u003e#1864\u003c/a\u003e from pjbgf/v5-issue-55\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/5290e521c8cf651bf3e8d3e37f517c7cf7aa0b19\"\u003e\u003ccode\u003e5290e52\u003c/code\u003e\u003c/a\u003e storage: filesystem, Avoid overwriting loose obj files. Fixes \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/55\"\u003e#55\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.0...v5.17.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-viper/mapstructure/v2` from 2.2.1 to 2.4.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-viper/mapstructure/releases\"\u003egithub.com/go-viper/mapstructure/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.4.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003erefactor: replace interface{} with any by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/115\"\u003ego-viper/mapstructure#115\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.0 to 3.29.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/114\"\u003ego-viper/mapstructure#114\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGeneric tests by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/118\"\u003ego-viper/mapstructure#118\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix godoc reference link in README.md by \u003ca href=\"https://github.com/peczenyj\"\u003e\u003ccode\u003e@​peczenyj\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/107\"\u003ego-viper/mapstructure#107\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add StringToTimeLocationHookFunc to convert strings to *time.Location by \u003ca href=\"https://github.com/ErfanMomeniii\"\u003e\u003ccode\u003e@​ErfanMomeniii\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/117\"\u003ego-viper/mapstructure#117\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add back previous StringToSlice as a weak function by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/119\"\u003ego-viper/mapstructure#119\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ErfanMomeniii\"\u003e\u003ccode\u003e@​ErfanMomeniii\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/117\"\u003ego-viper/mapstructure#117\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-viper/mapstructure/compare/v2.3.0...v2.4.0\"\u003ehttps://github.com/go-viper/mapstructure/compare/v2.3.0...v2.4.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.3.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 4.1.7 to 4.2.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/46\"\u003ego-viper/mapstructure#46\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golangci/golangci-lint-action from 6.1.0 to 6.1.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/47\"\u003ego-viper/mapstructure#47\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[enhancement] Add check for \u003ccode\u003ereflect.Value\u003c/code\u003e in \u003ccode\u003eComposeDecodeHookFunc\u003c/code\u003e by \u003ca href=\"https://github.com/mahadzaryab1\"\u003e\u003ccode\u003e@​mahadzaryab1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/52\"\u003ego-viper/mapstructure#52\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.0.2 to 5.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/51\"\u003ego-viper/mapstructure#51\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 4.2.0 to 4.2.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/50\"\u003ego-viper/mapstructure#50\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.1.0 to 5.2.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/55\"\u003ego-viper/mapstructure#55\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.2.0 to 5.3.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/58\"\u003ego-viper/mapstructure#58\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: add Go 1.24 to the test matrix by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/74\"\u003ego-viper/mapstructure#74\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golangci/golangci-lint-action from 6.1.1 to 6.5.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/72\"\u003ego-viper/mapstructure#72\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golangci/golangci-lint-action from 6.5.0 to 6.5.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/76\"\u003ego-viper/mapstructure#76\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.3.0 to 5.4.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/78\"\u003ego-viper/mapstructure#78\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add decode hook for netip.Prefix by \u003ca href=\"https://github.com/tklauser\"\u003e\u003ccode\u003e@​tklauser\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/85\"\u003ego-viper/mapstructure#85\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdates by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/86\"\u003ego-viper/mapstructure#86\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 2.13.4 to 3.28.15 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/87\"\u003ego-viper/mapstructure#87\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.4.0 to 5.5.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/93\"\u003ego-viper/mapstructure#93\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.15 to 3.28.17 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/92\"\u003ego-viper/mapstructure#92\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.17 to 3.28.19 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/97\"\u003ego-viper/mapstructure#97\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/96\"\u003ego-viper/mapstructure#96\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate README.md by \u003ca href=\"https://github.com/peczenyj\"\u003e\u003ccode\u003e@​peczenyj\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/90\"\u003ego-viper/mapstructure#90\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd omitzero tag. by \u003ca href=\"https://github.com/Crystalix007\"\u003e\u003ccode\u003e@​Crystalix007\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/98\"\u003ego-viper/mapstructure#98\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse error structs instead of duplicated strings by \u003ca href=\"https://github.com/m1k1o\"\u003e\u003ccode\u003e@​m1k1o\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/102\"\u003ego-viper/mapstructure#102\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.19 to 3.29.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/101\"\u003ego-viper/mapstructure#101\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add common error interface by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/105\"\u003ego-viper/mapstructure#105\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eupdate linter by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/106\"\u003ego-viper/mapstructure#106\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFeature allow unset pointer by \u003ca href=\"https://github.com/rostislaved\"\u003e\u003ccode\u003e@​rostislaved\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/80\"\u003ego-viper/mapstructure#80\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tklauser\"\u003e\u003ccode\u003e@​tklauser\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/85\"\u003ego-viper/mapstructure#85\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/peczenyj\"\u003e\u003ccode\u003e@​peczenyj\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/90\"\u003ego-viper/mapstructure#90\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Crystalix007\"\u003e\u003ccode\u003e@​Crystalix007\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/98\"\u003ego-viper/mapstructure#98\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rostislaved\"\u003e\u003ccode\u003e@​rostislaved\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/80\"\u003ego-viper/mapstructure#80\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-viper/mapstructure/compare/v2.2.1...v2.3.0\"\u003ehttps://github.com/go-viper/mapstructure/compare/v2.2.1...v2.3.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/b9794a5f0e73d425210d6614ed833067029155f5\"\u003e\u003ccode\u003eb9794a5\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/119\"\u003e#119\u003c/a\u003e from go-viper/string-to-weak-slice\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/17cdcb0741054e2a33938adf6bd1f2a5c0aa8f30\"\u003e\u003ccode\u003e17cdcb0\u003c/code\u003e\u003c/a\u003e feat: add back previous StringToSlice as a weak function\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/3caca3614c3ab2c5b5d359c44fdcd72058887b19\"\u003e\u003ccode\u003e3caca36\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/117\"\u003e#117\u003c/a\u003e from ErfanMomeniii/main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/9a861bc115f2b54ed4e494662f29c172d9ef046a\"\u003e\u003ccode\u003e9a861bc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/107\"\u003e#107\u003c/a\u003e from peczenyj/patch-2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/86ed5b59da0615fb8c3a413f401cdf0231f1234c\"\u003e\u003ccode\u003e86ed5b5\u003c/code\u003e\u003c/a\u003e refactor: update\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/ace5b4e8b3dec99468ffa9498e42fb09d177b0a6\"\u003e\u003ccode\u003eace5b4e\u003c/code\u003e\u003c/a\u003e chore: add interface any linter\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/1a4f1aef38bfa8549762aaf42c7c18a5d268e76e\"\u003e\u003ccode\u003e1a4f1ae\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/118\"\u003e#118\u003c/a\u003e from go-viper/generic-tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/a2689090ed4348033c36724d866faf1f911a9f63\"\u003e\u003ccode\u003ea268909\u003c/code\u003e\u003c/a\u003e fix: lint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/17f1fd44eb7606b109c9bb017c0a1c6d3e93b5cd\"\u003e\u003ccode\u003e17f1fd4\u003c/code\u003e\u003c/a\u003e test: add more comments\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/b48c8566836bf291bfee2b217d51fc36e8e61f6f\"\u003e\u003ccode\u003eb48c856\u003c/code\u003e\u003c/a\u003e test: expand tests\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-viper/mapstructure/compare/v2.2.1...v2.4.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.38.0 to 0.45.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/4e0068c0098be10d7025c99ab7c50ce454c1f0f9\"\u003e\u003ccode\u003e4e0068c\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e79546e28b85ea53dd37afe1c4102746ef553b9c\"\u003e\u003ccode\u003ee79546e\u003c/code\u003e\u003c/a\u003e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f91f7a7c31bf90b39c1de895ad116a2bacc88748\"\u003e\u003ccode\u003ef91f7a7\u003c/code\u003e\u003c/a\u003e ssh/agent: prevent panic on malformed constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/2df4153a0311bdfea44376e0eb6ef2faefb0275b\"\u003e\u003ccode\u003e2df4153\u003c/code\u003e\u003c/a\u003e acme/autocert: let automatic renewal work with short lifetime certs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/bcf6a849efcf4702fa5172cb0998b46c3da1e989\"\u003e\u003ccode\u003ebcf6a84\u003c/code\u003e\u003c/a\u003e acme: pass context to request\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b4f2b62076abeee4e43fb59544dac565715fbf1e\"\u003e\u003ccode\u003eb4f2b62\u003c/code\u003e\u003c/a\u003e ssh: fix error message on unsupported cipher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/79ec3a51fcc7fbd2691d56155d578225ccc542e2\"\u003e\u003ccode\u003e79ec3a5\u003c/code\u003e\u003c/a\u003e ssh: allow to bind to a hostname in remote forwarding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/122a78f140d9d3303ed3261bc374bbbca149140f\"\u003e\u003ccode\u003e122a78f\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/c0531f9c34514ad5c5551e2d6ce569ca673a8afd\"\u003e\u003ccode\u003ec0531f9\u003c/code\u003e\u003c/a\u003e all: eliminate vet diagnostics\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/0997000b45e3a40598272081bcad03ffd21b8adb\"\u003e\u003ccode\u003e0997000\u003c/code\u003e\u003c/a\u003e all: fix some comments\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.38.0...v0.45.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google.golang.org/grpc` from 1.72.1 to 1.79.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc-go/releases\"\u003egoogle.golang.org/grpc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 1.79.3\u003c/h2\u003e\n\u003ch1\u003eSecurity\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eserver: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted \u0026quot;deny\u0026quot; rules in interceptors like \u003ccode\u003egrpc/authz\u003c/code\u003e. Any request with a non-canonical path is now immediately rejected with an \u003ccode\u003eUnimplemented\u003c/code\u003e error. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.2\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003estats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8874\"\u003egrpc/grpc-go#8874\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.1\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003egrpc: Remove the \u003ccode\u003e-dev\u003c/code\u003e suffix from the User-Agent header. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8902\"\u003egrpc/grpc-go#8902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.0\u003c/h2\u003e\n\u003ch1\u003eAPI Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003emem: Add experimental API \u003ccode\u003eSetDefaultBufferPool\u003c/code\u003e to change the default buffer pool. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8806\"\u003e#8806\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/vanja-p\"\u003e\u003ccode\u003e@​vanja-p\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eexperimental/stats: Update \u003ccode\u003eMetricsRecorder\u003c/code\u003e to require embedding the new \u003ccode\u003eUnimplementedMetricsRecorder\u003c/code\u003e (a no-op struct) in all implementations for forward compatibility. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBehavior Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ebalancer/weightedtarget: Remove handling of \u003ccode\u003eAddresses\u003c/code\u003e and only handle \u003ccode\u003eEndpoints\u003c/code\u003e in resolver updates. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8841\"\u003e#8841\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eNew Features\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eexperimental/stats: Add support for asynchronous gauge metrics through the new \u003ccode\u003eAsyncMetricReporter\u003c/code\u003e and \u003ccode\u003eRegisterAsyncReporter\u003c/code\u003e APIs. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epickfirst: Add support for weighted random shuffling of endpoints, as described in \u003ca href=\"https://redirect.github.com/grpc/proposal/pull/535\"\u003egRFC A113\u003c/a\u003e.\n\u003cul\u003e\n\u003cli\u003eThis is enabled by default, and can be turned off using the environment variable \u003ccode\u003eGRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds: Implement \u003ccode\u003e:authority\u003c/code\u003e rewriting, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A81-xds-authority-rewriting.md\"\u003egRFC A81\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8779\"\u003e#8779\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebalancer/randomsubsetting: Implement the \u003ccode\u003erandom_subsetting\u003c/code\u003e LB policy, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A68-random-subsetting.md\"\u003egRFC A68\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8650\"\u003e#8650\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/marek-szews\"\u003e\u003ccode\u003e@​marek-szews\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/tls: Fix a bug where the port was not stripped from the authority override before validation. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8726\"\u003e#8726\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/Atul1710\"\u003e\u003ccode\u003e@​Atul1710\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds/priority: Fix a bug causing delayed failover to lower-priority clusters when a higher-priority cluster is stuck in \u003ccode\u003eCONNECTING\u003c/code\u003e state. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8813\"\u003e#8813\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ehealth: Fix a bug where health checks failed for clients using legacy compression options (\u003ccode\u003eWithDecompressor\u003c/code\u003e or \u003ccode\u003eRPCDecompressor\u003c/code\u003e). (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8765\"\u003e#8765\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/sanki92\"\u003e\u003ccode\u003e@​sanki92\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003etransport: Fix an issue where the HTTP/2 server could skip header size checks when terminating a stream early. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8769\"\u003e#8769\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eserver: Propagate status detail headers, if available, when terminating a stream during request header processing. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8754\"\u003e#8754\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ePerformance Improvements\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/alts: Optimize read buffer alignment to reduce copies. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8791\"\u003e#8791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emem: Optimize pooling and creation of \u003ccode\u003ebuffer\u003c/code\u003e objects.  (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8784\"\u003e#8784\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etransport: Reduce slice re-allocations by reserving slice capacity. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8797\"\u003e#8797\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/dda86dbd9cecb8b35b58c73d507d81d67761205f\"\u003e\u003ccode\u003edda86db\u003c/code\u003e\u003c/a\u003e Change version to 1.79.3 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8983\"\u003e#8983\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/72186f163e75a065c39e6f7df9b6dea07fbdeff5\"\u003e\u003ccode\u003e72186f1\u003c/code\u003e\u003c/a\u003e grpc: enforce strict path checking for incoming requests on the server (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/97ca3522b239edf6813e2b1106924e9d55e89d43\"\u003e\u003ccode\u003e97ca352\u003c/code\u003e\u003c/a\u003e Changing version to 1.79.3-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8954\"\u003e#8954\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/8902ab6efea590f5b3861126559eaa26fa9783b2\"\u003e\u003ccode\u003e8902ab6\u003c/code\u003e\u003c/a\u003e Change the version to release 1.79.2 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8947\"\u003e#8947\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/a9286705aa689bee321ec674323b6896284f3e02\"\u003e\u003ccode\u003ea928670\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8874\"\u003e#8874\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8904\"\u003e#8904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/06df3638c0bcee88197b1033b3ba83e1eb8bc010\"\u003e\u003ccode\u003e06df363\u003c/code\u003e\u003c/a\u003e Change version to 1.79.2-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8903\"\u003e#8903\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/782f2de44f597af18a120527e7682a6670d84289\"\u003e\u003ccode\u003e782f2de\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8902\"\u003e#8902\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/850eccbb2257bd2de6ac28ee88a7172ab6175629\"\u003e\u003ccode\u003e850eccb\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8851\"\u003e#8851\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/765ff056b6890f6c8341894df4e9668e9bfc18ef\"\u003e\u003ccode\u003e765ff05\u003c/code\u003e\u003c/a\u003e Change version to 1.79.0 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8850\"\u003e#8850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/68804be0e78ed0365bb5a576dedc12e2168ed63e\"\u003e\u003ccode\u003e68804be\u003c/code\u003e\u003c/a\u003e Cherry pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8896\"\u003e#8896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/grpc/grpc-go/compare/v1.72.1...v1.79.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/livechat/opentelemetry-go/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/livechat/opentelemetry-go/pull/7","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/livechat%2Fopentelemetry-go/issues/7","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/7/packages"},{"uuid":"4227111316","node_id":"PR_kwDOOguN787Q6ciV","number":5,"state":"closed","title":"Bump the go_modules group across 5 directories with 9 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-04-10T18:23:21.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-08T19:29:42.000Z","updated_at":"2026-04-10T18:23:22.000Z","time_to_close":168819,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"go_modules","update_count":9,"packages":[{"name":"github.com/hashicorp/go-getter","old_version":"1.7.8","new_version":"1.7.9","repository_url":"https://github.com/hashicorp/go-getter"},{"name":"go.opentelemetry.io/otel/sdk","old_version":"1.31.0","new_version":"1.43.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"},{"name":"golang.org/x/crypto","old_version":"0.36.0","new_version":"0.45.0","repository_url":"https://github.com/golang/crypto"},{"name":"google.golang.org/grpc","old_version":"1.69.4","new_version":"1.79.3","repository_url":"https://github.com/grpc/grpc-go"},{"name":"github.com/antchfx/xpath","old_version":"1.1.10","new_version":"1.3.6","repository_url":"https://github.com/antchfx/xpath"},{"name":"github.com/cli/go-gh/v2","old_version":"2.11.2","new_version":"2.12.1","repository_url":"https://github.com/cli/go-gh"},{"name":"github.com/cloudflare/circl","old_version":"1.4.0","new_version":"1.6.3","repository_url":"https://github.com/cloudflare/circl"},{"name":"github.com/ulikunitz/xz","old_version":"0.5.10","new_version":"0.5.14","repository_url":"https://github.com/ulikunitz/xz"},{"name":"go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp","old_version":"1.19.0","new_version":"1.43.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 9 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/hashicorp/go-getter](https://github.com/hashicorp/go-getter) | `1.7.8` | `1.7.9` |\n| [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.31.0` | `1.43.0` |\n| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.36.0` | `0.45.0` |\n| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.69.4` | `1.79.3` |\n| [github.com/antchfx/xpath](https://github.com/antchfx/xpath) | `1.1.10` | `1.3.6` |\n| [github.com/cli/go-gh/v2](https://github.com/cli/go-gh) | `2.11.2` | `2.12.1` |\n| [github.com/cloudflare/circl](https://github.com/cloudflare/circl) | `1.4.0` | `1.6.3` |\n| [github.com/ulikunitz/xz](https://github.com/ulikunitz/xz) | `0.5.10` | `0.5.14` |\n| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go) | `1.19.0` | `1.43.0` |\n\nBumps the go_modules group with 1 update in the /internal/backend/remote-state/azure directory: [golang.org/x/crypto](https://github.com/golang/crypto).\nBumps the go_modules group with 2 updates in the /internal/backend/remote-state/gcs directory: [golang.org/x/crypto](https://github.com/golang/crypto) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 1 update in the /internal/backend/remote-state/kubernetes directory: [golang.org/x/crypto](https://github.com/golang/crypto).\nBumps the go_modules group with 1 update in the /internal/backend/remote-state/oci directory: [golang.org/x/crypto](https://github.com/golang/crypto).\n\nUpdates `github.com/hashicorp/go-getter` from 1.7.8 to 1.7.9\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/hashicorp/go-getter/releases\"\u003egithub.com/hashicorp/go-getter's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.7.9\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSpeed up XZ decompression by 5x with bufio wrapper by \u003ca href=\"https://github.com/vsarunas\"\u003e\u003ccode\u003e@​vsarunas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/520\"\u003ehashicorp/go-getter#520\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix CI Workflow by \u003ca href=\"https://github.com/mohanmanikanta2299\"\u003e\u003ccode\u003e@​mohanmanikanta2299\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/522\"\u003ehashicorp/go-getter#522\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: Remove use of \u0026quot;mitchellh/go-testing-interface\u0026quot; for stdlib by \u003ca href=\"https://github.com/jrasell\"\u003e\u003ccode\u003e@​jrasell\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/523\"\u003ehashicorp/go-getter#523\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: url redact of multiple sshkey by \u003ca href=\"https://github.com/dduzgun-security\"\u003e\u003ccode\u003e@​dduzgun-security\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/528\"\u003ehashicorp/go-getter#528\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePublish arm binaries by \u003ca href=\"https://github.com/sethvargo\"\u003e\u003ccode\u003e@​sethvargo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/525\"\u003ehashicorp/go-getter#525\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix errcheck lint errors and run it as part of pr checks by \u003ca href=\"https://github.com/abhijeetviswa\"\u003e\u003ccode\u003e@​abhijeetviswa\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/530\"\u003ehashicorp/go-getter#530\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix additional lint errors and increase linter scope by \u003ca href=\"https://github.com/abhijeetviswa\"\u003e\u003ccode\u003e@​abhijeetviswa\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/531\"\u003ehashicorp/go-getter#531\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIND-3728 enabling dependabot by \u003ca href=\"https://github.com/KaushikiAnand\"\u003e\u003ccode\u003e@​KaushikiAnand\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/529\"\u003ehashicorp/go-getter#529\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: go-getter subdir paths by \u003ca href=\"https://github.com/dduzgun-security\"\u003e\u003ccode\u003e@​dduzgun-security\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/540\"\u003ehashicorp/go-getter#540\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vsarunas\"\u003e\u003ccode\u003e@​vsarunas\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/520\"\u003ehashicorp/go-getter#520\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jrasell\"\u003e\u003ccode\u003e@​jrasell\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/523\"\u003ehashicorp/go-getter#523\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sethvargo\"\u003e\u003ccode\u003e@​sethvargo\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/525\"\u003ehashicorp/go-getter#525\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/abhijeetviswa\"\u003e\u003ccode\u003e@​abhijeetviswa\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/530\"\u003ehashicorp/go-getter#530\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KaushikiAnand\"\u003e\u003ccode\u003e@​KaushikiAnand\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/529\"\u003ehashicorp/go-getter#529\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/hashicorp/go-getter/compare/v1.7.8...v1.7.9\"\u003ehttps://github.com/hashicorp/go-getter/compare/v1.7.8...v1.7.9\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/go-getter/commit/e70221100018573cdc74411c95c19b2a372f6728\"\u003e\u003ccode\u003ee702211\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/issues/532\"\u003e#532\u003c/a\u003e from hashicorp/dependabot/github_actions/actions-8948...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/go-getter/commit/df0a14fa67f2921eabff8fbdb51445ac03daeb87\"\u003e\u003ccode\u003edf0a14f\u003c/code\u003e\u003c/a\u003e [chore] : Bump the actions group with 8 updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/go-getter/commit/87541b2501c00df5eaedea6acc61a2a4a4efa5b7\"\u003e\u003ccode\u003e87541b2\u003c/code\u003e\u003c/a\u003e fix: go-getter subdir paths (\u003ca href=\"https://redirect.github.com/hashicorp/go-getter/issues/540\"\u003e#540\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/go-getter/commit/37130302313c9294df898ac96e2565a65369ec68\"\u003e\u003ccode\u003e3713030\u003c/code\u003e\u003c/a\u003e [Compliance] - PR Template Changes Required\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/go-getter/commit/af2dd3ca2764281bf6b7468e05028a8b114c63a7\"\u003e\u003ccode\u003eaf2dd3c\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/issues/529\"\u003e#529\u003c/a\u003e from hashicorp/dependabot-intge\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/go-getter/commit/bf526297fa4cd429fcf31da9e4a6bf6a0b512026\"\u003e\u003ccode\u003ebf52629\u003c/code\u003e\u003c/a\u003e updating dependabot.yml\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/go-getter/commit/1f63e10d3b421544473bf52103b41eb423e2c897\"\u003e\u003ccode\u003e1f63e10\u003c/code\u003e\u003c/a\u003e changelog added, updated dependabot.yaml\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/go-getter/commit/45af45918c6958be58f87d1576ac4a0b32f7eb4b\"\u003e\u003ccode\u003e45af459\u003c/code\u003e\u003c/a\u003e fix additional lint errors and increase linter scope\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/go-getter/commit/c8c6aba0f7ad4e3937ef7cfcb50627520e498252\"\u003e\u003ccode\u003ec8c6aba\u003c/code\u003e\u003c/a\u003e fix errcheck lint errors and run it as part of pr checks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/go-getter/commit/9b76f983e594375fdef9e231822c805c82ec9ed7\"\u003e\u003ccode\u003e9b76f98\u003c/code\u003e\u003c/a\u003e copywrite header added\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/hashicorp/go-getter/compare/v1.7.8...v1.7.9\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/sdk` from 1.31.0 to 1.43.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/sdk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.43.0/0.65.0/0.19.0] 2026-04-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eIsRandom\u003c/code\u003e and \u003ccode\u003eWithRandom\u003c/code\u003e on \u003ccode\u003eTraceFlags\u003c/code\u003e, and \u003ccode\u003eIsRandom\u003c/code\u003e on \u003ccode\u003eSpanContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e for \u003ca href=\"https://www.w3.org/TR/trace-context-2/#random-trace-id-flag\"\u003eW3C Trace Context Level 2 Random Trace ID Flag\u003c/a\u003e support. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012\"\u003e#8012\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd service detection with \u003ccode\u003eWithService\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642\"\u003e#7642\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eDefaultWithContext\u003c/code\u003e and \u003ccode\u003eEnvironmentWithContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to support plumbing \u003ccode\u003econtext.Context\u003c/code\u003e through default and environment detectors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051\"\u003e#8051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd support for per-series start time tracking for cumulative metrics in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true\u003c/code\u003e to enable. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060\"\u003e#8060\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithCardinalityLimitSelector\u003c/code\u003e for metric reader for configuring cardinality limits specific to the instrument kind. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855\"\u003e#7855\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce the \u003ccode\u003eEMPTY\u003c/code\u003e Type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to reflect that an empty value is now a valid value, with \u003ccode\u003eINVALID\u003c/code\u003e remaining as a deprecated alias of \u003ccode\u003eEMPTY\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove slice handling in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to optimize short slice values with fixed-size fast paths. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039\"\u003e#8039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of span metric recording in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e by returning early if self-observability is not enabled. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067\"\u003e#8067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove formatting of metric data diffs in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073\"\u003e#8073\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeprecated\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eINVALID\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. Use \u003ccode\u003eEMPTY\u003c/code\u003e instead. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReturn spec-compliant \u003ccode\u003eTraceIdRatioBased\u003c/code\u003e description. This is a breaking behavioral change, but it is necessary to\nmake the implementation \u003ca href=\"https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased\"\u003espec-compliant\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027\"\u003e#8027\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a race condition in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056\"\u003e#8056\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003ekenv\u003c/code\u003e command on BSD. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to correctly handle HTTP2 GOAWAY frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.40.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985\"\u003e#7985\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9276201a64b623606e3eaa0d61ae8ee6d62756c0\"\u003e\u003ccode\u003e9276201\u003c/code\u003e\u003c/a\u003e Release v1.43.0 / v0.65.0 / v0.19.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8128\"\u003e#8128\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/61b8c9466c4e6b17e69b622279fe9b63fb15c89a\"\u003e\u003ccode\u003e61b8c94\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8131\"\u003e#8131\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/97a086e82ffe01502f4c620e9c447efa229e2a23\"\u003e\u003ccode\u003e97a086e\u003c/code\u003e\u003c/a\u003e chore(deps): update github.com/golangci/dupl digest to c99c5cf (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8122\"\u003e#8122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/5e363de517dba6db62736b2f5cdef0e0929b4cd0\"\u003e\u003ccode\u003e5e363de\u003c/code\u003e\u003c/a\u003e limit response body size for OTLP HTTP exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/35214b60138eac8dec97a2d2b851d8c8471680c7\"\u003e\u003ccode\u003e35214b6\u003c/code\u003e\u003c/a\u003e Use an absolute path when calling bsd kenv (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/290024ceaf695f9cdbf29a0c6731a317d92bc361\"\u003e\u003ccode\u003e290024c\u003c/code\u003e\u003c/a\u003e fix(deps): update module google.golang.org/grpc to v1.80.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8121\"\u003e#8121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/e70658e098033d6bb5ec1b399de16bbb2642f6dc\"\u003e\u003ccode\u003ee70658e\u003c/code\u003e\u003c/a\u003e fix: support getBody in otelploghttp (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4afe468e3b4859c949a1c1e8d92684d43d86ef8a\"\u003e\u003ccode\u003e4afe468\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 9d38bb4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8117\"\u003e#8117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b9ca729776309e3c08fe700c131797a3b4d10634\"\u003e\u003ccode\u003eb9ca729\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8115\"\u003e#8115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/69472ec56cb7674d55ca2e2bcb04dea73228ab79\"\u003e\u003ccode\u003e69472ec\u003c/code\u003e\u003c/a\u003e chore(deps): update fossas/fossa-action action to v1.9.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8118\"\u003e#8118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.31.0...v1.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.36.0 to 0.45.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/4e0068c0098be10d7025c99ab7c50ce454c1f0f9\"\u003e\u003ccode\u003e4e0068c\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e79546e28b85ea53dd37afe1c4102746ef553b9c\"\u003e\u003ccode\u003ee79546e\u003c/code\u003e\u003c/a\u003e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f91f7a7c31bf90b39c1de895ad116a2bacc88748\"\u003e\u003ccode\u003ef91f7a7\u003c/code\u003e\u003c/a\u003e ssh/agent: prevent panic on malformed constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/2df4153a0311bdfea44376e0eb6ef2faefb0275b\"\u003e\u003ccode\u003e2df4153\u003c/code\u003e\u003c/a\u003e acme/autocert: let automatic renewal work with short lifetime certs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/bcf6a849efcf4702fa5172cb0998b46c3da1e989\"\u003e\u003ccode\u003ebcf6a84\u003c/code\u003e\u003c/a\u003e acme: pass context to request\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b4f2b62076abeee4e43fb59544dac565715fbf1e\"\u003e\u003ccode\u003eb4f2b62\u003c/code\u003e\u003c/a\u003e ssh: fix error message on unsupported cipher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/79ec3a51fcc7fbd2691d56155d578225ccc542e2\"\u003e\u003ccode\u003e79ec3a5\u003c/code\u003e\u003c/a\u003e ssh: allow to bind to a hostname in remote forwarding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/122a78f140d9d3303ed3261bc374bbbca149140f\"\u003e\u003ccode\u003e122a78f\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/c0531f9c34514ad5c5551e2d6ce569ca673a8afd\"\u003e\u003ccode\u003ec0531f9\u003c/code\u003e\u003c/a\u003e all: eliminate vet diagnostics\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/0997000b45e3a40598272081bcad03ffd21b8adb\"\u003e\u003ccode\u003e0997000\u003c/code\u003e\u003c/a\u003e all: fix some comments\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.36.0...v0.45.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google.golang.org/grpc` from 1.69.4 to 1.79.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc-go/releases\"\u003egoogle.golang.org/grpc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 1.79.3\u003c/h2\u003e\n\u003ch1\u003eSecurity\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eserver: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted \u0026quot;deny\u0026quot; rules in interceptors like \u003ccode\u003egrpc/authz\u003c/code\u003e. Any request with a non-canonical path is now immediately rejected with an \u003ccode\u003eUnimplemented\u003c/code\u003e error. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.2\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003estats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8874\"\u003egrpc/grpc-go#8874\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.1\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003egrpc: Remove the \u003ccode\u003e-dev\u003c/code\u003e suffix from the User-Agent header. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8902\"\u003egrpc/grpc-go#8902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.0\u003c/h2\u003e\n\u003ch1\u003eAPI Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003emem: Add experimental API \u003ccode\u003eSetDefaultBufferPool\u003c/code\u003e to change the default buffer pool. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8806\"\u003e#8806\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/vanja-p\"\u003e\u003ccode\u003e@​vanja-p\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eexperimental/stats: Update \u003ccode\u003eMetricsRecorder\u003c/code\u003e to require embedding the new \u003ccode\u003eUnimplementedMetricsRecorder\u003c/code\u003e (a no-op struct) in all implementations for forward compatibility. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBehavior Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ebalancer/weightedtarget: Remove handling of \u003ccode\u003eAddresses\u003c/code\u003e and only handle \u003ccode\u003eEndpoints\u003c/code\u003e in resolver updates. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8841\"\u003e#8841\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eNew Features\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eexperimental/stats: Add support for asynchronous gauge metrics through the new \u003ccode\u003eAsyncMetricReporter\u003c/code\u003e and \u003ccode\u003eRegisterAsyncReporter\u003c/code\u003e APIs. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epickfirst: Add support for weighted random shuffling of endpoints, as described in \u003ca href=\"https://redirect.github.com/grpc/proposal/pull/535\"\u003egRFC A113\u003c/a\u003e.\n\u003cul\u003e\n\u003cli\u003eThis is enabled by default, and can be turned off using the environment variable \u003ccode\u003eGRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds: Implement \u003ccode\u003e:authority\u003c/code\u003e rewriting, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A81-xds-authority-rewriting.md\"\u003egRFC A81\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8779\"\u003e#8779\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebalancer/randomsubsetting: Implement the \u003ccode\u003erandom_subsetting\u003c/code\u003e LB policy, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A68-random-subsetting.md\"\u003egRFC A68\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8650\"\u003e#8650\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/marek-szews\"\u003e\u003ccode\u003e@​marek-szews\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/tls: Fix a bug where the port was not stripped from the authority override before validation. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8726\"\u003e#8726\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/Atul1710\"\u003e\u003ccode\u003e@​Atul1710\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds/priority: Fix a bug causing delayed failover to lower-priority clusters when a higher-priority cluster is stuck in \u003ccode\u003eCONNECTING\u003c/code\u003e state. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8813\"\u003e#8813\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ehealth: Fix a bug where health checks failed for clients using legacy compression options (\u003ccode\u003eWithDecompressor\u003c/code\u003e or \u003ccode\u003eRPCDecompressor\u003c/code\u003e). (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8765\"\u003e#8765\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/sanki92\"\u003e\u003ccode\u003e@​sanki92\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003etransport: Fix an issue where the HTTP/2 server could skip header size checks when terminating a stream early. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8769\"\u003e#8769\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eserver: Propagate status detail headers, if available, when terminating a stream during request header processing. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8754\"\u003e#8754\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ePerformance Improvements\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/alts: Optimize read buffer alignment to reduce copies. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8791\"\u003e#8791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emem: Optimize pooling and creation of \u003ccode\u003ebuffer\u003c/code\u003e objects.  (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8784\"\u003e#8784\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etransport: Reduce slice re-allocations by reserving slice capacity. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8797\"\u003e#8797\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/dda86dbd9cecb8b35b58c73d507d81d67761205f\"\u003e\u003ccode\u003edda86db\u003c/code\u003e\u003c/a\u003e Change version to 1.79.3 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8983\"\u003e#8983\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/72186f163e75a065c39e6f7df9b6dea07fbdeff5\"\u003e\u003ccode\u003e72186f1\u003c/code\u003e\u003c/a\u003e grpc: enforce strict path checking for incoming requests on the server (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/97ca3522b239edf6813e2b1106924e9d55e89d43\"\u003e\u003ccode\u003e97ca352\u003c/code\u003e\u003c/a\u003e Changing version to 1.79.3-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8954\"\u003e#8954\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/8902ab6efea590f5b3861126559eaa26fa9783b2\"\u003e\u003ccode\u003e8902ab6\u003c/code\u003e\u003c/a\u003e Change the version to release 1.79.2 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8947\"\u003e#8947\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/a9286705aa689bee321ec674323b6896284f3e02\"\u003e\u003ccode\u003ea928670\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8874\"\u003e#8874\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8904\"\u003e#8904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/06df3638c0bcee88197b1033b3ba83e1eb8bc010\"\u003e\u003ccode\u003e06df363\u003c/code\u003e\u003c/a\u003e Change version to 1.79.2-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8903\"\u003e#8903\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/782f2de44f597af18a120527e7682a6670d84289\"\u003e\u003ccode\u003e782f2de\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8902\"\u003e#8902\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/850eccbb2257bd2de6ac28ee88a7172ab6175629\"\u003e\u003ccode\u003e850eccb\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8851\"\u003e#8851\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/765ff056b6890f6c8341894df4e9668e9bfc18ef\"\u003e\u003ccode\u003e765ff05\u003c/code\u003e\u003c/a\u003e Change version to 1.79.0 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8850\"\u003e#8850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/68804be0e78ed0365bb5a576dedc12e2168ed63e\"\u003e\u003ccode\u003e68804be\u003c/code\u003e\u003c/a\u003e Cherry pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8896\"\u003e#8896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/grpc/grpc-go/compare/v1.69.4...v1.79.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/antchfx/xpath` from 1.1.10 to 1.3.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/antchfx/xpath/releases\"\u003egithub.com/antchfx/xpath's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.3.6\u003c/h2\u003e\n\u003cp\u003eMerged PR:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/antchfx/xpath/issues/120\"\u003e#120\u003c/a\u003e(\u003ca href=\"https://github.com/mislav\"\u003e\u003ccode\u003e@​mislav\u003c/code\u003e\u003c/a\u003e) - Fix \u003ccode\u003elast()\u003c/code\u003e predicate on grouped expr.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFixed:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/antchfx/xpath/issues/121\"\u003e#121\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease v1.3.5\u003c/h2\u003e\n\u003cp\u003eMerged PR:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/antchfx/xpath/issues/117\"\u003e#117\u003c/a\u003e(\u003ca href=\"https://github.com/mislav\"\u003e\u003ccode\u003e@​mislav\u003c/code\u003e\u003c/a\u003e）- fix \u003ccode\u003eancestor::\u003c/code\u003e axes with position predicate.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFixed:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/antchfx/xpath/issues/113\"\u003e#113\u003c/a\u003e - (fix \u003ccode\u003estring()\u003c/code\u003e function)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.3.4\u003c/h2\u003e\n\u003cp\u003eMerged PR:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/antchfx/xpath/issues/107\"\u003e#107\u003c/a\u003e(\u003ca href=\"https://github.com/Mrflatt\"\u003e\u003ccode\u003e@​Mrflatt\u003c/code\u003e\u003c/a\u003e) - supports Regexp feature in \u003ccode\u003ereplace()\u003c/code\u003e function\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/antchfx/xpath/issues/111\"\u003e#111\u003c/a\u003e(\u003ca href=\"https://github.com/wjc4\"\u003e\u003ccode\u003e@​wjc4\u003c/code\u003e\u003c/a\u003e) - Improve \u003ccode\u003egetHashCode\u003c/code\u003e performance\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFixed:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/antchfx/xpath/issues/109\"\u003e#109\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.3.3\u003c/h2\u003e\n\u003cp\u003efix non-English predicate query \u003ca href=\"https://redirect.github.com/antchfx/xpath/issues/106\"\u003e#106\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.3.2\u003c/h2\u003e\n\u003cp\u003eNew Features:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSupports Unicode chars for Non-English (PR \u003ca href=\"https://redirect.github.com/antchfx/xpath/issues/100\"\u003e#100\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eBug Fixed:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/antchfx/xpath/issues/101\"\u003e#101\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/antchfx/xpath/issues/102\"\u003e#102\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/antchfx/xpath/issues/104\"\u003e#104\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.3.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMerged PR \u003ca href=\"https://redirect.github.com/antchfx/xpath/issues/97\"\u003e#97\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eAllows node-set numeric operator \u003ccode\u003e+\u003c/code\u003e, \u003ccode\u003e-\u003c/code\u003e, \u003ccode\u003emod()\u003c/code\u003e.\u003ca href=\"https://github.com/antchfx/xpath/commit/4b4638b370e898a9d10709464b8cd460b7dcfd0c\"\u003ehttps://github.com/antchfx/xpath/commit/4b4638b370e898a9d10709464b8cd460b7dcfd0c\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/antchfx/xpath/issues/98\"\u003e#98\u003c/a\u003e, Remove the duplicate element filter \u003ca href=\"https://github.com/antchfx/xpath/commit/5481aef473ee298d297387f5b69e2768df09e0c4\"\u003ehttps://github.com/antchfx/xpath/commit/5481aef473ee298d297387f5b69e2768df09e0c4\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.3.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efixes \u003ca href=\"https://redirect.github.com/antchfx/xpath/issues/93\"\u003e#93\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNew features:\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/antchfx/xpath/commit/afd4762cc342af56345a3fb4002a59281fcab494\"\u003e\u003ccode\u003eafd4762\u003c/code\u003e\u003c/a\u003e fix \u003ca href=\"https://redirect.github.com/antchfx/xpath/issues/121\"\u003e#121\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/antchfx/xpath/commit/a8ced8f559cd68fc4aedfc87f21599d1190c0852\"\u003e\u003ccode\u003ea8ced8f\u003c/code\u003e\u003c/a\u003e Merge PR \u003ca href=\"https://redirect.github.com/antchfx/xpath/issues/120\"\u003e#120\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/antchfx/xpath/commit/c92c3ebebbdd67f715161810f97ecfbcaa47921e\"\u003e\u003ccode\u003ec92c3eb\u003c/code\u003e\u003c/a\u003e Fix last() predicate on grouped expressions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/antchfx/xpath/commit/3cbab9750ea36cbae6f967ebbf29b9eda0e841bf\"\u003e\u003ccode\u003e3cbab97\u003c/code\u003e\u003c/a\u003e Merge PR \u003ca href=\"https://redirect.github.com/antchfx/xpath/issues/119\"\u003e#119\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/antchfx/xpath/commit/02c01b0b4051e7edd1bf40f3d595cc9143936aaa\"\u003e\u003ccode\u003e02c01b0\u003c/code\u003e\u003c/a\u003e Fix chained predicates on ancestor axis\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/antchfx/xpath/commit/511abd57bc74e9644fe27f4e52b559065e686e92\"\u003e\u003ccode\u003e511abd5\u003c/code\u003e\u003c/a\u003e Merge PR \u003ca href=\"https://redirect.github.com/antchfx/xpath/issues/117\"\u003e#117\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/antchfx/xpath/commit/060b15493444a0e6c5a232022516e434818f7391\"\u003e\u003ccode\u003e060b154\u003c/code\u003e\u003c/a\u003e Fix positional predicate for the \u0026quot;ancestor\u0026quot; axis\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/antchfx/xpath/commit/8d50c252d867285812177ffd3ff0924104ffb1eb\"\u003e\u003ccode\u003e8d50c25\u003c/code\u003e\u003c/a\u003e fix \u003ca href=\"https://redirect.github.com/antchfx/xpath/issues/112\"\u003e#112\u003c/a\u003e，\u003ca href=\"https://redirect.github.com/antchfx/xpath/issues/113\"\u003e#113\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/antchfx/xpath/commit/b9e198da9fb170a229c9c7e27d52e1a350636f4c\"\u003e\u003ccode\u003eb9e198d\u003c/code\u003e\u003c/a\u003e Merge PR \u003ca href=\"https://redirect.github.com/antchfx/xpath/issues/111\"\u003e#111\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/antchfx/xpath/commit/fcb882bece30fe7d4d8f5069fed13f95a726e62f\"\u003e\u003ccode\u003efcb882b\u003c/code\u003e\u003c/a\u003e improve getHashCode by removing fmt.Sprintf\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/antchfx/xpath/compare/v1.1.10...v1.3.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/cli/go-gh/v2` from 2.11.2 to 2.12.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cli/go-gh/releases\"\u003egithub.com/cli/go-gh/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.12.1\u003c/h2\u003e\n\u003ch2\u003eSecurity\u003c/h2\u003e\n\u003cp\u003eA security vulnerability has been identified in \u003ccode\u003ego-gh\u003c/code\u003e where an attacker-controlled GitHub Enterprise Server could result in executing arbitrary commands on a user's machine by replacing HTTP URLs provided by GitHub with local file paths for browsing.\u003c/p\u003e\n\u003cp\u003eFor more information, see GHSA-g9f5-x53j-h563\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cli/go-gh/compare/v2.12.0...v2.12.1\"\u003ehttps://github.com/cli/go-gh/compare/v2.12.0...v2.12.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.12.0\u003c/h2\u003e\n\u003ch2\u003eIntroducing experimental support for rendering markdown with customizable, accessible colors\u003c/h2\u003e\n\u003cp\u003eUsers with low vision or color blindness rely upon the terminal's ability to change how colors appear, however this requires CLIs to use a limited set of colors:\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cp\u003eThe \u003ca href=\"https://pkg.go.dev/github.com/cli/go-gh/v2/pkg/markdown\"\u003emarkdown rendered\u003c/a\u003e for GitHub CLI and extensions defaults to \u003ca href=\"https://en.wikipedia.org/wiki/ANSI_escape_code#8-bit\"\u003e8-bit colors\u003c/a\u003e that users cannot easily customize in this way.\u003c/p\u003e\n\u003cp\u003eNow, users can force rendered markdown to use customizable, accessible colors by doing one of the following:\u003c/p\u003e\n\u003col\u003e\n\u003cli\u003e\n\u003cp\u003eSet \u003ccode\u003eGH_ACCESSIBLE_COLORS\u003c/code\u003e environment variable to a truthy value\u003c/p\u003e\n\u003cpre lang=\"shell\"\u003e\u003ccode\u003eexport GH_ACCESSIBLE_COLORS=1\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSet \u003ccode\u003eaccessible_colors\u003c/code\u003e configuration setting\u003c/p\u003e\n\u003cpre lang=\"shell\"\u003e\u003ccode\u003egh config set accessible_colors enabled\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003c/ol\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/user-attachments/assets/ccf829c5-6987-453b-a72a-51f452a80d26\"\u003ehttps://github.com/user-attachments/assets/ccf829c5-6987-453b-a72a-51f452a80d26\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eUsers with a \u003ca href=\"https://github.com/charmbracelet/glamour?tab=readme-ov-file#styles\"\u003ecustom\u003ccode\u003echarmbracelet/glamour\u003c/code\u003e style\u003c/a\u003e will continue to have markdown rendered using it.\u003c/p\u003e\n\u003cp\u003eFor more information, see \u003ca href=\"https://redirect.github.com/cli/go-gh/pull/186\"\u003ecli/go-gh#186\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eIntroducing new experimental \u003ccode\u003egithub.com/cli/go-gh/v2/pkg/x\u003c/code\u003e package\u003c/h2\u003e\n\u003cp\u003e\u003ccode\u003ecli/go-gh\u003c/code\u003e provides capabilities used by both the GitHub CLI and CLI extensions.  Some of these packages are stable, however some like the new experimental markdown support are not.\u003c/p\u003e\n\u003cp\u003eThe \u003ca href=\"https://pkg.go.dev/github.com/cli/go-gh/v2/pkg/x\"\u003e\u003ccode\u003egithub.com/cli/go-gh/v2/pkg/x\u003c/code\u003e package\u003c/a\u003e has been created to contain experimental features that are subject to change without notice.\u003c/p\u003e\n\u003ch2\u003eIntroducing new string matcher functions for Go templates\u003c/h2\u003e\n\u003cp\u003eThe following string matcher functions from \u003ca href=\"https://github.com/Masterminds/sprig\"\u003eMasterminds/sprig\u003c/a\u003e have been incorporated for more robust Go template support in GitHub CLI and CLI extensions:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://masterminds.github.io/sprig/strings.html#contains\"\u003e\u003ccode\u003econtains\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://masterminds.github.io/sprig/strings.html#hasprefix-and-hassuffix\"\u003e\u003ccode\u003ehasPrefix\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cli/go-gh/commit/a08820a13f257d6c5b4cb86d37db559ec6d14577\"\u003e\u003ccode\u003ea08820a\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cli/go-gh/commit/1ecf6c49ecb0629c6538d88970b669bf4f989ccc\"\u003e\u003ccode\u003e1ecf6c4\u003c/code\u003e\u003c/a\u003e Expand test cases for schem case sensitivity\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cli/go-gh/commit/56c6f10bd535e14098f5a21232f931463c808a77\"\u003e\u003ccode\u003e56c6f10\u003c/code\u003e\u003c/a\u003e Parse and examine URL, assume scheme if missing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cli/go-gh/commit/055ff2108e3edff35996a8efa3afa0a9e64649f1\"\u003e\u003ccode\u003e055ff21\u003c/code\u003e\u003c/a\u003e PR feedback\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cli/go-gh/commit/258949bd372e4689d3203cbcef8734062ff59a97\"\u003e\u003ccode\u003e258949b\u003c/code\u003e\u003c/a\u003e Test refactor, refine errors, remove VSCode fix\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cli/go-gh/commit/0f8a22fe3a4b3d418268dfef57bcee15330f5b15\"\u003e\u003ccode\u003e0f8a22f\u003c/code\u003e\u003c/a\u003e Enhance OS-specific browser tests, PR feedback\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cli/go-gh/commit/df956a6624bc1210543873062ce0905357be1299\"\u003e\u003ccode\u003edf956a6\u003c/code\u003e\u003c/a\u003e Initial fix for browsing URLs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cli/go-gh/commit/61bf393cf4aeea6d00a6251390f5f67f5b67e727\"\u003e\u003ccode\u003e61bf393\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/cli/go-gh/issues/186\"\u003e#186\u003c/a\u003e from cli/accessible-colors\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cli/go-gh/commit/024a89fbbde5be08804eaaea00fceb77c4d787dd\"\u003e\u003ccode\u003e024a89f\u003c/code\u003e\u003c/a\u003e Remove toolchain directive from library\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cli/go-gh/commit/09a555fed28dc12b9dba40c1fa911ce8ac2645ae\"\u003e\u003ccode\u003e09a555f\u003c/code\u003e\u003c/a\u003e Disable table wrapping for all\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cli/go-gh/compare/v2.11.2...v2.12.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/cloudflare/circl` from 1.4.0 to 1.6.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cloudflare/circl/releases\"\u003egithub.com/cloudflare/circl's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eCIRCL v1.6.3\u003c/h2\u003e\n\u003cp\u003eFix a bug on ecc/p384 scalar multiplication.\u003c/p\u003e\n\u003ch3\u003eWhat's Changed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esign/mldsa: Check opts for nil value  by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/582\"\u003ecloudflare/circl#582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eecc/p384: Point addition must handle point doubling case. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/583\"\u003ecloudflare/circl#583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease CIRCL v1.6.3 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/584\"\u003ecloudflare/circl#584\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNew SLH-DSA, improvements in ML-DSA for arm64.\u003c/li\u003e\n\u003cli\u003eTested compilation on WASM.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize pairing product computation by moving exponentiations to G1. by \u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esign: Adding SLH-DSA signature by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/512\"\u003ecloudflare/circl#512\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate code generators to CIRCL v1.6.1. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/548\"\u003ecloudflare/circl#548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eML-DSA: Add preliminary Wycheproof test vectors by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/552\"\u003ecloudflare/circl#552\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ego fmt by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/554\"\u003ecloudflare/circl#554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egz-compressing test vectors, use of HexBytes and ReadGzip functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/555\"\u003ecloudflare/circl#555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Removes use of elliptic Marshal and Unmarshal functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/556\"\u003ecloudflare/circl#556\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport encoding/decoding ML-DSA private keys (as long as they contain seeds) by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/559\"\u003ecloudflare/circl#559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to golangci-lint v2 by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/560\"\u003ecloudflare/circl#560\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreparation for ARM64 Implementation of poly operations for dilithium package. by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eprepare power2Round for custom implementations in assembly by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/564\"\u003ecloudflare/circl#564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eARM64 implementation for poly.PackLe16 by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/563\"\u003ecloudflare/circl#563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polyMulBy2toD by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/565\"\u003ecloudflare/circl#565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polySub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/566\"\u003ecloudflare/circl#566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: add byteLen method for short groups and RandomScalar uses rand.Int by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/568\"\u003ecloudflare/circl#568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of poly.Add/Sub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/572\"\u003ecloudflare/circl#572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Adding cryptobyte marshaling to scalars by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/569\"\u003ecloudflare/circl#569\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumping up to Go1.25 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/574\"\u003ecloudflare/circl#574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: Including WASM compilation. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/577\"\u003ecloudflare/circl#577\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to using package-declared HPKE errors for shortkem instead of standard library errors by \u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease v1.6.2 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/579\"\u003ecloudflare/circl#579\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixes some point checks on the FourQ curve.\u003c/li\u003e\n\u003cli\u003eHybrid KEM fails on low-order points.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/24ae53c5d6f7fe18203adc125ba3ed76a38703e1\"\u003e\u003ccode\u003e24ae53c\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/581020bd4a836b8ce7bd4e414ba2884c07dbc906\"\u003e\u003ccode\u003e581020b\u003c/code\u003e\u003c/a\u003e Rename method to oddMultiplesProjective.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/12209a4566605692a8402594e367a5aed5148460\"\u003e\u003ccode\u003e12209a4\u003c/code\u003e\u003c/a\u003e Removing unused cmov for jacobian points.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/fcba359f4178645d2c9e50f29ab6966337da4b95\"\u003e\u003ccode\u003efcba359\u003c/code\u003e\u003c/a\u003e ecc/p384: use of complete projective formulas for scalar multiplication.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/5e1bae8d8c2df4e717c2c5c2d5b5d60b629b2ac6\"\u003e\u003ccode\u003e5e1bae8\u003c/code\u003e\u003c/a\u003e ecc/p384: handle point doubling in point addition with Jacobian coordinates.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/341604685ff97e8f7440ae4b4711ba1c118c648c\"\u003e\u003ccode\u003e3416046\u003c/code\u003e\u003c/a\u003e Check opts for nil value.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/a763d47a6dce43d1f4f7b697d1d7810463a526f6\"\u003e\u003ccode\u003ea763d47\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3c70bf9ad53b681fbe5ba6067e454a86549fee8a\"\u003e\u003ccode\u003e3c70bf9\u003c/code\u003e\u003c/a\u003e Bump x/crypto x/sys dependencies.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3f0f15b2bfe67bad81a35e8aec81ae42ca78349d\"\u003e\u003ccode\u003e3f0f15b\u003c/code\u003e\u003c/a\u003e Revert to using package-declared HPKE errors for shortkem instead of standard...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/23491bd573cf29b6f567057a158203a2c9dfa30d\"\u003e\u003ccode\u003e23491bd\u003c/code\u003e\u003c/a\u003e Adding generic Power2Round method.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.4.0...v1.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/ulikunitz/xz` from 0.5.10 to 0.5.14\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ulikunitz/xz/commit/7184815834c4777e8fa665946721d5fe114c2c35\"\u003e\u003ccode\u003e7184815\u003c/code\u003e\u003c/a\u003e Preparation of release v0.5.14\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ulikunitz/xz/commit/88ddf1d0d98d688db65de034f48960b2760d2ae2\"\u003e\u003ccode\u003e88ddf1d\u003c/code\u003e\u003c/a\u003e Address Security Issue GHSA-jc7w-c686-c4v9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ulikunitz/xz/commit/c8314b8f21e9c5e25b52da07544cac14db277e89\"\u003e\u003ccode\u003ec8314b8\u003c/code\u003e\u003c/a\u003e Add new package xio with WriteCloserStack\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ulikunitz/xz/commit/4f11dce79b9977ec2976a978d6c594ea1c23cf29\"\u003e\u003ccode\u003e4f11dce\u003c/code\u003e\u003c/a\u003e Update README.md and SECURITY.md to address security questions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ulikunitz/xz/commit/f56ebbfaa2400067dcda8ade26ce912c2873ca08\"\u003e\u003ccode\u003ef56ebbf\u003c/code\u003e\u003c/a\u003e TODO.md: fix a typo\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ulikunitz/xz/commit/9d122a61c181b044e6b8b9c09979dfe7c513e2db\"\u003e\u003ccode\u003e9d122a6\u003c/code\u003e\u003c/a\u003e release version v0.5.11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ulikunitz/xz/commit/4ce6f08566c86bf66a9bc1c2f811336ae2e462c0\"\u003e\u003ccode\u003e4ce6f08\u003c/code\u003e\u003c/a\u003e lzma: fix handling of small dictionary sizes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ulikunitz/xz/commit/0b7c695d23f84aa7e968bbcaa1980847683d909a\"\u003e\u003ccode\u003e0b7c695\u003c/code\u003e\u003c/a\u003e xz: add reader benchmark\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ulikunitz/xz/commit/553507794087117cd9bdc95c924c1c5611bd991a\"\u003e\u003ccode\u003e5535077\u003c/code\u003e\u003c/a\u003e xz: add compression reate to Writer benchmark\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ulikunitz/xz/commit/886dc9acde193dec013d4812372011c64f6efbc2\"\u003e\u003ccode\u003e886dc9a\u003c/code\u003e\u003c/a\u003e xz: add benchmark for Writer\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ulikunitz/xz/compare/v0.5.10...v0.5.14\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp` from 1.19.0 to 1.43.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/releases\"\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease v1.23.0-rc.1\u003c/h2\u003e\n\u003cp\u003eThis is a release candidate for the v1.23.0 release. That release is expected to include the \u003ccode\u003ev1\u003c/code\u003e release of the following modules:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ego.opentelemetry.io/otel/bridge/opencensus\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ego.opentelemetry.io/otel/bridge/opencensus/test\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ego.opentelemetry.io/otel/example/opencensus\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ego.opentelemetry.io/otel/exporters/stdout/stdoutmetric\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSee our \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/8f2bdf85ed99c6532b8c76688e7ffcf9e48c3e6d/VERSIONING.md\"\u003eversioning policy\u003c/a\u003e for more information about these stability guarantees.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.43.0/0.65.0/0.19.0] 2026-04-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eIsRandom\u003c/code\u003e and \u003ccode\u003eWithRandom\u003c/code\u003e on \u003ccode\u003eTraceFlags\u003c/code\u003e, and \u003ccode\u003eIsRandom\u003c/code\u003e on \u003ccode\u003eSpanContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e for \u003ca href=\"https://www.w3.org/TR/trace-context-2/#random-trace-id-flag\"\u003eW3C Trace Context Level 2 Random Trace ID Flag\u003c/a\u003e support. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012\"\u003e#8012\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd service detection with \u003ccode\u003eWithService\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642\"\u003e#7642\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eDefaultWithContext\u003c/code\u003e and \u003ccode\u003eEnvironmentWithContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to support plumbing \u003ccode\u003econtext.Context\u003c/code\u003e through default and environment detectors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051\"\u003e#8051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd support for per-series start time tracking for cumulative metrics in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true\u003c/code\u003e to enable. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060\"\u003e#8060\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithCardinalityLimitSelector\u003c/code\u003e for metric reader for configuring cardinality limits specific to the instrument kind. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855\"\u003e#7855\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce the \u003ccode\u003eEMPTY\u003c/code\u003e Type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to reflect that an empty value is now a valid value, with \u003ccode\u003eINVALID\u003c/code\u003e remaining as a deprecated alias of \u003ccode\u003eEMPTY\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove slice handling in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to optimize short slice values with fixed-size fast paths. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039\"\u003e#8039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of span metric recording in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e by returning early if self-observability is not enabled. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067\"\u003e#8067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove formatting of metric data diffs in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073\"\u003e#8073\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeprecated\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eINVALID\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. Use \u003ccode\u003eEMPTY\u003c/code\u003e instead. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReturn spec-compliant \u003ccode\u003eTraceIdRatioBased\u003c/code\u003e description. This is a breaking behavioral change, but it is necessary to\nmake the implementation \u003ca href=\"https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased\"\u003espec-compliant\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027\"\u003e#8027\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a race condition in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056\"\u003e#8056\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003ekenv\u003c/code\u003e command on BSD. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to correctly handle HTTP2 GOAWAY frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.40.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985\"\u003e#7985\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9276201a64b623606e3eaa0d61ae8ee6d62756c0\"\u003e\u003ccode\u003e9276201\u003c/code\u003e\u003c/a\u003e Release v1.43.0 / v0.65.0 / v0.19.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8128\"\u003e#8128\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/61b8c9466c4e6b17e69b622279fe9b63fb15c89a\"\u003e\u003ccode\u003e61b8c94\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8131\"\u003e#8131\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/97a086e82ffe01502f4c620e9c447efa229e2a23\"\u003e\u003ccode\u003e97a086e\u003c/code\u003e\u003c/a\u003e chore(deps): update github.com/golangci/dupl digest to c99c5cf (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8122\"\u003e#8122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/5e363de517dba6db62736b2f5cdef0e0929b4cd0\"\u003e\u003ccode\u003e5e363de\u003c/code\u003e\u003c/a\u003e limit response body size for OTLP HTTP exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/35214b60138eac8dec97a2d2b851d8c8471680c7\"\u003e\u003ccode\u003e35214b6\u003c/code\u003e\u003c/a\u003e Use an absolute path when calling bsd kenv (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/290024ceaf695f9cdbf29a0c6731a317d92bc361\"\u003e\u003ccode\u003e290024c\u003c/code\u003e\u003c/a\u003e fix(deps): update module google.golang.org/grpc to v1.80.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8121\"\u003e#8121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/e70658e098033d6bb5ec1b399de16bbb2642f6dc\"\u003e\u003ccode\u003ee70658e\u003c/code\u003e\u003c/a\u003e fix: support getBody in otelploghttp (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4afe468e3b4859c949a1c1e8d92684d43d86ef8a\"\u003e\u003ccode\u003e4afe468\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 9d38bb4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8117\"\u003e#8117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b9ca729776309e3c08fe700c131797a3b4d10634\"\u003e\u003ccode\u003eb9ca729\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8115\"\u003e#8115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/69472ec56cb7674d55ca2e2bcb04dea73228ab79\"\u003e\u003ccode\u003e69472ec\u003c/code\u003e\u003c/a\u003e chore(deps): update fossas/fossa-action action to v1.9.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8118\"\u003e#8118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.19.0...v1.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.36.0 to 0.45.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/4e0068c0098be10d7025c99ab7c50ce454c1f0f9\"\u003e\u003ccode\u003e4e0068c\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e79546e28b85ea53dd37afe1c4102746ef553b9c\"\u003e\u003ccode\u003ee79546e\u003c/code\u003e\u003c/a\u003e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f91f7a7c31bf90b39c1de895ad116a2bacc88748\"\u003e\u003ccode\u003ef91f7a7\u003c/code\u003e\u003c/a\u003e ssh/agent: prevent panic on malformed constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/2df4153a0311bdfea44376e0eb6ef2faefb0275b\"\u003e\u003ccode\u003e2df4153\u003c/code\u003e\u003c/a\u003e acme/autocert: let automatic renewal work with short lifetime certs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/bcf6a849efcf4702fa5172cb0998b46c3da1e989\"\u003e\u003ccode\u003ebcf6a84\u003c/code\u003e\u003c/a\u003e acme: pass context to request\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b4f2b62076abeee4e43fb59544dac565715fbf1e\"\u003e\u003ccode\u003eb4f2b62\u003c/code\u003e\u003c/a\u003e ssh: fix error message on unsupported cipher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/79ec3a51fcc7fbd2691d56155d578225ccc542e2\"\u003e\u003ccode\u003e79ec3a5\u003c/code\u003e\u003c/a\u003e ssh: allow to bind to a hostname in remote forwarding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/122a78f140d9d3303ed3261bc374bbbca149140f\"\u003e\u003ccode\u003e122a78f\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/c0531f9c34514ad5c5551e2d6ce569ca673a8afd\"\u003e\u003ccode\u003ec0531f9\u003c/code\u003e\u003c/a\u003e all: eliminate vet diagnostics\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/0997000b45e3a40598272081bcad03ffd21b8adb\"\u003e\u003ccode\u003e0997000\u003c/code\u003e\u003c/a\u003e all: fix some comments\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.36.0...v0.45.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.36.0 to 0.45.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/4e0068c0098be10d7025c99ab7c50ce454c1f0f9\"\u003e\u003ccode\u003e4e0068c\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e79546e28b85ea53dd37afe1c4102746ef553b9c\"\u003e\u003ccode\u003ee79546e\u003c/code\u003e\u003c/a\u003e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f91f7a7c31bf90b39c1de895ad116a2bacc88748\"\u003e\u003ccode\u003ef91f7a7\u003c/code\u003e\u003c/a\u003e ssh/agent: prevent panic on malformed constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/2df4153a0311bdfea44376e0eb6ef2faefb0275b\"\u003e\u003ccode\u003e2df4153\u003c/code\u003e\u003c/a\u003e acme/autocert: let automatic renewal work with short lifetime certs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/bcf6a849efcf4702fa5172cb0998b46c3da1e989\"\u003e\u003ccode\u003ebcf6a84\u003c/code\u003e\u003c/a\u003e acme: pass context to request\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b4f2b62076abeee4e43fb59544dac565715fbf1e\"\u003e\u003ccode\u003eb4f2b62\u003c/code\u003e\u003c/a\u003e ssh: fix error message on unsupported cipher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/79ec3a51fcc7fbd2691d56155d578225ccc542e2\"\u003e\u003ccode\u003e79ec3a5\u003c/code\u003e\u003c/a\u003e ssh: allow to bind to a hostname in remote forwarding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/122a78f140d9d3303ed3261bc374bbbca149140f\"\u003e\u003ccode\u003e122a78f\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/c0531f9c34514ad5c5551e2d6ce569ca673a8afd\"\u003e\u003ccode\u003ec0531f9\u003c/code\u003e\u003c/a\u003e all: eliminate vet diagnostics\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/0997000b45e3a40598272081bcad03ffd21b8adb\"\u003e\u003ccode\u003e0997000\u003c/code\u003e\u003c/a\u003e all: fix some comments\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.36.0...v0.45.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google.golang.org/grpc` fro...\n\n_Description has been truncated_","html_url":"https://github.com/Sin-Estres-dev/terraform/pull/5","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Sin-Estres-dev%2Fterraform/issues/5","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/5/packages"},{"uuid":"4221770763","node_id":"PR_kwDONtFecc7QrU1Y","number":8,"state":"closed","title":"Bump the go_modules group across 3 directories with 12 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-04-10T18:23:21.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-08T02:57:54.000Z","updated_at":"2026-04-10T18:23:23.000Z","time_to_close":228327,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"go_modules","update_count":12,"packages":[{"name":"golang.org/x/crypto","old_version":"0.31.0","new_version":"0.45.0","repository_url":"https://github.com/golang/crypto"},{"name":"github.com/cloudflare/circl","old_version":"1.5.0","new_version":"1.6.3","repository_url":"https://github.com/cloudflare/circl"},{"name":"google.golang.org/grpc","old_version":"1.68.1","new_version":"1.79.3","repository_url":"https://github.com/grpc/grpc-go"},{"name":"github.com/go-git/go-git/v5","old_version":"5.12.0","new_version":"5.17.1","repository_url":"https://github.com/go-git/go-git"},{"name":"github.com/go-viper/mapstructure/v2","old_version":"2.2.1","new_version":"2.4.0","repository_url":"https://github.com/go-viper/mapstructure"},{"name":"github.com/golang-jwt/jwt/v4","old_version":"4.5.1","new_version":"4.5.2","repository_url":"https://github.com/golang-jwt/jwt"},{"name":"github.com/hashicorp/go-getter","old_version":"1.7.6","new_version":"1.7.9","repository_url":"https://github.com/hashicorp/go-getter"},{"name":"github.com/ulikunitz/xz","old_version":"0.5.12","new_version":"0.5.14","repository_url":"https://github.com/ulikunitz/xz"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 3 updates in the /.ci/providerlint directory: [golang.org/x/crypto](https://github.com/golang/crypto), [github.com/cloudflare/circl](https://github.com/cloudflare/circl) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 8 updates in the /.ci/tools directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.31.0` | `0.45.0` |\n| [github.com/cloudflare/circl](https://github.com/cloudflare/circl) | `1.5.0` | `1.6.3` |\n| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.68.1` | `1.79.3` |\n| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.12.0` | `5.17.1` |\n| [github.com/go-viper/mapstructure/v2](https://github.com/go-viper/mapstructure) | `2.2.1` | `2.4.0` |\n| [github.com/golang-jwt/jwt/v4](https://github.com/golang-jwt/jwt) | `4.5.1` | `4.5.2` |\n| [github.com/hashicorp/go-getter](https://github.com/hashicorp/go-getter) | `1.7.6` | `1.7.9` |\n| [github.com/ulikunitz/xz](https://github.com/ulikunitz/xz) | `0.5.12` | `0.5.14` |\n\nBumps the go_modules group with 3 updates in the /tools/tfsdk2fw directory: [golang.org/x/crypto](https://github.com/golang/crypto), [github.com/cloudflare/circl](https://github.com/cloudflare/circl) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\n\nUpdates `golang.org/x/crypto` from 0.32.0 to 0.45.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/4e0068c0098be10d7025c99ab7c50ce454c1f0f9\"\u003e\u003ccode\u003e4e0068c\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e79546e28b85ea53dd37afe1c4102746ef553b9c\"\u003e\u003ccode\u003ee79546e\u003c/code\u003e\u003c/a\u003e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f91f7a7c31bf90b39c1de895ad116a2bacc88748\"\u003e\u003ccode\u003ef91f7a7\u003c/code\u003e\u003c/a\u003e ssh/agent: prevent panic on malformed constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/2df4153a0311bdfea44376e0eb6ef2faefb0275b\"\u003e\u003ccode\u003e2df4153\u003c/code\u003e\u003c/a\u003e acme/autocert: let automatic renewal work with short lifetime certs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/bcf6a849efcf4702fa5172cb0998b46c3da1e989\"\u003e\u003ccode\u003ebcf6a84\u003c/code\u003e\u003c/a\u003e acme: pass context to request\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b4f2b62076abeee4e43fb59544dac565715fbf1e\"\u003e\u003ccode\u003eb4f2b62\u003c/code\u003e\u003c/a\u003e ssh: fix error message on unsupported cipher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/79ec3a51fcc7fbd2691d56155d578225ccc542e2\"\u003e\u003ccode\u003e79ec3a5\u003c/code\u003e\u003c/a\u003e ssh: allow to bind to a hostname in remote forwarding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/122a78f140d9d3303ed3261bc374bbbca149140f\"\u003e\u003ccode\u003e122a78f\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/c0531f9c34514ad5c5551e2d6ce569ca673a8afd\"\u003e\u003ccode\u003ec0531f9\u003c/code\u003e\u003c/a\u003e all: eliminate vet diagnostics\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/0997000b45e3a40598272081bcad03ffd21b8adb\"\u003e\u003ccode\u003e0997000\u003c/code\u003e\u003c/a\u003e all: fix some comments\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.32.0...v0.45.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/cloudflare/circl` from 1.5.0 to 1.6.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cloudflare/circl/releases\"\u003egithub.com/cloudflare/circl's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eCIRCL v1.6.3\u003c/h2\u003e\n\u003cp\u003eFix a bug on ecc/p384 scalar multiplication.\u003c/p\u003e\n\u003ch3\u003eWhat's Changed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esign/mldsa: Check opts for nil value  by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/582\"\u003ecloudflare/circl#582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eecc/p384: Point addition must handle point doubling case. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/583\"\u003ecloudflare/circl#583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease CIRCL v1.6.3 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/584\"\u003ecloudflare/circl#584\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNew SLH-DSA, improvements in ML-DSA for arm64.\u003c/li\u003e\n\u003cli\u003eTested compilation on WASM.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize pairing product computation by moving exponentiations to G1. by \u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esign: Adding SLH-DSA signature by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/512\"\u003ecloudflare/circl#512\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate code generators to CIRCL v1.6.1. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/548\"\u003ecloudflare/circl#548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eML-DSA: Add preliminary Wycheproof test vectors by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/552\"\u003ecloudflare/circl#552\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ego fmt by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/554\"\u003ecloudflare/circl#554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egz-compressing test vectors, use of HexBytes and ReadGzip functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/555\"\u003ecloudflare/circl#555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Removes use of elliptic Marshal and Unmarshal functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/556\"\u003ecloudflare/circl#556\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport encoding/decoding ML-DSA private keys (as long as they contain seeds) by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/559\"\u003ecloudflare/circl#559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to golangci-lint v2 by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/560\"\u003ecloudflare/circl#560\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreparation for ARM64 Implementation of poly operations for dilithium package. by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eprepare power2Round for custom implementations in assembly by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/564\"\u003ecloudflare/circl#564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eARM64 implementation for poly.PackLe16 by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/563\"\u003ecloudflare/circl#563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polyMulBy2toD by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/565\"\u003ecloudflare/circl#565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polySub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/566\"\u003ecloudflare/circl#566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: add byteLen method for short groups and RandomScalar uses rand.Int by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/568\"\u003ecloudflare/circl#568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of poly.Add/Sub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/572\"\u003ecloudflare/circl#572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Adding cryptobyte marshaling to scalars by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/569\"\u003ecloudflare/circl#569\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumping up to Go1.25 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/574\"\u003ecloudflare/circl#574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: Including WASM compilation. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/577\"\u003ecloudflare/circl#577\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to using package-declared HPKE errors for shortkem instead of standard library errors by \u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease v1.6.2 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/579\"\u003ecloudflare/circl#579\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixes some point checks on the FourQ curve.\u003c/li\u003e\n\u003cli\u003eHybrid KEM fails on low-order points.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/24ae53c5d6f7fe18203adc125ba3ed76a38703e1\"\u003e\u003ccode\u003e24ae53c\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/581020bd4a836b8ce7bd4e414ba2884c07dbc906\"\u003e\u003ccode\u003e581020b\u003c/code\u003e\u003c/a\u003e Rename method to oddMultiplesProjective.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/12209a4566605692a8402594e367a5aed5148460\"\u003e\u003ccode\u003e12209a4\u003c/code\u003e\u003c/a\u003e Removing unused cmov for jacobian points.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/fcba359f4178645d2c9e50f29ab6966337da4b95\"\u003e\u003ccode\u003efcba359\u003c/code\u003e\u003c/a\u003e ecc/p384: use of complete projective formulas for scalar multiplication.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/5e1bae8d8c2df4e717c2c5c2d5b5d60b629b2ac6\"\u003e\u003ccode\u003e5e1bae8\u003c/code\u003e\u003c/a\u003e ecc/p384: handle point doubling in point addition with Jacobian coordinates.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/341604685ff97e8f7440ae4b4711ba1c118c648c\"\u003e\u003ccode\u003e3416046\u003c/code\u003e\u003c/a\u003e Check opts for nil value.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/a763d47a6dce43d1f4f7b697d1d7810463a526f6\"\u003e\u003ccode\u003ea763d47\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3c70bf9ad53b681fbe5ba6067e454a86549fee8a\"\u003e\u003ccode\u003e3c70bf9\u003c/code\u003e\u003c/a\u003e Bump x/crypto x/sys dependencies.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3f0f15b2bfe67bad81a35e8aec81ae42ca78349d\"\u003e\u003ccode\u003e3f0f15b\u003c/code\u003e\u003c/a\u003e Revert to using package-declared HPKE errors for shortkem instead of standard...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/23491bd573cf29b6f567057a158203a2c9dfa30d\"\u003e\u003ccode\u003e23491bd\u003c/code\u003e\u003c/a\u003e Adding generic Power2Round method.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.5.0...v1.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.34.0 to 0.47.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/9a296438e54dff851a45667aa645a97003b44db5\"\u003e\u003ccode\u003e9a29643\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/07cefd8a6bb170785052142a96034f2b2f7115bc\"\u003e\u003ccode\u003e07cefd8\u003c/code\u003e\u003c/a\u003e context: deprecate\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/5ac9daca088ab4f378d7df849f6c7d28bea86071\"\u003e\u003ccode\u003e5ac9dac\u003c/code\u003e\u003c/a\u003e publicsuffix: don't treat ip addresses as domain names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/d1f64cc67036f272ea900194674afcf71eb3e816\"\u003e\u003ccode\u003ed1f64cc\u003c/code\u003e\u003c/a\u003e quic: use testing/synctest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/fff0469cf57f71bea0cbc4cc8cbfb8f92be7a417\"\u003e\u003ccode\u003efff0469\u003c/code\u003e\u003c/a\u003e http2: document that RFC 7540 prioritization does not work with small payloads\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/f35e3a4dd2a34d1d47fac5b66210a40e2d374a79\"\u003e\u003ccode\u003ef35e3a4\u003c/code\u003e\u003c/a\u003e http2: fix weight overflow in RFC 7540 write scheduler\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/89adc90ac46a688eeda3a4a95b71acf073bd059c\"\u003e\u003ccode\u003e89adc90\u003c/code\u003e\u003c/a\u003e http2: fix typo referring to RFC 9218 as RFC 9128 instead\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/8d76a2c082f6f995c2ef1ce8a0d56f2e33b48092\"\u003e\u003ccode\u003e8d76a2c\u003c/code\u003e\u003c/a\u003e quic: don't defer MAX_STREAMS frames indefinitely\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/027f8b700eb72af5c0175a945535a42670628351\"\u003e\u003ccode\u003e027f8b7\u003c/code\u003e\u003c/a\u003e quic: fix expected ACK Delay in client's ACK after HANDSHAKE_DONE\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/dec9fe711ec1385a2aa169a3f8145d295abcca16\"\u003e\u003ccode\u003edec9fe7\u003c/code\u003e\u003c/a\u003e dns/dnsmessage: update SVCB packing to prohibit name compression\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.34.0...v0.47.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google.golang.org/grpc` from 1.67.1 to 1.79.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc-go/releases\"\u003egoogle.golang.org/grpc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 1.79.3\u003c/h2\u003e\n\u003ch1\u003eSecurity\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eserver: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted \u0026quot;deny\u0026quot; rules in interceptors like \u003ccode\u003egrpc/authz\u003c/code\u003e. Any request with a non-canonical path is now immediately rejected with an \u003ccode\u003eUnimplemented\u003c/code\u003e error. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.2\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003estats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8874\"\u003egrpc/grpc-go#8874\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.1\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003egrpc: Remove the \u003ccode\u003e-dev\u003c/code\u003e suffix from the User-Agent header. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8902\"\u003egrpc/grpc-go#8902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.0\u003c/h2\u003e\n\u003ch1\u003eAPI Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003emem: Add experimental API \u003ccode\u003eSetDefaultBufferPool\u003c/code\u003e to change the default buffer pool. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8806\"\u003e#8806\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/vanja-p\"\u003e\u003ccode\u003e@​vanja-p\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eexperimental/stats: Update \u003ccode\u003eMetricsRecorder\u003c/code\u003e to require embedding the new \u003ccode\u003eUnimplementedMetricsRecorder\u003c/code\u003e (a no-op struct) in all implementations for forward compatibility. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBehavior Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ebalancer/weightedtarget: Remove handling of \u003ccode\u003eAddresses\u003c/code\u003e and only handle \u003ccode\u003eEndpoints\u003c/code\u003e in resolver updates. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8841\"\u003e#8841\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eNew Features\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eexperimental/stats: Add support for asynchronous gauge metrics through the new \u003ccode\u003eAsyncMetricReporter\u003c/code\u003e and \u003ccode\u003eRegisterAsyncReporter\u003c/code\u003e APIs. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epickfirst: Add support for weighted random shuffling of endpoints, as described in \u003ca href=\"https://redirect.github.com/grpc/proposal/pull/535\"\u003egRFC A113\u003c/a\u003e.\n\u003cul\u003e\n\u003cli\u003eThis is enabled by default, and can be turned off using the environment variable \u003ccode\u003eGRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds: Implement \u003ccode\u003e:authority\u003c/code\u003e rewriting, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A81-xds-authority-rewriting.md\"\u003egRFC A81\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8779\"\u003e#8779\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebalancer/randomsubsetting: Implement the \u003ccode\u003erandom_subsetting\u003c/code\u003e LB policy, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A68-random-subsetting.md\"\u003egRFC A68\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8650\"\u003e#8650\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/marek-szews\"\u003e\u003ccode\u003e@​marek-szews\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/tls: Fix a bug where the port was not stripped from the authority override before validation. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8726\"\u003e#8726\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/Atul1710\"\u003e\u003ccode\u003e@​Atul1710\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds/priority: Fix a bug causing delayed failover to lower-priority clusters when a higher-priority cluster is stuck in \u003ccode\u003eCONNECTING\u003c/code\u003e state. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8813\"\u003e#8813\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ehealth: Fix a bug where health checks failed for clients using legacy compression options (\u003ccode\u003eWithDecompressor\u003c/code\u003e or \u003ccode\u003eRPCDecompressor\u003c/code\u003e). (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8765\"\u003e#8765\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/sanki92\"\u003e\u003ccode\u003e@​sanki92\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003etransport: Fix an issue where the HTTP/2 server could skip header size checks when terminating a stream early. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8769\"\u003e#8769\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eserver: Propagate status detail headers, if available, when terminating a stream during request header processing. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8754\"\u003e#8754\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ePerformance Improvements\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/alts: Optimize read buffer alignment to reduce copies. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8791\"\u003e#8791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emem: Optimize pooling and creation of \u003ccode\u003ebuffer\u003c/code\u003e objects.  (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8784\"\u003e#8784\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etransport: Reduce slice re-allocations by reserving slice capacity. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8797\"\u003e#8797\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/dda86dbd9cecb8b35b58c73d507d81d67761205f\"\u003e\u003ccode\u003edda86db\u003c/code\u003e\u003c/a\u003e Change version to 1.79.3 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8983\"\u003e#8983\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/72186f163e75a065c39e6f7df9b6dea07fbdeff5\"\u003e\u003ccode\u003e72186f1\u003c/code\u003e\u003c/a\u003e grpc: enforce strict path checking for incoming requests on the server (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/97ca3522b239edf6813e2b1106924e9d55e89d43\"\u003e\u003ccode\u003e97ca352\u003c/code\u003e\u003c/a\u003e Changing version to 1.79.3-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8954\"\u003e#8954\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/8902ab6efea590f5b3861126559eaa26fa9783b2\"\u003e\u003ccode\u003e8902ab6\u003c/code\u003e\u003c/a\u003e Change the version to release 1.79.2 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8947\"\u003e#8947\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/a9286705aa689bee321ec674323b6896284f3e02\"\u003e\u003ccode\u003ea928670\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8874\"\u003e#8874\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8904\"\u003e#8904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/06df3638c0bcee88197b1033b3ba83e1eb8bc010\"\u003e\u003ccode\u003e06df363\u003c/code\u003e\u003c/a\u003e Change version to 1.79.2-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8903\"\u003e#8903\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/782f2de44f597af18a120527e7682a6670d84289\"\u003e\u003ccode\u003e782f2de\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8902\"\u003e#8902\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/850eccbb2257bd2de6ac28ee88a7172ab6175629\"\u003e\u003ccode\u003e850eccb\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8851\"\u003e#8851\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/765ff056b6890f6c8341894df4e9668e9bfc18ef\"\u003e\u003ccode\u003e765ff05\u003c/code\u003e\u003c/a\u003e Change version to 1.79.0 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8850\"\u003e#8850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/68804be0e78ed0365bb5a576dedc12e2168ed63e\"\u003e\u003ccode\u003e68804be\u003c/code\u003e\u003c/a\u003e Cherry pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8896\"\u003e#8896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/grpc/grpc-go/compare/v1.67.1...v1.79.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.31.0 to 0.45.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/4e0068c0098be10d7025c99ab7c50ce454c1f0f9\"\u003e\u003ccode\u003e4e0068c\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e79546e28b85ea53dd37afe1c4102746ef553b9c\"\u003e\u003ccode\u003ee79546e\u003c/code\u003e\u003c/a\u003e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f91f7a7c31bf90b39c1de895ad116a2bacc88748\"\u003e\u003ccode\u003ef91f7a7\u003c/code\u003e\u003c/a\u003e ssh/agent: prevent panic on malformed constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/2df4153a0311bdfea44376e0eb6ef2faefb0275b\"\u003e\u003ccode\u003e2df4153\u003c/code\u003e\u003c/a\u003e acme/autocert: let automatic renewal work with short lifetime certs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/bcf6a849efcf4702fa5172cb0998b46c3da1e989\"\u003e\u003ccode\u003ebcf6a84\u003c/code\u003e\u003c/a\u003e acme: pass context to request\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b4f2b62076abeee4e43fb59544dac565715fbf1e\"\u003e\u003ccode\u003eb4f2b62\u003c/code\u003e\u003c/a\u003e ssh: fix error message on unsupported cipher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/79ec3a51fcc7fbd2691d56155d578225ccc542e2\"\u003e\u003ccode\u003e79ec3a5\u003c/code\u003e\u003c/a\u003e ssh: allow to bind to a hostname in remote forwarding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/122a78f140d9d3303ed3261bc374bbbca149140f\"\u003e\u003ccode\u003e122a78f\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/c0531f9c34514ad5c5551e2d6ce569ca673a8afd\"\u003e\u003ccode\u003ec0531f9\u003c/code\u003e\u003c/a\u003e all: eliminate vet diagnostics\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/0997000b45e3a40598272081bcad03ffd21b8adb\"\u003e\u003ccode\u003e0997000\u003c/code\u003e\u003c/a\u003e all: fix some comments\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.32.0...v0.45.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/cloudflare/circl` from 1.5.0 to 1.6.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cloudflare/circl/releases\"\u003egithub.com/cloudflare/circl's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eCIRCL v1.6.3\u003c/h2\u003e\n\u003cp\u003eFix a bug on ecc/p384 scalar multiplication.\u003c/p\u003e\n\u003ch3\u003eWhat's Changed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esign/mldsa: Check opts for nil value  by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/582\"\u003ecloudflare/circl#582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eecc/p384: Point addition must handle point doubling case. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/583\"\u003ecloudflare/circl#583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease CIRCL v1.6.3 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/584\"\u003ecloudflare/circl#584\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNew SLH-DSA, improvements in ML-DSA for arm64.\u003c/li\u003e\n\u003cli\u003eTested compilation on WASM.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize pairing product computation by moving exponentiations to G1. by \u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esign: Adding SLH-DSA signature by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/512\"\u003ecloudflare/circl#512\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate code generators to CIRCL v1.6.1. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/548\"\u003ecloudflare/circl#548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eML-DSA: Add preliminary Wycheproof test vectors by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/552\"\u003ecloudflare/circl#552\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ego fmt by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/554\"\u003ecloudflare/circl#554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egz-compressing test vectors, use of HexBytes and ReadGzip functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/555\"\u003ecloudflare/circl#555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Removes use of elliptic Marshal and Unmarshal functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/556\"\u003ecloudflare/circl#556\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport encoding/decoding ML-DSA private keys (as long as they contain seeds) by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/559\"\u003ecloudflare/circl#559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to golangci-lint v2 by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/560\"\u003ecloudflare/circl#560\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreparation for ARM64 Implementation of poly operations for dilithium package. by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eprepare power2Round for custom implementations in assembly by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/564\"\u003ecloudflare/circl#564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eARM64 implementation for poly.PackLe16 by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/563\"\u003ecloudflare/circl#563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polyMulBy2toD by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/565\"\u003ecloudflare/circl#565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polySub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/566\"\u003ecloudflare/circl#566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: add byteLen method for short groups and RandomScalar uses rand.Int by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/568\"\u003ecloudflare/circl#568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of poly.Add/Sub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/572\"\u003ecloudflare/circl#572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Adding cryptobyte marshaling to scalars by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/569\"\u003ecloudflare/circl#569\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumping up to Go1.25 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/574\"\u003ecloudflare/circl#574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: Including WASM compilation. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/577\"\u003ecloudflare/circl#577\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to using package-declared HPKE errors for shortkem instead of standard library errors by \u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease v1.6.2 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/579\"\u003ecloudflare/circl#579\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixes some point checks on the FourQ curve.\u003c/li\u003e\n\u003cli\u003eHybrid KEM fails on low-order points.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/24ae53c5d6f7fe18203adc125ba3ed76a38703e1\"\u003e\u003ccode\u003e24ae53c\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/581020bd4a836b8ce7bd4e414ba2884c07dbc906\"\u003e\u003ccode\u003e581020b\u003c/code\u003e\u003c/a\u003e Rename method to oddMultiplesProjective.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/12209a4566605692a8402594e367a5aed5148460\"\u003e\u003ccode\u003e12209a4\u003c/code\u003e\u003c/a\u003e Removing unused cmov for jacobian points.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/fcba359f4178645d2c9e50f29ab6966337da4b95\"\u003e\u003ccode\u003efcba359\u003c/code\u003e\u003c/a\u003e ecc/p384: use of complete projective formulas for scalar multiplication.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/5e1bae8d8c2df4e717c2c5c2d5b5d60b629b2ac6\"\u003e\u003ccode\u003e5e1bae8\u003c/code\u003e\u003c/a\u003e ecc/p384: handle point doubling in point addition with Jacobian coordinates.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/341604685ff97e8f7440ae4b4711ba1c118c648c\"\u003e\u003ccode\u003e3416046\u003c/code\u003e\u003c/a\u003e Check opts for nil value.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/a763d47a6dce43d1f4f7b697d1d7810463a526f6\"\u003e\u003ccode\u003ea763d47\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3c70bf9ad53b681fbe5ba6067e454a86549fee8a\"\u003e\u003ccode\u003e3c70bf9\u003c/code\u003e\u003c/a\u003e Bump x/crypto x/sys dependencies.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3f0f15b2bfe67bad81a35e8aec81ae42ca78349d\"\u003e\u003ccode\u003e3f0f15b\u003c/code\u003e\u003c/a\u003e Revert to using package-declared HPKE errors for shortkem instead of standard...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/23491bd573cf29b6f567057a158203a2c9dfa30d\"\u003e\u003ccode\u003e23491bd\u003c/code\u003e\u003c/a\u003e Adding generic Power2Round method.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.5.0...v1.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.32.0 to 0.47.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/9a296438e54dff851a45667aa645a97003b44db5\"\u003e\u003ccode\u003e9a29643\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/07cefd8a6bb170785052142a96034f2b2f7115bc\"\u003e\u003ccode\u003e07cefd8\u003c/code\u003e\u003c/a\u003e context: deprecate\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/5ac9daca088ab4f378d7df849f6c7d28bea86071\"\u003e\u003ccode\u003e5ac9dac\u003c/code\u003e\u003c/a\u003e publicsuffix: don't treat ip addresses as domain names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/d1f64cc67036f272ea900194674afcf71eb3e816\"\u003e\u003ccode\u003ed1f64cc\u003c/code\u003e\u003c/a\u003e quic: use testing/synctest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/fff0469cf57f71bea0cbc4cc8cbfb8f92be7a417\"\u003e\u003ccode\u003efff0469\u003c/code\u003e\u003c/a\u003e http2: document that RFC 7540 prioritization does not work with small payloads\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/f35e3a4dd2a34d1d47fac5b66210a40e2d374a79\"\u003e\u003ccode\u003ef35e3a4\u003c/code\u003e\u003c/a\u003e http2: fix weight overflow in RFC 7540 write scheduler\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/89adc90ac46a688eeda3a4a95b71acf073bd059c\"\u003e\u003ccode\u003e89adc90\u003c/code\u003e\u003c/a\u003e http2: fix typo referring to RFC 9218 as RFC 9128 instead\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/8d76a2c082f6f995c2ef1ce8a0d56f2e33b48092\"\u003e\u003ccode\u003e8d76a2c\u003c/code\u003e\u003c/a\u003e quic: don't defer MAX_STREAMS frames indefinitely\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/027f8b700eb72af5c0175a945535a42670628351\"\u003e\u003ccode\u003e027f8b7\u003c/code\u003e\u003c/a\u003e quic: fix expected ACK Delay in client's ACK after HANDSHAKE_DONE\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/dec9fe711ec1385a2aa169a3f8145d295abcca16\"\u003e\u003ccode\u003edec9fe7\u003c/code\u003e\u003c/a\u003e dns/dnsmessage: update SVCB packing to prohibit name compression\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.34.0...v0.47.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google.golang.org/grpc` from 1.68.1 to 1.79.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc-go/releases\"\u003egoogle.golang.org/grpc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 1.79.3\u003c/h2\u003e\n\u003ch1\u003eSecurity\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eserver: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted \u0026quot;deny\u0026quot; rules in interceptors like \u003ccode\u003egrpc/authz\u003c/code\u003e. Any request with a non-canonical path is now immediately rejected with an \u003ccode\u003eUnimplemented\u003c/code\u003e error. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.2\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003estats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8874\"\u003egrpc/grpc-go#8874\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.1\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003egrpc: Remove the \u003ccode\u003e-dev\u003c/code\u003e suffix from the User-Agent header. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8902\"\u003egrpc/grpc-go#8902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.0\u003c/h2\u003e\n\u003ch1\u003eAPI Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003emem: Add experimental API \u003ccode\u003eSetDefaultBufferPool\u003c/code\u003e to change the default buffer pool. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8806\"\u003e#8806\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/vanja-p\"\u003e\u003ccode\u003e@​vanja-p\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eexperimental/stats: Update \u003ccode\u003eMetricsRecorder\u003c/code\u003e to require embedding the new \u003ccode\u003eUnimplementedMetricsRecorder\u003c/code\u003e (a no-op struct) in all implementations for forward compatibility. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBehavior Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ebalancer/weightedtarget: Remove handling of \u003ccode\u003eAddresses\u003c/code\u003e and only handle \u003ccode\u003eEndpoints\u003c/code\u003e in resolver updates. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8841\"\u003e#8841\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eNew Features\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eexperimental/stats: Add support for asynchronous gauge metrics through the new \u003ccode\u003eAsyncMetricReporter\u003c/code\u003e and \u003ccode\u003eRegisterAsyncReporter\u003c/code\u003e APIs. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epickfirst: Add support for weighted random shuffling of endpoints, as described in \u003ca href=\"https://redirect.github.com/grpc/proposal/pull/535\"\u003egRFC A113\u003c/a\u003e.\n\u003cul\u003e\n\u003cli\u003eThis is enabled by default, and can be turned off using the environment variable \u003ccode\u003eGRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds: Implement \u003ccode\u003e:authority\u003c/code\u003e rewriting, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A81-xds-authority-rewriting.md\"\u003egRFC A81\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8779\"\u003e#8779\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebalancer/randomsubsetting: Implement the \u003ccode\u003erandom_subsetting\u003c/code\u003e LB policy, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A68-random-subsetting.md\"\u003egRFC A68\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8650\"\u003e#8650\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/marek-szews\"\u003e\u003ccode\u003e@​marek-szews\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/tls: Fix a bug where the port was not stripped from the authority override before validation. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8726\"\u003e#8726\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/Atul1710\"\u003e\u003ccode\u003e@​Atul1710\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds/priority: Fix a bug causing delayed failover to lower-priority clusters when a higher-priority cluster is stuck in \u003ccode\u003eCONNECTING\u003c/code\u003e state. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8813\"\u003e#8813\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ehealth: Fix a bug where health checks failed for clients using legacy compression options (\u003ccode\u003eWithDecompressor\u003c/code\u003e or \u003ccode\u003eRPCDecompressor\u003c/code\u003e). (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8765\"\u003e#8765\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/sanki92\"\u003e\u003ccode\u003e@​sanki92\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003etransport: Fix an issue where the HTTP/2 server could skip header size checks when terminating a stream early. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8769\"\u003e#8769\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eserver: Propagate status detail headers, if available, when terminating a stream during request header processing. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8754\"\u003e#8754\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ePerformance Improvements\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/alts: Optimize read buffer alignment to reduce copies. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8791\"\u003e#8791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emem: Optimize pooling and creation of \u003ccode\u003ebuffer\u003c/code\u003e objects.  (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8784\"\u003e#8784\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etransport: Reduce slice re-allocations by reserving slice capacity. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8797\"\u003e#8797\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/dda86dbd9cecb8b35b58c73d507d81d67761205f\"\u003e\u003ccode\u003edda86db\u003c/code\u003e\u003c/a\u003e Change version to 1.79.3 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8983\"\u003e#8983\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/72186f163e75a065c39e6f7df9b6dea07fbdeff5\"\u003e\u003ccode\u003e72186f1\u003c/code\u003e\u003c/a\u003e grpc: enforce strict path checking for incoming requests on the server (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/97ca3522b239edf6813e2b1106924e9d55e89d43\"\u003e\u003ccode\u003e97ca352\u003c/code\u003e\u003c/a\u003e Changing version to 1.79.3-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8954\"\u003e#8954\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/8902ab6efea590f5b3861126559eaa26fa9783b2\"\u003e\u003ccode\u003e8902ab6\u003c/code\u003e\u003c/a\u003e Change the version to release 1.79.2 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8947\"\u003e#8947\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/a9286705aa689bee321ec674323b6896284f3e02\"\u003e\u003ccode\u003ea928670\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8874\"\u003e#8874\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8904\"\u003e#8904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/06df3638c0bcee88197b1033b3ba83e1eb8bc010\"\u003e\u003ccode\u003e06df363\u003c/code\u003e\u003c/a\u003e Change version to 1.79.2-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8903\"\u003e#8903\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/782f2de44f597af18a120527e7682a6670d84289\"\u003e\u003ccode\u003e782f2de\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8902\"\u003e#8902\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/850eccbb2257bd2de6ac28ee88a7172ab6175629\"\u003e\u003ccode\u003e850eccb\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8851\"\u003e#8851\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/765ff056b6890f6c8341894df4e9668e9bfc18ef\"\u003e\u003ccode\u003e765ff05\u003c/code\u003e\u003c/a\u003e Change version to 1.79.0 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8850\"\u003e#8850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/68804be0e78ed0365bb5a576dedc12e2168ed63e\"\u003e\u003ccode\u003e68804be\u003c/code\u003e\u003c/a\u003e Cherry pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8896\"\u003e#8896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/grpc/grpc-go/compare/v1.67.1...v1.79.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-git/v5` from 5.12.0 to 5.17.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-git/releases\"\u003egithub.com/go-git/go-git/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.17.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/cloudflare/circl to v1.6.3 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1930\"\u003ego-git/go-git#1930\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/index, Improve v4 entry name validation by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1935\"\u003ego-git/go-git#1935\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/idxfile, Fix version and fanout checks by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1937\"\u003ego-git/go-git#1937\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.16.5 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1839\"\u003ego-git/go-git#1839\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: worktree, optimize infiles function for very large repos by \u003ca href=\"https://github.com/k-anshul\"\u003e\u003ccode\u003e@​k-anshul\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1853\"\u003ego-git/go-git#1853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: Add strict checks for supported extensions by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1861\"\u003ego-git/go-git#1861\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebackport, git: Improve Status() speed with new index.ModTime check by \u003ca href=\"https://github.com/cedric-appdirect\"\u003e\u003ccode\u003e@​cedric-appdirect\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1862\"\u003ego-git/go-git#1862\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003estorage: filesystem, Avoid overwriting loose obj files by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1864\"\u003ego-git/go-git#1864\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.16.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module golang.org/x/crypto to v0.45.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1744\"\u003ego-git/go-git#1744\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Bump Go test versions to 1.23-1.25 (v5) by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1746\"\u003ego-git/go-git#1746\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] git: worktree, Don't delete local untracked files when resetting worktree by \u003ca href=\"https://github.com/Ch00k\"\u003e\u003ccode\u003e@​Ch00k\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1800\"\u003ego-git/go-git#1800\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExpand packfile checks by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1836\"\u003ego-git/go-git#1836\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.4...v5.16.5\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.4...v5.16.5\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.16.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebackport plumbing: format/idxfile, prevent panic by \u003ca href=\"https://github.com/swills\"\u003e\u003ccode\u003e@​swills\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1732\"\u003ego-git/go-git#1732\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[backport] build: test, Fix build on Windows. by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1734\"\u003ego-git/go-git#1734\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Update module golang.org/x/net to v0.38.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1742\"\u003ego-git/go-git#1742\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Update module github.com/cloudflare/circl to v1.6.1 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1741\"\u003ego-git/go-git#1741\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.13.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1743\"\u003ego-git/go-git#1743\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.3...v5.16.4\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.3...v5.16.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.16.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003einternal: Expand regex to fix build [5.x] by \u003ca href=\"https://github.com/baloo\"\u003e\u003ccode\u003e@​baloo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1644\"\u003ego-git/go-git#1644\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: raise timeouts for windows CI tests and disable CIFuzz [5.x] by \u003ca href=\"https://github.com/baloo\"\u003e\u003ccode\u003e@​baloo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1646\"\u003ego-git/go-git#1646\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eplumbing: support commits extra headers, support jujutsu signed commit [5.x] by \u003ca href=\"https://github.com/baloo\"\u003e\u003ccode\u003e@​baloo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1633\"\u003ego-git/go-git#1633\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.2...v5.16.3\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.2...v5.16.3\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/5e23dfd02db92644dc4a3358ceb297fce875b772\"\u003e\u003ccode\u003e5e23dfd\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1937\"\u003e#1937\u003c/a\u003e from pjbgf/idx-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/6b38a326816b80f64c20cc0e6113958b65c05a1c\"\u003e\u003ccode\u003e6b38a32\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1935\"\u003e#1935\u003c/a\u003e from pjbgf/index-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/cd757fcb856a2dcc5fff6c110320a8ff62e99513\"\u003e\u003ccode\u003ecd757fc\u003c/code\u003e\u003c/a\u003e plumbing: format/idxfile, Fix version and fanout checks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/3ec0d70cb687ae1da5f4d18faa4229bd971a8710\"\u003e\u003ccode\u003e3ec0d70\u003c/code\u003e\u003c/a\u003e plumbing: format/index, Fix tree extension invalidated entry parsing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/dbe10b6b425a2a4ea92a9d98e20cd68e15aede01\"\u003e\u003ccode\u003edbe10b6\u003c/code\u003e\u003c/a\u003e plumbing: format/index, Align V2/V3 long name and V4 prefix encoding with Git\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/e9b65df44cb97faeba148b47523a362beaecddf9\"\u003e\u003ccode\u003ee9b65df\u003c/code\u003e\u003c/a\u003e plumbing: format/index, Improve v4 entry name validation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/adad18daabddee04c5a889f0230035e74bca32c0\"\u003e\u003ccode\u003eadad18d\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1930\"\u003e#1930\u003c/a\u003e from go-git/renovate/releases/v5.x-go-github.com-clo...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/29470bd1d862c6e902996b8e8ff8eb7a0515a9be\"\u003e\u003ccode\u003e29470bd\u003c/code\u003e\u003c/a\u003e build: Update module github.com/cloudflare/circl to v1.6.3 [SECURITY]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/bdf06885bdaa3631cf6a2017108086c6f53dcf69\"\u003e\u003ccode\u003ebdf0688\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1864\"\u003e#1864\u003c/a\u003e from pjbgf/v5-issue-55\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/5290e521c8cf651bf3e8d3e37f517c7cf7aa0b19\"\u003e\u003ccode\u003e5290e52\u003c/code\u003e\u003c/a\u003e storage: filesystem, Avoid overwriting loose obj files. Fixes \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/55\"\u003e#55\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-git/compare/v5.12.0...v5.17.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-viper/mapstructure/v2` from 2.2.1 to 2.4.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-viper/mapstructure/releases\"\u003egithub.com/go-viper/mapstructure/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.4.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003erefactor: replace interface{} with any by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/115\"\u003ego-viper/mapstructure#115\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.0 to 3.29.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/114\"\u003ego-viper/mapstructure#114\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGeneric tests by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/118\"\u003ego-viper/mapstructure#118\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix godoc reference link in README.md by \u003ca href=\"https://github.com/peczenyj\"\u003e\u003ccode\u003e@​peczenyj\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/107\"\u003ego-viper/mapstructure#107\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add StringToTimeLocationHookFunc to convert strings to *time.Location by \u003ca href=\"https://github.com/ErfanMomeniii\"\u003e\u003ccode\u003e@​ErfanMomeniii\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/117\"\u003ego-viper/mapstructure#117\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add back previous StringToSlice as a weak function by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/119\"\u003ego-viper/mapstructure#119\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ErfanMomeniii\"\u003e\u003ccode\u003e@​ErfanMomeniii\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/117\"\u003ego-viper/mapstructure#117\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-viper/mapstructure/compare/v2.3.0...v2.4.0\"\u003ehttps://github.com/go-viper/mapstructure/compare/v2.3.0...v2.4.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.3.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 4.1.7 to 4.2.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/46\"\u003ego-viper/mapstructure#46\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golangci/golangci-lint-action from 6.1.0 to 6.1.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/47\"\u003ego-viper/mapstructure#47\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[enhancement] Add check for \u003ccode\u003ereflect.Value\u003c/code\u003e in \u003ccode\u003eComposeDecodeHookFunc\u003c/code\u003e by \u003ca href=\"https://github.com/mahadzaryab1\"\u003e\u003ccode\u003e@​mahadzaryab1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/52\"\u003ego-viper/mapstructure#52\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.0.2 to 5.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/51\"\u003ego-viper/mapstructure#51\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 4.2.0 to 4.2.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/50\"\u003ego-viper/mapstructure#50\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.1.0 to 5.2.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/55\"\u003ego-viper/mapstructure#55\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.2.0 to 5.3.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/58\"\u003ego-viper/mapstructure#58\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: add Go 1.24 to the test matrix by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/74\"\u003ego-viper/mapstructure#74\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golangci/golangci-lint-action from 6.1.1 to 6.5.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/72\"\u003ego-viper/mapstructure#72\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golangci/golangci-lint-action from 6.5.0 to 6.5.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/76\"\u003ego-viper/mapstructure#76\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.3.0 to 5.4.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/78\"\u003ego-viper/mapstructure#78\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add decode hook for netip.Prefix by \u003ca href=\"https://github.com/tklauser\"\u003e\u003ccode\u003e@​tklauser\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/85\"\u003ego-viper/mapstructure#85\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdates by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/86\"\u003ego-viper/mapstructure#86\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 2.13.4 to 3.28.15 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/87\"\u003ego-viper/mapstructure#87\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.4.0 to 5.5.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/93\"\u003ego-viper/mapstructure#93\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.15 to 3.28.17 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/92\"\u003ego-viper/mapstructure#92\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.17 to 3.28.19 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/97\"\u003ego-viper/mapstructure#97\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/96\"\u003ego-viper/mapstructure#96\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate README.md by \u003ca href=\"https://github.com/peczenyj\"\u003e\u003ccode\u003e@​peczenyj\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/90\"\u003ego-viper/mapstructure#90\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd omitzero tag. by \u003ca href=\"https://github.com/Crystalix007\"\u003e\u003ccode\u003e@​Crystalix007\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/98\"\u003ego-viper/mapstructure#98\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse error structs instead of duplicated strings by \u003ca href=\"https://github.com/m1k1o\"\u003e\u003ccode\u003e@​m1k1o\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/102\"\u003ego-viper/mapstructure#102\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.19 to 3.29.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/101\"\u003ego-viper/mapstructure#101\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add common error interface by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/105\"\u003ego-viper/mapstructure#105\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eupdate linter by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/106\"\u003ego-viper/mapstructure#106\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFeature allow unset pointer by \u003ca href=\"https://github.com/rostislaved\"\u003e\u003ccode\u003e@​rostislaved\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/80\"\u003ego-viper/mapstructure#80\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tklauser\"\u003e\u003ccode\u003e@​tklauser\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/85\"\u003ego-viper/mapstructure#85\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/peczenyj\"\u003e\u003ccode\u003e@​peczenyj\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/90\"\u003ego-viper/mapstructure#90\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Crystalix007\"\u003e\u003ccode\u003e@​Crystalix007\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/98\"\u003ego-viper/mapstructure#98\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rostislaved\"\u003e\u003ccode\u003e@​rostislaved\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/80\"\u003ego-viper/mapstructure#80\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-viper/mapstructure/compare/v2.2.1...v2.3.0\"\u003ehttps://github.com/go-viper/mapstructure/compare/v2.2.1...v2.3.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/b9794a5f0e73d425210d6614ed833067029155f5\"\u003e\u003ccode\u003eb9794a5\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/119\"\u003e#119\u003c/a\u003e from go-viper/string-to-weak-slice\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/17cdcb0741054e2a33938adf6bd1f2a5c0aa8f30\"\u003e\u003ccode\u003e17cdcb0\u003c/code\u003e\u003c/a\u003e feat: add back previous StringToSlice as a weak function\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/3caca3614c3ab2c5b5d359c44fdcd72058887b19\"\u003e\u003ccode\u003e3caca36\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/117\"\u003e#117\u003c/a\u003e from ErfanMomeniii/main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/9a861bc115f2b54ed4e494662f29c172d9ef046a\"\u003e\u003ccode\u003e9a861bc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/107\"\u003e#107\u003c/a\u003e from peczenyj/patch-2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/86ed5b59da0615fb8c3a413f401cdf0231f1234c\"\u003e\u003ccode\u003e86ed5b5\u003c/code\u003e\u003c/a\u003e refactor: update\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/ace5b4e8b3dec99468ffa9498e42fb09d177b0a6\"\u003e\u003ccode\u003eace5b4e\u003c/code\u003e\u003c/a\u003e chore: add interface any linter\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/1a4f1aef38bfa8549762aaf42c7c18a5d268e76e\"\u003e\u003ccode\u003e1a4f1ae\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/118\"\u003e#118\u003c/a\u003e from go-viper/generic-tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/a2689090ed4348033c36724d866faf1f911a9f63\"\u003e\u003ccode\u003ea268909\u003c/code\u003e\u003c/a\u003e fix: lint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/17f1fd44eb7606b109c9bb017c0a1c6d3e93b5cd\"\u003e\u003ccode\u003e17f1fd4\u003c/code\u003e\u003c/a\u003e test: add more comments\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/b48c8566836bf291bfee2b217d51fc36e8e61f6f\"\u003e\u003ccode\u003eb48c856\u003c/code\u003e\u003c/a\u003e test: expand tests\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-viper/mapstructure/compare/v2.2.1...v2.4.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/golang-jwt/jwt/v4` from 4.5.1 to 4.5.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/golang-jwt/jwt/releases\"\u003egithub.com/golang-jwt/jwt/v4's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.5.2\u003c/h2\u003e\n\u003cp\u003eSee \u003ca href=\"https://github.com/golang-jwt/jwt/security/advisories/GHSA-mh63-6h87-95cp\"\u003ehttps://github.com/golang-jwt/jwt/security/advisories/GHSA-mh63-6h87-95cp\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang-jwt/jwt/compare/v4.5.1...v4.5.2\"\u003ehttps://github.com/golang-jwt/jwt/compare/v4.5.1...v4.5.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/2f0e9add62078527821828c76865661aa7718a84\"\u003e\u003ccode\u003e2f0e9ad\u003c/code\u003e\u003c/a\u003e Backporting 0951d18 to v4\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang-jwt/jwt/compare/v4.5.1...v4.5.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/hashicorp/go-getter` from 1.7.6 to 1.7.9\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/hashicorp/go-getter/releases\"\u003egithub.com/hashicorp/go-getter's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.7.9\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSpeed up XZ decompression by 5x with bufio wrapper by \u003ca href=\"https://github.com/vsarunas\"\u003e\u003ccode\u003e@​vsarunas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/520\"\u003ehashicorp/go-getter#520\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix CI Workflow by \u003ca href=\"https://github.com/mohanmanikanta2299\"\u003e\u003ccode\u003e@​mohanmanikanta2299\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/522\"\u003ehashicorp/go-getter#522\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: Remove use of \u0026quot;mitchellh/go-testing-interface\u0026quot; for stdlib by \u003ca href=\"https://github.com/jrasell\"\u003e\u003ccode\u003e@​jrasell\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/523\"\u003ehashicorp/go-getter#523\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: url redact of multiple sshkey by \u003ca href=\"https://github.com/dduzgun-security\"\u003e\u003ccode\u003e@​dduzgun-security\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/528\"\u003ehashicorp/go-getter#528\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePublish arm binaries by \u003ca href=\"https://github.com/sethvargo\"\u003e\u003ccode\u003e@​sethvargo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/525\"\u003ehashicorp/go-getter#525\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix errcheck lint errors and run it as part of pr checks by \u003ca href=\"https://github.com/abhijeetviswa\"\u003e\u003ccode\u003e@​abhijeetviswa\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/530\"\u003ehashicorp/go-getter#530\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix additional lint errors and increase linter scop...\n\n_Description has been truncated_","html_url":"https://github.com/Jackblanket847/terraform-provider-aws/pull/8","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Jackblanket847%2Fterraform-provider-aws/issues/8","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/8/packages"},{"uuid":"4221754462","node_id":"PR_kwDOOjDzhc7QrRrU","number":6,"state":"open","title":"build(deps): bump the go_modules group across 5 directories with 11 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-04-08T02:52:11.000Z","updated_at":"2026-04-08T02:52:15.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): bump","group_name":"go_modules","update_count":11,"packages":[{"name":"golang.org/x/crypto","old_version":"0.35.0","new_version":"0.45.0","repository_url":"https://github.com/golang/crypto"},{"name":"golang.org/x/oauth2","old_version":"0.26.0","new_version":"0.27.0","repository_url":"https://github.com/golang/oauth2"},{"name":"github.com/go-viper/mapstructure/v2","old_version":"2.0.0-alpha.1","new_version":"2.4.0","repository_url":"https://github.com/go-viper/mapstructure"},{"name":"filippo.io/edwards25519","old_version":"1.1.0","new_version":"1.1.1","repository_url":"https://github.com/FiloSottile/edwards25519"},{"name":"github.com/cloudflare/circl","old_version":"1.3.7","new_version":"1.6.3","repository_url":"https://github.com/cloudflare/circl"},{"name":"github.com/docker/cli","old_version":"27.4.1+incompatible","new_version":"29.2.0+incompatible","repository_url":"https://github.com/docker/cli"},{"name":"github.com/go-git/go-git/v5","old_version":"5.13.1","new_version":"5.17.1","repository_url":"https://github.com/go-git/go-git"},{"name":"github.com/ulikunitz/xz","old_version":"0.5.11","new_version":"0.5.14","repository_url":"https://github.com/ulikunitz/xz"},{"name":"golang.org/x/image","old_version":"0.24.0","new_version":"0.38.0","repository_url":"https://github.com/golang/image"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 9 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.35.0` | `0.45.0` |\n| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.26.0` | `0.27.0` |\n| [github.com/go-viper/mapstructure/v2](https://github.com/go-viper/mapstructure) | `2.0.0-alpha.1` | `2.4.0` |\n| [filippo.io/edwards25519](https://github.com/FiloSottile/edwards25519) | `1.1.0` | `1.1.1` |\n| [github.com/cloudflare/circl](https://github.com/cloudflare/circl) | `1.3.7` | `1.6.3` |\n| [github.com/docker/cli](https://github.com/docker/cli) | `27.4.1+incompatible` | `29.2.0+incompatible` |\n| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.13.1` | `5.17.1` |\n| [github.com/ulikunitz/xz](https://github.com/ulikunitz/xz) | `0.5.11` | `0.5.14` |\n| [golang.org/x/image](https://github.com/golang/image) | `0.24.0` | `0.38.0` |\n\nBumps the go_modules group with 1 update in the /gokrazy/natlabapp.arm64/builddir/github.com/gokrazy/gokrazy/cmd/dhcp directory: [golang.org/x/net](https://github.com/golang/net).\nBumps the go_modules group with 1 update in the /gokrazy/natlabapp/builddir/github.com/gokrazy/gokrazy/cmd/dhcp directory: [golang.org/x/net](https://github.com/golang/net).\nBumps the go_modules group with 1 update in the /gokrazy/tsapp/builddir/github.com/gokrazy/breakglass directory: [golang.org/x/crypto](https://github.com/golang/crypto).\nBumps the go_modules group with 1 update in the /gokrazy/tsapp/builddir/github.com/gokrazy/gokrazy/cmd/dhcp directory: [golang.org/x/net](https://github.com/golang/net).\n\nUpdates `golang.org/x/crypto` from 0.35.0 to 0.45.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/4e0068c0098be10d7025c99ab7c50ce454c1f0f9\"\u003e\u003ccode\u003e4e0068c\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e79546e28b85ea53dd37afe1c4102746ef553b9c\"\u003e\u003ccode\u003ee79546e\u003c/code\u003e\u003c/a\u003e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f91f7a7c31bf90b39c1de895ad116a2bacc88748\"\u003e\u003ccode\u003ef91f7a7\u003c/code\u003e\u003c/a\u003e ssh/agent: prevent panic on malformed constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/2df4153a0311bdfea44376e0eb6ef2faefb0275b\"\u003e\u003ccode\u003e2df4153\u003c/code\u003e\u003c/a\u003e acme/autocert: let automatic renewal work with short lifetime certs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/bcf6a849efcf4702fa5172cb0998b46c3da1e989\"\u003e\u003ccode\u003ebcf6a84\u003c/code\u003e\u003c/a\u003e acme: pass context to request\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b4f2b62076abeee4e43fb59544dac565715fbf1e\"\u003e\u003ccode\u003eb4f2b62\u003c/code\u003e\u003c/a\u003e ssh: fix error message on unsupported cipher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/79ec3a51fcc7fbd2691d56155d578225ccc542e2\"\u003e\u003ccode\u003e79ec3a5\u003c/code\u003e\u003c/a\u003e ssh: allow to bind to a hostname in remote forwarding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/122a78f140d9d3303ed3261bc374bbbca149140f\"\u003e\u003ccode\u003e122a78f\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/c0531f9c34514ad5c5551e2d6ce569ca673a8afd\"\u003e\u003ccode\u003ec0531f9\u003c/code\u003e\u003c/a\u003e all: eliminate vet diagnostics\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/0997000b45e3a40598272081bcad03ffd21b8adb\"\u003e\u003ccode\u003e0997000\u003c/code\u003e\u003c/a\u003e all: fix some comments\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.35.0...v0.45.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.36.0 to 0.47.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/e1fcd82abba34df74614020343be8eb1fe85f0d9\"\u003e\u003ccode\u003ee1fcd82\u003c/code\u003e\u003c/a\u003e html: properly handle trailing solidus in unquoted attribute value in foreign...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/ebed060e8f30f20235f74808c22125fd86b15edd\"\u003e\u003ccode\u003eebed060\u003c/code\u003e\u003c/a\u003e internal/http3: fix build of tests with GOEXPERIMENT=nosynctest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/1f1fa29e0a46fffe18c43a9da8daa5a0b180dfa9\"\u003e\u003ccode\u003e1f1fa29\u003c/code\u003e\u003c/a\u003e publicsuffix: regenerate table\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/12150816f701c912a32a376754ab28dd3878833a\"\u003e\u003ccode\u003e1215081\u003c/code\u003e\u003c/a\u003e http2: improve error when server sends HTTP/1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/312450e473eae9f9e6173ad895c80bc5ea2f79ad\"\u003e\u003ccode\u003e312450e\u003c/code\u003e\u003c/a\u003e html: ensure \u0026lt;search\u0026gt; tag closes \u0026lt;p\u0026gt; and update tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/09731f9bf919b00b344c763894cd1920b3d96d90\"\u003e\u003ccode\u003e09731f9\u003c/code\u003e\u003c/a\u003e http2: improve handling of lost PING in Server\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/55989e24b972a90ab99308fdc7ea1fb58a96fef1\"\u003e\u003ccode\u003e55989e2\u003c/code\u003e\u003c/a\u003e http2/h2c: use ResponseController for hijacking connections\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/2914f46773171f4fa13e276df1135bafef677801\"\u003e\u003ccode\u003e2914f46\u003c/code\u003e\u003c/a\u003e websocket: re-recommend gorilla/websocket\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/99b3ae0643f9a2f9d820fcbba5f9e4c83b23bd48\"\u003e\u003ccode\u003e99b3ae0\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/85d1d54551b68719346cb9fec24b911da4e452a1\"\u003e\u003ccode\u003e85d1d54\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.23.0...v0.38.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/oauth2` from 0.26.0 to 0.27.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/681b4d8edca1bcfea5bce685d77ea7b82ed3e7b3\"\u003e\u003ccode\u003e681b4d8\u003c/code\u003e\u003c/a\u003e jws: split token into fixed number of parts\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/3f78298beea38fb76a3fbca33e3056f4b7eb5502\"\u003e\u003ccode\u003e3f78298\u003c/code\u003e\u003c/a\u003e all: upgrade go directive to at least 1.23.0 [generated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/109dabf9017129171d1807e485ca5633ecd095ac\"\u003e\u003ccode\u003e109dabf\u003c/code\u003e\u003c/a\u003e endpoints: add links/provider for Discord\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/ac571fa341c2a2b979d2b2c8341fd24767ef5d47\"\u003e\u003ccode\u003eac571fa\u003c/code\u003e\u003c/a\u003e oauth2: fix docs for Config.DeviceAuth\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/314ee5b92bf23c4973aa8e61eba3ff458e80eef2\"\u003e\u003ccode\u003e314ee5b\u003c/code\u003e\u003c/a\u003e endpoints: add patreon endpoint\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang/oauth2/compare/v0.26.0...v0.27.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-viper/mapstructure/v2` from 2.0.0-alpha.1 to 2.4.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-viper/mapstructure/releases\"\u003egithub.com/go-viper/mapstructure/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.4.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003erefactor: replace interface{} with any by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/115\"\u003ego-viper/mapstructure#115\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.0 to 3.29.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/114\"\u003ego-viper/mapstructure#114\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGeneric tests by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/118\"\u003ego-viper/mapstructure#118\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix godoc reference link in README.md by \u003ca href=\"https://github.com/peczenyj\"\u003e\u003ccode\u003e@​peczenyj\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/107\"\u003ego-viper/mapstructure#107\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add StringToTimeLocationHookFunc to convert strings to *time.Location by \u003ca href=\"https://github.com/ErfanMomeniii\"\u003e\u003ccode\u003e@​ErfanMomeniii\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/117\"\u003ego-viper/mapstructure#117\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add back previous StringToSlice as a weak function by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/119\"\u003ego-viper/mapstructure#119\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ErfanMomeniii\"\u003e\u003ccode\u003e@​ErfanMomeniii\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/117\"\u003ego-viper/mapstructure#117\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-viper/mapstructure/compare/v2.3.0...v2.4.0\"\u003ehttps://github.com/go-viper/mapstructure/compare/v2.3.0...v2.4.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.3.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 4.1.7 to 4.2.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/46\"\u003ego-viper/mapstructure#46\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golangci/golangci-lint-action from 6.1.0 to 6.1.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/47\"\u003ego-viper/mapstructure#47\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[enhancement] Add check for \u003ccode\u003ereflect.Value\u003c/code\u003e in \u003ccode\u003eComposeDecodeHookFunc\u003c/code\u003e by \u003ca href=\"https://github.com/mahadzaryab1\"\u003e\u003ccode\u003e@​mahadzaryab1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/52\"\u003ego-viper/mapstructure#52\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.0.2 to 5.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/51\"\u003ego-viper/mapstructure#51\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 4.2.0 to 4.2.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/50\"\u003ego-viper/mapstructure#50\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.1.0 to 5.2.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/55\"\u003ego-viper/mapstructure#55\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.2.0 to 5.3.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/58\"\u003ego-viper/mapstructure#58\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: add Go 1.24 to the test matrix by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/74\"\u003ego-viper/mapstructure#74\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golangci/golangci-lint-action from 6.1.1 to 6.5.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/72\"\u003ego-viper/mapstructure#72\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golangci/golangci-lint-action from 6.5.0 to 6.5.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/76\"\u003ego-viper/mapstructure#76\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.3.0 to 5.4.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/78\"\u003ego-viper/mapstructure#78\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add decode hook for netip.Prefix by \u003ca href=\"https://github.com/tklauser\"\u003e\u003ccode\u003e@​tklauser\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/85\"\u003ego-viper/mapstructure#85\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdates by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/86\"\u003ego-viper/mapstructure#86\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 2.13.4 to 3.28.15 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/87\"\u003ego-viper/mapstructure#87\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.4.0 to 5.5.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/93\"\u003ego-viper/mapstructure#93\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.15 to 3.28.17 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/92\"\u003ego-viper/mapstructure#92\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.17 to 3.28.19 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/97\"\u003ego-viper/mapstructure#97\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/96\"\u003ego-viper/mapstructure#96\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate README.md by \u003ca href=\"https://github.com/peczenyj\"\u003e\u003ccode\u003e@​peczenyj\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/90\"\u003ego-viper/mapstructure#90\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd omitzero tag. by \u003ca href=\"https://github.com/Crystalix007\"\u003e\u003ccode\u003e@​Crystalix007\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/98\"\u003ego-viper/mapstructure#98\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse error structs instead of duplicated strings by \u003ca href=\"https://github.com/m1k1o\"\u003e\u003ccode\u003e@​m1k1o\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/102\"\u003ego-viper/mapstructure#102\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.19 to 3.29.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/101\"\u003ego-viper/mapstructure#101\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add common error interface by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/105\"\u003ego-viper/mapstructure#105\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eupdate linter by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/106\"\u003ego-viper/mapstructure#106\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFeature allow unset pointer by \u003ca href=\"https://github.com/rostislaved\"\u003e\u003ccode\u003e@​rostislaved\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/80\"\u003ego-viper/mapstructure#80\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tklauser\"\u003e\u003ccode\u003e@​tklauser\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/85\"\u003ego-viper/mapstructure#85\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/peczenyj\"\u003e\u003ccode\u003e@​peczenyj\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/90\"\u003ego-viper/mapstructure#90\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Crystalix007\"\u003e\u003ccode\u003e@​Crystalix007\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/98\"\u003ego-viper/mapstructure#98\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rostislaved\"\u003e\u003ccode\u003e@​rostislaved\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/80\"\u003ego-viper/mapstructure#80\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-viper/mapstructure/compare/v2.2.1...v2.3.0\"\u003ehttps://github.com/go-viper/mapstructure/compare/v2.2.1...v2.3.0\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/b9794a5f0e73d425210d6614ed833067029155f5\"\u003e\u003ccode\u003eb9794a5\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/119\"\u003e#119\u003c/a\u003e from go-viper/string-to-weak-slice\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/17cdcb0741054e2a33938adf6bd1f2a5c0aa8f30\"\u003e\u003ccode\u003e17cdcb0\u003c/code\u003e\u003c/a\u003e feat: add back previous StringToSlice as a weak function\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/3caca3614c3ab2c5b5d359c44fdcd72058887b19\"\u003e\u003ccode\u003e3caca36\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/117\"\u003e#117\u003c/a\u003e from ErfanMomeniii/main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/9a861bc115f2b54ed4e494662f29c172d9ef046a\"\u003e\u003ccode\u003e9a861bc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/107\"\u003e#107\u003c/a\u003e from peczenyj/patch-2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/86ed5b59da0615fb8c3a413f401cdf0231f1234c\"\u003e\u003ccode\u003e86ed5b5\u003c/code\u003e\u003c/a\u003e refactor: update\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/ace5b4e8b3dec99468ffa9498e42fb09d177b0a6\"\u003e\u003ccode\u003eace5b4e\u003c/code\u003e\u003c/a\u003e chore: add interface any linter\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/1a4f1aef38bfa8549762aaf42c7c18a5d268e76e\"\u003e\u003ccode\u003e1a4f1ae\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/118\"\u003e#118\u003c/a\u003e from go-viper/generic-tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/a2689090ed4348033c36724d866faf1f911a9f63\"\u003e\u003ccode\u003ea268909\u003c/code\u003e\u003c/a\u003e fix: lint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/17f1fd44eb7606b109c9bb017c0a1c6d3e93b5cd\"\u003e\u003ccode\u003e17f1fd4\u003c/code\u003e\u003c/a\u003e test: add more comments\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/b48c8566836bf291bfee2b217d51fc36e8e61f6f\"\u003e\u003ccode\u003eb48c856\u003c/code\u003e\u003c/a\u003e test: expand tests\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-viper/mapstructure/compare/v2.0.0-alpha.1...v2.4.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `filippo.io/edwards25519` from 1.1.0 to 1.1.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FiloSottile/edwards25519/commit/d1c650afb95fad0742b98d95f2eb2cf031393abb\"\u003e\u003ccode\u003ed1c650a\u003c/code\u003e\u003c/a\u003e extra: initialize receiver in MultiScalarMult\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/FiloSottile/edwards25519/compare/v1.1.0...v1.1.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream` from 1.6.8 to 1.7.8\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/e3b97d2a02cd4e27c40224f05aa1a7deba24abe2\"\u003e\u003ccode\u003ee3b97d2\u003c/code\u003e\u003c/a\u003e Release 2023-10-12\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/863010ddb23c242c2a5d49d9f40094a6a49b5525\"\u003e\u003ccode\u003e863010d\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/6946ef8b9149fe75ac1b427ca2c7f57cdcb64549\"\u003e\u003ccode\u003e6946ef8\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/6d93ded4536184d38a664b4b75dadd36cbd79878\"\u003e\u003ccode\u003e6d93ded\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/bebc232e7f65b02d0b519d11e73cf925c38e716f\"\u003e\u003ccode\u003ebebc232\u003c/code\u003e\u003c/a\u003e fix: fail to load config if configured profile doesn't exist (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/2309\"\u003e#2309\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/5de46742b7fb1b72d93d344ee81568800a707267\"\u003e\u003ccode\u003e5de4674\u003c/code\u003e\u003c/a\u003e fix DNS timeout error not retried (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/2300\"\u003e#2300\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/e155bb72a2ec20ec61db50fc3d4568e373fa4b63\"\u003e\u003ccode\u003ee155bb7\u003c/code\u003e\u003c/a\u003e Release 2023-10-06\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/9d342ba33937c562d215f317a37dea121ee9763d\"\u003e\u003ccode\u003e9d342ba\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/1df99141a143a38570d64a182ed972ce9e3dba65\"\u003e\u003ccode\u003e1df9914\u003c/code\u003e\u003c/a\u003e Update SDK's smithy-go dependency to v1.15.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/32ada3a191ac770b1b24164b667692183fc77ed9\"\u003e\u003ccode\u003e32ada3a\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/service/rum/v1.6.8...service/m2/v1.7.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/cloudflare/circl` from 1.3.7 to 1.6.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cloudflare/circl/releases\"\u003egithub.com/cloudflare/circl's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eCIRCL v1.6.3\u003c/h2\u003e\n\u003cp\u003eFix a bug on ecc/p384 scalar multiplication.\u003c/p\u003e\n\u003ch3\u003eWhat's Changed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esign/mldsa: Check opts for nil value  by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/582\"\u003ecloudflare/circl#582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eecc/p384: Point addition must handle point doubling case. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/583\"\u003ecloudflare/circl#583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease CIRCL v1.6.3 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/584\"\u003ecloudflare/circl#584\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNew SLH-DSA, improvements in ML-DSA for arm64.\u003c/li\u003e\n\u003cli\u003eTested compilation on WASM.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize pairing product computation by moving exponentiations to G1. by \u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esign: Adding SLH-DSA signature by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/512\"\u003ecloudflare/circl#512\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate code generators to CIRCL v1.6.1. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/548\"\u003ecloudflare/circl#548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eML-DSA: Add preliminary Wycheproof test vectors by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/552\"\u003ecloudflare/circl#552\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ego fmt by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/554\"\u003ecloudflare/circl#554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egz-compressing test vectors, use of HexBytes and ReadGzip functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/555\"\u003ecloudflare/circl#555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Removes use of elliptic Marshal and Unmarshal functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/556\"\u003ecloudflare/circl#556\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport encoding/decoding ML-DSA private keys (as long as they contain seeds) by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/559\"\u003ecloudflare/circl#559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to golangci-lint v2 by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/560\"\u003ecloudflare/circl#560\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreparation for ARM64 Implementation of poly operations for dilithium package. by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eprepare power2Round for custom implementations in assembly by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/564\"\u003ecloudflare/circl#564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eARM64 implementation for poly.PackLe16 by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/563\"\u003ecloudflare/circl#563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polyMulBy2toD by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/565\"\u003ecloudflare/circl#565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polySub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/566\"\u003ecloudflare/circl#566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: add byteLen method for short groups and RandomScalar uses rand.Int by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/568\"\u003ecloudflare/circl#568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of poly.Add/Sub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/572\"\u003ecloudflare/circl#572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Adding cryptobyte marshaling to scalars by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/569\"\u003ecloudflare/circl#569\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumping up to Go1.25 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/574\"\u003ecloudflare/circl#574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: Including WASM compilation. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/577\"\u003ecloudflare/circl#577\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to using package-declared HPKE errors for shortkem instead of standard library errors by \u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease v1.6.2 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/579\"\u003ecloudflare/circl#579\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixes some point checks on the FourQ curve.\u003c/li\u003e\n\u003cli\u003eHybrid KEM fails on low-order points.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/24ae53c5d6f7fe18203adc125ba3ed76a38703e1\"\u003e\u003ccode\u003e24ae53c\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/581020bd4a836b8ce7bd4e414ba2884c07dbc906\"\u003e\u003ccode\u003e581020b\u003c/code\u003e\u003c/a\u003e Rename method to oddMultiplesProjective.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/12209a4566605692a8402594e367a5aed5148460\"\u003e\u003ccode\u003e12209a4\u003c/code\u003e\u003c/a\u003e Removing unused cmov for jacobian points.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/fcba359f4178645d2c9e50f29ab6966337da4b95\"\u003e\u003ccode\u003efcba359\u003c/code\u003e\u003c/a\u003e ecc/p384: use of complete projective formulas for scalar multiplication.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/5e1bae8d8c2df4e717c2c5c2d5b5d60b629b2ac6\"\u003e\u003ccode\u003e5e1bae8\u003c/code\u003e\u003c/a\u003e ecc/p384: handle point doubling in point addition with Jacobian coordinates.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/341604685ff97e8f7440ae4b4711ba1c118c648c\"\u003e\u003ccode\u003e3416046\u003c/code\u003e\u003c/a\u003e Check opts for nil value.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/a763d47a6dce43d1f4f7b697d1d7810463a526f6\"\u003e\u003ccode\u003ea763d47\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3c70bf9ad53b681fbe5ba6067e454a86549fee8a\"\u003e\u003ccode\u003e3c70bf9\u003c/code\u003e\u003c/a\u003e Bump x/crypto x/sys dependencies.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3f0f15b2bfe67bad81a35e8aec81ae42ca78349d\"\u003e\u003ccode\u003e3f0f15b\u003c/code\u003e\u003c/a\u003e Revert to using package-declared HPKE errors for shortkem instead of standard...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/23491bd573cf29b6f567057a158203a2c9dfa30d\"\u003e\u003ccode\u003e23491bd\u003c/code\u003e\u003c/a\u003e Adding generic Power2Round method.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.3.7...v1.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/docker/cli` from 27.4.1+incompatible to 29.2.0+incompatible\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/0b9d1985dbf919678745f122b12b46f730b97d87\"\u003e\u003ccode\u003e0b9d198\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6764\"\u003e#6764\u003c/a\u003e from vvoland/update-docker\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/9c9ec7358833bb3e5622a166673744fca7fefac4\"\u003e\u003ccode\u003e9c9ec73\u003c/code\u003e\u003c/a\u003e vendor: github.com/moby/moby/client v0.2.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/bab3e81e1d8874a2d4f26afc02225ee537d0b15d\"\u003e\u003ccode\u003ebab3e81\u003c/code\u003e\u003c/a\u003e vendor: github.com/moby/moby/api v1.53.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/2e64fc162ab632a530f7191cc6af65c22356ea0d\"\u003e\u003ccode\u003e2e64fc1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6367\"\u003e#6367\u003c/a\u003e from thaJeztah/template_slicejoin\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/1f2ba2ac9d8c92870f7cce89dfa17d89d3375c19\"\u003e\u003ccode\u003e1f2ba2a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6760\"\u003e#6760\u003c/a\u003e from thaJeztah/container_create_fix_error\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/e34a3422cc32c808d2e8b0e0ef51112d53fa896d\"\u003e\u003ccode\u003ee34a342\u003c/code\u003e\u003c/a\u003e templates: make \u0026quot;join\u0026quot; work with non-string slices and map values\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/a86356d42f918968579e670b51bc85dc45982a33\"\u003e\u003ccode\u003ea86356d\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6763\"\u003e#6763\u003c/a\u003e from thaJeztah/bump_mapstructure\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/771660a17e56116eb32677a6d83c5210e5092194\"\u003e\u003ccode\u003e771660a\u003c/code\u003e\u003c/a\u003e vendor: github.com/go-viper/mapstructure/v2 v2.5.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/9cff36b35a828be8d137bc5de4983b7e3fef1614\"\u003e\u003ccode\u003e9cff36b\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6762\"\u003e#6762\u003c/a\u003e from thaJeztah/bump_x_deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/08ed2bc6e8bc49ad988ecd44633620a48fb10967\"\u003e\u003ccode\u003e08ed2bc\u003c/code\u003e\u003c/a\u003e cli/command/container: make injecting config.json failures a warning\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/docker/cli/compare/v27.4.1...v29.2.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-git/v5` from 5.13.1 to 5.17.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-git/releases\"\u003egithub.com/go-git/go-git/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.17.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/cloudflare/circl to v1.6.3 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1930\"\u003ego-git/go-git#1930\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/index, Improve v4 entry name validation by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1935\"\u003ego-git/go-git#1935\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/idxfile, Fix version and fanout checks by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1937\"\u003ego-git/go-git#1937\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.16.5 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1839\"\u003ego-git/go-git#1839\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: worktree, optimize infiles function for very large repos by \u003ca href=\"https://github.com/k-anshul\"\u003e\u003ccode\u003e@​k-anshul\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1853\"\u003ego-git/go-git#1853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: Add strict checks for supported extensions by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1861\"\u003ego-git/go-git#1861\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebackport, git: Improve Status() speed with new index.ModTime check by \u003ca href=\"https://github.com/cedric-appdirect\"\u003e\u003ccode\u003e@​cedric-appdirect\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1862\"\u003ego-git/go-git#1862\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003estorage: filesystem, Avoid overwriting loose obj files by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1864\"\u003ego-git/go-git#1864\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.16.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module golang.org/x/crypto to v0.45.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1744\"\u003ego-git/go-git#1744\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Bump Go test versions to 1.23-1.25 (v5) by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1746\"\u003ego-git/go-git#1746\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] git: worktree, Don't delete local untracked files when resetting worktree by \u003ca href=\"https://github.com/Ch00k\"\u003e\u003ccode\u003e@​Ch00k\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1800\"\u003ego-git/go-git#1800\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExpand packfile checks by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1836\"\u003ego-git/go-git#1836\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.4...v5.16.5\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.4...v5.16.5\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.16.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebackport plumbing: format/idxfile, prevent panic by \u003ca href=\"https://github.com/swills\"\u003e\u003ccode\u003e@​swills\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1732\"\u003ego-git/go-git#1732\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[backport] build: test, Fix build on Windows. by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1734\"\u003ego-git/go-git#1734\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Update module golang.org/x/net to v0.38.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1742\"\u003ego-git/go-git#1742\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Update module github.com/cloudflare/circl to v1.6.1 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1741\"\u003ego-git/go-git#1741\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.13.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1743\"\u003ego-git/go-git#1743\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.3...v5.16.4\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.3...v5.16.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.16.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003einternal: Expand regex to fix build [5.x] by \u003ca href=\"https://github.com/baloo\"\u003e\u003ccode\u003e@​baloo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1644\"\u003ego-git/go-git#1644\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: raise timeouts for windows CI tests and disable CIFuzz [5.x] by \u003ca href=\"https://github.com/baloo\"\u003e\u003ccode\u003e@​baloo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1646\"\u003ego-git/go-git#1646\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eplumbing: support commits extra headers, support jujutsu signed commit [5.x] by \u003ca href=\"https://github.com/baloo\"\u003e\u003ccode\u003e@​baloo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1633\"\u003ego-git/go-git#1633\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.2...v5.16.3\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.2...v5.16.3\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/5e23dfd02db92644dc4a3358ceb297fce875b772\"\u003e\u003ccode\u003e5e23dfd\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1937\"\u003e#1937\u003c/a\u003e from pjbgf/idx-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/6b38a326816b80f64c20cc0e6113958b65c05a1c\"\u003e\u003ccode\u003e6b38a32\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1935\"\u003e#1935\u003c/a\u003e from pjbgf/index-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/cd757fcb856a2dcc5fff6c110320a8ff62e99513\"\u003e\u003ccode\u003ecd757fc\u003c/code\u003e\u003c/a\u003e plumbing: format/idxfile, Fix version and fanout checks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/3ec0d70cb687ae1da5f4d18faa4229bd971a8710\"\u003e\u003ccode\u003e3ec0d70\u003c/code\u003e\u003c/a\u003e plumbing: format/index, Fix tree extension invalidated entry parsing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/dbe10b6b425a2a4ea92a9d98e20cd68e15aede01\"\u003e\u003ccode\u003edbe10b6\u003c/code\u003e\u003c/a\u003e plumbing: format/index, Align V2/V3 long name and V4 prefix encoding with Git\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/e9b65df44cb97faeba148b47523a362beaecddf9\"\u003e\u003ccode\u003ee9b65df\u003c/code\u003e\u003c/a\u003e plumbing: format/index, Improve v4 entry name validation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/adad18daabddee04c5a889f0230035e74bca32c0\"\u003e\u003ccode\u003eadad18d\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1930\"\u003e#1930\u003c/a\u003e from go-git/renovate/releases/v5.x-go-github.com-clo...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/29470bd1d862c6e902996b8e8ff8eb7a0515a9be\"\u003e\u003ccode\u003e29470bd\u003c/code\u003e\u003c/a\u003e build: Update module github.com/cloudflare/circl to v1.6.3 [SECURITY]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/bdf06885bdaa3631cf6a2017108086c6f53dcf69\"\u003e\u003ccode\u003ebdf0688\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1864\"\u003e#1864\u003c/a\u003e from pjbgf/v5-issue-55\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/5290e521c8cf651bf3e8d3e37f517c7cf7aa0b19\"\u003e\u003ccode\u003e5290e52\u003c/code\u003e\u003c/a\u003e storage: filesystem, Avoid overwriting loose obj files. Fixes \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/55\"\u003e#55\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-git/compare/v5.13.1...v5.17.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/ulikunitz/xz` from 0.5.11 to 0.5.14\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ulikunitz/xz/commit/7184815834c4777e8fa665946721d5fe114c2c35\"\u003e\u003ccode\u003e7184815\u003c/code\u003e\u003c/a\u003e Preparation of release v0.5.14\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ulikunitz/xz/commit/88ddf1d0d98d688db65de034f48960b2760d2ae2\"\u003e\u003ccode\u003e88ddf1d\u003c/code\u003e\u003c/a\u003e Address Security Issue GHSA-jc7w-c686-c4v9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ulikunitz/xz/commit/c8314b8f21e9c5e25b52da07544cac14db277e89\"\u003e\u003ccode\u003ec8314b8\u003c/code\u003e\u003c/a\u003e Add new package xio with WriteCloserStack\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ulikunitz/xz/commit/4f11dce79b9977ec2976a978d6c594ea1c23cf29\"\u003e\u003ccode\u003e4f11dce\u003c/code\u003e\u003c/a\u003e Update README.md and SECURITY.md to address security questions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ulikunitz/xz/commit/f56ebbfaa2400067dcda8ade26ce912c2873ca08\"\u003e\u003ccode\u003ef56ebbf\u003c/code\u003e\u003c/a\u003e TODO.md: fix a typo\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/ulikunitz/xz/compare/v0.5.11...v0.5.14\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/image` from 0.24.0 to 0.38.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/23ae9ed61c1d3343fb95015810f62dcbf444976e\"\u003e\u003ccode\u003e23ae9ed\u003c/code\u003e\u003c/a\u003e tiff: cap buffer growth to prevent OOM from malicious IFD offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/e589e60f29d0bbbf6400e250e024f93cbc4961ee\"\u003e\u003ccode\u003ee589e60\u003c/code\u003e\u003c/a\u003e webp: allow VP8L + VP8X(with alpha)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/fe7d73de74b8a1ad508c93cfcb245d44579163ff\"\u003e\u003ccode\u003efe7d73d\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/e3d762b1d37ed96e757e3bc0bfb44f7455589df3\"\u003e\u003ccode\u003ee3d762b\u003c/code\u003e\u003c/a\u003e all: upgrade go directive to at least 1.25.0 [generated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/833c6ed987962feaa3ec2624d8655421b25e2e0e\"\u003e\u003ccode\u003e833c6ed\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/bc7fe0b43a01586e7ca7c087a2e8a625e8397dcb\"\u003e\u003ccode\u003ebc7fe0b\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/c53c97f4ed88d55fafe963ee6e93cb357663d650\"\u003e\u003ccode\u003ec53c97f\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/9032ff7c7b86f42b9bebdf6133191648224aecc0\"\u003e\u003ccode\u003e9032ff7\u003c/code\u003e\u003c/a\u003e all: eliminate vet diagnostics\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/9c9d08c65c08567c997eccc8bde52fcc9369bea6\"\u003e\u003ccode\u003e9c9d08c\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/742b1b756d98a0c48b1fcf464a0c63fa50e1aa6b\"\u003e\u003ccode\u003e742b1b7\u003c/code\u003e\u003c/a\u003e all: fix some comments\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/image/compare/v0.24.0...v0.38.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.23.0 to 0.38.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/e1fcd82abba34df74614020343be8eb1fe85f0d9\"\u003e\u003ccode\u003ee1fcd82\u003c/code\u003e\u003c/a\u003e html: properly handle trailing solidus in unquoted attribute value in foreign...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/ebed060e8f30f20235f74808c22125fd86b15edd\"\u003e\u003ccode\u003eebed060\u003c/code\u003e\u003c/a\u003e internal/http3: fix build of tests with GOEXPERIMENT=nosynctest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/1f1fa29e0a46fffe18c43a9da8daa5a0b180dfa9\"\u003e\u003ccode\u003e1f1fa29\u003c/code\u003e\u003c/a\u003e publicsuffix: regenerate table\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/12150816f701c912a32a376754ab28dd3878833a\"\u003e\u003ccode\u003e1215081\u003c/code\u003e\u003c/a\u003e http2: improve error when server sends HTTP/1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/312450e473eae9f9e6173ad895c80bc5ea2f79ad\"\u003e\u003ccode\u003e312450e\u003c/code\u003e\u003c/a\u003e html: ensure \u0026lt;search\u0026gt; tag closes \u0026lt;p\u0026gt; and update tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/09731f9bf919b00b344c763894cd1920b3d96d90\"\u003e\u003ccode\u003e09731f9\u003c/code\u003e\u003c/a\u003e http2: improve handling of lost PING in Server\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/55989e24b972a90ab99308fdc7ea1fb58a96fef1\"\u003e\u003ccode\u003e55989e2\u003c/code\u003e\u003c/a\u003e http2/h2c: use ResponseController for hijacking connections\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/2914f46773171f4fa13e276df1135bafef677801\"\u003e\u003ccode\u003e2914f46\u003c/code\u003e\u003c/a\u003e websocket: re-recommend gorilla/websocket\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/99b3ae0643f9a2f9d820fcbba5f9e4c83b23bd48\"\u003e\u003ccode\u003e99b3ae0\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/85d1d54551b68719346cb9fec24b911da4e452a1\"\u003e\u003ccode\u003e85d1d54\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.23.0...v0.38.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.23.0 to 0.38.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/e1fcd82abba34df74614020343be8eb1fe85f0d9\"\u003e\u003ccode\u003ee1fcd82\u003c/code\u003e\u003c/a\u003e html: properly handle trailing solidus in unquoted attribute value in foreign...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/ebed060e8f30f20235f74808c22125fd86b15edd\"\u003e\u003ccode\u003eebed060\u003c/code\u003e\u003c/a\u003e internal/http3: fix build of tests with GOEXPERIMENT=nosynctest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/1f1fa29e0a46fffe18c43a9da8daa5a0b180dfa9\"\u003e\u003ccode\u003e1f1fa29\u003c/code\u003e\u003c/a\u003e publicsuffix: regenerate table\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/12150816f701c912a32a376754ab28dd3878833a\"\u003e\u003ccode\u003e1215081\u003c/code\u003e\u003c/a\u003e http2: improve error when server sends HTTP/1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/312450e473eae9f9e6173ad895c80bc5ea2f79ad\"\u003e\u003ccode\u003e312450e\u003c/code\u003e\u003c/a\u003e html: ensure \u0026lt;search\u0026gt; tag closes \u0026lt;p\u0026gt; and update tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/09731f9bf919b00b344c763894cd1920b3d96d90\"\u003e\u003ccode\u003e09731f9\u003c/code\u003e\u003c/a\u003e http2: improve handling of lost PING in Server\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/55989e24b972a90ab99308fdc7ea1fb58a96fef1\"\u003e\u003ccode\u003e55989e2\u003c/code\u003e\u003c/a\u003e http2/h2c: use ResponseController for hijacking connections\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/2914f46773171f4fa13e276df1135bafef677801\"\u003e\u003ccode\u003e2914f46\u003c/code\u003e\u003c/a\u003e websocket: re-recommend gorilla/websocket\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/99b3ae0643f9a2f9d820fcbba5f9e4c83b23bd48\"\u003e\u003ccode\u003e99b3ae0\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/85d1d54551b68719346cb9fec24b911da4e452a1\"\u003e\u003ccode\u003e85d1d54\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.23.0...v0.38.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.17.0 to 0.45.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/4e0068c0098be10d7025c99ab7c50ce454c1f0f9\"\u003e\u003ccode\u003e4e0068c\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e79546e28b85ea53dd37afe1c4102746ef553b9c\"\u003e\u003ccode\u003ee79546e\u003c/code\u003e\u003c/a\u003e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f91f7a7c31bf90b39c1de895ad116a2bacc88748\"\u003e\u003ccode\u003ef91f7a7\u003c/code\u003e\u003c/a\u003e ssh/agent: prevent panic on malformed constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/2df4153a0311bdfea44376e0eb6ef2faefb0275b\"\u003e\u003ccode\u003e2df4153\u003c/code\u003e\u003c/a\u003e acme/autocert: let automatic renewal work with short lifetime certs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/bcf6a849efcf4702fa5172cb0998b46c3da1e989\"\u003e\u003ccode\u003ebcf6a84\u003c/code\u003e\u003c/a\u003e acme: pass context to request\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b4f2b62076abeee4e43fb59544dac565715fbf1e\"\u003e\u003ccode\u003eb4f2b62\u003c/code\u003e\u003c/a\u003e ssh: fix error message on unsupported cipher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/79ec3a51fcc7fbd2691d56155d578225ccc542e2\"\u003e\u003ccode\u003e79ec3a5\u003c/code\u003e\u003c/a\u003e ssh: allow to bind to a hostname in remote forwarding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/122a78f140d9d3303ed3261bc374bbbca149140f\"\u003e\u003ccode\u003e122a78f\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/c0531f9c34514ad5c5551e2d6ce569ca673a8afd\"\u003e\u003ccode\u003ec0531f9\u003c/code\u003e\u003c/a\u003e all: eliminate vet diagnostics\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/0997000b45e3a40598272081bcad03ffd21b8adb\"\u003e\u003ccode\u003e0997000\u003c/code\u003e\u003c/a\u003e all: fix some comments\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.35.0...v0.45.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.23.0 to 0.38.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/e1fcd82abba34df74614020343be8eb1fe85f0d9\"\u003e\u003ccode\u003ee1fcd82\u003c/code\u003e\u003c/a\u003e html: properly handle trailing solidus in unquoted attribute value in foreign...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/ebed060e8f30f20235f74808c22125fd86b15edd\"\u003e\u003ccode\u003eebed060\u003c/code\u003e\u003c/a\u003e internal/http3: fix build of tests with GOEXPERIMENT=nosynctest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/1f1fa29e0a46fffe18c43a9da8daa5a0b180dfa9\"\u003e\u003ccode\u003e1f1fa29\u003c/code\u003e\u003c/a\u003e publicsuffix: regenerate table\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/12150816f701c912a32a376754ab28dd3878833a\"\u003e\u003ccode\u003e1215081\u003c/code\u003e\u003c/a\u003e http2: improve error when server sends HTTP/1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/312450e473eae9f9e6173ad895c80bc5ea2f79ad\"\u003e\u003ccode\u003e312450e\u003c/code\u003e\u003c/a\u003e html: ensure \u0026lt;search\u0026gt; tag closes \u0026lt;p\u0026gt; and update tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/09731f9bf919b00b344c763894cd1920b3d96d90\"\u003e\u003ccode\u003e09731f9\u003c/code\u003e\u003c/a\u003e http2: improve handling of lost PING in Server\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/55989e24b972a90ab99308fdc7ea1fb58a96fef1\"\u003e\u003ccode\u003e55989e2\u003c/code\u003e\u003c/a\u003e http2/h2c: use ResponseController for hijacking connections\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/2914f46773171f4fa13e276df1135bafef677801\"\u003e\u003ccode\u003e2914f46\u003c/code\u003e\u003c/a\u003e websocket: re-recommend gorilla/websocket\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/99b3ae0643f9a2f9d820fcbba5f9e4c83b23bd48\"\u003e\u003ccode\u003e99b3ae0\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/85d1d54551b68719346cb9fec24b911da4e452a1\"\u003e\u003ccode\u003e85d1d54\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.23.0...v0.38.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/hakancllk35/tailscale/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/hakancllk35/tailscale/pull/6","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/hakancllk35%2Ftailscale/issues/6","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/6/packages"},{"uuid":"4221546909","node_id":"PR_kwDONtFecc7Qqomj","number":7,"state":"closed","title":"Bump the go_modules group across 3 directories with 11 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-04-08T02:57:56.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-08T01:43:11.000Z","updated_at":"2026-04-08T02:57:58.000Z","time_to_close":4485,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"go_modules","update_count":11,"packages":[{"name":"golang.org/x/crypto","old_version":"0.31.0","new_version":"0.45.0","repository_url":"https://github.com/golang/crypto"},{"name":"github.com/cloudflare/circl","old_version":"1.5.0","new_version":"1.6.3","repository_url":"https://github.com/cloudflare/circl"},{"name":"google.golang.org/grpc","old_version":"1.68.1","new_version":"1.79.3","repository_url":"https://github.com/grpc/grpc-go"},{"name":"github.com/go-git/go-git/v5","old_version":"5.12.0","new_version":"5.17.1","repository_url":"https://github.com/go-git/go-git"},{"name":"github.com/go-viper/mapstructure/v2","old_version":"2.2.1","new_version":"2.4.0","repository_url":"https://github.com/go-viper/mapstructure"},{"name":"github.com/golang-jwt/jwt/v4","old_version":"4.5.1","new_version":"4.5.2","repository_url":"https://github.com/golang-jwt/jwt"},{"name":"github.com/hashicorp/go-getter","old_version":"1.7.6","new_version":"1.7.9","repository_url":"https://github.com/hashicorp/go-getter"},{"name":"github.com/ulikunitz/xz","old_version":"0.5.12","new_version":"0.5.14","repository_url":"https://github.com/ulikunitz/xz"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 3 updates in the /.ci/providerlint directory: [golang.org/x/crypto](https://github.com/golang/crypto), [github.com/cloudflare/circl](https://github.com/cloudflare/circl) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 8 updates in the /.ci/tools directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.31.0` | `0.45.0` |\n| [github.com/cloudflare/circl](https://github.com/cloudflare/circl) | `1.5.0` | `1.6.3` |\n| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.68.1` | `1.79.3` |\n| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.12.0` | `5.17.1` |\n| [github.com/go-viper/mapstructure/v2](https://github.com/go-viper/mapstructure) | `2.2.1` | `2.4.0` |\n| [github.com/golang-jwt/jwt/v4](https://github.com/golang-jwt/jwt) | `4.5.1` | `4.5.2` |\n| [github.com/hashicorp/go-getter](https://github.com/hashicorp/go-getter) | `1.7.6` | `1.7.9` |\n| [github.com/ulikunitz/xz](https://github.com/ulikunitz/xz) | `0.5.12` | `0.5.14` |\n\nBumps the go_modules group with 3 updates in the /tools/tfsdk2fw directory: [golang.org/x/crypto](https://github.com/golang/crypto), [github.com/cloudflare/circl](https://github.com/cloudflare/circl) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\n\nUpdates `golang.org/x/crypto` from 0.32.0 to 0.45.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/4e0068c0098be10d7025c99ab7c50ce454c1f0f9\"\u003e\u003ccode\u003e4e0068c\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e79546e28b85ea53dd37afe1c4102746ef553b9c\"\u003e\u003ccode\u003ee79546e\u003c/code\u003e\u003c/a\u003e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f91f7a7c31bf90b39c1de895ad116a2bacc88748\"\u003e\u003ccode\u003ef91f7a7\u003c/code\u003e\u003c/a\u003e ssh/agent: prevent panic on malformed constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/2df4153a0311bdfea44376e0eb6ef2faefb0275b\"\u003e\u003ccode\u003e2df4153\u003c/code\u003e\u003c/a\u003e acme/autocert: let automatic renewal work with short lifetime certs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/bcf6a849efcf4702fa5172cb0998b46c3da1e989\"\u003e\u003ccode\u003ebcf6a84\u003c/code\u003e\u003c/a\u003e acme: pass context to request\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b4f2b62076abeee4e43fb59544dac565715fbf1e\"\u003e\u003ccode\u003eb4f2b62\u003c/code\u003e\u003c/a\u003e ssh: fix error message on unsupported cipher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/79ec3a51fcc7fbd2691d56155d578225ccc542e2\"\u003e\u003ccode\u003e79ec3a5\u003c/code\u003e\u003c/a\u003e ssh: allow to bind to a hostname in remote forwarding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/122a78f140d9d3303ed3261bc374bbbca149140f\"\u003e\u003ccode\u003e122a78f\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/c0531f9c34514ad5c5551e2d6ce569ca673a8afd\"\u003e\u003ccode\u003ec0531f9\u003c/code\u003e\u003c/a\u003e all: eliminate vet diagnostics\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/0997000b45e3a40598272081bcad03ffd21b8adb\"\u003e\u003ccode\u003e0997000\u003c/code\u003e\u003c/a\u003e all: fix some comments\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.32.0...v0.45.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/cloudflare/circl` from 1.5.0 to 1.6.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cloudflare/circl/releases\"\u003egithub.com/cloudflare/circl's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eCIRCL v1.6.3\u003c/h2\u003e\n\u003cp\u003eFix a bug on ecc/p384 scalar multiplication.\u003c/p\u003e\n\u003ch3\u003eWhat's Changed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esign/mldsa: Check opts for nil value  by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/582\"\u003ecloudflare/circl#582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eecc/p384: Point addition must handle point doubling case. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/583\"\u003ecloudflare/circl#583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease CIRCL v1.6.3 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/584\"\u003ecloudflare/circl#584\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNew SLH-DSA, improvements in ML-DSA for arm64.\u003c/li\u003e\n\u003cli\u003eTested compilation on WASM.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize pairing product computation by moving exponentiations to G1. by \u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esign: Adding SLH-DSA signature by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/512\"\u003ecloudflare/circl#512\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate code generators to CIRCL v1.6.1. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/548\"\u003ecloudflare/circl#548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eML-DSA: Add preliminary Wycheproof test vectors by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/552\"\u003ecloudflare/circl#552\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ego fmt by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/554\"\u003ecloudflare/circl#554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egz-compressing test vectors, use of HexBytes and ReadGzip functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/555\"\u003ecloudflare/circl#555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Removes use of elliptic Marshal and Unmarshal functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/556\"\u003ecloudflare/circl#556\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport encoding/decoding ML-DSA private keys (as long as they contain seeds) by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/559\"\u003ecloudflare/circl#559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to golangci-lint v2 by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/560\"\u003ecloudflare/circl#560\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreparation for ARM64 Implementation of poly operations for dilithium package. by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eprepare power2Round for custom implementations in assembly by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/564\"\u003ecloudflare/circl#564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eARM64 implementation for poly.PackLe16 by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/563\"\u003ecloudflare/circl#563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polyMulBy2toD by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/565\"\u003ecloudflare/circl#565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polySub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/566\"\u003ecloudflare/circl#566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: add byteLen method for short groups and RandomScalar uses rand.Int by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/568\"\u003ecloudflare/circl#568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of poly.Add/Sub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/572\"\u003ecloudflare/circl#572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Adding cryptobyte marshaling to scalars by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/569\"\u003ecloudflare/circl#569\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumping up to Go1.25 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/574\"\u003ecloudflare/circl#574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: Including WASM compilation. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/577\"\u003ecloudflare/circl#577\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to using package-declared HPKE errors for shortkem instead of standard library errors by \u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease v1.6.2 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/579\"\u003ecloudflare/circl#579\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixes some point checks on the FourQ curve.\u003c/li\u003e\n\u003cli\u003eHybrid KEM fails on low-order points.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/24ae53c5d6f7fe18203adc125ba3ed76a38703e1\"\u003e\u003ccode\u003e24ae53c\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/581020bd4a836b8ce7bd4e414ba2884c07dbc906\"\u003e\u003ccode\u003e581020b\u003c/code\u003e\u003c/a\u003e Rename method to oddMultiplesProjective.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/12209a4566605692a8402594e367a5aed5148460\"\u003e\u003ccode\u003e12209a4\u003c/code\u003e\u003c/a\u003e Removing unused cmov for jacobian points.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/fcba359f4178645d2c9e50f29ab6966337da4b95\"\u003e\u003ccode\u003efcba359\u003c/code\u003e\u003c/a\u003e ecc/p384: use of complete projective formulas for scalar multiplication.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/5e1bae8d8c2df4e717c2c5c2d5b5d60b629b2ac6\"\u003e\u003ccode\u003e5e1bae8\u003c/code\u003e\u003c/a\u003e ecc/p384: handle point doubling in point addition with Jacobian coordinates.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/341604685ff97e8f7440ae4b4711ba1c118c648c\"\u003e\u003ccode\u003e3416046\u003c/code\u003e\u003c/a\u003e Check opts for nil value.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/a763d47a6dce43d1f4f7b697d1d7810463a526f6\"\u003e\u003ccode\u003ea763d47\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3c70bf9ad53b681fbe5ba6067e454a86549fee8a\"\u003e\u003ccode\u003e3c70bf9\u003c/code\u003e\u003c/a\u003e Bump x/crypto x/sys dependencies.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3f0f15b2bfe67bad81a35e8aec81ae42ca78349d\"\u003e\u003ccode\u003e3f0f15b\u003c/code\u003e\u003c/a\u003e Revert to using package-declared HPKE errors for shortkem instead of standard...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/23491bd573cf29b6f567057a158203a2c9dfa30d\"\u003e\u003ccode\u003e23491bd\u003c/code\u003e\u003c/a\u003e Adding generic Power2Round method.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.5.0...v1.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.34.0 to 0.47.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/9a296438e54dff851a45667aa645a97003b44db5\"\u003e\u003ccode\u003e9a29643\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/07cefd8a6bb170785052142a96034f2b2f7115bc\"\u003e\u003ccode\u003e07cefd8\u003c/code\u003e\u003c/a\u003e context: deprecate\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/5ac9daca088ab4f378d7df849f6c7d28bea86071\"\u003e\u003ccode\u003e5ac9dac\u003c/code\u003e\u003c/a\u003e publicsuffix: don't treat ip addresses as domain names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/d1f64cc67036f272ea900194674afcf71eb3e816\"\u003e\u003ccode\u003ed1f64cc\u003c/code\u003e\u003c/a\u003e quic: use testing/synctest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/fff0469cf57f71bea0cbc4cc8cbfb8f92be7a417\"\u003e\u003ccode\u003efff0469\u003c/code\u003e\u003c/a\u003e http2: document that RFC 7540 prioritization does not work with small payloads\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/f35e3a4dd2a34d1d47fac5b66210a40e2d374a79\"\u003e\u003ccode\u003ef35e3a4\u003c/code\u003e\u003c/a\u003e http2: fix weight overflow in RFC 7540 write scheduler\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/89adc90ac46a688eeda3a4a95b71acf073bd059c\"\u003e\u003ccode\u003e89adc90\u003c/code\u003e\u003c/a\u003e http2: fix typo referring to RFC 9218 as RFC 9128 instead\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/8d76a2c082f6f995c2ef1ce8a0d56f2e33b48092\"\u003e\u003ccode\u003e8d76a2c\u003c/code\u003e\u003c/a\u003e quic: don't defer MAX_STREAMS frames indefinitely\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/027f8b700eb72af5c0175a945535a42670628351\"\u003e\u003ccode\u003e027f8b7\u003c/code\u003e\u003c/a\u003e quic: fix expected ACK Delay in client's ACK after HANDSHAKE_DONE\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/dec9fe711ec1385a2aa169a3f8145d295abcca16\"\u003e\u003ccode\u003edec9fe7\u003c/code\u003e\u003c/a\u003e dns/dnsmessage: update SVCB packing to prohibit name compression\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.34.0...v0.47.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google.golang.org/grpc` from 1.67.1 to 1.79.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc-go/releases\"\u003egoogle.golang.org/grpc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 1.79.3\u003c/h2\u003e\n\u003ch1\u003eSecurity\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eserver: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted \u0026quot;deny\u0026quot; rules in interceptors like \u003ccode\u003egrpc/authz\u003c/code\u003e. Any request with a non-canonical path is now immediately rejected with an \u003ccode\u003eUnimplemented\u003c/code\u003e error. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.2\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003estats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8874\"\u003egrpc/grpc-go#8874\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.1\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003egrpc: Remove the \u003ccode\u003e-dev\u003c/code\u003e suffix from the User-Agent header. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8902\"\u003egrpc/grpc-go#8902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.0\u003c/h2\u003e\n\u003ch1\u003eAPI Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003emem: Add experimental API \u003ccode\u003eSetDefaultBufferPool\u003c/code\u003e to change the default buffer pool. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8806\"\u003e#8806\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/vanja-p\"\u003e\u003ccode\u003e@​vanja-p\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eexperimental/stats: Update \u003ccode\u003eMetricsRecorder\u003c/code\u003e to require embedding the new \u003ccode\u003eUnimplementedMetricsRecorder\u003c/code\u003e (a no-op struct) in all implementations for forward compatibility. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBehavior Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ebalancer/weightedtarget: Remove handling of \u003ccode\u003eAddresses\u003c/code\u003e and only handle \u003ccode\u003eEndpoints\u003c/code\u003e in resolver updates. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8841\"\u003e#8841\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eNew Features\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eexperimental/stats: Add support for asynchronous gauge metrics through the new \u003ccode\u003eAsyncMetricReporter\u003c/code\u003e and \u003ccode\u003eRegisterAsyncReporter\u003c/code\u003e APIs. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epickfirst: Add support for weighted random shuffling of endpoints, as described in \u003ca href=\"https://redirect.github.com/grpc/proposal/pull/535\"\u003egRFC A113\u003c/a\u003e.\n\u003cul\u003e\n\u003cli\u003eThis is enabled by default, and can be turned off using the environment variable \u003ccode\u003eGRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds: Implement \u003ccode\u003e:authority\u003c/code\u003e rewriting, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A81-xds-authority-rewriting.md\"\u003egRFC A81\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8779\"\u003e#8779\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebalancer/randomsubsetting: Implement the \u003ccode\u003erandom_subsetting\u003c/code\u003e LB policy, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A68-random-subsetting.md\"\u003egRFC A68\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8650\"\u003e#8650\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/marek-szews\"\u003e\u003ccode\u003e@​marek-szews\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/tls: Fix a bug where the port was not stripped from the authority override before validation. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8726\"\u003e#8726\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/Atul1710\"\u003e\u003ccode\u003e@​Atul1710\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds/priority: Fix a bug causing delayed failover to lower-priority clusters when a higher-priority cluster is stuck in \u003ccode\u003eCONNECTING\u003c/code\u003e state. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8813\"\u003e#8813\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ehealth: Fix a bug where health checks failed for clients using legacy compression options (\u003ccode\u003eWithDecompressor\u003c/code\u003e or \u003ccode\u003eRPCDecompressor\u003c/code\u003e). (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8765\"\u003e#8765\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/sanki92\"\u003e\u003ccode\u003e@​sanki92\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003etransport: Fix an issue where the HTTP/2 server could skip header size checks when terminating a stream early. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8769\"\u003e#8769\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eserver: Propagate status detail headers, if available, when terminating a stream during request header processing. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8754\"\u003e#8754\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ePerformance Improvements\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/alts: Optimize read buffer alignment to reduce copies. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8791\"\u003e#8791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emem: Optimize pooling and creation of \u003ccode\u003ebuffer\u003c/code\u003e objects.  (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8784\"\u003e#8784\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etransport: Reduce slice re-allocations by reserving slice capacity. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8797\"\u003e#8797\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/dda86dbd9cecb8b35b58c73d507d81d67761205f\"\u003e\u003ccode\u003edda86db\u003c/code\u003e\u003c/a\u003e Change version to 1.79.3 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8983\"\u003e#8983\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/72186f163e75a065c39e6f7df9b6dea07fbdeff5\"\u003e\u003ccode\u003e72186f1\u003c/code\u003e\u003c/a\u003e grpc: enforce strict path checking for incoming requests on the server (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/97ca3522b239edf6813e2b1106924e9d55e89d43\"\u003e\u003ccode\u003e97ca352\u003c/code\u003e\u003c/a\u003e Changing version to 1.79.3-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8954\"\u003e#8954\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/8902ab6efea590f5b3861126559eaa26fa9783b2\"\u003e\u003ccode\u003e8902ab6\u003c/code\u003e\u003c/a\u003e Change the version to release 1.79.2 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8947\"\u003e#8947\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/a9286705aa689bee321ec674323b6896284f3e02\"\u003e\u003ccode\u003ea928670\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8874\"\u003e#8874\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8904\"\u003e#8904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/06df3638c0bcee88197b1033b3ba83e1eb8bc010\"\u003e\u003ccode\u003e06df363\u003c/code\u003e\u003c/a\u003e Change version to 1.79.2-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8903\"\u003e#8903\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/782f2de44f597af18a120527e7682a6670d84289\"\u003e\u003ccode\u003e782f2de\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8902\"\u003e#8902\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/850eccbb2257bd2de6ac28ee88a7172ab6175629\"\u003e\u003ccode\u003e850eccb\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8851\"\u003e#8851\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/765ff056b6890f6c8341894df4e9668e9bfc18ef\"\u003e\u003ccode\u003e765ff05\u003c/code\u003e\u003c/a\u003e Change version to 1.79.0 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8850\"\u003e#8850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/68804be0e78ed0365bb5a576dedc12e2168ed63e\"\u003e\u003ccode\u003e68804be\u003c/code\u003e\u003c/a\u003e Cherry pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8896\"\u003e#8896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/grpc/grpc-go/compare/v1.67.1...v1.79.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.31.0 to 0.45.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/4e0068c0098be10d7025c99ab7c50ce454c1f0f9\"\u003e\u003ccode\u003e4e0068c\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e79546e28b85ea53dd37afe1c4102746ef553b9c\"\u003e\u003ccode\u003ee79546e\u003c/code\u003e\u003c/a\u003e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f91f7a7c31bf90b39c1de895ad116a2bacc88748\"\u003e\u003ccode\u003ef91f7a7\u003c/code\u003e\u003c/a\u003e ssh/agent: prevent panic on malformed constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/2df4153a0311bdfea44376e0eb6ef2faefb0275b\"\u003e\u003ccode\u003e2df4153\u003c/code\u003e\u003c/a\u003e acme/autocert: let automatic renewal work with short lifetime certs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/bcf6a849efcf4702fa5172cb0998b46c3da1e989\"\u003e\u003ccode\u003ebcf6a84\u003c/code\u003e\u003c/a\u003e acme: pass context to request\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b4f2b62076abeee4e43fb59544dac565715fbf1e\"\u003e\u003ccode\u003eb4f2b62\u003c/code\u003e\u003c/a\u003e ssh: fix error message on unsupported cipher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/79ec3a51fcc7fbd2691d56155d578225ccc542e2\"\u003e\u003ccode\u003e79ec3a5\u003c/code\u003e\u003c/a\u003e ssh: allow to bind to a hostname in remote forwarding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/122a78f140d9d3303ed3261bc374bbbca149140f\"\u003e\u003ccode\u003e122a78f\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/c0531f9c34514ad5c5551e2d6ce569ca673a8afd\"\u003e\u003ccode\u003ec0531f9\u003c/code\u003e\u003c/a\u003e all: eliminate vet diagnostics\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/0997000b45e3a40598272081bcad03ffd21b8adb\"\u003e\u003ccode\u003e0997000\u003c/code\u003e\u003c/a\u003e all: fix some comments\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.32.0...v0.45.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/cloudflare/circl` from 1.5.0 to 1.6.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cloudflare/circl/releases\"\u003egithub.com/cloudflare/circl's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eCIRCL v1.6.3\u003c/h2\u003e\n\u003cp\u003eFix a bug on ecc/p384 scalar multiplication.\u003c/p\u003e\n\u003ch3\u003eWhat's Changed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esign/mldsa: Check opts for nil value  by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/582\"\u003ecloudflare/circl#582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eecc/p384: Point addition must handle point doubling case. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/583\"\u003ecloudflare/circl#583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease CIRCL v1.6.3 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/584\"\u003ecloudflare/circl#584\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNew SLH-DSA, improvements in ML-DSA for arm64.\u003c/li\u003e\n\u003cli\u003eTested compilation on WASM.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize pairing product computation by moving exponentiations to G1. by \u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esign: Adding SLH-DSA signature by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/512\"\u003ecloudflare/circl#512\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate code generators to CIRCL v1.6.1. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/548\"\u003ecloudflare/circl#548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eML-DSA: Add preliminary Wycheproof test vectors by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/552\"\u003ecloudflare/circl#552\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ego fmt by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/554\"\u003ecloudflare/circl#554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egz-compressing test vectors, use of HexBytes and ReadGzip functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/555\"\u003ecloudflare/circl#555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Removes use of elliptic Marshal and Unmarshal functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/556\"\u003ecloudflare/circl#556\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport encoding/decoding ML-DSA private keys (as long as they contain seeds) by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/559\"\u003ecloudflare/circl#559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to golangci-lint v2 by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/560\"\u003ecloudflare/circl#560\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreparation for ARM64 Implementation of poly operations for dilithium package. by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eprepare power2Round for custom implementations in assembly by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/564\"\u003ecloudflare/circl#564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eARM64 implementation for poly.PackLe16 by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/563\"\u003ecloudflare/circl#563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polyMulBy2toD by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/565\"\u003ecloudflare/circl#565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polySub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/566\"\u003ecloudflare/circl#566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: add byteLen method for short groups and RandomScalar uses rand.Int by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/568\"\u003ecloudflare/circl#568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of poly.Add/Sub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/572\"\u003ecloudflare/circl#572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Adding cryptobyte marshaling to scalars by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/569\"\u003ecloudflare/circl#569\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumping up to Go1.25 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/574\"\u003ecloudflare/circl#574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: Including WASM compilation. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/577\"\u003ecloudflare/circl#577\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to using package-declared HPKE errors for shortkem instead of standard library errors by \u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease v1.6.2 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/579\"\u003ecloudflare/circl#579\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixes some point checks on the FourQ curve.\u003c/li\u003e\n\u003cli\u003eHybrid KEM fails on low-order points.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/24ae53c5d6f7fe18203adc125ba3ed76a38703e1\"\u003e\u003ccode\u003e24ae53c\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/581020bd4a836b8ce7bd4e414ba2884c07dbc906\"\u003e\u003ccode\u003e581020b\u003c/code\u003e\u003c/a\u003e Rename method to oddMultiplesProjective.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/12209a4566605692a8402594e367a5aed5148460\"\u003e\u003ccode\u003e12209a4\u003c/code\u003e\u003c/a\u003e Removing unused cmov for jacobian points.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/fcba359f4178645d2c9e50f29ab6966337da4b95\"\u003e\u003ccode\u003efcba359\u003c/code\u003e\u003c/a\u003e ecc/p384: use of complete projective formulas for scalar multiplication.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/5e1bae8d8c2df4e717c2c5c2d5b5d60b629b2ac6\"\u003e\u003ccode\u003e5e1bae8\u003c/code\u003e\u003c/a\u003e ecc/p384: handle point doubling in point addition with Jacobian coordinates.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/341604685ff97e8f7440ae4b4711ba1c118c648c\"\u003e\u003ccode\u003e3416046\u003c/code\u003e\u003c/a\u003e Check opts for nil value.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/a763d47a6dce43d1f4f7b697d1d7810463a526f6\"\u003e\u003ccode\u003ea763d47\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3c70bf9ad53b681fbe5ba6067e454a86549fee8a\"\u003e\u003ccode\u003e3c70bf9\u003c/code\u003e\u003c/a\u003e Bump x/crypto x/sys dependencies.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3f0f15b2bfe67bad81a35e8aec81ae42ca78349d\"\u003e\u003ccode\u003e3f0f15b\u003c/code\u003e\u003c/a\u003e Revert to using package-declared HPKE errors for shortkem instead of standard...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/23491bd573cf29b6f567057a158203a2c9dfa30d\"\u003e\u003ccode\u003e23491bd\u003c/code\u003e\u003c/a\u003e Adding generic Power2Round method.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.5.0...v1.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.32.0 to 0.47.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/9a296438e54dff851a45667aa645a97003b44db5\"\u003e\u003ccode\u003e9a29643\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/07cefd8a6bb170785052142a96034f2b2f7115bc\"\u003e\u003ccode\u003e07cefd8\u003c/code\u003e\u003c/a\u003e context: deprecate\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/5ac9daca088ab4f378d7df849f6c7d28bea86071\"\u003e\u003ccode\u003e5ac9dac\u003c/code\u003e\u003c/a\u003e publicsuffix: don't treat ip addresses as domain names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/d1f64cc67036f272ea900194674afcf71eb3e816\"\u003e\u003ccode\u003ed1f64cc\u003c/code\u003e\u003c/a\u003e quic: use testing/synctest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/fff0469cf57f71bea0cbc4cc8cbfb8f92be7a417\"\u003e\u003ccode\u003efff0469\u003c/code\u003e\u003c/a\u003e http2: document that RFC 7540 prioritization does not work with small payloads\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/f35e3a4dd2a34d1d47fac5b66210a40e2d374a79\"\u003e\u003ccode\u003ef35e3a4\u003c/code\u003e\u003c/a\u003e http2: fix weight overflow in RFC 7540 write scheduler\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/89adc90ac46a688eeda3a4a95b71acf073bd059c\"\u003e\u003ccode\u003e89adc90\u003c/code\u003e\u003c/a\u003e http2: fix typo referring to RFC 9218 as RFC 9128 instead\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/8d76a2c082f6f995c2ef1ce8a0d56f2e33b48092\"\u003e\u003ccode\u003e8d76a2c\u003c/code\u003e\u003c/a\u003e quic: don't defer MAX_STREAMS frames indefinitely\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/027f8b700eb72af5c0175a945535a42670628351\"\u003e\u003ccode\u003e027f8b7\u003c/code\u003e\u003c/a\u003e quic: fix expected ACK Delay in client's ACK after HANDSHAKE_DONE\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/dec9fe711ec1385a2aa169a3f8145d295abcca16\"\u003e\u003ccode\u003edec9fe7\u003c/code\u003e\u003c/a\u003e dns/dnsmessage: update SVCB packing to prohibit name compression\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.34.0...v0.47.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google.golang.org/grpc` from 1.68.1 to 1.79.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc-go/releases\"\u003egoogle.golang.org/grpc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 1.79.3\u003c/h2\u003e\n\u003ch1\u003eSecurity\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eserver: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted \u0026quot;deny\u0026quot; rules in interceptors like \u003ccode\u003egrpc/authz\u003c/code\u003e. Any request with a non-canonical path is now immediately rejected with an \u003ccode\u003eUnimplemented\u003c/code\u003e error. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.2\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003estats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8874\"\u003egrpc/grpc-go#8874\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.1\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003egrpc: Remove the \u003ccode\u003e-dev\u003c/code\u003e suffix from the User-Agent header. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8902\"\u003egrpc/grpc-go#8902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.0\u003c/h2\u003e\n\u003ch1\u003eAPI Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003emem: Add experimental API \u003ccode\u003eSetDefaultBufferPool\u003c/code\u003e to change the default buffer pool. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8806\"\u003e#8806\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/vanja-p\"\u003e\u003ccode\u003e@​vanja-p\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eexperimental/stats: Update \u003ccode\u003eMetricsRecorder\u003c/code\u003e to require embedding the new \u003ccode\u003eUnimplementedMetricsRecorder\u003c/code\u003e (a no-op struct) in all implementations for forward compatibility. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBehavior Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ebalancer/weightedtarget: Remove handling of \u003ccode\u003eAddresses\u003c/code\u003e and only handle \u003ccode\u003eEndpoints\u003c/code\u003e in resolver updates. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8841\"\u003e#8841\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eNew Features\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eexperimental/stats: Add support for asynchronous gauge metrics through the new \u003ccode\u003eAsyncMetricReporter\u003c/code\u003e and \u003ccode\u003eRegisterAsyncReporter\u003c/code\u003e APIs. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epickfirst: Add support for weighted random shuffling of endpoints, as described in \u003ca href=\"https://redirect.github.com/grpc/proposal/pull/535\"\u003egRFC A113\u003c/a\u003e.\n\u003cul\u003e\n\u003cli\u003eThis is enabled by default, and can be turned off using the environment variable \u003ccode\u003eGRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds: Implement \u003ccode\u003e:authority\u003c/code\u003e rewriting, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A81-xds-authority-rewriting.md\"\u003egRFC A81\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8779\"\u003e#8779\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebalancer/randomsubsetting: Implement the \u003ccode\u003erandom_subsetting\u003c/code\u003e LB policy, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A68-random-subsetting.md\"\u003egRFC A68\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8650\"\u003e#8650\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/marek-szews\"\u003e\u003ccode\u003e@​marek-szews\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/tls: Fix a bug where the port was not stripped from the authority override before validation. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8726\"\u003e#8726\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/Atul1710\"\u003e\u003ccode\u003e@​Atul1710\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds/priority: Fix a bug causing delayed failover to lower-priority clusters when a higher-priority cluster is stuck in \u003ccode\u003eCONNECTING\u003c/code\u003e state. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8813\"\u003e#8813\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ehealth: Fix a bug where health checks failed for clients using legacy compression options (\u003ccode\u003eWithDecompressor\u003c/code\u003e or \u003ccode\u003eRPCDecompressor\u003c/code\u003e). (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8765\"\u003e#8765\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/sanki92\"\u003e\u003ccode\u003e@​sanki92\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003etransport: Fix an issue where the HTTP/2 server could skip header size checks when terminating a stream early. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8769\"\u003e#8769\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eserver: Propagate status detail headers, if available, when terminating a stream during request header processing. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8754\"\u003e#8754\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ePerformance Improvements\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/alts: Optimize read buffer alignment to reduce copies. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8791\"\u003e#8791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emem: Optimize pooling and creation of \u003ccode\u003ebuffer\u003c/code\u003e objects.  (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8784\"\u003e#8784\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etransport: Reduce slice re-allocations by reserving slice capacity. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8797\"\u003e#8797\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/dda86dbd9cecb8b35b58c73d507d81d67761205f\"\u003e\u003ccode\u003edda86db\u003c/code\u003e\u003c/a\u003e Change version to 1.79.3 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8983\"\u003e#8983\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/72186f163e75a065c39e6f7df9b6dea07fbdeff5\"\u003e\u003ccode\u003e72186f1\u003c/code\u003e\u003c/a\u003e grpc: enforce strict path checking for incoming requests on the server (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/97ca3522b239edf6813e2b1106924e9d55e89d43\"\u003e\u003ccode\u003e97ca352\u003c/code\u003e\u003c/a\u003e Changing version to 1.79.3-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8954\"\u003e#8954\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/8902ab6efea590f5b3861126559eaa26fa9783b2\"\u003e\u003ccode\u003e8902ab6\u003c/code\u003e\u003c/a\u003e Change the version to release 1.79.2 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8947\"\u003e#8947\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/a9286705aa689bee321ec674323b6896284f3e02\"\u003e\u003ccode\u003ea928670\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8874\"\u003e#8874\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8904\"\u003e#8904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/06df3638c0bcee88197b1033b3ba83e1eb8bc010\"\u003e\u003ccode\u003e06df363\u003c/code\u003e\u003c/a\u003e Change version to 1.79.2-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8903\"\u003e#8903\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/782f2de44f597af18a120527e7682a6670d84289\"\u003e\u003ccode\u003e782f2de\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8902\"\u003e#8902\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/850eccbb2257bd2de6ac28ee88a7172ab6175629\"\u003e\u003ccode\u003e850eccb\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8851\"\u003e#8851\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/765ff056b6890f6c8341894df4e9668e9bfc18ef\"\u003e\u003ccode\u003e765ff05\u003c/code\u003e\u003c/a\u003e Change version to 1.79.0 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8850\"\u003e#8850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/68804be0e78ed0365bb5a576dedc12e2168ed63e\"\u003e\u003ccode\u003e68804be\u003c/code\u003e\u003c/a\u003e Cherry pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8896\"\u003e#8896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/grpc/grpc-go/compare/v1.67.1...v1.79.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-git/v5` from 5.12.0 to 5.17.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-git/releases\"\u003egithub.com/go-git/go-git/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.17.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/cloudflare/circl to v1.6.3 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1930\"\u003ego-git/go-git#1930\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/index, Improve v4 entry name validation by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1935\"\u003ego-git/go-git#1935\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/idxfile, Fix version and fanout checks by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1937\"\u003ego-git/go-git#1937\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.16.5 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1839\"\u003ego-git/go-git#1839\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: worktree, optimize infiles function for very large repos by \u003ca href=\"https://github.com/k-anshul\"\u003e\u003ccode\u003e@​k-anshul\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1853\"\u003ego-git/go-git#1853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: Add strict checks for supported extensions by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1861\"\u003ego-git/go-git#1861\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebackport, git: Improve Status() speed with new index.ModTime check by \u003ca href=\"https://github.com/cedric-appdirect\"\u003e\u003ccode\u003e@​cedric-appdirect\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1862\"\u003ego-git/go-git#1862\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003estorage: filesystem, Avoid overwriting loose obj files by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1864\"\u003ego-git/go-git#1864\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.16.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module golang.org/x/crypto to v0.45.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1744\"\u003ego-git/go-git#1744\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Bump Go test versions to 1.23-1.25 (v5) by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1746\"\u003ego-git/go-git#1746\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] git: worktree, Don't delete local untracked files when resetting worktree by \u003ca href=\"https://github.com/Ch00k\"\u003e\u003ccode\u003e@​Ch00k\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1800\"\u003ego-git/go-git#1800\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExpand packfile checks by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1836\"\u003ego-git/go-git#1836\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.4...v5.16.5\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.4...v5.16.5\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.16.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebackport plumbing: format/idxfile, prevent panic by \u003ca href=\"https://github.com/swills\"\u003e\u003ccode\u003e@​swills\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1732\"\u003ego-git/go-git#1732\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[backport] build: test, Fix build on Windows. by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1734\"\u003ego-git/go-git#1734\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Update module golang.org/x/net to v0.38.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1742\"\u003ego-git/go-git#1742\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Update module github.com/cloudflare/circl to v1.6.1 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1741\"\u003ego-git/go-git#1741\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.13.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1743\"\u003ego-git/go-git#1743\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.3...v5.16.4\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.3...v5.16.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.16.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003einternal: Expand regex to fix build [5.x] by \u003ca href=\"https://github.com/baloo\"\u003e\u003ccode\u003e@​baloo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1644\"\u003ego-git/go-git#1644\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: raise timeouts for windows CI tests and disable CIFuzz [5.x] by \u003ca href=\"https://github.com/baloo\"\u003e\u003ccode\u003e@​baloo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1646\"\u003ego-git/go-git#1646\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eplumbing: support commits extra headers, support jujutsu signed commit [5.x] by \u003ca href=\"https://github.com/baloo\"\u003e\u003ccode\u003e@​baloo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1633\"\u003ego-git/go-git#1633\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.2...v5.16.3\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.2...v5.16.3\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/5e23dfd02db92644dc4a3358ceb297fce875b772\"\u003e\u003ccode\u003e5e23dfd\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1937\"\u003e#1937\u003c/a\u003e from pjbgf/idx-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/6b38a326816b80f64c20cc0e6113958b65c05a1c\"\u003e\u003ccode\u003e6b38a32\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1935\"\u003e#1935\u003c/a\u003e from pjbgf/index-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/cd757fcb856a2dcc5fff6c110320a8ff62e99513\"\u003e\u003ccode\u003ecd757fc\u003c/code\u003e\u003c/a\u003e plumbing: format/idxfile, Fix version and fanout checks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/3ec0d70cb687ae1da5f4d18faa4229bd971a8710\"\u003e\u003ccode\u003e3ec0d70\u003c/code\u003e\u003c/a\u003e plumbing: format/index, Fix tree extension invalidated entry parsing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/dbe10b6b425a2a4ea92a9d98e20cd68e15aede01\"\u003e\u003ccode\u003edbe10b6\u003c/code\u003e\u003c/a\u003e plumbing: format/index, Align V2/V3 long name and V4 prefix encoding with Git\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/e9b65df44cb97faeba148b47523a362beaecddf9\"\u003e\u003ccode\u003ee9b65df\u003c/code\u003e\u003c/a\u003e plumbing: format/index, Improve v4 entry name validation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/adad18daabddee04c5a889f0230035e74bca32c0\"\u003e\u003ccode\u003eadad18d\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1930\"\u003e#1930\u003c/a\u003e from go-git/renovate/releases/v5.x-go-github.com-clo...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/29470bd1d862c6e902996b8e8ff8eb7a0515a9be\"\u003e\u003ccode\u003e29470bd\u003c/code\u003e\u003c/a\u003e build: Update module github.com/cloudflare/circl to v1.6.3 [SECURITY]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/bdf06885bdaa3631cf6a2017108086c6f53dcf69\"\u003e\u003ccode\u003ebdf0688\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1864\"\u003e#1864\u003c/a\u003e from pjbgf/v5-issue-55\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/5290e521c8cf651bf3e8d3e37f517c7cf7aa0b19\"\u003e\u003ccode\u003e5290e52\u003c/code\u003e\u003c/a\u003e storage: filesystem, Avoid overwriting loose obj files. Fixes \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/55\"\u003e#55\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-git/compare/v5.12.0...v5.17.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-viper/mapstructure/v2` from 2.2.1 to 2.4.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-viper/mapstructure/releases\"\u003egithub.com/go-viper/mapstructure/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.4.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003erefactor: replace interface{} with any by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/115\"\u003ego-viper/mapstructure#115\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.0 to 3.29.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/114\"\u003ego-viper/mapstructure#114\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGeneric tests by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/118\"\u003ego-viper/mapstructure#118\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix godoc reference link in README.md by \u003ca href=\"https://github.com/peczenyj\"\u003e\u003ccode\u003e@​peczenyj\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/107\"\u003ego-viper/mapstructure#107\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add StringToTimeLocationHookFunc to convert strings to *time.Location by \u003ca href=\"https://github.com/ErfanMomeniii\"\u003e\u003ccode\u003e@​ErfanMomeniii\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/117\"\u003ego-viper/mapstructure#117\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add back previous StringToSlice as a weak function by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/119\"\u003ego-viper/mapstructure#119\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ErfanMomeniii\"\u003e\u003ccode\u003e@​ErfanMomeniii\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/117\"\u003ego-viper/mapstructure#117\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-viper/mapstructure/compare/v2.3.0...v2.4.0\"\u003ehttps://github.com/go-viper/mapstructure/compare/v2.3.0...v2.4.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.3.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 4.1.7 to 4.2.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/46\"\u003ego-viper/mapstructure#46\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golangci/golangci-lint-action from 6.1.0 to 6.1.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/47\"\u003ego-viper/mapstructure#47\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[enhancement] Add check for \u003ccode\u003ereflect.Value\u003c/code\u003e in \u003ccode\u003eComposeDecodeHookFunc\u003c/code\u003e by \u003ca href=\"https://github.com/mahadzaryab1\"\u003e\u003ccode\u003e@​mahadzaryab1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/52\"\u003ego-viper/mapstructure#52\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.0.2 to 5.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/51\"\u003ego-viper/mapstructure#51\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 4.2.0 to 4.2.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/50\"\u003ego-viper/mapstructure#50\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.1.0 to 5.2.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/55\"\u003ego-viper/mapstructure#55\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.2.0 to 5.3.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/58\"\u003ego-viper/mapstructure#58\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: add Go 1.24 to the test matrix by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/74\"\u003ego-viper/mapstructure#74\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golangci/golangci-lint-action from 6.1.1 to 6.5.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/72\"\u003ego-viper/mapstructure#72\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golangci/golangci-lint-action from 6.5.0 to 6.5.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/76\"\u003ego-viper/mapstructure#76\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.3.0 to 5.4.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/78\"\u003ego-viper/mapstructure#78\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add decode hook for netip.Prefix by \u003ca href=\"https://github.com/tklauser\"\u003e\u003ccode\u003e@​tklauser\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/85\"\u003ego-viper/mapstructure#85\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdates by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/86\"\u003ego-viper/mapstructure#86\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 2.13.4 to 3.28.15 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/87\"\u003ego-viper/mapstructure#87\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.4.0 to 5.5.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/93\"\u003ego-viper/mapstructure#93\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.15 to 3.28.17 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/92\"\u003ego-viper/mapstructure#92\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.17 to 3.28.19 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/97\"\u003ego-viper/mapstructure#97\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/96\"\u003ego-viper/mapstructure#96\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate README.md by \u003ca href=\"https://github.com/peczenyj\"\u003e\u003ccode\u003e@​peczenyj\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/90\"\u003ego-viper/mapstructure#90\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd omitzero tag. by \u003ca href=\"https://github.com/Crystalix007\"\u003e\u003ccode\u003e@​Crystalix007\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/98\"\u003ego-viper/mapstructure#98\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse error structs instead of duplicated strings by \u003ca href=\"https://github.com/m1k1o\"\u003e\u003ccode\u003e@​m1k1o\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/102\"\u003ego-viper/mapstructure#102\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.19 to 3.29.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/101\"\u003ego-viper/mapstructure#101\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add common error interface by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/105\"\u003ego-viper/mapstructure#105\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eupdate linter by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/106\"\u003ego-viper/mapstructure#106\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFeature allow unset pointer by \u003ca href=\"https://github.com/rostislaved\"\u003e\u003ccode\u003e@​rostislaved\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/80\"\u003ego-viper/mapstructure#80\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tklauser\"\u003e\u003ccode\u003e@​tklauser\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/85\"\u003ego-viper/mapstructure#85\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/peczenyj\"\u003e\u003ccode\u003e@​peczenyj\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/90\"\u003ego-viper/mapstructure#90\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Crystalix007\"\u003e\u003ccode\u003e@​Crystalix007\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/98\"\u003ego-viper/mapstructure#98\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rostislaved\"\u003e\u003ccode\u003e@​rostislaved\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/80\"\u003ego-viper/mapstructure#80\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-viper/mapstructure/compare/v2.2.1...v2.3.0\"\u003ehttps://github.com/go-viper/mapstructure/compare/v2.2.1...v2.3.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/b9794a5f0e73d425210d6614ed833067029155f5\"\u003e\u003ccode\u003eb9794a5\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/119\"\u003e#119\u003c/a\u003e from go-viper/string-to-weak-slice\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/17cdcb0741054e2a33938adf6bd1f2a5c0aa8f30\"\u003e\u003ccode\u003e17cdcb0\u003c/code\u003e\u003c/a\u003e feat: add back previous StringToSlice as a weak function\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/3caca3614c3ab2c5b5d359c44fdcd72058887b19\"\u003e\u003ccode\u003e3caca36\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/117\"\u003e#117\u003c/a\u003e from ErfanMomeniii/main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/9a861bc115f2b54ed4e494662f29c172d9ef046a\"\u003e\u003ccode\u003e9a861bc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/107\"\u003e#107\u003c/a\u003e from peczenyj/patch-2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/86ed5b59da0615fb8c3a413f401cdf0231f1234c\"\u003e\u003ccode\u003e86ed5b5\u003c/code\u003e\u003c/a\u003e refactor: update\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/ace5b4e8b3dec99468ffa9498e42fb09d177b0a6\"\u003e\u003ccode\u003eace5b4e\u003c/code\u003e\u003c/a\u003e chore: add interface any linter\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/1a4f1aef38bfa8549762aaf42c7c18a5d268e76e\"\u003e\u003ccode\u003e1a4f1ae\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/118\"\u003e#118\u003c/a\u003e from go-viper/generic-tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/a2689090ed4348033c36724d866faf1f911a9f63\"\u003e\u003ccode\u003ea268909\u003c/code\u003e\u003c/a\u003e fix: lint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/17f1fd44eb7606b109c9bb017c0a1c6d3e93b5cd\"\u003e\u003ccode\u003e17f1fd4\u003c/code\u003e\u003c/a\u003e test: add more comments\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/b48c8566836bf291bfee2b217d51fc36e8e61f6f\"\u003e\u003ccode\u003eb48c856\u003c/code\u003e\u003c/a\u003e test: expand tests\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-viper/mapstructure/compare/v2.2.1...v2.4.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/golang-jwt/jwt/v4` from 4.5.1 to 4.5.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/golang-jwt/jwt/releases\"\u003egithub.com/golang-jwt/jwt/v4's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.5.2\u003c/h2\u003e\n\u003cp\u003eSee \u003ca href=\"https://github.com/golang-jwt/jwt/security/advisories/GHSA-mh63-6h87-95cp\"\u003ehttps://github.com/golang-jwt/jwt/security/advisories/GHSA-mh63-6h87-95cp\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang-jwt/jwt/compare/v4.5.1...v4.5.2\"\u003ehttps://github.com/golang-jwt/jwt/compare/v4.5.1...v4.5.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/2f0e9add62078527821828c76865661aa7718a84\"\u003e\u003ccode\u003e2f0e9ad\u003c/code\u003e\u003c/a\u003e Backporting 0951d18 to v4\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang-jwt/jwt/compare/v4.5.1...v4.5.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/hashicorp/go-getter` from 1.7.6 to 1.7.9\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/hashicorp/go-getter/releases\"\u003egithub.com/hashicorp/go-getter's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.7.9\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSpeed up XZ decompression by 5x with bufio wrapper by \u003ca href=\"https://github.com/vsarunas\"\u003e\u003ccode\u003e@​vsarunas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/520\"\u003ehashicorp/go-getter#520\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix CI Workflow by \u003ca href=\"https://github.com/mohanmanikanta2299\"\u003e\u003ccode\u003e@​mohanmanikanta2299\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/522\"\u003ehashicorp/go-getter#522\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: Remove use of \u0026quot;mitchellh/go-testing-interface\u0026quot; for stdlib by \u003ca href=\"https://github.com/jrasell\"\u003e\u003ccode\u003e@​jrasell\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/523\"\u003ehashicorp/go-getter#523\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: url redact of multiple sshkey by \u003ca href=\"https://github.com/dduzgun-security\"\u003e\u003ccode\u003e@​dduzgun-security\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/528\"\u003ehashicorp/go-getter#528\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePublish arm binaries by \u003ca href=\"https://github.com/sethvargo\"\u003e\u003ccode\u003e@​sethvargo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/525\"\u003ehashicorp/go-getter#525\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix errcheck lint errors and run it as part of pr checks by \u003ca href=\"https://github.com/abhijeetviswa\"\u003e\u003ccode\u003e@​abhijeetviswa\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/530\"\u003ehashicorp/go-getter#530\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix additional lint errors and increase linter scop...\n\n_Description has been truncated_","html_url":"https://github.com/Jackblanket847/terraform-provider-aws/pull/7","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Jackblanket847%2Fterraform-provider-aws/issues/7","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/7/packages"},{"uuid":"4220872235","node_id":"PR_kwDONDTgas7QoqES","number":2017,"state":"open","title":"chore(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 in /tools","user":"dependabot[bot]","labels":["dependencies","go","size:XS"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-04-07T22:10:51.000Z","updated_at":"2026-04-07T22:28:42.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"github.com/cloudflare/circl","old_version":"1.6.1","new_version":"1.6.3","repository_url":"https://github.com/cloudflare/circl"}],"path":"/tools","ecosystem":"go"},"body":"Bumps [github.com/cloudflare/circl](https://github.com/cloudflare/circl) from 1.6.1 to 1.6.3.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cloudflare/circl/releases\"\u003egithub.com/cloudflare/circl's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eCIRCL v1.6.3\u003c/h2\u003e\n\u003cp\u003eFix a bug on ecc/p384 scalar multiplication.\u003c/p\u003e\n\u003ch3\u003eWhat's Changed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esign/mldsa: Check opts for nil value  by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/582\"\u003ecloudflare/circl#582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eecc/p384: Point addition must handle point doubling case. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/583\"\u003ecloudflare/circl#583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease CIRCL v1.6.3 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/584\"\u003ecloudflare/circl#584\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNew SLH-DSA, improvements in ML-DSA for arm64.\u003c/li\u003e\n\u003cli\u003eTested compilation on WASM.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize pairing product computation by moving exponentiations to G1. by \u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esign: Adding SLH-DSA signature by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/512\"\u003ecloudflare/circl#512\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate code generators to CIRCL v1.6.1. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/548\"\u003ecloudflare/circl#548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eML-DSA: Add preliminary Wycheproof test vectors by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/552\"\u003ecloudflare/circl#552\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ego fmt by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/554\"\u003ecloudflare/circl#554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egz-compressing test vectors, use of HexBytes and ReadGzip functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/555\"\u003ecloudflare/circl#555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Removes use of elliptic Marshal and Unmarshal functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/556\"\u003ecloudflare/circl#556\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport encoding/decoding ML-DSA private keys (as long as they contain seeds) by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/559\"\u003ecloudflare/circl#559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to golangci-lint v2 by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/560\"\u003ecloudflare/circl#560\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreparation for ARM64 Implementation of poly operations for dilithium package. by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eprepare power2Round for custom implementations in assembly by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/564\"\u003ecloudflare/circl#564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eARM64 implementation for poly.PackLe16 by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/563\"\u003ecloudflare/circl#563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polyMulBy2toD by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/565\"\u003ecloudflare/circl#565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polySub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/566\"\u003ecloudflare/circl#566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: add byteLen method for short groups and RandomScalar uses rand.Int by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/568\"\u003ecloudflare/circl#568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of poly.Add/Sub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/572\"\u003ecloudflare/circl#572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Adding cryptobyte marshaling to scalars by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/569\"\u003ecloudflare/circl#569\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumping up to Go1.25 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/574\"\u003ecloudflare/circl#574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: Including WASM compilation. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/577\"\u003ecloudflare/circl#577\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to using package-declared HPKE errors for shortkem instead of standard library errors by \u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease v1.6.2 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/579\"\u003ecloudflare/circl#579\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/24ae53c5d6f7fe18203adc125ba3ed76a38703e1\"\u003e\u003ccode\u003e24ae53c\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/581020bd4a836b8ce7bd4e414ba2884c07dbc906\"\u003e\u003ccode\u003e581020b\u003c/code\u003e\u003c/a\u003e Rename method to oddMultiplesProjective.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/12209a4566605692a8402594e367a5aed5148460\"\u003e\u003ccode\u003e12209a4\u003c/code\u003e\u003c/a\u003e Removing unused cmov for jacobian points.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/fcba359f4178645d2c9e50f29ab6966337da4b95\"\u003e\u003ccode\u003efcba359\u003c/code\u003e\u003c/a\u003e ecc/p384: use of complete projective formulas for scalar multiplication.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/5e1bae8d8c2df4e717c2c5c2d5b5d60b629b2ac6\"\u003e\u003ccode\u003e5e1bae8\u003c/code\u003e\u003c/a\u003e ecc/p384: handle point doubling in point addition with Jacobian coordinates.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/341604685ff97e8f7440ae4b4711ba1c118c648c\"\u003e\u003ccode\u003e3416046\u003c/code\u003e\u003c/a\u003e Check opts for nil value.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/a763d47a6dce43d1f4f7b697d1d7810463a526f6\"\u003e\u003ccode\u003ea763d47\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3c70bf9ad53b681fbe5ba6067e454a86549fee8a\"\u003e\u003ccode\u003e3c70bf9\u003c/code\u003e\u003c/a\u003e Bump x/crypto x/sys dependencies.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3f0f15b2bfe67bad81a35e8aec81ae42ca78349d\"\u003e\u003ccode\u003e3f0f15b\u003c/code\u003e\u003c/a\u003e Revert to using package-declared HPKE errors for shortkem instead of standard...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/23491bd573cf29b6f567057a158203a2c9dfa30d\"\u003e\u003ccode\u003e23491bd\u003c/code\u003e\u003c/a\u003e Adding generic Power2Round method.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/cloudflare/circl\u0026package-manager=go_modules\u0026previous-version=1.6.1\u0026new-version=1.6.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/envoyproxy/ai-gateway/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/envoyproxy/ai-gateway/pull/2017","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/envoyproxy%2Fai-gateway/issues/2017","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2017/packages"},{"uuid":"4214484758","node_id":"PR_kwDOPaxcXs7QVn-n","number":188,"state":"closed","title":"chore(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-06-02T01:47:57.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-06T22:59:00.000Z","updated_at":"2026-06-02T01:48:47.000Z","time_to_close":4848537,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"github.com/cloudflare/circl","old_version":"1.6.1","new_version":"1.6.3","repository_url":"https://github.com/cloudflare/circl"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/cloudflare/circl](https://github.com/cloudflare/circl) from 1.6.1 to 1.6.3.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cloudflare/circl/releases\"\u003egithub.com/cloudflare/circl's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eCIRCL v1.6.3\u003c/h2\u003e\n\u003cp\u003eFix a bug on ecc/p384 scalar multiplication.\u003c/p\u003e\n\u003ch3\u003eWhat's Changed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esign/mldsa: Check opts for nil value  by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/582\"\u003ecloudflare/circl#582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eecc/p384: Point addition must handle point doubling case. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/583\"\u003ecloudflare/circl#583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease CIRCL v1.6.3 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/584\"\u003ecloudflare/circl#584\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNew SLH-DSA, improvements in ML-DSA for arm64.\u003c/li\u003e\n\u003cli\u003eTested compilation on WASM.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize pairing product computation by moving exponentiations to G1. by \u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esign: Adding SLH-DSA signature by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/512\"\u003ecloudflare/circl#512\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate code generators to CIRCL v1.6.1. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/548\"\u003ecloudflare/circl#548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eML-DSA: Add preliminary Wycheproof test vectors by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/552\"\u003ecloudflare/circl#552\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ego fmt by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/554\"\u003ecloudflare/circl#554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egz-compressing test vectors, use of HexBytes and ReadGzip functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/555\"\u003ecloudflare/circl#555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Removes use of elliptic Marshal and Unmarshal functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/556\"\u003ecloudflare/circl#556\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport encoding/decoding ML-DSA private keys (as long as they contain seeds) by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/559\"\u003ecloudflare/circl#559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to golangci-lint v2 by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/560\"\u003ecloudflare/circl#560\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreparation for ARM64 Implementation of poly operations for dilithium package. by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eprepare power2Round for custom implementations in assembly by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/564\"\u003ecloudflare/circl#564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eARM64 implementation for poly.PackLe16 by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/563\"\u003ecloudflare/circl#563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polyMulBy2toD by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/565\"\u003ecloudflare/circl#565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polySub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/566\"\u003ecloudflare/circl#566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: add byteLen method for short groups and RandomScalar uses rand.Int by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/568\"\u003ecloudflare/circl#568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of poly.Add/Sub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/572\"\u003ecloudflare/circl#572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Adding cryptobyte marshaling to scalars by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/569\"\u003ecloudflare/circl#569\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumping up to Go1.25 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/574\"\u003ecloudflare/circl#574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: Including WASM compilation. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/577\"\u003ecloudflare/circl#577\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to using package-declared HPKE errors for shortkem instead of standard library errors by \u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease v1.6.2 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/579\"\u003ecloudflare/circl#579\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/24ae53c5d6f7fe18203adc125ba3ed76a38703e1\"\u003e\u003ccode\u003e24ae53c\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/581020bd4a836b8ce7bd4e414ba2884c07dbc906\"\u003e\u003ccode\u003e581020b\u003c/code\u003e\u003c/a\u003e Rename method to oddMultiplesProjective.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/12209a4566605692a8402594e367a5aed5148460\"\u003e\u003ccode\u003e12209a4\u003c/code\u003e\u003c/a\u003e Removing unused cmov for jacobian points.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/fcba359f4178645d2c9e50f29ab6966337da4b95\"\u003e\u003ccode\u003efcba359\u003c/code\u003e\u003c/a\u003e ecc/p384: use of complete projective formulas for scalar multiplication.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/5e1bae8d8c2df4e717c2c5c2d5b5d60b629b2ac6\"\u003e\u003ccode\u003e5e1bae8\u003c/code\u003e\u003c/a\u003e ecc/p384: handle point doubling in point addition with Jacobian coordinates.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/341604685ff97e8f7440ae4b4711ba1c118c648c\"\u003e\u003ccode\u003e3416046\u003c/code\u003e\u003c/a\u003e Check opts for nil value.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/a763d47a6dce43d1f4f7b697d1d7810463a526f6\"\u003e\u003ccode\u003ea763d47\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3c70bf9ad53b681fbe5ba6067e454a86549fee8a\"\u003e\u003ccode\u003e3c70bf9\u003c/code\u003e\u003c/a\u003e Bump x/crypto x/sys dependencies.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3f0f15b2bfe67bad81a35e8aec81ae42ca78349d\"\u003e\u003ccode\u003e3f0f15b\u003c/code\u003e\u003c/a\u003e Revert to using package-declared HPKE errors for shortkem instead of standard...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/23491bd573cf29b6f567057a158203a2c9dfa30d\"\u003e\u003ccode\u003e23491bd\u003c/code\u003e\u003c/a\u003e Adding generic Power2Round method.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\u003e **Note**\n\u003e Automatic rebases have been disabled on this pull request as it has been open for over 30 days.\n","html_url":"https://github.com/FairForge/vaultaire/pull/188","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/FairForge%2Fvaultaire/issues/188","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/188/packages"},{"uuid":"4210895385","node_id":"PR_kwDORz3dwc7QKvVx","number":14,"state":"closed","title":"Bump github.com/cloudflare/circl from 1.6.1 to 1.6.3","user":"dependabot[bot]","labels":["type: imperfection","topic: infrastructure","topic: security"],"assignees":["per1234"],"locked":false,"comments_count":5,"pull_request":true,"closed_at":"2026-04-06T10:57:35.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-06T09:50:55.000Z","updated_at":"2026-04-06T10:57:44.000Z","time_to_close":4000,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"github.com/cloudflare/circl","old_version":"1.6.1","new_version":"1.6.3","repository_url":"https://github.com/cloudflare/circl"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/cloudflare/circl](https://github.com/cloudflare/circl) from 1.6.1 to 1.6.3.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cloudflare/circl/releases\"\u003egithub.com/cloudflare/circl's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eCIRCL v1.6.3\u003c/h2\u003e\n\u003cp\u003eFix a bug on ecc/p384 scalar multiplication.\u003c/p\u003e\n\u003ch3\u003eWhat's Changed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esign/mldsa: Check opts for nil value  by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/582\"\u003ecloudflare/circl#582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eecc/p384: Point addition must handle point doubling case. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/583\"\u003ecloudflare/circl#583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease CIRCL v1.6.3 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/584\"\u003ecloudflare/circl#584\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNew SLH-DSA, improvements in ML-DSA for arm64.\u003c/li\u003e\n\u003cli\u003eTested compilation on WASM.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize pairing product computation by moving exponentiations to G1. by \u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esign: Adding SLH-DSA signature by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/512\"\u003ecloudflare/circl#512\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate code generators to CIRCL v1.6.1. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/548\"\u003ecloudflare/circl#548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eML-DSA: Add preliminary Wycheproof test vectors by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/552\"\u003ecloudflare/circl#552\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ego fmt by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/554\"\u003ecloudflare/circl#554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egz-compressing test vectors, use of HexBytes and ReadGzip functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/555\"\u003ecloudflare/circl#555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Removes use of elliptic Marshal and Unmarshal functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/556\"\u003ecloudflare/circl#556\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport encoding/decoding ML-DSA private keys (as long as they contain seeds) by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/559\"\u003ecloudflare/circl#559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to golangci-lint v2 by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/560\"\u003ecloudflare/circl#560\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreparation for ARM64 Implementation of poly operations for dilithium package. by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eprepare power2Round for custom implementations in assembly by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/564\"\u003ecloudflare/circl#564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eARM64 implementation for poly.PackLe16 by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/563\"\u003ecloudflare/circl#563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polyMulBy2toD by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/565\"\u003ecloudflare/circl#565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polySub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/566\"\u003ecloudflare/circl#566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: add byteLen method for short groups and RandomScalar uses rand.Int by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/568\"\u003ecloudflare/circl#568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of poly.Add/Sub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/572\"\u003ecloudflare/circl#572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Adding cryptobyte marshaling to scalars by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/569\"\u003ecloudflare/circl#569\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumping up to Go1.25 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/574\"\u003ecloudflare/circl#574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: Including WASM compilation. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/577\"\u003ecloudflare/circl#577\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to using package-declared HPKE errors for shortkem instead of standard library errors by \u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease v1.6.2 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/579\"\u003ecloudflare/circl#579\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/24ae53c5d6f7fe18203adc125ba3ed76a38703e1\"\u003e\u003ccode\u003e24ae53c\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/581020bd4a836b8ce7bd4e414ba2884c07dbc906\"\u003e\u003ccode\u003e581020b\u003c/code\u003e\u003c/a\u003e Rename method to oddMultiplesProjective.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/12209a4566605692a8402594e367a5aed5148460\"\u003e\u003ccode\u003e12209a4\u003c/code\u003e\u003c/a\u003e Removing unused cmov for jacobian points.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/fcba359f4178645d2c9e50f29ab6966337da4b95\"\u003e\u003ccode\u003efcba359\u003c/code\u003e\u003c/a\u003e ecc/p384: use of complete projective formulas for scalar multiplication.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/5e1bae8d8c2df4e717c2c5c2d5b5d60b629b2ac6\"\u003e\u003ccode\u003e5e1bae8\u003c/code\u003e\u003c/a\u003e ecc/p384: handle point doubling in point addition with Jacobian coordinates.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/341604685ff97e8f7440ae4b4711ba1c118c648c\"\u003e\u003ccode\u003e3416046\u003c/code\u003e\u003c/a\u003e Check opts for nil value.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/a763d47a6dce43d1f4f7b697d1d7810463a526f6\"\u003e\u003ccode\u003ea763d47\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3c70bf9ad53b681fbe5ba6067e454a86549fee8a\"\u003e\u003ccode\u003e3c70bf9\u003c/code\u003e\u003c/a\u003e Bump x/crypto x/sys dependencies.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3f0f15b2bfe67bad81a35e8aec81ae42ca78349d\"\u003e\u003ccode\u003e3f0f15b\u003c/code\u003e\u003c/a\u003e Revert to using package-declared HPKE errors for shortkem instead of standard...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/23491bd573cf29b6f567057a158203a2c9dfa30d\"\u003e\u003ccode\u003e23491bd\u003c/code\u003e\u003c/a\u003e Adding generic Power2Round method.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e","html_url":"https://github.com/per1234-org/ino-platform-discovery/pull/14","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/per1234-org%2Fino-platform-discovery/issues/14","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/14/packages"}],"issue_packages":[{"old_version":"1.6.1","new_version":"1.6.3","update_type":"patch","path":null,"pr_created_at":"2026-06-11T23:45:54.000Z","version_change":"1.6.1 → 1.6.3","issue":{"uuid":"4645029829","node_id":"PR_kwDOPmeGcs7liw1w","number":4,"state":"open","title":"Bump the go_modules group across 14 directories with 13 updates","user":"dependabot[bot]","labels":["size/XL","dependencies","go"],"assignees":[],"locked":false,"comments_count":7,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-06-11T23:45:54.000Z","updated_at":"2026-06-11T23:47:54.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"go_modules","update_count":13,"packages":[{"name":"github.com/go-jose/go-jose/v4","old_version":"4.1.0","new_version":"4.1.4","repository_url":"https://github.com/go-jose/go-jose"},{"name":"github.com/jackc/pgx/v5","old_version":"5.7.5","new_version":"5.9.2","repository_url":"https://github.com/jackc/pgx"},{"name":"github.com/openfga/openfga","old_version":"1.8.13","new_version":"1.16.0","repository_url":"https://github.com/openfga/openfga"},{"name":"github.com/Azure/go-ntlmssp","old_version":"0.0.0-20220621081337-cb9428e4ac1e","new_version":"0.1.1","repository_url":"https://github.com/Azure/go-ntlmssp"},{"name":"github.com/buger/jsonparser","old_version":"1.1.1","new_version":"1.1.2","repository_url":"https://github.com/buger/jsonparser"},{"name":"github.com/cloudflare/circl","old_version":"1.6.1","new_version":"1.6.3","repository_url":"https://github.com/cloudflare/circl"},{"name":"go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp","old_version":"1.37.0","new_version":"1.43.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 7 updates in the /apps/iam directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) | `4.1.0` | `4.1.4` |\n| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.7.5` | `5.9.2` |\n| [github.com/openfga/openfga](https://github.com/openfga/openfga) | `1.8.13` | `1.16.0` |\n| [github.com/Azure/go-ntlmssp](https://github.com/Azure/go-ntlmssp) | `0.0.0-20220621081337-cb9428e4ac1e` | `0.1.1` |\n| [github.com/buger/jsonparser](https://github.com/buger/jsonparser) | `1.1.1` | `1.1.2` |\n| [github.com/cloudflare/circl](https://github.com/cloudflare/circl) | `1.6.1` | `1.6.3` |\n| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.43.0` |\n\nBumps the go_modules group with 5 updates in the /apps/plugins directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.41.0` |\n| [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.43.0` |\n| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.41.0` | `0.45.0` |\n| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.74.2` | `1.79.3` |\n| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.43.0` |\n\nBumps the go_modules group with 1 update in the /apps/preferences directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go).\nBumps the go_modules group with 4 updates in the /apps/provisioning directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [golang.org/x/crypto](https://github.com/golang/crypto) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 2 updates in the /apps/secret directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 4 updates in the /apps/shorturl directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go).\nBumps the go_modules group with 4 updates in the /pkg/aggregator directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [golang.org/x/crypto](https://github.com/golang/crypto) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 3 updates in the /pkg/apimachinery directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [golang.org/x/crypto](https://github.com/golang/crypto) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 4 updates in the /pkg/apiserver directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [golang.org/x/crypto](https://github.com/golang/crypto) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 4 updates in the /pkg/build directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go).\nBumps the go_modules group with 1 update in the /pkg/codegen directory: [github.com/expr-lang/expr](https://github.com/expr-lang/expr).\nBumps the go_modules group with 1 update in the /pkg/plugins/codegen directory: [github.com/expr-lang/expr](https://github.com/expr-lang/expr).\nBumps the go_modules group with 4 updates in the /pkg/promlib directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [github.com/buger/jsonparser](https://github.com/buger/jsonparser).\nBumps the go_modules group with 1 update in the /pkg/semconv directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go).\n\nUpdates `github.com/go-jose/go-jose/v4` from 4.1.0 to 4.1.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-jose/go-jose/releases\"\u003egithub.com/go-jose/go-jose/v4's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.1.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003eFixes Panic in JWE decryption. See \u003ca href=\"https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\"\u003ehttps://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4\"\u003ehttps://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.1.3\u003c/h2\u003e\n\u003cp\u003eThis release drops Go 1.23 support as that Go release is no longer supported. With that, we can drop \u003ccode\u003ex/crypto\u003c/code\u003e and no longer have any external dependencies in go-jose outside of the standard library!\u003c/p\u003e\n\u003cp\u003eThis release fixes a bug where a critical b64 header was ignored if in an unprotected header. It is now rejected instead of ignored.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemove Go 1.23 support by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/205\"\u003ego-jose/go-jose#205\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReject JWS with an unprotected critical b64 header by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/210\"\u003ego-jose/go-jose#210\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.2...v4.1.3\"\u003ehttps://github.com/go-jose/go-jose/compare/v4.1.2...v4.1.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.1.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003ego-jose v4.1.2 improves some documentation, errors, and removes the only 3rd-party dependency.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate go-jose documentation by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/198\"\u003ego-jose/go-jose#198\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove dependency on testify by \u003ca href=\"https://github.com/wardviaene\"\u003e\u003ccode\u003e@​wardviaene\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/197\"\u003ego-jose/go-jose#197\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove error message for invalid private keys by \u003ca href=\"https://github.com/ProjectMutilation\"\u003e\u003ccode\u003e@​ProjectMutilation\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/195\"\u003ego-jose/go-jose#195\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eJWK unsupported error when unmarshalling by \u003ca href=\"https://github.com/fprojetto\"\u003e\u003ccode\u003e@​fprojetto\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/191\"\u003ego-jose/go-jose#191\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd JSONWebKey type to makeJWERecipient by \u003ca href=\"https://github.com/alvarolivie\"\u003e\u003ccode\u003e@​alvarolivie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/200\"\u003ego-jose/go-jose#200\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etestutils/assert: remove True, Nil, NotNil by \u003ca href=\"https://github.com/jsha\"\u003e\u003ccode\u003e@​jsha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/202\"\u003ego-jose/go-jose#202\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wardviaene\"\u003e\u003ccode\u003e@​wardviaene\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/197\"\u003ego-jose/go-jose#197\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fprojetto\"\u003e\u003ccode\u003e@​fprojetto\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/191\"\u003ego-jose/go-jose#191\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alvarolivie\"\u003e\u003ccode\u003e@​alvarolivie\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/200\"\u003ego-jose/go-jose#200\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.1...v4.1.2\"\u003ehttps://github.com/go-jose/go-jose/compare/v4.1.1...v4.1.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.1.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDrop go-cmp dependency by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/186\"\u003ego-jose/go-jose#186\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ejws: improve performance and allocations for ParseSignedCompact by \u003ca href=\"https://github.com/drakkan\"\u003e\u003ccode\u003e@​drakkan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/188\"\u003ego-jose/go-jose#188\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd missing quote to unknown curve message \u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/170\"\u003e#170\u003c/a\u003e by \u003ca href=\"https://github.com/sudhanvaghebbale\"\u003e\u003ccode\u003e@​sudhanvaghebbale\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/189\"\u003ego-jose/go-jose#189\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix incorrect validation by \u003ca href=\"https://github.com/ProjectMutilation\"\u003e\u003ccode\u003e@​ProjectMutilation\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/192\"\u003ego-jose/go-jose#192\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRestore Go 1.23 compatibility by \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/193\"\u003ego-jose/go-jose#193\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/drakkan\"\u003e\u003ccode\u003e@​drakkan\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/188\"\u003ego-jose/go-jose#188\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sudhanvaghebbale\"\u003e\u003ccode\u003e@​sudhanvaghebbale\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/189\"\u003ego-jose/go-jose#189\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ProjectMutilation\"\u003e\u003ccode\u003e@​ProjectMutilation\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/192\"\u003ego-jose/go-jose#192\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/193\"\u003ego-jose/go-jose#193\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/0e59876635f3dbf46d7b5e97b52bb75a3f96e7d9\"\u003e\u003ccode\u003e0e59876\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/ddffdbcec8bdadea8e02a20bdf19239878228215\"\u003e\u003ccode\u003eddffdbc\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 5 to 6 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/213\"\u003e#213\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/5348b9a4ba4559d2266b5af89fb5353cd1a5360a\"\u003e\u003ccode\u003e5348b9a\u003c/code\u003e\u003c/a\u003e Reject JWS with an unprotected critical b64 header (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/210\"\u003e#210\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/9153a5e4549c95e97a84e41e6375dc90eac54241\"\u003e\u003ccode\u003e9153a5e\u003c/code\u003e\u003c/a\u003e Bump actions/setup-python from 5 to 6 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/208\"\u003e#208\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/2126e17f8791f6a234e63b2e4e8cb9fac8605c3a\"\u003e\u003ccode\u003e2126e17\u003c/code\u003e\u003c/a\u003e Bump actions/setup-go from 5 to 6 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/209\"\u003e#209\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/9860c65054c4821d1e7c22200422b04181f58ebc\"\u003e\u003ccode\u003e9860c65\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 4 to 5 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/206\"\u003e#206\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/14239fdb15b88e1c42e41621ef24f1112cf31b5a\"\u003e\u003ccode\u003e14239fd\u003c/code\u003e\u003c/a\u003e Remove Go 1.23 support (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/205\"\u003e#205\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/a16e15813482ca5e9a679b7f5bb42ddfae616d43\"\u003e\u003ccode\u003ea16e158\u003c/code\u003e\u003c/a\u003e Update CI to run on Go 1.24 and 1.25 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/204\"\u003e#204\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/a1565a41aa008ae6545e0f50a636d254de5b4596\"\u003e\u003ccode\u003ea1565a4\u003c/code\u003e\u003c/a\u003e testutils/assert: remove True, Nil, NotNil (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/202\"\u003e#202\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/3a80e136a96e747bf44049414eadc02828df4d33\"\u003e\u003ccode\u003e3a80e13\u003c/code\u003e\u003c/a\u003e jwe: accept non-pointer JSONWebKey in Recipient (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/200\"\u003e#200\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.0...v4.1.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/jackc/pgx/v5` from 5.7.5 to 5.9.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jackc/pgx/blob/master/CHANGELOG.md\"\u003egithub.com/jackc/pgx/v5's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e5.9.2 (April 18, 2026)\u003c/h1\u003e\n\u003cp\u003eFix SQL Injection via placeholder confusion with dollar quoted string literals (GHSA-j88v-2chj-qfwx)\u003c/p\u003e\n\u003cp\u003eSQL injection can occur when:\u003c/p\u003e\n\u003col\u003e\n\u003cli\u003eThe non-default simple protocol is used.\u003c/li\u003e\n\u003cli\u003eA dollar quoted string literal is used in the SQL query.\u003c/li\u003e\n\u003cli\u003eThat query contains text that would be would be interpreted outside as a placeholder outside of a string literal.\u003c/li\u003e\n\u003cli\u003eThe value of that placeholder is controllable by the attacker.\u003c/li\u003e\n\u003c/ol\u003e\n\u003cp\u003ee.g.\u003c/p\u003e\n\u003cpre lang=\"go\"\u003e\u003ccode\u003eattackValue := `$tag$; drop table canary; --`\n_, err = tx.Exec(ctx, `select $tag$ $1 $tag$, $1`, pgx.QueryExecModeSimpleProtocol, attackValue)\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003eThis is unlikely to occur outside of a contrived scenario.\u003c/p\u003e\n\u003ch1\u003e5.9.1 (March 22, 2026)\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix: batch result format corruption when using cached prepared statements (reported by Dirkjan Bussink)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e5.9.0 (March 21, 2026)\u003c/h1\u003e\n\u003cp\u003eThis release includes a number of new features such as SCRAM-SHA-256-PLUS support, OAuth authentication support, and\nPostgreSQL protocol 3.2 support.\u003c/p\u003e\n\u003cp\u003eIt significantly reduces the amount of network traffic when using prepared statements (which are used automatically by\ndefault) by avoiding unnecessary Describe Portal messages. This also reduces local memory usage.\u003c/p\u003e\n\u003cp\u003eIt also includes multiple fixes for potential DoS due to panic or OOM if connected to a malicious server that sends\ndeliberately malformed messages.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRequire Go 1.25+\u003c/li\u003e\n\u003cli\u003eAdd SCRAM-SHA-256-PLUS support (Adam Brightwell)\u003c/li\u003e\n\u003cli\u003eAdd OAuth authentication support for PostgreSQL 18 (David Schneider)\u003c/li\u003e\n\u003cli\u003eAdd PostgreSQL protocol 3.2 support (Dirkjan Bussink)\u003c/li\u003e\n\u003cli\u003eAdd tsvector type support (Adam Brightwell)\u003c/li\u003e\n\u003cli\u003eSkip Describe Portal for cached prepared statements reducing network round trips\u003c/li\u003e\n\u003cli\u003eMake LoadTypes query easier to support on \u0026quot;postgres-like\u0026quot; servers (Jelte Fennema-Nio)\u003c/li\u003e\n\u003cli\u003eDefault empty user to current OS user matching libpq behavior (ShivangSrivastava)\u003c/li\u003e\n\u003cli\u003eOptimize LRU statement cache with custom linked list and node pooling (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eOptimize date scanning by replacing regex with manual parsing (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eOptimize pgio append/set functions with direct byte shifts (Mathias Bogaert)\u003c/li\u003e\n\u003cli\u003eMake RowsAffected faster (Abhishek Chanda)\u003c/li\u003e\n\u003cli\u003eFix: Pipeline.Close panic when server sends multiple FATAL errors (Varun Chawla)\u003c/li\u003e\n\u003cli\u003eFix: ContextWatcher goroutine leak (Hank Donnay)\u003c/li\u003e\n\u003cli\u003eFix: stdlib discard connections with open transactions in ResetSession (Jeremy Schneider)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/0aeabbcf11d859229c1f0b20e710d3596c76bf27\"\u003e\u003ccode\u003e0aeabbc\u003c/code\u003e\u003c/a\u003e Release v5.9.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/60644f84918a8af66d14a4b0d865d4edafd955da\"\u003e\u003ccode\u003e60644f8\u003c/code\u003e\u003c/a\u003e Fix SQL sanitizer bugs with dollar-quoted strings and placeholder overflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/a5680bc945aa7c6ebac2778d859ee7b4ba86db60\"\u003e\u003ccode\u003ea5680bc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jackc/pgx/issues/2531\"\u003e#2531\u003c/a\u003e from dolmen-go/godoc-add-links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/e34e4524007062710c6a4fb9c8655b75a486b5cd\"\u003e\u003ccode\u003ee34e452\u003c/code\u003e\u003c/a\u003e doc: Add godoc links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/08c9bb1f0d8fa6cc10ed8c713e68b1baa64dfe2c\"\u003e\u003ccode\u003e08c9bb1\u003c/code\u003e\u003c/a\u003e Fix Stringer types encoded as text instead of numeric value in composite fields\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/96b4dbdfd0458cb425bf8454d292a23978872cc8\"\u003e\u003ccode\u003e96b4dbd\u003c/code\u003e\u003c/a\u003e Remove unstable test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/acf88e0065682e8948696d26fa6438669c4cabee\"\u003e\u003ccode\u003eacf88e0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/jackc/pgx/issues/2526\"\u003e#2526\u003c/a\u003e from abrightwell/abrightwell-min-proto\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/2f81f1fc03bef99593e92c64ad9cac954c00e8e6\"\u003e\u003ccode\u003e2f81f1f\u003c/code\u003e\u003c/a\u003e Update \u003ccode\u003emax_protocol_version\u003c/code\u003e and \u003ccode\u003emin_protocol_version\u003c/code\u003e defaults\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/4e4eaedb47b7b3cfba0a1b0a9e6a3f015764f046\"\u003e\u003ccode\u003e4e4eaed\u003c/code\u003e\u003c/a\u003e Release v5.9.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jackc/pgx/commit/62731882651a90348febb43b2119b5f8bd9272de\"\u003e\u003ccode\u003e6273188\u003c/code\u003e\u003c/a\u003e Fix batch result format corruption when using cached prepared statements\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jackc/pgx/compare/v5.7.5...v5.9.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/openfga/openfga` from 1.8.13 to 1.16.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/openfga/openfga/releases\"\u003egithub.com/openfga/openfga's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.16.0\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded datastore ping timeout (PingTimeout) and datastore ping retry timeout (PingRetryMaxElapsedTime) configurations. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3113\"\u003e#3113\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReport \u003ccode\u003eallowed\u003c/code\u003e result and \u003ccode\u003etuple_key\u003c/code\u003e on Check and experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e resolution trace spans. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3116\"\u003e#3116\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed cache key collisions in experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e union resolution by moving result caching from the union node level to the individual edge level, preventing collisions across requests that share edges but differ in object or relation. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3117\"\u003e#3117\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a bug in experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e where in-flight goroutines cancelled by a union short-circuit or recursive resolution could cache a false result, causing subsequent requests to incorrectly return false without querying the datastore. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3125\"\u003e#3125\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e returning an error when v2Check fails; Check now falls back to the standard algorithm instead. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3126\"\u003e#3126\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed OIDC authentication rejecting valid tokens after issuer key rotation by enabling JWKS refresh on unknown \u003ccode\u003ekid\u003c/code\u003e (rate-limited to once per minute). \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3101\"\u003e#3101\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate toolchain Go version to 1.26.3 to address the Go standard library vulnerabilities documented in the \u003ca href=\"https://go.dev/doc/devel/release#go1.26.3\"\u003eGo 1.26.3 release notes\u003c/a\u003e. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3115\"\u003e#3115\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andrey-berenda\"\u003e\u003ccode\u003e@​andrey-berenda\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3101\"\u003eopenfga/openfga#3101\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/openfga/openfga/compare/v1.15.1...v1.16.0\"\u003ehttps://github.com/openfga/openfga/compare/v1.15.1...v1.16.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.15.1\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReuse a single MySQL container across tests by replacing the test fixture implementation, improving test performance and reducing resource usage. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3042\"\u003e#3042\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a potential panic within command error handling. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3091\"\u003e#3091\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a bug that propagated expected errors from list objects when a path short-circuits. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3096\"\u003e#3096\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed cache key collisions in experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e for edges in unions with multiple branches (direct types, wildcards, TTU paths, or intersections). \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3097\"\u003e#3097\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a bug in the bounded tuple reader that would cause semaphore token leaks under context cancelation. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3106\"\u003e#3106\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a bug that could cause deadlocks in check by holding message streams open indefinitely upon error. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3111\"\u003e#3111\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/openfga/openfga/compare/v1.15.0...v1.15.1\"\u003ehttps://github.com/openfga/openfga/compare/v1.15.0...v1.15.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.15.0\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImplemented edge pruning in the list objects pipeline algorithm. This introduces a measurable improvement to request latency for larger, more complex authorization models. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3075\"\u003e#3075\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e query cache being skipped when the cache controller returns a zero invalidation time (e.g., on cold start or when disabled), despite the cache controller documenting that zero time should allow cache use. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3086\"\u003e#3086\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate toolchain Go version to 1.26.2 to address the Go standard library vulnerabilities documented in the \u003ca href=\"https://go.dev/doc/devel/release#go1.26.2\"\u003eGo 1.26.2 release notes\u003c/a\u003e. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3084\"\u003e#3084\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/openfga/openfga/blob/main/CHANGELOG.md\"\u003egithub.com/openfga/openfga's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.16.0] - 2026-05-20\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded datastore ping timeout (PingTimeout) and datastore ping retry timeout (PingRetryMaxElapsedTime) configurations. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3113\"\u003e#3113\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReport \u003ccode\u003eallowed\u003c/code\u003e result and \u003ccode\u003etuple_key\u003c/code\u003e on Check and experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e resolution trace spans. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3116\"\u003e#3116\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed cache key collisions in experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e union resolution by moving result caching from the union node level to the individual edge level, preventing collisions across requests that share edges but differ in object or relation. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3117\"\u003e#3117\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a bug in experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e where in-flight goroutines cancelled by a union short-circuit or recursive resolution could cache a false result, causing subsequent requests to incorrectly return false without querying the datastore. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3125\"\u003e#3125\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e returning an error when v2Check fails; Check now falls back to the standard algorithm instead. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3126\"\u003e#3126\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed OIDC authentication rejecting valid tokens after issuer key rotation by enabling JWKS refresh on unknown \u003ccode\u003ekid\u003c/code\u003e (rate-limited to once per minute). \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3101\"\u003e#3101\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate toolchain Go version to 1.26.3 to address the Go standard library vulnerabilities documented in the \u003ca href=\"https://go.dev/doc/devel/release#go1.26.3\"\u003eGo 1.26.3 release notes\u003c/a\u003e. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3115\"\u003e#3115\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.15.1] - 2026-05-06\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReuse a single MySQL container across tests by replacing the test fixture implementation, improving test performance and reducing resource usage. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3042\"\u003e#3042\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a potential panic within command error handling. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3091\"\u003e#3091\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a bug that propagated expected errors from list objects when a path short-circuits. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3096\"\u003e#3096\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed cache key collisions in experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e for edges in unions with multiple branches (direct types, wildcards, TTU paths, or intersections). \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3097\"\u003e#3097\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a bug in the bounded tuple reader that would cause semaphore token leaks under context cancelation. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3106\"\u003e#3106\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a bug that could cause deadlocks in check by holding message streams open indefinitely upon error. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3111\"\u003e#3111\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.15.0] - 2026-04-27\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImplemented edge pruning in the list objects pipeline algorithm. This introduces a measurable improvement to request latency for larger, more complex authorization models. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3075\"\u003e#3075\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e query cache being skipped when the cache controller returns a zero invalidation time (e.g., on cold start or when disabled), despite the cache controller documenting that zero time should allow cache use. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3086\"\u003e#3086\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate toolchain Go version to 1.26.2 to address the Go standard library vulnerabilities documented in the \u003ca href=\"https://go.dev/doc/devel/release#go1.26.2\"\u003eGo 1.26.2 release notes\u003c/a\u003e. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3084\"\u003e#3084\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.14.2] - 2026-04-14\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUse delimiter in contextual tuple key in experimental \u003ccode\u003eweighted_graph_check\u003c/code\u003e, and add validation in v2Check. Thanks to \u003ca href=\"https://github.com/0xmrma\"\u003e\u003ccode\u003e@​0xmrma\u003c/code\u003e\u003c/a\u003e for reporting this bug. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3064\"\u003e#3064\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.14.1] - 2026-04-10\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded configuration for the server shutdown timeout. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2976\"\u003e#2976\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd jitter to internal cache TTLs to spread expirations and reduce thundering herd effects. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3033\"\u003e#3033\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMade some minor changes in ListObjects to reduce heap allocations. Results in minor latency reduction. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3043\"\u003e#3043\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove cache key generation performance by removing \u003ccode\u003efmt\u003c/code\u003e usage and extend control-character sanitization to all cache key inputs (tuples, conditions, context). \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3006\"\u003e#3006\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReuse a single PostgreSQL container across tests by replacing the test fixture implementation, improving test performance and reducing resource usage. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3018\"\u003e#3018\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/165291872c4577a54200b9ddc7c966d3e89d6c2d\"\u003e\u003ccode\u003e1652918\u003c/code\u003e\u003c/a\u003e release: update changelog for release \u003ccode\u003ev1.16.0\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3139\"\u003e#3139\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/d42f9f3dea688db5f284e47048b06a2dbd8eecf6\"\u003e\u003ccode\u003ed42f9f3\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/ece3b9ef965a7a790c433d889538319569639527\"\u003e\u003ccode\u003eece3b9e\u003c/code\u003e\u003c/a\u003e fix: unintentional zeroing of slice values by setting slice to nil (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3135\"\u003e#3135\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/5b39f175c241f5f9691bacb8ce6721ecad8c9179\"\u003e\u003ccode\u003e5b39f17\u003c/code\u003e\u003c/a\u003e increase the check v2 trace information fidelity (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3134\"\u003e#3134\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/b6d0028e02c9d3df3f5c93633f736f5192d9b2b6\"\u003e\u003ccode\u003eb6d0028\u003c/code\u003e\u003c/a\u003e feat: add datastore ping and ping retry configurations (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3113\"\u003e#3113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/e669ac8b710f9902bbed3fb1f9784ef57e8e8a9a\"\u003e\u003ccode\u003ee669ac8\u003c/code\u003e\u003c/a\u003e fix: prevent v2Check strategies returning spurious false on context cancellat...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/857e432cc7c02115b1ec7dd9e0d6b6dd5f8e3d10\"\u003e\u003ccode\u003e857e432\u003c/code\u003e\u003c/a\u003e fix(authn/oidc): refresh JWKS on unknown kid to handle key rotation (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3101\"\u003e#3101\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/8c9e0bf3547877643ff7b31cb4a95f939c10b48d\"\u003e\u003ccode\u003e8c9e0bf\u003c/code\u003e\u003c/a\u003e fix: v2Check falls back to v1 on errors (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3126\"\u003e#3126\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/c30681262a8cccb3e55e60d065b10cbe3e889323\"\u003e\u003ccode\u003ec306812\u003c/code\u003e\u003c/a\u003e fix: don't cache false results from cancelled-context goroutines in v2Check (...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/39113898dc97af10df8c1660f01d014b2cc1d230\"\u003e\u003ccode\u003e3911389\u003c/code\u003e\u003c/a\u003e make union cache key unique by including the node input's label (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3117\"\u003e#3117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/openfga/openfga/compare/v1.8.13...v1.16.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel` from 1.37.0 to 1.43.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02\u003c/h2\u003e\n\u003cp\u003eThis release is the last to support [Go 1.24].\nThe next release will require at least [Go 1.25].\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSupport testing of [Go 1.26]. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902\"\u003e#7902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003eBaggage\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/propagation\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e and \u003ccode\u003eNew\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/baggage\u003c/code\u003e to comply with W3C Baggage specification limits.\n\u003ccode\u003eNew\u003c/code\u003e and \u003ccode\u003eParse\u003c/code\u003e now return partial baggage along with an error when limits are exceeded.\nErrors from baggage extraction are reported to the global error handler. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880\"\u003e#7880\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn an error when the endpoint is configured as insecure and with TLS configuration in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914\"\u003e#7914\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.40.0/0.62.0/0.16.0] 2026-02-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eAlwaysRecord\u003c/code\u003e sampler in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7724\"\u003e#7724\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eEnabled\u003c/code\u003e method to all synchronous instrument interfaces (\u003ccode\u003eFloat64Counter\u003c/code\u003e, \u003ccode\u003eFloat64UpDownCounter\u003c/code\u003e, \u003ccode\u003eFloat64Histogram\u003c/code\u003e, \u003ccode\u003eFloat64Gauge\u003c/code\u003e, \u003ccode\u003eInt64Counter\u003c/code\u003e, \u003ccode\u003eInt64UpDownCounter\u003c/code\u003e, \u003ccode\u003eInt64Histogram\u003c/code\u003e, \u003ccode\u003eInt64Gauge\u003c/code\u003e,) in \u003ccode\u003ego.opentelemetry.io/otel/metric\u003c/code\u003e.\nThis stabilizes the synchronous instrument enabled feature, allowing users to check if an instrument will process measurements before performing computationally expensive operations. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7763\"\u003e#7763\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.39.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.39.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.38.0.\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7783\"\u003e#7783\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7789\"\u003e#7789\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove the concurrent performance of \u003ccode\u003eHistogramReservoir\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/exemplar\u003c/code\u003e by 4x. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7443\"\u003e#7443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove the concurrent performance of \u003ccode\u003eFixedSizeReservoir\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/exemplar\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7447\"\u003e#7447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent histogram measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7474\"\u003e#7474\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent synchronous gauge measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7478\"\u003e#7478\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/stdout/stdoutmetric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7492\"\u003e#7492\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eExporter\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/prometheus\u003c/code\u003e ignores metrics with the scope \u003ccode\u003ego.opentelemetry.io/contrib/bridges/prometheus\u003c/code\u003e.\nThis prevents scrape failures when the Prometheus exporter is misconfigured to get data from the Prometheus bridge. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7688\"\u003e#7688\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent exponential histogram measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7702\"\u003e#7702\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003erpc.grpc.status_code\u003c/code\u003e attribute in the experimental metrics emitted from \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e is replaced with the \u003ccode\u003erpc.response.status_code\u003c/code\u003e attribute to align with the semantic conventions. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854\"\u003e#7854\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003erpc.grpc.status_code\u003c/code\u003e attribute in the experimental metrics emitted from \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e is replaced with the \u003ccode\u003erpc.response.status_code\u003c/code\u003e attribute to align with the semantic conventions. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854\"\u003e#7854\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix bad log message when key-value pairs are dropped because of key duplication in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eDroppedAttributes\u003c/code\u003e on \u003ccode\u003eRecord\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e to not count the non-attribute key-value pairs dropped because of key duplication. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eSetAttributes\u003c/code\u003e on \u003ccode\u003eRecord\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e to not log that attributes are dropped when they are actually not dropped. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662\"\u003e#7662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to correctly handle HTTP/2 \u003ccode\u003eGOAWAY\u003c/code\u003e frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7794\"\u003e#7794\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003eioreg\u003c/code\u003e command on Darwin (macOS). (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7818\"\u003e#7818\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4575a9774dd9415ffc858dd34955493b0031065a\"\u003e\u003ccode\u003e4575a97\u003c/code\u003e\u003c/a\u003e Release 1.41.0/0.63.0/0.17.0/0.0.15 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7977\"\u003e#7977\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/66fc10d9dff9653c65bcca111b965137d06f09aa\"\u003e\u003ccode\u003e66fc10d\u003c/code\u003e\u003c/a\u003e fix: add error handling for insecure HTTP endpoints with TLS client configura...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/76e6eec88f186f06a0708b5620324d2b002d9a97\"\u003e\u003ccode\u003e76e6eec\u003c/code\u003e\u003c/a\u003e chore(deps): update github/codeql-action action to v4.32.5 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7980\"\u003e#7980\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0d50f9008c8c93fe49a7caa45c88c30370479d27\"\u003e\u003ccode\u003e0d50f90\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Generate semconv/v1.40.0\u0026quot; (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7978\"\u003e#7978\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c38a4a57c320b6098ca5c92f0a85201034780b1f\"\u003e\u003ccode\u003ec38a4a5\u003c/code\u003e\u003c/a\u003e Generate semconv/v1.40.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7929\"\u003e#7929\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/0f1a22484ec52d6beb1efdb0fa1b63a31e7405af\"\u003e\u003ccode\u003e0f1a224\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/securego/gosec/v2 to v2.23.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7899\"\u003e#7899\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/c79ebf43eb1cff6dd76a33bb1549f2c082dab604\"\u003e\u003ccode\u003ec79ebf4\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/daixiang0/gci to v0.14.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7973\"\u003e#7973\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/f75815746541d0d4ac84e1c5955bdcd1a2df2d7d\"\u003e\u003ccode\u003ef758157\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/sonatard/noctx to v0.5.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7968\"\u003e#7968\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/92a11645724515630187def073ae39f1b6cb3c69\"\u003e\u003ccode\u003e92a1164\u003c/code\u003e\u003c/a\u003e fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to d566b...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/3cd7c27e840ea3114115459db2e299a27fffaff8\"\u003e\u003ccode\u003e3cd7c27\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/protonmail/go-crypto to v1.4.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7969\"\u003e#7969\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.37.0...v1.41.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/sdk` from 1.37.0 to 1.43.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/sdk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.43.0/0.65.0/0.19.0] 2026-04-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eIsRandom\u003c/code\u003e and \u003ccode\u003eWithRandom\u003c/code\u003e on \u003ccode\u003eTraceFlags\u003c/code\u003e, and \u003ccode\u003eIsRandom\u003c/code\u003e on \u003ccode\u003eSpanContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e for \u003ca href=\"https://www.w3.org/TR/trace-context-2/#random-trace-id-flag\"\u003eW3C Trace Context Level 2 Random Trace ID Flag\u003c/a\u003e support. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012\"\u003e#8012\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd service detection with \u003ccode\u003eWithService\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642\"\u003e#7642\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eDefaultWithContext\u003c/code\u003e and \u003ccode\u003eEnvironmentWithContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to support plumbing \u003ccode\u003econtext.Context\u003c/code\u003e through default and environment detectors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051\"\u003e#8051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd support for per-series start time tracking for cumulative metrics in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true\u003c/code\u003e to enable. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060\"\u003e#8060\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithCardinalityLimitSelector\u003c/code\u003e for metric reader for configuring cardinality limits specific to the instrument kind. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855\"\u003e#7855\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce the \u003ccode\u003eEMPTY\u003c/code\u003e Type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to reflect that an empty value is now a valid value, with \u003ccode\u003eINVALID\u003c/code\u003e remaining as a deprecated alias of \u003ccode\u003eEMPTY\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove slice handling in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to optimize short slice values with fixed-size fast paths. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039\"\u003e#8039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of span metric recording in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e by returning early if self-observability is not enabled. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067\"\u003e#8067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove formatting of metric data diffs in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073\"\u003e#8073\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeprecated\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eINVALID\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. Use \u003ccode\u003eEMPTY\u003c/code\u003e instead. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReturn spec-compliant \u003ccode\u003eTraceIdRatioBased\u003c/code\u003e description. This is a breaking behavioral change, but it is necessary to\nmake the implementation \u003ca href=\"https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased\"\u003espec-compliant\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027\"\u003e#8027\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a race condition in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056\"\u003e#8056\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003ekenv\u003c/code\u003e command on BSD. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to correctly handle HTTP2 GOAWAY frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.40.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985\"\u003e#7985\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9276201a64b623606e3eaa0d61ae8ee6d62756c0\"\u003e\u003ccode\u003e9276201\u003c/code\u003e\u003c/a\u003e Release v1.43.0 / v0.65.0 / v0.19.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8128\"\u003e#8128\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/61b8c9466c4e6b17e69b622279fe9b63fb15c89a\"\u003e\u003ccode\u003e61b8c94\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8131\"\u003e#8131\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/97a086e82ffe01502f4c620e9c447efa229e2a23\"\u003e\u003ccode\u003e97a086e\u003c/code\u003e\u003c/a\u003e chore(deps): update github.com/golangci/dupl digest to c99c5cf (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8122\"\u003e#8122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/5e363de517dba6db62736b2f5cdef0e0929b4cd0\"\u003e\u003ccode\u003e5e363de\u003c/code\u003e\u003c/a\u003e limit response body size for OTLP HTTP exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/35214b60138eac8dec97a2d2b851d8c8471680c7\"\u003e\u003ccode\u003e35214b6\u003c/code\u003e\u003c/a\u003e Use an absolute path when calling bsd kenv (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/290024ceaf695f9cdbf29a0c6731a317d92bc361\"\u003e\u003ccode\u003e290024c\u003c/code\u003e\u003c/a\u003e fix(deps): update module google.golang.org/grpc to v1.80.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8121\"\u003e#8121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/e70658e098033d6bb5ec1b399de16bbb2642f6dc\"\u003e\u003ccode\u003ee70658e\u003c/code\u003e\u003c/a\u003e fix: support getBody in otelploghttp (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4afe468e3b4859c949a1c1e8d92684d43d86ef8a\"\u003e\u003ccode\u003e4afe468\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 9d38bb4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8117\"\u003e#8117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b9ca729776309e3c08fe700c131797a3b4d10634\"\u003e\u003ccode\u003eb9ca729\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8115\"\u003e#8115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/69472ec56cb7674d55ca2e2bcb04dea73228ab79\"\u003e\u003ccode\u003e69472ec\u003c/code\u003e\u003c/a\u003e chore(deps): update fossas/fossa-action action to v1.9.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8118\"\u003e#8118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.37.0...v1.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.41.0 to 0.50.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/4e0068c0098be10d7025c99ab7c50ce454c1f0f9\"\u003e\u003ccode\u003e4e0068c\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e79546e28b85ea53dd37afe1c4102746ef553b9c\"\u003e\u003ccode\u003ee79546e\u003c/code\u003e\u003c/a\u003e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f91f7a7c31bf90b39c1de895ad116a2bacc88748\"\u003e\u003ccode\u003ef91f7a7\u003c/code\u003e\u003c/a\u003e ssh/agent: prevent panic on malformed constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/2df4153a0311bdfea44376e0eb6ef2faefb0275b\"\u003e\u003ccode\u003e2df4153\u003c/code\u003e\u003c/a\u003e acme/autocert: let automatic renewal work with short lifetime certs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/bcf6a849efcf4702fa5172cb0998b46c3da1e989\"\u003e\u003ccode\u003ebcf6a84\u003c/code\u003e\u003c/a\u003e acme: pass context to request\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b4f2b62076abeee4e43fb59544dac565715fbf1e\"\u003e\u003ccode\u003eb4f2b62\u003c/code\u003e\u003c/a\u003e ssh: fix error message on unsupported cipher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/79ec3a51fcc7fbd2691d56155d578225ccc542e2\"\u003e\u003ccode\u003e79ec3a5\u003c/code\u003e\u003c/a\u003e ssh: allow to bind to a hostname in remote forwarding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/122a78f140d9d3303ed3261bc374bbbca149140f\"\u003e\u003ccode\u003e122a78f\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/c0531f9c34514ad5c5551e2d6ce569ca673a8afd\"\u003e\u003ccode\u003ec0531f9\u003c/code\u003e\u003c/a\u003e all: eliminate vet diagnostics\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/0997000b45e3a40598272081bcad03ffd21b8adb\"\u003e\u003ccode\u003e0997000\u003c/code\u003e\u003c/a\u003e all: fix some comments\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.41.0...v0.45.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google.golang.org/grpc` from 1.74.2 to 1.80.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc-go/releases\"\u003egoogle.golang.org/grpc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 1.79.3\u003c/h2\u003e\n\u003ch1\u003eSecurity\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eserver: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted \u0026quot;deny\u0026quot; rules in interceptors like \u003ccode\u003egrpc/authz\u003c/code\u003e. Any request with a non-canonical path is now immediately rejected with an \u003ccode\u003eUnimplemented\u003c/code\u003e error. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.2\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003estats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8874\"\u003egrpc/grpc-go#8874\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.1\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003egrpc: Remove the \u003ccode\u003e-dev\u003c/code\u003e suffix from the User-Agent header. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8902\"\u003egrpc/grpc-go#8902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.0\u003c/h2\u003e\n\u003ch1\u003eAPI Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003emem: Add experimental API \u003ccode\u003eSetDefaultBufferPool\u003c/code\u003e to change the default buffer pool. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8806\"\u003e#8806\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/vanja-p\"\u003e\u003ccode\u003e@​vanja-p\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eexperimental/stats: Update \u003ccode\u003eMetricsRecorder\u003c/code\u003e to require embedding the new \u003ccode\u003eUnimplementedMetricsRecorder\u003c/code\u003e (a no-op struct) in all implementations for forward compatibility. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBehavior Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ebalancer/weightedtarget: Remove handling of \u003ccode\u003eAddresses\u003c/code\u003e and only handle \u003ccode\u003eEndpoints\u003c/code\u003e in resolver updates. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8841\"\u003e#8841\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eNew Features\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eexperimental/stats: Add support for asynchronous gauge metrics through the new \u003ccode\u003eAsyncMetricReporter\u003c/code\u003e and \u003ccode\u003eRegisterAsyncReporter\u003c/code\u003e APIs. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epickfirst: Add support for weighted random shuffling of endpoints, as described in \u003ca href=\"https://redirect.github.com/grpc/proposal/pull/535\"\u003egRFC A113\u003c/a\u003e.\n\u003cul\u003e\n\u003cli\u003eThis is enabled by default, and can be turned off using the environment variable \u003ccode\u003eGRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds: Implement \u003ccode\u003e:authority\u003c/code\u003e rewriting, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A81-xds-authority-rewriting.md\"\u003egRFC A81\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8779\"\u003e#8779\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebalancer/randomsubsetting: Implement the \u003ccode\u003erandom_subsetting\u003c/code\u003e LB policy, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A68-random-subsetting.md\"\u003egRFC A68\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8650\"\u003e#8650\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/marek-szews\"\u003e\u003ccode\u003e@​marek-szews\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/tls: Fix a bug where the port was not stripped from the authority override before validation. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8726\"\u003e#8726\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/Atul1710\"\u003e\u003ccode\u003e@​Atul1710\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds/priority: Fix a bug causing delayed failover to lower-priority clusters when a higher-priority cluster is stuck in \u003ccode\u003eCONNECTING\u003c/code\u003e state. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8813\"\u003e#8813\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ehealth: Fix a bug where health checks failed for clients using legacy compression options (\u003ccode\u003eWithDecompressor\u003c/code\u003e or \u003ccode\u003eRPCDecompressor\u003c/code\u003e). (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8765\"\u003e#8765\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/sanki92\"\u003e\u003ccode\u003e@​sanki92\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003etransport: Fix an issue where the HTTP/2 server could skip header size checks when terminating a stream early. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8769\"\u003e#8769\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eserver: Propagate status detail headers, if available, when terminating a stream during request header processing. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8754\"\u003e#8754\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ePerformance Improvements\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/alts: Optimize read buffer alignment to reduce copies. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8791\"\u003e#8791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emem: Optimize pooling and creation of \u003ccode\u003ebuffer\u003c/code\u003e objects.  (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8784\"\u003e#8784\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etransport: Reduce slice re-allocations by reserving slice capacity. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8797\"\u003e#8797\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/dda86dbd9cecb8b35b58c73d507d81d67761205f\"\u003e\u003ccode\u003edda86db\u003c/code\u003e\u003c/a\u003e Change version to 1.79.3 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8983\"\u003e#8983\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/72186f163e75a065c39e6f7df9b6dea07fbdeff5\"\u003e\u003ccode\u003e72186f1\u003c/code\u003e\u003c/a\u003e grpc: enforce strict path checking for incoming requests on the server (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/97ca3522b239edf6813e2b1106924e9d55e89d43\"\u003e\u003ccode\u003e97ca352\u003c/code\u003e\u003c/a\u003e Changing version to 1.79.3-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8954\"\u003e#8954\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/8902ab6efea590f5b3861126559eaa26fa9783b2\"\u003e\u003ccode\u003e8902ab6\u003c/code\u003e\u003c/a\u003e Change the version to release 1.79.2 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8947\"\u003e#8947\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/a9286705aa689bee321ec674323b6896284f3e02\"\u003e\u003ccode\u003ea928670\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8874\"\u003e#8874\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8904\"\u003e#8904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/06df3638c0bcee88197b1033b3ba83e1eb8bc010\"\u003e\u003ccode\u003e06df363\u003c/code\u003e\u003c/a\u003e Change version to 1.79.2-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8903\"\u003e#8903\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/782f2de44f597af18a120527e7682a6670d84289\"\u003e\u003ccode\u003e782f2de\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8902\"\u003e#8902\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/850eccbb2257bd2de6ac28ee88a7172ab6175629\"\u003e\u003ccode\u003e850eccb\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8851\"\u003e#8851\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/765ff056b6890f6c8341894df4e9668e9bfc18ef\"\u003e\u003ccode\u003e765ff05\u003c/code\u003e\u003c/a\u003e Change version to 1.79.0 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8850\"\u003e#8850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/68804be0e78ed0365bb5a576dedc12e2168ed63e\"\u003e\u003ccode\u003e68804be\u003c/code\u003e\u003c/a\u003e Cherry pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8896\"\u003e#8896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/grpc/grpc-go/compare/v1.74.2...v1.79.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/Azure/go-ntlmssp` from 0.0.0-20220621081337-cb9428e4ac1e to 0.1.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Azure/go-ntlmssp/releases\"\u003egithub.com/Azure/go-ntlmssp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.1.1\u003c/h2\u003e\n\u003cp\u003eFix CVE-2026-32952: A malicious NTLM challenge message can causes an slice out of bounds panic, which can crash any Go process using ntlmssp.Negotiator as an HTTP transport.\u003c/p\u003e\n\u003ch2\u003ev0.1.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump minimum required version to Go 1.24 by \u003ca href=\"https://github.com/qmuntal\"\u003e\u003ccode\u003e@​qmuntal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Azure/go-ntlmssp/pull/53\"\u003eAzure/go-ntlmssp#53\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix OOM in NTLM negotiator by avoiding buffering of seekable request bodies by \u003ca href=\"https://github.com/Copilot\"\u003e\u003ccode\u003e@​Copilot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Azure/go-ntlmssp/pull/54\"\u003eAzure/go-ntlmssp#54\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDon't modify the rountripped request by \u003ca href=\"https://github.com/qmuntal\"\u003e\u003ccode\u003e@​qmuntal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Azure/go-ntlmssp/pull/57\"\u003eAzure/go-ntlmssp#57\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a race occurring when the wrapped Rountripper closes the request body in another goroutine by \u003ca href=\"https://github.com/qmuntal\"\u003e\u003ccode\u003e@​qmuntal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Azure/go-ntlmssp/pull/58\"\u003eAzure/go-ntlmssp#58\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a race occurring when the wrapped Rountripper reads request fields in another goroutine by \u003ca href=\"https://github.com/qmuntal\"\u003e\u003ccode\u003e@​qmuntal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Azure/go-ntlmssp/pull/59\"\u003eAzure/go-ntlmssp#59\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eOnly perform basic auth if requested by the server by \u003ca href=\"https://github.com/qmuntal\"\u003e\u003ccode\u003e@​qmuntal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Azure/go-ntlmssp/pull/60\"\u003eAzure/go-ntlmssp#60\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDon't pass the original body in the client handshake request by \u003ca href=\"https://github.com/qmuntal\"\u003e\u003ccode\u003e@​qmuntal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Azure/go-ntlmssp/pull/61\"\u003eAzure/go-ntlmssp#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRe...\n\n_Description has been truncated_","html_url":"https://github.com/OneFineStarstuff/grafana/pull/4","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/OneFineStarstuff%2Fgrafana/issues/4","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/4/packages"}},{"old_version":"1.6.1","new_version":"1.6.3","update_type":"patch","path":null,"pr_created_at":"2026-06-05T18:23:47.000Z","version_change":"1.6.1 → 1.6.3","issue":{"uuid":"4599154007","node_id":"PR_kwDOI8Bmh87jNp85","number":586,"state":"open","title":"chore(deps): bump the go_modules group across 1 directory with 3 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":6,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-06-05T18:23:47.000Z","updated_at":"2026-06-05T18:31:40.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"go_modules","update_count":3,"packages":[{"name":"google.golang.org/grpc","old_version":"1.70.0","new_version":"1.79.3","repository_url":"https://github.com/grpc/grpc-go"},{"name":"github.com/cloudflare/circl","old_version":"1.6.1","new_version":"1.6.3","repository_url":"https://github.com/cloudflare/circl"},{"name":"go.opentelemetry.io/otel/sdk","old_version":"1.34.0","new_version":"1.39.0"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 2 updates in the / directory: [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [github.com/cloudflare/circl](https://github.com/cloudflare/circl).\n\nUpdates `google.golang.org/grpc` from 1.70.0 to 1.79.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc-go/releases\"\u003egoogle.golang.org/grpc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 1.79.3\u003c/h2\u003e\n\u003ch1\u003eSecurity\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eserver: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted \u0026quot;deny\u0026quot; rules in interceptors like \u003ccode\u003egrpc/authz\u003c/code\u003e. Any request with a non-canonical path is now immediately rejected with an \u003ccode\u003eUnimplemented\u003c/code\u003e error. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.2\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003estats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8874\"\u003egrpc/grpc-go#8874\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.1\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003egrpc: Remove the \u003ccode\u003e-dev\u003c/code\u003e suffix from the User-Agent header. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8902\"\u003egrpc/grpc-go#8902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.0\u003c/h2\u003e\n\u003ch1\u003eAPI Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003emem: Add experimental API \u003ccode\u003eSetDefaultBufferPool\u003c/code\u003e to change the default buffer pool. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8806\"\u003e#8806\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/vanja-p\"\u003e\u003ccode\u003e@​vanja-p\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eexperimental/stats: Update \u003ccode\u003eMetricsRecorder\u003c/code\u003e to require embedding the new \u003ccode\u003eUnimplementedMetricsRecorder\u003c/code\u003e (a no-op struct) in all implementations for forward compatibility. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBehavior Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ebalancer/weightedtarget: Remove handling of \u003ccode\u003eAddresses\u003c/code\u003e and only handle \u003ccode\u003eEndpoints\u003c/code\u003e in resolver updates. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8841\"\u003e#8841\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eNew Features\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eexperimental/stats: Add support for asynchronous gauge metrics through the new \u003ccode\u003eAsyncMetricReporter\u003c/code\u003e and \u003ccode\u003eRegisterAsyncReporter\u003c/code\u003e APIs. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epickfirst: Add support for weighted random shuffling of endpoints, as described in \u003ca href=\"https://redirect.github.com/grpc/proposal/pull/535\"\u003egRFC A113\u003c/a\u003e.\n\u003cul\u003e\n\u003cli\u003eThis is enabled by default, and can be turned off using the environment variable \u003ccode\u003eGRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds: Implement \u003ccode\u003e:authority\u003c/code\u003e rewriting, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A81-xds-authority-rewriting.md\"\u003egRFC A81\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8779\"\u003e#8779\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebalancer/randomsubsetting: Implement the \u003ccode\u003erandom_subsetting\u003c/code\u003e LB policy, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A68-random-subsetting.md\"\u003egRFC A68\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8650\"\u003e#8650\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/marek-szews\"\u003e\u003ccode\u003e@​marek-szews\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/tls: Fix a bug where the port was not stripped from the authority override before validation. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8726\"\u003e#8726\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/Atul1710\"\u003e\u003ccode\u003e@​Atul1710\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds/priority: Fix a bug causing delayed failover to lower-priority clusters when a higher-priority cluster is stuck in \u003ccode\u003eCONNECTING\u003c/code\u003e state. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8813\"\u003e#8813\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ehealth: Fix a bug where health checks failed for clients using legacy compression options (\u003ccode\u003eWithDecompressor\u003c/code\u003e or \u003ccode\u003eRPCDecompressor\u003c/code\u003e). (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8765\"\u003e#8765\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/sanki92\"\u003e\u003ccode\u003e@​sanki92\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003etransport: Fix an issue where the HTTP/2 server could skip header size checks when terminating a stream early. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8769\"\u003e#8769\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eserver: Propagate status detail headers, if available, when terminating a stream during request header processing. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8754\"\u003e#8754\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ePerformance Improvements\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/alts: Optimize read buffer alignment to reduce copies. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8791\"\u003e#8791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emem: Optimize pooling and creation of \u003ccode\u003ebuffer\u003c/code\u003e objects.  (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8784\"\u003e#8784\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etransport: Reduce slice re-allocations by reserving slice capacity. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8797\"\u003e#8797\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/dda86dbd9cecb8b35b58c73d507d81d67761205f\"\u003e\u003ccode\u003edda86db\u003c/code\u003e\u003c/a\u003e Change version to 1.79.3 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8983\"\u003e#8983\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/72186f163e75a065c39e6f7df9b6dea07fbdeff5\"\u003e\u003ccode\u003e72186f1\u003c/code\u003e\u003c/a\u003e grpc: enforce strict path checking for incoming requests on the server (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/97ca3522b239edf6813e2b1106924e9d55e89d43\"\u003e\u003ccode\u003e97ca352\u003c/code\u003e\u003c/a\u003e Changing version to 1.79.3-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8954\"\u003e#8954\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/8902ab6efea590f5b3861126559eaa26fa9783b2\"\u003e\u003ccode\u003e8902ab6\u003c/code\u003e\u003c/a\u003e Change the version to release 1.79.2 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8947\"\u003e#8947\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/a9286705aa689bee321ec674323b6896284f3e02\"\u003e\u003ccode\u003ea928670\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8874\"\u003e#8874\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8904\"\u003e#8904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/06df3638c0bcee88197b1033b3ba83e1eb8bc010\"\u003e\u003ccode\u003e06df363\u003c/code\u003e\u003c/a\u003e Change version to 1.79.2-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8903\"\u003e#8903\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/782f2de44f597af18a120527e7682a6670d84289\"\u003e\u003ccode\u003e782f2de\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8902\"\u003e#8902\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/850eccbb2257bd2de6ac28ee88a7172ab6175629\"\u003e\u003ccode\u003e850eccb\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8851\"\u003e#8851\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/765ff056b6890f6c8341894df4e9668e9bfc18ef\"\u003e\u003ccode\u003e765ff05\u003c/code\u003e\u003c/a\u003e Change version to 1.79.0 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8850\"\u003e#8850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/68804be0e78ed0365bb5a576dedc12e2168ed63e\"\u003e\u003ccode\u003e68804be\u003c/code\u003e\u003c/a\u003e Cherry pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8896\"\u003e#8896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/grpc/grpc-go/compare/v1.70.0...v1.79.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/cloudflare/circl` from 1.6.1 to 1.6.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cloudflare/circl/releases\"\u003egithub.com/cloudflare/circl's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eCIRCL v1.6.3\u003c/h2\u003e\n\u003cp\u003eFix a bug on ecc/p384 scalar multiplication.\u003c/p\u003e\n\u003ch3\u003eWhat's Changed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esign/mldsa: Check opts for nil value  by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/582\"\u003ecloudflare/circl#582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eecc/p384: Point addition must handle point doubling case. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/583\"\u003ecloudflare/circl#583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease CIRCL v1.6.3 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/584\"\u003ecloudflare/circl#584\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNew SLH-DSA, improvements in ML-DSA for arm64.\u003c/li\u003e\n\u003cli\u003eTested compilation on WASM.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize pairing product computation by moving exponentiations to G1. by \u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esign: Adding SLH-DSA signature by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/512\"\u003ecloudflare/circl#512\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate code generators to CIRCL v1.6.1. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/548\"\u003ecloudflare/circl#548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eML-DSA: Add preliminary Wycheproof test vectors by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/552\"\u003ecloudflare/circl#552\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ego fmt by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/554\"\u003ecloudflare/circl#554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egz-compressing test vectors, use of HexBytes and ReadGzip functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/555\"\u003ecloudflare/circl#555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Removes use of elliptic Marshal and Unmarshal functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/556\"\u003ecloudflare/circl#556\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport encoding/decoding ML-DSA private keys (as long as they contain seeds) by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/559\"\u003ecloudflare/circl#559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to golangci-lint v2 by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/560\"\u003ecloudflare/circl#560\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreparation for ARM64 Implementation of poly operations for dilithium package. by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eprepare power2Round for custom implementations in assembly by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/564\"\u003ecloudflare/circl#564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eARM64 implementation for poly.PackLe16 by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/563\"\u003ecloudflare/circl#563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polyMulBy2toD by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/565\"\u003ecloudflare/circl#565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polySub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/566\"\u003ecloudflare/circl#566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: add byteLen method for short groups and RandomScalar uses rand.Int by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/568\"\u003ecloudflare/circl#568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of poly.Add/Sub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/572\"\u003ecloudflare/circl#572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Adding cryptobyte marshaling to scalars by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/569\"\u003ecloudflare/circl#569\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumping up to Go1.25 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/574\"\u003ecloudflare/circl#574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: Including WASM compilation. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/577\"\u003ecloudflare/circl#577\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to using package-declared HPKE errors for shortkem instead of standard library errors by \u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease v1.6.2 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/579\"\u003ecloudflare/circl#579\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/24ae53c5d6f7fe18203adc125ba3ed76a38703e1\"\u003e\u003ccode\u003e24ae53c\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/581020bd4a836b8ce7bd4e414ba2884c07dbc906\"\u003e\u003ccode\u003e581020b\u003c/code\u003e\u003c/a\u003e Rename method to oddMultiplesProjective.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/12209a4566605692a8402594e367a5aed5148460\"\u003e\u003ccode\u003e12209a4\u003c/code\u003e\u003c/a\u003e Removing unused cmov for jacobian points.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/fcba359f4178645d2c9e50f29ab6966337da4b95\"\u003e\u003ccode\u003efcba359\u003c/code\u003e\u003c/a\u003e ecc/p384: use of complete projective formulas for scalar multiplication.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/5e1bae8d8c2df4e717c2c5c2d5b5d60b629b2ac6\"\u003e\u003ccode\u003e5e1bae8\u003c/code\u003e\u003c/a\u003e ecc/p384: handle point doubling in point addition with Jacobian coordinates.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/341604685ff97e8f7440ae4b4711ba1c118c648c\"\u003e\u003ccode\u003e3416046\u003c/code\u003e\u003c/a\u003e Check opts for nil value.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/a763d47a6dce43d1f4f7b697d1d7810463a526f6\"\u003e\u003ccode\u003ea763d47\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3c70bf9ad53b681fbe5ba6067e454a86549fee8a\"\u003e\u003ccode\u003e3c70bf9\u003c/code\u003e\u003c/a\u003e Bump x/crypto x/sys dependencies.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3f0f15b2bfe67bad81a35e8aec81ae42ca78349d\"\u003e\u003ccode\u003e3f0f15b\u003c/code\u003e\u003c/a\u003e Revert to using package-declared HPKE errors for shortkem instead of standard...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/23491bd573cf29b6f567057a158203a2c9dfa30d\"\u003e\u003ccode\u003e23491bd\u003c/code\u003e\u003c/a\u003e Adding generic Power2Round method.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/sdk` from 1.34.0 to 1.39.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/sdk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.39.0/0.61.0/0.15.0/0.0.14] 2025-12-05\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eGreatly reduce the cost of recording metrics in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e using hashing for map keys. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7175\"\u003e#7175\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithInstrumentationAttributeSet\u003c/code\u003e option to \u003ccode\u003ego.opentelemetry.io/otel/log\u003c/code\u003e, \u003ccode\u003ego.opentelemetry.io/otel/metric\u003c/code\u003e, and \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e packages.\nThis provides a concurrent-safe and performant alternative to \u003ccode\u003eWithInstrumentationAttributes\u003c/code\u003e by accepting a pre-constructed \u003ccode\u003eattribute.Set\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7287\"\u003e#7287\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability for the Prometheus exporter in \u003ccode\u003ego.opentelemetry.io/otel/exporters/prometheus\u003c/code\u003e.\nCheck the \u003ccode\u003ego.opentelemetry.io/otel/exporters/prometheus/internal/x\u003c/code\u003e package documentation for more information. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7345\"\u003e#7345\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7353\"\u003e#7353\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd temporality selector functions \u003ccode\u003eDeltaTemporalitySelector\u003c/code\u003e, \u003ccode\u003eCumulativeTemporalitySelector\u003c/code\u003e, \u003ccode\u003eLowMemoryTemporalitySelector\u003c/code\u003e to \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7434\"\u003e#7434\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics for simple log processor in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7548\"\u003e#7548\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7459\"\u003e#7459\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7486\"\u003e#7486\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics for simple span processor in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7374\"\u003e#7374\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7512\"\u003e#7512\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics for manual reader in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7524\"\u003e#7524\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics for periodic reader in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7571\"\u003e#7571\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eOTEL_EXPORTER_OTLP_LOGS_INSECURE\u003c/code\u003e and \u003ccode\u003eOTEL_EXPORTER_OTLP_INSECURE\u003c/code\u003e environmental variables in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7608\"\u003e#7608\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eEnabled\u003c/code\u003e method to the \u003ccode\u003eProcessor\u003c/code\u003e interface in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e.\nAll \u003ccode\u003eProcessor\u003c/code\u003e implementations now include an \u003ccode\u003eEnabled\u003c/code\u003e method. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7639\"\u003e#7639\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.38.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.38.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.38.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.37.0.\u003c/code\u003e(\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7648\"\u003e#7648\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eDistinct\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e is no longer guaranteed to uniquely identify an attribute set.\nCollisions between \u003ccode\u003eDistinct\u003c/code\u003e values for different Sets are possible with extremely high cardinality (billions of series per instrument), but are highly unlikely. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7175\"\u003e#7175\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithInstrumentationAttributes\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e synchronously de-duplicates the passed attributes instead of delegating it to the returned \u003ccode\u003eTracerOption\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7266\"\u003e#7266\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithInstrumentationAttributes\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/meter\u003c/code\u003e synchronously de-duplicates the passed attributes instead of delegating it to the returned \u003ccode\u003eMeterOption\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7266\"\u003e#7266\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithInstrumentationAttributes\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/log\u003c/code\u003e synchronously de-duplicates the passed attributes instead of delegating it to the returned \u003ccode\u003eLoggerOption\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7266\"\u003e#7266\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRename the \u003ccode\u003eOTEL_GO_X_SELF_OBSERVABILITY\u003c/code\u003e environment variable to \u003ccode\u003eOTEL_GO_X_OBSERVABILITY\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e, \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e, and \u003ccode\u003ego.opentelemetry.io/otel/exporters/stdout/stdouttrace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7302\"\u003e#7302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of histogram \u003ccode\u003eRecord\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e when min and max are disabled using \u003ccode\u003eNoMinMax\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7306\"\u003e#7306\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove error handling for dropped data during translation by using \u003ccode\u003eprometheus.NewInvalidMetric\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/prometheus\u003c/code\u003e.\n⚠️ \u003cstrong\u003eBreaking Change:\u003c/strong\u003e Previously, these cases were only logged and scrapes succeeded.\nNow, when translation would drop data (e.g., invalid label/value), the exporter emits a \u003ccode\u003eNewInvalidMetric\u003c/code\u003e, and Prometheus scrapes \u003cstrong\u003efail with HTTP 500\u003c/strong\u003e by default.\nTo preserve the prior behavior (scrapes succeed while errors are logged), configure your Prometheus HTTP handler with: \u003ccode\u003epromhttp.HandlerOpts{ ErrorHandling: promhttp.ContinueOnError }\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7363\"\u003e#7363\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReplace fnv hash with xxhash in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e for better performance. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7371\"\u003e#7371\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe default \u003ccode\u003eTranslationStrategy\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/exporters/prometheus\u003c/code\u003e is changed from \u003ccode\u003eotlptranslator.NoUTF8EscapingWithSuffixes\u003c/code\u003e to \u003ccode\u003eotlptranslator.UnderscoreEscapingWithSuffixes\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7421\"\u003e#7421\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7427\"\u003e#7427\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eInclude W3C TraceFlags (bits 0–7) in the OTLP \u003ccode\u003eSpan.Flags\u003c/code\u003e field in \u003ccode\u003ego.opentelemetry.io/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e and \u003ccode\u003ego.opentelemetry.io/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7438\"\u003e#7438\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003eErrorType\u003c/code\u003e function in \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.37.0\u003c/code\u003e now handles custom error types.\nIf an error implements an \u003ccode\u003eErrorType() string\u003c/code\u003e method, the return value of that method will be used as the error type. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7442\"\u003e#7442\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ccode\u003eWithInstrumentationAttributes\u003c/code\u003e options in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e, \u003ccode\u003ego.opentelemetry.io/otel/metric\u003c/code\u003e, and \u003ccode\u003ego.opentelemetry.io/otel/log\u003c/code\u003e to properly merge attributes when passed multiple times instead of replacing them.\nAttributes with duplicate keys will use the last value passed. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7300\"\u003e#7300\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe equality of \u003ccode\u003eattribute.Set\u003c/code\u003e when using the \u003ccode\u003eEqual\u003c/code\u003e method is not affected by the user overriding the empty set pointed to by \u003ccode\u003eattribute.EmptySet\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7357\"\u003e#7357\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/6ce14298b9d58647295280560205307768400496\"\u003e\u003ccode\u003e6ce1429\u003c/code\u003e\u003c/a\u003e Release v1.39.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7676\"\u003e#7676\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/12e421a7061c1ab5c25a1851ca168e1c3ac11bbb\"\u003e\u003ccode\u003e12e421a\u003c/code\u003e\u003c/a\u003e sdk/log: move Enabled method from FilterProcessor to Processor (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7639\"\u003e#7639\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/5982f16d244fafebffcfc92b4673dbeb565b4e7b\"\u003e\u003ccode\u003e5982f16\u003c/code\u003e\u003c/a\u003e fix(deps): update module golang.org/x/sys to v0.39.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7684\"\u003e#7684\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/928837830da34dea636b48a468149d480cc41058\"\u003e\u003ccode\u003e9288378\u003c/code\u003e\u003c/a\u003e chore(deps): update module golang.org/x/sync to v0.19.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7683\"\u003e#7683\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/ee3dfef45d9462e209d92e0651a58d2417c1305f\"\u003e\u003ccode\u003eee3dfef\u003c/code\u003e\u003c/a\u003e chore(deps): update github.com/securego/gosec/v2 digest to 41f28e2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7682\"\u003e#7682\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9345d1f64d874fa8df5f6ca4e14acaeb44532cd3\"\u003e\u003ccode\u003e9345d1f\u003c/code\u003e\u003c/a\u003e fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.7.2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7680\"\u003e#7680\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/d03b03395dc9436d79d5ba7b5ea77053b18a9915\"\u003e\u003ccode\u003ed03b033\u003c/code\u003e\u003c/a\u003e Check context prior to delaying retry in OTLP exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7678\"\u003e#7678\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/61765e78a620994b5922e34e776e029da1a2b983\"\u003e\u003ccode\u003e61765e7\u003c/code\u003e\u003c/a\u003e Fix flaky \u003ccode\u003eTestClientInstrumentation\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7677\"\u003e#7677\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/a54721cc8052fcd497d6f637a463d1aba787012c\"\u003e\u003ccode\u003ea54721c\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/go-git/go-billy/v5 to v5.7.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7679\"\u003e#7679\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/746d0860d70bb9c1e875afe1c7e41e9060387d46\"\u003e\u003ccode\u003e746d086\u003c/code\u003e\u003c/a\u003e chore(deps): update github/codeql-action action to v4.31.7 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7675\"\u003e#7675\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.34.0...v1.39.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/abcxyz/guardian/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/abcxyz/guardian/pull/586","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/abcxyz%2Fguardian/issues/586","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/586/packages"}},{"old_version":"1.6.1","new_version":"1.6.3","update_type":"patch","path":null,"pr_created_at":"2026-05-30T09:39:44.000Z","version_change":"1.6.1 → 1.6.3","issue":{"uuid":"4554010034","node_id":"PR_kwDOQXHkUc7g7LQz","number":2,"state":"open","title":"build(deps): bump the go_modules group across 2 directories with 25 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":4,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-30T09:39:44.000Z","updated_at":"2026-05-30T09:41:11.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): bump","group_name":"go_modules","update_count":25,"packages":[{"name":"github.com/agentgateway/agentgateway","old_version":"0.10.6-0.20251108001651-54763bfe02e1","new_version":"0.12.0","repository_url":"https://github.com/agentgateway/agentgateway"},{"name":"google.golang.org/grpc","old_version":"1.76.0","new_version":"1.79.3","repository_url":"https://github.com/grpc/grpc-go"},{"name":"helm.sh/helm/v3","old_version":"3.19.2","new_version":"3.20.2","repository_url":"https://github.com/helm/helm"},{"name":"github.com/in-toto/in-toto-golang","old_version":"0.9.0","new_version":"0.11.0","repository_url":"https://github.com/in-toto/in-toto-golang"},{"name":"github.com/theupdateframework/go-tuf/v2","old_version":"2.0.2","new_version":"2.4.1","repository_url":"https://github.com/theupdateframework/go-tuf"},{"name":"github.com/anchore/quill","old_version":"0.5.1","new_version":"0.7.1","repository_url":"https://github.com/anchore/quill"},{"name":"github.com/buger/jsonparser","old_version":"1.1.1","new_version":"1.1.2","repository_url":"https://github.com/buger/jsonparser"},{"name":"github.com/cloudflare/circl","old_version":"1.6.1","new_version":"1.6.3","repository_url":"https://github.com/cloudflare/circl"},{"name":"github.com/go-git/go-billy/v5","old_version":"5.6.2","new_version":"5.9.0","repository_url":"https://github.com/go-git/go-billy"},{"name":"github.com/go-git/go-git/v5","old_version":"5.14.0","new_version":"5.19.1","repository_url":"https://github.com/go-git/go-git"},{"name":"github.com/moby/spdystream","old_version":"0.5.0","new_version":"0.5.1","repository_url":"https://github.com/moby/spdystream"},{"name":"github.com/sigstore/cosign/v2","old_version":"2.5.0","new_version":"2.6.2","repository_url":"https://github.com/sigstore/cosign"},{"name":"github.com/slack-go/slack","old_version":"0.17.3","new_version":"0.23.1","repository_url":"https://github.com/slack-go/slack"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 13 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/agentgateway/agentgateway](https://github.com/agentgateway/agentgateway) | `0.10.6-0.20251108001651-54763bfe02e1` | `0.12.0` |\n| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.76.0` | `1.79.3` |\n| [helm.sh/helm/v3](https://github.com/helm/helm) | `3.19.2` | `3.20.2` |\n| [github.com/in-toto/in-toto-golang](https://github.com/in-toto/in-toto-golang) | `0.9.0` | `0.11.0` |\n| [github.com/theupdateframework/go-tuf/v2](https://github.com/theupdateframework/go-tuf) | `2.0.2` | `2.4.1` |\n| [github.com/anchore/quill](https://github.com/anchore/quill) | `0.5.1` | `0.7.1` |\n| [github.com/buger/jsonparser](https://github.com/buger/jsonparser) | `1.1.1` | `1.1.2` |\n| [github.com/cloudflare/circl](https://github.com/cloudflare/circl) | `1.6.1` | `1.6.3` |\n| [github.com/go-git/go-billy/v5](https://github.com/go-git/go-billy) | `5.6.2` | `5.9.0` |\n| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.14.0` | `5.19.1` |\n| [github.com/moby/spdystream](https://github.com/moby/spdystream) | `0.5.0` | `0.5.1` |\n| [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) | `2.5.0` | `2.6.2` |\n| [github.com/slack-go/slack](https://github.com/slack-go/slack) | `0.17.3` | `0.23.1` |\n\nBumps the go_modules group with 3 updates in the /hack/utils/applier directory: [github.com/moby/spdystream](https://github.com/moby/spdystream), [golang.org/x/crypto](https://github.com/golang/crypto) and [golang.org/x/oauth2](https://github.com/golang/oauth2).\n\nUpdates `github.com/agentgateway/agentgateway` from 0.10.6-0.20251108001651-54763bfe02e1 to 0.12.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/agentgateway/agentgateway/releases\"\u003egithub.com/agentgateway/agentgateway's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.12.0\u003c/h2\u003e\n\u003cp\u003eAgentgateway is an open source project that is built on AI-native protocols to connect, secure, and observe agent-to-agent and agent-to-tool communication across any agent framework and environment.\u003c/p\u003e\n\u003cp\u003eThis release contains various bug fixes, and some major changes to the CEL expression language implementation.\u003c/p\u003e\n\u003ch2\u003eCEL\u003c/h2\u003e\n\u003cp\u003eThis release comes with a rewrite of the \u003ca href=\"https://agentgateway.dev/docs/local/latest/reference/cel/\"\u003eCEL implementation\u003c/a\u003e that powers policies such as authorization, rate limiting, access logging, etc. The new implementation is 5-500x faster depending on the expression; typical users can see up to a 50% increase in end-to-end throughput.\u003c/p\u003e\n\u003cp\u003eAdditionally, a new CEL playground is available in the UI to help troubleshoot and test CEL expressions.\u003c/p\u003e\n\u003cp\u003eWhile most of the changes are internal, a few minor behavioral changes are present\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFix MCP attributes not being available during logging (only authz)\u003c/li\u003e\n\u003cli\u003eBefore, we snapshotted the request once at an arbitrary (and inconsistent, across requests) time. Now, each execution consistently gets the 'current' view of the request and response. For example, during logging, manipulations from policies would be observed.\u003c/li\u003e\n\u003cli\u003eNew function names: \u003ccode\u003ebase64Encode\u003c/code\u003e -\u0026gt; \u003ccode\u003ebase64.encode\u003c/code\u003e (this comes from a bump in the library before forking it). The old name is available for backwards compat.\u003c/li\u003e\n\u003cli\u003eBefore, the top level variables were always present but could be \u003ccode\u003enull\u003c/code\u003e. Now, if they are not available they will fail to lookup instead of return \u003ccode\u003enull\u003c/code\u003e. For example, before \u003ccode\u003ehas(jwt)\u003c/code\u003e would always return \u003ccode\u003etrue\u003c/code\u003e; now it will only return \u003ccode\u003etrue\u003c/code\u003e if there is a JWT.\u003c/li\u003e\n\u003cli\u003eIts faster!\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSPIKE: Fork htpasswd-verify and upgrade deps by \u003ca href=\"https://github.com/markuskobler\"\u003e\u003ccode\u003e@​markuskobler\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/787\"\u003eagentgateway/agentgateway#787\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(mcp/openapi): improve path, query and header handling by \u003ca href=\"https://github.com/markuskobler\"\u003e\u003ccode\u003e@​markuskobler\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/866\"\u003eagentgateway/agentgateway#866\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDelete MCP-Authentication.md by \u003ca href=\"https://github.com/rinormaloku\"\u003e\u003ccode\u003e@​rinormaloku\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/872\"\u003eagentgateway/agentgateway#872\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ellm: properly use user-defined buffer limit by \u003ca href=\"https://github.com/howardjohn\"\u003e\u003ccode\u003e@​howardjohn\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/881\"\u003eagentgateway/agentgateway#881\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCEL 2.0 by \u003ca href=\"https://github.com/howardjohn\"\u003e\u003ccode\u003e@​howardjohn\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/877\"\u003eagentgateway/agentgateway#877\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emcp: update to rmcp 0.14.0 by \u003ca href=\"https://github.com/howardjohn\"\u003e\u003ccode\u003e@​howardjohn\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/885\"\u003eagentgateway/agentgateway#885\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(aws-sse): migrate to official AWS EventStream crates by \u003ca href=\"https://github.com/apexlnc\"\u003e\u003ccode\u003e@​apexlnc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/879\"\u003eagentgateway/agentgateway#879\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(llm): Implements count_tokens for Anthropic/Vertex/Bedrock providers by \u003ca href=\"https://github.com/markuskobler\"\u003e\u003ccode\u003e@​markuskobler\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/883\"\u003eagentgateway/agentgateway#883\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Feat] MCP target policies by \u003ca href=\"https://github.com/Jack-Kilrain\"\u003e\u003ccode\u003e@​Jack-Kilrain\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/862\"\u003eagentgateway/agentgateway#862\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport hostname in incoming HBONE connect by \u003ca href=\"https://github.com/ymesika\"\u003e\u003ccode\u003e@​ymesika\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/859\"\u003eagentgateway/agentgateway#859\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003elocal: fix regression in mcp backends by \u003ca href=\"https://github.com/howardjohn\"\u003e\u003ccode\u003e@​howardjohn\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/888\"\u003eagentgateway/agentgateway#888\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(llm): bedrock token counting and get_messages conversions by \u003ca href=\"https://github.com/markuskobler\"\u003e\u003ccode\u003e@​markuskobler\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/884\"\u003eagentgateway/agentgateway#884\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emcp: better propogate errors up by \u003ca href=\"https://github.com/howardjohn\"\u003e\u003ccode\u003e@​howardjohn\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/889\"\u003eagentgateway/agentgateway#889\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ellm e2e: add support for completions to anthropic via vertex by \u003ca href=\"https://github.com/howardjohn\"\u003e\u003ccode\u003e@​howardjohn\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/892\"\u003eagentgateway/agentgateway#892\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(ui): upgrade npm packages by \u003ca href=\"https://github.com/markuskobler\"\u003e\u003ccode\u003e@​markuskobler\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/894\"\u003eagentgateway/agentgateway#894\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egha: cache only on main by \u003ca href=\"https://github.com/howardjohn\"\u003e\u003ccode\u003e@​howardjohn\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/893\"\u003eagentgateway/agentgateway#893\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edeps: bump rust by \u003ca href=\"https://github.com/howardjohn\"\u003e\u003ccode\u003e@​howardjohn\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/899\"\u003eagentgateway/agentgateway#899\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExt Proc and Ext Authz: Treat Unset Header Append as Overwrite by \u003ca href=\"https://github.com/danehans\"\u003e\u003ccode\u003e@​danehans\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/906\"\u003eagentgateway/agentgateway#906\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emcp: enhance observability and route discovery plumbing by \u003ca href=\"https://github.com/apexlnc\"\u003e\u003ccode\u003e@​apexlnc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/901\"\u003eagentgateway/agentgateway#901\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd primitive TCP CEL logging support by \u003ca href=\"https://github.com/howardjohn\"\u003e\u003ccode\u003e@​howardjohn\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/916\"\u003eagentgateway/agentgateway#916\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: drop build from pull request by \u003ca href=\"https://github.com/howardjohn\"\u003e\u003ccode\u003e@​howardjohn\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/915\"\u003eagentgateway/agentgateway#915\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCEL playground by \u003ca href=\"https://github.com/howardjohn\"\u003e\u003ccode\u003e@​howardjohn\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/914\"\u003eagentgateway/agentgateway#914\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/danehans\"\u003e\u003ccode\u003e@​danehans\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/agentgateway/agentgateway/pull/906\"\u003eagentgateway/agentgateway#906\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/agentgateway/agentgateway/compare/v0.11.3...v0.12.0\"\u003ehttps://github.com/agentgateway/agentgateway/compare/v0.11.3...v0.12.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.11.3\u003c/h2\u003e\n\u003cp\u003eAutomated release of v0.11.3.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/agentgateway/agentgateway/commits/v0.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google.golang.org/grpc` from 1.76.0 to 1.79.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc-go/releases\"\u003egoogle.golang.org/grpc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 1.79.3\u003c/h2\u003e\n\u003ch1\u003eSecurity\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eserver: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted \u0026quot;deny\u0026quot; rules in interceptors like \u003ccode\u003egrpc/authz\u003c/code\u003e. Any request with a non-canonical path is now immediately rejected with an \u003ccode\u003eUnimplemented\u003c/code\u003e error. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.2\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003estats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8874\"\u003egrpc/grpc-go#8874\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.1\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003egrpc: Remove the \u003ccode\u003e-dev\u003c/code\u003e suffix from the User-Agent header. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8902\"\u003egrpc/grpc-go#8902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.0\u003c/h2\u003e\n\u003ch1\u003eAPI Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003emem: Add experimental API \u003ccode\u003eSetDefaultBufferPool\u003c/code\u003e to change the default buffer pool. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8806\"\u003e#8806\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/vanja-p\"\u003e\u003ccode\u003e@​vanja-p\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eexperimental/stats: Update \u003ccode\u003eMetricsRecorder\u003c/code\u003e to require embedding the new \u003ccode\u003eUnimplementedMetricsRecorder\u003c/code\u003e (a no-op struct) in all implementations for forward compatibility. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBehavior Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ebalancer/weightedtarget: Remove handling of \u003ccode\u003eAddresses\u003c/code\u003e and only handle \u003ccode\u003eEndpoints\u003c/code\u003e in resolver updates. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8841\"\u003e#8841\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eNew Features\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eexperimental/stats: Add support for asynchronous gauge metrics through the new \u003ccode\u003eAsyncMetricReporter\u003c/code\u003e and \u003ccode\u003eRegisterAsyncReporter\u003c/code\u003e APIs. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epickfirst: Add support for weighted random shuffling of endpoints, as described in \u003ca href=\"https://redirect.github.com/grpc/proposal/pull/535\"\u003egRFC A113\u003c/a\u003e.\n\u003cul\u003e\n\u003cli\u003eThis is enabled by default, and can be turned off using the environment variable \u003ccode\u003eGRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds: Implement \u003ccode\u003e:authority\u003c/code\u003e rewriting, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A81-xds-authority-rewriting.md\"\u003egRFC A81\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8779\"\u003e#8779\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebalancer/randomsubsetting: Implement the \u003ccode\u003erandom_subsetting\u003c/code\u003e LB policy, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A68-random-subsetting.md\"\u003egRFC A68\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8650\"\u003e#8650\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/marek-szews\"\u003e\u003ccode\u003e@​marek-szews\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/tls: Fix a bug where the port was not stripped from the authority override before validation. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8726\"\u003e#8726\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/Atul1710\"\u003e\u003ccode\u003e@​Atul1710\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds/priority: Fix a bug causing delayed failover to lower-priority clusters when a higher-priority cluster is stuck in \u003ccode\u003eCONNECTING\u003c/code\u003e state. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8813\"\u003e#8813\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ehealth: Fix a bug where health checks failed for clients using legacy compression options (\u003ccode\u003eWithDecompressor\u003c/code\u003e or \u003ccode\u003eRPCDecompressor\u003c/code\u003e). (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8765\"\u003e#8765\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/sanki92\"\u003e\u003ccode\u003e@​sanki92\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003etransport: Fix an issue where the HTTP/2 server could skip header size checks when terminating a stream early. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8769\"\u003e#8769\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eserver: Propagate status detail headers, if available, when terminating a stream during request header processing. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8754\"\u003e#8754\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ePerformance Improvements\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/alts: Optimize read buffer alignment to reduce copies. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8791\"\u003e#8791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emem: Optimize pooling and creation of \u003ccode\u003ebuffer\u003c/code\u003e objects.  (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8784\"\u003e#8784\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etransport: Reduce slice re-allocations by reserving slice capacity. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8797\"\u003e#8797\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/dda86dbd9cecb8b35b58c73d507d81d67761205f\"\u003e\u003ccode\u003edda86db\u003c/code\u003e\u003c/a\u003e Change version to 1.79.3 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8983\"\u003e#8983\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/72186f163e75a065c39e6f7df9b6dea07fbdeff5\"\u003e\u003ccode\u003e72186f1\u003c/code\u003e\u003c/a\u003e grpc: enforce strict path checking for incoming requests on the server (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/97ca3522b239edf6813e2b1106924e9d55e89d43\"\u003e\u003ccode\u003e97ca352\u003c/code\u003e\u003c/a\u003e Changing version to 1.79.3-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8954\"\u003e#8954\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/8902ab6efea590f5b3861126559eaa26fa9783b2\"\u003e\u003ccode\u003e8902ab6\u003c/code\u003e\u003c/a\u003e Change the version to release 1.79.2 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8947\"\u003e#8947\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/a9286705aa689bee321ec674323b6896284f3e02\"\u003e\u003ccode\u003ea928670\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8874\"\u003e#8874\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8904\"\u003e#8904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/06df3638c0bcee88197b1033b3ba83e1eb8bc010\"\u003e\u003ccode\u003e06df363\u003c/code\u003e\u003c/a\u003e Change version to 1.79.2-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8903\"\u003e#8903\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/782f2de44f597af18a120527e7682a6670d84289\"\u003e\u003ccode\u003e782f2de\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8902\"\u003e#8902\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/850eccbb2257bd2de6ac28ee88a7172ab6175629\"\u003e\u003ccode\u003e850eccb\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8851\"\u003e#8851\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/765ff056b6890f6c8341894df4e9668e9bfc18ef\"\u003e\u003ccode\u003e765ff05\u003c/code\u003e\u003c/a\u003e Change version to 1.79.0 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8850\"\u003e#8850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/68804be0e78ed0365bb5a576dedc12e2168ed63e\"\u003e\u003ccode\u003e68804be\u003c/code\u003e\u003c/a\u003e Cherry pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8896\"\u003e#8896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/grpc/grpc-go/compare/v1.76.0...v1.79.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `helm.sh/helm/v3` from 3.19.2 to 3.20.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/helm/helm/releases\"\u003ehelm.sh/helm/v3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eHelm v3.20.2\u003c/h2\u003e\n\u003ch2\u003ev3.20.2\u003c/h2\u003e\n\u003cp\u003eHelm v3.20.2 is a security patch release. Users are encouraged to upgrade for the best experience.\u003c/p\u003e\n\u003cp\u003eThe community keeps growing, and we'd love to see you there!\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eJoin the discussion in \u003ca href=\"https://kubernetes.slack.com\"\u003eKubernetes Slack\u003c/a\u003e:\n\u003cul\u003e\n\u003cli\u003efor questions and just to hang out\u003c/li\u003e\n\u003cli\u003efor discussing PRs, code, and bugs\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eHang out at the Public Developer Call: Thursday, 9:30 Pacific via \u003ca href=\"https://zoom.us/j/696660622\"\u003eZoom\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eTest, debug, and contribute charts: \u003ca href=\"https://artifacthub.io/packages/search?kind=0\"\u003eArtifactHub/packages\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/security/advisories/GHSA-hr2v-4r36-88hr\"\u003eGHSA-hr2v-4r36-88hr\u003c/a\u003e Helm Chart extraction output directory collapse via \u003ccode\u003eChart.yaml\u003c/code\u003e name dot-segment\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eInstallation and Upgrading\u003c/h2\u003e\n\u003cp\u003eDownload Helm v3.20.2. The common platform binaries are here:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.20.2-darwin-amd64.tar.gz\"\u003eMacOS amd64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.20.2-darwin-amd64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 7de04301f28b902a74f6286ed941cadc86ee5e6a9086a18f2ccf1f548e99d618)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.20.2-darwin-arm64.tar.gz\"\u003eMacOS arm64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.20.2-darwin-arm64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 139c794c22f16b579d08ddd3008c8038b9bb2814f35b5bcca91f50a1f458978d)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-amd64.tar.gz\"\u003eLinux amd64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-amd64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 258e830a9e613c8a7a302d6059b4bb3b9758f2f3e1bb8ea0d707ce10a9a72fea)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-arm.tar.gz\"\u003eLinux arm\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-arm.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / a8a614c740399ff1ef32bcea6be6e4523f17e3376f9cf55c192cc48c8f2d1f19)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-arm64.tar.gz\"\u003eLinux arm64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-arm64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 5ea2d6bc2cda3f8edf985e028809f5a9278f404fb8ab24044de9b7cb9b79a691)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-386.tar.gz\"\u003eLinux i386\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-386.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 88e4c1834307cdbc9f3b80920e1a383e4ba50bb488fb0be1b1fbd4918bb6ae73)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-ppc64le.tar.gz\"\u003eLinux ppc64le\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-ppc64le.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 98bb26a2f3c0b0c1a50db3181dff192554e0c204a07427d98d6b01e259f23cbe)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-s390x.tar.gz\"\u003eLinux s390x\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-s390x.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 584dd77ef8096d6ef939a1822f72840e749fc8311b2b13ae94df5f786862a56b)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-riscv64.tar.gz\"\u003eLinux riscv64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.20.2-linux-riscv64.tar.gz.sha256sum\"\u003echecksum\u003c/a\u003e / 957391d0710d72678acd09959b5dc77888cd007a78a4b99944d3b2fc7e1895ca)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.20.2-windows-amd64.zip\"\u003eWindows amd64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.20.2-windows-amd64.zip.sha256sum\"\u003echecksum\u003c/a\u003e / 24e8e5b71bab4ee17e6f989931ecf4fb144f9916cbe9990c0b6b2ec7b925c454)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://get.helm.sh/helm-v3.20.2-windows-arm64.zip\"\u003eWindows arm64\u003c/a\u003e (\u003ca href=\"https://get.helm.sh/helm-v3.20.2-windows-arm64.zip.sha256sum\"\u003echecksum\u003c/a\u003e / 7c940a73a6882f50b69aec3282549da4a49917669db18fc503db930fb74b9789)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThe \u003ca href=\"https://helm.sh/docs/intro/quickstart/\"\u003eQuickstart Guide\u003c/a\u003e will get you going from there. For \u003cstrong\u003eupgrade instructions\u003c/strong\u003e or detailed installation notes, check the \u003ca href=\"https://helm.sh/docs/intro/install/\"\u003einstall guide\u003c/a\u003e. You can also use a \u003ca href=\"https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3\"\u003escript to install\u003c/a\u003e on any system with \u003ccode\u003ebash\u003c/code\u003e.\u003c/p\u003e\n\u003ch2\u003eWhat's Next\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e4.1.5 and 3.20.3 are the next patch (bug fix) releases and will be on April 8, 2026\u003c/li\u003e\n\u003cli\u003e4.2.0 and 3.21.0 are the next minor (feature) releases and will be on May 13, 2026\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: Chart dot-name path bug 8fb76d6ab555577e98e23b7500009537a471feee (George Jenkins)\u003c/li\u003e\n\u003cli\u003efix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow 3a8927e275c50cecde273872dad2a5576bd46375 (Terry Howe)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eHelm v3.20.1 is a patch release. Users are encouraged to upgrade for the best experience.\u003c/p\u003e\n\u003cp\u003eThe community keeps growing, and we'd love to see you there!\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eJoin the discussion in \u003ca href=\"https://kubernetes.slack.com\"\u003eKubernetes Slack\u003c/a\u003e:\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/8fb76d6ab555577e98e23b7500009537a471feee\"\u003e\u003ccode\u003e8fb76d6\u003c/code\u003e\u003c/a\u003e fix: Chart dot-name path bug\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/3a8927e275c50cecde273872dad2a5576bd46375\"\u003e\u003ccode\u003e3a8927e\u003c/code\u003e\u003c/a\u003e fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/a2369ca71c0ef633bf6e4fccd66d634eb379b371\"\u003e\u003ccode\u003ea2369ca\u003c/code\u003e\u003c/a\u003e chore(deps): bump the k8s-io group with 7 updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/90e10564f7ae746a153f3a03006e7061a54ad490\"\u003e\u003ccode\u003e90e1056\u003c/code\u003e\u003c/a\u003e add image index test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/911f2e908ae40b01ca95b857e94b8894043f64fd\"\u003e\u003ccode\u003e911f2e9\u003c/code\u003e\u003c/a\u003e fix pulling charts from OCI indices\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/76dad33fb1a2b6451920429b4f5f2dd575ea71bb\"\u003e\u003ccode\u003e76dad33\u003c/code\u003e\u003c/a\u003e Remove refactorring changes from coalesce_test.go\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/45c12f71407b6054a37d3e425d5293ee79a1ab37\"\u003e\u003ccode\u003e45c12f7\u003c/code\u003e\u003c/a\u003e Fix import\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/26c6f19f967941dbe53bfb5e52d419b3b3e46075\"\u003e\u003ccode\u003e26c6f19\u003c/code\u003e\u003c/a\u003e Update pkg/chart/common/util/coalesce_test.go\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/09f5129d49a14c9336cea6f33adf5f52889915ef\"\u003e\u003ccode\u003e09f5129\u003c/code\u003e\u003c/a\u003e Fix lint warning\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helm/helm/commit/417deb2b6b7504357b0f580b76f5eed1bb8a5270\"\u003e\u003ccode\u003e417deb2\u003c/code\u003e\u003c/a\u003e Preserve nil values in chart already\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/helm/helm/compare/v3.19.2...v3.20.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/in-toto/in-toto-golang` from 0.9.0 to 0.11.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/in-toto/in-toto-golang/releases\"\u003egithub.com/in-toto/in-toto-golang's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.11.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(deps): bump the all group with 2 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/453\"\u003ein-toto/in-toto-golang#453\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump the all group across 1 directory with 2 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/452\"\u003ein-toto/in-toto-golang#452\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/457\"\u003ein-toto/in-toto-golang#457\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/459\"\u003ein-toto/in-toto-golang#459\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ematch: Replace ^ with ! for negation in character classes by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/462\"\u003ein-toto/in-toto-golang#462\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/in-toto/in-toto-golang/compare/v0.10.0...v0.11.0\"\u003ehttps://github.com/in-toto/in-toto-golang/compare/v0.10.0...v0.11.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.10.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.54.0 to 1.55.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/232\"\u003ein-toto/in-toto-golang#232\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate maintainers and governance by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/233\"\u003ein-toto/in-toto-golang#233\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/234\"\u003ein-toto/in-toto-golang#234\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/spiffe/go-spiffe/v2 from 2.1.3 to 2.1.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/235\"\u003ein-toto/in-toto-golang#235\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/236\"\u003ein-toto/in-toto-golang#236\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix expired signature in test by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/241\"\u003ein-toto/in-toto-golang#241\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.8.0 to 0.9.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/240\"\u003ein-toto/in-toto-golang#240\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/spiffe/go-spiffe/v2 from 2.1.5 to 2.1.6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/239\"\u003ein-toto/in-toto-golang#239\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.55.0 to 1.56.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/242\"\u003ein-toto/in-toto-golang#242\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.56.0 to 1.56.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/243\"\u003ein-toto/in-toto-golang#243\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate GitHub Actions workflows by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/246\"\u003ein-toto/in-toto-golang#246\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.9.0 to 0.10.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/245\"\u003ein-toto/in-toto-golang#245\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremove linters that are no longer supported and add to make file by \u003ca href=\"https://github.com/pxp928\"\u003e\u003ccode\u003e@​pxp928\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/249\"\u003ein-toto/in-toto-golang#249\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd match products feature by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/237\"\u003ein-toto/in-toto-golang#237\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove unfinished link on record stop by \u003ca href=\"https://github.com/PradyumnaKrishna\"\u003e\u003ccode\u003e@​PradyumnaKrishna\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/248\"\u003ein-toto/in-toto-golang#248\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.56.1 to 1.56.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/250\"\u003ein-toto/in-toto-golang#250\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/secure-systems-lab/go-securesystemslib from 0.6.0 to 0.7.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/251\"\u003ein-toto/in-toto-golang#251\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.56.2 to 1.57.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/255\"\u003ein-toto/in-toto-golang#255\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd tests for coverage in envelope.go by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/256\"\u003ein-toto/in-toto-golang#256\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.10.0 to 0.11.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/257\"\u003ein-toto/in-toto-golang#257\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/setup-go from 4.0.1 to 4.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/258\"\u003ein-toto/in-toto-golang#258\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golangci/golangci-lint-action from 3.6.0 to 3.7.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/259\"\u003ein-toto/in-toto-golang#259\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixes filepath pattern matching in windows by \u003ca href=\"https://github.com/PradyumnaKrishna\"\u003e\u003ccode\u003e@​PradyumnaKrishna\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/254\"\u003ein-toto/in-toto-golang#254\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/checkout from 3.5.3 to 3.6.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/261\"\u003ein-toto/in-toto-golang#261\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/checkout from 3.6.0 to 4.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/262\"\u003ein-toto/in-toto-golang#262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.11.0 to 0.12.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/263\"\u003ein-toto/in-toto-golang#263\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.57.0 to 1.58.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/264\"\u003ein-toto/in-toto-golang#264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.58.0 to 1.58.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/266\"\u003ein-toto/in-toto-golang#266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDeprecate Provenance v1 struct in favor of /attestation protobufs by \u003ca href=\"https://github.com/marcelamelara\"\u003e\u003ccode\u003e@​marcelamelara\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/267\"\u003ein-toto/in-toto-golang#267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.58.1 to 1.58.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/269\"\u003ein-toto/in-toto-golang#269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/checkout from 4.0.0 to 4.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/270\"\u003ein-toto/in-toto-golang#270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDrop use of \u003ccode\u003eany\u003c/code\u003e for hash objects by \u003ca href=\"https://github.com/adityasaky\"\u003e\u003ccode\u003e@​adityasaky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/238\"\u003ein-toto/in-toto-golang#238\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.12.0 to 0.13.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/271\"\u003ein-toto/in-toto-golang#271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/google/go-cmp from 0.5.9 to 0.6.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/273\"\u003ein-toto/in-toto-golang#273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.58.2 to 1.58.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/272\"\u003ein-toto/in-toto-golang#272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/net from 0.12.0 to 0.17.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/274\"\u003ein-toto/in-toto-golang#274\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump google.golang.org/grpc from 1.58.3 to 1.59.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/pull/275\"\u003ein-toto/in-toto-golang#275\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/36d782ffb2ca3adbffcdce1fd971c23319dd4469\"\u003e\u003ccode\u003e36d782f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/462\"\u003e#462\u003c/a\u003e from in-toto/fix-negation-character\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/4a09e3bbc44bc687577b6532e57e8a4abfa5ddf4\"\u003e\u003ccode\u003e4a09e3b\u003c/code\u003e\u003c/a\u003e match: Replace ^ with ! for negation in character classes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/c3302e8bc36e46119f7ae17c07eb879ff3507caa\"\u003e\u003ccode\u003ec3302e8\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/459\"\u003e#459\u003c/a\u003e from in-toto/dependabot/go_modules/github.com/go-jose...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/016e87efbb55c6dd8772ce227002eeb1b6e3f593\"\u003e\u003ccode\u003e016e87e\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/5b9df76e685eaa0a950ea9ba3f4a5561e87e13ad\"\u003e\u003ccode\u003e5b9df76\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/457\"\u003e#457\u003c/a\u003e from in-toto/dependabot/go_modules/google.golang.org/...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/595b3fe0a13f481eb0ef898ccaff5e345e492a2f\"\u003e\u003ccode\u003e595b3fe\u003c/code\u003e\u003c/a\u003e chore(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/e396d248c9cf19f9e144f4e90c476af88742bf35\"\u003e\u003ccode\u003ee396d24\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/452\"\u003e#452\u003c/a\u003e from in-toto/dependabot/github_actions/all-502588e1ca\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/142b779059713332fe5c7856e98f1c564c6d6a09\"\u003e\u003ccode\u003e142b779\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/in-toto/in-toto-golang/issues/453\"\u003e#453\u003c/a\u003e from in-toto/dependabot/go_modules/all-d8ef5820aa\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/f741bcc43330554606b813fa0f8fe0c284fcdaea\"\u003e\u003ccode\u003ef741bcc\u003c/code\u003e\u003c/a\u003e chore(deps): bump the all group with 2 updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/in-toto/in-toto-golang/commit/c374dc9808137651fe8754eed363ec816cd59d2a\"\u003e\u003ccode\u003ec374dc9\u003c/code\u003e\u003c/a\u003e chore(deps): bump the all group across 1 directory with 2 updates\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/in-toto/in-toto-golang/compare/v0.9.0...v0.11.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/theupdateframework/go-tuf/v2` from 2.0.2 to 2.4.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/theupdateframework/go-tuf/releases\"\u003egithub.com/theupdateframework/go-tuf/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.4.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(deps): bump github.com/sigstore/sigstore from 1.10.3 to 1.10.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/718\"\u003etheupdateframework/go-tuf#718\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEnforce a stricter validation on the repo name for TAP 4 by \u003ca href=\"https://github.com/rdimitrov\"\u003e\u003ccode\u003e@​rdimitrov\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/720\"\u003etheupdateframework/go-tuf#720\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/theupdateframework/go-tuf/compare/v2.4.0...v2.4.1\"\u003ehttps://github.com/theupdateframework/go-tuf/compare/v2.4.0...v2.4.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.4.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd BitLength validation for SuccinctRoles by \u003ca href=\"https://github.com/rdimitrov\"\u003e\u003ccode\u003e@​rdimitrov\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/716\"\u003etheupdateframework/go-tuf#716\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd thread safety documentation for key types by \u003ca href=\"https://github.com/rdimitrov\"\u003e\u003ccode\u003e@​rdimitrov\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/715\"\u003etheupdateframework/go-tuf#715\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse restrictive permissions (0700) for cache directories by \u003ca href=\"https://github.com/rdimitrov\"\u003e\u003ccode\u003e@​rdimitrov\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/714\"\u003etheupdateframework/go-tuf#714\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBreaking change: Replace panic with error return in Key.ID() by \u003ca href=\"https://github.com/rdimitrov\"\u003e\u003ccode\u003e@​rdimitrov\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/713\"\u003etheupdateframework/go-tuf#713\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/theupdateframework/go-tuf/compare/v2.3.1...v2.4.0\"\u003ehttps://github.com/theupdateframework/go-tuf/compare/v2.3.1...v2.4.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.3.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(deps): bump golang.org/x/crypto from 0.40.0 to 0.45.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/702\"\u003etheupdateframework/go-tuf#702\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eResolve govulncheck errors by bumping go to 1.24.11 by \u003ca href=\"https://github.com/rdimitrov\"\u003e\u003ccode\u003e@​rdimitrov\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/707\"\u003etheupdateframework/go-tuf#707\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/704\"\u003etheupdateframework/go-tuf#704\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003emodern go (1.20+) improvements by \u003ca href=\"https://github.com/udf2457\"\u003e\u003ccode\u003e@​udf2457\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/705\"\u003etheupdateframework/go-tuf#705\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/sigstore/sigstore from 1.9.5 to 1.10.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/706\"\u003etheupdateframework/go-tuf#706\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/secure-systems-lab/go-securesystemslib from 0.9.1 to 0.10.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/708\"\u003etheupdateframework/go-tuf#708\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePerform type assertion by \u003ca href=\"https://github.com/kommendorkapten\"\u003e\u003ccode\u003e@​kommendorkapten\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/710\"\u003etheupdateframework/go-tuf#710\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd tests for failing type assertions by \u003ca href=\"https://github.com/rdimitrov\"\u003e\u003ccode\u003e@​rdimitrov\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/711\"\u003etheupdateframework/go-tuf#711\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eVerify threshold is valid by \u003ca href=\"https://github.com/kommendorkapten\"\u003e\u003ccode\u003e@​kommendorkapten\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/712\"\u003etheupdateframework/go-tuf#712\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/theupdateframework/go-tuf/compare/v2.3.0...v2.3.1\"\u003ehttps://github.com/theupdateframework/go-tuf/compare/v2.3.0...v2.3.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.3.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate the config for govulncheck by \u003ca href=\"https://github.com/rdimitrov\"\u003e\u003ccode\u003e@​rdimitrov\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/697\"\u003etheupdateframework/go-tuf#697\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump Go to 1.24.9 by \u003ca href=\"https://github.com/rdimitrov\"\u003e\u003ccode\u003e@​rdimitrov\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/698\"\u003etheupdateframework/go-tuf#698\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/theupdateframework/go-tuf/compare/v2.2.0...v2.3.0\"\u003ehttps://github.com/theupdateframework/go-tuf/compare/v2.2.0...v2.3.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.2.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: treat http 403 as an updater error by \u003ca href=\"https://github.com/MDr164\"\u003e\u003ccode\u003e@​MDr164\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/687\"\u003etheupdateframework/go-tuf#687\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/sigstore/sigstore from 1.8.4 to 1.8.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/646\"\u003etheupdateframework/go-tuf#646\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/cenkalti/backoff/v5 from 5.0.2 to 5.0.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/690\"\u003etheupdateframework/go-tuf#690\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/secure-systems-lab/go-securesystemslib from 0.9.0 to 0.9.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/691\"\u003etheupdateframework/go-tuf#691\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/692\"\u003etheupdateframework/go-tuf#692\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/stretchr/testify from 1.11.0 to 1.11.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/693\"\u003etheupdateframework/go-tuf#693\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/pull/694\"\u003etheupdateframework/go-tuf#694\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/theupdateframework/go-tuf/commit/d361e2ea24e427581343dee5c7a32b485d79fcc0\"\u003e\u003ccode\u003ed361e2e\u003c/code\u003e\u003c/a\u003e Enforce a stricter validation on the repo name for TAP 4 (\u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/issues/720\"\u003e#720\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/theupdateframework/go-tuf/commit/29aae36c83127913c24e881bc1f95dbb0f0961e6\"\u003e\u003ccode\u003e29aae36\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/sigstore/sigstore from 1.10.3 to 1.10.4 (\u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/issues/718\"\u003e#718\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/theupdateframework/go-tuf/commit/bde5f18dc95dfac365fc452ee4e278e5fd66d4b4\"\u003e\u003ccode\u003ebde5f18\u003c/code\u003e\u003c/a\u003e Replace panic with error return in Key.ID() (\u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/issues/713\"\u003e#713\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/theupdateframework/go-tuf/commit/f400bf4c20476804475d34239f01212e1041ec38\"\u003e\u003ccode\u003ef400bf4\u003c/code\u003e\u003c/a\u003e Use restrictive permissions (0700) for cache directories (\u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/issues/714\"\u003e#714\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/theupdateframework/go-tuf/commit/d2dbc180e74f4fe371392bb0b02d5a8659bc2fa4\"\u003e\u003ccode\u003ed2dbc18\u003c/code\u003e\u003c/a\u003e Add thread safety documentation for key types (\u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/issues/715\"\u003e#715\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/theupdateframework/go-tuf/commit/846cd4eccd92b1a333c89cb45cf4f179de74018f\"\u003e\u003ccode\u003e846cd4e\u003c/code\u003e\u003c/a\u003e Add BitLength validation for SuccinctRoles (\u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/issues/716\"\u003e#716\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/theupdateframework/go-tuf/commit/b38d91fdbc69dfe31fe9230d97dafe527ea854a0\"\u003e\u003ccode\u003eb38d91f\u003c/code\u003e\u003c/a\u003e Verify threshold is valid (\u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/issues/712\"\u003e#712\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/theupdateframework/go-tuf/commit/876cf2a82b320be6deb43f4ad629057b209a584e\"\u003e\u003ccode\u003e876cf2a\u003c/code\u003e\u003c/a\u003e Add tests for failing type assertions (\u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/issues/711\"\u003e#711\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/theupdateframework/go-tuf/commit/73345ab6b0eb7e59d525dac17a428f043074cef6\"\u003e\u003ccode\u003e73345ab\u003c/code\u003e\u003c/a\u003e Perform type assertion (\u003ca href=\"https://redirect.github.com/theupdateframework/go-tuf/issues/710\"\u003e#710\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/theupdateframework/go-tuf/commit/d3cdc4b2796d8c452ce17766f0cade2e80a3597d\"\u003e\u003ccode\u003ed3cdc4b\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/secure-systems-lab/go-securesystemslib from 0.9....\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/theupdateframework/go-tuf/compare/v2.0.2...v2.4.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/anchore/quill` from 0.5.1 to 0.7.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/anchore/quill/releases\"\u003egithub.com/anchore/quill's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003ev0.7.1\u003c/h1\u003e\n\u003ch3\u003eSecurity Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDo not allow for unbounded reads for user controlled input [\u003ca href=\"https://redirect.github.com/anchore/quill/pull/681\"\u003e#681\u003c/a\u003e \u003ca href=\"https://github.com/wagoodman\"\u003e\u003ccode\u003e@​wagoodman\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eAccount for excessive read limits in macho parsing [\u003ca href=\"https://redirect.github.com/anchore/quill/pull/682\"\u003e#682\u003c/a\u003e \u003ca href=\"https://github.com/wagoodman\"\u003e\u003ccode\u003e@​wagoodman\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eValidate developer log URL requests [\u003ca href=\"https://redirect.github.com/anchore/quill/pull/680\"\u003e#680\u003c/a\u003e \u003ca href=\"https://github.com/wagoodman\"\u003e\u003ccode\u003e@​wagoodman\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/anchore/quill/compare/v0.7.0...v0.7.1\"\u003e(Full Changelog)\u003c/a\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003ch1\u003ev0.7.0\u003c/h1\u003e\n\u003ch3\u003eAdded Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edry run signing and notarization process before running in production [\u003ca href=\"https://redirect.github.com/anchore/quill/issues/617\"\u003e#617\u003c/a\u003e \u003ca href=\"https://redirect.github.com/anchore/quill/pull/618\"\u003e#618\u003c/a\u003e \u003ca href=\"https://github.com/willmurphyscode\"\u003e\u003ccode\u003e@​willmurphyscode\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTeamID is not set during signing [\u003ca href=\"https://redirect.github.com/anchore/quill/issues/147\"\u003e#147\u003c/a\u003e \u003ca href=\"https://redirect.github.com/anchore/quill/pull/669\"\u003e#669\u003c/a\u003e \u003ca href=\"https://github.com/jflowers\"\u003e\u003ccode\u003e@​jflowers\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eAdditional Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTypo in install.sh help text [\u003ca href=\"https://redirect.github.com/anchore/quill/issues/546\"\u003e#546\u003c/a\u003e \u003ca href=\"https://redirect.github.com/anchore/quill/pull/549\"\u003e#549\u003c/a\u003e \u003ca href=\"https://github.com/popey\"\u003e\u003ccode\u003e@​popey\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003emigrate to latest tool ci patterns [\u003ca href=\"https://redirect.github.com/anchore/quill/pull/670\"\u003e#670\u003c/a\u003e \u003ca href=\"https://github.com/spiffcs\"\u003e\u003ccode\u003e@​spiffcs\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eupdate golang to v1.26 [\u003ca href=\"https://redirect.github.com/anchore/quill/pull/668\"\u003e#668\u003c/a\u003e \u003ca href=\"https://github.com/wagoodman\"\u003e\u003ccode\u003e@​wagoodman\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003edoc: Add llms.txt for the 🤖 🕷️ [\u003ca href=\"https://redirect.github.com/anchore/quill/pull/592\"\u003e#592\u003c/a\u003e \u003ca href=\"https://github.com/popey\"\u003e\u003ccode\u003e@​popey\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate dependencies [\u003ca href=\"https://redirect.github.com/anchore/quill/pull/627\"\u003e#627\u003c/a\u003e \u003ca href=\"https://github.com/wagoodman\"\u003e\u003ccode\u003e@​wagoodman\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eAdd periodic workflow to update certs [\u003ca href=\"https://redirect.github.com/anchore/quill/pull/608\"\u003e#608\u003c/a\u003e \u003ca href=\"https://github.com/wagoodman\"\u003e\u003ccode\u003e@​wagoodman\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003elint gh actions with zizmor [\u003ca href=\"https://redirect.github.com/anchore/quill/pull/581\"\u003e#581\u003c/a\u003e \u003ca href=\"https://github.com/willmurphyscode\"\u003e\u003ccode\u003e@​willmurphyscode\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eupdate to go 1.24.x [\u003ca href=\"https://redirect.github.com/anchore/quill/pull/543\"\u003e#543\u003c/a\u003e \u003ca href=\"https://github.com/westonsteimel\"\u003e\u003ccode\u003e@​westonsteimel\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eupdate runners to ubuntu-24.04 [\u003ca href=\"https://redirect.github.com/anchore/quill/pull/541\"\u003e#541\u003c/a\u003e \u003ca href=\"https://github.com/kzantow\"\u003e\u003ccode\u003e@​kzantow\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/anchore/quill/compare/v0.5.1...v0.7.0\"\u003e(Full Changelog)\u003c/a\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/quill/commit/9cdb0823ea1d2c45dcc11557f8c5cd7291c75d29\"\u003e\u003ccode\u003e9cdb082\u003c/code\u003e\u003c/a\u003e do not allow for unbounded reads for user controlled input (\u003ca href=\"https://redirect.github.com/anchore/quill/issues/681\"\u003e#681\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/quill/commit/80cf3fe082678af0ec4f9f8dd93f39189d2dc1fe\"\u003e\u003ccode\u003e80cf3fe\u003c/code\u003e\u003c/a\u003e account for excessive read limits in macho parsing code (\u003ca href=\"https://redirect.github.com/anchore/quill/issues/682\"\u003e#682\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/quill/commit/e41d66a517c2dc20ad8e9fbccffbdc6ba5ef0020\"\u003e\u003ccode\u003ee41d66a\u003c/code\u003e\u003c/a\u003e validate developer log URL requests (\u003ca href=\"https://redirect.github.com/anchore/quill/issues/680\"\u003e#680\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/quill/commit/899202c7eace3de7b3f4f7461bdfd1c4c38701db\"\u003e\u003ccode\u003e899202c\u003c/code\u003e\u003c/a\u003e update cred var values for p12 in release (\u003ca href=\"https://redirect.github.com/anchore/quill/issues/679\"\u003e#679\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/quill/commit/c73a37bd3b655633c1bd5466c2b2f65b2ae4032c\"\u003e\u003ccode\u003ec73a37b\u003c/code\u003e\u003c/a\u003e remove goreleaser config for release step + update tool refs (\u003ca href=\"https://redirect.github.com/anchore/quill/issues/678\"\u003e#678\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/quill/commit/95e119c6cb513a69f6b45d3e86a9fbcb2c77b669\"\u003e\u003ccode\u003e95e119c\u003c/code\u003e\u003c/a\u003e persist credentials for git (\u003ca href=\"https://redirect.github.com/anchore/quill/issues/677\"\u003e#677\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/quill/commit/02e765ab563811d7a3f0ede8df36977da92e8779\"\u003e\u003ccode\u003e02e765a\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/aws/aws-sdk-go-v2/config (\u003ca href=\"https://redirect.github.com/anchore/quill/issues/663\"\u003e#663\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/quill/commit/530bb7f3ddf667d262891b79fb15c0147d81cf11\"\u003e\u003ccode\u003e530bb7f\u003c/code\u003e\u003c/a\u003e add test notarize command (\u003ca href=\"https://redirect.github.com/anchore/quill/issues/618\"\u003e#618\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/quill/commit/3e8269c31055b1878a34c1954347254a42b37452\"\u003e\u003ccode\u003e3e8269c\u003c/code\u003e\u003c/a\u003e Set team ID during signing (\u003ca href=\"https://redirect.github.com/anchore/quill/issues/675\"\u003e#675\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/quill/commit/12b3e8eb4c06d7582da9725fad3bc7c268872752\"\u003e\u003ccode\u003e12b3e8e\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/blacktop/go-macho from 1.1.259 to 1.1.263 (\u003ca href=\"https://redirect.github.com/anchore/quill/issues/661\"\u003e#661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/anchore/quill/compare/v0.5.1...v0.7.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream` from 1.7.0 to 1.7.5\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/4599f78694cabb6853addabc6f92cb197fdb5647\"\u003e\u003ccode\u003e4599f78\u003c/code\u003e\u003c/a\u003e Release 2023-08-21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/2a439ce0fdda24816a5ea71c083765af67e93599\"\u003e\u003ccode\u003e2a439ce\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/46f31d76b34aefbc66bbfb08d2ef7e22267d4b66\"\u003e\u003ccode\u003e46f31d7\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/525486a4cfa9b8364ea5346a526dd1f92d3edc76\"\u003e\u003ccode\u003e525486a\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/b4e3176642b69937575f61f752f7d094fb6f4084\"\u003e\u003ccode\u003eb4e3176\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/2189\"\u003e#2189\u003c/a\u003e from aws/feat-presign-polly\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/30fe9b8de4c8538156248ae21b577a3e49170750\"\u003e\u003ccode\u003e30fe9b8\u003c/code\u003e\u003c/a\u003e Modify and Merge polly mod import\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f6c1d4839450e7f99850868570ff0c47850b72ca\"\u003e\u003ccode\u003ef6c1d48\u003c/code\u003e\u003c/a\u003e sync polly presigner from main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/396f97a998c5fab5bc7ee7bd4297c6d0f42b661e\"\u003e\u003ccode\u003e396f97a\u003c/code\u003e\u003c/a\u003e Release 2023-08-18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/08ab45438df135fc66f2eaf80032694ff2486db3\"\u003e\u003ccode\u003e08ab454\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/b50999bacbf780bf55d5c2b051c96e5c4467a5f6\"\u003e\u003ccode\u003eb50999b\u003c/code\u003e\u003c/a\u003e Update SDK's smithy-go dependency to v1.14.2\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/v1.7.0...service/m2/v1.7.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/buger/jsonparser` from 1.1.1 to 1.1.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/buger/jsonparser/releases\"\u003egithub.com/buger/jsonparser's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated travis to build for 1.13 to 1.15 by \u003ca href=\"https://github.com/janreggie\"\u003e\u003ccode\u003e@​janreggie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/225\"\u003ebuger/jsonparser#225\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\n\u003cul\u003e\n\u003cli\u003eeliminate 2 allocations in EachKey() by \u003ca href=\"https://github.com/Villenny\"\u003e\u003ccode\u003e@​Villenny\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/223\"\u003ebuger/jsonparser#223\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003efix issue \u003ca href=\"https://redirect.github.com/buger/jsonparser/issues/150\"\u003e#150\u003c/a\u003e (in deleting case) by \u003ca href=\"https://github.com/daria-kay\"\u003e\u003ccode\u003e@​daria-kay\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/226\"\u003ebuger/jsonparser#226\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efixing the oss-fuzz issue by \u003ca href=\"https://github.com/daria-kay\"\u003e\u003ccode\u003e@​daria-kay\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/227\"\u003ebuger/jsonparser#227\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix parseInt overflow check false negative by \u003ca href=\"https://github.com/carsonip\"\u003e\u003ccode\u003e@​carsonip\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/231\"\u003ebuger/jsonparser#231\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdded bespoke error for null cases by \u003ca href=\"https://github.com/jonomacd\"\u003e\u003ccode\u003e@​jonomacd\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/228\"\u003ebuger/jsonparser#228\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFuzzing: Add CIFuzz by \u003ca href=\"https://github.com/AdamKorcz\"\u003e\u003ccode\u003e@​AdamKorcz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/239\"\u003ebuger/jsonparser#239\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdded latest versions of go to tests by \u003ca href=\"https://github.com/moredure\"\u003e\u003ccode\u003e@​moredure\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/244\"\u003ebuger/jsonparser#244\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix EachKey pIdxFlags allocation by \u003ca href=\"https://github.com/unxcepted\"\u003e\u003ccode\u003e@​unxcepted\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/241\"\u003ebuger/jsonparser#241\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: prevent panic on negative slice index in Delete with malformed JSON (GO-2026-4514) by \u003ca href=\"https://github.com/dbarrosop\"\u003e\u003ccode\u003e@​dbarrosop\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/276\"\u003ebuger/jsonparser#276\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/janreggie\"\u003e\u003ccode\u003e@​janreggie\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/225\"\u003ebuger/jsonparser#225\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Villenny\"\u003e\u003ccode\u003e@​Villenny\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/223\"\u003ebuger/jsonparser#223\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/daria-kay\"\u003e\u003ccode\u003e@​daria-kay\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/226\"\u003ebuger/jsonparser#226\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/carsonip\"\u003e\u003ccode\u003e@​carsonip\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/231\"\u003ebuger/jsonparser#231\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jonomacd\"\u003e\u003ccode\u003e@​jonomacd\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/228\"\u003ebuger/jsonparser#228\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moredure\"\u003e\u003ccode\u003e@​moredure\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/244\"\u003ebuger/jsonparser#244\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/unxcepted\"\u003e\u003ccode\u003e@​unxcepted\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/241\"\u003ebuger/jsonparser#241\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dbarrosop\"\u003e\u003ccode\u003e@​dbarrosop\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/276\"\u003ebuger/jsonparser#276\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/buger/jsonparser/compare/v1.1.1...v1.1.2\"\u003ehttps://github.com/buger/jsonparser/compare/v1.1.1...v1.1.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/a69e7e01cd4ad67bdfd3ac2c080b9212af16f4b0\"\u003e\u003ccode\u003ea69e7e0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/buger/jsonparser/issues/276\"\u003e#276\u003c/a\u003e from dbarrosop/master\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/d3eacc0bab779d6cf98221f5268828fff287876e\"\u003e\u003ccode\u003ed3eacc0\u003c/code\u003e\u003c/a\u003e fix: prevent panic on negative slice index in Delete with malformed JSON (GO-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/61b32cfdfa0f5d368ef7c7daef28ce12d538740f\"\u003e\u003ccode\u003e61b32cf\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/buger/jsonparser/issues/241\"\u003e#241\u003c/a\u003e from unxcepted/master\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/2181e8398f18397c9cacbaea9889314bb585e868\"\u003e\u003ccode\u003e2181e83\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/buger/jsonparser/issues/244\"\u003e#244\u003c/a\u003e from ScaleChamp/patch-2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/1510b5194182fc2fb898f28cdbceb42fd7258bfa\"\u003e\u003ccode\u003e1510b51\u003c/code\u003e\u003c/a\u003e Added latest versions of go to tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/6fc2e488ed3cc4f1f1debec3b0c70715bd7be6fd\"\u003e\u003ccode\u003e6fc2e48\u003c/code\u003e\u003c/a\u003e fix: eachkey allocation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/a6f867eb7787e4ec54536b77b5d628ddf5c4f73d\"\u003e\u003ccode\u003ea6f867e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/buger/jsonparser/issues/239\"\u003e#239\u003c/a\u003e from AdamKorcz/cifuzz1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/cbc01fdbbe131706e89eeaaf0cd917760d8d3949\"\u003e\u003ccode\u003ecbc01fd\u003c/code\u003e\u003c/a\u003e Fuzzing: Add CIFuzz\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/dc92d6932a1272b4d8f485f798a88c3a75106256\"\u003e\u003ccode\u003edc92d69\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/buger/jsonparser/issues/228\"\u003e#228\u003c/a\u003e from jonomacd/null-handling\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/2d9d6343e8621ddc18c70749663f74bc584c0de4\"\u003e\u003ccode\u003e2d9d634\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/buger/jsonparser/issues/231\"\u003e#231\u003c/a\u003e from carsonip/fix-parseint-overflow-check\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/buger/jsonparser/compare/v1.1.1...v1.1.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/cloudflare/circl` from 1.6.1 to 1.6.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cloudflare/circl/releases\"\u003egithub.com/cloudflare/circl's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eCIRCL v1.6.3\u003c/h2\u003e\n\u003cp\u003eFix a bug on ecc/p384 scalar multiplication.\u003c/p\u003e\n\u003ch3\u003eWhat's Changed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esign/mldsa: Check opts for nil value  by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/582\"\u003ecloudflare/circl#582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eecc/p384: Point addition must handle point doubling case. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/583\"\u003ecloudflare/circl#583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease CIRCL v1.6.3 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/584\"\u003ecloudflare/circl#584\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNew SLH-DSA, improvements in ML-DSA for arm64.\u003c/li\u003e\n\u003cli\u003eTested compilation on WASM.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize pairing product computation by moving exponentiations to G1. by \u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esign: Adding SLH-DSA signature by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/512\"\u003ecloudflare/circl#512\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate code generators to CIRCL v1.6.1. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/548\"\u003ecloudflare/circl#548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eML-DSA: Add preliminary Wycheproof test vectors by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/552\"\u003ecloudflare/circl#552\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ego fmt by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/554\"\u003ecloudflare/circl#554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egz-compressing test vectors, use of HexBytes and ReadGzip functions. b...\n\n_Description has been truncated_\n\n\u003c!-- This is an auto-generated description by cubic. --\u003e\n---\n## Summary by cubic\nUpdate Go dependencies across the repo to pick up security fixes and performance improvements. Notable changes include gRPC and Helm security patches and a major `github.com/agentgateway/agentgateway` upgrade with faster CEL evaluation.\n\n- **Dependencies**\n  - `google.golang.org/grpc` → 1.79.3: fixes an auth bypass by rejecting malformed :path headers.\n  - `helm.sh/helm/v3` → 3.20.2: security patch for chart extraction path handling.\n  - `github.com/agentgateway/agentgateway` → 0.12.0: CEL rewrite with large perf gains and minor behavior tweaks.\n  - `github.com/buger/jsonparser` → 1.1.2: fixes panic on malformed JSON.\n  - `github.com/cloudflare/circl` → 1.6.3: bug fix in P-384 scalar multiplication.\n  - `github.com/sigstore/cosign/v2` → 2.6.2 and related `sigstore/*` bumps: supply chain signing updates.\n  - `github.com/moby/spdystream` → 0.5.1: patch applied in root and `hack/utils/applier`.\n  - Tooling/libs: Go 1.25.5, k8s libs v0.35.1, OpenTelemetry 1.39.0, `helm.sh/helm/v3` 3.20.2.\n\n- **Migration**\n  - Review CEL policies with `agentgateway` v0.12.0 (e.g., `base64.encode` naming and stricter variable lookups).\n  - Run an end-to-end smoke test to confirm routes with path-based auth still pass with gRPC’s stricter path validation.\n\n\u003csup\u003eWritten for commit f2d9194e186a8d9e9e41df92f41d5245e7adaa82. Summary will update on new commits.\u003c/sup\u003e\n\n\u003ca href=\"https://cubic.dev/pr/EmilynnJ/kgateway/pull/2?utm_source=github\" target=\"_blank\" rel=\"noopener noreferrer\" data-no-image-dialog=\"true\"\u003e\u003cpicture\u003e\u003csource media=\"(prefers-color-scheme: dark)\" srcset=\"https://cubic.dev/buttons/review-in-cubic-dark.svg\"\u003e\u003csource media=\"(prefers-color-scheme: light)\" srcset=\"https://cubic.dev/buttons/review-in-cubic-light.svg\"\u003e\u003cimg alt=\"Review in cubic\" src=\"https://cubic.dev/buttons/review-in-cubic-dark.svg\"\u003e\u003c/picture\u003e\u003c/a\u003e\n\n\u003c!-- End of auto-generated description by cubic. --\u003e\n\n\n\n\u003c!-- Macroscope's pull request summary starts here --\u003e\n\u003c!-- Macroscope will only edit the content between these invisible markers, and the markers themselves will not be visible in the GitHub rendered markdown. --\u003e\n\u003c!-- If you delete either of the start / end markers from your PR's description, Macroscope will append its summary at the bottom of the description. --\u003e\n\u003e [!NOTE]\n\u003e ### Bump Go dependencies across root and applier modules with 25 updates\n\u003e Updates [go.mod](https://github.com/EmilynnJ/kgateway/pull/2/files#diff-33ef32bf6c23acb95f5902d7097b7a1d5128ca061167ec0716715b0b9eeaa5f6) and [hack/utils/applier/go.mod](https://github.com/EmilynnJ/kgateway/pull/2/files#diff-7d16860419c22926d06b08ae9b67f33b83236c49e7008e3b4c652e3c87df9748) to their latest versions. Key upgrades include Kubernetes libraries to v0.35.1, Helm v3 to v3.20.2, agentgateway to v0.12.0, gRPC/protobuf, and extensive AWS SDK v1/v2 updates. Several indirect dependencies are removed (e.g. `go-chi/chi`, `mitchellh/mapstructure`, `sourcegraph/conc`) and new ones added (e.g. `moby/moby`, `coreos/go-oidc/v3`). Risk: transitive dependency additions and removals may surface unexpected build or runtime behavior in modules that relied on removed packages.\n\u003e\n\u003e \u003c!-- Macroscope's review summary starts here --\u003e\n\u003e\n\u003e \u003csup\u003e\u003ca href=\"https://app.macroscope.com\"\u003eMacroscope\u003c/a\u003e summarized f2d9194.\u003c/sup\u003e\n\u003e \u003c!-- Macroscope's review summary ends here --\u003e\n\u003e\n\u003c!-- macroscope-ui-refresh --\u003e\n\u003c!-- Macroscope's pull request summary ends here --\u003e","html_url":"https://github.com/EmilynnJ/kgateway/pull/2","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/EmilynnJ%2Fkgateway/issues/2","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2/packages"}},{"old_version":"1.6.1","new_version":"1.6.3","update_type":"patch","path":null,"pr_created_at":"2026-05-14T02:52:17.000Z","version_change":"1.6.1 → 1.6.3","issue":{"uuid":"4442737548","node_id":"PR_kwDOPf3WO87bW9Ht","number":4,"state":"open","title":"chore(deps): bump the go_modules group across 2 directories with 8 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-14T02:52:17.000Z","updated_at":"2026-05-14T02:52:41.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"go_modules","update_count":8,"packages":[{"name":"github.com/docker/cli","old_version":"28.3.3+incompatible","new_version":"29.2.0+incompatible","repository_url":"https://github.com/docker/cli"},{"name":"github.com/go-git/go-git/v5","old_version":"5.16.2","new_version":"5.19.0","repository_url":"https://github.com/go-git/go-git"},{"name":"go.opentelemetry.io/otel","old_version":"1.37.0","new_version":"1.43.0"},{"name":"google.golang.org/grpc","old_version":"1.74.2","new_version":"1.79.3","repository_url":"https://github.com/grpc/grpc-go"},{"name":"github.com/cloudflare/circl","old_version":"1.6.1","new_version":"1.6.3"},{"name":"github.com/ethereum/go-ethereum","old_version":"1.16.8","new_version":"1.17.0","repository_url":"https://github.com/ethereum/go-ethereum"},{"name":"github.com/go-git/go-billy/v5","old_version":"5.6.2","new_version":"5.9.0"},{"name":"go.opentelemetry.io/otel/sdk","old_version":"1.36.0","new_version":"1.39.0"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 4 updates in the / directory: [github.com/docker/cli](https://github.com/docker/cli), [github.com/go-git/go-git/v5](https://github.com/go-git/go-git), [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [github.com/ethereum/go-ethereum](https://github.com/ethereum/go-ethereum).\nBumps the go_modules group with 2 updates in the /pkg directory: [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [github.com/ethereum/go-ethereum](https://github.com/ethereum/go-ethereum).\n\nUpdates `github.com/docker/cli` from 28.3.3+incompatible to 29.2.0+incompatible\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/0b9d1985dbf919678745f122b12b46f730b97d87\"\u003e\u003ccode\u003e0b9d198\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6764\"\u003e#6764\u003c/a\u003e from vvoland/update-docker\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/9c9ec7358833bb3e5622a166673744fca7fefac4\"\u003e\u003ccode\u003e9c9ec73\u003c/code\u003e\u003c/a\u003e vendor: github.com/moby/moby/client v0.2.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/bab3e81e1d8874a2d4f26afc02225ee537d0b15d\"\u003e\u003ccode\u003ebab3e81\u003c/code\u003e\u003c/a\u003e vendor: github.com/moby/moby/api v1.53.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/2e64fc162ab632a530f7191cc6af65c22356ea0d\"\u003e\u003ccode\u003e2e64fc1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6367\"\u003e#6367\u003c/a\u003e from thaJeztah/template_slicejoin\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/1f2ba2ac9d8c92870f7cce89dfa17d89d3375c19\"\u003e\u003ccode\u003e1f2ba2a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6760\"\u003e#6760\u003c/a\u003e from thaJeztah/container_create_fix_error\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/e34a3422cc32c808d2e8b0e0ef51112d53fa896d\"\u003e\u003ccode\u003ee34a342\u003c/code\u003e\u003c/a\u003e templates: make \u0026quot;join\u0026quot; work with non-string slices and map values\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/a86356d42f918968579e670b51bc85dc45982a33\"\u003e\u003ccode\u003ea86356d\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6763\"\u003e#6763\u003c/a\u003e from thaJeztah/bump_mapstructure\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/771660a17e56116eb32677a6d83c5210e5092194\"\u003e\u003ccode\u003e771660a\u003c/code\u003e\u003c/a\u003e vendor: github.com/go-viper/mapstructure/v2 v2.5.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/9cff36b35a828be8d137bc5de4983b7e3fef1614\"\u003e\u003ccode\u003e9cff36b\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6762\"\u003e#6762\u003c/a\u003e from thaJeztah/bump_x_deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/08ed2bc6e8bc49ad988ecd44633620a48fb10967\"\u003e\u003ccode\u003e08ed2bc\u003c/code\u003e\u003c/a\u003e cli/command/container: make injecting config.json failures a warning\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/docker/cli/compare/v28.3.3...v29.2.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-git/v5` from 5.16.2 to 5.19.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-git/releases\"\u003egithub.com/go-git/go-git/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.19.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.18.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2010\"\u003ego-git/go-git#2010\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Bump sha1cd and go-billy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2060\"\u003ego-git/go-git#2060\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Align object encoding with upstream by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2065\"\u003ego-git/go-git#2065\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.18.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eplumbing: transport/http, Add support for followRedirects policy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2004\"\u003ego-git/go-git#2004\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.17.1 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1941\"\u003ego-git/go-git#1941\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edotgit: skip writing pack files that already exist on disk by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1944\"\u003ego-git/go-git#1944\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e:warning: This release fixes a bug (\u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1942\"\u003ego-git/go-git#1942\u003c/a\u003e) that blocked some users from upgrading to \u003ccode\u003ev5.17.1\u003c/code\u003e. Thanks \u003ca href=\"https://github.com/pskrbasu\"\u003e\u003ccode\u003e@​pskrbasu\u003c/code\u003e\u003c/a\u003e for reporting it. :bow:\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.1...v5.17.2\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.1...v5.17.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/cloudflare/circl to v1.6.3 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1930\"\u003ego-git/go-git#1930\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/index, Improve v4 entry name validation by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1935\"\u003ego-git/go-git#1935\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/idxfile, Fix version and fanout checks by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1937\"\u003ego-git/go-git#1937\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.16.5 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1839\"\u003ego-git/go-git#1839\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: worktree, optimize infiles function for very large repos by \u003ca href=\"https://github.com/k-anshul\"\u003e\u003ccode\u003e@​k-anshul\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1853\"\u003ego-git/go-git#1853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: Add strict checks for supported extensions by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1861\"\u003ego-git/go-git#1861\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebackport, git: Improve Status() speed with new index.ModTime check by \u003ca href=\"https://github.com/cedric-appdirect\"\u003e\u003ccode\u003e@​cedric-appdirect\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1862\"\u003ego-git/go-git#1862\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003estorage: filesystem, Avoid overwriting loose obj files by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1864\"\u003ego-git/go-git#1864\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.16.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module golang.org/x/crypto to v0.45.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1744\"\u003ego-git/go-git#1744\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Bump Go test versions to 1.23-1.25 (v5) by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1746\"\u003ego-git/go-git#1746\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] git: worktree, Don't delete local untracked files when resetting worktree by \u003ca href=\"https://github.com/Ch00k\"\u003e\u003ccode\u003e@​Ch00k\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1800\"\u003ego-git/go-git#1800\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/bc930f4cbe095a3e1d49273655f73fcef7d41a42\"\u003e\u003ccode\u003ebc930f4\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2065\"\u003e#2065\u003c/a\u003e from go-git/commit-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/d315264343cead712aa9eb56475c2ec96f5ecef1\"\u003e\u003ccode\u003ed315264\u003c/code\u003e\u003c/a\u003e plumbing: object, Reset object before decode\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/6e1d34890a4dae8a0df738e531234bd60b7e9b66\"\u003e\u003ccode\u003e6e1d348\u003c/code\u003e\u003c/a\u003e plumbing: object, Align Tree handling with upstream\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/e134ba34cf95ed0167e5b1df36a933d7bde9d02d\"\u003e\u003ccode\u003ee134ba3\u003c/code\u003e\u003c/a\u003e tests: Skip double checks in Git v2.11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/1971422f6b1bec9176061b3293306981cfff981e\"\u003e\u003ccode\u003e1971422\u003c/code\u003e\u003c/a\u003e tests: Add git conformance tests for signing verification\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/a387aa8857a8fbba8e74b7f5485e9e030669ab5d\"\u003e\u003ccode\u003ea387aa8\u003c/code\u003e\u003c/a\u003e plumbing: object, Add ErrMalformedTag\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/f415670d906b5c6169d1fdc64f3f9f1d33eb6f9c\"\u003e\u003ccode\u003ef415670\u003c/code\u003e\u003c/a\u003e plumbing: object, Decode Tag headers via a state machine\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/5b0cd38a62e2336bb5f1a2ad0eb8ac8f9e7b740e\"\u003e\u003ccode\u003e5b0cd38\u003c/code\u003e\u003c/a\u003e plumbing: object, Reject multi-signature commits at Verify\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/fe8ed6223a6079d9fd84d853362a996e7df175fb\"\u003e\u003ccode\u003efe8ed62\u003c/code\u003e\u003c/a\u003e plumbing: object, Align Tag.EncodeWithoutSignature with Commit\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/98e337d5bdc4c0536a40ab7381b2231f7e0b15cd\"\u003e\u003ccode\u003e98e337d\u003c/code\u003e\u003c/a\u003e plumbing: object, Add support for Tag.SignatureSHA256\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.2...v5.19.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel` from 1.37.0 to 1.43.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.43.0/0.65.0/0.19.0] 2026-04-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eIsRandom\u003c/code\u003e and \u003ccode\u003eWithRandom\u003c/code\u003e on \u003ccode\u003eTraceFlags\u003c/code\u003e, and \u003ccode\u003eIsRandom\u003c/code\u003e on \u003ccode\u003eSpanContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e for \u003ca href=\"https://www.w3.org/TR/trace-context-2/#random-trace-id-flag\"\u003eW3C Trace Context Level 2 Random Trace ID Flag\u003c/a\u003e support. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012\"\u003e#8012\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd service detection with \u003ccode\u003eWithService\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642\"\u003e#7642\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eDefaultWithContext\u003c/code\u003e and \u003ccode\u003eEnvironmentWithContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to support plumbing \u003ccode\u003econtext.Context\u003c/code\u003e through default and environment detectors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051\"\u003e#8051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd support for per-series start time tracking for cumulative metrics in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true\u003c/code\u003e to enable. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060\"\u003e#8060\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithCardinalityLimitSelector\u003c/code\u003e for metric reader for configuring cardinality limits specific to the instrument kind. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855\"\u003e#7855\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce the \u003ccode\u003eEMPTY\u003c/code\u003e Type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to reflect that an empty value is now a valid value, with \u003ccode\u003eINVALID\u003c/code\u003e remaining as a deprecated alias of \u003ccode\u003eEMPTY\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove slice handling in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to optimize short slice values with fixed-size fast paths. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039\"\u003e#8039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of span metric recording in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e by returning early if self-observability is not enabled. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067\"\u003e#8067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove formatting of metric data diffs in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073\"\u003e#8073\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeprecated\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eINVALID\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. Use \u003ccode\u003eEMPTY\u003c/code\u003e instead. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReturn spec-compliant \u003ccode\u003eTraceIdRatioBased\u003c/code\u003e description. This is a breaking behavioral change, but it is necessary to\nmake the implementation \u003ca href=\"https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased\"\u003espec-compliant\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027\"\u003e#8027\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a race condition in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056\"\u003e#8056\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003ekenv\u003c/code\u003e command on BSD. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to correctly handle HTTP2 GOAWAY frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.40.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985\"\u003e#7985\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9276201a64b623606e3eaa0d61ae8ee6d62756c0\"\u003e\u003ccode\u003e9276201\u003c/code\u003e\u003c/a\u003e Release v1.43.0 / v0.65.0 / v0.19.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8128\"\u003e#8128\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/61b8c9466c4e6b17e69b622279fe9b63fb15c89a\"\u003e\u003ccode\u003e61b8c94\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8131\"\u003e#8131\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/97a086e82ffe01502f4c620e9c447efa229e2a23\"\u003e\u003ccode\u003e97a086e\u003c/code\u003e\u003c/a\u003e chore(deps): update github.com/golangci/dupl digest to c99c5cf (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8122\"\u003e#8122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/5e363de517dba6db62736b2f5cdef0e0929b4cd0\"\u003e\u003ccode\u003e5e363de\u003c/code\u003e\u003c/a\u003e limit response body size for OTLP HTTP exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/35214b60138eac8dec97a2d2b851d8c8471680c7\"\u003e\u003ccode\u003e35214b6\u003c/code\u003e\u003c/a\u003e Use an absolute path when calling bsd kenv (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/290024ceaf695f9cdbf29a0c6731a317d92bc361\"\u003e\u003ccode\u003e290024c\u003c/code\u003e\u003c/a\u003e fix(deps): update module google.golang.org/grpc to v1.80.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8121\"\u003e#8121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/e70658e098033d6bb5ec1b399de16bbb2642f6dc\"\u003e\u003ccode\u003ee70658e\u003c/code\u003e\u003c/a\u003e fix: support getBody in otelploghttp (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4afe468e3b4859c949a1c1e8d92684d43d86ef8a\"\u003e\u003ccode\u003e4afe468\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 9d38bb4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8117\"\u003e#8117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b9ca729776309e3c08fe700c131797a3b4d10634\"\u003e\u003ccode\u003eb9ca729\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8115\"\u003e#8115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/69472ec56cb7674d55ca2e2bcb04dea73228ab79\"\u003e\u003ccode\u003e69472ec\u003c/code\u003e\u003c/a\u003e chore(deps): update fossas/fossa-action action to v1.9.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8118\"\u003e#8118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.37.0...v1.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google.golang.org/grpc` from 1.74.2 to 1.79.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc-go/releases\"\u003egoogle.golang.org/grpc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 1.79.3\u003c/h2\u003e\n\u003ch1\u003eSecurity\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eserver: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted \u0026quot;deny\u0026quot; rules in interceptors like \u003ccode\u003egrpc/authz\u003c/code\u003e. Any request with a non-canonical path is now immediately rejected with an \u003ccode\u003eUnimplemented\u003c/code\u003e error. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.2\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003estats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8874\"\u003egrpc/grpc-go#8874\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.1\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003egrpc: Remove the \u003ccode\u003e-dev\u003c/code\u003e suffix from the User-Agent header. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8902\"\u003egrpc/grpc-go#8902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.0\u003c/h2\u003e\n\u003ch1\u003eAPI Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003emem: Add experimental API \u003ccode\u003eSetDefaultBufferPool\u003c/code\u003e to change the default buffer pool. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8806\"\u003e#8806\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/vanja-p\"\u003e\u003ccode\u003e@​vanja-p\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eexperimental/stats: Update \u003ccode\u003eMetricsRecorder\u003c/code\u003e to require embedding the new \u003ccode\u003eUnimplementedMetricsRecorder\u003c/code\u003e (a no-op struct) in all implementations for forward compatibility. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBehavior Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ebalancer/weightedtarget: Remove handling of \u003ccode\u003eAddresses\u003c/code\u003e and only handle \u003ccode\u003eEndpoints\u003c/code\u003e in resolver updates. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8841\"\u003e#8841\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eNew Features\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eexperimental/stats: Add support for asynchronous gauge metrics through the new \u003ccode\u003eAsyncMetricReporter\u003c/code\u003e and \u003ccode\u003eRegisterAsyncReporter\u003c/code\u003e APIs. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epickfirst: Add support for weighted random shuffling of endpoints, as described in \u003ca href=\"https://redirect.github.com/grpc/proposal/pull/535\"\u003egRFC A113\u003c/a\u003e.\n\u003cul\u003e\n\u003cli\u003eThis is enabled by default, and can be turned off using the environment variable \u003ccode\u003eGRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds: Implement \u003ccode\u003e:authority\u003c/code\u003e rewriting, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A81-xds-authority-rewriting.md\"\u003egRFC A81\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8779\"\u003e#8779\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebalancer/randomsubsetting: Implement the \u003ccode\u003erandom_subsetting\u003c/code\u003e LB policy, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A68-random-subsetting.md\"\u003egRFC A68\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8650\"\u003e#8650\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/marek-szews\"\u003e\u003ccode\u003e@​marek-szews\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/tls: Fix a bug where the port was not stripped from the authority override before validation. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8726\"\u003e#8726\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/Atul1710\"\u003e\u003ccode\u003e@​Atul1710\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds/priority: Fix a bug causing delayed failover to lower-priority clusters when a higher-priority cluster is stuck in \u003ccode\u003eCONNECTING\u003c/code\u003e state. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8813\"\u003e#8813\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ehealth: Fix a bug where health checks failed for clients using legacy compression options (\u003ccode\u003eWithDecompressor\u003c/code\u003e or \u003ccode\u003eRPCDecompressor\u003c/code\u003e). (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8765\"\u003e#8765\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/sanki92\"\u003e\u003ccode\u003e@​sanki92\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003etransport: Fix an issue where the HTTP/2 server could skip header size checks when terminating a stream early. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8769\"\u003e#8769\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eserver: Propagate status detail headers, if available, when terminating a stream during request header processing. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8754\"\u003e#8754\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ePerformance Improvements\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/alts: Optimize read buffer alignment to reduce copies. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8791\"\u003e#8791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emem: Optimize pooling and creation of \u003ccode\u003ebuffer\u003c/code\u003e objects.  (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8784\"\u003e#8784\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etransport: Reduce slice re-allocations by reserving slice capacity. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8797\"\u003e#8797\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/dda86dbd9cecb8b35b58c73d507d81d67761205f\"\u003e\u003ccode\u003edda86db\u003c/code\u003e\u003c/a\u003e Change version to 1.79.3 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8983\"\u003e#8983\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/72186f163e75a065c39e6f7df9b6dea07fbdeff5\"\u003e\u003ccode\u003e72186f1\u003c/code\u003e\u003c/a\u003e grpc: enforce strict path checking for incoming requests on the server (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/97ca3522b239edf6813e2b1106924e9d55e89d43\"\u003e\u003ccode\u003e97ca352\u003c/code\u003e\u003c/a\u003e Changing version to 1.79.3-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8954\"\u003e#8954\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/8902ab6efea590f5b3861126559eaa26fa9783b2\"\u003e\u003ccode\u003e8902ab6\u003c/code\u003e\u003c/a\u003e Change the version to release 1.79.2 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8947\"\u003e#8947\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/a9286705aa689bee321ec674323b6896284f3e02\"\u003e\u003ccode\u003ea928670\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8874\"\u003e#8874\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8904\"\u003e#8904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/06df3638c0bcee88197b1033b3ba83e1eb8bc010\"\u003e\u003ccode\u003e06df363\u003c/code\u003e\u003c/a\u003e Change version to 1.79.2-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8903\"\u003e#8903\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/782f2de44f597af18a120527e7682a6670d84289\"\u003e\u003ccode\u003e782f2de\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8902\"\u003e#8902\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/850eccbb2257bd2de6ac28ee88a7172ab6175629\"\u003e\u003ccode\u003e850eccb\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8851\"\u003e#8851\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/765ff056b6890f6c8341894df4e9668e9bfc18ef\"\u003e\u003ccode\u003e765ff05\u003c/code\u003e\u003c/a\u003e Change version to 1.79.0 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8850\"\u003e#8850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/68804be0e78ed0365bb5a576dedc12e2168ed63e\"\u003e\u003ccode\u003e68804be\u003c/code\u003e\u003c/a\u003e Cherry pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8896\"\u003e#8896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/grpc/grpc-go/compare/v1.74.2...v1.79.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/cloudflare/circl` from 1.6.1 to 1.6.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cloudflare/circl/releases\"\u003egithub.com/cloudflare/circl's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eCIRCL v1.6.3\u003c/h2\u003e\n\u003cp\u003eFix a bug on ecc/p384 scalar multiplication.\u003c/p\u003e\n\u003ch3\u003eWhat's Changed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esign/mldsa: Check opts for nil value  by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/582\"\u003ecloudflare/circl#582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eecc/p384: Point addition must handle point doubling case. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/583\"\u003ecloudflare/circl#583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease CIRCL v1.6.3 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/584\"\u003ecloudflare/circl#584\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNew SLH-DSA, improvements in ML-DSA for arm64.\u003c/li\u003e\n\u003cli\u003eTested compilation on WASM.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize pairing product computation by moving exponentiations to G1. by \u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esign: Adding SLH-DSA signature by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/512\"\u003ecloudflare/circl#512\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate code generators to CIRCL v1.6.1. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/548\"\u003ecloudflare/circl#548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eML-DSA: Add preliminary Wycheproof test vectors by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/552\"\u003ecloudflare/circl#552\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ego fmt by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/554\"\u003ecloudflare/circl#554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egz-compressing test vectors, use of HexBytes and ReadGzip functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/555\"\u003ecloudflare/circl#555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Removes use of elliptic Marshal and Unmarshal functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/556\"\u003ecloudflare/circl#556\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport encoding/decoding ML-DSA private keys (as long as they contain seeds) by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/559\"\u003ecloudflare/circl#559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to golangci-lint v2 by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/560\"\u003ecloudflare/circl#560\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreparation for ARM64 Implementation of poly operations for dilithium package. by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eprepare power2Round for custom implementations in assembly by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/564\"\u003ecloudflare/circl#564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eARM64 implementation for poly.PackLe16 by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/563\"\u003ecloudflare/circl#563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polyMulBy2toD by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/565\"\u003ecloudflare/circl#565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polySub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/566\"\u003ecloudflare/circl#566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: add byteLen method for short groups and RandomScalar uses rand.Int by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/568\"\u003ecloudflare/circl#568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of poly.Add/Sub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/572\"\u003ecloudflare/circl#572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Adding cryptobyte marshaling to scalars by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/569\"\u003ecloudflare/circl#569\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumping up to Go1.25 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/574\"\u003ecloudflare/circl#574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: Including WASM compilation. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/577\"\u003ecloudflare/circl#577\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to using package-declared HPKE errors for shortkem instead of standard library errors by \u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease v1.6.2 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/579\"\u003ecloudflare/circl#579\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/24ae53c5d6f7fe18203adc125ba3ed76a38703e1\"\u003e\u003ccode\u003e24ae53c\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/581020bd4a836b8ce7bd4e414ba2884c07dbc906\"\u003e\u003ccode\u003e581020b\u003c/code\u003e\u003c/a\u003e Rename method to oddMultiplesProjective.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/12209a4566605692a8402594e367a5aed5148460\"\u003e\u003ccode\u003e12209a4\u003c/code\u003e\u003c/a\u003e Removing unused cmov for jacobian points.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/fcba359f4178645d2c9e50f29ab6966337da4b95\"\u003e\u003ccode\u003efcba359\u003c/code\u003e\u003c/a\u003e ecc/p384: use of complete projective formulas for scalar multiplication.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/5e1bae8d8c2df4e717c2c5c2d5b5d60b629b2ac6\"\u003e\u003ccode\u003e5e1bae8\u003c/code\u003e\u003c/a\u003e ecc/p384: handle point doubling in point addition with Jacobian coordinates.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/341604685ff97e8f7440ae4b4711ba1c118c648c\"\u003e\u003ccode\u003e3416046\u003c/code\u003e\u003c/a\u003e Check opts for nil value.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/a763d47a6dce43d1f4f7b697d1d7810463a526f6\"\u003e\u003ccode\u003ea763d47\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3c70bf9ad53b681fbe5ba6067e454a86549fee8a\"\u003e\u003ccode\u003e3c70bf9\u003c/code\u003e\u003c/a\u003e Bump x/crypto x/sys dependencies.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3f0f15b2bfe67bad81a35e8aec81ae42ca78349d\"\u003e\u003ccode\u003e3f0f15b\u003c/code\u003e\u003c/a\u003e Revert to using package-declared HPKE errors for shortkem instead of standard...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/23491bd573cf29b6f567057a158203a2c9dfa30d\"\u003e\u003ccode\u003e23491bd\u003c/code\u003e\u003c/a\u003e Adding generic Power2Round method.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/ethereum/go-ethereum` from 1.16.8 to 1.17.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ethereum/go-ethereum/releases\"\u003egithub.com/ethereum/go-ethereum's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eEezo-Inlaid Circuitry (v1.17.0)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cp\u003eThis is a feature release, with all accumulated development from the last 3 months. See below for the highlights.\u003c/p\u003e\n\u003cp\u003eNote that this release contains multiple critical security fixes, as well as many bug fixes, and is recommended for all users. However, if you are cautious about upgrades, you can also install v1.16.9 which has just the critical security fixes. Specifically, this release fixes \u003ca href=\"https://github.com/ethereum/go-ethereum/security/advisories/GHSA-689v-6xwf-5jf3\"\u003eCVE-2026-26313\u003c/a\u003e, \u003ca href=\"https://github.com/ethereum/go-ethereum/security/advisories/GHSA-2gjw-fg97-vg3r\"\u003eCVE-2026-26314\u003c/a\u003e, \u003ca href=\"https://github.com/ethereum/go-ethereum/security/advisories/GHSA-m6j8-rg6r-7mv8\"\u003eCVE-2026-26315\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eWe recommend recreating your p2p node key after installing this update, which you can do by removing the \u003ccode\u003eDATADIR/geth/nodekey\u003c/code\u003e file before restarting geth. Note this will cause a change in the p2p node ID, which may break static peering setups.\u003c/p\u003e\n\u003ch2\u003eHighlights\u003c/h2\u003e\n\u003ch3\u003ePath-based Archive Node with Proofs\u003c/h3\u003e\n\u003cp\u003eThe path-based archive node can now serve proofs (via \u003ccode\u003eeth_getProof\u003c/code\u003e) for the state of older blocks.\u003c/p\u003e\n\u003cp\u003eYou can configure the block range that supports proving independently from other archive state availability. Specifically, you can use the \u003ccode\u003e--history.trienode\u003c/code\u003e command-line flag to set the amount of blocks for which tree nodes will be tracked.\u003c/p\u003e\n\u003cp\u003eThis feature is disabled by default. Note that state history cannot easily be recovered once deleted, as it can only be generated by processing blocks. However, you can enable trienode history (and/or state history) at any time to turn a full node into a partial archive node, keeping state from that point in time onwards.\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/32727\"\u003e#32727\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/32621\"\u003e#32621\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33551\"\u003e#33551\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/32981\"\u003e#32981\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33399\"\u003e#33399\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/32913\"\u003e#32913\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33303\"\u003e#33303\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33584\"\u003e#33584\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33329\"\u003e#33329\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33681\"\u003e#33681\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33103\"\u003e#33103\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33098\"\u003e#33098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33515\"\u003e#33515\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/32247\"\u003e#32247\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eEraE History Support\u003c/h3\u003e\n\u003cp\u003eGeth now suports the \u003ca href=\"https://redirect.github.com/eth-clients/e2store-format-specs/pull/16\"\u003eEraE\u003c/a\u003e file format, an archival format for post-merge chain history.\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/32157\"\u003e#32157\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33827\"\u003e#33827\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eOpenTelemetry Tracing\u003c/h3\u003e\n\u003cp\u003eOpenTelemetry tracing is now supported by the RPC server, including support for distributed tracing.\nWe have also added some tracing spans for block processing via the engine API, i.e. \u003ccode\u003eengine_newPayload\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33599\"\u003e#33599\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33452\"\u003e#33452\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33780\"\u003e#33780\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33521\"\u003e#33521\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eAll Changes\u003c/h2\u003e\n\u003ch3\u003eGeth CLI\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe \u003ccode\u003egeth version-check\u003c/code\u003e subcommand has been removed. This command checked the geth website for signed vulnerability notices, and would tell if updates are necessary  (\u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33498\"\u003e#33498\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThere is now a \u003ccode\u003e--miner.maxblobs\u003c/code\u003e command-line flag to set a limit on blobs included in built blocks (\u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33129\"\u003e#33129\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33302\"\u003e#33302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eGeth now supports continuous profiling with Grafana Pyroscope (\u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33623\"\u003e#33623\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eA rare bug that could halt block production in \u003ccode\u003egeth --dev\u003c/code\u003e mode was fixed (\u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33146\"\u003e#33146\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eA new \u003ccode\u003e--rpc.rangelimit\u003c/code\u003e flag configures the maximum block range for \u003ccode\u003eeth_getLogs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33163\"\u003e#33163\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003egeth --exitwhensynced\u003c/code\u003e will now set the \u003ccode\u003efinalized\u003c/code\u003e and \u003ccode\u003esafe\u003c/code\u003e block (\u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33038\"\u003e#33038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003egeth --ethstats\u003c/code\u003e now reports the newPayload processing time to the stats server (\u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33395\"\u003e#33395\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eA lot of minor issues in Geth's command-line flag processing have been fixed (\u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33379\"\u003e#33379\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33338\"\u003e#33338\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33330\"\u003e#33330\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/32999\"\u003e#32999\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33279\"\u003e#33279\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33252\"\u003e#33252\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003eevm blocktest\u003c/code\u003e command can now read filenames from stdin when no path is provided (\u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/32824\"\u003e#32824\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFork Implementation\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ethereum/go-ethereum/commit/0cf3d3ba4f7062fd2bbf2bda10972d528974e876\"\u003e\u003ccode\u003e0cf3d3b\u003c/code\u003e\u003c/a\u003e version: release go-ethereum v1.17.0 stable\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ethereum/go-ethereum/commit/9b78f45e337f01e66b505c35b74415751b2a0a28\"\u003e\u003ccode\u003e9b78f45\u003c/code\u003e\u003c/a\u003e crypto/secp256k1: fix coordinate check\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ethereum/go-ethereum/commit/c709c19b40f4b6655d7944c3fb0c36a14c6774d6\"\u003e\u003ccode\u003ec709c19\u003c/code\u003e\u003c/a\u003e eth/catalyst: add initial OpenTelemetry tracing for newPayload (\u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33521\"\u003e#33521\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ethereum/go-ethereum/commit/550ca91b179493e5c0394ee644efed3deefb890e\"\u003e\u003ccode\u003e550ca91\u003c/code\u003e\u003c/a\u003e consensus/misc: hardening header verification (\u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33860\"\u003e#33860\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ethereum/go-ethereum/commit/a4b3898f9041fd7c77130dc17ba2b80441a998af\"\u003e\u003ccode\u003ea4b3898\u003c/code\u003e\u003c/a\u003e internal/telemetry: don't create internal spans without parents (\u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33780\"\u003e#33780\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ethereum/go-ethereum/commit/0cba803fbafb12e9daaea53b76de847842ab3055\"\u003e\u003ccode\u003e0cba803\u003c/code\u003e\u003c/a\u003e eth/protocols/eth, eth/protocols/snap: delayed p2p message decoding (\u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33835\"\u003e#33835\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ethereum/go-ethereum/commit/ad88b68a467b6b3cb9d6a8a24f0ec74e8aa77565\"\u003e\u003ccode\u003ead88b68\u003c/code\u003e\u003c/a\u003e internal/download: show progress bar only if server gives length (\u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33842\"\u003e#33842\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ethereum/go-ethereum/commit/c50e5edfafe408d911f3cdd2191a6808dc95cb42\"\u003e\u003ccode\u003ec50e5ed\u003c/code\u003e\u003c/a\u003e cmd/geth, internal/telemetry: wire OpenTelemetry tracing via CLI flags (\u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33484\"\u003e#33484\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ethereum/go-ethereum/commit/d8b92cb9e60fc8785c84f1afb35e64c9312eb35d\"\u003e\u003ccode\u003ed8b92cb\u003c/code\u003e\u003c/a\u003e rpc,internal/telemetry: fix deferred spanEnd to capture errors via pointer (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ethereum/go-ethereum/commit/ac85a6f25449a7b96505637e18c988b3142d47bf\"\u003e\u003ccode\u003eac85a6f\u003c/code\u003e\u003c/a\u003e rlp: add back Iterator.Count, with fixes (\u003ca href=\"https://redirect.github.com/ethereum/go-ethereum/issues/33841\"\u003e#33841\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ethereum/go-ethereum/compare/v1.16.8...v1.17.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-billy/v5` from 5.6.2 to 5.9.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-billy/releases\"\u003egithub.com/go-git/go-billy/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.9.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUse path.Clean instead of filepath.Clean in iofs.Open by \u003ca href=\"https://github.com/puerco\"\u003e\u003ccode\u003e@​puerco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/197\"\u003ego-git/go-billy#197\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDeprecate ChrootOS in favour of BoundOS by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/201\"\u003ego-git/go-billy#201\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGeneral Improvements by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/203\"\u003ego-git/go-billy#203\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eosfs: ChrootOS eval baseDir on creation by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/205\"\u003ego-git/go-billy#205\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRun go-git tests as part of integration tests by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/206\"\u003ego-git/go-billy#206\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.8.0...v5.9.0\"\u003ehttps://github.com/go-git/go-billy/compare/v5.8.0...v5.9.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.8.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module golang.org/x/net to v0.45.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/183\"\u003ego-git/go-billy#183\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Ensure Chmod behaviour across BoundOS and ChrootOS by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/187\"\u003ego-git/go-billy#187\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.7.0...v5.8.0\"\u003ehttps://github.com/go-git/go-billy/compare/v5.7.0...v5.8.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.7.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for Chmod on billy.Filesystem by \u003ca href=\"https://github.com/bitfehler\"\u003e\u003ccode\u003e@​bitfehler\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/171\"\u003ego-git/go-billy#171\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Update module golang.org/x/net to v0.38.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/177\"\u003ego-git/go-billy#177\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.6.2...v5.7.0\"\u003ehttps://github.com/go-git/go-billy/compare/v5.6.2...v5.7.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/237e529bb8de61704047f71a5ab1c8e6676492f1\"\u003e\u003ccode\u003e237e529\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-billy/issues/206\"\u003e#206\u003c/a\u003e from pjbgf/v5-improvements\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/04edb394b39979b5cbdec30ded6abdcb9f7786c5\"\u003e\u003ccode\u003e04edb39\u003c/code\u003e\u003c/a\u003e build: Add go-git integration test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/d8efefd33b2e8eeea1030e317bb0d71c5e918270\"\u003e\u003ccode\u003ed8efefd\u003c/code\u003e\u003c/a\u003e osfs: preserve empty ChrootOS base\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/07f2a0bf50e42d438d1d9d263c3c8a22598985b8\"\u003e\u003ccode\u003e07f2a0b\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-billy/issues/205\"\u003e#205\u003c/a\u003e from pjbgf/v5-improvements\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/25207c8468f1af656953cb5db7030aad5df1fe99\"\u003e\u003ccode\u003e25207c8\u003c/code\u003e\u003c/a\u003e build: Bump Go versions in workflows\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/2fda229d9ac0cb5ba654ebc824cfbb90248f82d9\"\u003e\u003ccode\u003e2fda229\u003c/code\u003e\u003c/a\u003e osfs: ChrootOS eval baseDir on creation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/427b27f32f22de11498a682c65cd5060a01ec168\"\u003e\u003ccode\u003e427b27f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-billy/issues/203\"\u003e#203\u003c/a\u003e from pjbgf/v5-improvements\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/7d5a23ece03edc171c1f63c8fa73f84c8428bf17\"\u003e\u003ccode\u003e7d5a23e\u003c/code\u003e\u003c/a\u003e chroot: Reject symlink loops\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/2c2287a233d2ee1e6cdce8956141f6d10505f3bf\"\u003e\u003ccode\u003e2c2287a\u003c/code\u003e\u003c/a\u003e util: avoid following symlinks in RemoveAll fallback\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/cbd88e9a9a2d7fe1065bbe083d8bf0c5fd7290de\"\u003e\u003ccode\u003ecbd88e9\u003c/code\u003e\u003c/a\u003e Fix mount path handling\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.6.2...v5.9.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/sdk` from 1.36.0 to 1.39.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/sdk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.39.0/0.61.0/0.15.0/0.0.14] 2025-12-05\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eGreatly reduce the cost of recording metrics in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e using hashing for map keys. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7175\"\u003e#7175\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithInstrumentationAttributeSet\u003c/code\u003e option to \u003ccode\u003ego.opentelemetry.io/otel/log\u003c/code\u003e, \u003ccode\u003ego.opentelemetry.io/otel/metric\u003c/code\u003e, and \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e packages.\nThis provides a concurrent-safe and performant alternative to \u003ccode\u003eWithInstrumentationAttributes\u003c/code\u003e by accepting a pre-constructed \u003ccode\u003eattribute.Set\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7287\"\u003e#7287\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability for the Prometheus exporter in \u003ccode\u003ego.opentelemetry.io/otel/exporters/prometheus\u003c/code\u003e.\nCheck the \u003ccode\u003ego.opentelemetry.io/otel/exporters/prometheus/internal/x\u003c/code\u003e package documentation for more information. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7345\"\u003e#7345\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7353\"\u003e#7353\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd temporality selector functions \u003ccode\u003eDeltaTemporalitySelector\u003c/code\u003e, \u003ccode\u003eCumulativeTemporalitySelector\u003c/code\u003e, \u003ccode\u003eLowMemoryTemporalitySelector\u003c/code\u003e to \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7434\"\u003e#7434\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics for simple log processor in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7548\"\u003e#7548\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7459\"\u003e#7459\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7486\"\u003e#7486\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics for simple span processor in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7374\"\u003e#7374\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7512\"\u003e#7512\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics for manual reader in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7524\"\u003e#7524\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd experimental observability metrics for periodic reader in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7571\"\u003e#7571\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003eOTEL_EXPORTER_OTLP_LOGS_INSECURE\u003c/code\u003e and \u003ccode\u003eOTEL_EXPORTER_OTLP_INSECURE\u003c/code\u003e environmental variables in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7608\"\u003e#7608\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eEnabled\u003c/code\u003e method to the \u003ccode\u003eProcessor\u003c/code\u003e interface in \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e.\nAll \u003ccode\u003eProcessor\u003c/code\u003e implementations now include an \u003ccode\u003eEnabled\u003c/code\u003e method. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7639\"\u003e#7639\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.38.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.38.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.38.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.37.0.\u003c/code\u003e(\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7648\"\u003e#7648\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eDistinct\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e is no longer guaranteed to uniquely identify an attribute set.\nCollisions between \u003ccode\u003eDistinct\u003c/code\u003e values for different Sets are possible with extremely high cardinality (billions of series per instrument), but are highly unlikely. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7175\"\u003e#7175\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithInstrumentationAttributes\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e synchronously de-duplicates the passed attributes instead of delegating it to the returned \u003ccode\u003eTracerOption\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7266\"\u003e#7266\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithInstrumentationAttributes\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/meter\u003c/code\u003e synchronously de-duplicates the passed attributes instead of delegating it to the returned \u003ccode\u003eMeterOption\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7266\"\u003e#7266\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithInstrumentationAttributes\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/log\u003c/code\u003e synchronously de-duplicates the passed attributes instead of delegating it to the returned \u003ccode\u003eLoggerOption\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7266\"\u003e#7266\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRename the \u003ccode\u003eOTEL_GO_X_SELF_OBSERVABILITY\u003c/code\u003e environment variable to \u003ccode\u003eOTEL_GO_X_OBSERVABILITY\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e, \u003ccode\u003ego.opentelemetry.io/otel/sdk/log\u003c/code\u003e, and \u003ccode\u003ego.opentelemetry.io/otel/exporters/stdout/stdouttrace\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7302\"\u003e#7302\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of histogram \u003ccode\u003eRecord\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e when min and max are disabled using \u003ccode\u003eNoMinMax\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7306\"\u003e#7306\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove error handling for dropped data during translation by using \u003ccode\u003eprometheus.NewInvalidMetric\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/prometheus\u003c/code\u003e.\n⚠️ \u003cstrong\u003eBreaking Change:\u003c/strong\u003e Previously, these cases were only logged and scrapes succeeded.\nNow, when translation would drop data (e.g., invalid label/value), the exporter emits a \u003ccode\u003eNewInvalidMetric\u003c/code\u003e, and Prometheus scrapes \u003cstrong\u003efail with HTTP 500\u003c/strong\u003e by default.\nTo preserve the prior behavior (scrapes succeed while errors are logged), configure your Prometheus HTTP handler with: \u003ccode\u003epromhttp.HandlerOpts{ ErrorHandling: promhttp.ContinueOnError }\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7363\"\u003e#7363\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReplace fnv hash with xxhash in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e for better performance. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7371\"\u003e#7371\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe default \u003ccode\u003eTranslationStrategy\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/exporters/prometheus\u003c/code\u003e is changed from \u003ccode\u003eotlptranslator.NoUTF8EscapingWithSuffixes\u003c/code\u003e to \u003ccode\u003eotlptranslator.UnderscoreEscapingWithSuffixes\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7421\"\u003e#7421\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of concurrent measurements in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7427\"\u003e#7427\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eInclude W3C TraceFlags (bits 0–7) in the OTLP \u003ccode\u003eSpan.Flags\u003c/code\u003e field in \u003ccode\u003ego.opentelemetry.io/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e and \u003ccode\u003ego.opentelemetry.io/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7438\"\u003e#7438\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003eErrorType\u003c/code\u003e function in \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.37.0\u003c/code\u003e now handles custom error types.\nIf an error implements an \u003ccode\u003eErrorType() string\u003c/code\u003e method, the return value of that method will be used as the error type. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7442\"\u003e#7442\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ccode\u003eWithInstrumentationAttributes\u003c/code\u003e options in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e, \u003ccode\u003ego.opentelemetry.io/otel/metric\u003c/code\u003e, and \u003ccode\u003ego.opentelemetry.io/otel/log\u003c/code\u003e to properly merge attributes when passed multiple times instead of replacing them.\nAttributes with duplicate keys will use the last value passed. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7300\"\u003e#7300\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe equality of \u003ccode\u003eattribute.Set\u003c/code\u003e when using the \u003ccode\u003eEqual\u003c/code\u003e method is not affected by the user overriding the empty set pointed to by \u003ccode\u003eattribute.EmptySet\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7357\"\u003e#7357\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/6ce14298b9d58647295280560205307768400496\"\u003e\u003ccode\u003e6ce1429\u003c/code\u003e\u003c/a\u003e Release v1.39.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7676\"\u003e#7676\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/12e421a7061c1ab5c25a1851ca168e1c3ac11bbb\"\u003e\u003ccode\u003e12e421a\u003c/code\u003e\u003c/a\u003e sdk/log: move Enabled method from FilterProcessor to Processor (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7639\"\u003e#7639\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/5982f16d244fafebffcfc92b4673dbeb565b4e7b\"\u003e\u003ccode\u003e5982f16\u003c/code\u003e\u003c/a\u003e fix(deps): update module golang.org/x/sys to v0.39.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7684\"\u003e#7684\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/928837830da34dea636b48a468149d480cc41058\"\u003e\u003ccode\u003e9288378\u003c/code\u003e\u003c/a\u003e chore(deps): update module golang.org/x/sync to v0.19.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7683\"\u003e#7683\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/ee3dfef45d9462e209d92e0651a58d2417c1305f\"\u003e\u003ccode\u003eee3dfef\u003c/code\u003e\u003c/a\u003e chore(deps): update github.com/securego/gosec/v2 digest to 41f28e2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7682\"\u003e#7682\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9345d1f64d874fa8df5f6ca4e14acaeb44532cd3\"\u003e\u003ccode\u003e9345d1f\u003c/code\u003e\u003c/a\u003e fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.7.2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7680\"\u003e#7680\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/d03b03395dc9436d79d5ba7b5ea77053b18a9915\"\u003e\u003ccode\u003ed03b033\u003c/code\u003e\u003c/a\u003e Check context prior to delaying retry in OTLP exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7678\"\u003e#7678\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/61765e78a620994b5922e34e776e029da1a2b983\"\u003e\u003ccode\u003e61765e7\u003c/code\u003e\u003c/a\u003e Fix flaky \u003ccode\u003eTestClientInstrumentation\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7677\"\u003e#7677\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/a54721cc8052fcd497d6f637a463d1aba787012c\"\u003e\u003ccode\u003ea54721c\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/go-git/go-billy/v5 to v5.7.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7679\"\u003e#7679\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/746d0860d70bb9c1e875afe1c7e41e9060387d46\"\u003e\u003ccode\u003e746d086\u003c/code\u003e\u003c/a\u003e chore(deps): update github/codeql-action action to v4.31.7 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7675\"\u003e#7675\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.36.0....\n\n_Description has been truncated_\n\n---\n\n🔄 This PR updates Go module dependencies across the project, bumping 8 packages including Docker CLI, go-git, OpenTelemetry, gRPC, and Ethereum libraries to their latest versions. The update also upgrades the Go version from 1.24.4 to 1.25.0 and includes both direct and indirect dependency updates.\n\n\u003cdetails\u003e\n\u003csummary\u003e🔍 \u003cstrong\u003eDetailed Analysis\u003c/strong\u003e\u003c/summary\u003e\n\n### Key Changes\n- **Go Version**: Upgraded from 1.24.4 to 1.25.0\n- **Docker Dependencies**: Updated docker/cli from v28.3.3 to v29.2.0 and docker/go-connections from v0.6.0 to v0.7.0\n- **Git Libraries**: Updated go-git/go-git from v5.16.2 to v5.19.0 and go-git/go-billy from v5.6.2 to v5.9.0\n- **OpenTelemetry**: Updated otel from v1.37.0 to v1.43.0 and related SDK components\n- **gRPC**: Updated from v1.74.2 to v1.79.3 across both main and pkg modules\n- **Testing**: Updated stretchr/testify from v1.10.0 to v1.11.1\n- **Cryptography**: Updated cloudflare/circl from v1.6.1 to v1.6.3 and ethereum/go-ethereum from v1.16.8 to v1.17.0\n\n### Technical Implementation\n```mermaid\nflowchart TD\n    A[Dependabot Scan] --\u003e B[Identify Updates]\n    B --\u003e C[Update go.mod files]\n    C --\u003e D[Update go.sum files]\n    D --\u003e E[Version Compatibility Check]\n    E --\u003e F[Security Patches Applied]\n    F --\u003e G[Ready for Merge]\n    \n    H[Main Module] --\u003e C\n    I[pkg/ Module] --\u003e C\n    \n    J[Direct Dependencies] --\u003e C\n    K[Indirect Dependencies] --\u003e C\n```\n\n### Impact\n- **Security Improvements**: Multiple security fixes included, particularly in gRPC v1.79.3 which addresses authorization bypass vulnerabilities\n- **Performance Enhancements**: OpenTelemetry v1.43.0 includes performance improvements for metric recording and attribute handling\n- **Feature Updates**: New capabilities in go-git v5.19.0 including improved object encoding and security hardening\n- **Compatibility**: Go 1.25.0 provides latest language features and standard library improvements\n- **Maintenance**: Automated dependency management ensures the project stays current with upstream security patches and bug fixes\n\n\u003c/details\u003e\n\n_Created with [Palmier](https://www.palmier.io)_","html_url":"https://github.com/GlacierEQ/cli/pull/4","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/GlacierEQ%2Fcli/issues/4","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/4/packages"}},{"old_version":"1.3.7","new_version":"1.6.3","update_type":"minor","path":null,"pr_created_at":"2026-05-13T15:51:03.000Z","version_change":"1.3.7 → 1.6.3","issue":{"uuid":"4439284235","node_id":"PR_kwDOCact887bMAhf","number":5432,"state":"closed","title":"chore(deps): bump the go_modules group across 16 directories with 6 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-05-15T02:29:46.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-13T15:51:03.000Z","updated_at":"2026-05-15T02:29:55.000Z","time_to_close":124723,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"go_modules","update_count":6,"packages":[{"name":"github.com/go-git/go-git/v5","old_version":"5.13.2","new_version":"5.19.0","repository_url":"https://github.com/go-git/go-git"},{"name":"golang.org/x/net","old_version":"0.35.0","new_version":"0.53.0","repository_url":"https://github.com/golang/net"},{"name":"github.com/cloudflare/circl","old_version":"1.3.7","new_version":"1.6.3"},{"name":"github.com/go-git/go-billy/v5","old_version":"5.6.2","new_version":"5.9.0"},{"name":"golang.org/x/crypto","old_version":"0.33.0","new_version":"0.50.0"},{"name":"golang.org/x/image","old_version":"0.12.0","new_version":"0.38.0","repository_url":"https://github.com/golang/image"},{"name":"golang.org/x/net","old_version":"0.35.0","new_version":"0.38.0","repository_url":"https://github.com/golang/net"},{"name":"golang.org/x/crypto","old_version":"0.33.0","new_version":"0.36.0"},{"name":"golang.org/x/net","old_version":"0.23.0","new_version":"0.38.0","repository_url":"https://github.com/golang/net"},{"name":"golang.org/x/crypto","old_version":"0.21.0","new_version":"0.36.0"},{"name":"github.com/go-git/go-git/v5","old_version":"5.16.4","new_version":"5.19.0","repository_url":"https://github.com/go-git/go-git"},{"name":"github.com/go-git/go-billy/v5","old_version":"5.7.0","new_version":"5.9.0"},{"name":"golang.org/x/image","old_version":"0.35.0","new_version":"0.38.0","repository_url":"https://github.com/golang/image"},{"name":"github.com/go-git/go-git/v5","old_version":"5.16.4","new_version":"5.19.0","repository_url":"https://github.com/go-git/go-git"},{"name":"github.com/go-git/go-billy/v5","old_version":"5.7.0","new_version":"5.9.0"},{"name":"github.com/go-git/go-git/v5","old_version":"5.16.4","new_version":"5.19.0","repository_url":"https://github.com/go-git/go-git"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 2 updates in the /v2 directory: [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) and [golang.org/x/image](https://github.com/golang/image).\nBumps the go_modules group with 1 update in the /v2/examples/customlayout directory: [golang.org/x/net](https://github.com/golang/net).\nBumps the go_modules group with 1 update in the /v2/internal/staticanalysis/test/standard directory: [golang.org/x/net](https://github.com/golang/net).\nBumps the go_modules group with 2 updates in the /v3 directory: [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) and [golang.org/x/image](https://github.com/golang/image).\nBumps the go_modules group with 1 update in the /v3/examples/android directory: [github.com/go-git/go-git/v5](https://github.com/go-git/go-git).\nBumps the go_modules group with 1 update in the /v3/examples/dev directory: [github.com/go-git/go-git/v5](https://github.com/go-git/go-git).\nBumps the go_modules group with 1 update in the /v3/examples/file-association directory: [github.com/go-git/go-git/v5](https://github.com/go-git/go-git).\nBumps the go_modules group with 1 update in the /v3/examples/gin-example directory: [github.com/go-git/go-git/v5](https://github.com/go-git/go-git).\nBumps the go_modules group with 1 update in the /v3/examples/gin-routing directory: [github.com/go-git/go-git/v5](https://github.com/go-git/go-git).\nBumps the go_modules group with 1 update in the /v3/examples/gin-service directory: [github.com/go-git/go-git/v5](https://github.com/go-git/go-git).\nBumps the go_modules group with 1 update in the /v3/examples/ios directory: [github.com/go-git/go-git/v5](https://github.com/go-git/go-git).\nBumps the go_modules group with 1 update in the /v3/examples/notifications directory: [github.com/go-git/go-git/v5](https://github.com/go-git/go-git).\nBumps the go_modules group with 1 update in the /v3/examples/print directory: [github.com/go-git/go-git/v5](https://github.com/go-git/go-git).\nBumps the go_modules group with 1 update in the /v3/examples/server directory: [github.com/go-git/go-git/v5](https://github.com/go-git/go-git).\nBumps the go_modules group with 1 update in the /v3/tests/window-visibility-test directory: [github.com/go-git/go-git/v5](https://github.com/go-git/go-git).\nBumps the go_modules group with 1 update in the /webview2/scripts directory: [golang.org/x/net](https://github.com/golang/net).\n\nUpdates `github.com/go-git/go-git/v5` from 5.13.2 to 5.19.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-git/releases\"\u003egithub.com/go-git/go-git/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.19.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.18.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2010\"\u003ego-git/go-git#2010\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Bump sha1cd and go-billy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2060\"\u003ego-git/go-git#2060\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Align object encoding with upstream by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2065\"\u003ego-git/go-git#2065\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.18.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eplumbing: transport/http, Add support for followRedirects policy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2004\"\u003ego-git/go-git#2004\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.17.1 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1941\"\u003ego-git/go-git#1941\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edotgit: skip writing pack files that already exist on disk by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1944\"\u003ego-git/go-git#1944\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e:warning: This release fixes a bug (\u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1942\"\u003ego-git/go-git#1942\u003c/a\u003e) that blocked some users from upgrading to \u003ccode\u003ev5.17.1\u003c/code\u003e. Thanks \u003ca href=\"https://github.com/pskrbasu\"\u003e\u003ccode\u003e@​pskrbasu\u003c/code\u003e\u003c/a\u003e for reporting it. :bow:\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.1...v5.17.2\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.1...v5.17.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/cloudflare/circl to v1.6.3 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1930\"\u003ego-git/go-git#1930\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/index, Improve v4 entry name validation by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1935\"\u003ego-git/go-git#1935\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/idxfile, Fix version and fanout checks by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1937\"\u003ego-git/go-git#1937\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.16.5 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1839\"\u003ego-git/go-git#1839\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: worktree, optimize infiles function for very large repos by \u003ca href=\"https://github.com/k-anshul\"\u003e\u003ccode\u003e@​k-anshul\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1853\"\u003ego-git/go-git#1853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: Add strict checks for supported extensions by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1861\"\u003ego-git/go-git#1861\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebackport, git: Improve Status() speed with new index.ModTime check by \u003ca href=\"https://github.com/cedric-appdirect\"\u003e\u003ccode\u003e@​cedric-appdirect\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1862\"\u003ego-git/go-git#1862\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003estorage: filesystem, Avoid overwriting loose obj files by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1864\"\u003ego-git/go-git#1864\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.16.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module golang.org/x/crypto to v0.45.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1744\"\u003ego-git/go-git#1744\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Bump Go test versions to 1.23-1.25 (v5) by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1746\"\u003ego-git/go-git#1746\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] git: worktree, Don't delete local untracked files when resetting worktree by \u003ca href=\"https://github.com/Ch00k\"\u003e\u003ccode\u003e@​Ch00k\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1800\"\u003ego-git/go-git#1800\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/bc930f4cbe095a3e1d49273655f73fcef7d41a42\"\u003e\u003ccode\u003ebc930f4\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2065\"\u003e#2065\u003c/a\u003e from go-git/commit-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/d315264343cead712aa9eb56475c2ec96f5ecef1\"\u003e\u003ccode\u003ed315264\u003c/code\u003e\u003c/a\u003e plumbing: object, Reset object before decode\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/6e1d34890a4dae8a0df738e531234bd60b7e9b66\"\u003e\u003ccode\u003e6e1d348\u003c/code\u003e\u003c/a\u003e plumbing: object, Align Tree handling with upstream\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/e134ba34cf95ed0167e5b1df36a933d7bde9d02d\"\u003e\u003ccode\u003ee134ba3\u003c/code\u003e\u003c/a\u003e tests: Skip double checks in Git v2.11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/1971422f6b1bec9176061b3293306981cfff981e\"\u003e\u003ccode\u003e1971422\u003c/code\u003e\u003c/a\u003e tests: Add git conformance tests for signing verification\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/a387aa8857a8fbba8e74b7f5485e9e030669ab5d\"\u003e\u003ccode\u003ea387aa8\u003c/code\u003e\u003c/a\u003e plumbing: object, Add ErrMalformedTag\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/f415670d906b5c6169d1fdc64f3f9f1d33eb6f9c\"\u003e\u003ccode\u003ef415670\u003c/code\u003e\u003c/a\u003e plumbing: object, Decode Tag headers via a state machine\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/5b0cd38a62e2336bb5f1a2ad0eb8ac8f9e7b740e\"\u003e\u003ccode\u003e5b0cd38\u003c/code\u003e\u003c/a\u003e plumbing: object, Reject multi-signature commits at Verify\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/fe8ed6223a6079d9fd84d853362a996e7df175fb\"\u003e\u003ccode\u003efe8ed62\u003c/code\u003e\u003c/a\u003e plumbing: object, Align Tag.EncodeWithoutSignature with Commit\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/98e337d5bdc4c0536a40ab7381b2231f7e0b15cd\"\u003e\u003ccode\u003e98e337d\u003c/code\u003e\u003c/a\u003e plumbing: object, Add support for Tag.SignatureSHA256\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-git/compare/v5.13.2...v5.19.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.35.0 to 0.53.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/e1fcd82abba34df74614020343be8eb1fe85f0d9\"\u003e\u003ccode\u003ee1fcd82\u003c/code\u003e\u003c/a\u003e html: properly handle trailing solidus in unquoted attribute value in foreign...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/ebed060e8f30f20235f74808c22125fd86b15edd\"\u003e\u003ccode\u003eebed060\u003c/code\u003e\u003c/a\u003e internal/http3: fix build of tests with GOEXPERIMENT=nosynctest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/1f1fa29e0a46fffe18c43a9da8daa5a0b180dfa9\"\u003e\u003ccode\u003e1f1fa29\u003c/code\u003e\u003c/a\u003e publicsuffix: regenerate table\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/12150816f701c912a32a376754ab28dd3878833a\"\u003e\u003ccode\u003e1215081\u003c/code\u003e\u003c/a\u003e http2: improve error when server sends HTTP/1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/312450e473eae9f9e6173ad895c80bc5ea2f79ad\"\u003e\u003ccode\u003e312450e\u003c/code\u003e\u003c/a\u003e html: ensure \u0026lt;search\u0026gt; tag closes \u0026lt;p\u0026gt; and update tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/09731f9bf919b00b344c763894cd1920b3d96d90\"\u003e\u003ccode\u003e09731f9\u003c/code\u003e\u003c/a\u003e http2: improve handling of lost PING in Server\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/55989e24b972a90ab99308fdc7ea1fb58a96fef1\"\u003e\u003ccode\u003e55989e2\u003c/code\u003e\u003c/a\u003e http2/h2c: use ResponseController for hijacking connections\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/2914f46773171f4fa13e276df1135bafef677801\"\u003e\u003ccode\u003e2914f46\u003c/code\u003e\u003c/a\u003e websocket: re-recommend gorilla/websocket\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/99b3ae0643f9a2f9d820fcbba5f9e4c83b23bd48\"\u003e\u003ccode\u003e99b3ae0\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/85d1d54551b68719346cb9fec24b911da4e452a1\"\u003e\u003ccode\u003e85d1d54\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.35.0...v0.38.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/cloudflare/circl` from 1.3.7 to 1.6.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cloudflare/circl/releases\"\u003egithub.com/cloudflare/circl's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eCIRCL v1.6.3\u003c/h2\u003e\n\u003cp\u003eFix a bug on ecc/p384 scalar multiplication.\u003c/p\u003e\n\u003ch3\u003eWhat's Changed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esign/mldsa: Check opts for nil value  by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/582\"\u003ecloudflare/circl#582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eecc/p384: Point addition must handle point doubling case. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/583\"\u003ecloudflare/circl#583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease CIRCL v1.6.3 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/584\"\u003ecloudflare/circl#584\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNew SLH-DSA, improvements in ML-DSA for arm64.\u003c/li\u003e\n\u003cli\u003eTested compilation on WASM.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize pairing product computation by moving exponentiations to G1. by \u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esign: Adding SLH-DSA signature by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/512\"\u003ecloudflare/circl#512\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate code generators to CIRCL v1.6.1. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/548\"\u003ecloudflare/circl#548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eML-DSA: Add preliminary Wycheproof test vectors by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/552\"\u003ecloudflare/circl#552\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ego fmt by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/554\"\u003ecloudflare/circl#554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egz-compressing test vectors, use of HexBytes and ReadGzip functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/555\"\u003ecloudflare/circl#555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Removes use of elliptic Marshal and Unmarshal functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/556\"\u003ecloudflare/circl#556\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport encoding/decoding ML-DSA private keys (as long as they contain seeds) by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/559\"\u003ecloudflare/circl#559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to golangci-lint v2 by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/560\"\u003ecloudflare/circl#560\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreparation for ARM64 Implementation of poly operations for dilithium package. by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eprepare power2Round for custom implementations in assembly by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/564\"\u003ecloudflare/circl#564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eARM64 implementation for poly.PackLe16 by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/563\"\u003ecloudflare/circl#563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polyMulBy2toD by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/565\"\u003ecloudflare/circl#565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polySub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/566\"\u003ecloudflare/circl#566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: add byteLen method for short groups and RandomScalar uses rand.Int by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/568\"\u003ecloudflare/circl#568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of poly.Add/Sub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/572\"\u003ecloudflare/circl#572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Adding cryptobyte marshaling to scalars by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/569\"\u003ecloudflare/circl#569\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumping up to Go1.25 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/574\"\u003ecloudflare/circl#574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: Including WASM compilation. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/577\"\u003ecloudflare/circl#577\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to using package-declared HPKE errors for shortkem instead of standard library errors by \u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease v1.6.2 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/579\"\u003ecloudflare/circl#579\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixes some point checks on the FourQ curve.\u003c/li\u003e\n\u003cli\u003eHybrid KEM fails on low-order points.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/24ae53c5d6f7fe18203adc125ba3ed76a38703e1\"\u003e\u003ccode\u003e24ae53c\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/581020bd4a836b8ce7bd4e414ba2884c07dbc906\"\u003e\u003ccode\u003e581020b\u003c/code\u003e\u003c/a\u003e Rename method to oddMultiplesProjective.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/12209a4566605692a8402594e367a5aed5148460\"\u003e\u003ccode\u003e12209a4\u003c/code\u003e\u003c/a\u003e Removing unused cmov for jacobian points.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/fcba359f4178645d2c9e50f29ab6966337da4b95\"\u003e\u003ccode\u003efcba359\u003c/code\u003e\u003c/a\u003e ecc/p384: use of complete projective formulas for scalar multiplication.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/5e1bae8d8c2df4e717c2c5c2d5b5d60b629b2ac6\"\u003e\u003ccode\u003e5e1bae8\u003c/code\u003e\u003c/a\u003e ecc/p384: handle point doubling in point addition with Jacobian coordinates.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/341604685ff97e8f7440ae4b4711ba1c118c648c\"\u003e\u003ccode\u003e3416046\u003c/code\u003e\u003c/a\u003e Check opts for nil value.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/a763d47a6dce43d1f4f7b697d1d7810463a526f6\"\u003e\u003ccode\u003ea763d47\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3c70bf9ad53b681fbe5ba6067e454a86549fee8a\"\u003e\u003ccode\u003e3c70bf9\u003c/code\u003e\u003c/a\u003e Bump x/crypto x/sys dependencies.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3f0f15b2bfe67bad81a35e8aec81ae42ca78349d\"\u003e\u003ccode\u003e3f0f15b\u003c/code\u003e\u003c/a\u003e Revert to using package-declared HPKE errors for shortkem instead of standard...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/23491bd573cf29b6f567057a158203a2c9dfa30d\"\u003e\u003ccode\u003e23491bd\u003c/code\u003e\u003c/a\u003e Adding generic Power2Round method.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.3.7...v1.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-billy/v5` from 5.6.2 to 5.9.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-billy/releases\"\u003egithub.com/go-git/go-billy/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.9.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUse path.Clean instead of filepath.Clean in iofs.Open by \u003ca href=\"https://github.com/puerco\"\u003e\u003ccode\u003e@​puerco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/197\"\u003ego-git/go-billy#197\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDeprecate ChrootOS in favour of BoundOS by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/201\"\u003ego-git/go-billy#201\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGeneral Improvements by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/203\"\u003ego-git/go-billy#203\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eosfs: ChrootOS eval baseDir on creation by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/205\"\u003ego-git/go-billy#205\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRun go-git tests as part of integration tests by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/206\"\u003ego-git/go-billy#206\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.8.0...v5.9.0\"\u003ehttps://github.com/go-git/go-billy/compare/v5.8.0...v5.9.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.8.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module golang.org/x/net to v0.45.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/183\"\u003ego-git/go-billy#183\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Ensure Chmod behaviour across BoundOS and ChrootOS by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/187\"\u003ego-git/go-billy#187\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.7.0...v5.8.0\"\u003ehttps://github.com/go-git/go-billy/compare/v5.7.0...v5.8.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.7.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for Chmod on billy.Filesystem by \u003ca href=\"https://github.com/bitfehler\"\u003e\u003ccode\u003e@​bitfehler\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/171\"\u003ego-git/go-billy#171\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Update module golang.org/x/net to v0.38.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/177\"\u003ego-git/go-billy#177\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.6.2...v5.7.0\"\u003ehttps://github.com/go-git/go-billy/compare/v5.6.2...v5.7.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/237e529bb8de61704047f71a5ab1c8e6676492f1\"\u003e\u003ccode\u003e237e529\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-billy/issues/206\"\u003e#206\u003c/a\u003e from pjbgf/v5-improvements\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/04edb394b39979b5cbdec30ded6abdcb9f7786c5\"\u003e\u003ccode\u003e04edb39\u003c/code\u003e\u003c/a\u003e build: Add go-git integration test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/d8efefd33b2e8eeea1030e317bb0d71c5e918270\"\u003e\u003ccode\u003ed8efefd\u003c/code\u003e\u003c/a\u003e osfs: preserve empty ChrootOS base\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/07f2a0bf50e42d438d1d9d263c3c8a22598985b8\"\u003e\u003ccode\u003e07f2a0b\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-billy/issues/205\"\u003e#205\u003c/a\u003e from pjbgf/v5-improvements\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/25207c8468f1af656953cb5db7030aad5df1fe99\"\u003e\u003ccode\u003e25207c8\u003c/code\u003e\u003c/a\u003e build: Bump Go versions in workflows\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/2fda229d9ac0cb5ba654ebc824cfbb90248f82d9\"\u003e\u003ccode\u003e2fda229\u003c/code\u003e\u003c/a\u003e osfs: ChrootOS eval baseDir on creation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/427b27f32f22de11498a682c65cd5060a01ec168\"\u003e\u003ccode\u003e427b27f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-billy/issues/203\"\u003e#203\u003c/a\u003e from pjbgf/v5-improvements\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/7d5a23ece03edc171c1f63c8fa73f84c8428bf17\"\u003e\u003ccode\u003e7d5a23e\u003c/code\u003e\u003c/a\u003e chroot: Reject symlink loops\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/2c2287a233d2ee1e6cdce8956141f6d10505f3bf\"\u003e\u003ccode\u003e2c2287a\u003c/code\u003e\u003c/a\u003e util: avoid following symlinks in RemoveAll fallback\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/cbd88e9a9a2d7fe1065bbe083d8bf0c5fd7290de\"\u003e\u003ccode\u003ecbd88e9\u003c/code\u003e\u003c/a\u003e Fix mount path handling\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.6.2...v5.9.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.33.0 to 0.50.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/03ca0dcccbd37ba6be80adf74dde8d78a4d72817\"\u003e\u003ccode\u003e03ca0dc\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/8400f4a938077a7a7817ab7d163d148e371b320b\"\u003e\u003ccode\u003e8400f4a\u003c/code\u003e\u003c/a\u003e ssh: respect signer's algorithm preference in pickSignatureAlgorithm\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/81c6cb34a8fc386ed53293cd79e3c0c232ee7366\"\u003e\u003ccode\u003e81c6cb3\u003c/code\u003e\u003c/a\u003e ssh: swap cbcMinPaddingSize to cbcMinPacketSize to get encLength\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/982eaa62dfb7273603b97fc1835561450096f3bd\"\u003e\u003ccode\u003e982eaa6\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/159944f128e9b3fdeb5a5b9b102a961904601a87\"\u003e\u003ccode\u003e159944f\u003c/code\u003e\u003c/a\u003e ssh,acme: clean up tautological/impossible nil conditions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/a408498e55412f2ae2a058336f78889fb1ba6115\"\u003e\u003ccode\u003ea408498\u003c/code\u003e\u003c/a\u003e acme: only require prompt if server has terms of service\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/cab0f718548e8a858701b7b48161f44748532f58\"\u003e\u003ccode\u003ecab0f71\u003c/code\u003e\u003c/a\u003e all: upgrade go directive to at least 1.25.0 [generated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/2f26647a795e74e712b3aebc2655bca60b2686f9\"\u003e\u003ccode\u003e2f26647\u003c/code\u003e\u003c/a\u003e x509roots/fallback: update bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e08b06753d6a72f1fe375b6e0fefefb39917c165\"\u003e\u003ccode\u003ee08b067\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/7d0074ccc6f17acbf2ebb10db06d492e08f887dc\"\u003e\u003ccode\u003e7d0074c\u003c/code\u003e\u003c/a\u003e scrypt: fix panic on parameters \u0026lt;= 0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.33.0...v0.50.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/image` from 0.12.0 to 0.38.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/23ae9ed61c1d3343fb95015810f62dcbf444976e\"\u003e\u003ccode\u003e23ae9ed\u003c/code\u003e\u003c/a\u003e tiff: cap buffer growth to prevent OOM from malicious IFD offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/e589e60f29d0bbbf6400e250e024f93cbc4961ee\"\u003e\u003ccode\u003ee589e60\u003c/code\u003e\u003c/a\u003e webp: allow VP8L + VP8X(with alpha)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/fe7d73de74b8a1ad508c93cfcb245d44579163ff\"\u003e\u003ccode\u003efe7d73d\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/e3d762b1d37ed96e757e3bc0bfb44f7455589df3\"\u003e\u003ccode\u003ee3d762b\u003c/code\u003e\u003c/a\u003e all: upgrade go directive to at least 1.25.0 [generated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/833c6ed987962feaa3ec2624d8655421b25e2e0e\"\u003e\u003ccode\u003e833c6ed\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/bc7fe0b43a01586e7ca7c087a2e8a625e8397dcb\"\u003e\u003ccode\u003ebc7fe0b\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/c53c97f4ed88d55fafe963ee6e93cb357663d650\"\u003e\u003ccode\u003ec53c97f\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/9032ff7c7b86f42b9bebdf6133191648224aecc0\"\u003e\u003ccode\u003e9032ff7\u003c/code\u003e\u003c/a\u003e all: eliminate vet diagnostics\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/9c9d08c65c08567c997eccc8bde52fcc9369bea6\"\u003e\u003ccode\u003e9c9d08c\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/742b1b756d98a0c48b1fcf464a0c63fa50e1aa6b\"\u003e\u003ccode\u003e742b1b7\u003c/code\u003e\u003c/a\u003e all: fix some comments\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/image/compare/v0.12.0...v0.38.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.35.0 to 0.38.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/e1fcd82abba34df74614020343be8eb1fe85f0d9\"\u003e\u003ccode\u003ee1fcd82\u003c/code\u003e\u003c/a\u003e html: properly handle trailing solidus in unquoted attribute value in foreign...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/ebed060e8f30f20235f74808c22125fd86b15edd\"\u003e\u003ccode\u003eebed060\u003c/code\u003e\u003c/a\u003e internal/http3: fix build of tests with GOEXPERIMENT=nosynctest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/1f1fa29e0a46fffe18c43a9da8daa5a0b180dfa9\"\u003e\u003ccode\u003e1f1fa29\u003c/code\u003e\u003c/a\u003e publicsuffix: regenerate table\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/12150816f701c912a32a376754ab28dd3878833a\"\u003e\u003ccode\u003e1215081\u003c/code\u003e\u003c/a\u003e http2: improve error when server sends HTTP/1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/312450e473eae9f9e6173ad895c80bc5ea2f79ad\"\u003e\u003ccode\u003e312450e\u003c/code\u003e\u003c/a\u003e html: ensure \u0026lt;search\u0026gt; tag closes \u0026lt;p\u0026gt; and update tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/09731f9bf919b00b344c763894cd1920b3d96d90\"\u003e\u003ccode\u003e09731f9\u003c/code\u003e\u003c/a\u003e http2: improve handling of lost PING in Server\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/55989e24b972a90ab99308fdc7ea1fb58a96fef1\"\u003e\u003ccode\u003e55989e2\u003c/code\u003e\u003c/a\u003e http2/h2c: use ResponseController for hijacking connections\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/2914f46773171f4fa13e276df1135bafef677801\"\u003e\u003ccode\u003e2914f46\u003c/code\u003e\u003c/a\u003e websocket: re-recommend gorilla/websocket\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/99b3ae0643f9a2f9d820fcbba5f9e4c83b23bd48\"\u003e\u003ccode\u003e99b3ae0\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/85d1d54551b68719346cb9fec24b911da4e452a1\"\u003e\u003ccode\u003e85d1d54\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.35.0...v0.38.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.33.0 to 0.36.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/03ca0dcccbd37ba6be80adf74dde8d78a4d72817\"\u003e\u003ccode\u003e03ca0dc\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/8400f4a938077a7a7817ab7d163d148e371b320b\"\u003e\u003ccode\u003e8400f4a\u003c/code\u003e\u003c/a\u003e ssh: respect signer's algorithm preference in pickSignatureAlgorithm\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/81c6cb34a8fc386ed53293cd79e3c0c232ee7366\"\u003e\u003ccode\u003e81c6cb3\u003c/code\u003e\u003c/a\u003e ssh: swap cbcMinPaddingSize to cbcMinPacketSize to get encLength\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/982eaa62dfb7273603b97fc1835561450096f3bd\"\u003e\u003ccode\u003e982eaa6\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/159944f128e9b3fdeb5a5b9b102a961904601a87\"\u003e\u003ccode\u003e159944f\u003c/code\u003e\u003c/a\u003e ssh,acme: clean up tautological/impossible nil conditions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/a408498e55412f2ae2a058336f78889fb1ba6115\"\u003e\u003ccode\u003ea408498\u003c/code\u003e\u003c/a\u003e acme: only require prompt if server has terms of service\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/cab0f718548e8a858701b7b48161f44748532f58\"\u003e\u003ccode\u003ecab0f71\u003c/code\u003e\u003c/a\u003e all: upgrade go directive to at least 1.25.0 [generated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/2f26647a795e74e712b3aebc2655bca60b2686f9\"\u003e\u003ccode\u003e2f26647\u003c/code\u003e\u003c/a\u003e x509roots/fallback: update bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e08b06753d6a72f1fe375b6e0fefefb39917c165\"\u003e\u003ccode\u003ee08b067\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/7d0074ccc6f17acbf2ebb10db06d492e08f887dc\"\u003e\u003ccode\u003e7d0074c\u003c/code\u003e\u003c/a\u003e scrypt: fix panic on parameters \u0026lt;= 0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.33.0...v0.50.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.23.0 to 0.38.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/e1fcd82abba34df74614020343be8eb1fe85f0d9\"\u003e\u003ccode\u003ee1fcd82\u003c/code\u003e\u003c/a\u003e html: properly handle trailing solidus in unquoted attribute value in foreign...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/ebed060e8f30f20235f74808c22125fd86b15edd\"\u003e\u003ccode\u003eebed060\u003c/code\u003e\u003c/a\u003e internal/http3: fix build of tests with GOEXPERIMENT=nosynctest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/1f1fa29e0a46fffe18c43a9da8daa5a0b180dfa9\"\u003e\u003ccode\u003e1f1fa29\u003c/code\u003e\u003c/a\u003e publicsuffix: regenerate table\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/12150816f701c912a32a376754ab28dd3878833a\"\u003e\u003ccode\u003e1215081\u003c/code\u003e\u003c/a\u003e http2: improve error when server sends HTTP/1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/312450e473eae9f9e6173ad895c80bc5ea2f79ad\"\u003e\u003ccode\u003e312450e\u003c/code\u003e\u003c/a\u003e html: ensure \u0026lt;search\u0026gt; tag closes \u0026lt;p\u0026gt; and update tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/09731f9bf919b00b344c763894cd1920b3d96d90\"\u003e\u003ccode\u003e09731f9\u003c/code\u003e\u003c/a\u003e http2: improve handling of lost PING in Server\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/55989e24b972a90ab99308fdc7ea1fb58a96fef1\"\u003e\u003ccode\u003e55989e2\u003c/code\u003e\u003c/a\u003e http2/h2c: use ResponseController for hijacking connections\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/2914f46773171f4fa13e276df1135bafef677801\"\u003e\u003ccode\u003e2914f46\u003c/code\u003e\u003c/a\u003e websocket: re-recommend gorilla/websocket\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/99b3ae0643f9a2f9d820fcbba5f9e4c83b23bd48\"\u003e\u003ccode\u003e99b3ae0\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/85d1d54551b68719346cb9fec24b911da4e452a1\"\u003e\u003ccode\u003e85d1d54\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.35.0...v0.38.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.21.0 to 0.36.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/03ca0dcccbd37ba6be80adf74dde8d78a4d72817\"\u003e\u003ccode\u003e03ca0dc\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/8400f4a938077a7a7817ab7d163d148e371b320b\"\u003e\u003ccode\u003e8400f4a\u003c/code\u003e\u003c/a\u003e ssh: respect signer's algorithm preference in pickSignatureAlgorithm\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/81c6cb34a8fc386ed53293cd79e3c0c232ee7366\"\u003e\u003ccode\u003e81c6cb3\u003c/code\u003e\u003c/a\u003e ssh: swap cbcMinPaddingSize to cbcMinPacketSize to get encLength\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/982eaa62dfb7273603b97fc1835561450096f3bd\"\u003e\u003ccode\u003e982eaa6\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/159944f128e9b3fdeb5a5b9b102a961904601a87\"\u003e\u003ccode\u003e159944f\u003c/code\u003e\u003c/a\u003e ssh,acme: clean up tautological/impossible nil conditions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/a408498e55412f2ae2a058336f78889fb1ba6115\"\u003e\u003ccode\u003ea408498\u003c/code\u003e\u003c/a\u003e acme: only require prompt if server has terms of service\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/cab0f718548e8a858701b7b48161f44748532f58\"\u003e\u003ccode\u003ecab0f71\u003c/code\u003e\u003c/a\u003e all: upgrade go directive to at least 1.25.0 [generated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/2f26647a795e74e712b3aebc2655bca60b2686f9\"\u003e\u003ccode\u003e2f26647\u003c/code\u003e\u003c/a\u003e x509roots/fallback: update bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e08b06753d6a72f1fe375b6e0fefefb39917c165\"\u003e\u003ccode\u003ee08b067\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/7d0074ccc6f17acbf2ebb10db06d492e08f887dc\"\u003e\u003ccode\u003e7d0074c\u003c/code\u003e\u003c/a\u003e scrypt: fix panic on parameters \u0026lt;= 0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.33.0...v0.50.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-git/v5` from 5.16.4 to 5.19.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-git/releases\"\u003egithub.com/go-git/go-git/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.19.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.18.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2010\"\u003ego-git/go-git#2010\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Bump sha1cd and go-billy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2060\"\u003ego-git/go-git#2060\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Align object encoding with upstream by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2065\"\u003ego-git/go-git#2065\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.18.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eplumbing: transport/http, Add support for followRedirects policy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2004\"\u003ego-git/go-git#2004\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.17.1 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1941\"\u003ego-git/go-git#1941\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edotgit: skip writing pack files that already exist on disk by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1944\"\u003ego-git/go-git#1944\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e:warning: This release fixes a bug (\u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1942\"\u003ego-git/go-git#1942\u003c/a\u003e) that blocked some users from upgrading to \u003ccode\u003ev5.17.1\u003c/code\u003e. Thanks \u003ca href=\"https://github.com/pskrbasu\"\u003e\u003ccode\u003e@​pskrbasu\u003c/code\u003e\u003c/a\u003e for reporting it. :bow:\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.1...v5.17.2\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.1...v5.17.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/cloudflare/circl to v1.6.3 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1930\"\u003ego-git/go-git#1930\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/index, Improve v4 entry name validation by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1935\"\u003ego-git/go-git#1935\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/idxfile, Fix version and fanout checks by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1937\"\u003ego-git/go-git#1937\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.16.5 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1839\"\u003ego-git/go-git#1839\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: worktree, optimize infiles function for very large repos by \u003ca href=\"https://github.com/k-anshul\"\u003e\u003ccode\u003e@​k-anshul\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1853\"\u003ego-git/go-git#1853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: Add strict checks for supported extensions by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1861\"\u003ego-git/go-git#1861\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebackport, git: Improve Status() speed with new index.ModTime check by \u003ca href=\"https://github.com/cedric-appdirect\"\u003e\u003ccode\u003e@​cedric-appdirect\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1862\"\u003ego-git/go-git#1862\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003estorage: filesystem, Avoid overwriting loose obj files by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1864\"\u003ego-git/go-git#1864\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.16.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module golang.org/x/crypto to v0.45.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1744\"\u003ego-git/go-git#1744\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Bump Go test versions to 1.23-1.25 (v5) by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1746\"\u003ego-git/go-git#1746\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] git: worktree, Don't delete local untracked files when resetting worktree by \u003ca href=\"https://github.com/Ch00k\"\u003e\u003ccode\u003e@​Ch00k\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1800\"\u003ego-git/go-git#1800\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/bc930f4cbe095a3e1d49273655f73fcef7d41a42\"\u003e\u003ccode\u003ebc930f4\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2065\"\u003e#2065\u003c/a\u003e from go-git/commit-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/d315264343cead712aa9eb56475c2ec96f5ecef1\"\u003e\u003ccode\u003ed315264\u003c/code\u003e\u003c/a\u003e plumbing: object, Reset object before decode\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/6e1d34890a4dae8a0df738e531234bd60b7e9b66\"\u003e\u003ccode\u003e6e1d348\u003c/code\u003e\u003c/a\u003e plumbing: object, Align Tree handling with upstream\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/e134ba34cf95ed0167e5b1df36a933d7bde9d02d\"\u003e\u003ccode\u003ee134ba3\u003c/code\u003e\u003c/a\u003e tests: Skip double checks in Git v2.11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/1971422f6b1bec9176061b3293306981cfff981e\"\u003e\u003ccode\u003e1971422\u003c/code\u003e\u003c/a\u003e tests: Add git conformance tests for signing verification\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/a387aa8857a8fbba8e74b7f5485e9e030669ab5d\"\u003e\u003ccode\u003ea387aa8\u003c/code\u003e\u003c/a\u003e plumbing: object, Add ErrMalformedTag\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/f415670d906b5c6169d1fdc64f3f9f1d33eb6f9c\"\u003e\u003ccode\u003ef415670\u003c/code\u003e\u003c/a\u003e plumbing: object, Decode Tag headers via a state machine\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/5b0cd38a62e2336bb5f1a2ad0eb8ac8f9e7b740e\"\u003e\u003ccode\u003e5b0cd38\u003c/code\u003e\u003c/a\u003e plumbing: object, Reject multi-signature commits at Verify\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/fe8ed6223a6079d9fd84d853362a996e7df175fb\"\u003e\u003ccode\u003efe8ed62\u003c/code\u003e\u003c/a\u003e plumbing: object, Align Tag.EncodeWithoutSignature with Commit\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/98e337d5bdc4c0536a40ab7381b2231f7e0b15cd\"\u003e\u003ccode\u003e98e337d\u003c/code\u003e\u003c/a\u003e plumbing: object, Add support for Tag.SignatureSHA256\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-git/compare/v5.13.2...v5.19.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-billy/v5` from 5.7.0 to 5.9.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-billy/releases\"\u003egithub.com/go-git/go-billy/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.9.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUse path.Clean instead of filepath.Clean in iofs.Open by \u003ca href=\"https://github.com/puerco\"\u003e\u003ccode\u003e@​puerco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/197\"\u003ego-git/go-billy#197\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDeprecate ChrootOS in favour of BoundOS by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/201\"\u003ego-git/go-billy#201\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGeneral Improvements by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/203\"\u003ego-git/go-billy#203\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eosfs: ChrootOS eval baseDir on creation by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/205\"\u003ego-git/go-billy#205\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRun go-git tests as part of integration tests by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/206\"\u003ego-git/go-billy#206\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.8.0...v5.9.0\"\u003ehttps://github.com/go-git/go-billy/compare/v5.8.0...v5.9.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.8.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module golang.org/x/net to v0.45.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/183\"\u003ego-git/go-billy#183\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Ensure Chmod behaviour across BoundOS and ChrootOS by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/187\"\u003ego-git/go-billy#187\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.7.0...v5.8.0\"\u003ehttps://github.com/go-git/go-billy/compare/v5.7.0...v5.8.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.7.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for Chmod on billy.Filesystem by \u003ca href=\"https://github.com/bitfehler\"\u003e\u003ccode\u003e@​bitfehler\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/171\"\u003ego-git/go-billy#171\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Update module golang.org/x/net to v0.38.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/177\"\u003ego-git/go-billy#177\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.6.2...v5.7.0\"\u003ehttps://github.com/go-git/go-billy/compare/v5.6.2...v5.7.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/237e529bb8de61704047f71a5ab1c8e6676492f1\"\u003e\u003ccode\u003e237e529\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-billy/issues/206\"\u003e#206\u003c/a\u003e from pjbgf/v5-improvements\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/04edb394b39979b5cbdec30ded6abdcb9f7786c5\"\u003e\u003ccode\u003e04edb39\u003c/code\u003e\u003c/a\u003e build: Add go-git integration test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/d8efefd33b2e8eeea1030e317bb0d71c5e918270\"\u003e\u003ccode\u003ed8efefd\u003c/code\u003e\u003c/a\u003e osfs: preserve empty ChrootOS base\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/07f2a0bf50e42d438d1d9d263c3c8a22598985b8\"\u003e\u003ccode\u003e07f2a0b\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-billy/issues/205\"\u003e#205\u003c/a\u003e from pjbgf/v5-improvements\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/25207c8468f1af656953cb5db7030aad5df1fe99\"\u003e\u003ccode\u003e25207c8\u003c/code\u003e\u003c/a\u003e build: Bump Go versions in workflows\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/2fda229d9ac0cb5ba654ebc824cfbb90248f82d9\"\u003e\u003ccode\u003e2fda229\u003c/code\u003e\u003c/a\u003e osfs: ChrootOS eval baseDir on creation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/427b27f32f22de11498a682c65cd5060a01ec168\"\u003e\u003ccode\u003e427b27f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-billy/issues/203\"\u003e#203\u003c/a\u003e from pjbgf/v5-improvements\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/7d5a23ece03edc171c1f63c8fa73f84c8428bf17\"\u003e\u003ccode\u003e7d5a23e\u003c/code\u003e\u003c/a\u003e chroot: Reject symlink loops\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/2c2287a233d2ee1e6cdce8956141f6d10505f3bf\"\u003e\u003ccode\u003e2c2287a\u003c/code\u003e\u003c/a\u003e util: avoid following symlinks in RemoveAll fallback\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/cbd88e9a9a2d7fe1065bbe083d8bf0c5fd7290de\"\u003e\u003ccode\u003ecbd88e9\u003c/code\u003e\u003c/a\u003e Fix mount path handling\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.6.2...v5.9.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/image` from 0.35.0 to 0.38.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/23ae9ed61c1d3343fb95015810f62dcbf444976e\"\u003e\u003ccode\u003e23ae9ed\u003c/code\u003e\u003c/a\u003e tiff: cap buffer growth to prevent OOM from malicious IFD offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/e589e60f29d0bbbf6400e250e024f93cbc4961ee\"\u003e\u003ccode\u003ee589e60\u003c/code\u003e\u003c/a\u003e webp: allow VP8L + VP8X(with alpha)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/fe7d73de74b8a1ad508c93cfcb245d44579163ff\"\u003e\u003ccode\u003efe7d73d\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/e3d762b1d37ed96e757e3bc0bfb44f7455589df3\"\u003e\u003ccode\u003ee3d762b\u003c/code\u003e\u003c/a\u003e all: upgrade go directive to at least 1.25.0 [generated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/833c6ed987962feaa3ec2624d8655421b25e2e0e\"\u003e\u003ccode\u003e833c6ed\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/bc7fe0b43a01586e7ca7c087a2e8a625e8397dcb\"\u003e\u003ccode\u003ebc7fe0b\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/c53c97f4ed88d55fafe963ee6e93cb357663d650\"\u003e\u003ccode\u003ec53c97f\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/9032ff7c7b86f42b9bebdf6133191648224aecc0\"\u003e\u003ccode\u003e9032ff7\u003c/code\u003e\u003c/a\u003e all: eliminate vet diagnostics\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/9c9d08c65c08567c997eccc8bde52fcc9369bea6\"\u003e\u003ccode\u003e9c9d08c\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/742b1b756d98a0c48b1fcf464a0c63fa50e1aa6b\"\u003e\u003ccode\u003e742b1b7\u003c/code\u003e\u003c/a\u003e all: fix some comments\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/image/compare/v0.12.0...v0.38.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-git/v5` from 5.16.4 to 5.19.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-git/releases\"\u003egithub.com/go-git/go-git/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.19.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.18.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2010\"\u003ego-git/go-git#2010\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Bump sha1cd and go-billy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2060\"\u003ego-git/go-git#2060\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Align object encoding with upstream by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2065\"\u003ego-git/go-git#2065\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.18.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eplumbing: transport/http, Add support for followRedirects policy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2004\"\u003ego-git/go-git#2004\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.17.1 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1941\"\u003ego-git/go-git#1941\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edotgit: skip writing pack files that already exist on disk by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1944\"\u003ego-git/go-git#1944\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e:warning: This release fixes a bug (\u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1942\"\u003ego-git/go-git#1942\u003c/a\u003e) that blocked some users from upgrading to \u003ccode\u003ev5.17.1\u003c/code\u003e. Thanks \u003ca href=\"https://github.com/pskrbasu\"\u003e\u003ccode\u003e@​pskrbasu\u003c/code\u003e\u003c/a\u003e for reporting it. :bow:\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.1...v5.17.2\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.1...v5.17.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/cloudflare/circl to v1.6.3 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1930\"\u003ego-git/go-git#1930\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/index, Improve v4 entry name validation by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1935\"\u003ego-git/go-git#1935\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/idxfile, Fix version and fanout checks by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1937\"\u003ego-git/go-git#1937\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.16.5 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1839\"\u003ego-git/go-git#1839\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: worktree, optimize infiles function for very large repos by \u003ca href=\"https://github.com/k-anshul\"\u003e\u003ccode\u003e@​k-anshul\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1853\"\u003ego-git/go-git#1853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: Add strict checks for supported extensions by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1861\"\u003ego-git/go-git#1861\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebackport, git: Improve Status() speed with new index.ModTime check by \u003ca href=\"https://github.com/cedric-appdirect\"\u003e\u003ccode\u003e@​cedric-appdirect\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1862\"\u003ego-git/go-git#1862\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003estorage: filesystem, Avoid overwriting loose obj files by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1864\"\u003ego-git/go-git#1864\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.16.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module golang.org/x/crypto to v0.45.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1744\"\u003ego-git/go-git#1744\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Bump Go test versions to 1.23-1.25 (v5) by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1746\"\u003ego-git/go-git#1746\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] git: worktree, Don't delete local untracked files when resetting worktree by \u003ca href=\"https://github.com/Ch00k\"\u003e\u003ccode\u003e@​Ch00k\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1800\"\u003ego-git/go-git#1800\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/bc930f4cbe095a3e1d49273655f73fcef7d41a42\"\u003e\u003ccode\u003ebc930f4\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2065\"\u003e#2065\u003c/a\u003e from go-git/commit-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/d315264343cead712aa9eb56475c2ec96f5ecef1\"\u003e\u003ccode\u003ed315264\u003c/code\u003e\u003c/a\u003e plumbing: object, Reset object before decode\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/6e1d34890a4dae8a0df738e531234bd60b7e9b66\"\u003e\u003ccode\u003e6e1d348\u003c/code\u003e\u003c/a\u003e plumbing: object, Align Tree handling with upstream\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/e134ba34cf95ed0167e5b1df36a933d7bde9d02d\"\u003e\u003ccode\u003ee134ba3\u003c/code\u003e\u003c/a\u003e tests: Skip double checks in Git v2.11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/1971422f6b1bec9176061b3293306981cfff981e\"\u003e\u003ccode\u003e1971422\u003c/code\u003e\u003c/a\u003e tests: Add git conformance tests for signing verification\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/a387aa8857a8fbba8e74b7f5485e9e030669ab5d\"\u003e\u003ccode\u003ea387aa8\u003c/code\u003e\u003c/a\u003e plumbing: object, Add ErrMalformedTag\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/f415670d906b5c6169d1fdc64f3f9f1d33eb6f9c\"\u003e\u003ccode\u003ef415670\u003c/code\u003e\u003c/a\u003e plumbing: object, Decode Tag headers via a state machine\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/5b0cd38a62e2336bb5f1a2ad0eb8ac8f9e7b740e\"\u003e\u003ccode\u003e5b0cd38\u003c/code\u003e\u003c/a\u003e plumbing: object, Reject multi-signature commits at Verify\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/fe8ed6223a6079d9fd84d853362a996e7df175fb\"\u003e\u003ccode\u003efe8ed62\u003c/code\u003e\u003c/a\u003e plumbing: object, Align Tag.EncodeWithoutSignature with Commit\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/98e337d5bdc4c0536a40ab7381b2231f7e0b15cd\"\u003e\u003ccode\u003e98e337d\u003c/code\u003e\u003c/a\u003e plumbing: object, Add support for Tag.SignatureSHA256\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-git/compare/v5.13.2...v5.19.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-billy/v5` from 5.7.0 to 5.9.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-billy/releases\"\u003egithub.com/go-git/go-billy/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.9.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUse path.Clean instead of filepath.Clean in iofs.Open by \u003ca href=\"https://github.com/puerco\"\u003e\u003ccode\u003e@​puerco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/197\"\u003ego-git/go-billy#197\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDeprecate ChrootOS in favour of BoundOS by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/201\"\u003ego-git/go-billy#201\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGeneral Improvements by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/203\"\u003ego-git/go-billy#203\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eosfs: ChrootOS eval baseDir on creation by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/205\"\u003ego-git/go-billy#205\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRun go-git tests as part of integration tests by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/206\"\u003ego-git/go-billy#206\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.8.0...v5.9.0\"\u003ehttps://github.com/go-git/go-billy/compare/v5.8.0...v5.9.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.8.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module golang.org/x/net to v0.45.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/183\"\u003ego-git/go-billy#183\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Ensure Chmod behaviour across BoundOS and ChrootOS by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/187\"\u003ego-git/go-billy#187\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.7.0...v5.8.0\"\u003ehttps://github.com/go-git/go-billy/compare/v5.7.0...v5.8.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.7.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for Chmod on billy.Filesystem by \u003ca href=\"https://github.com/bitfehler\"\u003e\u003ccode\u003e@​bitfehler\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/171\"\u003ego-git/go-billy#171\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Update module golang.org/x/net to v0.38.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/177\"\u003ego-git/go-billy#177\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.6.2...v5.7.0\"\u003ehttps://github.com/go-git/go-billy/compare/v5.6.2...v5.7.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/237e529bb8de61704047f71a5ab1c8e6676492f1\"\u003e\u003ccode\u003e237e529\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-billy/issues/206\"\u003e#206\u003c/a\u003e from pjbgf/v5-improvements\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/04edb394b39979b5cbdec30ded6abdcb9f7786c5\"\u003e\u003ccode\u003e04edb39\u003c/code\u003e\u003c/a\u003e build: Add go-git integration test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/d8efefd33b2e8eeea1030e317bb0d71c5e918270\"\u003e\u003ccode\u003ed8efefd\u003c/code\u003e\u003c/a\u003e osfs: preserve empty ChrootOS base\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/07f2a0bf50e42d438d1d9d263c3c8a22598985b8\"\u003e\u003ccode\u003e07f2a0b\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-billy/issues/205\"\u003e#205\u003c/a\u003e from pjbgf/v5-improvements\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/25207c8468f1af656953cb5db7030aad5df1fe99\"\u003e\u003ccode\u003e25207c8\u003c/code\u003e\u003c/a\u003e build: Bump Go versions in workflows\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/2fda229d9ac0cb5ba654ebc824cfbb90248f82d9\"\u003e\u003ccode\u003e2fda229\u003c/code\u003e\u003c/a\u003e osfs: ChrootOS eval baseDir on creation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/427b27f32f22de11498a682c65cd5060a01ec168\"\u003e\u003ccode\u003e427b27f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-billy/issues/203\"\u003e#203\u003c/a\u003e from pjbgf/v5-improvements\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/7d5a23ece03edc171c1f63c8fa73f84c8428bf17\"\u003e\u003ccode\u003e7d5a23e\u003c/code\u003e\u003c/a\u003e chroot: Reject symlink loops\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/2c2287a233d2ee1e6cdce8956141f6d10505f3bf\"\u003e\u003ccode\u003e2c2287a\u003c/code\u003e\u003c/a\u003e util: avoid following symlinks in RemoveAll fallback\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/cbd88e9a9a2d7fe1065bbe083d8bf0c5fd7290de\"\u003e\u003ccode\u003ecbd88e9\u003c/code\u003e\u003c/a\u003e Fix mount path handling\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.6.2...v5.9.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-git/v5` from 5.16.4 to 5.19.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-git/releases\"\u003egithub.com/go-git/go-git/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2...\n\n_Description has been truncated_","html_url":"https://github.com/wailsapp/wails/pull/5432","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/wailsapp%2Fwails/issues/5432","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/5432/packages"}},{"old_version":"1.3.8","new_version":"1.6.3","update_type":"minor","path":null,"pr_created_at":"2026-05-13T15:45:41.000Z","version_change":"1.3.8 → 1.6.3","issue":{"uuid":"4439249688","node_id":"PR_kwDOOQ8lIc7bL5Ju","number":11,"state":"closed","title":"chore(deps): bump the go_modules group across 1 directory with 13 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-05-14T22:24:50.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-13T15:45:41.000Z","updated_at":"2026-05-14T22:24:52.000Z","time_to_close":110349,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"go_modules","update_count":13,"packages":[{"name":"github.com/anchore/quill","old_version":"0.5.1","new_version":"0.7.1","repository_url":"https://github.com/anchore/quill"},{"name":"github.com/ulikunitz/xz","old_version":"0.5.12","new_version":"0.5.14","repository_url":"https://github.com/ulikunitz/xz"},{"name":"github.com/buger/jsonparser","old_version":"1.1.1","new_version":"1.1.2","repository_url":"https://github.com/buger/jsonparser"},{"name":"github.com/cloudflare/circl","old_version":"1.3.8","new_version":"1.6.3","repository_url":"https://github.com/cloudflare/circl"},{"name":"github.com/docker/cli","old_version":"27.5.0+incompatible","new_version":"29.2.0+incompatible","repository_url":"https://github.com/docker/cli"},{"name":"github.com/go-git/go-billy/v5","old_version":"5.6.1","new_version":"5.9.0","repository_url":"https://github.com/go-git/go-billy"},{"name":"github.com/go-git/go-git/v5","old_version":"5.13.1","new_version":"5.19.0","repository_url":"https://github.com/go-git/go-git"},{"name":"github.com/go-jose/go-jose/v4","old_version":"4.0.5","new_version":"4.1.4","repository_url":"https://github.com/go-jose/go-jose"},{"name":"github.com/opencontainers/runc","old_version":"1.1.14","new_version":"1.2.8","repository_url":"https://github.com/opencontainers/runc"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 9 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/anchore/quill](https://github.com/anchore/quill) | `0.5.1` | `0.7.1` |\n| [github.com/ulikunitz/xz](https://github.com/ulikunitz/xz) | `0.5.12` | `0.5.14` |\n| [github.com/buger/jsonparser](https://github.com/buger/jsonparser) | `1.1.1` | `1.1.2` |\n| [github.com/cloudflare/circl](https://github.com/cloudflare/circl) | `1.3.8` | `1.6.3` |\n| [github.com/docker/cli](https://github.com/docker/cli) | `27.5.0+incompatible` | `29.2.0+incompatible` |\n| [github.com/go-git/go-billy/v5](https://github.com/go-git/go-billy) | `5.6.1` | `5.9.0` |\n| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.13.1` | `5.19.0` |\n| [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) | `4.0.5` | `4.1.4` |\n| [github.com/opencontainers/runc](https://github.com/opencontainers/runc) | `1.1.14` | `1.2.8` |\n\n\nUpdates `github.com/anchore/quill` from 0.5.1 to 0.7.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/anchore/quill/releases\"\u003egithub.com/anchore/quill's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003ev0.7.1\u003c/h1\u003e\n\u003ch3\u003eSecurity Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDo not allow for unbounded reads for user controlled input [\u003ca href=\"https://redirect.github.com/anchore/quill/pull/681\"\u003e#681\u003c/a\u003e \u003ca href=\"https://github.com/wagoodman\"\u003e\u003ccode\u003e@​wagoodman\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eAccount for excessive read limits in macho parsing [\u003ca href=\"https://redirect.github.com/anchore/quill/pull/682\"\u003e#682\u003c/a\u003e \u003ca href=\"https://github.com/wagoodman\"\u003e\u003ccode\u003e@​wagoodman\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eValidate developer log URL requests [\u003ca href=\"https://redirect.github.com/anchore/quill/pull/680\"\u003e#680\u003c/a\u003e \u003ca href=\"https://github.com/wagoodman\"\u003e\u003ccode\u003e@​wagoodman\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/anchore/quill/compare/v0.7.0...v0.7.1\"\u003e(Full Changelog)\u003c/a\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003ch1\u003ev0.7.0\u003c/h1\u003e\n\u003ch3\u003eAdded Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edry run signing and notarization process before running in production [\u003ca href=\"https://redirect.github.com/anchore/quill/issues/617\"\u003e#617\u003c/a\u003e \u003ca href=\"https://redirect.github.com/anchore/quill/pull/618\"\u003e#618\u003c/a\u003e \u003ca href=\"https://github.com/willmurphyscode\"\u003e\u003ccode\u003e@​willmurphyscode\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTeamID is not set during signing [\u003ca href=\"https://redirect.github.com/anchore/quill/issues/147\"\u003e#147\u003c/a\u003e \u003ca href=\"https://redirect.github.com/anchore/quill/pull/669\"\u003e#669\u003c/a\u003e \u003ca href=\"https://github.com/jflowers\"\u003e\u003ccode\u003e@​jflowers\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eAdditional Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTypo in install.sh help text [\u003ca href=\"https://redirect.github.com/anchore/quill/issues/546\"\u003e#546\u003c/a\u003e \u003ca href=\"https://redirect.github.com/anchore/quill/pull/549\"\u003e#549\u003c/a\u003e \u003ca href=\"https://github.com/popey\"\u003e\u003ccode\u003e@​popey\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003emigrate to latest tool ci patterns [\u003ca href=\"https://redirect.github.com/anchore/quill/pull/670\"\u003e#670\u003c/a\u003e \u003ca href=\"https://github.com/spiffcs\"\u003e\u003ccode\u003e@​spiffcs\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eupdate golang to v1.26 [\u003ca href=\"https://redirect.github.com/anchore/quill/pull/668\"\u003e#668\u003c/a\u003e \u003ca href=\"https://github.com/wagoodman\"\u003e\u003ccode\u003e@​wagoodman\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003edoc: Add llms.txt for the 🤖 🕷️ [\u003ca href=\"https://redirect.github.com/anchore/quill/pull/592\"\u003e#592\u003c/a\u003e \u003ca href=\"https://github.com/popey\"\u003e\u003ccode\u003e@​popey\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUpdate dependencies [\u003ca href=\"https://redirect.github.com/anchore/quill/pull/627\"\u003e#627\u003c/a\u003e \u003ca href=\"https://github.com/wagoodman\"\u003e\u003ccode\u003e@​wagoodman\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eAdd periodic workflow to update certs [\u003ca href=\"https://redirect.github.com/anchore/quill/pull/608\"\u003e#608\u003c/a\u003e \u003ca href=\"https://github.com/wagoodman\"\u003e\u003ccode\u003e@​wagoodman\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003elint gh actions with zizmor [\u003ca href=\"https://redirect.github.com/anchore/quill/pull/581\"\u003e#581\u003c/a\u003e \u003ca href=\"https://github.com/willmurphyscode\"\u003e\u003ccode\u003e@​willmurphyscode\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eupdate to go 1.24.x [\u003ca href=\"https://redirect.github.com/anchore/quill/pull/543\"\u003e#543\u003c/a\u003e \u003ca href=\"https://github.com/westonsteimel\"\u003e\u003ccode\u003e@​westonsteimel\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eupdate runners to ubuntu-24.04 [\u003ca href=\"https://redirect.github.com/anchore/quill/pull/541\"\u003e#541\u003c/a\u003e \u003ca href=\"https://github.com/kzantow\"\u003e\u003ccode\u003e@​kzantow\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/anchore/quill/compare/v0.5.1...v0.7.0\"\u003e(Full Changelog)\u003c/a\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/quill/commit/9cdb0823ea1d2c45dcc11557f8c5cd7291c75d29\"\u003e\u003ccode\u003e9cdb082\u003c/code\u003e\u003c/a\u003e do not allow for unbounded reads for user controlled input (\u003ca href=\"https://redirect.github.com/anchore/quill/issues/681\"\u003e#681\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/quill/commit/80cf3fe082678af0ec4f9f8dd93f39189d2dc1fe\"\u003e\u003ccode\u003e80cf3fe\u003c/code\u003e\u003c/a\u003e account for excessive read limits in macho parsing code (\u003ca href=\"https://redirect.github.com/anchore/quill/issues/682\"\u003e#682\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/quill/commit/e41d66a517c2dc20ad8e9fbccffbdc6ba5ef0020\"\u003e\u003ccode\u003ee41d66a\u003c/code\u003e\u003c/a\u003e validate developer log URL requests (\u003ca href=\"https://redirect.github.com/anchore/quill/issues/680\"\u003e#680\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/quill/commit/899202c7eace3de7b3f4f7461bdfd1c4c38701db\"\u003e\u003ccode\u003e899202c\u003c/code\u003e\u003c/a\u003e update cred var values for p12 in release (\u003ca href=\"https://redirect.github.com/anchore/quill/issues/679\"\u003e#679\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/quill/commit/c73a37bd3b655633c1bd5466c2b2f65b2ae4032c\"\u003e\u003ccode\u003ec73a37b\u003c/code\u003e\u003c/a\u003e remove goreleaser config for release step + update tool refs (\u003ca href=\"https://redirect.github.com/anchore/quill/issues/678\"\u003e#678\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/quill/commit/95e119c6cb513a69f6b45d3e86a9fbcb2c77b669\"\u003e\u003ccode\u003e95e119c\u003c/code\u003e\u003c/a\u003e persist credentials for git (\u003ca href=\"https://redirect.github.com/anchore/quill/issues/677\"\u003e#677\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/quill/commit/02e765ab563811d7a3f0ede8df36977da92e8779\"\u003e\u003ccode\u003e02e765a\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/aws/aws-sdk-go-v2/config (\u003ca href=\"https://redirect.github.com/anchore/quill/issues/663\"\u003e#663\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/quill/commit/530bb7f3ddf667d262891b79fb15c0147d81cf11\"\u003e\u003ccode\u003e530bb7f\u003c/code\u003e\u003c/a\u003e add test notarize command (\u003ca href=\"https://redirect.github.com/anchore/quill/issues/618\"\u003e#618\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/quill/commit/3e8269c31055b1878a34c1954347254a42b37452\"\u003e\u003ccode\u003e3e8269c\u003c/code\u003e\u003c/a\u003e Set team ID during signing (\u003ca href=\"https://redirect.github.com/anchore/quill/issues/675\"\u003e#675\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/quill/commit/12b3e8eb4c06d7582da9725fad3bc7c268872752\"\u003e\u003ccode\u003e12b3e8e\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/blacktop/go-macho from 1.1.259 to 1.1.263 (\u003ca href=\"https://redirect.github.com/anchore/quill/issues/661\"\u003e#661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/anchore/quill/compare/v0.5.1...v0.7.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/ulikunitz/xz` from 0.5.12 to 0.5.14\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ulikunitz/xz/commit/7184815834c4777e8fa665946721d5fe114c2c35\"\u003e\u003ccode\u003e7184815\u003c/code\u003e\u003c/a\u003e Preparation of release v0.5.14\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ulikunitz/xz/commit/88ddf1d0d98d688db65de034f48960b2760d2ae2\"\u003e\u003ccode\u003e88ddf1d\u003c/code\u003e\u003c/a\u003e Address Security Issue GHSA-jc7w-c686-c4v9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ulikunitz/xz/commit/c8314b8f21e9c5e25b52da07544cac14db277e89\"\u003e\u003ccode\u003ec8314b8\u003c/code\u003e\u003c/a\u003e Add new package xio with WriteCloserStack\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/ulikunitz/xz/compare/v0.5.12...v0.5.14\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.36.0 to 0.46.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/19acf81bd7bc7b558d18a550e8e023df2c33e742\"\u003e\u003ccode\u003e19acf81\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/3a1c6b4b61966d06b6469ad7bc15839ba76eeb89\"\u003e\u003ccode\u003e3a1c6b4\u003c/code\u003e\u003c/a\u003e x509roots/fallback: update bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f4602e40409257658159002a9af6aedb875949fb\"\u003e\u003ccode\u003ef4602e4\u003c/code\u003e\u003c/a\u003e ssh/agent: fix flaky test by ensuring a writeable home directory\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/4e0068c0098be10d7025c99ab7c50ce454c1f0f9\"\u003e\u003ccode\u003e4e0068c\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e79546e28b85ea53dd37afe1c4102746ef553b9c\"\u003e\u003ccode\u003ee79546e\u003c/code\u003e\u003c/a\u003e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f91f7a7c31bf90b39c1de895ad116a2bacc88748\"\u003e\u003ccode\u003ef91f7a7\u003c/code\u003e\u003c/a\u003e ssh/agent: prevent panic on malformed constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/2df4153a0311bdfea44376e0eb6ef2faefb0275b\"\u003e\u003ccode\u003e2df4153\u003c/code\u003e\u003c/a\u003e acme/autocert: let automatic renewal work with short lifetime certs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/bcf6a849efcf4702fa5172cb0998b46c3da1e989\"\u003e\u003ccode\u003ebcf6a84\u003c/code\u003e\u003c/a\u003e acme: pass context to request\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b4f2b62076abeee4e43fb59544dac565715fbf1e\"\u003e\u003ccode\u003eb4f2b62\u003c/code\u003e\u003c/a\u003e ssh: fix error message on unsupported cipher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/79ec3a51fcc7fbd2691d56155d578225ccc542e2\"\u003e\u003ccode\u003e79ec3a5\u003c/code\u003e\u003c/a\u003e ssh: allow to bind to a hostname in remote forwarding\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.36.0...v0.46.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream` from 1.6.3 to 1.7.5\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/4599f78694cabb6853addabc6f92cb197fdb5647\"\u003e\u003ccode\u003e4599f78\u003c/code\u003e\u003c/a\u003e Release 2023-08-21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/2a439ce0fdda24816a5ea71c083765af67e93599\"\u003e\u003ccode\u003e2a439ce\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/46f31d76b34aefbc66bbfb08d2ef7e22267d4b66\"\u003e\u003ccode\u003e46f31d7\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/525486a4cfa9b8364ea5346a526dd1f92d3edc76\"\u003e\u003ccode\u003e525486a\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/b4e3176642b69937575f61f752f7d094fb6f4084\"\u003e\u003ccode\u003eb4e3176\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/2189\"\u003e#2189\u003c/a\u003e from aws/feat-presign-polly\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/30fe9b8de4c8538156248ae21b577a3e49170750\"\u003e\u003ccode\u003e30fe9b8\u003c/code\u003e\u003c/a\u003e Modify and Merge polly mod import\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/f6c1d4839450e7f99850868570ff0c47850b72ca\"\u003e\u003ccode\u003ef6c1d48\u003c/code\u003e\u003c/a\u003e sync polly presigner from main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/396f97a998c5fab5bc7ee7bd4297c6d0f42b661e\"\u003e\u003ccode\u003e396f97a\u003c/code\u003e\u003c/a\u003e Release 2023-08-18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/08ab45438df135fc66f2eaf80032694ff2486db3\"\u003e\u003ccode\u003e08ab454\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/b50999bacbf780bf55d5c2b051c96e5c4467a5f6\"\u003e\u003ccode\u003eb50999b\u003c/code\u003e\u003c/a\u003e Update SDK's smithy-go dependency to v1.14.2\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/service/odb/v1.6.3...service/m2/v1.7.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/buger/jsonparser` from 1.1.1 to 1.1.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/buger/jsonparser/releases\"\u003egithub.com/buger/jsonparser's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated travis to build for 1.13 to 1.15 by \u003ca href=\"https://github.com/janreggie\"\u003e\u003ccode\u003e@​janreggie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/225\"\u003ebuger/jsonparser#225\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\n\u003cul\u003e\n\u003cli\u003eeliminate 2 allocations in EachKey() by \u003ca href=\"https://github.com/Villenny\"\u003e\u003ccode\u003e@​Villenny\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/223\"\u003ebuger/jsonparser#223\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003efix issue \u003ca href=\"https://redirect.github.com/buger/jsonparser/issues/150\"\u003e#150\u003c/a\u003e (in deleting case) by \u003ca href=\"https://github.com/daria-kay\"\u003e\u003ccode\u003e@​daria-kay\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/226\"\u003ebuger/jsonparser#226\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efixing the oss-fuzz issue by \u003ca href=\"https://github.com/daria-kay\"\u003e\u003ccode\u003e@​daria-kay\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/227\"\u003ebuger/jsonparser#227\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix parseInt overflow check false negative by \u003ca href=\"https://github.com/carsonip\"\u003e\u003ccode\u003e@​carsonip\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/231\"\u003ebuger/jsonparser#231\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdded bespoke error for null cases by \u003ca href=\"https://github.com/jonomacd\"\u003e\u003ccode\u003e@​jonomacd\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/228\"\u003ebuger/jsonparser#228\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFuzzing: Add CIFuzz by \u003ca href=\"https://github.com/AdamKorcz\"\u003e\u003ccode\u003e@​AdamKorcz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/239\"\u003ebuger/jsonparser#239\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdded latest versions of go to tests by \u003ca href=\"https://github.com/moredure\"\u003e\u003ccode\u003e@​moredure\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/244\"\u003ebuger/jsonparser#244\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix EachKey pIdxFlags allocation by \u003ca href=\"https://github.com/unxcepted\"\u003e\u003ccode\u003e@​unxcepted\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/241\"\u003ebuger/jsonparser#241\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: prevent panic on negative slice index in Delete with malformed JSON (GO-2026-4514) by \u003ca href=\"https://github.com/dbarrosop\"\u003e\u003ccode\u003e@​dbarrosop\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/276\"\u003ebuger/jsonparser#276\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/janreggie\"\u003e\u003ccode\u003e@​janreggie\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/225\"\u003ebuger/jsonparser#225\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Villenny\"\u003e\u003ccode\u003e@​Villenny\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/223\"\u003ebuger/jsonparser#223\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/daria-kay\"\u003e\u003ccode\u003e@​daria-kay\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/226\"\u003ebuger/jsonparser#226\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/carsonip\"\u003e\u003ccode\u003e@​carsonip\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/231\"\u003ebuger/jsonparser#231\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jonomacd\"\u003e\u003ccode\u003e@​jonomacd\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/228\"\u003ebuger/jsonparser#228\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moredure\"\u003e\u003ccode\u003e@​moredure\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/244\"\u003ebuger/jsonparser#244\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/unxcepted\"\u003e\u003ccode\u003e@​unxcepted\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/241\"\u003ebuger/jsonparser#241\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dbarrosop\"\u003e\u003ccode\u003e@​dbarrosop\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/276\"\u003ebuger/jsonparser#276\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/buger/jsonparser/compare/v1.1.1...v1.1.2\"\u003ehttps://github.com/buger/jsonparser/compare/v1.1.1...v1.1.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/a69e7e01cd4ad67bdfd3ac2c080b9212af16f4b0\"\u003e\u003ccode\u003ea69e7e0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/buger/jsonparser/issues/276\"\u003e#276\u003c/a\u003e from dbarrosop/master\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/d3eacc0bab779d6cf98221f5268828fff287876e\"\u003e\u003ccode\u003ed3eacc0\u003c/code\u003e\u003c/a\u003e fix: prevent panic on negative slice index in Delete with malformed JSON (GO-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/61b32cfdfa0f5d368ef7c7daef28ce12d538740f\"\u003e\u003ccode\u003e61b32cf\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/buger/jsonparser/issues/241\"\u003e#241\u003c/a\u003e from unxcepted/master\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/2181e8398f18397c9cacbaea9889314bb585e868\"\u003e\u003ccode\u003e2181e83\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/buger/jsonparser/issues/244\"\u003e#244\u003c/a\u003e from ScaleChamp/patch-2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/1510b5194182fc2fb898f28cdbceb42fd7258bfa\"\u003e\u003ccode\u003e1510b51\u003c/code\u003e\u003c/a\u003e Added latest versions of go to tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/6fc2e488ed3cc4f1f1debec3b0c70715bd7be6fd\"\u003e\u003ccode\u003e6fc2e48\u003c/code\u003e\u003c/a\u003e fix: eachkey allocation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/a6f867eb7787e4ec54536b77b5d628ddf5c4f73d\"\u003e\u003ccode\u003ea6f867e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/buger/jsonparser/issues/239\"\u003e#239\u003c/a\u003e from AdamKorcz/cifuzz1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/cbc01fdbbe131706e89eeaaf0cd917760d8d3949\"\u003e\u003ccode\u003ecbc01fd\u003c/code\u003e\u003c/a\u003e Fuzzing: Add CIFuzz\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/dc92d6932a1272b4d8f485f798a88c3a75106256\"\u003e\u003ccode\u003edc92d69\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/buger/jsonparser/issues/228\"\u003e#228\u003c/a\u003e from jonomacd/null-handling\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/2d9d6343e8621ddc18c70749663f74bc584c0de4\"\u003e\u003ccode\u003e2d9d634\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/buger/jsonparser/issues/231\"\u003e#231\u003c/a\u003e from carsonip/fix-parseint-overflow-check\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/buger/jsonparser/compare/v1.1.1...v1.1.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/cloudflare/circl` from 1.3.8 to 1.6.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cloudflare/circl/releases\"\u003egithub.com/cloudflare/circl's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eCIRCL v1.6.3\u003c/h2\u003e\n\u003cp\u003eFix a bug on ecc/p384 scalar multiplication.\u003c/p\u003e\n\u003ch3\u003eWhat's Changed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esign/mldsa: Check opts for nil value  by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/582\"\u003ecloudflare/circl#582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eecc/p384: Point addition must handle point doubling case. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/583\"\u003ecloudflare/circl#583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease CIRCL v1.6.3 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/584\"\u003ecloudflare/circl#584\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNew SLH-DSA, improvements in ML-DSA for arm64.\u003c/li\u003e\n\u003cli\u003eTested compilation on WASM.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize pairing product computation by moving exponentiations to G1. by \u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esign: Adding SLH-DSA signature by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/512\"\u003ecloudflare/circl#512\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate code generators to CIRCL v1.6.1. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/548\"\u003ecloudflare/circl#548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eML-DSA: Add preliminary Wycheproof test vectors by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/552\"\u003ecloudflare/circl#552\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ego fmt by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/554\"\u003ecloudflare/circl#554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egz-compressing test vectors, use of HexBytes and ReadGzip functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/555\"\u003ecloudflare/circl#555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Removes use of elliptic Marshal and Unmarshal functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/556\"\u003ecloudflare/circl#556\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport encoding/decoding ML-DSA private keys (as long as they contain seeds) by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/559\"\u003ecloudflare/circl#559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to golangci-lint v2 by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/560\"\u003ecloudflare/circl#560\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreparation for ARM64 Implementation of poly operations for dilithium package. by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eprepare power2Round for custom implementations in assembly by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/564\"\u003ecloudflare/circl#564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eARM64 implementation for poly.PackLe16 by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/563\"\u003ecloudflare/circl#563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polyMulBy2toD by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/565\"\u003ecloudflare/circl#565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polySub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/566\"\u003ecloudflare/circl#566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: add byteLen method for short groups and RandomScalar uses rand.Int by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/568\"\u003ecloudflare/circl#568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of poly.Add/Sub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/572\"\u003ecloudflare/circl#572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Adding cryptobyte marshaling to scalars by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/569\"\u003ecloudflare/circl#569\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumping up to Go1.25 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/574\"\u003ecloudflare/circl#574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: Including WASM compilation. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/577\"\u003ecloudflare/circl#577\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to using package-declared HPKE errors for shortkem instead of standard library errors by \u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease v1.6.2 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/579\"\u003ecloudflare/circl#579\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixes some point checks on the FourQ curve.\u003c/li\u003e\n\u003cli\u003eHybrid KEM fails on low-order points.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/24ae53c5d6f7fe18203adc125ba3ed76a38703e1\"\u003e\u003ccode\u003e24ae53c\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/581020bd4a836b8ce7bd4e414ba2884c07dbc906\"\u003e\u003ccode\u003e581020b\u003c/code\u003e\u003c/a\u003e Rename method to oddMultiplesProjective.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/12209a4566605692a8402594e367a5aed5148460\"\u003e\u003ccode\u003e12209a4\u003c/code\u003e\u003c/a\u003e Removing unused cmov for jacobian points.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/fcba359f4178645d2c9e50f29ab6966337da4b95\"\u003e\u003ccode\u003efcba359\u003c/code\u003e\u003c/a\u003e ecc/p384: use of complete projective formulas for scalar multiplication.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/5e1bae8d8c2df4e717c2c5c2d5b5d60b629b2ac6\"\u003e\u003ccode\u003e5e1bae8\u003c/code\u003e\u003c/a\u003e ecc/p384: handle point doubling in point addition with Jacobian coordinates.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/341604685ff97e8f7440ae4b4711ba1c118c648c\"\u003e\u003ccode\u003e3416046\u003c/code\u003e\u003c/a\u003e Check opts for nil value.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/a763d47a6dce43d1f4f7b697d1d7810463a526f6\"\u003e\u003ccode\u003ea763d47\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3c70bf9ad53b681fbe5ba6067e454a86549fee8a\"\u003e\u003ccode\u003e3c70bf9\u003c/code\u003e\u003c/a\u003e Bump x/crypto x/sys dependencies.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3f0f15b2bfe67bad81a35e8aec81ae42ca78349d\"\u003e\u003ccode\u003e3f0f15b\u003c/code\u003e\u003c/a\u003e Revert to using package-declared HPKE errors for shortkem instead of standard...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/23491bd573cf29b6f567057a158203a2c9dfa30d\"\u003e\u003ccode\u003e23491bd\u003c/code\u003e\u003c/a\u003e Adding generic Power2Round method.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.3.8...v1.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/docker/cli` from 27.5.0+incompatible to 29.2.0+incompatible\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/0b9d1985dbf919678745f122b12b46f730b97d87\"\u003e\u003ccode\u003e0b9d198\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6764\"\u003e#6764\u003c/a\u003e from vvoland/update-docker\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/9c9ec7358833bb3e5622a166673744fca7fefac4\"\u003e\u003ccode\u003e9c9ec73\u003c/code\u003e\u003c/a\u003e vendor: github.com/moby/moby/client v0.2.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/bab3e81e1d8874a2d4f26afc02225ee537d0b15d\"\u003e\u003ccode\u003ebab3e81\u003c/code\u003e\u003c/a\u003e vendor: github.com/moby/moby/api v1.53.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/2e64fc162ab632a530f7191cc6af65c22356ea0d\"\u003e\u003ccode\u003e2e64fc1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6367\"\u003e#6367\u003c/a\u003e from thaJeztah/template_slicejoin\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/1f2ba2ac9d8c92870f7cce89dfa17d89d3375c19\"\u003e\u003ccode\u003e1f2ba2a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6760\"\u003e#6760\u003c/a\u003e from thaJeztah/container_create_fix_error\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/e34a3422cc32c808d2e8b0e0ef51112d53fa896d\"\u003e\u003ccode\u003ee34a342\u003c/code\u003e\u003c/a\u003e templates: make \u0026quot;join\u0026quot; work with non-string slices and map values\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/a86356d42f918968579e670b51bc85dc45982a33\"\u003e\u003ccode\u003ea86356d\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6763\"\u003e#6763\u003c/a\u003e from thaJeztah/bump_mapstructure\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/771660a17e56116eb32677a6d83c5210e5092194\"\u003e\u003ccode\u003e771660a\u003c/code\u003e\u003c/a\u003e vendor: github.com/go-viper/mapstructure/v2 v2.5.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/9cff36b35a828be8d137bc5de4983b7e3fef1614\"\u003e\u003ccode\u003e9cff36b\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6762\"\u003e#6762\u003c/a\u003e from thaJeztah/bump_x_deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/08ed2bc6e8bc49ad988ecd44633620a48fb10967\"\u003e\u003ccode\u003e08ed2bc\u003c/code\u003e\u003c/a\u003e cli/command/container: make injecting config.json failures a warning\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/docker/cli/compare/v27.5.0...v29.2.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-billy/v5` from 5.6.1 to 5.9.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-billy/releases\"\u003egithub.com/go-git/go-billy/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.9.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUse path.Clean instead of filepath.Clean in iofs.Open by \u003ca href=\"https://github.com/puerco\"\u003e\u003ccode\u003e@​puerco\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/197\"\u003ego-git/go-billy#197\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDeprecate ChrootOS in favour of BoundOS by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/201\"\u003ego-git/go-billy#201\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGeneral Improvements by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/203\"\u003ego-git/go-billy#203\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eosfs: ChrootOS eval baseDir on creation by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/205\"\u003ego-git/go-billy#205\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRun go-git tests as part of integration tests by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/206\"\u003ego-git/go-billy#206\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.8.0...v5.9.0\"\u003ehttps://github.com/go-git/go-billy/compare/v5.8.0...v5.9.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.8.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module golang.org/x/net to v0.45.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/183\"\u003ego-git/go-billy#183\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Ensure Chmod behaviour across BoundOS and ChrootOS by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/187\"\u003ego-git/go-billy#187\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.7.0...v5.8.0\"\u003ehttps://github.com/go-git/go-billy/compare/v5.7.0...v5.8.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.7.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for Chmod on billy.Filesystem by \u003ca href=\"https://github.com/bitfehler\"\u003e\u003ccode\u003e@​bitfehler\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/171\"\u003ego-git/go-billy#171\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Update module golang.org/x/net to v0.38.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/177\"\u003ego-git/go-billy#177\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.6.2...v5.7.0\"\u003ehttps://github.com/go-git/go-billy/compare/v5.6.2...v5.7.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.6.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eEnable the \u003ccode\u003eiofs\u003c/code\u003e adapter to also return other interfaces from \u003ccode\u003eio/fs\u003c/code\u003e by \u003ca href=\"https://github.com/JAORMX\"\u003e\u003ccode\u003e@​JAORMX\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/102\"\u003ego-git/go-billy#102\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Bump dependencies by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/103\"\u003ego-git/go-billy#103\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/JAORMX\"\u003e\u003ccode\u003e@​JAORMX\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-git/go-billy/pull/102\"\u003ego-git/go-billy#102\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.6.1...v5.6.2\"\u003ehttps://github.com/go-git/go-billy/compare/v5.6.1...v5.6.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/237e529bb8de61704047f71a5ab1c8e6676492f1\"\u003e\u003ccode\u003e237e529\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-billy/issues/206\"\u003e#206\u003c/a\u003e from pjbgf/v5-improvements\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/04edb394b39979b5cbdec30ded6abdcb9f7786c5\"\u003e\u003ccode\u003e04edb39\u003c/code\u003e\u003c/a\u003e build: Add go-git integration test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/d8efefd33b2e8eeea1030e317bb0d71c5e918270\"\u003e\u003ccode\u003ed8efefd\u003c/code\u003e\u003c/a\u003e osfs: preserve empty ChrootOS base\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/07f2a0bf50e42d438d1d9d263c3c8a22598985b8\"\u003e\u003ccode\u003e07f2a0b\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-billy/issues/205\"\u003e#205\u003c/a\u003e from pjbgf/v5-improvements\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/25207c8468f1af656953cb5db7030aad5df1fe99\"\u003e\u003ccode\u003e25207c8\u003c/code\u003e\u003c/a\u003e build: Bump Go versions in workflows\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/2fda229d9ac0cb5ba654ebc824cfbb90248f82d9\"\u003e\u003ccode\u003e2fda229\u003c/code\u003e\u003c/a\u003e osfs: ChrootOS eval baseDir on creation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/427b27f32f22de11498a682c65cd5060a01ec168\"\u003e\u003ccode\u003e427b27f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-billy/issues/203\"\u003e#203\u003c/a\u003e from pjbgf/v5-improvements\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/7d5a23ece03edc171c1f63c8fa73f84c8428bf17\"\u003e\u003ccode\u003e7d5a23e\u003c/code\u003e\u003c/a\u003e chroot: Reject symlink loops\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/2c2287a233d2ee1e6cdce8956141f6d10505f3bf\"\u003e\u003ccode\u003e2c2287a\u003c/code\u003e\u003c/a\u003e util: avoid following symlinks in RemoveAll fallback\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-billy/commit/cbd88e9a9a2d7fe1065bbe083d8bf0c5fd7290de\"\u003e\u003ccode\u003ecbd88e9\u003c/code\u003e\u003c/a\u003e Fix mount path handling\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-billy/compare/v5.6.1...v5.9.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-git/v5` from 5.13.1 to 5.19.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-git/releases\"\u003egithub.com/go-git/go-git/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.19.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.18.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2010\"\u003ego-git/go-git#2010\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Bump sha1cd and go-billy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2060\"\u003ego-git/go-git#2060\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Align object encoding with upstream by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2065\"\u003ego-git/go-git#2065\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.18.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eplumbing: transport/http, Add support for followRedirects policy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2004\"\u003ego-git/go-git#2004\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.17.1 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1941\"\u003ego-git/go-git#1941\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edotgit: skip writing pack files that already exist on disk by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1944\"\u003ego-git/go-git#1944\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e:warning: This release fixes a bug (\u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1942\"\u003ego-git/go-git#1942\u003c/a\u003e) that blocked some users from upgrading to \u003ccode\u003ev5.17.1\u003c/code\u003e. Thanks \u003ca href=\"https://github.com/pskrbasu\"\u003e\u003ccode\u003e@​pskrbasu\u003c/code\u003e\u003c/a\u003e for reporting it. :bow:\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.1...v5.17.2\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.1...v5.17.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/cloudflare/circl to v1.6.3 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1930\"\u003ego-git/go-git#1930\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/index, Improve v4 entry name validation by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1935\"\u003ego-git/go-git#1935\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/idxfile, Fix version and fanout checks by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1937\"\u003ego-git/go-git#1937\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.16.5 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1839\"\u003ego-git/go-git#1839\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: worktree, optimize infiles function for very large repos by \u003ca href=\"https://github.com/k-anshul\"\u003e\u003ccode\u003e@​k-anshul\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1853\"\u003ego-git/go-git#1853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: Add strict checks for supported extensions by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1861\"\u003ego-git/go-git#1861\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebackport, git: Improve Status() speed with new index.ModTime check by \u003ca href=\"https://github.com/cedric-appdirect\"\u003e\u003ccode\u003e@​cedric-appdirect\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1862\"\u003ego-git/go-git#1862\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003estorage: filesystem, Avoid overwriting loose obj files by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1864\"\u003ego-git/go-git#1864\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.16.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module golang.org/x/crypto to v0.45.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1744\"\u003ego-git/go-git#1744\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Bump Go test versions to 1.23-1.25 (v5) by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1746\"\u003ego-git/go-git#1746\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] git: worktree, Don't delete local untracked files when resetting worktree by \u003ca href=\"https://github.com/Ch00k\"\u003e\u003ccode\u003e@​Ch00k\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1800\"\u003ego-git/go-git#1800\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/bc930f4cbe095a3e1d49273655f73fcef7d41a42\"\u003e\u003ccode\u003ebc930f4\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2065\"\u003e#2065\u003c/a\u003e from go-git/commit-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/d315264343cead712aa9eb56475c2ec96f5ecef1\"\u003e\u003ccode\u003ed315264\u003c/code\u003e\u003c/a\u003e plumbing: object, Reset object before decode\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/6e1d34890a4dae8a0df738e531234bd60b7e9b66\"\u003e\u003ccode\u003e6e1d348\u003c/code\u003e\u003c/a\u003e plumbing: object, Align Tree handling with upstream\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/e134ba34cf95ed0167e5b1df36a933d7bde9d02d\"\u003e\u003ccode\u003ee134ba3\u003c/code\u003e\u003c/a\u003e tests: Skip double checks in Git v2.11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/1971422f6b1bec9176061b3293306981cfff981e\"\u003e\u003ccode\u003e1971422\u003c/code\u003e\u003c/a\u003e tests: Add git conformance tests for signing verification\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/a387aa8857a8fbba8e74b7f5485e9e030669ab5d\"\u003e\u003ccode\u003ea387aa8\u003c/code\u003e\u003c/a\u003e plumbing: object, Add ErrMalformedTag\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/f415670d906b5c6169d1fdc64f3f9f1d33eb6f9c\"\u003e\u003ccode\u003ef415670\u003c/code\u003e\u003c/a\u003e plumbing: object, Decode Tag headers via a state machine\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/5b0cd38a62e2336bb5f1a2ad0eb8ac8f9e7b740e\"\u003e\u003ccode\u003e5b0cd38\u003c/code\u003e\u003c/a\u003e plumbing: object, Reject multi-signature commits at Verify\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/fe8ed6223a6079d9fd84d853362a996e7df175fb\"\u003e\u003ccode\u003efe8ed62\u003c/code\u003e\u003c/a\u003e plumbing: object, Align Tag.EncodeWithoutSignature with Commit\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/98e337d5bdc4c0536a40ab7381b2231f7e0b15cd\"\u003e\u003ccode\u003e98e337d\u003c/code\u003e\u003c/a\u003e plumbing: object, Add support for Tag.SignatureSHA256\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-git/compare/v5.13.1...v5.19.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-jose/go-jose/v4` from 4.0.5 to 4.1.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-jose/go-jose/releases\"\u003egithub.com/go-jose/go-jose/v4's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.1.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003eFixes Panic in JWE decryption. See \u003ca href=\"https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\"\u003ehttps://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4\"\u003ehttps://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.1.3\u003c/h2\u003e\n\u003cp\u003eThis release drops Go 1.23 support as that Go release is no longer supported. With that, we can drop \u003ccode\u003ex/crypto\u003c/code\u003e and no longer have any external dependencies in go-jose outside of the standard library!\u003c/p\u003e\n\u003cp\u003eThis release fixes a bug where a critical b64 header was ignored if in an unprotected header. It is now rejected instead of ignored.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemove Go 1.23 support by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/205\"\u003ego-jose/go-jose#205\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReject JWS with an unprotected critical b64 header by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/210\"\u003ego-jose/go-jose#210\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.2...v4.1.3\"\u003ehttps://github.com/go-jose/go-jose/compare/v4.1.2...v4.1.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.1.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003ego-jose v4.1.2 improves some documentation, errors, and removes the only 3rd-party dependency.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate go-jose documentation by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/198\"\u003ego-jose/go-jose#198\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove dependency on testify by \u003ca href=\"https://github.com/wardviaene\"\u003e\u003ccode\u003e@​wardviaene\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/197\"\u003ego-jose/go-jose#197\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove error message for invalid private keys by \u003ca href=\"https://github.com/ProjectMutilation\"\u003e\u003ccode\u003e@​ProjectMutilation\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/195\"\u003ego-jose/go-jose#195\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eJWK unsupported error when unmarshalling by \u003ca href=\"https://github.com/fprojetto\"\u003e\u003ccode\u003e@​fprojetto\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/191\"\u003ego-jose/go-jose#191\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd JSONWebKey type to makeJWERecipient by \u003ca href=\"https://github.com/alvarolivie\"\u003e\u003ccode\u003e@​alvarolivie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/200\"\u003ego-jose/go-jose#200\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etestutils/assert: remove True, Nil, NotNil by \u003ca href=\"https://github.com/jsha\"\u003e\u003ccode\u003e@​jsha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/202\"\u003ego-jose/go-jose#202\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wardviaene\"\u003e\u003ccode\u003e@​wardviaene\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/197\"\u003ego-jose/go-jose#197\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fprojetto\"\u003e\u003ccode\u003e@​fprojetto\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/191\"\u003ego-jose/go-jose#191\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/alvarolivie\"\u003e\u003ccode\u003e@​alvarolivie\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/200\"\u003ego-jose/go-jose#200\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.1...v4.1.2\"\u003ehttps://github.com/go-jose/go-jose/compare/v4.1.1...v4.1.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.1.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDrop go-cmp dependency by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/186\"\u003ego-jose/go-jose#186\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ejws: improve performance and allocations for ParseSignedCompact by \u003ca href=\"https://github.com/drakkan\"\u003e\u003ccode\u003e@​drakkan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/188\"\u003ego-jose/go-jose#188\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd missing quote to unknown curve message \u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/170\"\u003e#170\u003c/a\u003e by \u003ca href=\"https://github.com/sudhanvaghebbale\"\u003e\u003ccode\u003e@​sudhanvaghebbale\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/189\"\u003ego-jose/go-jose#189\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix incorrect validation by \u003ca href=\"https://github.com/ProjectMutilation\"\u003e\u003ccode\u003e@​ProjectMutilation\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/192\"\u003ego-jose/go-jose#192\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRestore Go 1.23 compatibility by \u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/193\"\u003ego-jose/go-jose#193\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/drakkan\"\u003e\u003ccode\u003e@​drakkan\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/188\"\u003ego-jose/go-jose#188\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sudhanvaghebbale\"\u003e\u003ccode\u003e@​sudhanvaghebbale\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/189\"\u003ego-jose/go-jose#189\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ProjectMutilation\"\u003e\u003ccode\u003e@​ProjectMutilation\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/192\"\u003ego-jose/go-jose#192\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anuraaga\"\u003e\u003ccode\u003e@​anuraaga\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/193\"\u003ego-jose/go-jose#193\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/0e59876635f3dbf46d7b5e97b52bb75a3f96e7d9\"\u003e\u003ccode\u003e0e59876\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/ddffdbcec8bdadea8e02a20bdf19239878228215\"\u003e\u003ccode\u003eddffdbc\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 5 to 6 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/213\"\u003e#213\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/5348b9a4ba4559d2266b5af89fb5353cd1a5360a\"\u003e\u003ccode\u003e5348b9a\u003c/code\u003e\u003c/a\u003e Reject JWS with an unprotected critical b64 header (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/210\"\u003e#210\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/9153a5e4549c95e97a84e41e6375dc90eac54241\"\u003e\u003ccode\u003e9153a5e\u003c/code\u003e\u003c/a\u003e Bump actions/setup-python from 5 to 6 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/208\"\u003e#208\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/2126e17f8791f6a234e63b2e4e8cb9fac8605c3a\"\u003e\u003ccode\u003e2126e17\u003c/code\u003e\u003c/a\u003e Bump actions/setup-go from 5 to 6 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/209\"\u003e#209\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/9860c65054c4821d1e7c22200422b04181f58ebc\"\u003e\u003ccode\u003e9860c65\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 4 to 5 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/206\"\u003e#206\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/14239fdb15b88e1c42e41621ef24f1112cf31b5a\"\u003e\u003ccode\u003e14239fd\u003c/code\u003e\u003c/a\u003e Remove Go 1.23 support (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/205\"\u003e#205\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/a16e15813482ca5e9a679b7f5bb42ddfae616d43\"\u003e\u003ccode\u003ea16e158\u003c/code\u003e\u003c/a\u003e Update CI to run on Go 1.24 and 1.25 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/204\"\u003e#204\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/a1565a41aa008ae6545e0f50a636d254de5b4596\"\u003e\u003ccode\u003ea1565a4\u003c/code\u003e\u003c/a\u003e testutils/assert: remove True, Nil, NotNil (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/202\"\u003e#202\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/3a80e136a96e747bf44049414eadc02828df4d33\"\u003e\u003ccode\u003e3a80e13\u003c/code\u003e\u003c/a\u003e jwe: accept non-pointer JSONWebKey in Recipient (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/200\"\u003e#200\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.0.5...v4.1.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-viper/mapstructure/v2` from 2.0.0 to 2.4.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-viper/mapstructure/releases\"\u003egithub.com/go-viper/mapstructure/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.4.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003erefactor: replace interface{} with any by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/115\"\u003ego-viper/mapstructure#115\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.0 to 3.29.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/114\"\u003ego-viper/mapstructure#114\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGeneric tests by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/118\"\u003ego-viper/mapstructure#118\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix godoc reference link in README.md by \u003ca href=\"https://github.com/peczenyj\"\u003e\u003ccode\u003e@​peczenyj\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/107\"\u003ego-viper/mapstructure#107\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add StringToTimeLocationHookFunc to convert strings to *time.Location by \u003ca href=\"https://github.com/ErfanMomeniii\"\u003e\u003ccode\u003e@​ErfanMomeniii\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/117\"\u003ego-viper/mapstructure#117\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add back previous StringToSlice as a weak function by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/119\"\u003ego-viper/mapstructure#119\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ErfanMomeniii\"\u003e\u003ccode\u003e@​ErfanMomeniii\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/117\"\u003ego-viper/mapstructure#117\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-viper/mapstructure/compare/v2.3.0...v2.4.0\"\u003ehttps://github.com/go-viper/mapstructure/compare/v2.3.0...v2.4.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.3.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 4.1.7 to 4.2.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/46\"\u003ego-viper/mapstructure#46\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golangci/golangci-lint-action from 6.1.0 to 6.1.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/47\"\u003ego-viper/mapstructure#47\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[enhancement] Add check for \u003ccode\u003ereflect.Value\u003c/code\u003e in \u003ccode\u003eComposeDecodeHookFunc\u003c/code\u003e by \u003ca href=\"https://github.com/mahadzaryab1\"\u003e\u003ccode\u003e@​mahadzaryab1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/52\"\u003ego-viper/mapstructure#52\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.0.2 to 5.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/51\"\u003ego-viper/mapstructure#51\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 4.2.0 to 4.2.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/50\"\u003ego-viper/mapstructure#50\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.1.0 to 5.2.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/55\"\u003ego-viper/mapstructure#55\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.2.0 to 5.3.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/58\"\u003ego-viper/mapstructure#58\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: add Go 1.24 to the test matrix by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/74\"\u003ego-viper/mapstructure#74\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golangci/golangci-lint-action from 6.1.1 to 6.5.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/72\"\u003ego-viper/mapstructure#72\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golangci/golangci-lint-action from 6.5.0 to 6.5.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/76\"\u003ego-viper/mapstructure#76\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.3.0 to 5.4.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/78\"\u003ego-viper/mapstructure#78\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add decode hook for netip.Prefix by \u003ca href=\"https://github.com/tklauser\"\u003e\u003ccode\u003e@​tklauser\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/85\"\u003ego-viper/mapstructure#85\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdates by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/86\"\u003ego-viper/mapstructure#86\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 2.13.4 to 3.28.15 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/87\"\u003ego-viper/mapstructure#87\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.4.0 to 5.5.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/93\"\u003ego-viper/mapstructure#93\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.15 to 3.28.17 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/92\"\u003ego-viper/mapstructure#92\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.17 to 3.28.19 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/97\"\u003ego-viper/mapstructure#97\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/96\"\u003ego-viper/mapstructure#96\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate README.md by \u003ca href=\"https://github.com/peczenyj\"\u003e\u003ccode\u003e@​peczenyj\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/90\"\u003ego-viper/mapstructure#90\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd omitzero tag. by \u003ca href=\"https://github.com/Crystalix007\"\u003e\u003ccode\u003e@​Crystalix007\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/98\"\u003ego-viper/mapstructure#98\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse error structs instead of duplicated strings by \u003ca href=\"https://github.com/m1k1o\"\u003e\u003ccode\u003e@​m1k1o\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/102\"\u003ego-viper/mapstructure#102\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.19 to 3.29.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/101\"\u003ego-viper/mapstructure#101\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add common error interface by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/105\"\u003ego-viper/mapstructure#105\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eupdate linter by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/106\"\u003ego-viper/mapstructure#106\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFeature allow unset pointer by \u003ca href=\"https://github.com/rostislaved\"\u003e\u003ccode\u003e@​rostislaved\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/80\"\u003ego-viper/mapstructure#80\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tklauser\"\u003e\u003ccode\u003e@​tklauser\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/85\"\u003ego-viper/mapstructure#85\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/peczenyj\"\u003e\u003ccode\u003e@​peczenyj\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/90\"\u003ego-viper/mapstructure#90\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Crystalix007\"\u003e\u003ccode\u003e@​Crystalix007\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/98\"\u003ego-viper/mapstructure#98\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rostislaved\"\u003e\u003ccode\u003e@​rostislaved\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/80\"\u003ego-viper/mapstructure#80\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-viper/mapstructure/compare/v2.2.1...v2.3.0\"\u003ehttps://github.com/go-viper/mapstructure/compare/v2.2.1...v2.3.0\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/b9794a5f0e73d425210d6614ed833067029155f5\"\u003e\u003ccode\u003eb9794a5\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/119\"\u003e#119\u003c/a\u003e from go-viper/string-to-weak-slice\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/17cdcb0741054e2a33938adf6bd1f2a5c0aa8f30\"\u003e\u003ccode\u003e17cdcb0\u003c/code\u003e\u003c/a\u003e feat: add back previous StringToSlice as a weak function\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/3caca3614c3ab2c5b5d359c44fdcd72058887b19\"\u003e\u003ccode\u003e3caca36\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/117\"\u003e#117\u003c/a\u003e from ErfanMomeniii/main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/9a861bc115f2b54ed4e494662f29c172d9ef046a\"\u003e\u003ccode\u003e9a861bc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/107\"\u003e#107\u003c/a\u003e from peczenyj/patch-2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/86ed5b59da0615fb8c3a413f401cdf0231f1234c\"\u003e\u003ccode\u003e86ed5b5\u003c/code\u003e\u003c/a\u003e refactor: update\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/ace5b4e8b3dec99468ffa9498e42fb09d177b0a6\"\u003e\u003ccode\u003eace5b4e\u003c/code\u003e\u003c/a\u003e chore: add interface any linter\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/1a4f1aef38bfa8549762aaf42c7c18a5d268e76e\"\u003e\u003ccode\u003e1a4f1ae\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/118\"\u003e#118\u003c/a\u003e from go-viper/generic-tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/a2689090ed4348033c36724d866faf1f911a9f63\"\u003e\u003ccode\u003ea268909\u003c/code\u003e\u003c/a\u003e fix: lint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/17f1fd44eb7606b109c9bb017c0a1c6d3e93b5cd\"\u003e\u003ccode\u003e17f1fd4\u003c/code\u003e\u003c/a\u003e test: add more comments\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/b48c8566836bf291bfee2b217d51fc36e8e61f6f\"\u003e\u003ccode\u003eb48c856\u003c/code\u003e\u003c/a\u003e test: expand tests\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-viper/mapstructure/compare/v2.0.0...v2.4.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/opencontainers/runc` from 1.1.14 to 1.2.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/opencontainers/runc/releases\"\u003egithub.com/opencontainers/runc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003erunc v1.2.8 -- \u0026quot;鳥籠の中に囚われた屈辱を\u0026quot;\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!NOTE]\nSome vendors were given a pre-release version of this release.\nThis public release includes two extra patches to fix regressions\ndiscovered very late during the embargo period and were thus not\nincluded in the pre-release versions. Please update to this version.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cp\u003eThis release contains fixes for three high-severity security\nvulnerabilities in runc (\u003ca href=\"https://github.com/opencontainers/runc/security/advisories/GHSA-9493-h29p-rfm2\"\u003eCVE-2025-31133\u003c/a\u003e, \u003ca href=\"https://github.com/opencontainers/runc/security/advisories/GHSA-qw9x-cqr3-wc7r\"\u003eCVE-2025-52565\u003c/a\u003e, and\n\u003ca href=\"https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm\"\u003eCVE-2025-52881\u003c/a\u003e). All three vulnerabilities ultimately allow (through\ndifferent methods) for full container breakouts by bypassing runc's\nrestrictions for writing to arbitrary \u003ccode\u003e/proc\u003c/code\u003e files.\u003c/p\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/opencontainers/runc/security/advisories/GHSA-9493-h29p-rfm2\"\u003eCVE-2025-31133\u003c/a\u003e exploits an issue with how masked paths are implemented in\nrunc. When masking files, runc will bind-mount the container's \u003ccode\u003e/dev/null\u003c/code\u003e\ninode on top of the file. However, if an attacker can replace \u003ccode\u003e/dev/null\u003c/code\u003e\nwith a symlink to some other procfs file, runc will instead bind-mount the\nsymlink target read-write. This issue affected all known runc versions.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/opencontainers/runc/security/advisories/GHSA-qw9x-cqr3-wc7r\"\u003eCVE-2025-52565\u003c/a\u003e is very similar in concept and application to\n\u003ca href=\"https://github.com/opencontainers/runc/security/advisories/GHSA-9493-h29p-rfm2\"\u003eCVE-2025-31133\u003c/a\u003e, except that it exploits a flaw in \u003ccode\u003e/dev/console\u003c/code\u003e\nbind-mounts. When creating the \u003ccode\u003e/dev/console\u003c/code\u003e bind-mount (to \u003ccode\u003e/dev/pts/$n\u003c/code\u003e),\nif an attacker replaces \u003ccode\u003e/dev/pts/$n\u003c/code\u003e with a symlink then runc will\nbind-mount the symlink target over \u003ccode\u003e/dev/console\u003c/code\u003e. This issue affected all\nversions of runc \u0026gt;= 1.0.0-rc3.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https:...\n\n_Description has been truncated_","html_url":"https://github.com/coutureb/goreleaser/pull/11","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/coutureb%2Fgoreleaser/issues/11","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/11/packages"}},{"old_version":"1.6.2","new_version":"1.6.3","update_type":"patch","path":null,"pr_created_at":"2026-05-11T15:37:49.000Z","version_change":"1.6.2 → 1.6.3","issue":{"uuid":"4422142250","node_id":"PR_kwDOLYGZcc7aUL3N","number":884,"state":"open","title":"chore(deps): bump the go_modules group across 1 directory with 3 updates","user":"dependabot[bot]","labels":["dependencies","go","Stale"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-11T15:37:49.000Z","updated_at":"2026-06-12T03:49:55.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"go_modules","update_count":3,"packages":[{"name":"github.com/cloudflare/circl","old_version":"1.6.2","new_version":"1.6.3","repository_url":"https://github.com/cloudflare/circl"},{"name":"github.com/go-git/go-git/v5","old_version":"5.16.5","new_version":"5.19.0","repository_url":"https://github.com/go-git/go-git"},{"name":"github.com/open-policy-agent/opa","old_version":"0.69.0","new_version":"1.4.0","repository_url":"https://github.com/open-policy-agent/opa"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 3 updates in the /cliv2 directory: [github.com/cloudflare/circl](https://github.com/cloudflare/circl), [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) and [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa).\n\nUpdates `github.com/cloudflare/circl` from 1.6.2 to 1.6.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cloudflare/circl/releases\"\u003egithub.com/cloudflare/circl's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eCIRCL v1.6.3\u003c/h2\u003e\n\u003cp\u003eFix a bug on ecc/p384 scalar multiplication.\u003c/p\u003e\n\u003ch3\u003eWhat's Changed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esign/mldsa: Check opts for nil value  by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/582\"\u003ecloudflare/circl#582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eecc/p384: Point addition must handle point doubling case. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/583\"\u003ecloudflare/circl#583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease CIRCL v1.6.3 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/584\"\u003ecloudflare/circl#584\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/24ae53c5d6f7fe18203adc125ba3ed76a38703e1\"\u003e\u003ccode\u003e24ae53c\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/581020bd4a836b8ce7bd4e414ba2884c07dbc906\"\u003e\u003ccode\u003e581020b\u003c/code\u003e\u003c/a\u003e Rename method to oddMultiplesProjective.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/12209a4566605692a8402594e367a5aed5148460\"\u003e\u003ccode\u003e12209a4\u003c/code\u003e\u003c/a\u003e Removing unused cmov for jacobian points.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/fcba359f4178645d2c9e50f29ab6966337da4b95\"\u003e\u003ccode\u003efcba359\u003c/code\u003e\u003c/a\u003e ecc/p384: use of complete projective formulas for scalar multiplication.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/5e1bae8d8c2df4e717c2c5c2d5b5d60b629b2ac6\"\u003e\u003ccode\u003e5e1bae8\u003c/code\u003e\u003c/a\u003e ecc/p384: handle point doubling in point addition with Jacobian coordinates.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/341604685ff97e8f7440ae4b4711ba1c118c648c\"\u003e\u003ccode\u003e3416046\u003c/code\u003e\u003c/a\u003e Check opts for nil value.\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-git/v5` from 5.16.5 to 5.19.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-git/releases\"\u003egithub.com/go-git/go-git/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.19.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.18.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2010\"\u003ego-git/go-git#2010\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Bump sha1cd and go-billy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2060\"\u003ego-git/go-git#2060\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Align object encoding with upstream by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2065\"\u003ego-git/go-git#2065\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.18.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eplumbing: transport/http, Add support for followRedirects policy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2004\"\u003ego-git/go-git#2004\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.17.1 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1941\"\u003ego-git/go-git#1941\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edotgit: skip writing pack files that already exist on disk by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1944\"\u003ego-git/go-git#1944\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e:warning: This release fixes a bug (\u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1942\"\u003ego-git/go-git#1942\u003c/a\u003e) that blocked some users from upgrading to \u003ccode\u003ev5.17.1\u003c/code\u003e. Thanks \u003ca href=\"https://github.com/pskrbasu\"\u003e\u003ccode\u003e@​pskrbasu\u003c/code\u003e\u003c/a\u003e for reporting it. :bow:\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.1...v5.17.2\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.1...v5.17.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/cloudflare/circl to v1.6.3 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1930\"\u003ego-git/go-git#1930\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/index, Improve v4 entry name validation by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1935\"\u003ego-git/go-git#1935\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/idxfile, Fix version and fanout checks by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1937\"\u003ego-git/go-git#1937\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.16.5 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1839\"\u003ego-git/go-git#1839\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: worktree, optimize infiles function for very large repos by \u003ca href=\"https://github.com/k-anshul\"\u003e\u003ccode\u003e@​k-anshul\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1853\"\u003ego-git/go-git#1853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: Add strict checks for supported extensions by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1861\"\u003ego-git/go-git#1861\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebackport, git: Improve Status() speed with new index.ModTime check by \u003ca href=\"https://github.com/cedric-appdirect\"\u003e\u003ccode\u003e@​cedric-appdirect\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1862\"\u003ego-git/go-git#1862\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003estorage: filesystem, Avoid overwriting loose obj files by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1864\"\u003ego-git/go-git#1864\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/bc930f4cbe095a3e1d49273655f73fcef7d41a42\"\u003e\u003ccode\u003ebc930f4\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2065\"\u003e#2065\u003c/a\u003e from go-git/commit-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/d315264343cead712aa9eb56475c2ec96f5ecef1\"\u003e\u003ccode\u003ed315264\u003c/code\u003e\u003c/a\u003e plumbing: object, Reset object before decode\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/6e1d34890a4dae8a0df738e531234bd60b7e9b66\"\u003e\u003ccode\u003e6e1d348\u003c/code\u003e\u003c/a\u003e plumbing: object, Align Tree handling with upstream\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/e134ba34cf95ed0167e5b1df36a933d7bde9d02d\"\u003e\u003ccode\u003ee134ba3\u003c/code\u003e\u003c/a\u003e tests: Skip double checks in Git v2.11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/1971422f6b1bec9176061b3293306981cfff981e\"\u003e\u003ccode\u003e1971422\u003c/code\u003e\u003c/a\u003e tests: Add git conformance tests for signing verification\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/a387aa8857a8fbba8e74b7f5485e9e030669ab5d\"\u003e\u003ccode\u003ea387aa8\u003c/code\u003e\u003c/a\u003e plumbing: object, Add ErrMalformedTag\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/f415670d906b5c6169d1fdc64f3f9f1d33eb6f9c\"\u003e\u003ccode\u003ef415670\u003c/code\u003e\u003c/a\u003e plumbing: object, Decode Tag headers via a state machine\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/5b0cd38a62e2336bb5f1a2ad0eb8ac8f9e7b740e\"\u003e\u003ccode\u003e5b0cd38\u003c/code\u003e\u003c/a\u003e plumbing: object, Reject multi-signature commits at Verify\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/fe8ed6223a6079d9fd84d853362a996e7df175fb\"\u003e\u003ccode\u003efe8ed62\u003c/code\u003e\u003c/a\u003e plumbing: object, Align Tag.EncodeWithoutSignature with Commit\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/98e337d5bdc4c0536a40ab7381b2231f7e0b15cd\"\u003e\u003ccode\u003e98e337d\u003c/code\u003e\u003c/a\u003e plumbing: object, Add support for Tag.SignatureSHA256\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.5...v5.19.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/open-policy-agent/opa` from 0.69.0 to 1.4.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-policy-agent/opa/releases\"\u003egithub.com/open-policy-agent/opa's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.4.0\u003c/h2\u003e\n\u003cp\u003eThis release contains a security fix addressing CVE-2025-46569.\nIt also includes a mix of new features, bugfixes, and dependency updates.\u003c/p\u003e\n\u003ch4\u003eSecurity Fix: CVE-2025-46569 - OPA server Data API HTTP path injection of Rego (\u003ca href=\"https://github.com/open-policy-agent/opa/security/advisories/GHSA-6m8w-jc87-6cr7\"\u003eGHSA-6m8w-jc87-6cr7\u003c/a\u003e)\u003c/h4\u003e\n\u003cp\u003eA vulnerability in the OPA server's \u003ca href=\"https://www.openpolicyagent.org/docs/latest/rest-api/#data-api\"\u003eData API\u003c/a\u003e allows an attacker to craft the HTTP path in a way that injects Rego code into the query that is evaluated.\u003cbr /\u003e\nThe evaluation result cannot be made to return any other data than what is generated by the requested path, but this path can be misdirected, and the injected Rego code can be crafted to make the query succeed or fail; opening up for oracle attacks or, given the right circumstances, erroneous policy decision results.\nFurthermore, the injected code can be crafted to be computationally expensive, resulting in a Denial Of Service (DoS) attack.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eUsers are only impacted if all of the following apply:\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eOPA is deployed as a standalone server (rather than being used as a Go library)\u003c/li\u003e\n\u003cli\u003eThe OPA server is exposed outside of the local host in an untrusted environment.\u003c/li\u003e\n\u003cli\u003eThe configured \u003ca href=\"https://www.openpolicyagent.org/docs/latest/security/#authentication-and-authorization\"\u003eauthorization policy\u003c/a\u003e does not do exact matching of the input.path attribute when deciding if the request should be allowed.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eor, if all of the following apply:\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eOPA is deployed as a standalone server.\u003c/li\u003e\n\u003cli\u003eThe service connecting to OPA allows 3rd parties to insert unsanitised text into the path of the HTTP request to OPA’s Data API.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eNote: With \u003cstrong\u003eno\u003c/strong\u003e \u003ca href=\"https://www.openpolicyagent.org/docs/latest/security/#authentication-and-authorization\"\u003eAuthorization Policy\u003c/a\u003e configured for restricting API access (the default configuration), the RESTful \u003ca href=\"https://www.openpolicyagent.org/docs/latest/rest-api/#data-api\"\u003eData API\u003c/a\u003e provides access for managing Rego policies; and the RESTful \u003ca href=\"https://www.openpolicyagent.org/docs/latest/rest-api/#query-api\"\u003eQuery API\u003c/a\u003e facilitates advanced queries.\nFull access to these APIs provides both simpler, and broader access than what the security issue describes here can facilitate.\nAs such, OPA servers exposed to a network are \u003cstrong\u003enot\u003c/strong\u003e considered affected by the attack described here if they are knowingly not restricting access through an Authorization Policy.\u003c/p\u003e\n\u003cp\u003eThis issue affects all versions of OPA prior to 1.4.0.\u003c/p\u003e\n\u003cp\u003eSee the \u003ca href=\"https://github.com/open-policy-agent/opa/security/advisories/GHSA-6m8w-jc87-6cr7\"\u003eSecurity Advisory\u003c/a\u003e for more details.\u003c/p\u003e\n\u003cp\u003eReported by \u003ca href=\"https://github.com/GamrayW\"\u003e\u003ccode\u003e@​GamrayW\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/HyouKash\"\u003e\u003ccode\u003e@​HyouKash\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/AdrienIT\"\u003e\u003ccode\u003e@​AdrienIT\u003c/code\u003e\u003c/a\u003e, authored by \u003ca href=\"https://github.com/johanfylling\"\u003e\u003ccode\u003e@​johanfylling\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eRuntime, Tooling, SDK\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003east: Adding \u003ccode\u003erego_v1\u003c/code\u003e feature to \u003ccode\u003e--v0-compatible\u003c/code\u003e capabilities (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/pull/7474\"\u003e#7474\u003c/a\u003e) authored by \u003ca href=\"https://github.com/johanfylling\"\u003e\u003ccode\u003e@​johanfylling\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eexecutable: Add version and icon to OPA windows executable (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/3171\"\u003e#3171\u003c/a\u003e) authored by \u003ca href=\"https://github.com/sspaink\"\u003e\u003ccode\u003e@​sspaink\u003c/code\u003e\u003c/a\u003e reported by \u003ca href=\"https://github.com/christophwille\"\u003e\u003ccode\u003e@​christophwille\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eformat: Don't panic on format due to unexpected comments (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/6330\"\u003e#6330\u003c/a\u003e) authored by \u003ca href=\"https://github.com/sspaink\"\u003e\u003ccode\u003e@​sspaink\u003c/code\u003e\u003c/a\u003e reported by \u003ca href=\"https://github.com/sirpi\"\u003e\u003ccode\u003e@​sirpi\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eformat: Avoid modifying strings when formatting (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/6220\"\u003e#6220\u003c/a\u003e) authored by \u003ca href=\"https://github.com/sspaink\"\u003e\u003ccode\u003e@​sspaink\u003c/code\u003e\u003c/a\u003e reported by \u003ca href=\"https://github.com/zregvart\"\u003e\u003ccode\u003e@​zregvart\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eplugins/status: FIFO buffer channel for status events to prevent slow status API blocking (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/pull/7522\"\u003e#7522\u003c/a\u003e) authored by \u003ca href=\"https://github.com/sspaink\"\u003e\u003ccode\u003e@​sspaink\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eTopdown and Rego\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003egqlparser: Add JSON annotation in \u003ccode\u003einternal/gqlparser/ast\u003c/code\u003e to Position fields (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/pull/7509\"\u003e#7509\u003c/a\u003e) authored by \u003ca href=\"https://github.com/robmyersrobmyers\"\u003e\u003ccode\u003e@​robmyersrobmyers\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egraphql: Cache GraphQL schema parse results (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/pull/7457\"\u003e#7457\u003c/a\u003e) authored by \u003ca href=\"https://github.com/robmyersrobmyers\"\u003e\u003ccode\u003e@​robmyersrobmyers\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etopdown: Handling default functions in Partial Eval (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/7220\"\u003e#7220\u003c/a\u003e) authored by \u003ca href=\"https://github.com/johanfylling\"\u003e\u003ccode\u003e@​johanfylling\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etopdown: Fix wall clock time init for \u003ccode\u003ePartialRun()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/7490\"\u003e#7490\u003c/a\u003e) authored by \u003ca href=\"https://github.com/srenatus\"\u003e\u003ccode\u003e@​srenatus\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etopdown: Zero alloc lower/upper unless changed (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/pull/7472\"\u003e#7472\u003c/a\u003e) authored by \u003ca href=\"https://github.com/anderseknert\"\u003e\u003ccode\u003e@​anderseknert\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDocs, Website, Ecosystem\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadopters: Cloudsmith adds support for OPA (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/pull/7498\"\u003e#7498\u003c/a\u003e) authored by \u003ca href=\"https://github.com/ndouglas-cloudsmith\"\u003e\u003ccode\u003e@​ndouglas-cloudsmith\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md\"\u003egithub.com/open-policy-agent/opa's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.4.0\u003c/h2\u003e\n\u003cp\u003eThis release contains a security fix addressing CVE-2025-46569.\nIt also includes a mix of new features, bugfixes, and dependency updates.\u003c/p\u003e\n\u003ch4\u003eSecurity Fix: CVE-2025-46569 - OPA server Data API HTTP path injection of Rego (\u003ca href=\"https://github.com/open-policy-agent/opa/security/advisories/GHSA-6m8w-jc87-6cr7\"\u003eGHSA-6m8w-jc87-6cr7\u003c/a\u003e)\u003c/h4\u003e\n\u003cp\u003eA vulnerability in the OPA server's \u003ca href=\"https://www.openpolicyagent.org/docs/latest/rest-api/#data-api\"\u003eData API\u003c/a\u003e allows an attacker to craft the HTTP path in a way that injects Rego code into the query that is evaluated.\u003cbr /\u003e\nThe evaluation result cannot be made to return any other data than what is generated by the requested path, but this path can be misdirected, and the injected Rego code can be crafted to make the query succeed or fail; opening up for oracle attacks or, given the right circumstances, erroneous policy decision results.\nFurthermore, the injected code can be crafted to be computationally expensive, resulting in a Denial Of Service (DoS) attack.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eUsers are only impacted if all of the following apply:\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eOPA is deployed as a standalone server (rather than being used as a Go library)\u003c/li\u003e\n\u003cli\u003eThe OPA server is exposed outside of the local host in an untrusted environment.\u003c/li\u003e\n\u003cli\u003eThe configured \u003ca href=\"https://www.openpolicyagent.org/docs/latest/security/#authentication-and-authorization\"\u003eauthorization policy\u003c/a\u003e does not do exact matching of the input.path attribute when deciding if the request should be allowed.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eor, if all of the following apply:\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eOPA is deployed as a standalone server.\u003c/li\u003e\n\u003cli\u003eThe service connecting to OPA allows 3rd parties to insert unsanitised text into the path of the HTTP request to OPA’s Data API.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eNote: With \u003cstrong\u003eno\u003c/strong\u003e \u003ca href=\"https://www.openpolicyagent.org/docs/latest/security/#authentication-and-authorization\"\u003eAuthorization Policy\u003c/a\u003e configured for restricting API access (the default configuration), the RESTful \u003ca href=\"https://www.openpolicyagent.org/docs/latest/rest-api/#data-api\"\u003eData API\u003c/a\u003e provides access for managing Rego policies; and the RESTful \u003ca href=\"https://www.openpolicyagent.org/docs/latest/rest-api/#query-api\"\u003eQuery API\u003c/a\u003e facilitates advanced queries.\nFull access to these APIs provides both simpler, and broader access than what the security issue describes here can facilitate.\nAs such, OPA servers exposed to a network are \u003cstrong\u003enot\u003c/strong\u003e considered affected by the attack described here if they are knowingly not restricting access through an Authorization Policy.\u003c/p\u003e\n\u003cp\u003eThis issue affects all versions of OPA prior to 1.4.0.\u003c/p\u003e\n\u003cp\u003eSee the \u003ca href=\"https://github.com/open-policy-agent/opa/security/advisories/GHSA-6m8w-jc87-6cr7\"\u003eSecurity Advisory\u003c/a\u003e for more details.\u003c/p\u003e\n\u003cp\u003eReported by \u003ca href=\"https://github.com/GamrayW\"\u003e\u003ccode\u003e@​GamrayW\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/HyouKash\"\u003e\u003ccode\u003e@​HyouKash\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/AdrienIT\"\u003e\u003ccode\u003e@​AdrienIT\u003c/code\u003e\u003c/a\u003e, authored by \u003ca href=\"https://github.com/johanfylling\"\u003e\u003ccode\u003e@​johanfylling\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eRuntime, Tooling, SDK\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003east: Adding \u003ccode\u003erego_v1\u003c/code\u003e feature to \u003ccode\u003e--v0-compatible\u003c/code\u003e capabilities (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/pull/7474\"\u003e#7474\u003c/a\u003e) authored by \u003ca href=\"https://github.com/johanfylling\"\u003e\u003ccode\u003e@​johanfylling\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eexecutable: Add version and icon to OPA windows executable (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/3171\"\u003e#3171\u003c/a\u003e) authored by \u003ca href=\"https://github.com/sspaink\"\u003e\u003ccode\u003e@​sspaink\u003c/code\u003e\u003c/a\u003e reported by \u003ca href=\"https://github.com/christophwille\"\u003e\u003ccode\u003e@​christophwille\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eformat: Don't panic on format due to unexpected comments (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/6330\"\u003e#6330\u003c/a\u003e) authored by \u003ca href=\"https://github.com/sspaink\"\u003e\u003ccode\u003e@​sspaink\u003c/code\u003e\u003c/a\u003e reported by \u003ca href=\"https://github.com/sirpi\"\u003e\u003ccode\u003e@​sirpi\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eformat: Avoid modifying strings when formatting (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/6220\"\u003e#6220\u003c/a\u003e) authored by \u003ca href=\"https://github.com/sspaink\"\u003e\u003ccode\u003e@​sspaink\u003c/code\u003e\u003c/a\u003e reported by \u003ca href=\"https://github.com/zregvart\"\u003e\u003ccode\u003e@​zregvart\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eplugins/status: FIFO buffer channel for status events to prevent slow status API blocking (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/pull/7522\"\u003e#7522\u003c/a\u003e) authored by \u003ca href=\"https://github.com/sspaink\"\u003e\u003ccode\u003e@​sspaink\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eTopdown and Rego\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003egqlparser: Add JSON annotation in \u003ccode\u003einternal/gqlparser/ast\u003c/code\u003e to Position fields (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/pull/7509\"\u003e#7509\u003c/a\u003e) authored by \u003ca href=\"https://github.com/robmyersrobmyers\"\u003e\u003ccode\u003e@​robmyersrobmyers\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egraphql: Cache GraphQL schema parse results (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/pull/7457\"\u003e#7457\u003c/a\u003e) authored by \u003ca href=\"https://github.com/robmyersrobmyers\"\u003e\u003ccode\u003e@​robmyersrobmyers\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etopdown: Handling default functions in Partial Eval (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/7220\"\u003e#7220\u003c/a\u003e) authored by \u003ca href=\"https://github.com/johanfylling\"\u003e\u003ccode\u003e@​johanfylling\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etopdown: Fix wall clock time init for \u003ccode\u003ePartialRun()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/7490\"\u003e#7490\u003c/a\u003e) authored by \u003ca href=\"https://github.com/srenatus\"\u003e\u003ccode\u003e@​srenatus\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etopdown: Zero alloc lower/upper unless changed (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/pull/7472\"\u003e#7472\u003c/a\u003e) authored by \u003ca href=\"https://github.com/anderseknert\"\u003e\u003ccode\u003e@​anderseknert\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDocs, Website, Ecosystem\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/8b0720247e65b97fe7715ca15682fee4040df4d1\"\u003e\u003ccode\u003e8b07202\u003c/code\u003e\u003c/a\u003e Prepare v1.4.0 release (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/7541\"\u003e#7541\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/ad2063247a14711882f18c387a511fc8094aa79c\"\u003e\u003ccode\u003ead20632\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/24ff9cfb3ad0a6a5629f0b21458982d325ee03c5\"\u003e\u003ccode\u003e24ff9cf\u003c/code\u003e\u003c/a\u003e fix: return the raw strings when formatting (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/7525\"\u003e#7525\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/254f3bf0b9ee5faf1972ba31bbbe749bba19a000\"\u003e\u003ccode\u003e254f3bf\u003c/code\u003e\u003c/a\u003e fix(status plugin): make sure the latest status is read before manually trigg...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/9b5f6010c0503cd91eed8a56268a02d4895a42b4\"\u003e\u003ccode\u003e9b5f601\u003c/code\u003e\u003c/a\u003e docs: fix post merge badge (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/7532\"\u003e#7532\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/e4902774778da576da2a8f4b2fd50df6cc3da8b5\"\u003e\u003ccode\u003ee490277\u003c/code\u003e\u003c/a\u003e docs: Point path versioned requests to new sites (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/7531\"\u003e#7531\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/d65888c14f4cb2d67929590604415e35ba75f58c\"\u003e\u003ccode\u003ed65888c\u003c/code\u003e\u003c/a\u003e plugins/status: FIFO buffer channel for status events to prevent slow status ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/eb77d10971ec772c3ac4968d4abe3666037d0338\"\u003e\u003ccode\u003eeb77d10\u003c/code\u003e\u003c/a\u003e docs: update edge links to use /docs/edge/ path (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/7529\"\u003e#7529\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/f07d604b4f4b37c29324643cc75b82e3e0070aea\"\u003e\u003ccode\u003ef07d604\u003c/code\u003e\u003c/a\u003e docs: Set versioned docs links to point to archive (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/7528\"\u003e#7528\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-policy-agent/opa/commit/828b8cb1568bc2a3eba7d0b87101a6c0679eee06\"\u003e\u003ccode\u003e828b8cb\u003c/code\u003e\u003c/a\u003e docs: improve request headers documentation in REST APIs (\u003ca href=\"https://redirect.github.com/open-policy-agent/opa/issues/7524\"\u003e#7524\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-policy-agent/opa/compare/v0.69.0...v1.4.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/SherfeyInv/clir/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/SherfeyInv/clir/pull/884","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/SherfeyInv%2Fclir/issues/884","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/884/packages"}},{"old_version":"1.3.3","new_version":"1.6.3","update_type":"minor","path":null,"pr_created_at":"2026-05-11T15:24:15.000Z","version_change":"1.3.3 → 1.6.3","issue":{"uuid":"4422047799","node_id":"PR_kwDOMTAKjc7aT4Er","number":7,"state":"closed","title":"Bump the go_modules group across 5 directories with 8 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-05-13T21:32:33.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-11T15:24:15.000Z","updated_at":"2026-05-13T21:32:35.000Z","time_to_close":194898,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"go_modules","update_count":8,"packages":[{"name":"github.com/golang/glog","old_version":"1.1.1","new_version":"1.2.4","repository_url":"https://github.com/golang/glog"},{"name":"golang.org/x/net","old_version":"0.23.0","new_version":"0.38.0","repository_url":"https://github.com/golang/net"},{"name":"golang.org/x/oauth2","old_version":"0.7.0","new_version":"0.27.0","repository_url":"https://github.com/golang/oauth2"},{"name":"google.golang.org/grpc","old_version":"1.56.3","new_version":"1.79.3","repository_url":"https://github.com/grpc/grpc-go"},{"name":"github.com/golang/glog","old_version":"1.2.0","new_version":"1.2.4","repository_url":"https://github.com/golang/glog"},{"name":"golang.org/x/oauth2","old_version":"0.0.0-20200107190931-bf48bf16ab8d","new_version":"0.27.0","repository_url":"https://github.com/golang/oauth2"},{"name":"github.com/cloudflare/circl","old_version":"1.3.3","new_version":"1.6.3","repository_url":"https://github.com/cloudflare/circl"},{"name":"golang.org/x/crypto","old_version":"0.30.0","new_version":"0.45.0","repository_url":"https://github.com/golang/crypto"},{"name":"github.com/go-git/go-git/v5","old_version":"5.11.0","new_version":"5.19.0","repository_url":"https://github.com/go-git/go-git"},{"name":"github.com/golang/glog","old_version":"1.1.1","new_version":"1.2.4","repository_url":"https://github.com/golang/glog"},{"name":"github.com/golang/glog","old_version":"1.1.2","new_version":"1.2.4","repository_url":"https://github.com/golang/glog"},{"name":"golang.org/x/net","old_version":"0.15.0","new_version":"0.38.0","repository_url":"https://github.com/golang/net"},{"name":"golang.org/x/oauth2","old_version":"0.12.0","new_version":"0.27.0","repository_url":"https://github.com/golang/oauth2"},{"name":"google.golang.org/grpc","old_version":"1.57.0","new_version":"1.79.3","repository_url":"https://github.com/grpc/grpc-go"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 4 updates in the /.ci/magician directory: [github.com/golang/glog](https://github.com/golang/glog), [golang.org/x/net](https://github.com/golang/net), [golang.org/x/oauth2](https://github.com/golang/oauth2) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 1 update in the /mmv1 directory: [github.com/golang/glog](https://github.com/golang/glog).\nBumps the go_modules group with 4 updates in the /tools/go-changelog directory: [golang.org/x/oauth2](https://github.com/golang/oauth2), [github.com/cloudflare/circl](https://github.com/cloudflare/circl), [golang.org/x/crypto](https://github.com/golang/crypto) and [github.com/go-git/go-git/v5](https://github.com/go-git/go-git).\nBumps the go_modules group with 1 update in the /tools/issue-labeler directory: [github.com/golang/glog](https://github.com/golang/glog).\nBumps the go_modules group with 4 updates in the /tpgtools directory: [github.com/golang/glog](https://github.com/golang/glog), [golang.org/x/net](https://github.com/golang/net), [golang.org/x/oauth2](https://github.com/golang/oauth2) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\n\nUpdates `github.com/golang/glog` from 1.1.1 to 1.2.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/golang/glog/releases\"\u003egithub.com/golang/glog's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.2.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFail if log file already exists by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/74\"\u003egolang/glog#74\u003c/a\u003e:\n\u003cul\u003e\n\u003cli\u003eglog: Don't try to create/rotate a given syncBuffer twice in the same second\u003c/li\u003e\n\u003cli\u003eglog: introduce createInDir function as in internal version\u003c/li\u003e\n\u003cli\u003eglog: have createInDir fail if the file already exists\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.2.3...v1.2.4\"\u003ehttps://github.com/golang/glog/compare/v1.2.3...v1.2.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.2.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eglog: check that stderr is valid before using it by default by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/72\"\u003egolang/glog#72\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eglog: fix typo by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/73\"\u003egolang/glog#73\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.2.2...v1.2.3\"\u003ehttps://github.com/golang/glog/compare/v1.2.2...v1.2.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.2.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eglog: avoid calling user.Current() on windows by \u003ca href=\"https://github.com/bentekkie\"\u003e\u003ccode\u003e@​bentekkie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/69\"\u003egolang/glog#69\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.2.1...v1.2.2\"\u003ehttps://github.com/golang/glog/compare/v1.2.1...v1.2.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.2.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eglog: don't hold mutex when sync'ing by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/68\"\u003egolang/glog#68\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.2.0...v1.2.1\"\u003ehttps://github.com/golang/glog/compare/v1.2.0...v1.2.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.2.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eglog: add context variants and logsink tests by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/66\"\u003egolang/glog#66\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.1.2...v1.2.0\"\u003ehttps://github.com/golang/glog/compare/v1.1.2...v1.2.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.1.2\u003c/h2\u003e\n\u003cp\u003eBugfix release.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eglog: populate symlinks -log_link directory by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/64\"\u003egolang/glog#64\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.1.1...v1.1.2\"\u003ehttps://github.com/golang/glog/compare/v1.1.1...v1.1.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/a0e3c40a0ed0cecc58c84e7684d9ce55a54044ee\"\u003e\u003ccode\u003ea0e3c40\u003c/code\u003e\u003c/a\u003e glog: have createInDir fail if the file already exists\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/7139da234346c23dba05a8c588284c379b9c0bf8\"\u003e\u003ccode\u003e7139da2\u003c/code\u003e\u003c/a\u003e glog: introduce createInDir function as in internal version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/dd58629ba6ced28322bcb149ed86016fb1ec9a5b\"\u003e\u003ccode\u003edd58629\u003c/code\u003e\u003c/a\u003e glog: Don't try to create/rotate a given syncBuffer twice in the same second\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/04dbec0df8d03d5c187beaf5ce8e6c58e9fc82b5\"\u003e\u003ccode\u003e04dbec0\u003c/code\u003e\u003c/a\u003e glog: fix typo (\u003ca href=\"https://redirect.github.com/golang/glog/issues/73\"\u003e#73\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/459cf3b8151dcfd8aa971077774eaf0c804119e4\"\u003e\u003ccode\u003e459cf3b\u003c/code\u003e\u003c/a\u003e glog: check that stderr is valid before using it by default (\u003ca href=\"https://redirect.github.com/golang/glog/issues/72\"\u003e#72\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/97303146a4ffecf364d4300e07fca855d0062c43\"\u003e\u003ccode\u003e9730314\u003c/code\u003e\u003c/a\u003e glog: avoid calling user.Current() on windows (\u003ca href=\"https://redirect.github.com/golang/glog/issues/69\"\u003e#69\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/861d094757551d2f65d1003f0ec93bc92b254a5a\"\u003e\u003ccode\u003e861d094\u003c/code\u003e\u003c/a\u003e glog: don't hold mutex when sync'ing (\u003ca href=\"https://redirect.github.com/golang/glog/issues/68\"\u003e#68\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/b256bbe5d3f846c1d1ce73030c10973378e04cf0\"\u003e\u003ccode\u003eb256bbe\u003c/code\u003e\u003c/a\u003e glog: add context variants to most log functions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/bcf318487a966b61bca6189643b72648fa132e6e\"\u003e\u003ccode\u003ebcf3184\u003c/code\u003e\u003c/a\u003e glog/internal/logsink: add logsink tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/6b9d7f7df28d318a28dde3adb8a5e9ae9bf1abaf\"\u003e\u003ccode\u003e6b9d7f7\u003c/code\u003e\u003c/a\u003e glog: populate symlinks -log_link directory (\u003ca href=\"https://redirect.github.com/golang/glog/issues/64\"\u003e#64\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang/glog/compare/v1.1.1...v1.2.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.23.0 to 0.38.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/e1fcd82abba34df74614020343be8eb1fe85f0d9\"\u003e\u003ccode\u003ee1fcd82\u003c/code\u003e\u003c/a\u003e html: properly handle trailing solidus in unquoted attribute value in foreign...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/ebed060e8f30f20235f74808c22125fd86b15edd\"\u003e\u003ccode\u003eebed060\u003c/code\u003e\u003c/a\u003e internal/http3: fix build of tests with GOEXPERIMENT=nosynctest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/1f1fa29e0a46fffe18c43a9da8daa5a0b180dfa9\"\u003e\u003ccode\u003e1f1fa29\u003c/code\u003e\u003c/a\u003e publicsuffix: regenerate table\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/12150816f701c912a32a376754ab28dd3878833a\"\u003e\u003ccode\u003e1215081\u003c/code\u003e\u003c/a\u003e http2: improve error when server sends HTTP/1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/312450e473eae9f9e6173ad895c80bc5ea2f79ad\"\u003e\u003ccode\u003e312450e\u003c/code\u003e\u003c/a\u003e html: ensure \u0026lt;search\u0026gt; tag closes \u0026lt;p\u0026gt; and update tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/09731f9bf919b00b344c763894cd1920b3d96d90\"\u003e\u003ccode\u003e09731f9\u003c/code\u003e\u003c/a\u003e http2: improve handling of lost PING in Server\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/55989e24b972a90ab99308fdc7ea1fb58a96fef1\"\u003e\u003ccode\u003e55989e2\u003c/code\u003e\u003c/a\u003e http2/h2c: use ResponseController for hijacking connections\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/2914f46773171f4fa13e276df1135bafef677801\"\u003e\u003ccode\u003e2914f46\u003c/code\u003e\u003c/a\u003e websocket: re-recommend gorilla/websocket\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/99b3ae0643f9a2f9d820fcbba5f9e4c83b23bd48\"\u003e\u003ccode\u003e99b3ae0\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/85d1d54551b68719346cb9fec24b911da4e452a1\"\u003e\u003ccode\u003e85d1d54\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.23.0...v0.38.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/oauth2` from 0.7.0 to 0.27.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/681b4d8edca1bcfea5bce685d77ea7b82ed3e7b3\"\u003e\u003ccode\u003e681b4d8\u003c/code\u003e\u003c/a\u003e jws: split token into fixed number of parts\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/3f78298beea38fb76a3fbca33e3056f4b7eb5502\"\u003e\u003ccode\u003e3f78298\u003c/code\u003e\u003c/a\u003e all: upgrade go directive to at least 1.23.0 [generated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/109dabf9017129171d1807e485ca5633ecd095ac\"\u003e\u003ccode\u003e109dabf\u003c/code\u003e\u003c/a\u003e endpoints: add links/provider for Discord\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/ac571fa341c2a2b979d2b2c8341fd24767ef5d47\"\u003e\u003ccode\u003eac571fa\u003c/code\u003e\u003c/a\u003e oauth2: fix docs for Config.DeviceAuth\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/314ee5b92bf23c4973aa8e61eba3ff458e80eef2\"\u003e\u003ccode\u003e314ee5b\u003c/code\u003e\u003c/a\u003e endpoints: add patreon endpoint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/b9c813be7d0ec3262d46deb8677ba5cda93d95ec\"\u003e\u003ccode\u003eb9c813b\u003c/code\u003e\u003c/a\u003e google: add warning about externally-provided credentials\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/49a531d12a9ad6fa9f5a070d577ac752ada772c9\"\u003e\u003ccode\u003e49a531d\u003c/code\u003e\u003c/a\u003e all: make method and struct comments match the names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/22134a41033e44c2cd074106770ab5b7ca910d15\"\u003e\u003ccode\u003e22134a4\u003c/code\u003e\u003c/a\u003e README: don't recommend go get\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/3e6480915d39dd1a80fa460e56413857f02cc1b9\"\u003e\u003ccode\u003e3e64809\u003c/code\u003e\u003c/a\u003e x/oauth2: add Token.ExpiresIn\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/16a9973a41c72ea3e252e9c14be34fcaa2928211\"\u003e\u003ccode\u003e16a9973\u003c/code\u003e\u003c/a\u003e jwt: rename example to avoid vet error\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/oauth2/compare/v0.7.0...v0.27.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google.golang.org/grpc` from 1.56.3 to 1.79.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc-go/releases\"\u003egoogle.golang.org/grpc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 1.79.3\u003c/h2\u003e\n\u003ch1\u003eSecurity\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eserver: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted \u0026quot;deny\u0026quot; rules in interceptors like \u003ccode\u003egrpc/authz\u003c/code\u003e. Any request with a non-canonical path is now immediately rejected with an \u003ccode\u003eUnimplemented\u003c/code\u003e error. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.2\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003estats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8874\"\u003egrpc/grpc-go#8874\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.1\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003egrpc: Remove the \u003ccode\u003e-dev\u003c/code\u003e suffix from the User-Agent header. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8902\"\u003egrpc/grpc-go#8902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.0\u003c/h2\u003e\n\u003ch1\u003eAPI Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003emem: Add experimental API \u003ccode\u003eSetDefaultBufferPool\u003c/code\u003e to change the default buffer pool. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8806\"\u003e#8806\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/vanja-p\"\u003e\u003ccode\u003e@​vanja-p\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eexperimental/stats: Update \u003ccode\u003eMetricsRecorder\u003c/code\u003e to require embedding the new \u003ccode\u003eUnimplementedMetricsRecorder\u003c/code\u003e (a no-op struct) in all implementations for forward compatibility. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBehavior Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ebalancer/weightedtarget: Remove handling of \u003ccode\u003eAddresses\u003c/code\u003e and only handle \u003ccode\u003eEndpoints\u003c/code\u003e in resolver updates. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8841\"\u003e#8841\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eNew Features\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eexperimental/stats: Add support for asynchronous gauge metrics through the new \u003ccode\u003eAsyncMetricReporter\u003c/code\u003e and \u003ccode\u003eRegisterAsyncReporter\u003c/code\u003e APIs. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epickfirst: Add support for weighted random shuffling of endpoints, as described in \u003ca href=\"https://redirect.github.com/grpc/proposal/pull/535\"\u003egRFC A113\u003c/a\u003e.\n\u003cul\u003e\n\u003cli\u003eThis is enabled by default, and can be turned off using the environment variable \u003ccode\u003eGRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds: Implement \u003ccode\u003e:authority\u003c/code\u003e rewriting, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A81-xds-authority-rewriting.md\"\u003egRFC A81\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8779\"\u003e#8779\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebalancer/randomsubsetting: Implement the \u003ccode\u003erandom_subsetting\u003c/code\u003e LB policy, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A68-random-subsetting.md\"\u003egRFC A68\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8650\"\u003e#8650\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/marek-szews\"\u003e\u003ccode\u003e@​marek-szews\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/tls: Fix a bug where the port was not stripped from the authority override before validation. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8726\"\u003e#8726\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/Atul1710\"\u003e\u003ccode\u003e@​Atul1710\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds/priority: Fix a bug causing delayed failover to lower-priority clusters when a higher-priority cluster is stuck in \u003ccode\u003eCONNECTING\u003c/code\u003e state. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8813\"\u003e#8813\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ehealth: Fix a bug where health checks failed for clients using legacy compression options (\u003ccode\u003eWithDecompressor\u003c/code\u003e or \u003ccode\u003eRPCDecompressor\u003c/code\u003e). (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8765\"\u003e#8765\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/sanki92\"\u003e\u003ccode\u003e@​sanki92\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003etransport: Fix an issue where the HTTP/2 server could skip header size checks when terminating a stream early. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8769\"\u003e#8769\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eserver: Propagate status detail headers, if available, when terminating a stream during request header processing. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8754\"\u003e#8754\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ePerformance Improvements\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/alts: Optimize read buffer alignment to reduce copies. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8791\"\u003e#8791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emem: Optimize pooling and creation of \u003ccode\u003ebuffer\u003c/code\u003e objects.  (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8784\"\u003e#8784\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etransport: Reduce slice re-allocations by reserving slice capacity. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8797\"\u003e#8797\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/dda86dbd9cecb8b35b58c73d507d81d67761205f\"\u003e\u003ccode\u003edda86db\u003c/code\u003e\u003c/a\u003e Change version to 1.79.3 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8983\"\u003e#8983\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/72186f163e75a065c39e6f7df9b6dea07fbdeff5\"\u003e\u003ccode\u003e72186f1\u003c/code\u003e\u003c/a\u003e grpc: enforce strict path checking for incoming requests on the server (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/97ca3522b239edf6813e2b1106924e9d55e89d43\"\u003e\u003ccode\u003e97ca352\u003c/code\u003e\u003c/a\u003e Changing version to 1.79.3-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8954\"\u003e#8954\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/8902ab6efea590f5b3861126559eaa26fa9783b2\"\u003e\u003ccode\u003e8902ab6\u003c/code\u003e\u003c/a\u003e Change the version to release 1.79.2 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8947\"\u003e#8947\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/a9286705aa689bee321ec674323b6896284f3e02\"\u003e\u003ccode\u003ea928670\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8874\"\u003e#8874\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8904\"\u003e#8904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/06df3638c0bcee88197b1033b3ba83e1eb8bc010\"\u003e\u003ccode\u003e06df363\u003c/code\u003e\u003c/a\u003e Change version to 1.79.2-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8903\"\u003e#8903\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/782f2de44f597af18a120527e7682a6670d84289\"\u003e\u003ccode\u003e782f2de\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8902\"\u003e#8902\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/850eccbb2257bd2de6ac28ee88a7172ab6175629\"\u003e\u003ccode\u003e850eccb\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8851\"\u003e#8851\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/765ff056b6890f6c8341894df4e9668e9bfc18ef\"\u003e\u003ccode\u003e765ff05\u003c/code\u003e\u003c/a\u003e Change version to 1.79.0 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8850\"\u003e#8850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/68804be0e78ed0365bb5a576dedc12e2168ed63e\"\u003e\u003ccode\u003e68804be\u003c/code\u003e\u003c/a\u003e Cherry pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8896\"\u003e#8896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/grpc/grpc-go/compare/v1.56.3...v1.79.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/golang/glog` from 1.2.0 to 1.2.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/golang/glog/releases\"\u003egithub.com/golang/glog's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.2.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFail if log file already exists by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/74\"\u003egolang/glog#74\u003c/a\u003e:\n\u003cul\u003e\n\u003cli\u003eglog: Don't try to create/rotate a given syncBuffer twice in the same second\u003c/li\u003e\n\u003cli\u003eglog: introduce createInDir function as in internal version\u003c/li\u003e\n\u003cli\u003eglog: have createInDir fail if the file already exists\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.2.3...v1.2.4\"\u003ehttps://github.com/golang/glog/compare/v1.2.3...v1.2.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.2.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eglog: check that stderr is valid before using it by default by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/72\"\u003egolang/glog#72\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eglog: fix typo by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/73\"\u003egolang/glog#73\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.2.2...v1.2.3\"\u003ehttps://github.com/golang/glog/compare/v1.2.2...v1.2.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.2.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eglog: avoid calling user.Current() on windows by \u003ca href=\"https://github.com/bentekkie\"\u003e\u003ccode\u003e@​bentekkie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/69\"\u003egolang/glog#69\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.2.1...v1.2.2\"\u003ehttps://github.com/golang/glog/compare/v1.2.1...v1.2.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.2.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eglog: don't hold mutex when sync'ing by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/68\"\u003egolang/glog#68\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.2.0...v1.2.1\"\u003ehttps://github.com/golang/glog/compare/v1.2.0...v1.2.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.2.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eglog: add context variants and logsink tests by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/66\"\u003egolang/glog#66\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.1.2...v1.2.0\"\u003ehttps://github.com/golang/glog/compare/v1.1.2...v1.2.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.1.2\u003c/h2\u003e\n\u003cp\u003eBugfix release.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eglog: populate symlinks -log_link directory by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/64\"\u003egolang/glog#64\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.1.1...v1.1.2\"\u003ehttps://github.com/golang/glog/compare/v1.1.1...v1.1.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/a0e3c40a0ed0cecc58c84e7684d9ce55a54044ee\"\u003e\u003ccode\u003ea0e3c40\u003c/code\u003e\u003c/a\u003e glog: have createInDir fail if the file already exists\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/7139da234346c23dba05a8c588284c379b9c0bf8\"\u003e\u003ccode\u003e7139da2\u003c/code\u003e\u003c/a\u003e glog: introduce createInDir function as in internal version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/dd58629ba6ced28322bcb149ed86016fb1ec9a5b\"\u003e\u003ccode\u003edd58629\u003c/code\u003e\u003c/a\u003e glog: Don't try to create/rotate a given syncBuffer twice in the same second\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/04dbec0df8d03d5c187beaf5ce8e6c58e9fc82b5\"\u003e\u003ccode\u003e04dbec0\u003c/code\u003e\u003c/a\u003e glog: fix typo (\u003ca href=\"https://redirect.github.com/golang/glog/issues/73\"\u003e#73\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/459cf3b8151dcfd8aa971077774eaf0c804119e4\"\u003e\u003ccode\u003e459cf3b\u003c/code\u003e\u003c/a\u003e glog: check that stderr is valid before using it by default (\u003ca href=\"https://redirect.github.com/golang/glog/issues/72\"\u003e#72\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/97303146a4ffecf364d4300e07fca855d0062c43\"\u003e\u003ccode\u003e9730314\u003c/code\u003e\u003c/a\u003e glog: avoid calling user.Current() on windows (\u003ca href=\"https://redirect.github.com/golang/glog/issues/69\"\u003e#69\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/861d094757551d2f65d1003f0ec93bc92b254a5a\"\u003e\u003ccode\u003e861d094\u003c/code\u003e\u003c/a\u003e glog: don't hold mutex when sync'ing (\u003ca href=\"https://redirect.github.com/golang/glog/issues/68\"\u003e#68\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/b256bbe5d3f846c1d1ce73030c10973378e04cf0\"\u003e\u003ccode\u003eb256bbe\u003c/code\u003e\u003c/a\u003e glog: add context variants to most log functions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/bcf318487a966b61bca6189643b72648fa132e6e\"\u003e\u003ccode\u003ebcf3184\u003c/code\u003e\u003c/a\u003e glog/internal/logsink: add logsink tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/6b9d7f7df28d318a28dde3adb8a5e9ae9bf1abaf\"\u003e\u003ccode\u003e6b9d7f7\u003c/code\u003e\u003c/a\u003e glog: populate symlinks -log_link directory (\u003ca href=\"https://redirect.github.com/golang/glog/issues/64\"\u003e#64\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang/glog/compare/v1.1.1...v1.2.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/oauth2` from 0.0.0-20200107190931-bf48bf16ab8d to 0.27.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/681b4d8edca1bcfea5bce685d77ea7b82ed3e7b3\"\u003e\u003ccode\u003e681b4d8\u003c/code\u003e\u003c/a\u003e jws: split token into fixed number of parts\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/3f78298beea38fb76a3fbca33e3056f4b7eb5502\"\u003e\u003ccode\u003e3f78298\u003c/code\u003e\u003c/a\u003e all: upgrade go directive to at least 1.23.0 [generated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/109dabf9017129171d1807e485ca5633ecd095ac\"\u003e\u003ccode\u003e109dabf\u003c/code\u003e\u003c/a\u003e endpoints: add links/provider for Discord\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/ac571fa341c2a2b979d2b2c8341fd24767ef5d47\"\u003e\u003ccode\u003eac571fa\u003c/code\u003e\u003c/a\u003e oauth2: fix docs for Config.DeviceAuth\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/314ee5b92bf23c4973aa8e61eba3ff458e80eef2\"\u003e\u003ccode\u003e314ee5b\u003c/code\u003e\u003c/a\u003e endpoints: add patreon endpoint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/b9c813be7d0ec3262d46deb8677ba5cda93d95ec\"\u003e\u003ccode\u003eb9c813b\u003c/code\u003e\u003c/a\u003e google: add warning about externally-provided credentials\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/49a531d12a9ad6fa9f5a070d577ac752ada772c9\"\u003e\u003ccode\u003e49a531d\u003c/code\u003e\u003c/a\u003e all: make method and struct comments match the names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/22134a41033e44c2cd074106770ab5b7ca910d15\"\u003e\u003ccode\u003e22134a4\u003c/code\u003e\u003c/a\u003e README: don't recommend go get\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/3e6480915d39dd1a80fa460e56413857f02cc1b9\"\u003e\u003ccode\u003e3e64809\u003c/code\u003e\u003c/a\u003e x/oauth2: add Token.ExpiresIn\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/16a9973a41c72ea3e252e9c14be34fcaa2928211\"\u003e\u003ccode\u003e16a9973\u003c/code\u003e\u003c/a\u003e jwt: rename example to avoid vet error\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/oauth2/compare/v0.7.0...v0.27.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/cloudflare/circl` from 1.3.3 to 1.6.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cloudflare/circl/releases\"\u003egithub.com/cloudflare/circl's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eCIRCL v1.6.3\u003c/h2\u003e\n\u003cp\u003eFix a bug on ecc/p384 scalar multiplication.\u003c/p\u003e\n\u003ch3\u003eWhat's Changed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esign/mldsa: Check opts for nil value  by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/582\"\u003ecloudflare/circl#582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eecc/p384: Point addition must handle point doubling case. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/583\"\u003ecloudflare/circl#583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease CIRCL v1.6.3 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/584\"\u003ecloudflare/circl#584\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNew SLH-DSA, improvements in ML-DSA for arm64.\u003c/li\u003e\n\u003cli\u003eTested compilation on WASM.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize pairing product computation by moving exponentiations to G1. by \u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esign: Adding SLH-DSA signature by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/512\"\u003ecloudflare/circl#512\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate code generators to CIRCL v1.6.1. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/548\"\u003ecloudflare/circl#548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eML-DSA: Add preliminary Wycheproof test vectors by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/552\"\u003ecloudflare/circl#552\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ego fmt by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/554\"\u003ecloudflare/circl#554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egz-compressing test vectors, use of HexBytes and ReadGzip functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/555\"\u003ecloudflare/circl#555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Removes use of elliptic Marshal and Unmarshal functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/556\"\u003ecloudflare/circl#556\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport encoding/decoding ML-DSA private keys (as long as they contain seeds) by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/559\"\u003ecloudflare/circl#559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to golangci-lint v2 by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/560\"\u003ecloudflare/circl#560\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreparation for ARM64 Implementation of poly operations for dilithium package. by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eprepare power2Round for custom implementations in assembly by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/564\"\u003ecloudflare/circl#564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eARM64 implementation for poly.PackLe16 by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/563\"\u003ecloudflare/circl#563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polyMulBy2toD by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/565\"\u003ecloudflare/circl#565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polySub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/566\"\u003ecloudflare/circl#566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: add byteLen method for short groups and RandomScalar uses rand.Int by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/568\"\u003ecloudflare/circl#568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of poly.Add/Sub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/572\"\u003ecloudflare/circl#572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Adding cryptobyte marshaling to scalars by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/569\"\u003ecloudflare/circl#569\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumping up to Go1.25 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/574\"\u003ecloudflare/circl#574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: Including WASM compilation. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/577\"\u003ecloudflare/circl#577\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to using package-declared HPKE errors for shortkem instead of standard library errors by \u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease v1.6.2 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/579\"\u003ecloudflare/circl#579\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixes some point checks on the FourQ curve.\u003c/li\u003e\n\u003cli\u003eHybrid KEM fails on low-order points.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/24ae53c5d6f7fe18203adc125ba3ed76a38703e1\"\u003e\u003ccode\u003e24ae53c\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/581020bd4a836b8ce7bd4e414ba2884c07dbc906\"\u003e\u003ccode\u003e581020b\u003c/code\u003e\u003c/a\u003e Rename method to oddMultiplesProjective.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/12209a4566605692a8402594e367a5aed5148460\"\u003e\u003ccode\u003e12209a4\u003c/code\u003e\u003c/a\u003e Removing unused cmov for jacobian points.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/fcba359f4178645d2c9e50f29ab6966337da4b95\"\u003e\u003ccode\u003efcba359\u003c/code\u003e\u003c/a\u003e ecc/p384: use of complete projective formulas for scalar multiplication.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/5e1bae8d8c2df4e717c2c5c2d5b5d60b629b2ac6\"\u003e\u003ccode\u003e5e1bae8\u003c/code\u003e\u003c/a\u003e ecc/p384: handle point doubling in point addition with Jacobian coordinates.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/341604685ff97e8f7440ae4b4711ba1c118c648c\"\u003e\u003ccode\u003e3416046\u003c/code\u003e\u003c/a\u003e Check opts for nil value.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/a763d47a6dce43d1f4f7b697d1d7810463a526f6\"\u003e\u003ccode\u003ea763d47\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3c70bf9ad53b681fbe5ba6067e454a86549fee8a\"\u003e\u003ccode\u003e3c70bf9\u003c/code\u003e\u003c/a\u003e Bump x/crypto x/sys dependencies.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3f0f15b2bfe67bad81a35e8aec81ae42ca78349d\"\u003e\u003ccode\u003e3f0f15b\u003c/code\u003e\u003c/a\u003e Revert to using package-declared HPKE errors for shortkem instead of standard...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/23491bd573cf29b6f567057a158203a2c9dfa30d\"\u003e\u003ccode\u003e23491bd\u003c/code\u003e\u003c/a\u003e Adding generic Power2Round method.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.3.3...v1.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.30.0 to 0.45.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/4e0068c0098be10d7025c99ab7c50ce454c1f0f9\"\u003e\u003ccode\u003e4e0068c\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e79546e28b85ea53dd37afe1c4102746ef553b9c\"\u003e\u003ccode\u003ee79546e\u003c/code\u003e\u003c/a\u003e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f91f7a7c31bf90b39c1de895ad116a2bacc88748\"\u003e\u003ccode\u003ef91f7a7\u003c/code\u003e\u003c/a\u003e ssh/agent: prevent panic on malformed constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/2df4153a0311bdfea44376e0eb6ef2faefb0275b\"\u003e\u003ccode\u003e2df4153\u003c/code\u003e\u003c/a\u003e acme/autocert: let automatic renewal work with short lifetime certs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/bcf6a849efcf4702fa5172cb0998b46c3da1e989\"\u003e\u003ccode\u003ebcf6a84\u003c/code\u003e\u003c/a\u003e acme: pass context to request\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b4f2b62076abeee4e43fb59544dac565715fbf1e\"\u003e\u003ccode\u003eb4f2b62\u003c/code\u003e\u003c/a\u003e ssh: fix error message on unsupported cipher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/79ec3a51fcc7fbd2691d56155d578225ccc542e2\"\u003e\u003ccode\u003e79ec3a5\u003c/code\u003e\u003c/a\u003e ssh: allow to bind to a hostname in remote forwarding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/122a78f140d9d3303ed3261bc374bbbca149140f\"\u003e\u003ccode\u003e122a78f\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/c0531f9c34514ad5c5551e2d6ce569ca673a8afd\"\u003e\u003ccode\u003ec0531f9\u003c/code\u003e\u003c/a\u003e all: eliminate vet diagnostics\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/0997000b45e3a40598272081bcad03ffd21b8adb\"\u003e\u003ccode\u003e0997000\u003c/code\u003e\u003c/a\u003e all: fix some comments\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.30.0...v0.45.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-git/v5` from 5.11.0 to 5.19.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-git/releases\"\u003egithub.com/go-git/go-git/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.19.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.18.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2010\"\u003ego-git/go-git#2010\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Bump sha1cd and go-billy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2060\"\u003ego-git/go-git#2060\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev5: Align object encoding with upstream by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2065\"\u003ego-git/go-git#2065\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.18.0...v5.19.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.18.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eplumbing: transport/http, Add support for followRedirects policy by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/2004\"\u003ego-git/go-git#2004\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.2...v5.18.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.17.1 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1941\"\u003ego-git/go-git#1941\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edotgit: skip writing pack files that already exist on disk by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1944\"\u003ego-git/go-git#1944\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e:warning: This release fixes a bug (\u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1942\"\u003ego-git/go-git#1942\u003c/a\u003e) that blocked some users from upgrading to \u003ccode\u003ev5.17.1\u003c/code\u003e. Thanks \u003ca href=\"https://github.com/pskrbasu\"\u003e\u003ccode\u003e@​pskrbasu\u003c/code\u003e\u003c/a\u003e for reporting it. :bow:\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.1...v5.17.2\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.1...v5.17.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/cloudflare/circl to v1.6.3 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1930\"\u003ego-git/go-git#1930\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/index, Improve v4 entry name validation by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1935\"\u003ego-git/go-git#1935\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/idxfile, Fix version and fanout checks by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1937\"\u003ego-git/go-git#1937\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.16.5 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1839\"\u003ego-git/go-git#1839\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: worktree, optimize infiles function for very large repos by \u003ca href=\"https://github.com/k-anshul\"\u003e\u003ccode\u003e@​k-anshul\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1853\"\u003ego-git/go-git#1853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: Add strict checks for supported extensions by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1861\"\u003ego-git/go-git#1861\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebackport, git: Improve Status() speed with new index.ModTime check by \u003ca href=\"https://github.com/cedric-appdirect\"\u003e\u003ccode\u003e@​cedric-appdirect\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1862\"\u003ego-git/go-git#1862\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003estorage: filesystem, Avoid overwriting loose obj files by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1864\"\u003ego-git/go-git#1864\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.16.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module golang.org/x/crypto to v0.45.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1744\"\u003ego-git/go-git#1744\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Bump Go test versions to 1.23-1.25 (v5) by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1746\"\u003ego-git/go-git#1746\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] git: worktree, Don't delete local untracked files when resetting worktree by \u003ca href=\"https://github.com/Ch00k\"\u003e\u003ccode\u003e@​Ch00k\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1800\"\u003ego-git/go-git#1800\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/bc930f4cbe095a3e1d49273655f73fcef7d41a42\"\u003e\u003ccode\u003ebc930f4\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/2065\"\u003e#2065\u003c/a\u003e from go-git/commit-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/d315264343cead712aa9eb56475c2ec96f5ecef1\"\u003e\u003ccode\u003ed315264\u003c/code\u003e\u003c/a\u003e plumbing: object, Reset object before decode\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/6e1d34890a4dae8a0df738e531234bd60b7e9b66\"\u003e\u003ccode\u003e6e1d348\u003c/code\u003e\u003c/a\u003e plumbing: object, Align Tree handling with upstream\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/e134ba34cf95ed0167e5b1df36a933d7bde9d02d\"\u003e\u003ccode\u003ee134ba3\u003c/code\u003e\u003c/a\u003e tests: Skip double checks in Git v2.11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/1971422f6b1bec9176061b3293306981cfff981e\"\u003e\u003ccode\u003e1971422\u003c/code\u003e\u003c/a\u003e tests: Add git conformance tests for signing verification\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/a387aa8857a8fbba8e74b7f5485e9e030669ab5d\"\u003e\u003ccode\u003ea387aa8\u003c/code\u003e\u003c/a\u003e plumbing: object, Add ErrMalformedTag\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/f415670d906b5c6169d1fdc64f3f9f1d33eb6f9c\"\u003e\u003ccode\u003ef415670\u003c/code\u003e\u003c/a\u003e plumbing: object, Decode Tag headers via a state machine\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/5b0cd38a62e2336bb5f1a2ad0eb8ac8f9e7b740e\"\u003e\u003ccode\u003e5b0cd38\u003c/code\u003e\u003c/a\u003e plumbing: object, Reject multi-signature commits at Verify\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/fe8ed6223a6079d9fd84d853362a996e7df175fb\"\u003e\u003ccode\u003efe8ed62\u003c/code\u003e\u003c/a\u003e plumbing: object, Align Tag.EncodeWithoutSignature with Commit\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/98e337d5bdc4c0536a40ab7381b2231f7e0b15cd\"\u003e\u003ccode\u003e98e337d\u003c/code\u003e\u003c/a\u003e plumbing: object, Add support for Tag.SignatureSHA256\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-git/compare/v5.11.0...v5.19.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/golang/glog` from 1.1.1 to 1.2.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/golang/glog/releases\"\u003egithub.com/golang/glog's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.2.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFail if log file already exists by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/74\"\u003egolang/glog#74\u003c/a\u003e:\n\u003cul\u003e\n\u003cli\u003eglog: Don't try to create/rotate a given syncBuffer twice in the same second\u003c/li\u003e\n\u003cli\u003eglog: introduce createInDir function as in internal version\u003c/li\u003e\n\u003cli\u003eglog: have createInDir fail if the file already exists\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.2.3...v1.2.4\"\u003ehttps://github.com/golang/glog/compare/v1.2.3...v1.2.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.2.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eglog: check that stderr is valid before using it by default by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/72\"\u003egolang/glog#72\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eglog: fix typo by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/73\"\u003egolang/glog#73\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.2.2...v1.2.3\"\u003ehttps://github.com/golang/glog/compare/v1.2.2...v1.2.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.2.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eglog: avoid calling user.Current() on windows by \u003ca href=\"https://github.com/bentekkie\"\u003e\u003ccode\u003e@​bentekkie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/69\"\u003egolang/glog#69\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.2.1...v1.2.2\"\u003ehttps://github.com/golang/glog/compare/v1.2.1...v1.2.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.2.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eglog: don't hold mutex when sync'ing by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/68\"\u003egolang/glog#68\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.2.0...v1.2.1\"\u003ehttps://github.com/golang/glog/compare/v1.2.0...v1.2.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.2.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eglog: add context variants and logsink tests by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/66\"\u003egolang/glog#66\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.1.2...v1.2.0\"\u003ehttps://github.com/golang/glog/compare/v1.1.2...v1.2.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.1.2\u003c/h2\u003e\n\u003cp\u003eBugfix release.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eglog: populate symlinks -log_link directory by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/64\"\u003egolang/glog#64\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.1.1...v1.1.2\"\u003ehttps://github.com/golang/glog/compare/v1.1.1...v1.1.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/a0e3c40a0ed0cecc58c84e7684d9ce55a54044ee\"\u003e\u003ccode\u003ea0e3c40\u003c/code\u003e\u003c/a\u003e glog: have createInDir fail if the file already exists\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/7139da234346c23dba05a8c588284c379b9c0bf8\"\u003e\u003ccode\u003e7139da2\u003c/code\u003e\u003c/a\u003e glog: introduce createInDir function as in internal version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/dd58629ba6ced28322bcb149ed86016fb1ec9a5b\"\u003e\u003ccode\u003edd58629\u003c/code\u003e\u003c/a\u003e glog: Don't try to create/rotate a given syncBuffer twice in the same second\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/04dbec0df8d03d5c187beaf5ce8e6c58e9fc82b5\"\u003e\u003ccode\u003e04dbec0\u003c/code\u003e\u003c/a\u003e glog: fix typo (\u003ca href=\"https://redirect.github.com/golang/glog/issues/73\"\u003e#73\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/459cf3b8151dcfd8aa971077774eaf0c804119e4\"\u003e\u003ccode\u003e459cf3b\u003c/code\u003e\u003c/a\u003e glog: check that stderr is valid before using it by default (\u003ca href=\"https://redirect.github.com/golang/glog/issues/72\"\u003e#72\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/97303146a4ffecf364d4300e07fca855d0062c43\"\u003e\u003ccode\u003e9730314\u003c/code\u003e\u003c/a\u003e glog: avoid calling user.Current() on windows (\u003ca href=\"https://redirect.github.com/golang/glog/issues/69\"\u003e#69\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/861d094757551d2f65d1003f0ec93bc92b254a5a\"\u003e\u003ccode\u003e861d094\u003c/code\u003e\u003c/a\u003e glog: don't hold mutex when sync'ing (\u003ca href=\"https://redirect.github.com/golang/glog/issues/68\"\u003e#68\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/b256bbe5d3f846c1d1ce73030c10973378e04cf0\"\u003e\u003ccode\u003eb256bbe\u003c/code\u003e\u003c/a\u003e glog: add context variants to most log functions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/bcf318487a966b61bca6189643b72648fa132e6e\"\u003e\u003ccode\u003ebcf3184\u003c/code\u003e\u003c/a\u003e glog/internal/logsink: add logsink tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/6b9d7f7df28d318a28dde3adb8a5e9ae9bf1abaf\"\u003e\u003ccode\u003e6b9d7f7\u003c/code\u003e\u003c/a\u003e glog: populate symlinks -log_link directory (\u003ca href=\"https://redirect.github.com/golang/glog/issues/64\"\u003e#64\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang/glog/compare/v1.1.1...v1.2.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/golang/glog` from 1.1.2 to 1.2.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/golang/glog/releases\"\u003egithub.com/golang/glog's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.2.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFail if log file already exists by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/74\"\u003egolang/glog#74\u003c/a\u003e:\n\u003cul\u003e\n\u003cli\u003eglog: Don't try to create/rotate a given syncBuffer twice in the same second\u003c/li\u003e\n\u003cli\u003eglog: introduce createInDir function as in internal version\u003c/li\u003e\n\u003cli\u003eglog: have createInDir fail if the file already exists\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.2.3...v1.2.4\"\u003ehttps://github.com/golang/glog/compare/v1.2.3...v1.2.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.2.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eglog: check that stderr is valid before using it by default by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/72\"\u003egolang/glog#72\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eglog: fix typo by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/73\"\u003egolang/glog#73\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.2.2...v1.2.3\"\u003ehttps://github.com/golang/glog/compare/v1.2.2...v1.2.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.2.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eglog: avoid calling user.Current() on windows by \u003ca href=\"https://github.com/bentekkie\"\u003e\u003ccode\u003e@​bentekkie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/69\"\u003egolang/glog#69\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.2.1...v1.2.2\"\u003ehttps://github.com/golang/glog/compare/v1.2.1...v1.2.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.2.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eglog: don't hold mutex when sync'ing by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/68\"\u003egolang/glog#68\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.2.0...v1.2.1\"\u003ehttps://github.com/golang/glog/compare/v1.2.0...v1.2.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.2.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eglog: add context variants and logsink tests by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/66\"\u003egolang/glog#66\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.1.2...v1.2.0\"\u003ehttps://github.com/golang/glog/compare/v1.1.2...v1.2.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.1.2\u003c/h2\u003e\n\u003cp\u003eBugfix release.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eglog: populate symlinks -log_link directory by \u003ca href=\"https://github.com/chressie\"\u003e\u003ccode\u003e@​chressie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang/glog/pull/64\"\u003egolang/glog#64\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang/glog/compare/v1.1.1...v1.1.2\"\u003ehttps://github.com/golang/glog/compare/v1.1.1...v1.1.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/a0e3c40a0ed0cecc58c84e7684d9ce55a54044ee\"\u003e\u003ccode\u003ea0e3c40\u003c/code\u003e\u003c/a\u003e glog: have createInDir fail if the file already exists\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/7139da234346c23dba05a8c588284c379b9c0bf8\"\u003e\u003ccode\u003e7139da2\u003c/code\u003e\u003c/a\u003e glog: introduce createInDir function as in internal version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/dd58629ba6ced28322bcb149ed86016fb1ec9a5b\"\u003e\u003ccode\u003edd58629\u003c/code\u003e\u003c/a\u003e glog: Don't try to create/rotate a given syncBuffer twice in the same second\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/04dbec0df8d03d5c187beaf5ce8e6c58e9fc82b5\"\u003e\u003ccode\u003e04dbec0\u003c/code\u003e\u003c/a\u003e glog: fix typo (\u003ca href=\"https://redirect.github.com/golang/glog/issues/73\"\u003e#73\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/459cf3b8151dcfd8aa971077774eaf0c804119e4\"\u003e\u003ccode\u003e459cf3b\u003c/code\u003e\u003c/a\u003e glog: check that stderr is valid before using it by default (\u003ca href=\"https://redirect.github.com/golang/glog/issues/72\"\u003e#72\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/97303146a4ffecf364d4300e07fca855d0062c43\"\u003e\u003ccode\u003e9730314\u003c/code\u003e\u003c/a\u003e glog: avoid calling user.Current() on windows (\u003ca href=\"https://redirect.github.com/golang/glog/issues/69\"\u003e#69\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/861d094757551d2f65d1003f0ec93bc92b254a5a\"\u003e\u003ccode\u003e861d094\u003c/code\u003e\u003c/a\u003e glog: don't hold mutex when sync'ing (\u003ca href=\"https://redirect.github.com/golang/glog/issues/68\"\u003e#68\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/b256bbe5d3f846c1d1ce73030c10973378e04cf0\"\u003e\u003ccode\u003eb256bbe\u003c/code\u003e\u003c/a\u003e glog: add context variants to most log functions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/bcf318487a966b61bca6189643b72648fa132e6e\"\u003e\u003ccode\u003ebcf3184\u003c/code\u003e\u003c/a\u003e glog/internal/logsink: add logsink tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/glog/commit/6b9d7f7df28d318a28dde3adb8a5e9ae9bf1abaf\"\u003e\u003ccode\u003e6b9d7f7\u003c/code\u003e\u003c/a\u003e glog: populate symlinks -log_link directory (\u003ca href=\"https://redirect.github.com/golang/glog/issues/64\"\u003e#64\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang/glog/compare/v1.1.1...v1.2.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.15.0 to 0.38.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/e1fcd82abba34df74614020343be8eb1fe85f0d9\"\u003e\u003ccode\u003ee1fcd82\u003c/code\u003e\u003c/a\u003e html: properly handle trailing solidus in unquoted attribute value in foreign...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/ebed060e8f30f20235f74808c22125fd86b15edd\"\u003e\u003ccode\u003eebed060\u003c/code\u003e\u003c/a\u003e internal/http3: fix build of tests with GOEXPERIMENT=nosynctest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/1f1fa29e0a46fffe18c43a9da8daa5a0b180dfa9\"\u003e\u003ccode\u003e1f1fa29\u003c/code\u003e\u003c/a\u003e publicsuffix: regenerate table\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/12150816f701c912a32a376754ab28dd3878833a\"\u003e\u003ccode\u003e1215081\u003c/code\u003e\u003c/a\u003e http2: improve error when server sends HTTP/1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/312450e473eae9f9e6173ad895c80bc5ea2f79ad\"\u003e\u003ccode\u003e312450e\u003c/code\u003e\u003c/a\u003e html: ensure \u0026lt;search\u0026gt; tag closes \u0026lt;p\u0026gt; and update tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/09731f9bf919b00b344c763894cd1920b3d96d90\"\u003e\u003ccode\u003e09731f9\u003c/code\u003e\u003c/a\u003e http2: improve handling of lost PING in Server\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/55989e24b972a90ab99308fdc7ea1fb58a96fef1\"\u003e\u003ccode\u003e55989e2\u003c/code\u003e\u003c/a\u003e http2/h2c: use ResponseController for hijacking connections\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/2914f46773171f4fa13e276df1135bafef677801\"\u003e\u003ccode\u003e2914f46\u003c/code\u003e\u003c/a\u003e websocket: re-recommend gorilla/websocket\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/99b3ae0643f9a2f9d820fcbba5f9e4c83b23bd48\"\u003e\u003ccode\u003e99b3ae0\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/85d1d54551b68719346cb9fec24b911da4e452a1\"\u003e\u003ccode\u003e85d1d54\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.23.0...v0.38.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/oauth2` from 0.12.0 to 0.27.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/681b4d8edca1bcfea5bce685d77ea7b82ed3e7b3\"\u003e\u003ccode\u003e681b4d8\u003c/code\u003e\u003c/a\u003e jws: split token into fixed number of parts\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/3f78298beea38fb76a3fbca33e3056f4b7eb5502\"\u003e\u003ccode\u003e3f78298\u003c/code\u003e\u003c/a\u003e all: upgrade go directive to at least 1.23.0 [generated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/109dabf9017129171d1807e485ca5633ecd095ac\"\u003e\u003ccode\u003e109dabf\u003c/code\u003e\u003c/a\u003e endpoints: add links/provider for Discord\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/ac571fa341c2a2b979d2b2c8341fd24767ef5d47\"\u003e\u003ccode\u003eac571fa\u003c/code\u003e\u003c/a\u003e oauth2: fix docs for Config.DeviceAuth\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/314ee5b92bf23c4973aa8e61eba3ff458e80eef2\"\u003e\u003ccode\u003e314ee5b\u003c/code\u003e\u003c/a\u003e endpoints: add patreon endpoint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/b9c813be7d0ec3262d46deb8677ba5cda93d95ec\"\u003e\u003ccode\u003eb9c813b\u003c/code\u003e\u003c/a\u003e google: add warning about externally-provided credentials\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/49a531d12a9ad6fa9f5a070d577ac752ada772c9\"\u003e\u003ccode\u003e49a531d\u003c/code\u003e\u003c/a\u003e all: make method and struct comments match the names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/22134a41033e44c2cd074106770ab5b7ca910d15\"\u003e\u003ccode\u003e22134a4\u003c/code\u003e\u003c/a\u003e README: don't recommend go get\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/3e6480915d39dd1a80fa460e56413857f02cc1b9\"\u003e\u003ccode\u003e3e64809\u003c/code\u003e\u003c/a\u003e x/oauth2: add Token.ExpiresIn\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/16a9973a41c72ea3e252e9c14be34fcaa2928211\"\u003e\u003ccode\u003e16a9973\u003c/code\u003e\u003c/a\u003e jwt: rename example to avoid vet error\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/oauth2/compare/v0.7.0...v0.27.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google.golang.org/grpc` from 1.57.0 to 1.79.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc-go/releases\"\u003egoogle.golang.org/grpc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 1.79.3\u003c/h2\u003e\n\u003ch1\u003eSecurity\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eserver: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted \u0026quot;deny\u0026quot; rules in interceptors like \u003ccode\u003egrpc/authz\u003c/code\u003e. Any request with a non-canonical path is now immediately rejected with an \u003ccode\u003eUnimplemented\u003c/code\u003e error. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.2\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003estats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8874\"\u003egrpc/grpc-go#8874\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.1\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003egrpc: Remove the \u003ccode\u003e-dev\u003c/code\u003e suffix from the User-Agent header. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8902\"\u003egrpc/grpc-go#8902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.0\u003c/h2\u003e\n\u003ch1\u003eAPI Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003emem: Add experimental API \u003ccode\u003eSetDefaultBufferPool\u003c/code\u003e to change the default buffer pool. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8806\"\u003e#8806\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/vanja-p\"\u003e\u003ccode\u003e@​vanja-p\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eexperimental/stats: Update \u003ccode\u003eMetricsRecorder\u003c/code\u003e to require embedding the new \u003ccode\u003eUnimplementedMetricsRecorder\u003c/code\u003e (a no-op struct) in all implementations for forward compatibility. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBehavior Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ebalancer/weightedtarget: Remove handling of \u003ccode\u003eAddresses\u003c/code\u003e and only handle \u003ccode\u003eEndpoints\u003c/code\u003e in resolver updates. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8841\"\u003e#8841\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eNew Features\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eexperimental/stats: Add support for asynchronous gauge metrics through the new \u003ccode\u003eAsyncMetricReporter\u003c/code\u003e and \u003ccode\u003eRegisterAsyncReporter\u003c/code\u003e APIs. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epickfirst: Add support for weighted random shuffling of endpoints, as described in \u003ca href=\"https://redirect.github.com/grpc/proposal/pull/535\"\u003egRFC A113\u003c/a\u003e.\n\u003cul\u003e\n\u003cli\u003eThis is enabled by default, and can be turned off using the environment variable \u003ccode\u003eGRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds: Implement \u003ccode\u003e:authority\u003c/code\u003e rewriting, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A81-xds-authority-rewriting.md\"\u003egRFC A81\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8779\"\u003e#8779\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebalancer/randomsubsetting: Implement the \u003ccode\u003erandom_subsetting\u003c/code\u003e LB policy, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A68-random-subsetting.md\"\u003egRFC A68\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8650\"\u003e#8650\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/marek-szews\"\u003e\u003ccode\u003e@​marek-szews\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/tls: Fix a bug where the port was not stripped from the authority override before validation. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8726\"\u003e#8726\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/Atul1710\"\u003e\u003ccode\u003e@​Atul1710\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds/priority: Fix a bug causing delayed failover to lower-priority clusters when a higher-priority cluster is stuck in \u003ccode\u003eCONNECTING\u003c/code\u003e state. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8813\"\u003e#8813\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ehealth: Fix a bug where health checks failed for clients using legacy compression options (\u003ccode\u003eWithDecompressor\u003c/code\u003e or \u003ccode\u003eRPCDecompressor\u003c/code\u003e). (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8765\"\u003e#8765\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/sanki92\"\u003e\u003ccode\u003e@​sanki92\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003etransport: Fix an issue where the HTTP/2 server could skip header size checks when terminating a stream early. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8769\"\u003e#8769\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eserver: Propagate status detail headers, if available, when terminating a stream during request header processing. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8754\"\u003e#8754\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ePerformance Improvements\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/alts: Optimize read buffer alignment to reduce copies. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8791\"\u003e#8791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emem: Optimize pooling and creation of \u003ccode\u003ebuffer\u003c/code\u003e objects.  (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8784\"\u003e#8784\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etransport: Reduce slice re-allocations by reserving slice capacity. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8797\"\u003e#8797\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/dda86dbd9cecb8b35b58c73d507d81d67761205f\"\u003e\u003ccode\u003edda86db\u003c/code\u003e\u003c/a\u003e Change version to 1.79.3 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8983\"\u003e#8983\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/72186f163e75a065c39e6f7df9b6dea07fbdeff5\"\u003e\u003ccode\u003e72186f1\u003c/code\u003e\u003c/a\u003e grpc: enforce strict path checking for incoming requests on the server (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/97ca3522b239edf6813e2b1106924e9d55e89d43\"\u003e\u003ccode\u003e97ca352\u003c/code\u003e\u003c/a\u003e Changing version to 1.79.3-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8954\"\u003e#8954\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/...\n\n_Description has been truncated_","html_url":"https://github.com/YoutacRandS-VA/magic-modules/pull/7","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/YoutacRandS-VA%2Fmagic-modules/issues/7","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/7/packages"}},{"old_version":"1.6.0","new_version":"1.6.3","update_type":"patch","path":"the cloudflare-circl group","pr_created_at":"2026-05-02T12:29:50.000Z","version_change":"1.6.0 → 1.6.3","issue":{"uuid":"4368890856","node_id":"PR_kwDOSSZBe87Xo3FH","number":1,"state":"open","title":"deps(deps): Bump github.com/cloudflare/circl from 1.6.0 to 1.6.3 in the cloudflare-circl group","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-02T12:29:50.000Z","updated_at":"2026-05-02T12:29:51.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"deps(deps): Bump","packages":[{"name":"github.com/cloudflare/circl","old_version":"1.6.0","new_version":"1.6.3","repository_url":"https://github.com/cloudflare/circl"}],"path":"the cloudflare-circl group","ecosystem":"go"},"body":"Bumps the cloudflare-circl group with 1 update: [github.com/cloudflare/circl](https://github.com/cloudflare/circl).\n\nUpdates `github.com/cloudflare/circl` from 1.6.0 to 1.6.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cloudflare/circl/releases\"\u003egithub.com/cloudflare/circl's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eCIRCL v1.6.3\u003c/h2\u003e\n\u003cp\u003eFix a bug on ecc/p384 scalar multiplication.\u003c/p\u003e\n\u003ch3\u003eWhat's Changed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esign/mldsa: Check opts for nil value  by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/582\"\u003ecloudflare/circl#582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eecc/p384: Point addition must handle point doubling case. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/583\"\u003ecloudflare/circl#583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease CIRCL v1.6.3 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/584\"\u003ecloudflare/circl#584\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNew SLH-DSA, improvements in ML-DSA for arm64.\u003c/li\u003e\n\u003cli\u003eTested compilation on WASM.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize pairing product computation by moving exponentiations to G1. by \u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esign: Adding SLH-DSA signature by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/512\"\u003ecloudflare/circl#512\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate code generators to CIRCL v1.6.1. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/548\"\u003ecloudflare/circl#548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eML-DSA: Add preliminary Wycheproof test vectors by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/552\"\u003ecloudflare/circl#552\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ego fmt by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/554\"\u003ecloudflare/circl#554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egz-compressing test vectors, use of HexBytes and ReadGzip functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/555\"\u003ecloudflare/circl#555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Removes use of elliptic Marshal and Unmarshal functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/556\"\u003ecloudflare/circl#556\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport encoding/decoding ML-DSA private keys (as long as they contain seeds) by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/559\"\u003ecloudflare/circl#559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to golangci-lint v2 by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/560\"\u003ecloudflare/circl#560\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreparation for ARM64 Implementation of poly operations for dilithium package. by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eprepare power2Round for custom implementations in assembly by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/564\"\u003ecloudflare/circl#564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eARM64 implementation for poly.PackLe16 by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/563\"\u003ecloudflare/circl#563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polyMulBy2toD by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/565\"\u003ecloudflare/circl#565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polySub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/566\"\u003ecloudflare/circl#566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: add byteLen method for short groups and RandomScalar uses rand.Int by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/568\"\u003ecloudflare/circl#568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of poly.Add/Sub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/572\"\u003ecloudflare/circl#572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Adding cryptobyte marshaling to scalars by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/569\"\u003ecloudflare/circl#569\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumping up to Go1.25 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/574\"\u003ecloudflare/circl#574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: Including WASM compilation. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/577\"\u003ecloudflare/circl#577\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to using package-declared HPKE errors for shortkem instead of standard library errors by \u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease v1.6.2 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/579\"\u003ecloudflare/circl#579\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixes some point checks on the FourQ curve.\u003c/li\u003e\n\u003cli\u003eHybrid KEM fails on low-order points.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/24ae53c5d6f7fe18203adc125ba3ed76a38703e1\"\u003e\u003ccode\u003e24ae53c\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/581020bd4a836b8ce7bd4e414ba2884c07dbc906\"\u003e\u003ccode\u003e581020b\u003c/code\u003e\u003c/a\u003e Rename method to oddMultiplesProjective.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/12209a4566605692a8402594e367a5aed5148460\"\u003e\u003ccode\u003e12209a4\u003c/code\u003e\u003c/a\u003e Removing unused cmov for jacobian points.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/fcba359f4178645d2c9e50f29ab6966337da4b95\"\u003e\u003ccode\u003efcba359\u003c/code\u003e\u003c/a\u003e ecc/p384: use of complete projective formulas for scalar multiplication.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/5e1bae8d8c2df4e717c2c5c2d5b5d60b629b2ac6\"\u003e\u003ccode\u003e5e1bae8\u003c/code\u003e\u003c/a\u003e ecc/p384: handle point doubling in point addition with Jacobian coordinates.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/341604685ff97e8f7440ae4b4711ba1c118c648c\"\u003e\u003ccode\u003e3416046\u003c/code\u003e\u003c/a\u003e Check opts for nil value.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/a763d47a6dce43d1f4f7b697d1d7810463a526f6\"\u003e\u003ccode\u003ea763d47\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3c70bf9ad53b681fbe5ba6067e454a86549fee8a\"\u003e\u003ccode\u003e3c70bf9\u003c/code\u003e\u003c/a\u003e Bump x/crypto x/sys dependencies.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3f0f15b2bfe67bad81a35e8aec81ae42ca78349d\"\u003e\u003ccode\u003e3f0f15b\u003c/code\u003e\u003c/a\u003e Revert to using package-declared HPKE errors for shortkem instead of standard...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/23491bd573cf29b6f567057a158203a2c9dfa30d\"\u003e\u003ccode\u003e23491bd\u003c/code\u003e\u003c/a\u003e Adding generic Power2Round method.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.0...v1.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/cloudflare/circl\u0026package-manager=go_modules\u0026previous-version=1.6.0\u0026new-version=1.6.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/justinwoo280/ech-keymgr/pull/1","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/justinwoo280%2Fech-keymgr/issues/1","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1/packages"}},{"old_version":"1.6.1","new_version":"1.6.3","update_type":"patch","path":"/src/hockeypuck","pr_created_at":"2026-05-01T21:55:05.000Z","version_change":"1.6.1 → 1.6.3","issue":{"uuid":"4366838237","node_id":"PR_kwDOAQ6W1c7Ximy1","number":446,"state":"closed","title":"Bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 in /src/hockeypuck","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-05-01T21:57:15.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-01T21:55:05.000Z","updated_at":"2026-05-01T21:57:25.000Z","time_to_close":130,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"github.com/cloudflare/circl","old_version":"1.6.1","new_version":"1.6.3","repository_url":"https://github.com/cloudflare/circl"}],"path":"/src/hockeypuck","ecosystem":"go"},"body":"Bumps [github.com/cloudflare/circl](https://github.com/cloudflare/circl) from 1.6.1 to 1.6.3.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cloudflare/circl/releases\"\u003egithub.com/cloudflare/circl's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eCIRCL v1.6.3\u003c/h2\u003e\n\u003cp\u003eFix a bug on ecc/p384 scalar multiplication.\u003c/p\u003e\n\u003ch3\u003eWhat's Changed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esign/mldsa: Check opts for nil value  by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/582\"\u003ecloudflare/circl#582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eecc/p384: Point addition must handle point doubling case. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/583\"\u003ecloudflare/circl#583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease CIRCL v1.6.3 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/584\"\u003ecloudflare/circl#584\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNew SLH-DSA, improvements in ML-DSA for arm64.\u003c/li\u003e\n\u003cli\u003eTested compilation on WASM.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize pairing product computation by moving exponentiations to G1. by \u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esign: Adding SLH-DSA signature by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/512\"\u003ecloudflare/circl#512\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate code generators to CIRCL v1.6.1. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/548\"\u003ecloudflare/circl#548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eML-DSA: Add preliminary Wycheproof test vectors by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/552\"\u003ecloudflare/circl#552\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ego fmt by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/554\"\u003ecloudflare/circl#554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egz-compressing test vectors, use of HexBytes and ReadGzip functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/555\"\u003ecloudflare/circl#555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Removes use of elliptic Marshal and Unmarshal functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/556\"\u003ecloudflare/circl#556\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport encoding/decoding ML-DSA private keys (as long as they contain seeds) by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/559\"\u003ecloudflare/circl#559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to golangci-lint v2 by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/560\"\u003ecloudflare/circl#560\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreparation for ARM64 Implementation of poly operations for dilithium package. by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eprepare power2Round for custom implementations in assembly by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/564\"\u003ecloudflare/circl#564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eARM64 implementation for poly.PackLe16 by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/563\"\u003ecloudflare/circl#563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polyMulBy2toD by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/565\"\u003ecloudflare/circl#565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polySub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/566\"\u003ecloudflare/circl#566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: add byteLen method for short groups and RandomScalar uses rand.Int by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/568\"\u003ecloudflare/circl#568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of poly.Add/Sub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/572\"\u003ecloudflare/circl#572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Adding cryptobyte marshaling to scalars by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/569\"\u003ecloudflare/circl#569\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumping up to Go1.25 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/574\"\u003ecloudflare/circl#574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: Including WASM compilation. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/577\"\u003ecloudflare/circl#577\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to using package-declared HPKE errors for shortkem instead of standard library errors by \u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease v1.6.2 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/579\"\u003ecloudflare/circl#579\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/24ae53c5d6f7fe18203adc125ba3ed76a38703e1\"\u003e\u003ccode\u003e24ae53c\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/581020bd4a836b8ce7bd4e414ba2884c07dbc906\"\u003e\u003ccode\u003e581020b\u003c/code\u003e\u003c/a\u003e Rename method to oddMultiplesProjective.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/12209a4566605692a8402594e367a5aed5148460\"\u003e\u003ccode\u003e12209a4\u003c/code\u003e\u003c/a\u003e Removing unused cmov for jacobian points.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/fcba359f4178645d2c9e50f29ab6966337da4b95\"\u003e\u003ccode\u003efcba359\u003c/code\u003e\u003c/a\u003e ecc/p384: use of complete projective formulas for scalar multiplication.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/5e1bae8d8c2df4e717c2c5c2d5b5d60b629b2ac6\"\u003e\u003ccode\u003e5e1bae8\u003c/code\u003e\u003c/a\u003e ecc/p384: handle point doubling in point addition with Jacobian coordinates.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/341604685ff97e8f7440ae4b4711ba1c118c648c\"\u003e\u003ccode\u003e3416046\u003c/code\u003e\u003c/a\u003e Check opts for nil value.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/a763d47a6dce43d1f4f7b697d1d7810463a526f6\"\u003e\u003ccode\u003ea763d47\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3c70bf9ad53b681fbe5ba6067e454a86549fee8a\"\u003e\u003ccode\u003e3c70bf9\u003c/code\u003e\u003c/a\u003e Bump x/crypto x/sys dependencies.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3f0f15b2bfe67bad81a35e8aec81ae42ca78349d\"\u003e\u003ccode\u003e3f0f15b\u003c/code\u003e\u003c/a\u003e Revert to using package-declared HPKE errors for shortkem instead of standard...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/23491bd573cf29b6f567057a158203a2c9dfa30d\"\u003e\u003ccode\u003e23491bd\u003c/code\u003e\u003c/a\u003e Adding generic Power2Round method.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/cloudflare/circl\u0026package-manager=go_modules\u0026previous-version=1.6.1\u0026new-version=1.6.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/hockeypuck/hockeypuck/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/hockeypuck/hockeypuck/pull/446","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/hockeypuck%2Fhockeypuck/issues/446","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/446/packages"}},{"old_version":"1.3.7","new_version":"1.6.3","update_type":"minor","path":null,"pr_created_at":"2026-04-17T22:47:10.000Z","version_change":"1.3.7 → 1.6.3","issue":{"uuid":"4285717455","node_id":"PR_kwDOCLDSb87TeDEU","number":1061,"state":"open","title":"Bump github.com/cloudflare/circl from 1.3.7 to 1.6.3","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-04-17T22:47:10.000Z","updated_at":"2026-04-17T22:49:34.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"github.com/cloudflare/circl","old_version":"1.3.7","new_version":"1.6.3","repository_url":"https://github.com/cloudflare/circl"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/cloudflare/circl](https://github.com/cloudflare/circl) from 1.3.7 to 1.6.3.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cloudflare/circl/releases\"\u003egithub.com/cloudflare/circl's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eCIRCL v1.6.3\u003c/h2\u003e\n\u003cp\u003eFix a bug on ecc/p384 scalar multiplication.\u003c/p\u003e\n\u003ch3\u003eWhat's Changed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esign/mldsa: Check opts for nil value  by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/582\"\u003ecloudflare/circl#582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eecc/p384: Point addition must handle point doubling case. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/583\"\u003ecloudflare/circl#583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease CIRCL v1.6.3 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/584\"\u003ecloudflare/circl#584\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNew SLH-DSA, improvements in ML-DSA for arm64.\u003c/li\u003e\n\u003cli\u003eTested compilation on WASM.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize pairing product computation by moving exponentiations to G1. by \u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esign: Adding SLH-DSA signature by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/512\"\u003ecloudflare/circl#512\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate code generators to CIRCL v1.6.1. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/548\"\u003ecloudflare/circl#548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eML-DSA: Add preliminary Wycheproof test vectors by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/552\"\u003ecloudflare/circl#552\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ego fmt by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/554\"\u003ecloudflare/circl#554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egz-compressing test vectors, use of HexBytes and ReadGzip functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/555\"\u003ecloudflare/circl#555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Removes use of elliptic Marshal and Unmarshal functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/556\"\u003ecloudflare/circl#556\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport encoding/decoding ML-DSA private keys (as long as they contain seeds) by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/559\"\u003ecloudflare/circl#559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to golangci-lint v2 by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/560\"\u003ecloudflare/circl#560\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreparation for ARM64 Implementation of poly operations for dilithium package. by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eprepare power2Round for custom implementations in assembly by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/564\"\u003ecloudflare/circl#564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eARM64 implementation for poly.PackLe16 by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/563\"\u003ecloudflare/circl#563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polyMulBy2toD by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/565\"\u003ecloudflare/circl#565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polySub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/566\"\u003ecloudflare/circl#566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: add byteLen method for short groups and RandomScalar uses rand.Int by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/568\"\u003ecloudflare/circl#568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of poly.Add/Sub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/572\"\u003ecloudflare/circl#572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Adding cryptobyte marshaling to scalars by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/569\"\u003ecloudflare/circl#569\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumping up to Go1.25 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/574\"\u003ecloudflare/circl#574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: Including WASM compilation. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/577\"\u003ecloudflare/circl#577\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to using package-declared HPKE errors for shortkem instead of standard library errors by \u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease v1.6.2 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/579\"\u003ecloudflare/circl#579\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixes some point checks on the FourQ curve.\u003c/li\u003e\n\u003cli\u003eHybrid KEM fails on low-order points.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/24ae53c5d6f7fe18203adc125ba3ed76a38703e1\"\u003e\u003ccode\u003e24ae53c\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/581020bd4a836b8ce7bd4e414ba2884c07dbc906\"\u003e\u003ccode\u003e581020b\u003c/code\u003e\u003c/a\u003e Rename method to oddMultiplesProjective.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/12209a4566605692a8402594e367a5aed5148460\"\u003e\u003ccode\u003e12209a4\u003c/code\u003e\u003c/a\u003e Removing unused cmov for jacobian points.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/fcba359f4178645d2c9e50f29ab6966337da4b95\"\u003e\u003ccode\u003efcba359\u003c/code\u003e\u003c/a\u003e ecc/p384: use of complete projective formulas for scalar multiplication.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/5e1bae8d8c2df4e717c2c5c2d5b5d60b629b2ac6\"\u003e\u003ccode\u003e5e1bae8\u003c/code\u003e\u003c/a\u003e ecc/p384: handle point doubling in point addition with Jacobian coordinates.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/341604685ff97e8f7440ae4b4711ba1c118c648c\"\u003e\u003ccode\u003e3416046\u003c/code\u003e\u003c/a\u003e Check opts for nil value.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/a763d47a6dce43d1f4f7b697d1d7810463a526f6\"\u003e\u003ccode\u003ea763d47\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3c70bf9ad53b681fbe5ba6067e454a86549fee8a\"\u003e\u003ccode\u003e3c70bf9\u003c/code\u003e\u003c/a\u003e Bump x/crypto x/sys dependencies.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3f0f15b2bfe67bad81a35e8aec81ae42ca78349d\"\u003e\u003ccode\u003e3f0f15b\u003c/code\u003e\u003c/a\u003e Revert to using package-declared HPKE errors for shortkem instead of standard...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/23491bd573cf29b6f567057a158203a2c9dfa30d\"\u003e\u003ccode\u003e23491bd\u003c/code\u003e\u003c/a\u003e Adding generic Power2Round method.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.3.7...v1.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/cloudflare/circl\u0026package-manager=go_modules\u0026previous-version=1.3.7\u0026new-version=1.6.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/rocket-pool/smartnode/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/rocket-pool/smartnode/pull/1061","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/rocket-pool%2Fsmartnode/issues/1061","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1061/packages"}},{"old_version":"1.6.1","new_version":"1.6.3","update_type":"patch","path":null,"pr_created_at":"2026-04-16T20:57:30.000Z","version_change":"1.6.1 → 1.6.3","issue":{"uuid":"4278495348","node_id":"PR_kwDOPz0Zb87TGw0p","number":37,"state":"closed","title":"Bump the go_modules group across 18 directories with 12 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-04-16T22:16:56.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-16T20:57:30.000Z","updated_at":"2026-04-16T22:16:58.000Z","time_to_close":4766,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"go_modules","update_count":12,"packages":[{"name":"github.com/go-jose/go-jose/v4","old_version":"4.1.2","new_version":"4.1.4","repository_url":"https://github.com/go-jose/go-jose"},{"name":"github.com/openfga/openfga","old_version":"1.10.0","new_version":"1.14.0","repository_url":"https://github.com/openfga/openfga"},{"name":"github.com/russellhaering/goxmldsig","old_version":"1.4.0","new_version":"1.6.0","repository_url":"https://github.com/russellhaering/goxmldsig"},{"name":"github.com/buger/jsonparser","old_version":"1.1.1","new_version":"1.1.2","repository_url":"https://github.com/buger/jsonparser"},{"name":"github.com/cloudflare/circl","old_version":"1.6.1","new_version":"1.6.3","repository_url":"https://github.com/cloudflare/circl"},{"name":"github.com/moby/spdystream","old_version":"0.5.0","new_version":"0.5.1","repository_url":"https://github.com/moby/spdystream"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 6 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) | `4.1.2` | `4.1.4` |\n| [github.com/openfga/openfga](https://github.com/openfga/openfga) | `1.10.0` | `1.14.0` |\n| [github.com/russellhaering/goxmldsig](https://github.com/russellhaering/goxmldsig) | `1.4.0` | `1.6.0` |\n| [github.com/buger/jsonparser](https://github.com/buger/jsonparser) | `1.1.1` | `1.1.2` |\n| [github.com/cloudflare/circl](https://github.com/cloudflare/circl) | `1.6.1` | `1.6.3` |\n| [github.com/moby/spdystream](https://github.com/moby/spdystream) | `0.5.0` | `0.5.1` |\n\nBumps the go_modules group with 1 update in the /.citools/src/air directory: [github.com/gohugoio/hugo](https://github.com/gohugoio/hugo).\nBumps the go_modules group with 3 updates in the /apps/alerting/notifications directory: [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go).\nBumps the go_modules group with 3 updates in the /apps/alerting/rules directory: [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go).\nBumps the go_modules group with 3 updates in the /apps/correlations directory: [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go).\nBumps the go_modules group with 3 updates in the /apps/dashboard directory: [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 4 updates in the /apps/iam directory: [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose), [github.com/openfga/openfga](https://github.com/openfga/openfga), [github.com/buger/jsonparser](https://github.com/buger/jsonparser) and [github.com/cloudflare/circl](https://github.com/cloudflare/circl).\nBumps the go_modules group with 3 updates in the /apps/investigations directory: [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go).\nBumps the go_modules group with 3 updates in the /apps/playlist directory: [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go).\nBumps the go_modules group with 4 updates in the /apps/plugins directory: [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go).\nBumps the go_modules group with 2 updates in the /apps/provisioning directory: [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 1 update in the /apps/secret directory: [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 4 updates in the /apps/shorturl directory: [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go).\nBumps the go_modules group with 2 updates in the /pkg/aggregator directory: [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 2 updates in the /pkg/apimachinery directory: [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 3 updates in the /pkg/apiserver directory: [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose), [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 3 updates in the /pkg/build directory: [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go).\nBumps the go_modules group with 3 updates in the /pkg/promlib directory: [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [github.com/buger/jsonparser](https://github.com/buger/jsonparser).\n\nUpdates `github.com/go-jose/go-jose/v4` from 4.1.2 to 4.1.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-jose/go-jose/releases\"\u003egithub.com/go-jose/go-jose/v4's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.1.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003eFixes Panic in JWE decryption. See \u003ca href=\"https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\"\u003ehttps://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4\"\u003ehttps://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.1.3\u003c/h2\u003e\n\u003cp\u003eThis release drops Go 1.23 support as that Go release is no longer supported. With that, we can drop \u003ccode\u003ex/crypto\u003c/code\u003e and no longer have any external dependencies in go-jose outside of the standard library!\u003c/p\u003e\n\u003cp\u003eThis release fixes a bug where a critical b64 header was ignored if in an unprotected header. It is now rejected instead of ignored.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemove Go 1.23 support by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/205\"\u003ego-jose/go-jose#205\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReject JWS with an unprotected critical b64 header by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/210\"\u003ego-jose/go-jose#210\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.2...v4.1.3\"\u003ehttps://github.com/go-jose/go-jose/compare/v4.1.2...v4.1.3\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/0e59876635f3dbf46d7b5e97b52bb75a3f96e7d9\"\u003e\u003ccode\u003e0e59876\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/ddffdbcec8bdadea8e02a20bdf19239878228215\"\u003e\u003ccode\u003eddffdbc\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 5 to 6 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/213\"\u003e#213\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/5348b9a4ba4559d2266b5af89fb5353cd1a5360a\"\u003e\u003ccode\u003e5348b9a\u003c/code\u003e\u003c/a\u003e Reject JWS with an unprotected critical b64 header (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/210\"\u003e#210\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/9153a5e4549c95e97a84e41e6375dc90eac54241\"\u003e\u003ccode\u003e9153a5e\u003c/code\u003e\u003c/a\u003e Bump actions/setup-python from 5 to 6 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/208\"\u003e#208\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/2126e17f8791f6a234e63b2e4e8cb9fac8605c3a\"\u003e\u003ccode\u003e2126e17\u003c/code\u003e\u003c/a\u003e Bump actions/setup-go from 5 to 6 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/209\"\u003e#209\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/9860c65054c4821d1e7c22200422b04181f58ebc\"\u003e\u003ccode\u003e9860c65\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 4 to 5 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/206\"\u003e#206\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/14239fdb15b88e1c42e41621ef24f1112cf31b5a\"\u003e\u003ccode\u003e14239fd\u003c/code\u003e\u003c/a\u003e Remove Go 1.23 support (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/205\"\u003e#205\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/a16e15813482ca5e9a679b7f5bb42ddfae616d43\"\u003e\u003ccode\u003ea16e158\u003c/code\u003e\u003c/a\u003e Update CI to run on Go 1.24 and 1.25 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/204\"\u003e#204\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.1.2...v4.1.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/openfga/openfga` from 1.10.0 to 1.14.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/openfga/openfga/releases\"\u003egithub.com/openfga/openfga's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.14.0\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003eopenfga_iter_query_duration_ms\u003c/code\u003e histogram metric to track storage iterator query latency across all storage backends, labeled by \u003ccode\u003esuccess\u003c/code\u003e. The metric is recorded in each backend's \u003ccode\u003efetchBuffer\u003c/code\u003e after error classification: infrastructure failures are labeled \u003ccode\u003esuccess=false\u003c/code\u003e; expected storage outcomes (\u003ccode\u003eErrNotFound\u003c/code\u003e, \u003ccode\u003eErrCollision\u003c/code\u003e, \u003ccode\u003eErrInvalidWriteInput\u003c/code\u003e) are labeled \u003ccode\u003esuccess=true\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3030\"\u003e#3030\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eChanged the ListObjects pipeline intersection algorithm to improve intersection performance. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3031\"\u003e#3031\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[BREAKING]\u003c/strong\u003e The Playground now only supports the \u003ccode\u003enone\u003c/code\u003e authentication method. Running the Playground with \u003ccode\u003epreshared\u003c/code\u003e key authentication is no longer supported. The server will error and not start if it detects this combination.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeprecated\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe built-in OpenFGA Playground is intended for development purposes only and is deprecated. It will be removed entirely in a future release.\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003e--playground-port\u003c/code\u003e flag and \u003ccode\u003eOPENFGA_PLAYGROUND_PORT\u003c/code\u003e environment variable are deprecated. Use \u003ccode\u003e--playground-addr\u003c/code\u003e (\u003ccode\u003eOPENFGA_PLAYGROUND_ADDR\u003c/code\u003e) instead to specify the full \u003ccode\u003ehost:port\u003c/code\u003e address for the Playground server. When \u003ccode\u003e--playground-addr\u003c/code\u003e is not set, the Playground binds to \u003ccode\u003e127.0.0.1\u003c/code\u003e using the port from \u003ccode\u003e--playground-port\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Write operations failing with \u003ccode\u003einvalid input syntax for type integer\u003c/code\u003e (SQLSTATE 22P02) when PostgreSQL is behind PgBouncer or a connection pooler using the simple query protocol. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3014\"\u003e#3014\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed PostgreSQL \u003ccode\u003eHandleSQLError\u003c/code\u003e and \u003ccode\u003eGetStore\u003c/code\u003e returning a wrapped error instead of \u003ccode\u003estorage.ErrNotFound\u003c/code\u003e when no rows are found. When using pgxpool directly, \u003ccode\u003eQueryRow().Scan()\u003c/code\u003e returns \u003ccode\u003epgx.ErrNoRows\u003c/code\u003e, not \u003ccode\u003esql.ErrNoRows\u003c/code\u003e; both are now handled. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3014\"\u003e#3014\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed the possibility of deadlocks within the ListObjects pipeline algorithm. Also added short-circuit enhancements that will reduce latency and message processing in certain scenarios. Cyclical edges now use as much memory as necessary to process deep and wide data hierarchies without the risk of a deadlock. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3028\"\u003e#3028\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed issue where BatchCheck calls with multiple checks for the same tuple could result in improper policy enforcement. \u003ca href=\"https://github.com/openfga/openfga/security/advisories/GHSA-jwvj-g8pc-cx45\"\u003eCVE-2026-34972\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/openfga/openfga/compare/v1.13.1...v1.14.0\"\u003ehttps://github.com/openfga/openfga/compare/v1.13.1...v1.14.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.13.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a security vulnerability (\u003ca href=\"https://github.com/openfga/openfga/security/advisories/GHSA-h6c8-cww8-35hf\"\u003eCVE-2026-33729\u003c/a\u003e) where Check requests with conditions and caching enabled could return incorrect cached results.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/openfga/openfga/compare/v1.13.0...v1.13.1\"\u003ehttps://github.com/openfga/openfga/compare/v1.13.0...v1.13.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.13.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAuthZen v1.0 Implementation by \u003ca href=\"https://github.com/aaguiarz\"\u003e\u003ccode\u003e@​aaguiarz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2875\"\u003eopenfga/openfga#2875\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: fix typos in RELEASES.md and Makefile by \u003ca href=\"https://github.com/kanywst\"\u003e\u003ccode\u003e@​kanywst\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2980\"\u003eopenfga/openfga#2980\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: capture panics in pipeline's base resolver, and return as errors. by \u003ca href=\"https://github.com/senojj\"\u003e\u003ccode\u003e@​senojj\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2994\"\u003eopenfga/openfga#2994\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eobservability: aggregate message statistics for each list-objects sender into a single span by \u003ca href=\"https://github.com/senojj\"\u003e\u003ccode\u003e@​senojj\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2993\"\u003eopenfga/openfga#2993\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: fix typos in comments by \u003ca href=\"https://github.com/archy-rock3t-cloud\"\u003e\u003ccode\u003e@​archy-rock3t-cloud\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2972\"\u003eopenfga/openfga#2972\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: Separate caches for v1 and v2 Check by \u003ca href=\"https://github.com/saad-h1\"\u003e\u003ccode\u003e@​saad-h1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2968\"\u003eopenfga/openfga#2968\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erelease: update changelog for release \u003ccode\u003ev1.13.0\u003c/code\u003e by \u003ca href=\"https://github.com/poovamraj\"\u003e\u003ccode\u003e@​poovamraj\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2997\"\u003eopenfga/openfga#2997\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kanywst\"\u003e\u003ccode\u003e@​kanywst\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2980\"\u003eopenfga/openfga#2980\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/openfga/openfga/compare/v1.12.1...v1.13.0\"\u003ehttps://github.com/openfga/openfga/compare/v1.12.1...v1.13.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.12.1\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe ListObjects \u0026quot;pipeline\u0026quot; algorithm ditches its custom Pipe implementation and replaces it with Go native channels. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2977\"\u003e#2977\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRefactor tuple validation and manipulation functions for optimal performance. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2984\"\u003e#2984\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/openfga/openfga/blob/main/CHANGELOG.md\"\u003egithub.com/openfga/openfga's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.14.0] - 2026-04-03\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003eopenfga_iter_query_duration_ms\u003c/code\u003e histogram metric to track storage iterator query latency across all storage backends, labeled by \u003ccode\u003esuccess\u003c/code\u003e. The metric is recorded in each backend's \u003ccode\u003efetchBuffer\u003c/code\u003e after error classification: infrastructure failures are labeled \u003ccode\u003esuccess=false\u003c/code\u003e; expected storage outcomes (\u003ccode\u003eErrNotFound\u003c/code\u003e, \u003ccode\u003eErrCollision\u003c/code\u003e, \u003ccode\u003eErrInvalidWriteInput\u003c/code\u003e) are labeled \u003ccode\u003esuccess=true\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3030\"\u003e#3030\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eChanged the ListObjects pipeline intersection algorithm to improve intersection performance. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3031\"\u003e#3031\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[BREAKING]\u003c/strong\u003e The Playground now only supports the \u003ccode\u003enone\u003c/code\u003e authentication method. Running the Playground with \u003ccode\u003epreshared\u003c/code\u003e key authentication is no longer supported. The server will error and not start if it detects this combination.\u003c/li\u003e\n\u003cli\u003eThe Playground is now disabled by default as a result of \u003ca href=\"https://github.com/openfga/openfga/security/advisories/GHSA-68m9-983m-f3v5\"\u003eGHSA-68m9-983m-f3v5\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeprecated\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe built-in OpenFGA Playground is intended for development purposes only and is deprecated. It will be removed entirely in a future release.\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003e--playground-port\u003c/code\u003e flag and \u003ccode\u003eOPENFGA_PLAYGROUND_PORT\u003c/code\u003e environment variable are deprecated. Use \u003ccode\u003e--playground-addr\u003c/code\u003e (\u003ccode\u003eOPENFGA_PLAYGROUND_ADDR\u003c/code\u003e) instead to specify the full \u003ccode\u003ehost:port\u003c/code\u003e address for the Playground server. When \u003ccode\u003e--playground-addr\u003c/code\u003e is not set, the Playground binds to \u003ccode\u003e127.0.0.1\u003c/code\u003e using the port from \u003ccode\u003e--playground-port\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Write operations failing with \u003ccode\u003einvalid input syntax for type integer\u003c/code\u003e (SQLSTATE 22P02) when PostgreSQL is behind PgBouncer or a connection pooler using the simple query protocol. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3014\"\u003e#3014\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed PostgreSQL \u003ccode\u003eHandleSQLError\u003c/code\u003e and \u003ccode\u003eGetStore\u003c/code\u003e returning a wrapped error instead of \u003ccode\u003estorage.ErrNotFound\u003c/code\u003e when no rows are found. When using pgxpool directly, \u003ccode\u003eQueryRow().Scan()\u003c/code\u003e returns \u003ccode\u003epgx.ErrNoRows\u003c/code\u003e, not \u003ccode\u003esql.ErrNoRows\u003c/code\u003e; both are now handled. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3014\"\u003e#3014\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed the possibility of deadlocks within the ListObjects pipeline algorithm. Also added short-circuit enhancements that will reduce latency and message processing in certain scenarios. Cyclical edges now use as much memory as necessary to process deep and wide data hierarchies without the risk of a deadlock. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/3028\"\u003e#3028\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed issue where BatchCheck calls with multiple checks for the same tuple could result in improper policy enforcement. \u003ca href=\"https://github.com/openfga/openfga/security/advisories/GHSA-jwvj-g8pc-cx45\"\u003eCVE-2026-34972\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.13.1] - 2026-03-24\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a security vulnerability (\u003ca href=\"https://github.com/openfga/openfga/security/advisories/GHSA-h6c8-cww8-35hf\"\u003eCVE-2026-33729\u003c/a\u003e) where Check requests with conditions and caching enabled could return incorrect cached results.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.13.0] - 2026-03-23\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd AuthZen 1.0 experimental support. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2875\"\u003e#2875\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent recoverable panics in list objects from terminating the process. Return an error instead. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2994\"\u003e#2994\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.12.1] - 2026-03-19\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe ListObjects \u0026quot;pipeline\u0026quot; algorithm ditches its custom Pipe implementation and replaces it with Go native channels. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2977\"\u003e#2977\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRefactor tuple validation and manipulation functions for optimal performance. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2984\"\u003e#2984\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate grpc-go version to v1.79.3 and grpc-health-probe to v0.4.47. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2988\"\u003e#2988\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eOTEL_EXPORTER_OTLP_ENDPOINT\u003c/code\u003e not accepting URIs with schemes (e.g. \u003ccode\u003ehttp://host:4317\u003c/code\u003e). The scheme is now stripped before passing to the gRPC exporter, and an \u003ccode\u003ehttps://\u003c/code\u003e scheme enables TLS regardless of the \u003ccode\u003etrace.otlp.tls.enabled\u003c/code\u003e flag. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2981\"\u003e#2981\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.12.0] - 2026-03-13\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd AuthZen 1.0 experimental support. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2875\"\u003e#2875\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd configuration for maximum size of received gRPC message bytes. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2952\"\u003e#2952\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP gateway's internal gRPC client now uses dynamic TLS credentials that automatically update on certificate rotation via certwatcher, preventing connection failures when certificates are rotated (e.g., by cert-manager). \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2951\"\u003e#2951\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eTuple validation will now fail when any unicode control characters, or null bytes are present within a tuple string. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2963\"\u003e#2963\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed swapped format arguments in \u003ccode\u003eDecodeParameterType\u003c/code\u003e error message that reported required and found generic type counts in the wrong order. \u003ca href=\"https://redirect.github.com/openfga/openfga/pull/2961\"\u003e#2961\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/40e6b410825813d1d394d7371c5ca31cad17f517\"\u003e\u003ccode\u003e40e6b41\u003c/code\u003e\u003c/a\u003e release: update changelog for release \u003ccode\u003ev1.14.0\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3040\"\u003e#3040\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/6b69a3b6f7aa4f3252f06bf77048bb7c8b9c7f23\"\u003e\u003ccode\u003e6b69a3b\u003c/code\u003e\u003c/a\u003e batch check cache (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3025\"\u003e#3025\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/81373f28921554ab41232af10f762180d461a776\"\u003e\u003ccode\u003e81373f2\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/1de968515cd4e0a98e809f5cc0e274d298824388\"\u003e\u003ccode\u003e1de9685\u003c/code\u003e\u003c/a\u003e feat: add stats on tuple iterator query (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3030\"\u003e#3030\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/68e053f3237d1b3ff2a98d4683eb6b96415aee55\"\u003e\u003ccode\u003e68e053f\u003c/code\u003e\u003c/a\u003e fix: remove unnecessary non-deterministic test (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3038\"\u003e#3038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/8373f2888c272c18d34cf3c096886671f3e73208\"\u003e\u003ccode\u003e8373f28\u003c/code\u003e\u003c/a\u003e remove unnecessary import (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3032\"\u003e#3032\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/342a78306ec83e025ee78ec7d17cdba2063d718a\"\u003e\u003ccode\u003e342a783\u003c/code\u003e\u003c/a\u003e perf: improve the intersection algorithm, reducing latency and memory use (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3\"\u003e#3\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/c75b5f0a4c6e503b1af04c8555f52ee4e037979d\"\u003e\u003ccode\u003ec75b5f0\u003c/code\u003e\u003c/a\u003e fix: ListObjects pipeline algorithm enhancements and fix for potential deadlo...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/1a44a05316e001165b3ea0e22e71a107c785ddc5\"\u003e\u003ccode\u003e1a44a05\u003c/code\u003e\u003c/a\u003e chore: Also update openfga/helm-charts in release script (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/3010\"\u003e#3010\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openfga/openfga/commit/60dd7f563d36413e481cbfbd634e6549cef15588\"\u003e\u003ccode\u003e60dd7f5\u003c/code\u003e\u003c/a\u003e chore: update CICD to enforce GRPC healthprobe changes (\u003ca href=\"https://redirect.github.com/openfga/openfga/issues/2990\"\u003e#2990\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/openfga/openfga/compare/v1.10.0...v1.14.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/russellhaering/goxmldsig` from 1.4.0 to 1.6.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/russellhaering/goxmldsig/releases\"\u003egithub.com/russellhaering/goxmldsig's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.6.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eSecurity:\u003c/strong\u003e Fix possible signature validation bypass caused by loop variable capture in \u003ccode\u003evalidateSignature\u003c/code\u003e (GHSA-479m-364c-43vc)\u003c/li\u003e\n\u003cli\u003eBump minimum Go version to 1.23\u003c/li\u003e\n\u003cli\u003eBump \u003ccode\u003egithub.com/beevik/etree\u003c/code\u003e to v1.6.0\u003c/li\u003e\n\u003cli\u003eAdd fuzz tests for XML signature validation and canonicalization\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/russellhaering/goxmldsig/compare/v1.5.0...v1.6.0\"\u003ehttps://github.com/russellhaering/goxmldsig/compare/v1.5.0...v1.6.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.5.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump dependencies\u003c/li\u003e\n\u003cli\u003eUpdate GitHub workflows\u003c/li\u003e\n\u003cli\u003eSecurity hardening by \u003ca href=\"https://github.com/ahacker1-securesaml\"\u003e\u003ccode\u003e@​ahacker1-securesaml\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/russellhaering/goxmldsig/compare/v1.4.0...v1.5.0\"\u003ehttps://github.com/russellhaering/goxmldsig/compare/v1.4.0...v1.5.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/878c8c615feb628064040115d00e105a137fcfa7\"\u003e\u003ccode\u003e878c8c6\u003c/code\u003e\u003c/a\u003e Apply go fix ./...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/db3d1e31f7535d7f5debb49851b9e9a2ff08b936\"\u003e\u003ccode\u003edb3d1e3\u003c/code\u003e\u003c/a\u003e Fix loop variable capture bug in validateSignature\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/4f576b89acf01f68983ca5cb9dcebd0b460234bc\"\u003e\u003ccode\u003e4f576b8\u003c/code\u003e\u003c/a\u003e Bump dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/79c29ee3ed2da54553a4132b372ced83185fcf12\"\u003e\u003ccode\u003e79c29ee\u003c/code\u003e\u003c/a\u003e Rename FuzzValidate to FuzzValidateXML to avoid name collision\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/ac7bf745b9fd3d92460ad9be3459a97b0e3bf89f\"\u003e\u003ccode\u003eac7bf74\u003c/code\u003e\u003c/a\u003e Add fuzz tests for XML signature validation and canonicalization\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/a5805dfad93fc67a2106a1dc6d881df83769e3eb\"\u003e\u003ccode\u003ea5805df\u003c/code\u003e\u003c/a\u003e Bump github/codeql-action from 2.13.4 to 3.28.17 (\u003ca href=\"https://redirect.github.com/russellhaering/goxmldsig/issues/155\"\u003e#155\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/7dac9ec3b2a1a336d73ff091fba4131d186dfec6\"\u003e\u003ccode\u003e7dac9ec\u003c/code\u003e\u003c/a\u003e Update GitHub Workflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/1bf54ca740682fac1149814344c24c722fde8238\"\u003e\u003ccode\u003e1bf54ca\u003c/code\u003e\u003c/a\u003e Bump dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/e1c8a5b89d1d03089aa1a0ec546b33aaf80ee02f\"\u003e\u003ccode\u003ee1c8a5b\u003c/code\u003e\u003c/a\u003e Refactor to help eliminate potential vulnerabilities:\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/russellhaering/goxmldsig/commit/2ac5490a2441a3484e030c5cfeb02ce62886c01a\"\u003e\u003ccode\u003e2ac5490\u003c/code\u003e\u003c/a\u003e Refactor .verifyCertificate to obtain the certificate from an identifier from...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/russellhaering/goxmldsig/compare/v1.4.0...v1.6.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/sdk` from 1.38.0 to 1.42.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/sdk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.43.0/0.65.0/0.19.0] 2026-04-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eIsRandom\u003c/code\u003e and \u003ccode\u003eWithRandom\u003c/code\u003e on \u003ccode\u003eTraceFlags\u003c/code\u003e, and \u003ccode\u003eIsRandom\u003c/code\u003e on \u003ccode\u003eSpanContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e for \u003ca href=\"https://www.w3.org/TR/trace-context-2/#random-trace-id-flag\"\u003eW3C Trace Context Level 2 Random Trace ID Flag\u003c/a\u003e support. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012\"\u003e#8012\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd service detection with \u003ccode\u003eWithService\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642\"\u003e#7642\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eDefaultWithContext\u003c/code\u003e and \u003ccode\u003eEnvironmentWithContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to support plumbing \u003ccode\u003econtext.Context\u003c/code\u003e through default and environment detectors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051\"\u003e#8051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd support for per-series start time tracking for cumulative metrics in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true\u003c/code\u003e to enable. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060\"\u003e#8060\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithCardinalityLimitSelector\u003c/code\u003e for metric reader for configuring cardinality limits specific to the instrument kind. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855\"\u003e#7855\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce the \u003ccode\u003eEMPTY\u003c/code\u003e Type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to reflect that an empty value is now a valid value, with \u003ccode\u003eINVALID\u003c/code\u003e remaining as a deprecated alias of \u003ccode\u003eEMPTY\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove slice handling in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to optimize short slice values with fixed-size fast paths. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039\"\u003e#8039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of span metric recording in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e by returning early if self-observability is not enabled. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067\"\u003e#8067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove formatting of metric data diffs in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073\"\u003e#8073\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeprecated\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eINVALID\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. Use \u003ccode\u003eEMPTY\u003c/code\u003e instead. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReturn spec-compliant \u003ccode\u003eTraceIdRatioBased\u003c/code\u003e description. This is a breaking behavioral change, but it is necessary to\nmake the implementation \u003ca href=\"https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased\"\u003espec-compliant\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027\"\u003e#8027\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a race condition in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056\"\u003e#8056\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003ekenv\u003c/code\u003e command on BSD. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to correctly handle HTTP2 GOAWAY frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.40.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985\"\u003e#7985\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9276201a64b623606e3eaa0d61ae8ee6d62756c0\"\u003e\u003ccode\u003e9276201\u003c/code\u003e\u003c/a\u003e Release v1.43.0 / v0.65.0 / v0.19.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8128\"\u003e#8128\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/61b8c9466c4e6b17e69b622279fe9b63fb15c89a\"\u003e\u003ccode\u003e61b8c94\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8131\"\u003e#8131\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/97a086e82ffe01502f4c620e9c447efa229e2a23\"\u003e\u003ccode\u003e97a086e\u003c/code\u003e\u003c/a\u003e chore(deps): update github.com/golangci/dupl digest to c99c5cf (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8122\"\u003e#8122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/5e363de517dba6db62736b2f5cdef0e0929b4cd0\"\u003e\u003ccode\u003e5e363de\u003c/code\u003e\u003c/a\u003e limit response body size for OTLP HTTP exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/35214b60138eac8dec97a2d2b851d8c8471680c7\"\u003e\u003ccode\u003e35214b6\u003c/code\u003e\u003c/a\u003e Use an absolute path when calling bsd kenv (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/290024ceaf695f9cdbf29a0c6731a317d92bc361\"\u003e\u003ccode\u003e290024c\u003c/code\u003e\u003c/a\u003e fix(deps): update module google.golang.org/grpc to v1.80.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8121\"\u003e#8121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/e70658e098033d6bb5ec1b399de16bbb2642f6dc\"\u003e\u003ccode\u003ee70658e\u003c/code\u003e\u003c/a\u003e fix: support getBody in otelploghttp (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4afe468e3b4859c949a1c1e8d92684d43d86ef8a\"\u003e\u003ccode\u003e4afe468\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 9d38bb4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8117\"\u003e#8117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b9ca729776309e3c08fe700c131797a3b4d10634\"\u003e\u003ccode\u003eb9ca729\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8115\"\u003e#8115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/69472ec56cb7674d55ca2e2bcb04dea73228ab79\"\u003e\u003ccode\u003e69472ec\u003c/code\u003e\u003c/a\u003e chore(deps): update fossas/fossa-action action to v1.9.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8118\"\u003e#8118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.38.0...v1.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google.golang.org/grpc` from 1.75.1 to 1.79.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc-go/releases\"\u003egoogle.golang.org/grpc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 1.79.3\u003c/h2\u003e\n\u003ch1\u003eSecurity\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eserver: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted \u0026quot;deny\u0026quot; rules in interceptors like \u003ccode\u003egrpc/authz\u003c/code\u003e. Any request with a non-canonical path is now immediately rejected with an \u003ccode\u003eUnimplemented\u003c/code\u003e error. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.2\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003estats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8874\"\u003egrpc/grpc-go#8874\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.1\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003egrpc: Remove the \u003ccode\u003e-dev\u003c/code\u003e suffix from the User-Agent header. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8902\"\u003egrpc/grpc-go#8902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.0\u003c/h2\u003e\n\u003ch1\u003eAPI Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003emem: Add experimental API \u003ccode\u003eSetDefaultBufferPool\u003c/code\u003e to change the default buffer pool. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8806\"\u003e#8806\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/vanja-p\"\u003e\u003ccode\u003e@​vanja-p\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eexperimental/stats: Update \u003ccode\u003eMetricsRecorder\u003c/code\u003e to require embedding the new \u003ccode\u003eUnimplementedMetricsRecorder\u003c/code\u003e (a no-op struct) in all implementations for forward compatibility. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBehavior Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ebalancer/weightedtarget: Remove handling of \u003ccode\u003eAddresses\u003c/code\u003e and only handle \u003ccode\u003eEndpoints\u003c/code\u003e in resolver updates. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8841\"\u003e#8841\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eNew Features\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eexperimental/stats: Add support for asynchronous gauge metrics through the new \u003ccode\u003eAsyncMetricReporter\u003c/code\u003e and \u003ccode\u003eRegisterAsyncReporter\u003c/code\u003e APIs. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epickfirst: Add support for weighted random shuffling of endpoints, as described in \u003ca href=\"https://redirect.github.com/grpc/proposal/pull/535\"\u003egRFC A113\u003c/a\u003e.\n\u003cul\u003e\n\u003cli\u003eThis is enabled by default, and can be turned off using the environment variable \u003ccode\u003eGRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds: Implement \u003ccode\u003e:authority\u003c/code\u003e rewriting, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A81-xds-authority-rewriting.md\"\u003egRFC A81\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8779\"\u003e#8779\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebalancer/randomsubsetting: Implement the \u003ccode\u003erandom_subsetting\u003c/code\u003e LB policy, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A68-random-subsetting.md\"\u003egRFC A68\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8650\"\u003e#8650\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/marek-szews\"\u003e\u003ccode\u003e@​marek-szews\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/tls: Fix a bug where the port was not stripped from the authority override before validation. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8726\"\u003e#8726\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/Atul1710\"\u003e\u003ccode\u003e@​Atul1710\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds/priority: Fix a bug causing delayed failover to lower-priority clusters when a higher-priority cluster is stuck in \u003ccode\u003eCONNECTING\u003c/code\u003e state. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8813\"\u003e#8813\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ehealth: Fix a bug where health checks failed for clients using legacy compression options (\u003ccode\u003eWithDecompressor\u003c/code\u003e or \u003ccode\u003eRPCDecompressor\u003c/code\u003e). (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8765\"\u003e#8765\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/sanki92\"\u003e\u003ccode\u003e@​sanki92\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003etransport: Fix an issue where the HTTP/2 server could skip header size checks when terminating a stream early. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8769\"\u003e#8769\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eserver: Propagate status detail headers, if available, when terminating a stream during request header processing. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8754\"\u003e#8754\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ePerformance Improvements\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/alts: Optimize read buffer alignment to reduce copies. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8791\"\u003e#8791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emem: Optimize pooling and creation of \u003ccode\u003ebuffer\u003c/code\u003e objects.  (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8784\"\u003e#8784\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etransport: Reduce slice re-allocations by reserving slice capacity. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8797\"\u003e#8797\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/dda86dbd9cecb8b35b58c73d507d81d67761205f\"\u003e\u003ccode\u003edda86db\u003c/code\u003e\u003c/a\u003e Change version to 1.79.3 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8983\"\u003e#8983\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/72186f163e75a065c39e6f7df9b6dea07fbdeff5\"\u003e\u003ccode\u003e72186f1\u003c/code\u003e\u003c/a\u003e grpc: enforce strict path checking for incoming requests on the server (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/97ca3522b239edf6813e2b1106924e9d55e89d43\"\u003e\u003ccode\u003e97ca352\u003c/code\u003e\u003c/a\u003e Changing version to 1.79.3-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8954\"\u003e#8954\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/8902ab6efea590f5b3861126559eaa26fa9783b2\"\u003e\u003ccode\u003e8902ab6\u003c/code\u003e\u003c/a\u003e Change the version to release 1.79.2 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8947\"\u003e#8947\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/a9286705aa689bee321ec674323b6896284f3e02\"\u003e\u003ccode\u003ea928670\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8874\"\u003e#8874\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8904\"\u003e#8904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/06df3638c0bcee88197b1033b3ba83e1eb8bc010\"\u003e\u003ccode\u003e06df363\u003c/code\u003e\u003c/a\u003e Change version to 1.79.2-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8903\"\u003e#8903\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/782f2de44f597af18a120527e7682a6670d84289\"\u003e\u003ccode\u003e782f2de\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8902\"\u003e#8902\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/850eccbb2257bd2de6ac28ee88a7172ab6175629\"\u003e\u003ccode\u003e850eccb\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8851\"\u003e#8851\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/765ff056b6890f6c8341894df4e9668e9bfc18ef\"\u003e\u003ccode\u003e765ff05\u003c/code\u003e\u003c/a\u003e Change version to 1.79.0 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8850\"\u003e#8850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/68804be0e78ed0365bb5a576dedc12e2168ed63e\"\u003e\u003ccode\u003e68804be\u003c/code\u003e\u003c/a\u003e Cherry pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8896\"\u003e#8896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/grpc/grpc-go/compare/v1.75.1...v1.79.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream` from 1.6.11 to 1.7.8\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/e3b97d2a02cd4e27c40224f05aa1a7deba24abe2\"\u003e\u003ccode\u003ee3b97d2\u003c/code\u003e\u003c/a\u003e Release 2023-10-12\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/863010ddb23c242c2a5d49d9f40094a6a49b5525\"\u003e\u003ccode\u003e863010d\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/6946ef8b9149fe75ac1b427ca2c7f57cdcb64549\"\u003e\u003ccode\u003e6946ef8\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/6d93ded4536184d38a664b4b75dadd36cbd79878\"\u003e\u003ccode\u003e6d93ded\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/bebc232e7f65b02d0b519d11e73cf925c38e716f\"\u003e\u003ccode\u003ebebc232\u003c/code\u003e\u003c/a\u003e fix: fail to load config if configured profile doesn't exist (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/2309\"\u003e#2309\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/5de46742b7fb1b72d93d344ee81568800a707267\"\u003e\u003ccode\u003e5de4674\u003c/code\u003e\u003c/a\u003e fix DNS timeout error not retried (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/2300\"\u003e#2300\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/e155bb72a2ec20ec61db50fc3d4568e373fa4b63\"\u003e\u003ccode\u003ee155bb7\u003c/code\u003e\u003c/a\u003e Release 2023-10-06\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/9d342ba33937c562d215f317a37dea121ee9763d\"\u003e\u003ccode\u003e9d342ba\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/1df99141a143a38570d64a182ed972ce9e3dba65\"\u003e\u003ccode\u003e1df9914\u003c/code\u003e\u003c/a\u003e Update SDK's smithy-go dependency to v1.15.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/32ada3a191ac770b1b24164b667692183fc77ed9\"\u003e\u003ccode\u003e32ada3a\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/service/rum/v1.6.11...service/m2/v1.7.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/buger/jsonparser` from 1.1.1 to 1.1.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/buger/jsonparser/releases\"\u003egithub.com/buger/jsonparser's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated travis to build for 1.13 to 1.15 by \u003ca href=\"https://github.com/janreggie\"\u003e\u003ccode\u003e@​janreggie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/225\"\u003ebuger/jsonparser#225\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\n\u003cul\u003e\n\u003cli\u003eeliminate 2 allocations in EachKey() by \u003ca href=\"https://github.com/Villenny\"\u003e\u003ccode\u003e@​Villenny\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/223\"\u003ebuger/jsonparser#223\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003efix issue \u003ca href=\"https://redirect.github.com/buger/jsonparser/issues/150\"\u003e#150\u003c/a\u003e (in deleting case) by \u003ca href=\"https://github.com/daria-kay\"\u003e\u003ccode\u003e@​daria-kay\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/226\"\u003ebuger/jsonparser#226\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efixing the oss-fuzz issue by \u003ca href=\"https://github.com/daria-kay\"\u003e\u003ccode\u003e@​daria-kay\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/227\"\u003ebuger/jsonparser#227\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix parseInt overflow check false negative by \u003ca href=\"https://github.com/carsonip\"\u003e\u003ccode\u003e@​carsonip\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/231\"\u003ebuger/jsonparser#231\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdded bespoke error for null cases by \u003ca href=\"https://github.com/jonomacd\"\u003e\u003ccode\u003e@​jonomacd\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/228\"\u003ebuger/jsonparser#228\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFuzzing: Add CIFuzz by \u003ca href=\"https://github.com/AdamKorcz\"\u003e\u003ccode\u003e@​AdamKorcz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/239\"\u003ebuger/jsonparser#239\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdded latest versions of go to tests by \u003ca href=\"https://github.com/moredure\"\u003e\u003ccode\u003e@​moredure\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/244\"\u003ebuger/jsonparser#244\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix EachKey pIdxFlags allocation by \u003ca href=\"https://github.com/unxcepted\"\u003e\u003ccode\u003e@​unxcepted\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/241\"\u003ebuger/jsonparser#241\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: prevent panic on negative slice index in Delete with malformed JSON (GO-2026-4514) by \u003ca href=\"https://github.com/dbarrosop\"\u003e\u003ccode\u003e@​dbarrosop\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/276\"\u003ebuger/jsonparser#276\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/janreggie\"\u003e\u003ccode\u003e@​janreggie\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/225\"\u003ebuger/jsonparser#225\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Villenny\"\u003e\u003ccode\u003e@​Villenny\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/223\"\u003ebuger/jsonparser#223\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/daria-kay\"\u003e\u003ccode\u003e@​daria-kay\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/226\"\u003ebuger/jsonparser#226\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/carsonip\"\u003e\u003ccode\u003e@​carsonip\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/231\"\u003ebuger/jsonparser#231\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jonomacd\"\u003e\u003ccode\u003e@​jonomacd\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/228\"\u003ebuger/jsonparser#228\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moredure\"\u003e\u003ccode\u003e@​moredure\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/244\"\u003ebuger/jsonparser#244\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/unxcepted\"\u003e\u003ccode\u003e@​unxcepted\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/241\"\u003ebuger/jsonparser#241\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dbarrosop\"\u003e\u003ccode\u003e@​dbarrosop\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/buger/jsonparser/pull/276\"\u003ebuger/jsonparser#276\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/buger/jsonparser/compare/v1.1.1...v1.1.2\"\u003ehttps://github.com/buger/jsonparser/compare/v1.1.1...v1.1.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/a69e7e01cd4ad67bdfd3ac2c080b9212af16f4b0\"\u003e\u003ccode\u003ea69e7e0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/buger/jsonparser/issues/276\"\u003e#276\u003c/a\u003e from dbarrosop/master\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/d3eacc0bab779d6cf98221f5268828fff287876e\"\u003e\u003ccode\u003ed3eacc0\u003c/code\u003e\u003c/a\u003e fix: prevent panic on negative slice index in Delete with malformed JSON (GO-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/61b32cfdfa0f5d368ef7c7daef28ce12d538740f\"\u003e\u003ccode\u003e61b32cf\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/buger/jsonparser/issues/241\"\u003e#241\u003c/a\u003e from unxcepted/master\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/2181e8398f18397c9cacbaea9889314bb585e868\"\u003e\u003ccode\u003e2181e83\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/buger/jsonparser/issues/244\"\u003e#244\u003c/a\u003e from ScaleChamp/patch-2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/1510b5194182fc2fb898f28cdbceb42fd7258bfa\"\u003e\u003ccode\u003e1510b51\u003c/code\u003e\u003c/a\u003e Added latest versions of go to tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/6fc2e488ed3cc4f1f1debec3b0c70715bd7be6fd\"\u003e\u003ccode\u003e6fc2e48\u003c/code\u003e\u003c/a\u003e fix: eachkey allocation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/a6f867eb7787e4ec54536b77b5d628ddf5c4f73d\"\u003e\u003ccode\u003ea6f867e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/buger/jsonparser/issues/239\"\u003e#239\u003c/a\u003e from AdamKorcz/cifuzz1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/cbc01fdbbe131706e89eeaaf0cd917760d8d3949\"\u003e\u003ccode\u003ecbc01fd\u003c/code\u003e\u003c/a\u003e Fuzzing: Add CIFuzz\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/dc92d6932a1272b4d8f485f798a88c3a75106256\"\u003e\u003ccode\u003edc92d69\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/buger/jsonparser/issues/228\"\u003e#228\u003c/a\u003e from jonomacd/null-handling\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/buger/jsonparser/commit/2d9d6343e8621ddc18c70749663f74bc584c0de4\"\u003e\u003ccode\u003e2d9d634\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/buger/jsonparser/issues/231\"\u003e#231\u003c/a\u003e from carsonip/fix-parseint-overflow-check\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/buger/jsonparser/compare/v1.1.1...v1.1.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/cloudflare/circl` from 1.6.1 to 1.6.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cloudflare/circl/releases\"\u003egithub.com/cloudflare/circl's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eCIRCL v1.6.3\u003c/h2\u003e\n\u003cp\u003eFix a bug on ecc/p384 scalar multiplication.\u003c/p\u003e\n\u003ch3\u003eWhat's Changed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esign/mldsa: Check opts for nil value  by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/582\"\u003ecloudflare/circl#582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eecc/p384: Point addition must handle point doubling case. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/583\"\u003ecloudflare/circl#583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease CIRCL v1.6.3 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/584\"\u003ecloudflare/circl#584\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNew SLH-DSA, improvements in ML-DSA for arm64.\u003c/li\u003e\n\u003cli\u003eTested compilation on WASM.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize pairing product computation by moving exponentiations to G1. by \u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esign: Adding SLH-DSA signature by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/512\"\u003ecloudflare/circl#512\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate code generators to CIRCL v1.6.1. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/548\"\u003ecloudflare/circl#548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eML-DSA: Add preliminary Wycheproof test vectors by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/552\"\u003ecloudflare/circl#552\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ego fmt by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/554\"\u003ecloudflare/circl#554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egz-compressing test vectors, use of HexBytes and ReadGzip functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/555\"\u003ecloudflare/circl#555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Removes use of elliptic Marshal and Unmarshal functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/556\"\u003ecloudflare/circl#556\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport encoding/decoding ML-DSA private keys (as long as they contain seeds) by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/559\"\u003ecloudflare/circl#559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to golangci-lint v2 by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/560\"\u003ecloudflare/circl#560\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreparation for ARM64 Implementation of poly operations for dilithium package. by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eprepare power2Round for custom implementations in assembly by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/564\"\u003ecloudflare/circl#564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eARM64 implementation for poly.PackLe16 by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/563\"\u003ecloudflare/circl#563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polyMulBy2toD by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/565\"\u003ecloudflare/circl#565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polySub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/566\"\u003ecloudflare/circl#566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: add byteLen method for short groups and RandomScalar uses rand.Int by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/568\"\u003ecloudflare/circl#568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of poly.Add/Sub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/572\"\u003ecloudflare/circl#572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Adding cryptobyte marshaling to scalars by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/569\"\u003ecloudflare/circl#569\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumping up to Go1.25 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/574\"\u003ecloudflare/circl#574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: Including WASM compilation. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/577\"\u003ecloudflare/circl#577\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to using package-declared HPKE errors for shortkem instead of standard library errors by \u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease v1.6.2 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/579\"\u003ecloudflare/circl#579\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/24ae53c5d6f7fe18203adc125ba3ed76a38703e1\"\u003e\u003ccode\u003e24ae53c\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/581020bd4a836b8ce7bd4e414ba2884c07dbc906\"\u003e\u003ccode\u003e581020b\u003c/code\u003e\u003c/a\u003e Rename method to oddMultiplesProjective.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/12209a4566605692a8402594e367a5aed5148460\"\u003e\u003ccode\u003e12209a4\u003c/code\u003e\u003c/a\u003e Removing unused cmov for jacobian points.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/fcba359f4178645d2c9e50f29ab6966337da4b95\"\u003e\u003ccode\u003efcba359\u003c/code\u003e\u003c/a\u003e ecc/p384: use of complete projective formulas for scalar multiplication.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/5e1bae8d8c2df4e717c2c5c2d5b5d60b629b2ac6\"\u003e\u003ccode\u003e5e1bae8\u003c/code\u003e\u003c/a\u003e ecc/p384: handle point doubling in point addition with Jacobian coordinates.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/341604685ff97e8f7440ae4b4711ba1c118c648c\"\u003e\u003ccode\u003e3416046\u003c/code\u003e\u003c/a\u003e Check opts for nil value.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/a763d47a6dce43d1f4f7b697d1d7810463a526f6\"\u003e\u003ccode\u003ea763d47\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3c70bf9ad53b681fbe5ba6067e454a86549fee8a\"\u003e\u003ccode\u003e3c70bf9\u003c/code\u003e\u003c/a\u003e Bump x/crypto x/sys dependencies.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3f0f15b2bfe67bad81a35e8aec81ae42ca78349d\"\u003e\u003ccode\u003e3f0f15b\u003c/code\u003e\u003c/a\u003e Revert to using package-declared HPKE errors for shortkem instead of standard...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/23491bd573cf29b6f567057a158203a2c9dfa30d\"\u003e\u003ccode\u003e23491bd\u003c/code\u003e\u003c/a\u003e Adding generic Power2Round method.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/docker/docker` from 28.4.0+incompatible to 28.5.2+incompatible\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/docker/docker/releases\"\u003egithub.com/docker/docker's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev28.5.2\u003c/h2\u003e\n\u003ch2\u003e28.5.2\u003c/h2\u003e\n\u003cp\u003eFor a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.5.2\"\u003edocker/cli, 28.5.2 milestone\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.5.2\"\u003emoby/moby, 28.5.2 milestone\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!CAUTION]\nThis release contains fixes for three high-severity security vulnerabilities in runc:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/opencontainers/runc/security/advisories/GHSA-9493-h29p-rfm2\"\u003eCVE-2025-31133\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/opencontainers/runc/security/advisories/GHSA-qw9x-cqr3-wc7r\"\u003eCVE-2025-52565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/opencontainers/runc/security...\n\n_Description has been truncated_","html_url":"https://github.com/joe10832/grafana/pull/37","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/joe10832%2Fgrafana/issues/37","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/37/packages"}},{"old_version":"1.6.1","new_version":"1.6.3","update_type":"patch","path":null,"pr_created_at":"2026-04-08T20:25:42.000Z","version_change":"1.6.1 → 1.6.3","issue":{"uuid":"4227417562","node_id":"PR_kwDOOuwU1c7Q7U0x","number":7,"state":"closed","title":"build(deps): bump the go_modules group across 3 directories with 5 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-04-17T22:39:12.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-08T20:25:42.000Z","updated_at":"2026-04-17T22:39:14.000Z","time_to_close":785610,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): bump","group_name":"go_modules","update_count":5,"packages":[{"name":"google.golang.org/grpc","old_version":"1.72.1","new_version":"1.79.3","repository_url":"https://github.com/grpc/grpc-go"},{"name":"github.com/cloudflare/circl","old_version":"1.6.1","new_version":"1.6.3","repository_url":"https://github.com/cloudflare/circl"},{"name":"github.com/go-git/go-git/v5","old_version":"5.16.0","new_version":"5.17.1","repository_url":"https://github.com/go-git/go-git"},{"name":"github.com/go-viper/mapstructure/v2","old_version":"2.2.1","new_version":"2.4.0","repository_url":"https://github.com/go-viper/mapstructure"},{"name":"golang.org/x/crypto","old_version":"0.38.0","new_version":"0.45.0"},{"name":"google.golang.org/grpc","old_version":"1.72.1","new_version":"1.79.3","repository_url":"https://github.com/grpc/grpc-go"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 1 update in the /bridge/opentracing/test directory: [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 3 updates in the /internal/tools directory: [github.com/cloudflare/circl](https://github.com/cloudflare/circl), [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) and [github.com/go-viper/mapstructure/v2](https://github.com/go-viper/mapstructure).\nBumps the go_modules group with 1 update in the /trace/internal/telemetry/test directory: [google.golang.org/grpc](https://github.com/grpc/grpc-go).\n\nUpdates `google.golang.org/grpc` from 1.72.1 to 1.79.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc-go/releases\"\u003egoogle.golang.org/grpc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 1.79.3\u003c/h2\u003e\n\u003ch1\u003eSecurity\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eserver: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted \u0026quot;deny\u0026quot; rules in interceptors like \u003ccode\u003egrpc/authz\u003c/code\u003e. Any request with a non-canonical path is now immediately rejected with an \u003ccode\u003eUnimplemented\u003c/code\u003e error. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.2\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003estats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8874\"\u003egrpc/grpc-go#8874\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.1\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003egrpc: Remove the \u003ccode\u003e-dev\u003c/code\u003e suffix from the User-Agent header. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8902\"\u003egrpc/grpc-go#8902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.0\u003c/h2\u003e\n\u003ch1\u003eAPI Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003emem: Add experimental API \u003ccode\u003eSetDefaultBufferPool\u003c/code\u003e to change the default buffer pool. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8806\"\u003e#8806\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/vanja-p\"\u003e\u003ccode\u003e@​vanja-p\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eexperimental/stats: Update \u003ccode\u003eMetricsRecorder\u003c/code\u003e to require embedding the new \u003ccode\u003eUnimplementedMetricsRecorder\u003c/code\u003e (a no-op struct) in all implementations for forward compatibility. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBehavior Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ebalancer/weightedtarget: Remove handling of \u003ccode\u003eAddresses\u003c/code\u003e and only handle \u003ccode\u003eEndpoints\u003c/code\u003e in resolver updates. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8841\"\u003e#8841\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eNew Features\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eexperimental/stats: Add support for asynchronous gauge metrics through the new \u003ccode\u003eAsyncMetricReporter\u003c/code\u003e and \u003ccode\u003eRegisterAsyncReporter\u003c/code\u003e APIs. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epickfirst: Add support for weighted random shuffling of endpoints, as described in \u003ca href=\"https://redirect.github.com/grpc/proposal/pull/535\"\u003egRFC A113\u003c/a\u003e.\n\u003cul\u003e\n\u003cli\u003eThis is enabled by default, and can be turned off using the environment variable \u003ccode\u003eGRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds: Implement \u003ccode\u003e:authority\u003c/code\u003e rewriting, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A81-xds-authority-rewriting.md\"\u003egRFC A81\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8779\"\u003e#8779\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebalancer/randomsubsetting: Implement the \u003ccode\u003erandom_subsetting\u003c/code\u003e LB policy, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A68-random-subsetting.md\"\u003egRFC A68\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8650\"\u003e#8650\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/marek-szews\"\u003e\u003ccode\u003e@​marek-szews\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/tls: Fix a bug where the port was not stripped from the authority override before validation. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8726\"\u003e#8726\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/Atul1710\"\u003e\u003ccode\u003e@​Atul1710\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds/priority: Fix a bug causing delayed failover to lower-priority clusters when a higher-priority cluster is stuck in \u003ccode\u003eCONNECTING\u003c/code\u003e state. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8813\"\u003e#8813\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ehealth: Fix a bug where health checks failed for clients using legacy compression options (\u003ccode\u003eWithDecompressor\u003c/code\u003e or \u003ccode\u003eRPCDecompressor\u003c/code\u003e). (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8765\"\u003e#8765\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/sanki92\"\u003e\u003ccode\u003e@​sanki92\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003etransport: Fix an issue where the HTTP/2 server could skip header size checks when terminating a stream early. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8769\"\u003e#8769\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eserver: Propagate status detail headers, if available, when terminating a stream during request header processing. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8754\"\u003e#8754\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ePerformance Improvements\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/alts: Optimize read buffer alignment to reduce copies. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8791\"\u003e#8791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emem: Optimize pooling and creation of \u003ccode\u003ebuffer\u003c/code\u003e objects.  (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8784\"\u003e#8784\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etransport: Reduce slice re-allocations by reserving slice capacity. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8797\"\u003e#8797\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/dda86dbd9cecb8b35b58c73d507d81d67761205f\"\u003e\u003ccode\u003edda86db\u003c/code\u003e\u003c/a\u003e Change version to 1.79.3 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8983\"\u003e#8983\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/72186f163e75a065c39e6f7df9b6dea07fbdeff5\"\u003e\u003ccode\u003e72186f1\u003c/code\u003e\u003c/a\u003e grpc: enforce strict path checking for incoming requests on the server (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/97ca3522b239edf6813e2b1106924e9d55e89d43\"\u003e\u003ccode\u003e97ca352\u003c/code\u003e\u003c/a\u003e Changing version to 1.79.3-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8954\"\u003e#8954\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/8902ab6efea590f5b3861126559eaa26fa9783b2\"\u003e\u003ccode\u003e8902ab6\u003c/code\u003e\u003c/a\u003e Change the version to release 1.79.2 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8947\"\u003e#8947\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/a9286705aa689bee321ec674323b6896284f3e02\"\u003e\u003ccode\u003ea928670\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8874\"\u003e#8874\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8904\"\u003e#8904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/06df3638c0bcee88197b1033b3ba83e1eb8bc010\"\u003e\u003ccode\u003e06df363\u003c/code\u003e\u003c/a\u003e Change version to 1.79.2-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8903\"\u003e#8903\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/782f2de44f597af18a120527e7682a6670d84289\"\u003e\u003ccode\u003e782f2de\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8902\"\u003e#8902\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/850eccbb2257bd2de6ac28ee88a7172ab6175629\"\u003e\u003ccode\u003e850eccb\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8851\"\u003e#8851\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/765ff056b6890f6c8341894df4e9668e9bfc18ef\"\u003e\u003ccode\u003e765ff05\u003c/code\u003e\u003c/a\u003e Change version to 1.79.0 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8850\"\u003e#8850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/68804be0e78ed0365bb5a576dedc12e2168ed63e\"\u003e\u003ccode\u003e68804be\u003c/code\u003e\u003c/a\u003e Cherry pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8896\"\u003e#8896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/grpc/grpc-go/compare/v1.72.1...v1.79.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/cloudflare/circl` from 1.6.1 to 1.6.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cloudflare/circl/releases\"\u003egithub.com/cloudflare/circl's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eCIRCL v1.6.3\u003c/h2\u003e\n\u003cp\u003eFix a bug on ecc/p384 scalar multiplication.\u003c/p\u003e\n\u003ch3\u003eWhat's Changed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esign/mldsa: Check opts for nil value  by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/582\"\u003ecloudflare/circl#582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eecc/p384: Point addition must handle point doubling case. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/583\"\u003ecloudflare/circl#583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease CIRCL v1.6.3 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/584\"\u003ecloudflare/circl#584\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNew SLH-DSA, improvements in ML-DSA for arm64.\u003c/li\u003e\n\u003cli\u003eTested compilation on WASM.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize pairing product computation by moving exponentiations to G1. by \u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esign: Adding SLH-DSA signature by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/512\"\u003ecloudflare/circl#512\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate code generators to CIRCL v1.6.1. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/548\"\u003ecloudflare/circl#548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eML-DSA: Add preliminary Wycheproof test vectors by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/552\"\u003ecloudflare/circl#552\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ego fmt by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/554\"\u003ecloudflare/circl#554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egz-compressing test vectors, use of HexBytes and ReadGzip functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/555\"\u003ecloudflare/circl#555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Removes use of elliptic Marshal and Unmarshal functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/556\"\u003ecloudflare/circl#556\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport encoding/decoding ML-DSA private keys (as long as they contain seeds) by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/559\"\u003ecloudflare/circl#559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to golangci-lint v2 by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/560\"\u003ecloudflare/circl#560\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreparation for ARM64 Implementation of poly operations for dilithium package. by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eprepare power2Round for custom implementations in assembly by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/564\"\u003ecloudflare/circl#564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eARM64 implementation for poly.PackLe16 by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/563\"\u003ecloudflare/circl#563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polyMulBy2toD by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/565\"\u003ecloudflare/circl#565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polySub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/566\"\u003ecloudflare/circl#566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: add byteLen method for short groups and RandomScalar uses rand.Int by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/568\"\u003ecloudflare/circl#568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of poly.Add/Sub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/572\"\u003ecloudflare/circl#572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Adding cryptobyte marshaling to scalars by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/569\"\u003ecloudflare/circl#569\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumping up to Go1.25 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/574\"\u003ecloudflare/circl#574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: Including WASM compilation. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/577\"\u003ecloudflare/circl#577\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to using package-declared HPKE errors for shortkem instead of standard library errors by \u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease v1.6.2 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/579\"\u003ecloudflare/circl#579\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/24ae53c5d6f7fe18203adc125ba3ed76a38703e1\"\u003e\u003ccode\u003e24ae53c\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/581020bd4a836b8ce7bd4e414ba2884c07dbc906\"\u003e\u003ccode\u003e581020b\u003c/code\u003e\u003c/a\u003e Rename method to oddMultiplesProjective.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/12209a4566605692a8402594e367a5aed5148460\"\u003e\u003ccode\u003e12209a4\u003c/code\u003e\u003c/a\u003e Removing unused cmov for jacobian points.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/fcba359f4178645d2c9e50f29ab6966337da4b95\"\u003e\u003ccode\u003efcba359\u003c/code\u003e\u003c/a\u003e ecc/p384: use of complete projective formulas for scalar multiplication.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/5e1bae8d8c2df4e717c2c5c2d5b5d60b629b2ac6\"\u003e\u003ccode\u003e5e1bae8\u003c/code\u003e\u003c/a\u003e ecc/p384: handle point doubling in point addition with Jacobian coordinates.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/341604685ff97e8f7440ae4b4711ba1c118c648c\"\u003e\u003ccode\u003e3416046\u003c/code\u003e\u003c/a\u003e Check opts for nil value.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/a763d47a6dce43d1f4f7b697d1d7810463a526f6\"\u003e\u003ccode\u003ea763d47\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3c70bf9ad53b681fbe5ba6067e454a86549fee8a\"\u003e\u003ccode\u003e3c70bf9\u003c/code\u003e\u003c/a\u003e Bump x/crypto x/sys dependencies.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3f0f15b2bfe67bad81a35e8aec81ae42ca78349d\"\u003e\u003ccode\u003e3f0f15b\u003c/code\u003e\u003c/a\u003e Revert to using package-declared HPKE errors for shortkem instead of standard...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/23491bd573cf29b6f567057a158203a2c9dfa30d\"\u003e\u003ccode\u003e23491bd\u003c/code\u003e\u003c/a\u003e Adding generic Power2Round method.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-git/v5` from 5.16.0 to 5.17.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-git/releases\"\u003egithub.com/go-git/go-git/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.17.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/cloudflare/circl to v1.6.3 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1930\"\u003ego-git/go-git#1930\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/index, Improve v4 entry name validation by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1935\"\u003ego-git/go-git#1935\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/idxfile, Fix version and fanout checks by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1937\"\u003ego-git/go-git#1937\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.16.5 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1839\"\u003ego-git/go-git#1839\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: worktree, optimize infiles function for very large repos by \u003ca href=\"https://github.com/k-anshul\"\u003e\u003ccode\u003e@​k-anshul\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1853\"\u003ego-git/go-git#1853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: Add strict checks for supported extensions by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1861\"\u003ego-git/go-git#1861\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebackport, git: Improve Status() speed with new index.ModTime check by \u003ca href=\"https://github.com/cedric-appdirect\"\u003e\u003ccode\u003e@​cedric-appdirect\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1862\"\u003ego-git/go-git#1862\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003estorage: filesystem, Avoid overwriting loose obj files by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1864\"\u003ego-git/go-git#1864\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.16.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module golang.org/x/crypto to v0.45.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1744\"\u003ego-git/go-git#1744\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Bump Go test versions to 1.23-1.25 (v5) by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1746\"\u003ego-git/go-git#1746\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] git: worktree, Don't delete local untracked files when resetting worktree by \u003ca href=\"https://github.com/Ch00k\"\u003e\u003ccode\u003e@​Ch00k\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1800\"\u003ego-git/go-git#1800\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExpand packfile checks by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1836\"\u003ego-git/go-git#1836\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.4...v5.16.5\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.4...v5.16.5\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.16.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebackport plumbing: format/idxfile, prevent panic by \u003ca href=\"https://github.com/swills\"\u003e\u003ccode\u003e@​swills\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1732\"\u003ego-git/go-git#1732\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[backport] build: test, Fix build on Windows. by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1734\"\u003ego-git/go-git#1734\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Update module golang.org/x/net to v0.38.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1742\"\u003ego-git/go-git#1742\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Update module github.com/cloudflare/circl to v1.6.1 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1741\"\u003ego-git/go-git#1741\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.13.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1743\"\u003ego-git/go-git#1743\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.3...v5.16.4\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.3...v5.16.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.16.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003einternal: Expand regex to fix build [5.x] by \u003ca href=\"https://github.com/baloo\"\u003e\u003ccode\u003e@​baloo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1644\"\u003ego-git/go-git#1644\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: raise timeouts for windows CI tests and disable CIFuzz [5.x] by \u003ca href=\"https://github.com/baloo\"\u003e\u003ccode\u003e@​baloo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1646\"\u003ego-git/go-git#1646\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eplumbing: support commits extra headers, support jujutsu signed commit [5.x] by \u003ca href=\"https://github.com/baloo\"\u003e\u003ccode\u003e@​baloo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1633\"\u003ego-git/go-git#1633\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.2...v5.16.3\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.2...v5.16.3\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/5e23dfd02db92644dc4a3358ceb297fce875b772\"\u003e\u003ccode\u003e5e23dfd\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1937\"\u003e#1937\u003c/a\u003e from pjbgf/idx-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/6b38a326816b80f64c20cc0e6113958b65c05a1c\"\u003e\u003ccode\u003e6b38a32\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1935\"\u003e#1935\u003c/a\u003e from pjbgf/index-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/cd757fcb856a2dcc5fff6c110320a8ff62e99513\"\u003e\u003ccode\u003ecd757fc\u003c/code\u003e\u003c/a\u003e plumbing: format/idxfile, Fix version and fanout checks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/3ec0d70cb687ae1da5f4d18faa4229bd971a8710\"\u003e\u003ccode\u003e3ec0d70\u003c/code\u003e\u003c/a\u003e plumbing: format/index, Fix tree extension invalidated entry parsing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/dbe10b6b425a2a4ea92a9d98e20cd68e15aede01\"\u003e\u003ccode\u003edbe10b6\u003c/code\u003e\u003c/a\u003e plumbing: format/index, Align V2/V3 long name and V4 prefix encoding with Git\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/e9b65df44cb97faeba148b47523a362beaecddf9\"\u003e\u003ccode\u003ee9b65df\u003c/code\u003e\u003c/a\u003e plumbing: format/index, Improve v4 entry name validation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/adad18daabddee04c5a889f0230035e74bca32c0\"\u003e\u003ccode\u003eadad18d\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1930\"\u003e#1930\u003c/a\u003e from go-git/renovate/releases/v5.x-go-github.com-clo...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/29470bd1d862c6e902996b8e8ff8eb7a0515a9be\"\u003e\u003ccode\u003e29470bd\u003c/code\u003e\u003c/a\u003e build: Update module github.com/cloudflare/circl to v1.6.3 [SECURITY]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/bdf06885bdaa3631cf6a2017108086c6f53dcf69\"\u003e\u003ccode\u003ebdf0688\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1864\"\u003e#1864\u003c/a\u003e from pjbgf/v5-issue-55\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/5290e521c8cf651bf3e8d3e37f517c7cf7aa0b19\"\u003e\u003ccode\u003e5290e52\u003c/code\u003e\u003c/a\u003e storage: filesystem, Avoid overwriting loose obj files. Fixes \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/55\"\u003e#55\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.0...v5.17.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-viper/mapstructure/v2` from 2.2.1 to 2.4.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-viper/mapstructure/releases\"\u003egithub.com/go-viper/mapstructure/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.4.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003erefactor: replace interface{} with any by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/115\"\u003ego-viper/mapstructure#115\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.0 to 3.29.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/114\"\u003ego-viper/mapstructure#114\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGeneric tests by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/118\"\u003ego-viper/mapstructure#118\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix godoc reference link in README.md by \u003ca href=\"https://github.com/peczenyj\"\u003e\u003ccode\u003e@​peczenyj\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/107\"\u003ego-viper/mapstructure#107\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add StringToTimeLocationHookFunc to convert strings to *time.Location by \u003ca href=\"https://github.com/ErfanMomeniii\"\u003e\u003ccode\u003e@​ErfanMomeniii\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/117\"\u003ego-viper/mapstructure#117\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add back previous StringToSlice as a weak function by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/119\"\u003ego-viper/mapstructure#119\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ErfanMomeniii\"\u003e\u003ccode\u003e@​ErfanMomeniii\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/117\"\u003ego-viper/mapstructure#117\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-viper/mapstructure/compare/v2.3.0...v2.4.0\"\u003ehttps://github.com/go-viper/mapstructure/compare/v2.3.0...v2.4.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.3.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 4.1.7 to 4.2.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/46\"\u003ego-viper/mapstructure#46\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golangci/golangci-lint-action from 6.1.0 to 6.1.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/47\"\u003ego-viper/mapstructure#47\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[enhancement] Add check for \u003ccode\u003ereflect.Value\u003c/code\u003e in \u003ccode\u003eComposeDecodeHookFunc\u003c/code\u003e by \u003ca href=\"https://github.com/mahadzaryab1\"\u003e\u003ccode\u003e@​mahadzaryab1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/52\"\u003ego-viper/mapstructure#52\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.0.2 to 5.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/51\"\u003ego-viper/mapstructure#51\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 4.2.0 to 4.2.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/50\"\u003ego-viper/mapstructure#50\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.1.0 to 5.2.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/55\"\u003ego-viper/mapstructure#55\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.2.0 to 5.3.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/58\"\u003ego-viper/mapstructure#58\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: add Go 1.24 to the test matrix by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/74\"\u003ego-viper/mapstructure#74\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golangci/golangci-lint-action from 6.1.1 to 6.5.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/72\"\u003ego-viper/mapstructure#72\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golangci/golangci-lint-action from 6.5.0 to 6.5.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/76\"\u003ego-viper/mapstructure#76\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.3.0 to 5.4.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/78\"\u003ego-viper/mapstructure#78\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add decode hook for netip.Prefix by \u003ca href=\"https://github.com/tklauser\"\u003e\u003ccode\u003e@​tklauser\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/85\"\u003ego-viper/mapstructure#85\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdates by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/86\"\u003ego-viper/mapstructure#86\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 2.13.4 to 3.28.15 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/87\"\u003ego-viper/mapstructure#87\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.4.0 to 5.5.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/93\"\u003ego-viper/mapstructure#93\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.15 to 3.28.17 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/92\"\u003ego-viper/mapstructure#92\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.17 to 3.28.19 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/97\"\u003ego-viper/mapstructure#97\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/96\"\u003ego-viper/mapstructure#96\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate README.md by \u003ca href=\"https://github.com/peczenyj\"\u003e\u003ccode\u003e@​peczenyj\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/90\"\u003ego-viper/mapstructure#90\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd omitzero tag. by \u003ca href=\"https://github.com/Crystalix007\"\u003e\u003ccode\u003e@​Crystalix007\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/98\"\u003ego-viper/mapstructure#98\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse error structs instead of duplicated strings by \u003ca href=\"https://github.com/m1k1o\"\u003e\u003ccode\u003e@​m1k1o\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/102\"\u003ego-viper/mapstructure#102\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.19 to 3.29.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/101\"\u003ego-viper/mapstructure#101\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add common error interface by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/105\"\u003ego-viper/mapstructure#105\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eupdate linter by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/106\"\u003ego-viper/mapstructure#106\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFeature allow unset pointer by \u003ca href=\"https://github.com/rostislaved\"\u003e\u003ccode\u003e@​rostislaved\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/80\"\u003ego-viper/mapstructure#80\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tklauser\"\u003e\u003ccode\u003e@​tklauser\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/85\"\u003ego-viper/mapstructure#85\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/peczenyj\"\u003e\u003ccode\u003e@​peczenyj\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/90\"\u003ego-viper/mapstructure#90\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Crystalix007\"\u003e\u003ccode\u003e@​Crystalix007\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/98\"\u003ego-viper/mapstructure#98\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rostislaved\"\u003e\u003ccode\u003e@​rostislaved\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/80\"\u003ego-viper/mapstructure#80\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-viper/mapstructure/compare/v2.2.1...v2.3.0\"\u003ehttps://github.com/go-viper/mapstructure/compare/v2.2.1...v2.3.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/b9794a5f0e73d425210d6614ed833067029155f5\"\u003e\u003ccode\u003eb9794a5\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/119\"\u003e#119\u003c/a\u003e from go-viper/string-to-weak-slice\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/17cdcb0741054e2a33938adf6bd1f2a5c0aa8f30\"\u003e\u003ccode\u003e17cdcb0\u003c/code\u003e\u003c/a\u003e feat: add back previous StringToSlice as a weak function\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/3caca3614c3ab2c5b5d359c44fdcd72058887b19\"\u003e\u003ccode\u003e3caca36\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/117\"\u003e#117\u003c/a\u003e from ErfanMomeniii/main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/9a861bc115f2b54ed4e494662f29c172d9ef046a\"\u003e\u003ccode\u003e9a861bc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/107\"\u003e#107\u003c/a\u003e from peczenyj/patch-2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/86ed5b59da0615fb8c3a413f401cdf0231f1234c\"\u003e\u003ccode\u003e86ed5b5\u003c/code\u003e\u003c/a\u003e refactor: update\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/ace5b4e8b3dec99468ffa9498e42fb09d177b0a6\"\u003e\u003ccode\u003eace5b4e\u003c/code\u003e\u003c/a\u003e chore: add interface any linter\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/1a4f1aef38bfa8549762aaf42c7c18a5d268e76e\"\u003e\u003ccode\u003e1a4f1ae\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/118\"\u003e#118\u003c/a\u003e from go-viper/generic-tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/a2689090ed4348033c36724d866faf1f911a9f63\"\u003e\u003ccode\u003ea268909\u003c/code\u003e\u003c/a\u003e fix: lint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/17f1fd44eb7606b109c9bb017c0a1c6d3e93b5cd\"\u003e\u003ccode\u003e17f1fd4\u003c/code\u003e\u003c/a\u003e test: add more comments\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/b48c8566836bf291bfee2b217d51fc36e8e61f6f\"\u003e\u003ccode\u003eb48c856\u003c/code\u003e\u003c/a\u003e test: expand tests\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-viper/mapstructure/compare/v2.2.1...v2.4.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.38.0 to 0.45.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/4e0068c0098be10d7025c99ab7c50ce454c1f0f9\"\u003e\u003ccode\u003e4e0068c\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e79546e28b85ea53dd37afe1c4102746ef553b9c\"\u003e\u003ccode\u003ee79546e\u003c/code\u003e\u003c/a\u003e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f91f7a7c31bf90b39c1de895ad116a2bacc88748\"\u003e\u003ccode\u003ef91f7a7\u003c/code\u003e\u003c/a\u003e ssh/agent: prevent panic on malformed constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/2df4153a0311bdfea44376e0eb6ef2faefb0275b\"\u003e\u003ccode\u003e2df4153\u003c/code\u003e\u003c/a\u003e acme/autocert: let automatic renewal work with short lifetime certs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/bcf6a849efcf4702fa5172cb0998b46c3da1e989\"\u003e\u003ccode\u003ebcf6a84\u003c/code\u003e\u003c/a\u003e acme: pass context to request\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b4f2b62076abeee4e43fb59544dac565715fbf1e\"\u003e\u003ccode\u003eb4f2b62\u003c/code\u003e\u003c/a\u003e ssh: fix error message on unsupported cipher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/79ec3a51fcc7fbd2691d56155d578225ccc542e2\"\u003e\u003ccode\u003e79ec3a5\u003c/code\u003e\u003c/a\u003e ssh: allow to bind to a hostname in remote forwarding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/122a78f140d9d3303ed3261bc374bbbca149140f\"\u003e\u003ccode\u003e122a78f\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/c0531f9c34514ad5c5551e2d6ce569ca673a8afd\"\u003e\u003ccode\u003ec0531f9\u003c/code\u003e\u003c/a\u003e all: eliminate vet diagnostics\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/0997000b45e3a40598272081bcad03ffd21b8adb\"\u003e\u003ccode\u003e0997000\u003c/code\u003e\u003c/a\u003e all: fix some comments\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.38.0...v0.45.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google.golang.org/grpc` from 1.72.1 to 1.79.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc-go/releases\"\u003egoogle.golang.org/grpc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 1.79.3\u003c/h2\u003e\n\u003ch1\u003eSecurity\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eserver: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted \u0026quot;deny\u0026quot; rules in interceptors like \u003ccode\u003egrpc/authz\u003c/code\u003e. Any request with a non-canonical path is now immediately rejected with an \u003ccode\u003eUnimplemented\u003c/code\u003e error. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.2\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003estats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8874\"\u003egrpc/grpc-go#8874\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.1\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003egrpc: Remove the \u003ccode\u003e-dev\u003c/code\u003e suffix from the User-Agent header. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8902\"\u003egrpc/grpc-go#8902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.0\u003c/h2\u003e\n\u003ch1\u003eAPI Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003emem: Add experimental API \u003ccode\u003eSetDefaultBufferPool\u003c/code\u003e to change the default buffer pool. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8806\"\u003e#8806\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/vanja-p\"\u003e\u003ccode\u003e@​vanja-p\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eexperimental/stats: Update \u003ccode\u003eMetricsRecorder\u003c/code\u003e to require embedding the new \u003ccode\u003eUnimplementedMetricsRecorder\u003c/code\u003e (a no-op struct) in all implementations for forward compatibility. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBehavior Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ebalancer/weightedtarget: Remove handling of \u003ccode\u003eAddresses\u003c/code\u003e and only handle \u003ccode\u003eEndpoints\u003c/code\u003e in resolver updates. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8841\"\u003e#8841\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eNew Features\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eexperimental/stats: Add support for asynchronous gauge metrics through the new \u003ccode\u003eAsyncMetricReporter\u003c/code\u003e and \u003ccode\u003eRegisterAsyncReporter\u003c/code\u003e APIs. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epickfirst: Add support for weighted random shuffling of endpoints, as described in \u003ca href=\"https://redirect.github.com/grpc/proposal/pull/535\"\u003egRFC A113\u003c/a\u003e.\n\u003cul\u003e\n\u003cli\u003eThis is enabled by default, and can be turned off using the environment variable \u003ccode\u003eGRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds: Implement \u003ccode\u003e:authority\u003c/code\u003e rewriting, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A81-xds-authority-rewriting.md\"\u003egRFC A81\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8779\"\u003e#8779\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebalancer/randomsubsetting: Implement the \u003ccode\u003erandom_subsetting\u003c/code\u003e LB policy, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A68-random-subsetting.md\"\u003egRFC A68\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8650\"\u003e#8650\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/marek-szews\"\u003e\u003ccode\u003e@​marek-szews\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/tls: Fix a bug where the port was not stripped from the authority override before validation. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8726\"\u003e#8726\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/Atul1710\"\u003e\u003ccode\u003e@​Atul1710\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds/priority: Fix a bug causing delayed failover to lower-priority clusters when a higher-priority cluster is stuck in \u003ccode\u003eCONNECTING\u003c/code\u003e state. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8813\"\u003e#8813\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ehealth: Fix a bug where health checks failed for clients using legacy compression options (\u003ccode\u003eWithDecompressor\u003c/code\u003e or \u003ccode\u003eRPCDecompressor\u003c/code\u003e). (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8765\"\u003e#8765\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/sanki92\"\u003e\u003ccode\u003e@​sanki92\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003etransport: Fix an issue where the HTTP/2 server could skip header size checks when terminating a stream early. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8769\"\u003e#8769\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eserver: Propagate status detail headers, if available, when terminating a stream during request header processing. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8754\"\u003e#8754\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ePerformance Improvements\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/alts: Optimize read buffer alignment to reduce copies. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8791\"\u003e#8791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emem: Optimize pooling and creation of \u003ccode\u003ebuffer\u003c/code\u003e objects.  (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8784\"\u003e#8784\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etransport: Reduce slice re-allocations by reserving slice capacity. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8797\"\u003e#8797\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/dda86dbd9cecb8b35b58c73d507d81d67761205f\"\u003e\u003ccode\u003edda86db\u003c/code\u003e\u003c/a\u003e Change version to 1.79.3 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8983\"\u003e#8983\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/72186f163e75a065c39e6f7df9b6dea07fbdeff5\"\u003e\u003ccode\u003e72186f1\u003c/code\u003e\u003c/a\u003e grpc: enforce strict path checking for incoming requests on the server (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/97ca3522b239edf6813e2b1106924e9d55e89d43\"\u003e\u003ccode\u003e97ca352\u003c/code\u003e\u003c/a\u003e Changing version to 1.79.3-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8954\"\u003e#8954\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/8902ab6efea590f5b3861126559eaa26fa9783b2\"\u003e\u003ccode\u003e8902ab6\u003c/code\u003e\u003c/a\u003e Change the version to release 1.79.2 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8947\"\u003e#8947\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/a9286705aa689bee321ec674323b6896284f3e02\"\u003e\u003ccode\u003ea928670\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8874\"\u003e#8874\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8904\"\u003e#8904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/06df3638c0bcee88197b1033b3ba83e1eb8bc010\"\u003e\u003ccode\u003e06df363\u003c/code\u003e\u003c/a\u003e Change version to 1.79.2-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8903\"\u003e#8903\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/782f2de44f597af18a120527e7682a6670d84289\"\u003e\u003ccode\u003e782f2de\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8902\"\u003e#8902\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/850eccbb2257bd2de6ac28ee88a7172ab6175629\"\u003e\u003ccode\u003e850eccb\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8851\"\u003e#8851\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/765ff056b6890f6c8341894df4e9668e9bfc18ef\"\u003e\u003ccode\u003e765ff05\u003c/code\u003e\u003c/a\u003e Change version to 1.79.0 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8850\"\u003e#8850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/68804be0e78ed0365bb5a576dedc12e2168ed63e\"\u003e\u003ccode\u003e68804be\u003c/code\u003e\u003c/a\u003e Cherry pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8896\"\u003e#8896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/grpc/grpc-go/compare/v1.72.1...v1.79.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/livechat/opentelemetry-go/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/livechat/opentelemetry-go/pull/7","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/livechat%2Fopentelemetry-go/issues/7","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/7/packages"}},{"old_version":"1.4.0","new_version":"1.6.3","update_type":"minor","path":null,"pr_created_at":"2026-04-08T19:29:42.000Z","version_change":"1.4.0 → 1.6.3","issue":{"uuid":"4227111316","node_id":"PR_kwDOOguN787Q6ciV","number":5,"state":"closed","title":"Bump the go_modules group across 5 directories with 9 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-04-10T18:23:21.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-08T19:29:42.000Z","updated_at":"2026-04-10T18:23:22.000Z","time_to_close":168819,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"go_modules","update_count":9,"packages":[{"name":"github.com/hashicorp/go-getter","old_version":"1.7.8","new_version":"1.7.9","repository_url":"https://github.com/hashicorp/go-getter"},{"name":"go.opentelemetry.io/otel/sdk","old_version":"1.31.0","new_version":"1.43.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"},{"name":"golang.org/x/crypto","old_version":"0.36.0","new_version":"0.45.0","repository_url":"https://github.com/golang/crypto"},{"name":"google.golang.org/grpc","old_version":"1.69.4","new_version":"1.79.3","repository_url":"https://github.com/grpc/grpc-go"},{"name":"github.com/antchfx/xpath","old_version":"1.1.10","new_version":"1.3.6","repository_url":"https://github.com/antchfx/xpath"},{"name":"github.com/cli/go-gh/v2","old_version":"2.11.2","new_version":"2.12.1","repository_url":"https://github.com/cli/go-gh"},{"name":"github.com/cloudflare/circl","old_version":"1.4.0","new_version":"1.6.3","repository_url":"https://github.com/cloudflare/circl"},{"name":"github.com/ulikunitz/xz","old_version":"0.5.10","new_version":"0.5.14","repository_url":"https://github.com/ulikunitz/xz"},{"name":"go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp","old_version":"1.19.0","new_version":"1.43.0","repository_url":"https://github.com/open-telemetry/opentelemetry-go"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 9 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/hashicorp/go-getter](https://github.com/hashicorp/go-getter) | `1.7.8` | `1.7.9` |\n| [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.31.0` | `1.43.0` |\n| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.36.0` | `0.45.0` |\n| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.69.4` | `1.79.3` |\n| [github.com/antchfx/xpath](https://github.com/antchfx/xpath) | `1.1.10` | `1.3.6` |\n| [github.com/cli/go-gh/v2](https://github.com/cli/go-gh) | `2.11.2` | `2.12.1` |\n| [github.com/cloudflare/circl](https://github.com/cloudflare/circl) | `1.4.0` | `1.6.3` |\n| [github.com/ulikunitz/xz](https://github.com/ulikunitz/xz) | `0.5.10` | `0.5.14` |\n| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go) | `1.19.0` | `1.43.0` |\n\nBumps the go_modules group with 1 update in the /internal/backend/remote-state/azure directory: [golang.org/x/crypto](https://github.com/golang/crypto).\nBumps the go_modules group with 2 updates in the /internal/backend/remote-state/gcs directory: [golang.org/x/crypto](https://github.com/golang/crypto) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 1 update in the /internal/backend/remote-state/kubernetes directory: [golang.org/x/crypto](https://github.com/golang/crypto).\nBumps the go_modules group with 1 update in the /internal/backend/remote-state/oci directory: [golang.org/x/crypto](https://github.com/golang/crypto).\n\nUpdates `github.com/hashicorp/go-getter` from 1.7.8 to 1.7.9\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/hashicorp/go-getter/releases\"\u003egithub.com/hashicorp/go-getter's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.7.9\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSpeed up XZ decompression by 5x with bufio wrapper by \u003ca href=\"https://github.com/vsarunas\"\u003e\u003ccode\u003e@​vsarunas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/520\"\u003ehashicorp/go-getter#520\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix CI Workflow by \u003ca href=\"https://github.com/mohanmanikanta2299\"\u003e\u003ccode\u003e@​mohanmanikanta2299\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/522\"\u003ehashicorp/go-getter#522\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: Remove use of \u0026quot;mitchellh/go-testing-interface\u0026quot; for stdlib by \u003ca href=\"https://github.com/jrasell\"\u003e\u003ccode\u003e@​jrasell\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/523\"\u003ehashicorp/go-getter#523\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: url redact of multiple sshkey by \u003ca href=\"https://github.com/dduzgun-security\"\u003e\u003ccode\u003e@​dduzgun-security\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/528\"\u003ehashicorp/go-getter#528\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePublish arm binaries by \u003ca href=\"https://github.com/sethvargo\"\u003e\u003ccode\u003e@​sethvargo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/525\"\u003ehashicorp/go-getter#525\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix errcheck lint errors and run it as part of pr checks by \u003ca href=\"https://github.com/abhijeetviswa\"\u003e\u003ccode\u003e@​abhijeetviswa\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/530\"\u003ehashicorp/go-getter#530\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix additional lint errors and increase linter scope by \u003ca href=\"https://github.com/abhijeetviswa\"\u003e\u003ccode\u003e@​abhijeetviswa\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/531\"\u003ehashicorp/go-getter#531\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIND-3728 enabling dependabot by \u003ca href=\"https://github.com/KaushikiAnand\"\u003e\u003ccode\u003e@​KaushikiAnand\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/529\"\u003ehashicorp/go-getter#529\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: go-getter subdir paths by \u003ca href=\"https://github.com/dduzgun-security\"\u003e\u003ccode\u003e@​dduzgun-security\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/540\"\u003ehashicorp/go-getter#540\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vsarunas\"\u003e\u003ccode\u003e@​vsarunas\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/520\"\u003ehashicorp/go-getter#520\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jrasell\"\u003e\u003ccode\u003e@​jrasell\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/523\"\u003ehashicorp/go-getter#523\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sethvargo\"\u003e\u003ccode\u003e@​sethvargo\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/525\"\u003ehashicorp/go-getter#525\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/abhijeetviswa\"\u003e\u003ccode\u003e@​abhijeetviswa\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/530\"\u003ehashicorp/go-getter#530\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KaushikiAnand\"\u003e\u003ccode\u003e@​KaushikiAnand\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/529\"\u003ehashicorp/go-getter#529\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/hashicorp/go-getter/compare/v1.7.8...v1.7.9\"\u003ehttps://github.com/hashicorp/go-getter/compare/v1.7.8...v1.7.9\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/go-getter/commit/e70221100018573cdc74411c95c19b2a372f6728\"\u003e\u003ccode\u003ee702211\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/issues/532\"\u003e#532\u003c/a\u003e from hashicorp/dependabot/github_actions/actions-8948...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/go-getter/commit/df0a14fa67f2921eabff8fbdb51445ac03daeb87\"\u003e\u003ccode\u003edf0a14f\u003c/code\u003e\u003c/a\u003e [chore] : Bump the actions group with 8 updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/go-getter/commit/87541b2501c00df5eaedea6acc61a2a4a4efa5b7\"\u003e\u003ccode\u003e87541b2\u003c/code\u003e\u003c/a\u003e fix: go-getter subdir paths (\u003ca href=\"https://redirect.github.com/hashicorp/go-getter/issues/540\"\u003e#540\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/go-getter/commit/37130302313c9294df898ac96e2565a65369ec68\"\u003e\u003ccode\u003e3713030\u003c/code\u003e\u003c/a\u003e [Compliance] - PR Template Changes Required\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/go-getter/commit/af2dd3ca2764281bf6b7468e05028a8b114c63a7\"\u003e\u003ccode\u003eaf2dd3c\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/issues/529\"\u003e#529\u003c/a\u003e from hashicorp/dependabot-intge\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/go-getter/commit/bf526297fa4cd429fcf31da9e4a6bf6a0b512026\"\u003e\u003ccode\u003ebf52629\u003c/code\u003e\u003c/a\u003e updating dependabot.yml\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/go-getter/commit/1f63e10d3b421544473bf52103b41eb423e2c897\"\u003e\u003ccode\u003e1f63e10\u003c/code\u003e\u003c/a\u003e changelog added, updated dependabot.yaml\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/go-getter/commit/45af45918c6958be58f87d1576ac4a0b32f7eb4b\"\u003e\u003ccode\u003e45af459\u003c/code\u003e\u003c/a\u003e fix additional lint errors and increase linter scope\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/go-getter/commit/c8c6aba0f7ad4e3937ef7cfcb50627520e498252\"\u003e\u003ccode\u003ec8c6aba\u003c/code\u003e\u003c/a\u003e fix errcheck lint errors and run it as part of pr checks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hashicorp/go-getter/commit/9b76f983e594375fdef9e231822c805c82ec9ed7\"\u003e\u003ccode\u003e9b76f98\u003c/code\u003e\u003c/a\u003e copywrite header added\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/hashicorp/go-getter/compare/v1.7.8...v1.7.9\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/sdk` from 1.31.0 to 1.43.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/sdk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.43.0/0.65.0/0.19.0] 2026-04-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eIsRandom\u003c/code\u003e and \u003ccode\u003eWithRandom\u003c/code\u003e on \u003ccode\u003eTraceFlags\u003c/code\u003e, and \u003ccode\u003eIsRandom\u003c/code\u003e on \u003ccode\u003eSpanContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e for \u003ca href=\"https://www.w3.org/TR/trace-context-2/#random-trace-id-flag\"\u003eW3C Trace Context Level 2 Random Trace ID Flag\u003c/a\u003e support. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012\"\u003e#8012\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd service detection with \u003ccode\u003eWithService\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642\"\u003e#7642\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eDefaultWithContext\u003c/code\u003e and \u003ccode\u003eEnvironmentWithContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to support plumbing \u003ccode\u003econtext.Context\u003c/code\u003e through default and environment detectors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051\"\u003e#8051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd support for per-series start time tracking for cumulative metrics in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true\u003c/code\u003e to enable. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060\"\u003e#8060\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithCardinalityLimitSelector\u003c/code\u003e for metric reader for configuring cardinality limits specific to the instrument kind. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855\"\u003e#7855\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce the \u003ccode\u003eEMPTY\u003c/code\u003e Type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to reflect that an empty value is now a valid value, with \u003ccode\u003eINVALID\u003c/code\u003e remaining as a deprecated alias of \u003ccode\u003eEMPTY\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove slice handling in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to optimize short slice values with fixed-size fast paths. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039\"\u003e#8039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of span metric recording in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e by returning early if self-observability is not enabled. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067\"\u003e#8067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove formatting of metric data diffs in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073\"\u003e#8073\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeprecated\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eINVALID\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. Use \u003ccode\u003eEMPTY\u003c/code\u003e instead. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReturn spec-compliant \u003ccode\u003eTraceIdRatioBased\u003c/code\u003e description. This is a breaking behavioral change, but it is necessary to\nmake the implementation \u003ca href=\"https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased\"\u003espec-compliant\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027\"\u003e#8027\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a race condition in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056\"\u003e#8056\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003ekenv\u003c/code\u003e command on BSD. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to correctly handle HTTP2 GOAWAY frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.40.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985\"\u003e#7985\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9276201a64b623606e3eaa0d61ae8ee6d62756c0\"\u003e\u003ccode\u003e9276201\u003c/code\u003e\u003c/a\u003e Release v1.43.0 / v0.65.0 / v0.19.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8128\"\u003e#8128\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/61b8c9466c4e6b17e69b622279fe9b63fb15c89a\"\u003e\u003ccode\u003e61b8c94\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8131\"\u003e#8131\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/97a086e82ffe01502f4c620e9c447efa229e2a23\"\u003e\u003ccode\u003e97a086e\u003c/code\u003e\u003c/a\u003e chore(deps): update github.com/golangci/dupl digest to c99c5cf (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8122\"\u003e#8122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/5e363de517dba6db62736b2f5cdef0e0929b4cd0\"\u003e\u003ccode\u003e5e363de\u003c/code\u003e\u003c/a\u003e limit response body size for OTLP HTTP exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/35214b60138eac8dec97a2d2b851d8c8471680c7\"\u003e\u003ccode\u003e35214b6\u003c/code\u003e\u003c/a\u003e Use an absolute path when calling bsd kenv (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/290024ceaf695f9cdbf29a0c6731a317d92bc361\"\u003e\u003ccode\u003e290024c\u003c/code\u003e\u003c/a\u003e fix(deps): update module google.golang.org/grpc to v1.80.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8121\"\u003e#8121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/e70658e098033d6bb5ec1b399de16bbb2642f6dc\"\u003e\u003ccode\u003ee70658e\u003c/code\u003e\u003c/a\u003e fix: support getBody in otelploghttp (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4afe468e3b4859c949a1c1e8d92684d43d86ef8a\"\u003e\u003ccode\u003e4afe468\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 9d38bb4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8117\"\u003e#8117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b9ca729776309e3c08fe700c131797a3b4d10634\"\u003e\u003ccode\u003eb9ca729\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8115\"\u003e#8115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/69472ec56cb7674d55ca2e2bcb04dea73228ab79\"\u003e\u003ccode\u003e69472ec\u003c/code\u003e\u003c/a\u003e chore(deps): update fossas/fossa-action action to v1.9.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8118\"\u003e#8118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.31.0...v1.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.36.0 to 0.45.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/4e0068c0098be10d7025c99ab7c50ce454c1f0f9\"\u003e\u003ccode\u003e4e0068c\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e79546e28b85ea53dd37afe1c4102746ef553b9c\"\u003e\u003ccode\u003ee79546e\u003c/code\u003e\u003c/a\u003e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f91f7a7c31bf90b39c1de895ad116a2bacc88748\"\u003e\u003ccode\u003ef91f7a7\u003c/code\u003e\u003c/a\u003e ssh/agent: prevent panic on malformed constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/2df4153a0311bdfea44376e0eb6ef2faefb0275b\"\u003e\u003ccode\u003e2df4153\u003c/code\u003e\u003c/a\u003e acme/autocert: let automatic renewal work with short lifetime certs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/bcf6a849efcf4702fa5172cb0998b46c3da1e989\"\u003e\u003ccode\u003ebcf6a84\u003c/code\u003e\u003c/a\u003e acme: pass context to request\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b4f2b62076abeee4e43fb59544dac565715fbf1e\"\u003e\u003ccode\u003eb4f2b62\u003c/code\u003e\u003c/a\u003e ssh: fix error message on unsupported cipher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/79ec3a51fcc7fbd2691d56155d578225ccc542e2\"\u003e\u003ccode\u003e79ec3a5\u003c/code\u003e\u003c/a\u003e ssh: allow to bind to a hostname in remote forwarding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/122a78f140d9d3303ed3261bc374bbbca149140f\"\u003e\u003ccode\u003e122a78f\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/c0531f9c34514ad5c5551e2d6ce569ca673a8afd\"\u003e\u003ccode\u003ec0531f9\u003c/code\u003e\u003c/a\u003e all: eliminate vet diagnostics\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/0997000b45e3a40598272081bcad03ffd21b8adb\"\u003e\u003ccode\u003e0997000\u003c/code\u003e\u003c/a\u003e all: fix some comments\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.36.0...v0.45.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google.golang.org/grpc` from 1.69.4 to 1.79.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc-go/releases\"\u003egoogle.golang.org/grpc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 1.79.3\u003c/h2\u003e\n\u003ch1\u003eSecurity\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eserver: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted \u0026quot;deny\u0026quot; rules in interceptors like \u003ccode\u003egrpc/authz\u003c/code\u003e. Any request with a non-canonical path is now immediately rejected with an \u003ccode\u003eUnimplemented\u003c/code\u003e error. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.2\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003estats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8874\"\u003egrpc/grpc-go#8874\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.1\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003egrpc: Remove the \u003ccode\u003e-dev\u003c/code\u003e suffix from the User-Agent header. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8902\"\u003egrpc/grpc-go#8902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.0\u003c/h2\u003e\n\u003ch1\u003eAPI Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003emem: Add experimental API \u003ccode\u003eSetDefaultBufferPool\u003c/code\u003e to change the default buffer pool. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8806\"\u003e#8806\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/vanja-p\"\u003e\u003ccode\u003e@​vanja-p\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eexperimental/stats: Update \u003ccode\u003eMetricsRecorder\u003c/code\u003e to require embedding the new \u003ccode\u003eUnimplementedMetricsRecorder\u003c/code\u003e (a no-op struct) in all implementations for forward compatibility. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBehavior Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ebalancer/weightedtarget: Remove handling of \u003ccode\u003eAddresses\u003c/code\u003e and only handle \u003ccode\u003eEndpoints\u003c/code\u003e in resolver updates. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8841\"\u003e#8841\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eNew Features\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eexperimental/stats: Add support for asynchronous gauge metrics through the new \u003ccode\u003eAsyncMetricReporter\u003c/code\u003e and \u003ccode\u003eRegisterAsyncReporter\u003c/code\u003e APIs. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epickfirst: Add support for weighted random shuffling of endpoints, as described in \u003ca href=\"https://redirect.github.com/grpc/proposal/pull/535\"\u003egRFC A113\u003c/a\u003e.\n\u003cul\u003e\n\u003cli\u003eThis is enabled by default, and can be turned off using the environment variable \u003ccode\u003eGRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds: Implement \u003ccode\u003e:authority\u003c/code\u003e rewriting, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A81-xds-authority-rewriting.md\"\u003egRFC A81\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8779\"\u003e#8779\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebalancer/randomsubsetting: Implement the \u003ccode\u003erandom_subsetting\u003c/code\u003e LB policy, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A68-random-subsetting.md\"\u003egRFC A68\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8650\"\u003e#8650\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/marek-szews\"\u003e\u003ccode\u003e@​marek-szews\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/tls: Fix a bug where the port was not stripped from the authority override before validation. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8726\"\u003e#8726\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/Atul1710\"\u003e\u003ccode\u003e@​Atul1710\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds/priority: Fix a bug causing delayed failover to lower-priority clusters when a higher-priority cluster is stuck in \u003ccode\u003eCONNECTING\u003c/code\u003e state. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8813\"\u003e#8813\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ehealth: Fix a bug where health checks failed for clients using legacy compression options (\u003ccode\u003eWithDecompressor\u003c/code\u003e or \u003ccode\u003eRPCDecompressor\u003c/code\u003e). (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8765\"\u003e#8765\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/sanki92\"\u003e\u003ccode\u003e@​sanki92\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003etransport: Fix an issue where the HTTP/2 server could skip header size checks when terminating a stream early. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8769\"\u003e#8769\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eserver: Propagate status detail headers, if available, when terminating a stream during request header processing. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8754\"\u003e#8754\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ePerformance Improvements\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/alts: Optimize read buffer alignment to reduce copies. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8791\"\u003e#8791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emem: Optimize pooling and creation of \u003ccode\u003ebuffer\u003c/code\u003e objects.  (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8784\"\u003e#8784\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etransport: Reduce slice re-allocations by reserving slice capacity. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8797\"\u003e#8797\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/dda86dbd9cecb8b35b58c73d507d81d67761205f\"\u003e\u003ccode\u003edda86db\u003c/code\u003e\u003c/a\u003e Change version to 1.79.3 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8983\"\u003e#8983\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/72186f163e75a065c39e6f7df9b6dea07fbdeff5\"\u003e\u003ccode\u003e72186f1\u003c/code\u003e\u003c/a\u003e grpc: enforce strict path checking for incoming requests on the server (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/97ca3522b239edf6813e2b1106924e9d55e89d43\"\u003e\u003ccode\u003e97ca352\u003c/code\u003e\u003c/a\u003e Changing version to 1.79.3-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8954\"\u003e#8954\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/8902ab6efea590f5b3861126559eaa26fa9783b2\"\u003e\u003ccode\u003e8902ab6\u003c/code\u003e\u003c/a\u003e Change the version to release 1.79.2 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8947\"\u003e#8947\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/a9286705aa689bee321ec674323b6896284f3e02\"\u003e\u003ccode\u003ea928670\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8874\"\u003e#8874\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8904\"\u003e#8904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/06df3638c0bcee88197b1033b3ba83e1eb8bc010\"\u003e\u003ccode\u003e06df363\u003c/code\u003e\u003c/a\u003e Change version to 1.79.2-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8903\"\u003e#8903\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/782f2de44f597af18a120527e7682a6670d84289\"\u003e\u003ccode\u003e782f2de\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8902\"\u003e#8902\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/850eccbb2257bd2de6ac28ee88a7172ab6175629\"\u003e\u003ccode\u003e850eccb\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8851\"\u003e#8851\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/765ff056b6890f6c8341894df4e9668e9bfc18ef\"\u003e\u003ccode\u003e765ff05\u003c/code\u003e\u003c/a\u003e Change version to 1.79.0 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8850\"\u003e#8850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/68804be0e78ed0365bb5a576dedc12e2168ed63e\"\u003e\u003ccode\u003e68804be\u003c/code\u003e\u003c/a\u003e Cherry pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8896\"\u003e#8896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/grpc/grpc-go/compare/v1.69.4...v1.79.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/antchfx/xpath` from 1.1.10 to 1.3.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/antchfx/xpath/releases\"\u003egithub.com/antchfx/xpath's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.3.6\u003c/h2\u003e\n\u003cp\u003eMerged PR:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/antchfx/xpath/issues/120\"\u003e#120\u003c/a\u003e(\u003ca href=\"https://github.com/mislav\"\u003e\u003ccode\u003e@​mislav\u003c/code\u003e\u003c/a\u003e) - Fix \u003ccode\u003elast()\u003c/code\u003e predicate on grouped expr.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFixed:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/antchfx/xpath/issues/121\"\u003e#121\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease v1.3.5\u003c/h2\u003e\n\u003cp\u003eMerged PR:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/antchfx/xpath/issues/117\"\u003e#117\u003c/a\u003e(\u003ca href=\"https://github.com/mislav\"\u003e\u003ccode\u003e@​mislav\u003c/code\u003e\u003c/a\u003e）- fix \u003ccode\u003eancestor::\u003c/code\u003e axes with position predicate.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFixed:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/antchfx/xpath/issues/113\"\u003e#113\u003c/a\u003e - (fix \u003ccode\u003estring()\u003c/code\u003e function)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.3.4\u003c/h2\u003e\n\u003cp\u003eMerged PR:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/antchfx/xpath/issues/107\"\u003e#107\u003c/a\u003e(\u003ca href=\"https://github.com/Mrflatt\"\u003e\u003ccode\u003e@​Mrflatt\u003c/code\u003e\u003c/a\u003e) - supports Regexp feature in \u003ccode\u003ereplace()\u003c/code\u003e function\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/antchfx/xpath/issues/111\"\u003e#111\u003c/a\u003e(\u003ca href=\"https://github.com/wjc4\"\u003e\u003ccode\u003e@​wjc4\u003c/code\u003e\u003c/a\u003e) - Improve \u003ccode\u003egetHashCode\u003c/code\u003e performance\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFixed:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/antchfx/xpath/issues/109\"\u003e#109\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.3.3\u003c/h2\u003e\n\u003cp\u003efix non-English predicate query \u003ca href=\"https://redirect.github.com/antchfx/xpath/issues/106\"\u003e#106\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.3.2\u003c/h2\u003e\n\u003cp\u003eNew Features:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eSupports Unicode chars for Non-English (PR \u003ca href=\"https://redirect.github.com/antchfx/xpath/issues/100\"\u003e#100\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eBug Fixed:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/antchfx/xpath/issues/101\"\u003e#101\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/antchfx/xpath/issues/102\"\u003e#102\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/antchfx/xpath/issues/104\"\u003e#104\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.3.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMerged PR \u003ca href=\"https://redirect.github.com/antchfx/xpath/issues/97\"\u003e#97\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eAllows node-set numeric operator \u003ccode\u003e+\u003c/code\u003e, \u003ccode\u003e-\u003c/code\u003e, \u003ccode\u003emod()\u003c/code\u003e.\u003ca href=\"https://github.com/antchfx/xpath/commit/4b4638b370e898a9d10709464b8cd460b7dcfd0c\"\u003ehttps://github.com/antchfx/xpath/commit/4b4638b370e898a9d10709464b8cd460b7dcfd0c\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/antchfx/xpath/issues/98\"\u003e#98\u003c/a\u003e, Remove the duplicate element filter \u003ca href=\"https://github.com/antchfx/xpath/commit/5481aef473ee298d297387f5b69e2768df09e0c4\"\u003ehttps://github.com/antchfx/xpath/commit/5481aef473ee298d297387f5b69e2768df09e0c4\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.3.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efixes \u003ca href=\"https://redirect.github.com/antchfx/xpath/issues/93\"\u003e#93\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNew features:\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/antchfx/xpath/commit/afd4762cc342af56345a3fb4002a59281fcab494\"\u003e\u003ccode\u003eafd4762\u003c/code\u003e\u003c/a\u003e fix \u003ca href=\"https://redirect.github.com/antchfx/xpath/issues/121\"\u003e#121\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/antchfx/xpath/commit/a8ced8f559cd68fc4aedfc87f21599d1190c0852\"\u003e\u003ccode\u003ea8ced8f\u003c/code\u003e\u003c/a\u003e Merge PR \u003ca href=\"https://redirect.github.com/antchfx/xpath/issues/120\"\u003e#120\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/antchfx/xpath/commit/c92c3ebebbdd67f715161810f97ecfbcaa47921e\"\u003e\u003ccode\u003ec92c3eb\u003c/code\u003e\u003c/a\u003e Fix last() predicate on grouped expressions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/antchfx/xpath/commit/3cbab9750ea36cbae6f967ebbf29b9eda0e841bf\"\u003e\u003ccode\u003e3cbab97\u003c/code\u003e\u003c/a\u003e Merge PR \u003ca href=\"https://redirect.github.com/antchfx/xpath/issues/119\"\u003e#119\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/antchfx/xpath/commit/02c01b0b4051e7edd1bf40f3d595cc9143936aaa\"\u003e\u003ccode\u003e02c01b0\u003c/code\u003e\u003c/a\u003e Fix chained predicates on ancestor axis\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/antchfx/xpath/commit/511abd57bc74e9644fe27f4e52b559065e686e92\"\u003e\u003ccode\u003e511abd5\u003c/code\u003e\u003c/a\u003e Merge PR \u003ca href=\"https://redirect.github.com/antchfx/xpath/issues/117\"\u003e#117\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/antchfx/xpath/commit/060b15493444a0e6c5a232022516e434818f7391\"\u003e\u003ccode\u003e060b154\u003c/code\u003e\u003c/a\u003e Fix positional predicate for the \u0026quot;ancestor\u0026quot; axis\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/antchfx/xpath/commit/8d50c252d867285812177ffd3ff0924104ffb1eb\"\u003e\u003ccode\u003e8d50c25\u003c/code\u003e\u003c/a\u003e fix \u003ca href=\"https://redirect.github.com/antchfx/xpath/issues/112\"\u003e#112\u003c/a\u003e，\u003ca href=\"https://redirect.github.com/antchfx/xpath/issues/113\"\u003e#113\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/antchfx/xpath/commit/b9e198da9fb170a229c9c7e27d52e1a350636f4c\"\u003e\u003ccode\u003eb9e198d\u003c/code\u003e\u003c/a\u003e Merge PR \u003ca href=\"https://redirect.github.com/antchfx/xpath/issues/111\"\u003e#111\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/antchfx/xpath/commit/fcb882bece30fe7d4d8f5069fed13f95a726e62f\"\u003e\u003ccode\u003efcb882b\u003c/code\u003e\u003c/a\u003e improve getHashCode by removing fmt.Sprintf\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/antchfx/xpath/compare/v1.1.10...v1.3.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/cli/go-gh/v2` from 2.11.2 to 2.12.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cli/go-gh/releases\"\u003egithub.com/cli/go-gh/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.12.1\u003c/h2\u003e\n\u003ch2\u003eSecurity\u003c/h2\u003e\n\u003cp\u003eA security vulnerability has been identified in \u003ccode\u003ego-gh\u003c/code\u003e where an attacker-controlled GitHub Enterprise Server could result in executing arbitrary commands on a user's machine by replacing HTTP URLs provided by GitHub with local file paths for browsing.\u003c/p\u003e\n\u003cp\u003eFor more information, see GHSA-g9f5-x53j-h563\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cli/go-gh/compare/v2.12.0...v2.12.1\"\u003ehttps://github.com/cli/go-gh/compare/v2.12.0...v2.12.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.12.0\u003c/h2\u003e\n\u003ch2\u003eIntroducing experimental support for rendering markdown with customizable, accessible colors\u003c/h2\u003e\n\u003cp\u003eUsers with low vision or color blindness rely upon the terminal's ability to change how colors appear, however this requires CLIs to use a limited set of colors:\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cp\u003eThe \u003ca href=\"https://pkg.go.dev/github.com/cli/go-gh/v2/pkg/markdown\"\u003emarkdown rendered\u003c/a\u003e for GitHub CLI and extensions defaults to \u003ca href=\"https://en.wikipedia.org/wiki/ANSI_escape_code#8-bit\"\u003e8-bit colors\u003c/a\u003e that users cannot easily customize in this way.\u003c/p\u003e\n\u003cp\u003eNow, users can force rendered markdown to use customizable, accessible colors by doing one of the following:\u003c/p\u003e\n\u003col\u003e\n\u003cli\u003e\n\u003cp\u003eSet \u003ccode\u003eGH_ACCESSIBLE_COLORS\u003c/code\u003e environment variable to a truthy value\u003c/p\u003e\n\u003cpre lang=\"shell\"\u003e\u003ccode\u003eexport GH_ACCESSIBLE_COLORS=1\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSet \u003ccode\u003eaccessible_colors\u003c/code\u003e configuration setting\u003c/p\u003e\n\u003cpre lang=\"shell\"\u003e\u003ccode\u003egh config set accessible_colors enabled\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003c/ol\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/user-attachments/assets/ccf829c5-6987-453b-a72a-51f452a80d26\"\u003ehttps://github.com/user-attachments/assets/ccf829c5-6987-453b-a72a-51f452a80d26\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eUsers with a \u003ca href=\"https://github.com/charmbracelet/glamour?tab=readme-ov-file#styles\"\u003ecustom\u003ccode\u003echarmbracelet/glamour\u003c/code\u003e style\u003c/a\u003e will continue to have markdown rendered using it.\u003c/p\u003e\n\u003cp\u003eFor more information, see \u003ca href=\"https://redirect.github.com/cli/go-gh/pull/186\"\u003ecli/go-gh#186\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eIntroducing new experimental \u003ccode\u003egithub.com/cli/go-gh/v2/pkg/x\u003c/code\u003e package\u003c/h2\u003e\n\u003cp\u003e\u003ccode\u003ecli/go-gh\u003c/code\u003e provides capabilities used by both the GitHub CLI and CLI extensions.  Some of these packages are stable, however some like the new experimental markdown support are not.\u003c/p\u003e\n\u003cp\u003eThe \u003ca href=\"https://pkg.go.dev/github.com/cli/go-gh/v2/pkg/x\"\u003e\u003ccode\u003egithub.com/cli/go-gh/v2/pkg/x\u003c/code\u003e package\u003c/a\u003e has been created to contain experimental features that are subject to change without notice.\u003c/p\u003e\n\u003ch2\u003eIntroducing new string matcher functions for Go templates\u003c/h2\u003e\n\u003cp\u003eThe following string matcher functions from \u003ca href=\"https://github.com/Masterminds/sprig\"\u003eMasterminds/sprig\u003c/a\u003e have been incorporated for more robust Go template support in GitHub CLI and CLI extensions:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://masterminds.github.io/sprig/strings.html#contains\"\u003e\u003ccode\u003econtains\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://masterminds.github.io/sprig/strings.html#hasprefix-and-hassuffix\"\u003e\u003ccode\u003ehasPrefix\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cli/go-gh/commit/a08820a13f257d6c5b4cb86d37db559ec6d14577\"\u003e\u003ccode\u003ea08820a\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cli/go-gh/commit/1ecf6c49ecb0629c6538d88970b669bf4f989ccc\"\u003e\u003ccode\u003e1ecf6c4\u003c/code\u003e\u003c/a\u003e Expand test cases for schem case sensitivity\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cli/go-gh/commit/56c6f10bd535e14098f5a21232f931463c808a77\"\u003e\u003ccode\u003e56c6f10\u003c/code\u003e\u003c/a\u003e Parse and examine URL, assume scheme if missing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cli/go-gh/commit/055ff2108e3edff35996a8efa3afa0a9e64649f1\"\u003e\u003ccode\u003e055ff21\u003c/code\u003e\u003c/a\u003e PR feedback\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cli/go-gh/commit/258949bd372e4689d3203cbcef8734062ff59a97\"\u003e\u003ccode\u003e258949b\u003c/code\u003e\u003c/a\u003e Test refactor, refine errors, remove VSCode fix\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cli/go-gh/commit/0f8a22fe3a4b3d418268dfef57bcee15330f5b15\"\u003e\u003ccode\u003e0f8a22f\u003c/code\u003e\u003c/a\u003e Enhance OS-specific browser tests, PR feedback\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cli/go-gh/commit/df956a6624bc1210543873062ce0905357be1299\"\u003e\u003ccode\u003edf956a6\u003c/code\u003e\u003c/a\u003e Initial fix for browsing URLs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cli/go-gh/commit/61bf393cf4aeea6d00a6251390f5f67f5b67e727\"\u003e\u003ccode\u003e61bf393\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/cli/go-gh/issues/186\"\u003e#186\u003c/a\u003e from cli/accessible-colors\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cli/go-gh/commit/024a89fbbde5be08804eaaea00fceb77c4d787dd\"\u003e\u003ccode\u003e024a89f\u003c/code\u003e\u003c/a\u003e Remove toolchain directive from library\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cli/go-gh/commit/09a555fed28dc12b9dba40c1fa911ce8ac2645ae\"\u003e\u003ccode\u003e09a555f\u003c/code\u003e\u003c/a\u003e Disable table wrapping for all\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cli/go-gh/compare/v2.11.2...v2.12.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/cloudflare/circl` from 1.4.0 to 1.6.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cloudflare/circl/releases\"\u003egithub.com/cloudflare/circl's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eCIRCL v1.6.3\u003c/h2\u003e\n\u003cp\u003eFix a bug on ecc/p384 scalar multiplication.\u003c/p\u003e\n\u003ch3\u003eWhat's Changed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esign/mldsa: Check opts for nil value  by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/582\"\u003ecloudflare/circl#582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eecc/p384: Point addition must handle point doubling case. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/583\"\u003ecloudflare/circl#583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease CIRCL v1.6.3 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/584\"\u003ecloudflare/circl#584\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNew SLH-DSA, improvements in ML-DSA for arm64.\u003c/li\u003e\n\u003cli\u003eTested compilation on WASM.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize pairing product computation by moving exponentiations to G1. by \u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esign: Adding SLH-DSA signature by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/512\"\u003ecloudflare/circl#512\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate code generators to CIRCL v1.6.1. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/548\"\u003ecloudflare/circl#548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eML-DSA: Add preliminary Wycheproof test vectors by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/552\"\u003ecloudflare/circl#552\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ego fmt by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/554\"\u003ecloudflare/circl#554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egz-compressing test vectors, use of HexBytes and ReadGzip functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/555\"\u003ecloudflare/circl#555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Removes use of elliptic Marshal and Unmarshal functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/556\"\u003ecloudflare/circl#556\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport encoding/decoding ML-DSA private keys (as long as they contain seeds) by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/559\"\u003ecloudflare/circl#559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to golangci-lint v2 by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/560\"\u003ecloudflare/circl#560\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreparation for ARM64 Implementation of poly operations for dilithium package. by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eprepare power2Round for custom implementations in assembly by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/564\"\u003ecloudflare/circl#564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eARM64 implementation for poly.PackLe16 by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/563\"\u003ecloudflare/circl#563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polyMulBy2toD by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/565\"\u003ecloudflare/circl#565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polySub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/566\"\u003ecloudflare/circl#566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: add byteLen method for short groups and RandomScalar uses rand.Int by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/568\"\u003ecloudflare/circl#568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of poly.Add/Sub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/572\"\u003ecloudflare/circl#572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Adding cryptobyte marshaling to scalars by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/569\"\u003ecloudflare/circl#569\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumping up to Go1.25 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/574\"\u003ecloudflare/circl#574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: Including WASM compilation. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/577\"\u003ecloudflare/circl#577\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to using package-declared HPKE errors for shortkem instead of standard library errors by \u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease v1.6.2 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/579\"\u003ecloudflare/circl#579\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixes some point checks on the FourQ curve.\u003c/li\u003e\n\u003cli\u003eHybrid KEM fails on low-order points.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/24ae53c5d6f7fe18203adc125ba3ed76a38703e1\"\u003e\u003ccode\u003e24ae53c\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/581020bd4a836b8ce7bd4e414ba2884c07dbc906\"\u003e\u003ccode\u003e581020b\u003c/code\u003e\u003c/a\u003e Rename method to oddMultiplesProjective.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/12209a4566605692a8402594e367a5aed5148460\"\u003e\u003ccode\u003e12209a4\u003c/code\u003e\u003c/a\u003e Removing unused cmov for jacobian points.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/fcba359f4178645d2c9e50f29ab6966337da4b95\"\u003e\u003ccode\u003efcba359\u003c/code\u003e\u003c/a\u003e ecc/p384: use of complete projective formulas for scalar multiplication.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/5e1bae8d8c2df4e717c2c5c2d5b5d60b629b2ac6\"\u003e\u003ccode\u003e5e1bae8\u003c/code\u003e\u003c/a\u003e ecc/p384: handle point doubling in point addition with Jacobian coordinates.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/341604685ff97e8f7440ae4b4711ba1c118c648c\"\u003e\u003ccode\u003e3416046\u003c/code\u003e\u003c/a\u003e Check opts for nil value.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/a763d47a6dce43d1f4f7b697d1d7810463a526f6\"\u003e\u003ccode\u003ea763d47\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3c70bf9ad53b681fbe5ba6067e454a86549fee8a\"\u003e\u003ccode\u003e3c70bf9\u003c/code\u003e\u003c/a\u003e Bump x/crypto x/sys dependencies.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3f0f15b2bfe67bad81a35e8aec81ae42ca78349d\"\u003e\u003ccode\u003e3f0f15b\u003c/code\u003e\u003c/a\u003e Revert to using package-declared HPKE errors for shortkem instead of standard...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/23491bd573cf29b6f567057a158203a2c9dfa30d\"\u003e\u003ccode\u003e23491bd\u003c/code\u003e\u003c/a\u003e Adding generic Power2Round method.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.4.0...v1.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/ulikunitz/xz` from 0.5.10 to 0.5.14\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ulikunitz/xz/commit/7184815834c4777e8fa665946721d5fe114c2c35\"\u003e\u003ccode\u003e7184815\u003c/code\u003e\u003c/a\u003e Preparation of release v0.5.14\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ulikunitz/xz/commit/88ddf1d0d98d688db65de034f48960b2760d2ae2\"\u003e\u003ccode\u003e88ddf1d\u003c/code\u003e\u003c/a\u003e Address Security Issue GHSA-jc7w-c686-c4v9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ulikunitz/xz/commit/c8314b8f21e9c5e25b52da07544cac14db277e89\"\u003e\u003ccode\u003ec8314b8\u003c/code\u003e\u003c/a\u003e Add new package xio with WriteCloserStack\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ulikunitz/xz/commit/4f11dce79b9977ec2976a978d6c594ea1c23cf29\"\u003e\u003ccode\u003e4f11dce\u003c/code\u003e\u003c/a\u003e Update README.md and SECURITY.md to address security questions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ulikunitz/xz/commit/f56ebbfaa2400067dcda8ade26ce912c2873ca08\"\u003e\u003ccode\u003ef56ebbf\u003c/code\u003e\u003c/a\u003e TODO.md: fix a typo\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ulikunitz/xz/commit/9d122a61c181b044e6b8b9c09979dfe7c513e2db\"\u003e\u003ccode\u003e9d122a6\u003c/code\u003e\u003c/a\u003e release version v0.5.11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ulikunitz/xz/commit/4ce6f08566c86bf66a9bc1c2f811336ae2e462c0\"\u003e\u003ccode\u003e4ce6f08\u003c/code\u003e\u003c/a\u003e lzma: fix handling of small dictionary sizes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ulikunitz/xz/commit/0b7c695d23f84aa7e968bbcaa1980847683d909a\"\u003e\u003ccode\u003e0b7c695\u003c/code\u003e\u003c/a\u003e xz: add reader benchmark\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ulikunitz/xz/commit/553507794087117cd9bdc95c924c1c5611bd991a\"\u003e\u003ccode\u003e5535077\u003c/code\u003e\u003c/a\u003e xz: add compression reate to Writer benchmark\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ulikunitz/xz/commit/886dc9acde193dec013d4812372011c64f6efbc2\"\u003e\u003ccode\u003e886dc9a\u003c/code\u003e\u003c/a\u003e xz: add benchmark for Writer\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ulikunitz/xz/compare/v0.5.10...v0.5.14\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp` from 1.19.0 to 1.43.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/releases\"\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease v1.23.0-rc.1\u003c/h2\u003e\n\u003cp\u003eThis is a release candidate for the v1.23.0 release. That release is expected to include the \u003ccode\u003ev1\u003c/code\u003e release of the following modules:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ego.opentelemetry.io/otel/bridge/opencensus\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ego.opentelemetry.io/otel/bridge/opencensus/test\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ego.opentelemetry.io/otel/example/opencensus\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ego.opentelemetry.io/otel/exporters/stdout/stdoutmetric\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSee our \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/8f2bdf85ed99c6532b8c76688e7ffcf9e48c3e6d/VERSIONING.md\"\u003eversioning policy\u003c/a\u003e for more information about these stability guarantees.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\"\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.43.0/0.65.0/0.19.0] 2026-04-02\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eIsRandom\u003c/code\u003e and \u003ccode\u003eWithRandom\u003c/code\u003e on \u003ccode\u003eTraceFlags\u003c/code\u003e, and \u003ccode\u003eIsRandom\u003c/code\u003e on \u003ccode\u003eSpanContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/trace\u003c/code\u003e for \u003ca href=\"https://www.w3.org/TR/trace-context-2/#random-trace-id-flag\"\u003eW3C Trace Context Level 2 Random Trace ID Flag\u003c/a\u003e support. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012\"\u003e#8012\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd service detection with \u003ccode\u003eWithService\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642\"\u003e#7642\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eDefaultWithContext\u003c/code\u003e and \u003ccode\u003eEnvironmentWithContext\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to support plumbing \u003ccode\u003econtext.Context\u003c/code\u003e through default and environment detectors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051\"\u003e#8051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport attributes with empty value (\u003ccode\u003eattribute.EMPTY\u003c/code\u003e) in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd support for per-series start time tracking for cumulative metrics in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e.\nSet \u003ccode\u003eOTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true\u003c/code\u003e to enable. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060\"\u003e#8060\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eWithCardinalityLimitSelector\u003c/code\u003e for metric reader for configuring cardinality limits specific to the instrument kind. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855\"\u003e#7855\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce the \u003ccode\u003eEMPTY\u003c/code\u003e Type in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to reflect that an empty value is now a valid value, with \u003ccode\u003eINVALID\u003c/code\u003e remaining as a deprecated alias of \u003ccode\u003eEMPTY\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove slice handling in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e to optimize short slice values with fixed-size fast paths. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039\"\u003e#8039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance of span metric recording in \u003ccode\u003ego.opentelemetry.io/otel/sdk/trace\u003c/code\u003e by returning early if self-observability is not enabled. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067\"\u003e#8067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove formatting of metric data diffs in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073\"\u003e#8073\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeprecated\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003eINVALID\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/attribute\u003c/code\u003e. Use \u003ccode\u003eEMPTY\u003c/code\u003e instead. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038\"\u003e#8038\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReturn spec-compliant \u003ccode\u003eTraceIdRatioBased\u003c/code\u003e description. This is a breaking behavioral change, but it is necessary to\nmake the implementation \u003ca href=\"https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased\"\u003espec-compliant\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027\"\u003e#8027\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix a race condition in \u003ccode\u003ego.opentelemetry.io/otel/sdk/metric\u003c/code\u003e where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056\"\u003e#8056\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLimit HTTP response body to 4 MiB in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to mitigate excessive memory usage caused by a misconfigured or malicious server.\nResponses exceeding the limit are treated as non-retryable errors. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWithHostID\u003c/code\u003e detector in \u003ccode\u003ego.opentelemetry.io/otel/sdk/resource\u003c/code\u003e to use full path for \u003ccode\u003ekenv\u003c/code\u003e command on BSD. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing \u003ccode\u003erequest.GetBody\u003c/code\u003e in \u003ccode\u003ego.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp\u003c/code\u003e to correctly handle HTTP2 GOAWAY frame. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.40.0\u003c/code\u003e package.\nThe package contains semantic conventions from the \u003ccode\u003ev1.40.0\u003c/code\u003e version of the OpenTelemetry Semantic Conventions.\nSee the \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md\"\u003emigration documentation\u003c/a\u003e for information on how to upgrade from \u003ccode\u003ego.opentelemetry.io/otel/semconv/v1.39.0\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985\"\u003e#7985\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/9276201a64b623606e3eaa0d61ae8ee6d62756c0\"\u003e\u003ccode\u003e9276201\u003c/code\u003e\u003c/a\u003e Release v1.43.0 / v0.65.0 / v0.19.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8128\"\u003e#8128\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/61b8c9466c4e6b17e69b622279fe9b63fb15c89a\"\u003e\u003ccode\u003e61b8c94\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8131\"\u003e#8131\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/97a086e82ffe01502f4c620e9c447efa229e2a23\"\u003e\u003ccode\u003e97a086e\u003c/code\u003e\u003c/a\u003e chore(deps): update github.com/golangci/dupl digest to c99c5cf (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8122\"\u003e#8122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/5e363de517dba6db62736b2f5cdef0e0929b4cd0\"\u003e\u003ccode\u003e5e363de\u003c/code\u003e\u003c/a\u003e limit response body size for OTLP HTTP exporters (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108\"\u003e#8108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/35214b60138eac8dec97a2d2b851d8c8471680c7\"\u003e\u003ccode\u003e35214b6\u003c/code\u003e\u003c/a\u003e Use an absolute path when calling bsd kenv (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113\"\u003e#8113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/290024ceaf695f9cdbf29a0c6731a317d92bc361\"\u003e\u003ccode\u003e290024c\u003c/code\u003e\u003c/a\u003e fix(deps): update module google.golang.org/grpc to v1.80.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8121\"\u003e#8121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/e70658e098033d6bb5ec1b399de16bbb2642f6dc\"\u003e\u003ccode\u003ee70658e\u003c/code\u003e\u003c/a\u003e fix: support getBody in otelploghttp (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096\"\u003e#8096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/4afe468e3b4859c949a1c1e8d92684d43d86ef8a\"\u003e\u003ccode\u003e4afe468\u003c/code\u003e\u003c/a\u003e fix(deps): update googleapis to 9d38bb4 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8117\"\u003e#8117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/b9ca729776309e3c08fe700c131797a3b4d10634\"\u003e\u003ccode\u003eb9ca729\u003c/code\u003e\u003c/a\u003e chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8115\"\u003e#8115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/commit/69472ec56cb7674d55ca2e2bcb04dea73228ab79\"\u003e\u003ccode\u003e69472ec\u003c/code\u003e\u003c/a\u003e chore(deps): update fossas/fossa-action action to v1.9.0 (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8118\"\u003e#8118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-go/compare/v1.19.0...v1.43.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.36.0 to 0.45.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/4e0068c0098be10d7025c99ab7c50ce454c1f0f9\"\u003e\u003ccode\u003e4e0068c\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e79546e28b85ea53dd37afe1c4102746ef553b9c\"\u003e\u003ccode\u003ee79546e\u003c/code\u003e\u003c/a\u003e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f91f7a7c31bf90b39c1de895ad116a2bacc88748\"\u003e\u003ccode\u003ef91f7a7\u003c/code\u003e\u003c/a\u003e ssh/agent: prevent panic on malformed constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/2df4153a0311bdfea44376e0eb6ef2faefb0275b\"\u003e\u003ccode\u003e2df4153\u003c/code\u003e\u003c/a\u003e acme/autocert: let automatic renewal work with short lifetime certs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/bcf6a849efcf4702fa5172cb0998b46c3da1e989\"\u003e\u003ccode\u003ebcf6a84\u003c/code\u003e\u003c/a\u003e acme: pass context to request\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b4f2b62076abeee4e43fb59544dac565715fbf1e\"\u003e\u003ccode\u003eb4f2b62\u003c/code\u003e\u003c/a\u003e ssh: fix error message on unsupported cipher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/79ec3a51fcc7fbd2691d56155d578225ccc542e2\"\u003e\u003ccode\u003e79ec3a5\u003c/code\u003e\u003c/a\u003e ssh: allow to bind to a hostname in remote forwarding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/122a78f140d9d3303ed3261bc374bbbca149140f\"\u003e\u003ccode\u003e122a78f\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/c0531f9c34514ad5c5551e2d6ce569ca673a8afd\"\u003e\u003ccode\u003ec0531f9\u003c/code\u003e\u003c/a\u003e all: eliminate vet diagnostics\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/0997000b45e3a40598272081bcad03ffd21b8adb\"\u003e\u003ccode\u003e0997000\u003c/code\u003e\u003c/a\u003e all: fix some comments\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.36.0...v0.45.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.36.0 to 0.45.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/4e0068c0098be10d7025c99ab7c50ce454c1f0f9\"\u003e\u003ccode\u003e4e0068c\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e79546e28b85ea53dd37afe1c4102746ef553b9c\"\u003e\u003ccode\u003ee79546e\u003c/code\u003e\u003c/a\u003e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f91f7a7c31bf90b39c1de895ad116a2bacc88748\"\u003e\u003ccode\u003ef91f7a7\u003c/code\u003e\u003c/a\u003e ssh/agent: prevent panic on malformed constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/2df4153a0311bdfea44376e0eb6ef2faefb0275b\"\u003e\u003ccode\u003e2df4153\u003c/code\u003e\u003c/a\u003e acme/autocert: let automatic renewal work with short lifetime certs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/bcf6a849efcf4702fa5172cb0998b46c3da1e989\"\u003e\u003ccode\u003ebcf6a84\u003c/code\u003e\u003c/a\u003e acme: pass context to request\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b4f2b62076abeee4e43fb59544dac565715fbf1e\"\u003e\u003ccode\u003eb4f2b62\u003c/code\u003e\u003c/a\u003e ssh: fix error message on unsupported cipher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/79ec3a51fcc7fbd2691d56155d578225ccc542e2\"\u003e\u003ccode\u003e79ec3a5\u003c/code\u003e\u003c/a\u003e ssh: allow to bind to a hostname in remote forwarding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/122a78f140d9d3303ed3261bc374bbbca149140f\"\u003e\u003ccode\u003e122a78f\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/c0531f9c34514ad5c5551e2d6ce569ca673a8afd\"\u003e\u003ccode\u003ec0531f9\u003c/code\u003e\u003c/a\u003e all: eliminate vet diagnostics\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/0997000b45e3a40598272081bcad03ffd21b8adb\"\u003e\u003ccode\u003e0997000\u003c/code\u003e\u003c/a\u003e all: fix some comments\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.36.0...v0.45.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google.golang.org/grpc` fro...\n\n_Description has been truncated_","html_url":"https://github.com/Sin-Estres-dev/terraform/pull/5","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Sin-Estres-dev%2Fterraform/issues/5","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/5/packages"}},{"old_version":"1.5.0","new_version":"1.6.3","update_type":"minor","path":null,"pr_created_at":"2026-04-08T02:57:54.000Z","version_change":"1.5.0 → 1.6.3","issue":{"uuid":"4221770763","node_id":"PR_kwDONtFecc7QrU1Y","number":8,"state":"closed","title":"Bump the go_modules group across 3 directories with 12 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-04-10T18:23:21.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-08T02:57:54.000Z","updated_at":"2026-04-10T18:23:23.000Z","time_to_close":228327,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"go_modules","update_count":12,"packages":[{"name":"golang.org/x/crypto","old_version":"0.31.0","new_version":"0.45.0","repository_url":"https://github.com/golang/crypto"},{"name":"github.com/cloudflare/circl","old_version":"1.5.0","new_version":"1.6.3","repository_url":"https://github.com/cloudflare/circl"},{"name":"google.golang.org/grpc","old_version":"1.68.1","new_version":"1.79.3","repository_url":"https://github.com/grpc/grpc-go"},{"name":"github.com/go-git/go-git/v5","old_version":"5.12.0","new_version":"5.17.1","repository_url":"https://github.com/go-git/go-git"},{"name":"github.com/go-viper/mapstructure/v2","old_version":"2.2.1","new_version":"2.4.0","repository_url":"https://github.com/go-viper/mapstructure"},{"name":"github.com/golang-jwt/jwt/v4","old_version":"4.5.1","new_version":"4.5.2","repository_url":"https://github.com/golang-jwt/jwt"},{"name":"github.com/hashicorp/go-getter","old_version":"1.7.6","new_version":"1.7.9","repository_url":"https://github.com/hashicorp/go-getter"},{"name":"github.com/ulikunitz/xz","old_version":"0.5.12","new_version":"0.5.14","repository_url":"https://github.com/ulikunitz/xz"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 3 updates in the /.ci/providerlint directory: [golang.org/x/crypto](https://github.com/golang/crypto), [github.com/cloudflare/circl](https://github.com/cloudflare/circl) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 8 updates in the /.ci/tools directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.31.0` | `0.45.0` |\n| [github.com/cloudflare/circl](https://github.com/cloudflare/circl) | `1.5.0` | `1.6.3` |\n| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.68.1` | `1.79.3` |\n| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.12.0` | `5.17.1` |\n| [github.com/go-viper/mapstructure/v2](https://github.com/go-viper/mapstructure) | `2.2.1` | `2.4.0` |\n| [github.com/golang-jwt/jwt/v4](https://github.com/golang-jwt/jwt) | `4.5.1` | `4.5.2` |\n| [github.com/hashicorp/go-getter](https://github.com/hashicorp/go-getter) | `1.7.6` | `1.7.9` |\n| [github.com/ulikunitz/xz](https://github.com/ulikunitz/xz) | `0.5.12` | `0.5.14` |\n\nBumps the go_modules group with 3 updates in the /tools/tfsdk2fw directory: [golang.org/x/crypto](https://github.com/golang/crypto), [github.com/cloudflare/circl](https://github.com/cloudflare/circl) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\n\nUpdates `golang.org/x/crypto` from 0.32.0 to 0.45.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/4e0068c0098be10d7025c99ab7c50ce454c1f0f9\"\u003e\u003ccode\u003e4e0068c\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e79546e28b85ea53dd37afe1c4102746ef553b9c\"\u003e\u003ccode\u003ee79546e\u003c/code\u003e\u003c/a\u003e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f91f7a7c31bf90b39c1de895ad116a2bacc88748\"\u003e\u003ccode\u003ef91f7a7\u003c/code\u003e\u003c/a\u003e ssh/agent: prevent panic on malformed constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/2df4153a0311bdfea44376e0eb6ef2faefb0275b\"\u003e\u003ccode\u003e2df4153\u003c/code\u003e\u003c/a\u003e acme/autocert: let automatic renewal work with short lifetime certs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/bcf6a849efcf4702fa5172cb0998b46c3da1e989\"\u003e\u003ccode\u003ebcf6a84\u003c/code\u003e\u003c/a\u003e acme: pass context to request\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b4f2b62076abeee4e43fb59544dac565715fbf1e\"\u003e\u003ccode\u003eb4f2b62\u003c/code\u003e\u003c/a\u003e ssh: fix error message on unsupported cipher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/79ec3a51fcc7fbd2691d56155d578225ccc542e2\"\u003e\u003ccode\u003e79ec3a5\u003c/code\u003e\u003c/a\u003e ssh: allow to bind to a hostname in remote forwarding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/122a78f140d9d3303ed3261bc374bbbca149140f\"\u003e\u003ccode\u003e122a78f\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/c0531f9c34514ad5c5551e2d6ce569ca673a8afd\"\u003e\u003ccode\u003ec0531f9\u003c/code\u003e\u003c/a\u003e all: eliminate vet diagnostics\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/0997000b45e3a40598272081bcad03ffd21b8adb\"\u003e\u003ccode\u003e0997000\u003c/code\u003e\u003c/a\u003e all: fix some comments\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.32.0...v0.45.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/cloudflare/circl` from 1.5.0 to 1.6.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cloudflare/circl/releases\"\u003egithub.com/cloudflare/circl's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eCIRCL v1.6.3\u003c/h2\u003e\n\u003cp\u003eFix a bug on ecc/p384 scalar multiplication.\u003c/p\u003e\n\u003ch3\u003eWhat's Changed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esign/mldsa: Check opts for nil value  by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/582\"\u003ecloudflare/circl#582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eecc/p384: Point addition must handle point doubling case. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/583\"\u003ecloudflare/circl#583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease CIRCL v1.6.3 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/584\"\u003ecloudflare/circl#584\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNew SLH-DSA, improvements in ML-DSA for arm64.\u003c/li\u003e\n\u003cli\u003eTested compilation on WASM.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize pairing product computation by moving exponentiations to G1. by \u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esign: Adding SLH-DSA signature by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/512\"\u003ecloudflare/circl#512\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate code generators to CIRCL v1.6.1. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/548\"\u003ecloudflare/circl#548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eML-DSA: Add preliminary Wycheproof test vectors by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/552\"\u003ecloudflare/circl#552\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ego fmt by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/554\"\u003ecloudflare/circl#554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egz-compressing test vectors, use of HexBytes and ReadGzip functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/555\"\u003ecloudflare/circl#555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Removes use of elliptic Marshal and Unmarshal functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/556\"\u003ecloudflare/circl#556\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport encoding/decoding ML-DSA private keys (as long as they contain seeds) by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/559\"\u003ecloudflare/circl#559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to golangci-lint v2 by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/560\"\u003ecloudflare/circl#560\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreparation for ARM64 Implementation of poly operations for dilithium package. by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eprepare power2Round for custom implementations in assembly by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/564\"\u003ecloudflare/circl#564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eARM64 implementation for poly.PackLe16 by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/563\"\u003ecloudflare/circl#563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polyMulBy2toD by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/565\"\u003ecloudflare/circl#565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polySub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/566\"\u003ecloudflare/circl#566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: add byteLen method for short groups and RandomScalar uses rand.Int by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/568\"\u003ecloudflare/circl#568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of poly.Add/Sub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/572\"\u003ecloudflare/circl#572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Adding cryptobyte marshaling to scalars by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/569\"\u003ecloudflare/circl#569\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumping up to Go1.25 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/574\"\u003ecloudflare/circl#574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: Including WASM compilation. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/577\"\u003ecloudflare/circl#577\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to using package-declared HPKE errors for shortkem instead of standard library errors by \u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease v1.6.2 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/579\"\u003ecloudflare/circl#579\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixes some point checks on the FourQ curve.\u003c/li\u003e\n\u003cli\u003eHybrid KEM fails on low-order points.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/24ae53c5d6f7fe18203adc125ba3ed76a38703e1\"\u003e\u003ccode\u003e24ae53c\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/581020bd4a836b8ce7bd4e414ba2884c07dbc906\"\u003e\u003ccode\u003e581020b\u003c/code\u003e\u003c/a\u003e Rename method to oddMultiplesProjective.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/12209a4566605692a8402594e367a5aed5148460\"\u003e\u003ccode\u003e12209a4\u003c/code\u003e\u003c/a\u003e Removing unused cmov for jacobian points.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/fcba359f4178645d2c9e50f29ab6966337da4b95\"\u003e\u003ccode\u003efcba359\u003c/code\u003e\u003c/a\u003e ecc/p384: use of complete projective formulas for scalar multiplication.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/5e1bae8d8c2df4e717c2c5c2d5b5d60b629b2ac6\"\u003e\u003ccode\u003e5e1bae8\u003c/code\u003e\u003c/a\u003e ecc/p384: handle point doubling in point addition with Jacobian coordinates.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/341604685ff97e8f7440ae4b4711ba1c118c648c\"\u003e\u003ccode\u003e3416046\u003c/code\u003e\u003c/a\u003e Check opts for nil value.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/a763d47a6dce43d1f4f7b697d1d7810463a526f6\"\u003e\u003ccode\u003ea763d47\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3c70bf9ad53b681fbe5ba6067e454a86549fee8a\"\u003e\u003ccode\u003e3c70bf9\u003c/code\u003e\u003c/a\u003e Bump x/crypto x/sys dependencies.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3f0f15b2bfe67bad81a35e8aec81ae42ca78349d\"\u003e\u003ccode\u003e3f0f15b\u003c/code\u003e\u003c/a\u003e Revert to using package-declared HPKE errors for shortkem instead of standard...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/23491bd573cf29b6f567057a158203a2c9dfa30d\"\u003e\u003ccode\u003e23491bd\u003c/code\u003e\u003c/a\u003e Adding generic Power2Round method.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.5.0...v1.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.34.0 to 0.47.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/9a296438e54dff851a45667aa645a97003b44db5\"\u003e\u003ccode\u003e9a29643\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/07cefd8a6bb170785052142a96034f2b2f7115bc\"\u003e\u003ccode\u003e07cefd8\u003c/code\u003e\u003c/a\u003e context: deprecate\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/5ac9daca088ab4f378d7df849f6c7d28bea86071\"\u003e\u003ccode\u003e5ac9dac\u003c/code\u003e\u003c/a\u003e publicsuffix: don't treat ip addresses as domain names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/d1f64cc67036f272ea900194674afcf71eb3e816\"\u003e\u003ccode\u003ed1f64cc\u003c/code\u003e\u003c/a\u003e quic: use testing/synctest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/fff0469cf57f71bea0cbc4cc8cbfb8f92be7a417\"\u003e\u003ccode\u003efff0469\u003c/code\u003e\u003c/a\u003e http2: document that RFC 7540 prioritization does not work with small payloads\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/f35e3a4dd2a34d1d47fac5b66210a40e2d374a79\"\u003e\u003ccode\u003ef35e3a4\u003c/code\u003e\u003c/a\u003e http2: fix weight overflow in RFC 7540 write scheduler\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/89adc90ac46a688eeda3a4a95b71acf073bd059c\"\u003e\u003ccode\u003e89adc90\u003c/code\u003e\u003c/a\u003e http2: fix typo referring to RFC 9218 as RFC 9128 instead\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/8d76a2c082f6f995c2ef1ce8a0d56f2e33b48092\"\u003e\u003ccode\u003e8d76a2c\u003c/code\u003e\u003c/a\u003e quic: don't defer MAX_STREAMS frames indefinitely\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/027f8b700eb72af5c0175a945535a42670628351\"\u003e\u003ccode\u003e027f8b7\u003c/code\u003e\u003c/a\u003e quic: fix expected ACK Delay in client's ACK after HANDSHAKE_DONE\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/dec9fe711ec1385a2aa169a3f8145d295abcca16\"\u003e\u003ccode\u003edec9fe7\u003c/code\u003e\u003c/a\u003e dns/dnsmessage: update SVCB packing to prohibit name compression\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.34.0...v0.47.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google.golang.org/grpc` from 1.67.1 to 1.79.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc-go/releases\"\u003egoogle.golang.org/grpc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 1.79.3\u003c/h2\u003e\n\u003ch1\u003eSecurity\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eserver: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted \u0026quot;deny\u0026quot; rules in interceptors like \u003ccode\u003egrpc/authz\u003c/code\u003e. Any request with a non-canonical path is now immediately rejected with an \u003ccode\u003eUnimplemented\u003c/code\u003e error. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.2\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003estats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8874\"\u003egrpc/grpc-go#8874\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.1\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003egrpc: Remove the \u003ccode\u003e-dev\u003c/code\u003e suffix from the User-Agent header. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8902\"\u003egrpc/grpc-go#8902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.0\u003c/h2\u003e\n\u003ch1\u003eAPI Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003emem: Add experimental API \u003ccode\u003eSetDefaultBufferPool\u003c/code\u003e to change the default buffer pool. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8806\"\u003e#8806\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/vanja-p\"\u003e\u003ccode\u003e@​vanja-p\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eexperimental/stats: Update \u003ccode\u003eMetricsRecorder\u003c/code\u003e to require embedding the new \u003ccode\u003eUnimplementedMetricsRecorder\u003c/code\u003e (a no-op struct) in all implementations for forward compatibility. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBehavior Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ebalancer/weightedtarget: Remove handling of \u003ccode\u003eAddresses\u003c/code\u003e and only handle \u003ccode\u003eEndpoints\u003c/code\u003e in resolver updates. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8841\"\u003e#8841\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eNew Features\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eexperimental/stats: Add support for asynchronous gauge metrics through the new \u003ccode\u003eAsyncMetricReporter\u003c/code\u003e and \u003ccode\u003eRegisterAsyncReporter\u003c/code\u003e APIs. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epickfirst: Add support for weighted random shuffling of endpoints, as described in \u003ca href=\"https://redirect.github.com/grpc/proposal/pull/535\"\u003egRFC A113\u003c/a\u003e.\n\u003cul\u003e\n\u003cli\u003eThis is enabled by default, and can be turned off using the environment variable \u003ccode\u003eGRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds: Implement \u003ccode\u003e:authority\u003c/code\u003e rewriting, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A81-xds-authority-rewriting.md\"\u003egRFC A81\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8779\"\u003e#8779\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebalancer/randomsubsetting: Implement the \u003ccode\u003erandom_subsetting\u003c/code\u003e LB policy, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A68-random-subsetting.md\"\u003egRFC A68\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8650\"\u003e#8650\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/marek-szews\"\u003e\u003ccode\u003e@​marek-szews\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/tls: Fix a bug where the port was not stripped from the authority override before validation. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8726\"\u003e#8726\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/Atul1710\"\u003e\u003ccode\u003e@​Atul1710\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds/priority: Fix a bug causing delayed failover to lower-priority clusters when a higher-priority cluster is stuck in \u003ccode\u003eCONNECTING\u003c/code\u003e state. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8813\"\u003e#8813\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ehealth: Fix a bug where health checks failed for clients using legacy compression options (\u003ccode\u003eWithDecompressor\u003c/code\u003e or \u003ccode\u003eRPCDecompressor\u003c/code\u003e). (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8765\"\u003e#8765\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/sanki92\"\u003e\u003ccode\u003e@​sanki92\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003etransport: Fix an issue where the HTTP/2 server could skip header size checks when terminating a stream early. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8769\"\u003e#8769\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eserver: Propagate status detail headers, if available, when terminating a stream during request header processing. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8754\"\u003e#8754\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ePerformance Improvements\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/alts: Optimize read buffer alignment to reduce copies. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8791\"\u003e#8791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emem: Optimize pooling and creation of \u003ccode\u003ebuffer\u003c/code\u003e objects.  (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8784\"\u003e#8784\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etransport: Reduce slice re-allocations by reserving slice capacity. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8797\"\u003e#8797\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/dda86dbd9cecb8b35b58c73d507d81d67761205f\"\u003e\u003ccode\u003edda86db\u003c/code\u003e\u003c/a\u003e Change version to 1.79.3 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8983\"\u003e#8983\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/72186f163e75a065c39e6f7df9b6dea07fbdeff5\"\u003e\u003ccode\u003e72186f1\u003c/code\u003e\u003c/a\u003e grpc: enforce strict path checking for incoming requests on the server (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/97ca3522b239edf6813e2b1106924e9d55e89d43\"\u003e\u003ccode\u003e97ca352\u003c/code\u003e\u003c/a\u003e Changing version to 1.79.3-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8954\"\u003e#8954\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/8902ab6efea590f5b3861126559eaa26fa9783b2\"\u003e\u003ccode\u003e8902ab6\u003c/code\u003e\u003c/a\u003e Change the version to release 1.79.2 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8947\"\u003e#8947\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/a9286705aa689bee321ec674323b6896284f3e02\"\u003e\u003ccode\u003ea928670\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8874\"\u003e#8874\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8904\"\u003e#8904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/06df3638c0bcee88197b1033b3ba83e1eb8bc010\"\u003e\u003ccode\u003e06df363\u003c/code\u003e\u003c/a\u003e Change version to 1.79.2-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8903\"\u003e#8903\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/782f2de44f597af18a120527e7682a6670d84289\"\u003e\u003ccode\u003e782f2de\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8902\"\u003e#8902\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/850eccbb2257bd2de6ac28ee88a7172ab6175629\"\u003e\u003ccode\u003e850eccb\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8851\"\u003e#8851\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/765ff056b6890f6c8341894df4e9668e9bfc18ef\"\u003e\u003ccode\u003e765ff05\u003c/code\u003e\u003c/a\u003e Change version to 1.79.0 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8850\"\u003e#8850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/68804be0e78ed0365bb5a576dedc12e2168ed63e\"\u003e\u003ccode\u003e68804be\u003c/code\u003e\u003c/a\u003e Cherry pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8896\"\u003e#8896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/grpc/grpc-go/compare/v1.67.1...v1.79.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.31.0 to 0.45.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/4e0068c0098be10d7025c99ab7c50ce454c1f0f9\"\u003e\u003ccode\u003e4e0068c\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e79546e28b85ea53dd37afe1c4102746ef553b9c\"\u003e\u003ccode\u003ee79546e\u003c/code\u003e\u003c/a\u003e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f91f7a7c31bf90b39c1de895ad116a2bacc88748\"\u003e\u003ccode\u003ef91f7a7\u003c/code\u003e\u003c/a\u003e ssh/agent: prevent panic on malformed constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/2df4153a0311bdfea44376e0eb6ef2faefb0275b\"\u003e\u003ccode\u003e2df4153\u003c/code\u003e\u003c/a\u003e acme/autocert: let automatic renewal work with short lifetime certs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/bcf6a849efcf4702fa5172cb0998b46c3da1e989\"\u003e\u003ccode\u003ebcf6a84\u003c/code\u003e\u003c/a\u003e acme: pass context to request\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b4f2b62076abeee4e43fb59544dac565715fbf1e\"\u003e\u003ccode\u003eb4f2b62\u003c/code\u003e\u003c/a\u003e ssh: fix error message on unsupported cipher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/79ec3a51fcc7fbd2691d56155d578225ccc542e2\"\u003e\u003ccode\u003e79ec3a5\u003c/code\u003e\u003c/a\u003e ssh: allow to bind to a hostname in remote forwarding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/122a78f140d9d3303ed3261bc374bbbca149140f\"\u003e\u003ccode\u003e122a78f\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/c0531f9c34514ad5c5551e2d6ce569ca673a8afd\"\u003e\u003ccode\u003ec0531f9\u003c/code\u003e\u003c/a\u003e all: eliminate vet diagnostics\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/0997000b45e3a40598272081bcad03ffd21b8adb\"\u003e\u003ccode\u003e0997000\u003c/code\u003e\u003c/a\u003e all: fix some comments\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.32.0...v0.45.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/cloudflare/circl` from 1.5.0 to 1.6.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cloudflare/circl/releases\"\u003egithub.com/cloudflare/circl's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eCIRCL v1.6.3\u003c/h2\u003e\n\u003cp\u003eFix a bug on ecc/p384 scalar multiplication.\u003c/p\u003e\n\u003ch3\u003eWhat's Changed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esign/mldsa: Check opts for nil value  by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/582\"\u003ecloudflare/circl#582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eecc/p384: Point addition must handle point doubling case. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/583\"\u003ecloudflare/circl#583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease CIRCL v1.6.3 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/584\"\u003ecloudflare/circl#584\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNew SLH-DSA, improvements in ML-DSA for arm64.\u003c/li\u003e\n\u003cli\u003eTested compilation on WASM.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize pairing product computation by moving exponentiations to G1. by \u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esign: Adding SLH-DSA signature by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/512\"\u003ecloudflare/circl#512\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate code generators to CIRCL v1.6.1. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/548\"\u003ecloudflare/circl#548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eML-DSA: Add preliminary Wycheproof test vectors by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/552\"\u003ecloudflare/circl#552\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ego fmt by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/554\"\u003ecloudflare/circl#554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egz-compressing test vectors, use of HexBytes and ReadGzip functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/555\"\u003ecloudflare/circl#555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Removes use of elliptic Marshal and Unmarshal functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/556\"\u003ecloudflare/circl#556\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport encoding/decoding ML-DSA private keys (as long as they contain seeds) by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/559\"\u003ecloudflare/circl#559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to golangci-lint v2 by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/560\"\u003ecloudflare/circl#560\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreparation for ARM64 Implementation of poly operations for dilithium package. by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eprepare power2Round for custom implementations in assembly by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/564\"\u003ecloudflare/circl#564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eARM64 implementation for poly.PackLe16 by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/563\"\u003ecloudflare/circl#563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polyMulBy2toD by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/565\"\u003ecloudflare/circl#565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polySub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/566\"\u003ecloudflare/circl#566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: add byteLen method for short groups and RandomScalar uses rand.Int by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/568\"\u003ecloudflare/circl#568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of poly.Add/Sub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/572\"\u003ecloudflare/circl#572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Adding cryptobyte marshaling to scalars by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/569\"\u003ecloudflare/circl#569\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumping up to Go1.25 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/574\"\u003ecloudflare/circl#574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: Including WASM compilation. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/577\"\u003ecloudflare/circl#577\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to using package-declared HPKE errors for shortkem instead of standard library errors by \u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease v1.6.2 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/579\"\u003ecloudflare/circl#579\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixes some point checks on the FourQ curve.\u003c/li\u003e\n\u003cli\u003eHybrid KEM fails on low-order points.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/24ae53c5d6f7fe18203adc125ba3ed76a38703e1\"\u003e\u003ccode\u003e24ae53c\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/581020bd4a836b8ce7bd4e414ba2884c07dbc906\"\u003e\u003ccode\u003e581020b\u003c/code\u003e\u003c/a\u003e Rename method to oddMultiplesProjective.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/12209a4566605692a8402594e367a5aed5148460\"\u003e\u003ccode\u003e12209a4\u003c/code\u003e\u003c/a\u003e Removing unused cmov for jacobian points.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/fcba359f4178645d2c9e50f29ab6966337da4b95\"\u003e\u003ccode\u003efcba359\u003c/code\u003e\u003c/a\u003e ecc/p384: use of complete projective formulas for scalar multiplication.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/5e1bae8d8c2df4e717c2c5c2d5b5d60b629b2ac6\"\u003e\u003ccode\u003e5e1bae8\u003c/code\u003e\u003c/a\u003e ecc/p384: handle point doubling in point addition with Jacobian coordinates.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/341604685ff97e8f7440ae4b4711ba1c118c648c\"\u003e\u003ccode\u003e3416046\u003c/code\u003e\u003c/a\u003e Check opts for nil value.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/a763d47a6dce43d1f4f7b697d1d7810463a526f6\"\u003e\u003ccode\u003ea763d47\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3c70bf9ad53b681fbe5ba6067e454a86549fee8a\"\u003e\u003ccode\u003e3c70bf9\u003c/code\u003e\u003c/a\u003e Bump x/crypto x/sys dependencies.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3f0f15b2bfe67bad81a35e8aec81ae42ca78349d\"\u003e\u003ccode\u003e3f0f15b\u003c/code\u003e\u003c/a\u003e Revert to using package-declared HPKE errors for shortkem instead of standard...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/23491bd573cf29b6f567057a158203a2c9dfa30d\"\u003e\u003ccode\u003e23491bd\u003c/code\u003e\u003c/a\u003e Adding generic Power2Round method.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.5.0...v1.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.32.0 to 0.47.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/9a296438e54dff851a45667aa645a97003b44db5\"\u003e\u003ccode\u003e9a29643\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/07cefd8a6bb170785052142a96034f2b2f7115bc\"\u003e\u003ccode\u003e07cefd8\u003c/code\u003e\u003c/a\u003e context: deprecate\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/5ac9daca088ab4f378d7df849f6c7d28bea86071\"\u003e\u003ccode\u003e5ac9dac\u003c/code\u003e\u003c/a\u003e publicsuffix: don't treat ip addresses as domain names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/d1f64cc67036f272ea900194674afcf71eb3e816\"\u003e\u003ccode\u003ed1f64cc\u003c/code\u003e\u003c/a\u003e quic: use testing/synctest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/fff0469cf57f71bea0cbc4cc8cbfb8f92be7a417\"\u003e\u003ccode\u003efff0469\u003c/code\u003e\u003c/a\u003e http2: document that RFC 7540 prioritization does not work with small payloads\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/f35e3a4dd2a34d1d47fac5b66210a40e2d374a79\"\u003e\u003ccode\u003ef35e3a4\u003c/code\u003e\u003c/a\u003e http2: fix weight overflow in RFC 7540 write scheduler\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/89adc90ac46a688eeda3a4a95b71acf073bd059c\"\u003e\u003ccode\u003e89adc90\u003c/code\u003e\u003c/a\u003e http2: fix typo referring to RFC 9218 as RFC 9128 instead\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/8d76a2c082f6f995c2ef1ce8a0d56f2e33b48092\"\u003e\u003ccode\u003e8d76a2c\u003c/code\u003e\u003c/a\u003e quic: don't defer MAX_STREAMS frames indefinitely\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/027f8b700eb72af5c0175a945535a42670628351\"\u003e\u003ccode\u003e027f8b7\u003c/code\u003e\u003c/a\u003e quic: fix expected ACK Delay in client's ACK after HANDSHAKE_DONE\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/dec9fe711ec1385a2aa169a3f8145d295abcca16\"\u003e\u003ccode\u003edec9fe7\u003c/code\u003e\u003c/a\u003e dns/dnsmessage: update SVCB packing to prohibit name compression\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.34.0...v0.47.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google.golang.org/grpc` from 1.68.1 to 1.79.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc-go/releases\"\u003egoogle.golang.org/grpc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 1.79.3\u003c/h2\u003e\n\u003ch1\u003eSecurity\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eserver: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted \u0026quot;deny\u0026quot; rules in interceptors like \u003ccode\u003egrpc/authz\u003c/code\u003e. Any request with a non-canonical path is now immediately rejected with an \u003ccode\u003eUnimplemented\u003c/code\u003e error. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.2\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003estats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8874\"\u003egrpc/grpc-go#8874\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.1\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003egrpc: Remove the \u003ccode\u003e-dev\u003c/code\u003e suffix from the User-Agent header. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8902\"\u003egrpc/grpc-go#8902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.0\u003c/h2\u003e\n\u003ch1\u003eAPI Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003emem: Add experimental API \u003ccode\u003eSetDefaultBufferPool\u003c/code\u003e to change the default buffer pool. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8806\"\u003e#8806\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/vanja-p\"\u003e\u003ccode\u003e@​vanja-p\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eexperimental/stats: Update \u003ccode\u003eMetricsRecorder\u003c/code\u003e to require embedding the new \u003ccode\u003eUnimplementedMetricsRecorder\u003c/code\u003e (a no-op struct) in all implementations for forward compatibility. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBehavior Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ebalancer/weightedtarget: Remove handling of \u003ccode\u003eAddresses\u003c/code\u003e and only handle \u003ccode\u003eEndpoints\u003c/code\u003e in resolver updates. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8841\"\u003e#8841\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eNew Features\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eexperimental/stats: Add support for asynchronous gauge metrics through the new \u003ccode\u003eAsyncMetricReporter\u003c/code\u003e and \u003ccode\u003eRegisterAsyncReporter\u003c/code\u003e APIs. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epickfirst: Add support for weighted random shuffling of endpoints, as described in \u003ca href=\"https://redirect.github.com/grpc/proposal/pull/535\"\u003egRFC A113\u003c/a\u003e.\n\u003cul\u003e\n\u003cli\u003eThis is enabled by default, and can be turned off using the environment variable \u003ccode\u003eGRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds: Implement \u003ccode\u003e:authority\u003c/code\u003e rewriting, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A81-xds-authority-rewriting.md\"\u003egRFC A81\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8779\"\u003e#8779\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebalancer/randomsubsetting: Implement the \u003ccode\u003erandom_subsetting\u003c/code\u003e LB policy, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A68-random-subsetting.md\"\u003egRFC A68\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8650\"\u003e#8650\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/marek-szews\"\u003e\u003ccode\u003e@​marek-szews\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/tls: Fix a bug where the port was not stripped from the authority override before validation. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8726\"\u003e#8726\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/Atul1710\"\u003e\u003ccode\u003e@​Atul1710\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds/priority: Fix a bug causing delayed failover to lower-priority clusters when a higher-priority cluster is stuck in \u003ccode\u003eCONNECTING\u003c/code\u003e state. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8813\"\u003e#8813\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ehealth: Fix a bug where health checks failed for clients using legacy compression options (\u003ccode\u003eWithDecompressor\u003c/code\u003e or \u003ccode\u003eRPCDecompressor\u003c/code\u003e). (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8765\"\u003e#8765\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/sanki92\"\u003e\u003ccode\u003e@​sanki92\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003etransport: Fix an issue where the HTTP/2 server could skip header size checks when terminating a stream early. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8769\"\u003e#8769\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eserver: Propagate status detail headers, if available, when terminating a stream during request header processing. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8754\"\u003e#8754\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ePerformance Improvements\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/alts: Optimize read buffer alignment to reduce copies. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8791\"\u003e#8791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emem: Optimize pooling and creation of \u003ccode\u003ebuffer\u003c/code\u003e objects.  (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8784\"\u003e#8784\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etransport: Reduce slice re-allocations by reserving slice capacity. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8797\"\u003e#8797\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/dda86dbd9cecb8b35b58c73d507d81d67761205f\"\u003e\u003ccode\u003edda86db\u003c/code\u003e\u003c/a\u003e Change version to 1.79.3 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8983\"\u003e#8983\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/72186f163e75a065c39e6f7df9b6dea07fbdeff5\"\u003e\u003ccode\u003e72186f1\u003c/code\u003e\u003c/a\u003e grpc: enforce strict path checking for incoming requests on the server (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/97ca3522b239edf6813e2b1106924e9d55e89d43\"\u003e\u003ccode\u003e97ca352\u003c/code\u003e\u003c/a\u003e Changing version to 1.79.3-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8954\"\u003e#8954\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/8902ab6efea590f5b3861126559eaa26fa9783b2\"\u003e\u003ccode\u003e8902ab6\u003c/code\u003e\u003c/a\u003e Change the version to release 1.79.2 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8947\"\u003e#8947\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/a9286705aa689bee321ec674323b6896284f3e02\"\u003e\u003ccode\u003ea928670\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8874\"\u003e#8874\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8904\"\u003e#8904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/06df3638c0bcee88197b1033b3ba83e1eb8bc010\"\u003e\u003ccode\u003e06df363\u003c/code\u003e\u003c/a\u003e Change version to 1.79.2-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8903\"\u003e#8903\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/782f2de44f597af18a120527e7682a6670d84289\"\u003e\u003ccode\u003e782f2de\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8902\"\u003e#8902\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/850eccbb2257bd2de6ac28ee88a7172ab6175629\"\u003e\u003ccode\u003e850eccb\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8851\"\u003e#8851\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/765ff056b6890f6c8341894df4e9668e9bfc18ef\"\u003e\u003ccode\u003e765ff05\u003c/code\u003e\u003c/a\u003e Change version to 1.79.0 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8850\"\u003e#8850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/68804be0e78ed0365bb5a576dedc12e2168ed63e\"\u003e\u003ccode\u003e68804be\u003c/code\u003e\u003c/a\u003e Cherry pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8896\"\u003e#8896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/grpc/grpc-go/compare/v1.67.1...v1.79.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-git/v5` from 5.12.0 to 5.17.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-git/releases\"\u003egithub.com/go-git/go-git/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.17.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/cloudflare/circl to v1.6.3 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1930\"\u003ego-git/go-git#1930\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/index, Improve v4 entry name validation by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1935\"\u003ego-git/go-git#1935\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/idxfile, Fix version and fanout checks by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1937\"\u003ego-git/go-git#1937\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.16.5 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1839\"\u003ego-git/go-git#1839\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: worktree, optimize infiles function for very large repos by \u003ca href=\"https://github.com/k-anshul\"\u003e\u003ccode\u003e@​k-anshul\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1853\"\u003ego-git/go-git#1853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: Add strict checks for supported extensions by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1861\"\u003ego-git/go-git#1861\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebackport, git: Improve Status() speed with new index.ModTime check by \u003ca href=\"https://github.com/cedric-appdirect\"\u003e\u003ccode\u003e@​cedric-appdirect\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1862\"\u003ego-git/go-git#1862\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003estorage: filesystem, Avoid overwriting loose obj files by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1864\"\u003ego-git/go-git#1864\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.16.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module golang.org/x/crypto to v0.45.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1744\"\u003ego-git/go-git#1744\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Bump Go test versions to 1.23-1.25 (v5) by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1746\"\u003ego-git/go-git#1746\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] git: worktree, Don't delete local untracked files when resetting worktree by \u003ca href=\"https://github.com/Ch00k\"\u003e\u003ccode\u003e@​Ch00k\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1800\"\u003ego-git/go-git#1800\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExpand packfile checks by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1836\"\u003ego-git/go-git#1836\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.4...v5.16.5\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.4...v5.16.5\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.16.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebackport plumbing: format/idxfile, prevent panic by \u003ca href=\"https://github.com/swills\"\u003e\u003ccode\u003e@​swills\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1732\"\u003ego-git/go-git#1732\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[backport] build: test, Fix build on Windows. by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1734\"\u003ego-git/go-git#1734\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Update module golang.org/x/net to v0.38.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1742\"\u003ego-git/go-git#1742\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Update module github.com/cloudflare/circl to v1.6.1 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1741\"\u003ego-git/go-git#1741\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.13.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1743\"\u003ego-git/go-git#1743\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.3...v5.16.4\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.3...v5.16.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.16.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003einternal: Expand regex to fix build [5.x] by \u003ca href=\"https://github.com/baloo\"\u003e\u003ccode\u003e@​baloo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1644\"\u003ego-git/go-git#1644\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: raise timeouts for windows CI tests and disable CIFuzz [5.x] by \u003ca href=\"https://github.com/baloo\"\u003e\u003ccode\u003e@​baloo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1646\"\u003ego-git/go-git#1646\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eplumbing: support commits extra headers, support jujutsu signed commit [5.x] by \u003ca href=\"https://github.com/baloo\"\u003e\u003ccode\u003e@​baloo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1633\"\u003ego-git/go-git#1633\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.2...v5.16.3\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.2...v5.16.3\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/5e23dfd02db92644dc4a3358ceb297fce875b772\"\u003e\u003ccode\u003e5e23dfd\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1937\"\u003e#1937\u003c/a\u003e from pjbgf/idx-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/6b38a326816b80f64c20cc0e6113958b65c05a1c\"\u003e\u003ccode\u003e6b38a32\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1935\"\u003e#1935\u003c/a\u003e from pjbgf/index-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/cd757fcb856a2dcc5fff6c110320a8ff62e99513\"\u003e\u003ccode\u003ecd757fc\u003c/code\u003e\u003c/a\u003e plumbing: format/idxfile, Fix version and fanout checks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/3ec0d70cb687ae1da5f4d18faa4229bd971a8710\"\u003e\u003ccode\u003e3ec0d70\u003c/code\u003e\u003c/a\u003e plumbing: format/index, Fix tree extension invalidated entry parsing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/dbe10b6b425a2a4ea92a9d98e20cd68e15aede01\"\u003e\u003ccode\u003edbe10b6\u003c/code\u003e\u003c/a\u003e plumbing: format/index, Align V2/V3 long name and V4 prefix encoding with Git\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/e9b65df44cb97faeba148b47523a362beaecddf9\"\u003e\u003ccode\u003ee9b65df\u003c/code\u003e\u003c/a\u003e plumbing: format/index, Improve v4 entry name validation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/adad18daabddee04c5a889f0230035e74bca32c0\"\u003e\u003ccode\u003eadad18d\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1930\"\u003e#1930\u003c/a\u003e from go-git/renovate/releases/v5.x-go-github.com-clo...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/29470bd1d862c6e902996b8e8ff8eb7a0515a9be\"\u003e\u003ccode\u003e29470bd\u003c/code\u003e\u003c/a\u003e build: Update module github.com/cloudflare/circl to v1.6.3 [SECURITY]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/bdf06885bdaa3631cf6a2017108086c6f53dcf69\"\u003e\u003ccode\u003ebdf0688\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1864\"\u003e#1864\u003c/a\u003e from pjbgf/v5-issue-55\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/5290e521c8cf651bf3e8d3e37f517c7cf7aa0b19\"\u003e\u003ccode\u003e5290e52\u003c/code\u003e\u003c/a\u003e storage: filesystem, Avoid overwriting loose obj files. Fixes \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/55\"\u003e#55\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-git/compare/v5.12.0...v5.17.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-viper/mapstructure/v2` from 2.2.1 to 2.4.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-viper/mapstructure/releases\"\u003egithub.com/go-viper/mapstructure/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.4.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003erefactor: replace interface{} with any by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/115\"\u003ego-viper/mapstructure#115\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.0 to 3.29.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/114\"\u003ego-viper/mapstructure#114\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGeneric tests by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/118\"\u003ego-viper/mapstructure#118\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix godoc reference link in README.md by \u003ca href=\"https://github.com/peczenyj\"\u003e\u003ccode\u003e@​peczenyj\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/107\"\u003ego-viper/mapstructure#107\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add StringToTimeLocationHookFunc to convert strings to *time.Location by \u003ca href=\"https://github.com/ErfanMomeniii\"\u003e\u003ccode\u003e@​ErfanMomeniii\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/117\"\u003ego-viper/mapstructure#117\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add back previous StringToSlice as a weak function by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/119\"\u003ego-viper/mapstructure#119\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ErfanMomeniii\"\u003e\u003ccode\u003e@​ErfanMomeniii\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/117\"\u003ego-viper/mapstructure#117\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-viper/mapstructure/compare/v2.3.0...v2.4.0\"\u003ehttps://github.com/go-viper/mapstructure/compare/v2.3.0...v2.4.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.3.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 4.1.7 to 4.2.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/46\"\u003ego-viper/mapstructure#46\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golangci/golangci-lint-action from 6.1.0 to 6.1.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/47\"\u003ego-viper/mapstructure#47\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[enhancement] Add check for \u003ccode\u003ereflect.Value\u003c/code\u003e in \u003ccode\u003eComposeDecodeHookFunc\u003c/code\u003e by \u003ca href=\"https://github.com/mahadzaryab1\"\u003e\u003ccode\u003e@​mahadzaryab1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/52\"\u003ego-viper/mapstructure#52\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.0.2 to 5.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/51\"\u003ego-viper/mapstructure#51\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 4.2.0 to 4.2.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/50\"\u003ego-viper/mapstructure#50\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.1.0 to 5.2.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/55\"\u003ego-viper/mapstructure#55\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.2.0 to 5.3.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/58\"\u003ego-viper/mapstructure#58\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: add Go 1.24 to the test matrix by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/74\"\u003ego-viper/mapstructure#74\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golangci/golangci-lint-action from 6.1.1 to 6.5.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/72\"\u003ego-viper/mapstructure#72\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golangci/golangci-lint-action from 6.5.0 to 6.5.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/76\"\u003ego-viper/mapstructure#76\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.3.0 to 5.4.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/78\"\u003ego-viper/mapstructure#78\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add decode hook for netip.Prefix by \u003ca href=\"https://github.com/tklauser\"\u003e\u003ccode\u003e@​tklauser\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/85\"\u003ego-viper/mapstructure#85\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdates by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/86\"\u003ego-viper/mapstructure#86\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 2.13.4 to 3.28.15 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/87\"\u003ego-viper/mapstructure#87\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.4.0 to 5.5.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/93\"\u003ego-viper/mapstructure#93\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.15 to 3.28.17 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/92\"\u003ego-viper/mapstructure#92\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.17 to 3.28.19 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/97\"\u003ego-viper/mapstructure#97\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/96\"\u003ego-viper/mapstructure#96\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate README.md by \u003ca href=\"https://github.com/peczenyj\"\u003e\u003ccode\u003e@​peczenyj\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/90\"\u003ego-viper/mapstructure#90\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd omitzero tag. by \u003ca href=\"https://github.com/Crystalix007\"\u003e\u003ccode\u003e@​Crystalix007\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/98\"\u003ego-viper/mapstructure#98\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse error structs instead of duplicated strings by \u003ca href=\"https://github.com/m1k1o\"\u003e\u003ccode\u003e@​m1k1o\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/102\"\u003ego-viper/mapstructure#102\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.19 to 3.29.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/101\"\u003ego-viper/mapstructure#101\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add common error interface by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/105\"\u003ego-viper/mapstructure#105\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eupdate linter by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/106\"\u003ego-viper/mapstructure#106\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFeature allow unset pointer by \u003ca href=\"https://github.com/rostislaved\"\u003e\u003ccode\u003e@​rostislaved\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/80\"\u003ego-viper/mapstructure#80\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tklauser\"\u003e\u003ccode\u003e@​tklauser\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/85\"\u003ego-viper/mapstructure#85\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/peczenyj\"\u003e\u003ccode\u003e@​peczenyj\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/90\"\u003ego-viper/mapstructure#90\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Crystalix007\"\u003e\u003ccode\u003e@​Crystalix007\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/98\"\u003ego-viper/mapstructure#98\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rostislaved\"\u003e\u003ccode\u003e@​rostislaved\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/80\"\u003ego-viper/mapstructure#80\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-viper/mapstructure/compare/v2.2.1...v2.3.0\"\u003ehttps://github.com/go-viper/mapstructure/compare/v2.2.1...v2.3.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/b9794a5f0e73d425210d6614ed833067029155f5\"\u003e\u003ccode\u003eb9794a5\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/119\"\u003e#119\u003c/a\u003e from go-viper/string-to-weak-slice\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/17cdcb0741054e2a33938adf6bd1f2a5c0aa8f30\"\u003e\u003ccode\u003e17cdcb0\u003c/code\u003e\u003c/a\u003e feat: add back previous StringToSlice as a weak function\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/3caca3614c3ab2c5b5d359c44fdcd72058887b19\"\u003e\u003ccode\u003e3caca36\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/117\"\u003e#117\u003c/a\u003e from ErfanMomeniii/main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/9a861bc115f2b54ed4e494662f29c172d9ef046a\"\u003e\u003ccode\u003e9a861bc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/107\"\u003e#107\u003c/a\u003e from peczenyj/patch-2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/86ed5b59da0615fb8c3a413f401cdf0231f1234c\"\u003e\u003ccode\u003e86ed5b5\u003c/code\u003e\u003c/a\u003e refactor: update\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/ace5b4e8b3dec99468ffa9498e42fb09d177b0a6\"\u003e\u003ccode\u003eace5b4e\u003c/code\u003e\u003c/a\u003e chore: add interface any linter\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/1a4f1aef38bfa8549762aaf42c7c18a5d268e76e\"\u003e\u003ccode\u003e1a4f1ae\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/118\"\u003e#118\u003c/a\u003e from go-viper/generic-tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/a2689090ed4348033c36724d866faf1f911a9f63\"\u003e\u003ccode\u003ea268909\u003c/code\u003e\u003c/a\u003e fix: lint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/17f1fd44eb7606b109c9bb017c0a1c6d3e93b5cd\"\u003e\u003ccode\u003e17f1fd4\u003c/code\u003e\u003c/a\u003e test: add more comments\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/b48c8566836bf291bfee2b217d51fc36e8e61f6f\"\u003e\u003ccode\u003eb48c856\u003c/code\u003e\u003c/a\u003e test: expand tests\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-viper/mapstructure/compare/v2.2.1...v2.4.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/golang-jwt/jwt/v4` from 4.5.1 to 4.5.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/golang-jwt/jwt/releases\"\u003egithub.com/golang-jwt/jwt/v4's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.5.2\u003c/h2\u003e\n\u003cp\u003eSee \u003ca href=\"https://github.com/golang-jwt/jwt/security/advisories/GHSA-mh63-6h87-95cp\"\u003ehttps://github.com/golang-jwt/jwt/security/advisories/GHSA-mh63-6h87-95cp\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang-jwt/jwt/compare/v4.5.1...v4.5.2\"\u003ehttps://github.com/golang-jwt/jwt/compare/v4.5.1...v4.5.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/2f0e9add62078527821828c76865661aa7718a84\"\u003e\u003ccode\u003e2f0e9ad\u003c/code\u003e\u003c/a\u003e Backporting 0951d18 to v4\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang-jwt/jwt/compare/v4.5.1...v4.5.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/hashicorp/go-getter` from 1.7.6 to 1.7.9\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/hashicorp/go-getter/releases\"\u003egithub.com/hashicorp/go-getter's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.7.9\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSpeed up XZ decompression by 5x with bufio wrapper by \u003ca href=\"https://github.com/vsarunas\"\u003e\u003ccode\u003e@​vsarunas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/520\"\u003ehashicorp/go-getter#520\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix CI Workflow by \u003ca href=\"https://github.com/mohanmanikanta2299\"\u003e\u003ccode\u003e@​mohanmanikanta2299\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/522\"\u003ehashicorp/go-getter#522\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: Remove use of \u0026quot;mitchellh/go-testing-interface\u0026quot; for stdlib by \u003ca href=\"https://github.com/jrasell\"\u003e\u003ccode\u003e@​jrasell\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/523\"\u003ehashicorp/go-getter#523\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: url redact of multiple sshkey by \u003ca href=\"https://github.com/dduzgun-security\"\u003e\u003ccode\u003e@​dduzgun-security\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/528\"\u003ehashicorp/go-getter#528\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePublish arm binaries by \u003ca href=\"https://github.com/sethvargo\"\u003e\u003ccode\u003e@​sethvargo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/525\"\u003ehashicorp/go-getter#525\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix errcheck lint errors and run it as part of pr checks by \u003ca href=\"https://github.com/abhijeetviswa\"\u003e\u003ccode\u003e@​abhijeetviswa\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/530\"\u003ehashicorp/go-getter#530\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix additional lint errors and increase linter scop...\n\n_Description has been truncated_","html_url":"https://github.com/Jackblanket847/terraform-provider-aws/pull/8","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Jackblanket847%2Fterraform-provider-aws/issues/8","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/8/packages"}},{"old_version":"1.3.7","new_version":"1.6.3","update_type":"minor","path":null,"pr_created_at":"2026-04-08T02:52:11.000Z","version_change":"1.3.7 → 1.6.3","issue":{"uuid":"4221754462","node_id":"PR_kwDOOjDzhc7QrRrU","number":6,"state":"open","title":"build(deps): bump the go_modules group across 5 directories with 11 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-04-08T02:52:11.000Z","updated_at":"2026-04-08T02:52:15.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): bump","group_name":"go_modules","update_count":11,"packages":[{"name":"golang.org/x/crypto","old_version":"0.35.0","new_version":"0.45.0","repository_url":"https://github.com/golang/crypto"},{"name":"golang.org/x/oauth2","old_version":"0.26.0","new_version":"0.27.0","repository_url":"https://github.com/golang/oauth2"},{"name":"github.com/go-viper/mapstructure/v2","old_version":"2.0.0-alpha.1","new_version":"2.4.0","repository_url":"https://github.com/go-viper/mapstructure"},{"name":"filippo.io/edwards25519","old_version":"1.1.0","new_version":"1.1.1","repository_url":"https://github.com/FiloSottile/edwards25519"},{"name":"github.com/cloudflare/circl","old_version":"1.3.7","new_version":"1.6.3","repository_url":"https://github.com/cloudflare/circl"},{"name":"github.com/docker/cli","old_version":"27.4.1+incompatible","new_version":"29.2.0+incompatible","repository_url":"https://github.com/docker/cli"},{"name":"github.com/go-git/go-git/v5","old_version":"5.13.1","new_version":"5.17.1","repository_url":"https://github.com/go-git/go-git"},{"name":"github.com/ulikunitz/xz","old_version":"0.5.11","new_version":"0.5.14","repository_url":"https://github.com/ulikunitz/xz"},{"name":"golang.org/x/image","old_version":"0.24.0","new_version":"0.38.0","repository_url":"https://github.com/golang/image"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 9 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.35.0` | `0.45.0` |\n| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.26.0` | `0.27.0` |\n| [github.com/go-viper/mapstructure/v2](https://github.com/go-viper/mapstructure) | `2.0.0-alpha.1` | `2.4.0` |\n| [filippo.io/edwards25519](https://github.com/FiloSottile/edwards25519) | `1.1.0` | `1.1.1` |\n| [github.com/cloudflare/circl](https://github.com/cloudflare/circl) | `1.3.7` | `1.6.3` |\n| [github.com/docker/cli](https://github.com/docker/cli) | `27.4.1+incompatible` | `29.2.0+incompatible` |\n| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.13.1` | `5.17.1` |\n| [github.com/ulikunitz/xz](https://github.com/ulikunitz/xz) | `0.5.11` | `0.5.14` |\n| [golang.org/x/image](https://github.com/golang/image) | `0.24.0` | `0.38.0` |\n\nBumps the go_modules group with 1 update in the /gokrazy/natlabapp.arm64/builddir/github.com/gokrazy/gokrazy/cmd/dhcp directory: [golang.org/x/net](https://github.com/golang/net).\nBumps the go_modules group with 1 update in the /gokrazy/natlabapp/builddir/github.com/gokrazy/gokrazy/cmd/dhcp directory: [golang.org/x/net](https://github.com/golang/net).\nBumps the go_modules group with 1 update in the /gokrazy/tsapp/builddir/github.com/gokrazy/breakglass directory: [golang.org/x/crypto](https://github.com/golang/crypto).\nBumps the go_modules group with 1 update in the /gokrazy/tsapp/builddir/github.com/gokrazy/gokrazy/cmd/dhcp directory: [golang.org/x/net](https://github.com/golang/net).\n\nUpdates `golang.org/x/crypto` from 0.35.0 to 0.45.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/4e0068c0098be10d7025c99ab7c50ce454c1f0f9\"\u003e\u003ccode\u003e4e0068c\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e79546e28b85ea53dd37afe1c4102746ef553b9c\"\u003e\u003ccode\u003ee79546e\u003c/code\u003e\u003c/a\u003e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f91f7a7c31bf90b39c1de895ad116a2bacc88748\"\u003e\u003ccode\u003ef91f7a7\u003c/code\u003e\u003c/a\u003e ssh/agent: prevent panic on malformed constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/2df4153a0311bdfea44376e0eb6ef2faefb0275b\"\u003e\u003ccode\u003e2df4153\u003c/code\u003e\u003c/a\u003e acme/autocert: let automatic renewal work with short lifetime certs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/bcf6a849efcf4702fa5172cb0998b46c3da1e989\"\u003e\u003ccode\u003ebcf6a84\u003c/code\u003e\u003c/a\u003e acme: pass context to request\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b4f2b62076abeee4e43fb59544dac565715fbf1e\"\u003e\u003ccode\u003eb4f2b62\u003c/code\u003e\u003c/a\u003e ssh: fix error message on unsupported cipher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/79ec3a51fcc7fbd2691d56155d578225ccc542e2\"\u003e\u003ccode\u003e79ec3a5\u003c/code\u003e\u003c/a\u003e ssh: allow to bind to a hostname in remote forwarding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/122a78f140d9d3303ed3261bc374bbbca149140f\"\u003e\u003ccode\u003e122a78f\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/c0531f9c34514ad5c5551e2d6ce569ca673a8afd\"\u003e\u003ccode\u003ec0531f9\u003c/code\u003e\u003c/a\u003e all: eliminate vet diagnostics\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/0997000b45e3a40598272081bcad03ffd21b8adb\"\u003e\u003ccode\u003e0997000\u003c/code\u003e\u003c/a\u003e all: fix some comments\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.35.0...v0.45.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.36.0 to 0.47.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/e1fcd82abba34df74614020343be8eb1fe85f0d9\"\u003e\u003ccode\u003ee1fcd82\u003c/code\u003e\u003c/a\u003e html: properly handle trailing solidus in unquoted attribute value in foreign...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/ebed060e8f30f20235f74808c22125fd86b15edd\"\u003e\u003ccode\u003eebed060\u003c/code\u003e\u003c/a\u003e internal/http3: fix build of tests with GOEXPERIMENT=nosynctest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/1f1fa29e0a46fffe18c43a9da8daa5a0b180dfa9\"\u003e\u003ccode\u003e1f1fa29\u003c/code\u003e\u003c/a\u003e publicsuffix: regenerate table\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/12150816f701c912a32a376754ab28dd3878833a\"\u003e\u003ccode\u003e1215081\u003c/code\u003e\u003c/a\u003e http2: improve error when server sends HTTP/1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/312450e473eae9f9e6173ad895c80bc5ea2f79ad\"\u003e\u003ccode\u003e312450e\u003c/code\u003e\u003c/a\u003e html: ensure \u0026lt;search\u0026gt; tag closes \u0026lt;p\u0026gt; and update tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/09731f9bf919b00b344c763894cd1920b3d96d90\"\u003e\u003ccode\u003e09731f9\u003c/code\u003e\u003c/a\u003e http2: improve handling of lost PING in Server\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/55989e24b972a90ab99308fdc7ea1fb58a96fef1\"\u003e\u003ccode\u003e55989e2\u003c/code\u003e\u003c/a\u003e http2/h2c: use ResponseController for hijacking connections\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/2914f46773171f4fa13e276df1135bafef677801\"\u003e\u003ccode\u003e2914f46\u003c/code\u003e\u003c/a\u003e websocket: re-recommend gorilla/websocket\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/99b3ae0643f9a2f9d820fcbba5f9e4c83b23bd48\"\u003e\u003ccode\u003e99b3ae0\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/85d1d54551b68719346cb9fec24b911da4e452a1\"\u003e\u003ccode\u003e85d1d54\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.23.0...v0.38.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/oauth2` from 0.26.0 to 0.27.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/681b4d8edca1bcfea5bce685d77ea7b82ed3e7b3\"\u003e\u003ccode\u003e681b4d8\u003c/code\u003e\u003c/a\u003e jws: split token into fixed number of parts\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/3f78298beea38fb76a3fbca33e3056f4b7eb5502\"\u003e\u003ccode\u003e3f78298\u003c/code\u003e\u003c/a\u003e all: upgrade go directive to at least 1.23.0 [generated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/109dabf9017129171d1807e485ca5633ecd095ac\"\u003e\u003ccode\u003e109dabf\u003c/code\u003e\u003c/a\u003e endpoints: add links/provider for Discord\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/ac571fa341c2a2b979d2b2c8341fd24767ef5d47\"\u003e\u003ccode\u003eac571fa\u003c/code\u003e\u003c/a\u003e oauth2: fix docs for Config.DeviceAuth\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/314ee5b92bf23c4973aa8e61eba3ff458e80eef2\"\u003e\u003ccode\u003e314ee5b\u003c/code\u003e\u003c/a\u003e endpoints: add patreon endpoint\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang/oauth2/compare/v0.26.0...v0.27.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-viper/mapstructure/v2` from 2.0.0-alpha.1 to 2.4.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-viper/mapstructure/releases\"\u003egithub.com/go-viper/mapstructure/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.4.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003erefactor: replace interface{} with any by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/115\"\u003ego-viper/mapstructure#115\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.0 to 3.29.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/114\"\u003ego-viper/mapstructure#114\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGeneric tests by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/118\"\u003ego-viper/mapstructure#118\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix godoc reference link in README.md by \u003ca href=\"https://github.com/peczenyj\"\u003e\u003ccode\u003e@​peczenyj\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/107\"\u003ego-viper/mapstructure#107\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add StringToTimeLocationHookFunc to convert strings to *time.Location by \u003ca href=\"https://github.com/ErfanMomeniii\"\u003e\u003ccode\u003e@​ErfanMomeniii\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/117\"\u003ego-viper/mapstructure#117\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add back previous StringToSlice as a weak function by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/119\"\u003ego-viper/mapstructure#119\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ErfanMomeniii\"\u003e\u003ccode\u003e@​ErfanMomeniii\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/117\"\u003ego-viper/mapstructure#117\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-viper/mapstructure/compare/v2.3.0...v2.4.0\"\u003ehttps://github.com/go-viper/mapstructure/compare/v2.3.0...v2.4.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.3.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 4.1.7 to 4.2.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/46\"\u003ego-viper/mapstructure#46\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golangci/golangci-lint-action from 6.1.0 to 6.1.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/47\"\u003ego-viper/mapstructure#47\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[enhancement] Add check for \u003ccode\u003ereflect.Value\u003c/code\u003e in \u003ccode\u003eComposeDecodeHookFunc\u003c/code\u003e by \u003ca href=\"https://github.com/mahadzaryab1\"\u003e\u003ccode\u003e@​mahadzaryab1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/52\"\u003ego-viper/mapstructure#52\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.0.2 to 5.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/51\"\u003ego-viper/mapstructure#51\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 4.2.0 to 4.2.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/50\"\u003ego-viper/mapstructure#50\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.1.0 to 5.2.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/55\"\u003ego-viper/mapstructure#55\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.2.0 to 5.3.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/58\"\u003ego-viper/mapstructure#58\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: add Go 1.24 to the test matrix by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/74\"\u003ego-viper/mapstructure#74\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golangci/golangci-lint-action from 6.1.1 to 6.5.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/72\"\u003ego-viper/mapstructure#72\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golangci/golangci-lint-action from 6.5.0 to 6.5.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/76\"\u003ego-viper/mapstructure#76\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.3.0 to 5.4.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/78\"\u003ego-viper/mapstructure#78\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add decode hook for netip.Prefix by \u003ca href=\"https://github.com/tklauser\"\u003e\u003ccode\u003e@​tklauser\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/85\"\u003ego-viper/mapstructure#85\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdates by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/86\"\u003ego-viper/mapstructure#86\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 2.13.4 to 3.28.15 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/87\"\u003ego-viper/mapstructure#87\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.4.0 to 5.5.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/93\"\u003ego-viper/mapstructure#93\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.15 to 3.28.17 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/92\"\u003ego-viper/mapstructure#92\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.17 to 3.28.19 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/97\"\u003ego-viper/mapstructure#97\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/96\"\u003ego-viper/mapstructure#96\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate README.md by \u003ca href=\"https://github.com/peczenyj\"\u003e\u003ccode\u003e@​peczenyj\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/90\"\u003ego-viper/mapstructure#90\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd omitzero tag. by \u003ca href=\"https://github.com/Crystalix007\"\u003e\u003ccode\u003e@​Crystalix007\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/98\"\u003ego-viper/mapstructure#98\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse error structs instead of duplicated strings by \u003ca href=\"https://github.com/m1k1o\"\u003e\u003ccode\u003e@​m1k1o\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/102\"\u003ego-viper/mapstructure#102\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.19 to 3.29.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/101\"\u003ego-viper/mapstructure#101\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add common error interface by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/105\"\u003ego-viper/mapstructure#105\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eupdate linter by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/106\"\u003ego-viper/mapstructure#106\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFeature allow unset pointer by \u003ca href=\"https://github.com/rostislaved\"\u003e\u003ccode\u003e@​rostislaved\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/80\"\u003ego-viper/mapstructure#80\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tklauser\"\u003e\u003ccode\u003e@​tklauser\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/85\"\u003ego-viper/mapstructure#85\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/peczenyj\"\u003e\u003ccode\u003e@​peczenyj\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/90\"\u003ego-viper/mapstructure#90\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Crystalix007\"\u003e\u003ccode\u003e@​Crystalix007\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/98\"\u003ego-viper/mapstructure#98\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rostislaved\"\u003e\u003ccode\u003e@​rostislaved\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/80\"\u003ego-viper/mapstructure#80\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-viper/mapstructure/compare/v2.2.1...v2.3.0\"\u003ehttps://github.com/go-viper/mapstructure/compare/v2.2.1...v2.3.0\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/b9794a5f0e73d425210d6614ed833067029155f5\"\u003e\u003ccode\u003eb9794a5\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/119\"\u003e#119\u003c/a\u003e from go-viper/string-to-weak-slice\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/17cdcb0741054e2a33938adf6bd1f2a5c0aa8f30\"\u003e\u003ccode\u003e17cdcb0\u003c/code\u003e\u003c/a\u003e feat: add back previous StringToSlice as a weak function\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/3caca3614c3ab2c5b5d359c44fdcd72058887b19\"\u003e\u003ccode\u003e3caca36\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/117\"\u003e#117\u003c/a\u003e from ErfanMomeniii/main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/9a861bc115f2b54ed4e494662f29c172d9ef046a\"\u003e\u003ccode\u003e9a861bc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/107\"\u003e#107\u003c/a\u003e from peczenyj/patch-2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/86ed5b59da0615fb8c3a413f401cdf0231f1234c\"\u003e\u003ccode\u003e86ed5b5\u003c/code\u003e\u003c/a\u003e refactor: update\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/ace5b4e8b3dec99468ffa9498e42fb09d177b0a6\"\u003e\u003ccode\u003eace5b4e\u003c/code\u003e\u003c/a\u003e chore: add interface any linter\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/1a4f1aef38bfa8549762aaf42c7c18a5d268e76e\"\u003e\u003ccode\u003e1a4f1ae\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/118\"\u003e#118\u003c/a\u003e from go-viper/generic-tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/a2689090ed4348033c36724d866faf1f911a9f63\"\u003e\u003ccode\u003ea268909\u003c/code\u003e\u003c/a\u003e fix: lint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/17f1fd44eb7606b109c9bb017c0a1c6d3e93b5cd\"\u003e\u003ccode\u003e17f1fd4\u003c/code\u003e\u003c/a\u003e test: add more comments\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/b48c8566836bf291bfee2b217d51fc36e8e61f6f\"\u003e\u003ccode\u003eb48c856\u003c/code\u003e\u003c/a\u003e test: expand tests\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-viper/mapstructure/compare/v2.0.0-alpha.1...v2.4.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `filippo.io/edwards25519` from 1.1.0 to 1.1.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/FiloSottile/edwards25519/commit/d1c650afb95fad0742b98d95f2eb2cf031393abb\"\u003e\u003ccode\u003ed1c650a\u003c/code\u003e\u003c/a\u003e extra: initialize receiver in MultiScalarMult\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/FiloSottile/edwards25519/compare/v1.1.0...v1.1.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream` from 1.6.8 to 1.7.8\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/e3b97d2a02cd4e27c40224f05aa1a7deba24abe2\"\u003e\u003ccode\u003ee3b97d2\u003c/code\u003e\u003c/a\u003e Release 2023-10-12\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/863010ddb23c242c2a5d49d9f40094a6a49b5525\"\u003e\u003ccode\u003e863010d\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/6946ef8b9149fe75ac1b427ca2c7f57cdcb64549\"\u003e\u003ccode\u003e6946ef8\u003c/code\u003e\u003c/a\u003e Update endpoints model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/6d93ded4536184d38a664b4b75dadd36cbd79878\"\u003e\u003ccode\u003e6d93ded\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/bebc232e7f65b02d0b519d11e73cf925c38e716f\"\u003e\u003ccode\u003ebebc232\u003c/code\u003e\u003c/a\u003e fix: fail to load config if configured profile doesn't exist (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/2309\"\u003e#2309\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/5de46742b7fb1b72d93d344ee81568800a707267\"\u003e\u003ccode\u003e5de4674\u003c/code\u003e\u003c/a\u003e fix DNS timeout error not retried (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-go-v2/issues/2300\"\u003e#2300\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/e155bb72a2ec20ec61db50fc3d4568e373fa4b63\"\u003e\u003ccode\u003ee155bb7\u003c/code\u003e\u003c/a\u003e Release 2023-10-06\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/9d342ba33937c562d215f317a37dea121ee9763d\"\u003e\u003ccode\u003e9d342ba\u003c/code\u003e\u003c/a\u003e Regenerated Clients\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/1df99141a143a38570d64a182ed972ce9e3dba65\"\u003e\u003ccode\u003e1df9914\u003c/code\u003e\u003c/a\u003e Update SDK's smithy-go dependency to v1.15.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-go-v2/commit/32ada3a191ac770b1b24164b667692183fc77ed9\"\u003e\u003ccode\u003e32ada3a\u003c/code\u003e\u003c/a\u003e Update API model\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-go-v2/compare/service/rum/v1.6.8...service/m2/v1.7.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/cloudflare/circl` from 1.3.7 to 1.6.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cloudflare/circl/releases\"\u003egithub.com/cloudflare/circl's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eCIRCL v1.6.3\u003c/h2\u003e\n\u003cp\u003eFix a bug on ecc/p384 scalar multiplication.\u003c/p\u003e\n\u003ch3\u003eWhat's Changed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esign/mldsa: Check opts for nil value  by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/582\"\u003ecloudflare/circl#582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eecc/p384: Point addition must handle point doubling case. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/583\"\u003ecloudflare/circl#583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease CIRCL v1.6.3 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/584\"\u003ecloudflare/circl#584\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNew SLH-DSA, improvements in ML-DSA for arm64.\u003c/li\u003e\n\u003cli\u003eTested compilation on WASM.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize pairing product computation by moving exponentiations to G1. by \u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esign: Adding SLH-DSA signature by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/512\"\u003ecloudflare/circl#512\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate code generators to CIRCL v1.6.1. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/548\"\u003ecloudflare/circl#548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eML-DSA: Add preliminary Wycheproof test vectors by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/552\"\u003ecloudflare/circl#552\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ego fmt by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/554\"\u003ecloudflare/circl#554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egz-compressing test vectors, use of HexBytes and ReadGzip functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/555\"\u003ecloudflare/circl#555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Removes use of elliptic Marshal and Unmarshal functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/556\"\u003ecloudflare/circl#556\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport encoding/decoding ML-DSA private keys (as long as they contain seeds) by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/559\"\u003ecloudflare/circl#559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to golangci-lint v2 by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/560\"\u003ecloudflare/circl#560\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreparation for ARM64 Implementation of poly operations for dilithium package. by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eprepare power2Round for custom implementations in assembly by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/564\"\u003ecloudflare/circl#564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eARM64 implementation for poly.PackLe16 by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/563\"\u003ecloudflare/circl#563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polyMulBy2toD by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/565\"\u003ecloudflare/circl#565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polySub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/566\"\u003ecloudflare/circl#566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: add byteLen method for short groups and RandomScalar uses rand.Int by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/568\"\u003ecloudflare/circl#568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of poly.Add/Sub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/572\"\u003ecloudflare/circl#572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Adding cryptobyte marshaling to scalars by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/569\"\u003ecloudflare/circl#569\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumping up to Go1.25 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/574\"\u003ecloudflare/circl#574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: Including WASM compilation. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/577\"\u003ecloudflare/circl#577\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to using package-declared HPKE errors for shortkem instead of standard library errors by \u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease v1.6.2 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/579\"\u003ecloudflare/circl#579\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixes some point checks on the FourQ curve.\u003c/li\u003e\n\u003cli\u003eHybrid KEM fails on low-order points.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/24ae53c5d6f7fe18203adc125ba3ed76a38703e1\"\u003e\u003ccode\u003e24ae53c\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/581020bd4a836b8ce7bd4e414ba2884c07dbc906\"\u003e\u003ccode\u003e581020b\u003c/code\u003e\u003c/a\u003e Rename method to oddMultiplesProjective.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/12209a4566605692a8402594e367a5aed5148460\"\u003e\u003ccode\u003e12209a4\u003c/code\u003e\u003c/a\u003e Removing unused cmov for jacobian points.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/fcba359f4178645d2c9e50f29ab6966337da4b95\"\u003e\u003ccode\u003efcba359\u003c/code\u003e\u003c/a\u003e ecc/p384: use of complete projective formulas for scalar multiplication.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/5e1bae8d8c2df4e717c2c5c2d5b5d60b629b2ac6\"\u003e\u003ccode\u003e5e1bae8\u003c/code\u003e\u003c/a\u003e ecc/p384: handle point doubling in point addition with Jacobian coordinates.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/341604685ff97e8f7440ae4b4711ba1c118c648c\"\u003e\u003ccode\u003e3416046\u003c/code\u003e\u003c/a\u003e Check opts for nil value.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/a763d47a6dce43d1f4f7b697d1d7810463a526f6\"\u003e\u003ccode\u003ea763d47\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3c70bf9ad53b681fbe5ba6067e454a86549fee8a\"\u003e\u003ccode\u003e3c70bf9\u003c/code\u003e\u003c/a\u003e Bump x/crypto x/sys dependencies.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3f0f15b2bfe67bad81a35e8aec81ae42ca78349d\"\u003e\u003ccode\u003e3f0f15b\u003c/code\u003e\u003c/a\u003e Revert to using package-declared HPKE errors for shortkem instead of standard...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/23491bd573cf29b6f567057a158203a2c9dfa30d\"\u003e\u003ccode\u003e23491bd\u003c/code\u003e\u003c/a\u003e Adding generic Power2Round method.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.3.7...v1.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/docker/cli` from 27.4.1+incompatible to 29.2.0+incompatible\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/0b9d1985dbf919678745f122b12b46f730b97d87\"\u003e\u003ccode\u003e0b9d198\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6764\"\u003e#6764\u003c/a\u003e from vvoland/update-docker\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/9c9ec7358833bb3e5622a166673744fca7fefac4\"\u003e\u003ccode\u003e9c9ec73\u003c/code\u003e\u003c/a\u003e vendor: github.com/moby/moby/client v0.2.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/bab3e81e1d8874a2d4f26afc02225ee537d0b15d\"\u003e\u003ccode\u003ebab3e81\u003c/code\u003e\u003c/a\u003e vendor: github.com/moby/moby/api v1.53.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/2e64fc162ab632a530f7191cc6af65c22356ea0d\"\u003e\u003ccode\u003e2e64fc1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6367\"\u003e#6367\u003c/a\u003e from thaJeztah/template_slicejoin\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/1f2ba2ac9d8c92870f7cce89dfa17d89d3375c19\"\u003e\u003ccode\u003e1f2ba2a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6760\"\u003e#6760\u003c/a\u003e from thaJeztah/container_create_fix_error\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/e34a3422cc32c808d2e8b0e0ef51112d53fa896d\"\u003e\u003ccode\u003ee34a342\u003c/code\u003e\u003c/a\u003e templates: make \u0026quot;join\u0026quot; work with non-string slices and map values\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/a86356d42f918968579e670b51bc85dc45982a33\"\u003e\u003ccode\u003ea86356d\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6763\"\u003e#6763\u003c/a\u003e from thaJeztah/bump_mapstructure\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/771660a17e56116eb32677a6d83c5210e5092194\"\u003e\u003ccode\u003e771660a\u003c/code\u003e\u003c/a\u003e vendor: github.com/go-viper/mapstructure/v2 v2.5.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/9cff36b35a828be8d137bc5de4983b7e3fef1614\"\u003e\u003ccode\u003e9cff36b\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/docker/cli/issues/6762\"\u003e#6762\u003c/a\u003e from thaJeztah/bump_x_deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/docker/cli/commit/08ed2bc6e8bc49ad988ecd44633620a48fb10967\"\u003e\u003ccode\u003e08ed2bc\u003c/code\u003e\u003c/a\u003e cli/command/container: make injecting config.json failures a warning\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/docker/cli/compare/v27.4.1...v29.2.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-git/v5` from 5.13.1 to 5.17.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-git/releases\"\u003egithub.com/go-git/go-git/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.17.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/cloudflare/circl to v1.6.3 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1930\"\u003ego-git/go-git#1930\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/index, Improve v4 entry name validation by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1935\"\u003ego-git/go-git#1935\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/idxfile, Fix version and fanout checks by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1937\"\u003ego-git/go-git#1937\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.16.5 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1839\"\u003ego-git/go-git#1839\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: worktree, optimize infiles function for very large repos by \u003ca href=\"https://github.com/k-anshul\"\u003e\u003ccode\u003e@​k-anshul\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1853\"\u003ego-git/go-git#1853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: Add strict checks for supported extensions by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1861\"\u003ego-git/go-git#1861\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebackport, git: Improve Status() speed with new index.ModTime check by \u003ca href=\"https://github.com/cedric-appdirect\"\u003e\u003ccode\u003e@​cedric-appdirect\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1862\"\u003ego-git/go-git#1862\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003estorage: filesystem, Avoid overwriting loose obj files by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1864\"\u003ego-git/go-git#1864\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.16.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module golang.org/x/crypto to v0.45.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1744\"\u003ego-git/go-git#1744\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Bump Go test versions to 1.23-1.25 (v5) by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1746\"\u003ego-git/go-git#1746\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] git: worktree, Don't delete local untracked files when resetting worktree by \u003ca href=\"https://github.com/Ch00k\"\u003e\u003ccode\u003e@​Ch00k\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1800\"\u003ego-git/go-git#1800\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExpand packfile checks by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1836\"\u003ego-git/go-git#1836\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.4...v5.16.5\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.4...v5.16.5\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.16.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebackport plumbing: format/idxfile, prevent panic by \u003ca href=\"https://github.com/swills\"\u003e\u003ccode\u003e@​swills\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1732\"\u003ego-git/go-git#1732\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[backport] build: test, Fix build on Windows. by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1734\"\u003ego-git/go-git#1734\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Update module golang.org/x/net to v0.38.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1742\"\u003ego-git/go-git#1742\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Update module github.com/cloudflare/circl to v1.6.1 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1741\"\u003ego-git/go-git#1741\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.13.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1743\"\u003ego-git/go-git#1743\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.3...v5.16.4\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.3...v5.16.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.16.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003einternal: Expand regex to fix build [5.x] by \u003ca href=\"https://github.com/baloo\"\u003e\u003ccode\u003e@​baloo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1644\"\u003ego-git/go-git#1644\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: raise timeouts for windows CI tests and disable CIFuzz [5.x] by \u003ca href=\"https://github.com/baloo\"\u003e\u003ccode\u003e@​baloo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1646\"\u003ego-git/go-git#1646\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eplumbing: support commits extra headers, support jujutsu signed commit [5.x] by \u003ca href=\"https://github.com/baloo\"\u003e\u003ccode\u003e@​baloo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1633\"\u003ego-git/go-git#1633\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.2...v5.16.3\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.2...v5.16.3\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/5e23dfd02db92644dc4a3358ceb297fce875b772\"\u003e\u003ccode\u003e5e23dfd\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1937\"\u003e#1937\u003c/a\u003e from pjbgf/idx-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/6b38a326816b80f64c20cc0e6113958b65c05a1c\"\u003e\u003ccode\u003e6b38a32\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1935\"\u003e#1935\u003c/a\u003e from pjbgf/index-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/cd757fcb856a2dcc5fff6c110320a8ff62e99513\"\u003e\u003ccode\u003ecd757fc\u003c/code\u003e\u003c/a\u003e plumbing: format/idxfile, Fix version and fanout checks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/3ec0d70cb687ae1da5f4d18faa4229bd971a8710\"\u003e\u003ccode\u003e3ec0d70\u003c/code\u003e\u003c/a\u003e plumbing: format/index, Fix tree extension invalidated entry parsing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/dbe10b6b425a2a4ea92a9d98e20cd68e15aede01\"\u003e\u003ccode\u003edbe10b6\u003c/code\u003e\u003c/a\u003e plumbing: format/index, Align V2/V3 long name and V4 prefix encoding with Git\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/e9b65df44cb97faeba148b47523a362beaecddf9\"\u003e\u003ccode\u003ee9b65df\u003c/code\u003e\u003c/a\u003e plumbing: format/index, Improve v4 entry name validation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/adad18daabddee04c5a889f0230035e74bca32c0\"\u003e\u003ccode\u003eadad18d\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1930\"\u003e#1930\u003c/a\u003e from go-git/renovate/releases/v5.x-go-github.com-clo...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/29470bd1d862c6e902996b8e8ff8eb7a0515a9be\"\u003e\u003ccode\u003e29470bd\u003c/code\u003e\u003c/a\u003e build: Update module github.com/cloudflare/circl to v1.6.3 [SECURITY]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/bdf06885bdaa3631cf6a2017108086c6f53dcf69\"\u003e\u003ccode\u003ebdf0688\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1864\"\u003e#1864\u003c/a\u003e from pjbgf/v5-issue-55\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/5290e521c8cf651bf3e8d3e37f517c7cf7aa0b19\"\u003e\u003ccode\u003e5290e52\u003c/code\u003e\u003c/a\u003e storage: filesystem, Avoid overwriting loose obj files. Fixes \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/55\"\u003e#55\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-git/compare/v5.13.1...v5.17.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/ulikunitz/xz` from 0.5.11 to 0.5.14\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ulikunitz/xz/commit/7184815834c4777e8fa665946721d5fe114c2c35\"\u003e\u003ccode\u003e7184815\u003c/code\u003e\u003c/a\u003e Preparation of release v0.5.14\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ulikunitz/xz/commit/88ddf1d0d98d688db65de034f48960b2760d2ae2\"\u003e\u003ccode\u003e88ddf1d\u003c/code\u003e\u003c/a\u003e Address Security Issue GHSA-jc7w-c686-c4v9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ulikunitz/xz/commit/c8314b8f21e9c5e25b52da07544cac14db277e89\"\u003e\u003ccode\u003ec8314b8\u003c/code\u003e\u003c/a\u003e Add new package xio with WriteCloserStack\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ulikunitz/xz/commit/4f11dce79b9977ec2976a978d6c594ea1c23cf29\"\u003e\u003ccode\u003e4f11dce\u003c/code\u003e\u003c/a\u003e Update README.md and SECURITY.md to address security questions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ulikunitz/xz/commit/f56ebbfaa2400067dcda8ade26ce912c2873ca08\"\u003e\u003ccode\u003ef56ebbf\u003c/code\u003e\u003c/a\u003e TODO.md: fix a typo\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/ulikunitz/xz/compare/v0.5.11...v0.5.14\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/image` from 0.24.0 to 0.38.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/23ae9ed61c1d3343fb95015810f62dcbf444976e\"\u003e\u003ccode\u003e23ae9ed\u003c/code\u003e\u003c/a\u003e tiff: cap buffer growth to prevent OOM from malicious IFD offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/e589e60f29d0bbbf6400e250e024f93cbc4961ee\"\u003e\u003ccode\u003ee589e60\u003c/code\u003e\u003c/a\u003e webp: allow VP8L + VP8X(with alpha)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/fe7d73de74b8a1ad508c93cfcb245d44579163ff\"\u003e\u003ccode\u003efe7d73d\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/e3d762b1d37ed96e757e3bc0bfb44f7455589df3\"\u003e\u003ccode\u003ee3d762b\u003c/code\u003e\u003c/a\u003e all: upgrade go directive to at least 1.25.0 [generated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/833c6ed987962feaa3ec2624d8655421b25e2e0e\"\u003e\u003ccode\u003e833c6ed\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/bc7fe0b43a01586e7ca7c087a2e8a625e8397dcb\"\u003e\u003ccode\u003ebc7fe0b\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/c53c97f4ed88d55fafe963ee6e93cb357663d650\"\u003e\u003ccode\u003ec53c97f\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/9032ff7c7b86f42b9bebdf6133191648224aecc0\"\u003e\u003ccode\u003e9032ff7\u003c/code\u003e\u003c/a\u003e all: eliminate vet diagnostics\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/9c9d08c65c08567c997eccc8bde52fcc9369bea6\"\u003e\u003ccode\u003e9c9d08c\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/image/commit/742b1b756d98a0c48b1fcf464a0c63fa50e1aa6b\"\u003e\u003ccode\u003e742b1b7\u003c/code\u003e\u003c/a\u003e all: fix some comments\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/image/compare/v0.24.0...v0.38.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.23.0 to 0.38.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/e1fcd82abba34df74614020343be8eb1fe85f0d9\"\u003e\u003ccode\u003ee1fcd82\u003c/code\u003e\u003c/a\u003e html: properly handle trailing solidus in unquoted attribute value in foreign...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/ebed060e8f30f20235f74808c22125fd86b15edd\"\u003e\u003ccode\u003eebed060\u003c/code\u003e\u003c/a\u003e internal/http3: fix build of tests with GOEXPERIMENT=nosynctest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/1f1fa29e0a46fffe18c43a9da8daa5a0b180dfa9\"\u003e\u003ccode\u003e1f1fa29\u003c/code\u003e\u003c/a\u003e publicsuffix: regenerate table\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/12150816f701c912a32a376754ab28dd3878833a\"\u003e\u003ccode\u003e1215081\u003c/code\u003e\u003c/a\u003e http2: improve error when server sends HTTP/1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/312450e473eae9f9e6173ad895c80bc5ea2f79ad\"\u003e\u003ccode\u003e312450e\u003c/code\u003e\u003c/a\u003e html: ensure \u0026lt;search\u0026gt; tag closes \u0026lt;p\u0026gt; and update tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/09731f9bf919b00b344c763894cd1920b3d96d90\"\u003e\u003ccode\u003e09731f9\u003c/code\u003e\u003c/a\u003e http2: improve handling of lost PING in Server\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/55989e24b972a90ab99308fdc7ea1fb58a96fef1\"\u003e\u003ccode\u003e55989e2\u003c/code\u003e\u003c/a\u003e http2/h2c: use ResponseController for hijacking connections\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/2914f46773171f4fa13e276df1135bafef677801\"\u003e\u003ccode\u003e2914f46\u003c/code\u003e\u003c/a\u003e websocket: re-recommend gorilla/websocket\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/99b3ae0643f9a2f9d820fcbba5f9e4c83b23bd48\"\u003e\u003ccode\u003e99b3ae0\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/85d1d54551b68719346cb9fec24b911da4e452a1\"\u003e\u003ccode\u003e85d1d54\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.23.0...v0.38.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.23.0 to 0.38.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/e1fcd82abba34df74614020343be8eb1fe85f0d9\"\u003e\u003ccode\u003ee1fcd82\u003c/code\u003e\u003c/a\u003e html: properly handle trailing solidus in unquoted attribute value in foreign...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/ebed060e8f30f20235f74808c22125fd86b15edd\"\u003e\u003ccode\u003eebed060\u003c/code\u003e\u003c/a\u003e internal/http3: fix build of tests with GOEXPERIMENT=nosynctest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/1f1fa29e0a46fffe18c43a9da8daa5a0b180dfa9\"\u003e\u003ccode\u003e1f1fa29\u003c/code\u003e\u003c/a\u003e publicsuffix: regenerate table\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/12150816f701c912a32a376754ab28dd3878833a\"\u003e\u003ccode\u003e1215081\u003c/code\u003e\u003c/a\u003e http2: improve error when server sends HTTP/1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/312450e473eae9f9e6173ad895c80bc5ea2f79ad\"\u003e\u003ccode\u003e312450e\u003c/code\u003e\u003c/a\u003e html: ensure \u0026lt;search\u0026gt; tag closes \u0026lt;p\u0026gt; and update tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/09731f9bf919b00b344c763894cd1920b3d96d90\"\u003e\u003ccode\u003e09731f9\u003c/code\u003e\u003c/a\u003e http2: improve handling of lost PING in Server\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/55989e24b972a90ab99308fdc7ea1fb58a96fef1\"\u003e\u003ccode\u003e55989e2\u003c/code\u003e\u003c/a\u003e http2/h2c: use ResponseController for hijacking connections\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/2914f46773171f4fa13e276df1135bafef677801\"\u003e\u003ccode\u003e2914f46\u003c/code\u003e\u003c/a\u003e websocket: re-recommend gorilla/websocket\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/99b3ae0643f9a2f9d820fcbba5f9e4c83b23bd48\"\u003e\u003ccode\u003e99b3ae0\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/85d1d54551b68719346cb9fec24b911da4e452a1\"\u003e\u003ccode\u003e85d1d54\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.23.0...v0.38.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.17.0 to 0.45.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/4e0068c0098be10d7025c99ab7c50ce454c1f0f9\"\u003e\u003ccode\u003e4e0068c\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e79546e28b85ea53dd37afe1c4102746ef553b9c\"\u003e\u003ccode\u003ee79546e\u003c/code\u003e\u003c/a\u003e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f91f7a7c31bf90b39c1de895ad116a2bacc88748\"\u003e\u003ccode\u003ef91f7a7\u003c/code\u003e\u003c/a\u003e ssh/agent: prevent panic on malformed constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/2df4153a0311bdfea44376e0eb6ef2faefb0275b\"\u003e\u003ccode\u003e2df4153\u003c/code\u003e\u003c/a\u003e acme/autocert: let automatic renewal work with short lifetime certs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/bcf6a849efcf4702fa5172cb0998b46c3da1e989\"\u003e\u003ccode\u003ebcf6a84\u003c/code\u003e\u003c/a\u003e acme: pass context to request\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b4f2b62076abeee4e43fb59544dac565715fbf1e\"\u003e\u003ccode\u003eb4f2b62\u003c/code\u003e\u003c/a\u003e ssh: fix error message on unsupported cipher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/79ec3a51fcc7fbd2691d56155d578225ccc542e2\"\u003e\u003ccode\u003e79ec3a5\u003c/code\u003e\u003c/a\u003e ssh: allow to bind to a hostname in remote forwarding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/122a78f140d9d3303ed3261bc374bbbca149140f\"\u003e\u003ccode\u003e122a78f\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/c0531f9c34514ad5c5551e2d6ce569ca673a8afd\"\u003e\u003ccode\u003ec0531f9\u003c/code\u003e\u003c/a\u003e all: eliminate vet diagnostics\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/0997000b45e3a40598272081bcad03ffd21b8adb\"\u003e\u003ccode\u003e0997000\u003c/code\u003e\u003c/a\u003e all: fix some comments\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.35.0...v0.45.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.23.0 to 0.38.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/e1fcd82abba34df74614020343be8eb1fe85f0d9\"\u003e\u003ccode\u003ee1fcd82\u003c/code\u003e\u003c/a\u003e html: properly handle trailing solidus in unquoted attribute value in foreign...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/ebed060e8f30f20235f74808c22125fd86b15edd\"\u003e\u003ccode\u003eebed060\u003c/code\u003e\u003c/a\u003e internal/http3: fix build of tests with GOEXPERIMENT=nosynctest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/1f1fa29e0a46fffe18c43a9da8daa5a0b180dfa9\"\u003e\u003ccode\u003e1f1fa29\u003c/code\u003e\u003c/a\u003e publicsuffix: regenerate table\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/12150816f701c912a32a376754ab28dd3878833a\"\u003e\u003ccode\u003e1215081\u003c/code\u003e\u003c/a\u003e http2: improve error when server sends HTTP/1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/312450e473eae9f9e6173ad895c80bc5ea2f79ad\"\u003e\u003ccode\u003e312450e\u003c/code\u003e\u003c/a\u003e html: ensure \u0026lt;search\u0026gt; tag closes \u0026lt;p\u0026gt; and update tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/09731f9bf919b00b344c763894cd1920b3d96d90\"\u003e\u003ccode\u003e09731f9\u003c/code\u003e\u003c/a\u003e http2: improve handling of lost PING in Server\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/55989e24b972a90ab99308fdc7ea1fb58a96fef1\"\u003e\u003ccode\u003e55989e2\u003c/code\u003e\u003c/a\u003e http2/h2c: use ResponseController for hijacking connections\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/2914f46773171f4fa13e276df1135bafef677801\"\u003e\u003ccode\u003e2914f46\u003c/code\u003e\u003c/a\u003e websocket: re-recommend gorilla/websocket\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/99b3ae0643f9a2f9d820fcbba5f9e4c83b23bd48\"\u003e\u003ccode\u003e99b3ae0\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/85d1d54551b68719346cb9fec24b911da4e452a1\"\u003e\u003ccode\u003e85d1d54\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.23.0...v0.38.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/hakancllk35/tailscale/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/hakancllk35/tailscale/pull/6","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/hakancllk35%2Ftailscale/issues/6","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/6/packages"}},{"old_version":"1.5.0","new_version":"1.6.3","update_type":"minor","path":null,"pr_created_at":"2026-04-08T01:43:11.000Z","version_change":"1.5.0 → 1.6.3","issue":{"uuid":"4221546909","node_id":"PR_kwDONtFecc7Qqomj","number":7,"state":"closed","title":"Bump the go_modules group across 3 directories with 11 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-04-08T02:57:56.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-08T01:43:11.000Z","updated_at":"2026-04-08T02:57:58.000Z","time_to_close":4485,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"go_modules","update_count":11,"packages":[{"name":"golang.org/x/crypto","old_version":"0.31.0","new_version":"0.45.0","repository_url":"https://github.com/golang/crypto"},{"name":"github.com/cloudflare/circl","old_version":"1.5.0","new_version":"1.6.3","repository_url":"https://github.com/cloudflare/circl"},{"name":"google.golang.org/grpc","old_version":"1.68.1","new_version":"1.79.3","repository_url":"https://github.com/grpc/grpc-go"},{"name":"github.com/go-git/go-git/v5","old_version":"5.12.0","new_version":"5.17.1","repository_url":"https://github.com/go-git/go-git"},{"name":"github.com/go-viper/mapstructure/v2","old_version":"2.2.1","new_version":"2.4.0","repository_url":"https://github.com/go-viper/mapstructure"},{"name":"github.com/golang-jwt/jwt/v4","old_version":"4.5.1","new_version":"4.5.2","repository_url":"https://github.com/golang-jwt/jwt"},{"name":"github.com/hashicorp/go-getter","old_version":"1.7.6","new_version":"1.7.9","repository_url":"https://github.com/hashicorp/go-getter"},{"name":"github.com/ulikunitz/xz","old_version":"0.5.12","new_version":"0.5.14","repository_url":"https://github.com/ulikunitz/xz"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 3 updates in the /.ci/providerlint directory: [golang.org/x/crypto](https://github.com/golang/crypto), [github.com/cloudflare/circl](https://github.com/cloudflare/circl) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\nBumps the go_modules group with 8 updates in the /.ci/tools directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.31.0` | `0.45.0` |\n| [github.com/cloudflare/circl](https://github.com/cloudflare/circl) | `1.5.0` | `1.6.3` |\n| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.68.1` | `1.79.3` |\n| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.12.0` | `5.17.1` |\n| [github.com/go-viper/mapstructure/v2](https://github.com/go-viper/mapstructure) | `2.2.1` | `2.4.0` |\n| [github.com/golang-jwt/jwt/v4](https://github.com/golang-jwt/jwt) | `4.5.1` | `4.5.2` |\n| [github.com/hashicorp/go-getter](https://github.com/hashicorp/go-getter) | `1.7.6` | `1.7.9` |\n| [github.com/ulikunitz/xz](https://github.com/ulikunitz/xz) | `0.5.12` | `0.5.14` |\n\nBumps the go_modules group with 3 updates in the /tools/tfsdk2fw directory: [golang.org/x/crypto](https://github.com/golang/crypto), [github.com/cloudflare/circl](https://github.com/cloudflare/circl) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).\n\nUpdates `golang.org/x/crypto` from 0.32.0 to 0.45.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/4e0068c0098be10d7025c99ab7c50ce454c1f0f9\"\u003e\u003ccode\u003e4e0068c\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e79546e28b85ea53dd37afe1c4102746ef553b9c\"\u003e\u003ccode\u003ee79546e\u003c/code\u003e\u003c/a\u003e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f91f7a7c31bf90b39c1de895ad116a2bacc88748\"\u003e\u003ccode\u003ef91f7a7\u003c/code\u003e\u003c/a\u003e ssh/agent: prevent panic on malformed constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/2df4153a0311bdfea44376e0eb6ef2faefb0275b\"\u003e\u003ccode\u003e2df4153\u003c/code\u003e\u003c/a\u003e acme/autocert: let automatic renewal work with short lifetime certs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/bcf6a849efcf4702fa5172cb0998b46c3da1e989\"\u003e\u003ccode\u003ebcf6a84\u003c/code\u003e\u003c/a\u003e acme: pass context to request\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b4f2b62076abeee4e43fb59544dac565715fbf1e\"\u003e\u003ccode\u003eb4f2b62\u003c/code\u003e\u003c/a\u003e ssh: fix error message on unsupported cipher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/79ec3a51fcc7fbd2691d56155d578225ccc542e2\"\u003e\u003ccode\u003e79ec3a5\u003c/code\u003e\u003c/a\u003e ssh: allow to bind to a hostname in remote forwarding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/122a78f140d9d3303ed3261bc374bbbca149140f\"\u003e\u003ccode\u003e122a78f\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/c0531f9c34514ad5c5551e2d6ce569ca673a8afd\"\u003e\u003ccode\u003ec0531f9\u003c/code\u003e\u003c/a\u003e all: eliminate vet diagnostics\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/0997000b45e3a40598272081bcad03ffd21b8adb\"\u003e\u003ccode\u003e0997000\u003c/code\u003e\u003c/a\u003e all: fix some comments\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.32.0...v0.45.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/cloudflare/circl` from 1.5.0 to 1.6.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cloudflare/circl/releases\"\u003egithub.com/cloudflare/circl's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eCIRCL v1.6.3\u003c/h2\u003e\n\u003cp\u003eFix a bug on ecc/p384 scalar multiplication.\u003c/p\u003e\n\u003ch3\u003eWhat's Changed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esign/mldsa: Check opts for nil value  by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/582\"\u003ecloudflare/circl#582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eecc/p384: Point addition must handle point doubling case. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/583\"\u003ecloudflare/circl#583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease CIRCL v1.6.3 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/584\"\u003ecloudflare/circl#584\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNew SLH-DSA, improvements in ML-DSA for arm64.\u003c/li\u003e\n\u003cli\u003eTested compilation on WASM.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize pairing product computation by moving exponentiations to G1. by \u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esign: Adding SLH-DSA signature by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/512\"\u003ecloudflare/circl#512\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate code generators to CIRCL v1.6.1. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/548\"\u003ecloudflare/circl#548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eML-DSA: Add preliminary Wycheproof test vectors by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/552\"\u003ecloudflare/circl#552\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ego fmt by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/554\"\u003ecloudflare/circl#554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egz-compressing test vectors, use of HexBytes and ReadGzip functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/555\"\u003ecloudflare/circl#555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Removes use of elliptic Marshal and Unmarshal functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/556\"\u003ecloudflare/circl#556\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport encoding/decoding ML-DSA private keys (as long as they contain seeds) by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/559\"\u003ecloudflare/circl#559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to golangci-lint v2 by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/560\"\u003ecloudflare/circl#560\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreparation for ARM64 Implementation of poly operations for dilithium package. by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eprepare power2Round for custom implementations in assembly by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/564\"\u003ecloudflare/circl#564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eARM64 implementation for poly.PackLe16 by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/563\"\u003ecloudflare/circl#563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polyMulBy2toD by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/565\"\u003ecloudflare/circl#565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polySub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/566\"\u003ecloudflare/circl#566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: add byteLen method for short groups and RandomScalar uses rand.Int by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/568\"\u003ecloudflare/circl#568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of poly.Add/Sub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/572\"\u003ecloudflare/circl#572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Adding cryptobyte marshaling to scalars by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/569\"\u003ecloudflare/circl#569\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumping up to Go1.25 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/574\"\u003ecloudflare/circl#574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: Including WASM compilation. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/577\"\u003ecloudflare/circl#577\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to using package-declared HPKE errors for shortkem instead of standard library errors by \u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease v1.6.2 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/579\"\u003ecloudflare/circl#579\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixes some point checks on the FourQ curve.\u003c/li\u003e\n\u003cli\u003eHybrid KEM fails on low-order points.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/24ae53c5d6f7fe18203adc125ba3ed76a38703e1\"\u003e\u003ccode\u003e24ae53c\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/581020bd4a836b8ce7bd4e414ba2884c07dbc906\"\u003e\u003ccode\u003e581020b\u003c/code\u003e\u003c/a\u003e Rename method to oddMultiplesProjective.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/12209a4566605692a8402594e367a5aed5148460\"\u003e\u003ccode\u003e12209a4\u003c/code\u003e\u003c/a\u003e Removing unused cmov for jacobian points.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/fcba359f4178645d2c9e50f29ab6966337da4b95\"\u003e\u003ccode\u003efcba359\u003c/code\u003e\u003c/a\u003e ecc/p384: use of complete projective formulas for scalar multiplication.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/5e1bae8d8c2df4e717c2c5c2d5b5d60b629b2ac6\"\u003e\u003ccode\u003e5e1bae8\u003c/code\u003e\u003c/a\u003e ecc/p384: handle point doubling in point addition with Jacobian coordinates.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/341604685ff97e8f7440ae4b4711ba1c118c648c\"\u003e\u003ccode\u003e3416046\u003c/code\u003e\u003c/a\u003e Check opts for nil value.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/a763d47a6dce43d1f4f7b697d1d7810463a526f6\"\u003e\u003ccode\u003ea763d47\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3c70bf9ad53b681fbe5ba6067e454a86549fee8a\"\u003e\u003ccode\u003e3c70bf9\u003c/code\u003e\u003c/a\u003e Bump x/crypto x/sys dependencies.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3f0f15b2bfe67bad81a35e8aec81ae42ca78349d\"\u003e\u003ccode\u003e3f0f15b\u003c/code\u003e\u003c/a\u003e Revert to using package-declared HPKE errors for shortkem instead of standard...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/23491bd573cf29b6f567057a158203a2c9dfa30d\"\u003e\u003ccode\u003e23491bd\u003c/code\u003e\u003c/a\u003e Adding generic Power2Round method.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.5.0...v1.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.34.0 to 0.47.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/9a296438e54dff851a45667aa645a97003b44db5\"\u003e\u003ccode\u003e9a29643\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/07cefd8a6bb170785052142a96034f2b2f7115bc\"\u003e\u003ccode\u003e07cefd8\u003c/code\u003e\u003c/a\u003e context: deprecate\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/5ac9daca088ab4f378d7df849f6c7d28bea86071\"\u003e\u003ccode\u003e5ac9dac\u003c/code\u003e\u003c/a\u003e publicsuffix: don't treat ip addresses as domain names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/d1f64cc67036f272ea900194674afcf71eb3e816\"\u003e\u003ccode\u003ed1f64cc\u003c/code\u003e\u003c/a\u003e quic: use testing/synctest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/fff0469cf57f71bea0cbc4cc8cbfb8f92be7a417\"\u003e\u003ccode\u003efff0469\u003c/code\u003e\u003c/a\u003e http2: document that RFC 7540 prioritization does not work with small payloads\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/f35e3a4dd2a34d1d47fac5b66210a40e2d374a79\"\u003e\u003ccode\u003ef35e3a4\u003c/code\u003e\u003c/a\u003e http2: fix weight overflow in RFC 7540 write scheduler\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/89adc90ac46a688eeda3a4a95b71acf073bd059c\"\u003e\u003ccode\u003e89adc90\u003c/code\u003e\u003c/a\u003e http2: fix typo referring to RFC 9218 as RFC 9128 instead\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/8d76a2c082f6f995c2ef1ce8a0d56f2e33b48092\"\u003e\u003ccode\u003e8d76a2c\u003c/code\u003e\u003c/a\u003e quic: don't defer MAX_STREAMS frames indefinitely\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/027f8b700eb72af5c0175a945535a42670628351\"\u003e\u003ccode\u003e027f8b7\u003c/code\u003e\u003c/a\u003e quic: fix expected ACK Delay in client's ACK after HANDSHAKE_DONE\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/dec9fe711ec1385a2aa169a3f8145d295abcca16\"\u003e\u003ccode\u003edec9fe7\u003c/code\u003e\u003c/a\u003e dns/dnsmessage: update SVCB packing to prohibit name compression\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.34.0...v0.47.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google.golang.org/grpc` from 1.67.1 to 1.79.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc-go/releases\"\u003egoogle.golang.org/grpc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 1.79.3\u003c/h2\u003e\n\u003ch1\u003eSecurity\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eserver: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted \u0026quot;deny\u0026quot; rules in interceptors like \u003ccode\u003egrpc/authz\u003c/code\u003e. Any request with a non-canonical path is now immediately rejected with an \u003ccode\u003eUnimplemented\u003c/code\u003e error. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.2\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003estats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8874\"\u003egrpc/grpc-go#8874\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.1\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003egrpc: Remove the \u003ccode\u003e-dev\u003c/code\u003e suffix from the User-Agent header. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8902\"\u003egrpc/grpc-go#8902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.0\u003c/h2\u003e\n\u003ch1\u003eAPI Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003emem: Add experimental API \u003ccode\u003eSetDefaultBufferPool\u003c/code\u003e to change the default buffer pool. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8806\"\u003e#8806\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/vanja-p\"\u003e\u003ccode\u003e@​vanja-p\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eexperimental/stats: Update \u003ccode\u003eMetricsRecorder\u003c/code\u003e to require embedding the new \u003ccode\u003eUnimplementedMetricsRecorder\u003c/code\u003e (a no-op struct) in all implementations for forward compatibility. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBehavior Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ebalancer/weightedtarget: Remove handling of \u003ccode\u003eAddresses\u003c/code\u003e and only handle \u003ccode\u003eEndpoints\u003c/code\u003e in resolver updates. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8841\"\u003e#8841\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eNew Features\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eexperimental/stats: Add support for asynchronous gauge metrics through the new \u003ccode\u003eAsyncMetricReporter\u003c/code\u003e and \u003ccode\u003eRegisterAsyncReporter\u003c/code\u003e APIs. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epickfirst: Add support for weighted random shuffling of endpoints, as described in \u003ca href=\"https://redirect.github.com/grpc/proposal/pull/535\"\u003egRFC A113\u003c/a\u003e.\n\u003cul\u003e\n\u003cli\u003eThis is enabled by default, and can be turned off using the environment variable \u003ccode\u003eGRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds: Implement \u003ccode\u003e:authority\u003c/code\u003e rewriting, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A81-xds-authority-rewriting.md\"\u003egRFC A81\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8779\"\u003e#8779\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebalancer/randomsubsetting: Implement the \u003ccode\u003erandom_subsetting\u003c/code\u003e LB policy, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A68-random-subsetting.md\"\u003egRFC A68\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8650\"\u003e#8650\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/marek-szews\"\u003e\u003ccode\u003e@​marek-szews\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/tls: Fix a bug where the port was not stripped from the authority override before validation. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8726\"\u003e#8726\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/Atul1710\"\u003e\u003ccode\u003e@​Atul1710\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds/priority: Fix a bug causing delayed failover to lower-priority clusters when a higher-priority cluster is stuck in \u003ccode\u003eCONNECTING\u003c/code\u003e state. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8813\"\u003e#8813\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ehealth: Fix a bug where health checks failed for clients using legacy compression options (\u003ccode\u003eWithDecompressor\u003c/code\u003e or \u003ccode\u003eRPCDecompressor\u003c/code\u003e). (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8765\"\u003e#8765\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/sanki92\"\u003e\u003ccode\u003e@​sanki92\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003etransport: Fix an issue where the HTTP/2 server could skip header size checks when terminating a stream early. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8769\"\u003e#8769\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eserver: Propagate status detail headers, if available, when terminating a stream during request header processing. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8754\"\u003e#8754\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ePerformance Improvements\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/alts: Optimize read buffer alignment to reduce copies. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8791\"\u003e#8791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emem: Optimize pooling and creation of \u003ccode\u003ebuffer\u003c/code\u003e objects.  (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8784\"\u003e#8784\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etransport: Reduce slice re-allocations by reserving slice capacity. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8797\"\u003e#8797\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/dda86dbd9cecb8b35b58c73d507d81d67761205f\"\u003e\u003ccode\u003edda86db\u003c/code\u003e\u003c/a\u003e Change version to 1.79.3 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8983\"\u003e#8983\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/72186f163e75a065c39e6f7df9b6dea07fbdeff5\"\u003e\u003ccode\u003e72186f1\u003c/code\u003e\u003c/a\u003e grpc: enforce strict path checking for incoming requests on the server (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/97ca3522b239edf6813e2b1106924e9d55e89d43\"\u003e\u003ccode\u003e97ca352\u003c/code\u003e\u003c/a\u003e Changing version to 1.79.3-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8954\"\u003e#8954\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/8902ab6efea590f5b3861126559eaa26fa9783b2\"\u003e\u003ccode\u003e8902ab6\u003c/code\u003e\u003c/a\u003e Change the version to release 1.79.2 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8947\"\u003e#8947\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/a9286705aa689bee321ec674323b6896284f3e02\"\u003e\u003ccode\u003ea928670\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8874\"\u003e#8874\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8904\"\u003e#8904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/06df3638c0bcee88197b1033b3ba83e1eb8bc010\"\u003e\u003ccode\u003e06df363\u003c/code\u003e\u003c/a\u003e Change version to 1.79.2-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8903\"\u003e#8903\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/782f2de44f597af18a120527e7682a6670d84289\"\u003e\u003ccode\u003e782f2de\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8902\"\u003e#8902\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/850eccbb2257bd2de6ac28ee88a7172ab6175629\"\u003e\u003ccode\u003e850eccb\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8851\"\u003e#8851\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/765ff056b6890f6c8341894df4e9668e9bfc18ef\"\u003e\u003ccode\u003e765ff05\u003c/code\u003e\u003c/a\u003e Change version to 1.79.0 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8850\"\u003e#8850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/68804be0e78ed0365bb5a576dedc12e2168ed63e\"\u003e\u003ccode\u003e68804be\u003c/code\u003e\u003c/a\u003e Cherry pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8896\"\u003e#8896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/grpc/grpc-go/compare/v1.67.1...v1.79.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.31.0 to 0.45.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/4e0068c0098be10d7025c99ab7c50ce454c1f0f9\"\u003e\u003ccode\u003e4e0068c\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e79546e28b85ea53dd37afe1c4102746ef553b9c\"\u003e\u003ccode\u003ee79546e\u003c/code\u003e\u003c/a\u003e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f91f7a7c31bf90b39c1de895ad116a2bacc88748\"\u003e\u003ccode\u003ef91f7a7\u003c/code\u003e\u003c/a\u003e ssh/agent: prevent panic on malformed constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/2df4153a0311bdfea44376e0eb6ef2faefb0275b\"\u003e\u003ccode\u003e2df4153\u003c/code\u003e\u003c/a\u003e acme/autocert: let automatic renewal work with short lifetime certs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/bcf6a849efcf4702fa5172cb0998b46c3da1e989\"\u003e\u003ccode\u003ebcf6a84\u003c/code\u003e\u003c/a\u003e acme: pass context to request\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b4f2b62076abeee4e43fb59544dac565715fbf1e\"\u003e\u003ccode\u003eb4f2b62\u003c/code\u003e\u003c/a\u003e ssh: fix error message on unsupported cipher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/79ec3a51fcc7fbd2691d56155d578225ccc542e2\"\u003e\u003ccode\u003e79ec3a5\u003c/code\u003e\u003c/a\u003e ssh: allow to bind to a hostname in remote forwarding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/122a78f140d9d3303ed3261bc374bbbca149140f\"\u003e\u003ccode\u003e122a78f\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/c0531f9c34514ad5c5551e2d6ce569ca673a8afd\"\u003e\u003ccode\u003ec0531f9\u003c/code\u003e\u003c/a\u003e all: eliminate vet diagnostics\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/0997000b45e3a40598272081bcad03ffd21b8adb\"\u003e\u003ccode\u003e0997000\u003c/code\u003e\u003c/a\u003e all: fix some comments\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.32.0...v0.45.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/cloudflare/circl` from 1.5.0 to 1.6.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cloudflare/circl/releases\"\u003egithub.com/cloudflare/circl's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eCIRCL v1.6.3\u003c/h2\u003e\n\u003cp\u003eFix a bug on ecc/p384 scalar multiplication.\u003c/p\u003e\n\u003ch3\u003eWhat's Changed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esign/mldsa: Check opts for nil value  by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/582\"\u003ecloudflare/circl#582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eecc/p384: Point addition must handle point doubling case. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/583\"\u003ecloudflare/circl#583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease CIRCL v1.6.3 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/584\"\u003ecloudflare/circl#584\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNew SLH-DSA, improvements in ML-DSA for arm64.\u003c/li\u003e\n\u003cli\u003eTested compilation on WASM.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize pairing product computation by moving exponentiations to G1. by \u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esign: Adding SLH-DSA signature by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/512\"\u003ecloudflare/circl#512\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate code generators to CIRCL v1.6.1. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/548\"\u003ecloudflare/circl#548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eML-DSA: Add preliminary Wycheproof test vectors by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/552\"\u003ecloudflare/circl#552\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ego fmt by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/554\"\u003ecloudflare/circl#554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egz-compressing test vectors, use of HexBytes and ReadGzip functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/555\"\u003ecloudflare/circl#555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Removes use of elliptic Marshal and Unmarshal functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/556\"\u003ecloudflare/circl#556\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport encoding/decoding ML-DSA private keys (as long as they contain seeds) by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/559\"\u003ecloudflare/circl#559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to golangci-lint v2 by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/560\"\u003ecloudflare/circl#560\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreparation for ARM64 Implementation of poly operations for dilithium package. by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eprepare power2Round for custom implementations in assembly by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/564\"\u003ecloudflare/circl#564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eARM64 implementation for poly.PackLe16 by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/563\"\u003ecloudflare/circl#563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polyMulBy2toD by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/565\"\u003ecloudflare/circl#565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polySub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/566\"\u003ecloudflare/circl#566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: add byteLen method for short groups and RandomScalar uses rand.Int by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/568\"\u003ecloudflare/circl#568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of poly.Add/Sub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/572\"\u003ecloudflare/circl#572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Adding cryptobyte marshaling to scalars by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/569\"\u003ecloudflare/circl#569\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumping up to Go1.25 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/574\"\u003ecloudflare/circl#574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: Including WASM compilation. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/577\"\u003ecloudflare/circl#577\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to using package-declared HPKE errors for shortkem instead of standard library errors by \u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease v1.6.2 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/579\"\u003ecloudflare/circl#579\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixes some point checks on the FourQ curve.\u003c/li\u003e\n\u003cli\u003eHybrid KEM fails on low-order points.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/24ae53c5d6f7fe18203adc125ba3ed76a38703e1\"\u003e\u003ccode\u003e24ae53c\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/581020bd4a836b8ce7bd4e414ba2884c07dbc906\"\u003e\u003ccode\u003e581020b\u003c/code\u003e\u003c/a\u003e Rename method to oddMultiplesProjective.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/12209a4566605692a8402594e367a5aed5148460\"\u003e\u003ccode\u003e12209a4\u003c/code\u003e\u003c/a\u003e Removing unused cmov for jacobian points.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/fcba359f4178645d2c9e50f29ab6966337da4b95\"\u003e\u003ccode\u003efcba359\u003c/code\u003e\u003c/a\u003e ecc/p384: use of complete projective formulas for scalar multiplication.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/5e1bae8d8c2df4e717c2c5c2d5b5d60b629b2ac6\"\u003e\u003ccode\u003e5e1bae8\u003c/code\u003e\u003c/a\u003e ecc/p384: handle point doubling in point addition with Jacobian coordinates.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/341604685ff97e8f7440ae4b4711ba1c118c648c\"\u003e\u003ccode\u003e3416046\u003c/code\u003e\u003c/a\u003e Check opts for nil value.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/a763d47a6dce43d1f4f7b697d1d7810463a526f6\"\u003e\u003ccode\u003ea763d47\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3c70bf9ad53b681fbe5ba6067e454a86549fee8a\"\u003e\u003ccode\u003e3c70bf9\u003c/code\u003e\u003c/a\u003e Bump x/crypto x/sys dependencies.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3f0f15b2bfe67bad81a35e8aec81ae42ca78349d\"\u003e\u003ccode\u003e3f0f15b\u003c/code\u003e\u003c/a\u003e Revert to using package-declared HPKE errors for shortkem instead of standard...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/23491bd573cf29b6f567057a158203a2c9dfa30d\"\u003e\u003ccode\u003e23491bd\u003c/code\u003e\u003c/a\u003e Adding generic Power2Round method.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.5.0...v1.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.32.0 to 0.47.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/9a296438e54dff851a45667aa645a97003b44db5\"\u003e\u003ccode\u003e9a29643\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/07cefd8a6bb170785052142a96034f2b2f7115bc\"\u003e\u003ccode\u003e07cefd8\u003c/code\u003e\u003c/a\u003e context: deprecate\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/5ac9daca088ab4f378d7df849f6c7d28bea86071\"\u003e\u003ccode\u003e5ac9dac\u003c/code\u003e\u003c/a\u003e publicsuffix: don't treat ip addresses as domain names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/d1f64cc67036f272ea900194674afcf71eb3e816\"\u003e\u003ccode\u003ed1f64cc\u003c/code\u003e\u003c/a\u003e quic: use testing/synctest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/fff0469cf57f71bea0cbc4cc8cbfb8f92be7a417\"\u003e\u003ccode\u003efff0469\u003c/code\u003e\u003c/a\u003e http2: document that RFC 7540 prioritization does not work with small payloads\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/f35e3a4dd2a34d1d47fac5b66210a40e2d374a79\"\u003e\u003ccode\u003ef35e3a4\u003c/code\u003e\u003c/a\u003e http2: fix weight overflow in RFC 7540 write scheduler\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/89adc90ac46a688eeda3a4a95b71acf073bd059c\"\u003e\u003ccode\u003e89adc90\u003c/code\u003e\u003c/a\u003e http2: fix typo referring to RFC 9218 as RFC 9128 instead\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/8d76a2c082f6f995c2ef1ce8a0d56f2e33b48092\"\u003e\u003ccode\u003e8d76a2c\u003c/code\u003e\u003c/a\u003e quic: don't defer MAX_STREAMS frames indefinitely\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/027f8b700eb72af5c0175a945535a42670628351\"\u003e\u003ccode\u003e027f8b7\u003c/code\u003e\u003c/a\u003e quic: fix expected ACK Delay in client's ACK after HANDSHAKE_DONE\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/dec9fe711ec1385a2aa169a3f8145d295abcca16\"\u003e\u003ccode\u003edec9fe7\u003c/code\u003e\u003c/a\u003e dns/dnsmessage: update SVCB packing to prohibit name compression\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.34.0...v0.47.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google.golang.org/grpc` from 1.68.1 to 1.79.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc-go/releases\"\u003egoogle.golang.org/grpc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 1.79.3\u003c/h2\u003e\n\u003ch1\u003eSecurity\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eserver: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted \u0026quot;deny\u0026quot; rules in interceptors like \u003ccode\u003egrpc/authz\u003c/code\u003e. Any request with a non-canonical path is now immediately rejected with an \u003ccode\u003eUnimplemented\u003c/code\u003e error. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.2\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003estats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8874\"\u003egrpc/grpc-go#8874\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.1\u003c/h2\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003egrpc: Remove the \u003ccode\u003e-dev\u003c/code\u003e suffix from the User-Agent header. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/pull/8902\"\u003egrpc/grpc-go#8902\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.79.0\u003c/h2\u003e\n\u003ch1\u003eAPI Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003emem: Add experimental API \u003ccode\u003eSetDefaultBufferPool\u003c/code\u003e to change the default buffer pool. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8806\"\u003e#8806\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/vanja-p\"\u003e\u003ccode\u003e@​vanja-p\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eexperimental/stats: Update \u003ccode\u003eMetricsRecorder\u003c/code\u003e to require embedding the new \u003ccode\u003eUnimplementedMetricsRecorder\u003c/code\u003e (a no-op struct) in all implementations for forward compatibility. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBehavior Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ebalancer/weightedtarget: Remove handling of \u003ccode\u003eAddresses\u003c/code\u003e and only handle \u003ccode\u003eEndpoints\u003c/code\u003e in resolver updates. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8841\"\u003e#8841\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eNew Features\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eexperimental/stats: Add support for asynchronous gauge metrics through the new \u003ccode\u003eAsyncMetricReporter\u003c/code\u003e and \u003ccode\u003eRegisterAsyncReporter\u003c/code\u003e APIs. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8780\"\u003e#8780\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epickfirst: Add support for weighted random shuffling of endpoints, as described in \u003ca href=\"https://redirect.github.com/grpc/proposal/pull/535\"\u003egRFC A113\u003c/a\u003e.\n\u003cul\u003e\n\u003cli\u003eThis is enabled by default, and can be turned off using the environment variable \u003ccode\u003eGRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds: Implement \u003ccode\u003e:authority\u003c/code\u003e rewriting, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A81-xds-authority-rewriting.md\"\u003egRFC A81\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8779\"\u003e#8779\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebalancer/randomsubsetting: Implement the \u003ccode\u003erandom_subsetting\u003c/code\u003e LB policy, as specified in \u003ca href=\"https://github.com/grpc/proposal/blob/master/A68-random-subsetting.md\"\u003egRFC A68\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8650\"\u003e#8650\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/marek-szews\"\u003e\u003ccode\u003e@​marek-szews\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/tls: Fix a bug where the port was not stripped from the authority override before validation. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8726\"\u003e#8726\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/Atul1710\"\u003e\u003ccode\u003e@​Atul1710\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003exds/priority: Fix a bug causing delayed failover to lower-priority clusters when a higher-priority cluster is stuck in \u003ccode\u003eCONNECTING\u003c/code\u003e state. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8813\"\u003e#8813\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ehealth: Fix a bug where health checks failed for clients using legacy compression options (\u003ccode\u003eWithDecompressor\u003c/code\u003e or \u003ccode\u003eRPCDecompressor\u003c/code\u003e). (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8765\"\u003e#8765\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/sanki92\"\u003e\u003ccode\u003e@​sanki92\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003etransport: Fix an issue where the HTTP/2 server could skip header size checks when terminating a stream early. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8769\"\u003e#8769\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eserver: Propagate status detail headers, if available, when terminating a stream during request header processing. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8754\"\u003e#8754\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/joybestourous\"\u003e\u003ccode\u003e@​joybestourous\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ePerformance Improvements\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ecredentials/alts: Optimize read buffer alignment to reduce copies. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8791\"\u003e#8791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emem: Optimize pooling and creation of \u003ccode\u003ebuffer\u003c/code\u003e objects.  (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8784\"\u003e#8784\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etransport: Reduce slice re-allocations by reserving slice capacity. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8797\"\u003e#8797\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/dda86dbd9cecb8b35b58c73d507d81d67761205f\"\u003e\u003ccode\u003edda86db\u003c/code\u003e\u003c/a\u003e Change version to 1.79.3 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8983\"\u003e#8983\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/72186f163e75a065c39e6f7df9b6dea07fbdeff5\"\u003e\u003ccode\u003e72186f1\u003c/code\u003e\u003c/a\u003e grpc: enforce strict path checking for incoming requests on the server (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8981\"\u003e#8981\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/97ca3522b239edf6813e2b1106924e9d55e89d43\"\u003e\u003ccode\u003e97ca352\u003c/code\u003e\u003c/a\u003e Changing version to 1.79.3-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8954\"\u003e#8954\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/8902ab6efea590f5b3861126559eaa26fa9783b2\"\u003e\u003ccode\u003e8902ab6\u003c/code\u003e\u003c/a\u003e Change the version to release 1.79.2 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8947\"\u003e#8947\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/a9286705aa689bee321ec674323b6896284f3e02\"\u003e\u003ccode\u003ea928670\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8874\"\u003e#8874\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8904\"\u003e#8904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/06df3638c0bcee88197b1033b3ba83e1eb8bc010\"\u003e\u003ccode\u003e06df363\u003c/code\u003e\u003c/a\u003e Change version to 1.79.2-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8903\"\u003e#8903\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/782f2de44f597af18a120527e7682a6670d84289\"\u003e\u003ccode\u003e782f2de\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8902\"\u003e#8902\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/850eccbb2257bd2de6ac28ee88a7172ab6175629\"\u003e\u003ccode\u003e850eccb\u003c/code\u003e\u003c/a\u003e Change version to 1.79.1-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8851\"\u003e#8851\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/765ff056b6890f6c8341894df4e9668e9bfc18ef\"\u003e\u003ccode\u003e765ff05\u003c/code\u003e\u003c/a\u003e Change version to 1.79.0 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8850\"\u003e#8850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/68804be0e78ed0365bb5a576dedc12e2168ed63e\"\u003e\u003ccode\u003e68804be\u003c/code\u003e\u003c/a\u003e Cherry pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8864\"\u003e#8864\u003c/a\u003e to v1.79.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8896\"\u003e#8896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/grpc/grpc-go/compare/v1.67.1...v1.79.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-git/go-git/v5` from 5.12.0 to 5.17.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-git/go-git/releases\"\u003egithub.com/go-git/go-git/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.17.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/cloudflare/circl to v1.6.3 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1930\"\u003ego-git/go-git#1930\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/index, Improve v4 entry name validation by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1935\"\u003ego-git/go-git#1935\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] plumbing: format/idxfile, Fix version and fanout checks by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1937\"\u003ego-git/go-git#1937\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\"\u003ehttps://github.com/go-git/go-git/compare/v5.17.0...v5.17.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.17.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.16.5 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1839\"\u003ego-git/go-git#1839\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: worktree, optimize infiles function for very large repos by \u003ca href=\"https://github.com/k-anshul\"\u003e\u003ccode\u003e@​k-anshul\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1853\"\u003ego-git/go-git#1853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egit: Add strict checks for supported extensions by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1861\"\u003ego-git/go-git#1861\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebackport, git: Improve Status() speed with new index.ModTime check by \u003ca href=\"https://github.com/cedric-appdirect\"\u003e\u003ccode\u003e@​cedric-appdirect\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1862\"\u003ego-git/go-git#1862\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003estorage: filesystem, Avoid overwriting loose obj files by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1864\"\u003ego-git/go-git#1864\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.5...v5.17.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.16.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild: Update module golang.org/x/crypto to v0.45.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1744\"\u003ego-git/go-git#1744\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Bump Go test versions to 1.23-1.25 (v5) by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1746\"\u003ego-git/go-git#1746\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v5] git: worktree, Don't delete local untracked files when resetting worktree by \u003ca href=\"https://github.com/Ch00k\"\u003e\u003ccode\u003e@​Ch00k\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1800\"\u003ego-git/go-git#1800\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExpand packfile checks by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1836\"\u003ego-git/go-git#1836\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.4...v5.16.5\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.4...v5.16.5\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.16.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebackport plumbing: format/idxfile, prevent panic by \u003ca href=\"https://github.com/swills\"\u003e\u003ccode\u003e@​swills\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1732\"\u003ego-git/go-git#1732\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[backport] build: test, Fix build on Windows. by \u003ca href=\"https://github.com/pjbgf\"\u003e\u003ccode\u003e@​pjbgf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1734\"\u003ego-git/go-git#1734\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Update module golang.org/x/net to v0.38.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1742\"\u003ego-git/go-git#1742\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Update module github.com/cloudflare/circl to v1.6.1 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1741\"\u003ego-git/go-git#1741\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Update module github.com/go-git/go-git/v5 to v5.13.0 [SECURITY] (releases/v5.x) by \u003ca href=\"https://github.com/go-git-renovate\"\u003e\u003ccode\u003e@​go-git-renovate\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1743\"\u003ego-git/go-git#1743\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.3...v5.16.4\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.3...v5.16.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.16.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003einternal: Expand regex to fix build [5.x] by \u003ca href=\"https://github.com/baloo\"\u003e\u003ccode\u003e@​baloo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1644\"\u003ego-git/go-git#1644\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: raise timeouts for windows CI tests and disable CIFuzz [5.x] by \u003ca href=\"https://github.com/baloo\"\u003e\u003ccode\u003e@​baloo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1646\"\u003ego-git/go-git#1646\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eplumbing: support commits extra headers, support jujutsu signed commit [5.x] by \u003ca href=\"https://github.com/baloo\"\u003e\u003ccode\u003e@​baloo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-git/go-git/pull/1633\"\u003ego-git/go-git#1633\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-git/go-git/compare/v5.16.2...v5.16.3\"\u003ehttps://github.com/go-git/go-git/compare/v5.16.2...v5.16.3\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/5e23dfd02db92644dc4a3358ceb297fce875b772\"\u003e\u003ccode\u003e5e23dfd\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1937\"\u003e#1937\u003c/a\u003e from pjbgf/idx-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/6b38a326816b80f64c20cc0e6113958b65c05a1c\"\u003e\u003ccode\u003e6b38a32\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1935\"\u003e#1935\u003c/a\u003e from pjbgf/index-v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/cd757fcb856a2dcc5fff6c110320a8ff62e99513\"\u003e\u003ccode\u003ecd757fc\u003c/code\u003e\u003c/a\u003e plumbing: format/idxfile, Fix version and fanout checks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/3ec0d70cb687ae1da5f4d18faa4229bd971a8710\"\u003e\u003ccode\u003e3ec0d70\u003c/code\u003e\u003c/a\u003e plumbing: format/index, Fix tree extension invalidated entry parsing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/dbe10b6b425a2a4ea92a9d98e20cd68e15aede01\"\u003e\u003ccode\u003edbe10b6\u003c/code\u003e\u003c/a\u003e plumbing: format/index, Align V2/V3 long name and V4 prefix encoding with Git\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/e9b65df44cb97faeba148b47523a362beaecddf9\"\u003e\u003ccode\u003ee9b65df\u003c/code\u003e\u003c/a\u003e plumbing: format/index, Improve v4 entry name validation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/adad18daabddee04c5a889f0230035e74bca32c0\"\u003e\u003ccode\u003eadad18d\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1930\"\u003e#1930\u003c/a\u003e from go-git/renovate/releases/v5.x-go-github.com-clo...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/29470bd1d862c6e902996b8e8ff8eb7a0515a9be\"\u003e\u003ccode\u003e29470bd\u003c/code\u003e\u003c/a\u003e build: Update module github.com/cloudflare/circl to v1.6.3 [SECURITY]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/bdf06885bdaa3631cf6a2017108086c6f53dcf69\"\u003e\u003ccode\u003ebdf0688\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/1864\"\u003e#1864\u003c/a\u003e from pjbgf/v5-issue-55\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-git/go-git/commit/5290e521c8cf651bf3e8d3e37f517c7cf7aa0b19\"\u003e\u003ccode\u003e5290e52\u003c/code\u003e\u003c/a\u003e storage: filesystem, Avoid overwriting loose obj files. Fixes \u003ca href=\"https://redirect.github.com/go-git/go-git/issues/55\"\u003e#55\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-git/go-git/compare/v5.12.0...v5.17.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-viper/mapstructure/v2` from 2.2.1 to 2.4.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-viper/mapstructure/releases\"\u003egithub.com/go-viper/mapstructure/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.4.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003erefactor: replace interface{} with any by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/115\"\u003ego-viper/mapstructure#115\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.0 to 3.29.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/114\"\u003ego-viper/mapstructure#114\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGeneric tests by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/118\"\u003ego-viper/mapstructure#118\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix godoc reference link in README.md by \u003ca href=\"https://github.com/peczenyj\"\u003e\u003ccode\u003e@​peczenyj\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/107\"\u003ego-viper/mapstructure#107\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add StringToTimeLocationHookFunc to convert strings to *time.Location by \u003ca href=\"https://github.com/ErfanMomeniii\"\u003e\u003ccode\u003e@​ErfanMomeniii\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/117\"\u003ego-viper/mapstructure#117\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add back previous StringToSlice as a weak function by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/119\"\u003ego-viper/mapstructure#119\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ErfanMomeniii\"\u003e\u003ccode\u003e@​ErfanMomeniii\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/117\"\u003ego-viper/mapstructure#117\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-viper/mapstructure/compare/v2.3.0...v2.4.0\"\u003ehttps://github.com/go-viper/mapstructure/compare/v2.3.0...v2.4.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.3.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 4.1.7 to 4.2.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/46\"\u003ego-viper/mapstructure#46\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golangci/golangci-lint-action from 6.1.0 to 6.1.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/47\"\u003ego-viper/mapstructure#47\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[enhancement] Add check for \u003ccode\u003ereflect.Value\u003c/code\u003e in \u003ccode\u003eComposeDecodeHookFunc\u003c/code\u003e by \u003ca href=\"https://github.com/mahadzaryab1\"\u003e\u003ccode\u003e@​mahadzaryab1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/52\"\u003ego-viper/mapstructure#52\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.0.2 to 5.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/51\"\u003ego-viper/mapstructure#51\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 4.2.0 to 4.2.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/50\"\u003ego-viper/mapstructure#50\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.1.0 to 5.2.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/55\"\u003ego-viper/mapstructure#55\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.2.0 to 5.3.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/58\"\u003ego-viper/mapstructure#58\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: add Go 1.24 to the test matrix by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/74\"\u003ego-viper/mapstructure#74\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golangci/golangci-lint-action from 6.1.1 to 6.5.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/72\"\u003ego-viper/mapstructure#72\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golangci/golangci-lint-action from 6.5.0 to 6.5.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/76\"\u003ego-viper/mapstructure#76\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.3.0 to 5.4.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/78\"\u003ego-viper/mapstructure#78\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add decode hook for netip.Prefix by \u003ca href=\"https://github.com/tklauser\"\u003e\u003ccode\u003e@​tklauser\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/85\"\u003ego-viper/mapstructure#85\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdates by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/86\"\u003ego-viper/mapstructure#86\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 2.13.4 to 3.28.15 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/87\"\u003ego-viper/mapstructure#87\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.4.0 to 5.5.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/93\"\u003ego-viper/mapstructure#93\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.15 to 3.28.17 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/92\"\u003ego-viper/mapstructure#92\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.17 to 3.28.19 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/97\"\u003ego-viper/mapstructure#97\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/96\"\u003ego-viper/mapstructure#96\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate README.md by \u003ca href=\"https://github.com/peczenyj\"\u003e\u003ccode\u003e@​peczenyj\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/90\"\u003ego-viper/mapstructure#90\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd omitzero tag. by \u003ca href=\"https://github.com/Crystalix007\"\u003e\u003ccode\u003e@​Crystalix007\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/98\"\u003ego-viper/mapstructure#98\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse error structs instead of duplicated strings by \u003ca href=\"https://github.com/m1k1o\"\u003e\u003ccode\u003e@​m1k1o\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/102\"\u003ego-viper/mapstructure#102\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.19 to 3.29.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/101\"\u003ego-viper/mapstructure#101\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add common error interface by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/105\"\u003ego-viper/mapstructure#105\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eupdate linter by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/106\"\u003ego-viper/mapstructure#106\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFeature allow unset pointer by \u003ca href=\"https://github.com/rostislaved\"\u003e\u003ccode\u003e@​rostislaved\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/80\"\u003ego-viper/mapstructure#80\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tklauser\"\u003e\u003ccode\u003e@​tklauser\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/85\"\u003ego-viper/mapstructure#85\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/peczenyj\"\u003e\u003ccode\u003e@​peczenyj\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/90\"\u003ego-viper/mapstructure#90\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Crystalix007\"\u003e\u003ccode\u003e@​Crystalix007\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/98\"\u003ego-viper/mapstructure#98\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rostislaved\"\u003e\u003ccode\u003e@​rostislaved\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/80\"\u003ego-viper/mapstructure#80\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-viper/mapstructure/compare/v2.2.1...v2.3.0\"\u003ehttps://github.com/go-viper/mapstructure/compare/v2.2.1...v2.3.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/b9794a5f0e73d425210d6614ed833067029155f5\"\u003e\u003ccode\u003eb9794a5\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/119\"\u003e#119\u003c/a\u003e from go-viper/string-to-weak-slice\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/17cdcb0741054e2a33938adf6bd1f2a5c0aa8f30\"\u003e\u003ccode\u003e17cdcb0\u003c/code\u003e\u003c/a\u003e feat: add back previous StringToSlice as a weak function\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/3caca3614c3ab2c5b5d359c44fdcd72058887b19\"\u003e\u003ccode\u003e3caca36\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/117\"\u003e#117\u003c/a\u003e from ErfanMomeniii/main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/9a861bc115f2b54ed4e494662f29c172d9ef046a\"\u003e\u003ccode\u003e9a861bc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/107\"\u003e#107\u003c/a\u003e from peczenyj/patch-2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/86ed5b59da0615fb8c3a413f401cdf0231f1234c\"\u003e\u003ccode\u003e86ed5b5\u003c/code\u003e\u003c/a\u003e refactor: update\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/ace5b4e8b3dec99468ffa9498e42fb09d177b0a6\"\u003e\u003ccode\u003eace5b4e\u003c/code\u003e\u003c/a\u003e chore: add interface any linter\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/1a4f1aef38bfa8549762aaf42c7c18a5d268e76e\"\u003e\u003ccode\u003e1a4f1ae\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/118\"\u003e#118\u003c/a\u003e from go-viper/generic-tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/a2689090ed4348033c36724d866faf1f911a9f63\"\u003e\u003ccode\u003ea268909\u003c/code\u003e\u003c/a\u003e fix: lint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/17f1fd44eb7606b109c9bb017c0a1c6d3e93b5cd\"\u003e\u003ccode\u003e17f1fd4\u003c/code\u003e\u003c/a\u003e test: add more comments\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/b48c8566836bf291bfee2b217d51fc36e8e61f6f\"\u003e\u003ccode\u003eb48c856\u003c/code\u003e\u003c/a\u003e test: expand tests\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-viper/mapstructure/compare/v2.2.1...v2.4.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/golang-jwt/jwt/v4` from 4.5.1 to 4.5.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/golang-jwt/jwt/releases\"\u003egithub.com/golang-jwt/jwt/v4's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.5.2\u003c/h2\u003e\n\u003cp\u003eSee \u003ca href=\"https://github.com/golang-jwt/jwt/security/advisories/GHSA-mh63-6h87-95cp\"\u003ehttps://github.com/golang-jwt/jwt/security/advisories/GHSA-mh63-6h87-95cp\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang-jwt/jwt/compare/v4.5.1...v4.5.2\"\u003ehttps://github.com/golang-jwt/jwt/compare/v4.5.1...v4.5.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/2f0e9add62078527821828c76865661aa7718a84\"\u003e\u003ccode\u003e2f0e9ad\u003c/code\u003e\u003c/a\u003e Backporting 0951d18 to v4\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang-jwt/jwt/compare/v4.5.1...v4.5.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/hashicorp/go-getter` from 1.7.6 to 1.7.9\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/hashicorp/go-getter/releases\"\u003egithub.com/hashicorp/go-getter's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.7.9\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSpeed up XZ decompression by 5x with bufio wrapper by \u003ca href=\"https://github.com/vsarunas\"\u003e\u003ccode\u003e@​vsarunas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/520\"\u003ehashicorp/go-getter#520\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix CI Workflow by \u003ca href=\"https://github.com/mohanmanikanta2299\"\u003e\u003ccode\u003e@​mohanmanikanta2299\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/522\"\u003ehashicorp/go-getter#522\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: Remove use of \u0026quot;mitchellh/go-testing-interface\u0026quot; for stdlib by \u003ca href=\"https://github.com/jrasell\"\u003e\u003ccode\u003e@​jrasell\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/523\"\u003ehashicorp/go-getter#523\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: url redact of multiple sshkey by \u003ca href=\"https://github.com/dduzgun-security\"\u003e\u003ccode\u003e@​dduzgun-security\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/528\"\u003ehashicorp/go-getter#528\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePublish arm binaries by \u003ca href=\"https://github.com/sethvargo\"\u003e\u003ccode\u003e@​sethvargo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/525\"\u003ehashicorp/go-getter#525\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix errcheck lint errors and run it as part of pr checks by \u003ca href=\"https://github.com/abhijeetviswa\"\u003e\u003ccode\u003e@​abhijeetviswa\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/hashicorp/go-getter/pull/530\"\u003ehashicorp/go-getter#530\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix additional lint errors and increase linter scop...\n\n_Description has been truncated_","html_url":"https://github.com/Jackblanket847/terraform-provider-aws/pull/7","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Jackblanket847%2Fterraform-provider-aws/issues/7","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/7/packages"}},{"old_version":"1.6.1","new_version":"1.6.3","update_type":"patch","path":"/tools","pr_created_at":"2026-04-07T22:10:51.000Z","version_change":"1.6.1 → 1.6.3","issue":{"uuid":"4220872235","node_id":"PR_kwDONDTgas7QoqES","number":2017,"state":"open","title":"chore(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 in /tools","user":"dependabot[bot]","labels":["dependencies","go","size:XS"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-04-07T22:10:51.000Z","updated_at":"2026-04-07T22:28:42.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"github.com/cloudflare/circl","old_version":"1.6.1","new_version":"1.6.3","repository_url":"https://github.com/cloudflare/circl"}],"path":"/tools","ecosystem":"go"},"body":"Bumps [github.com/cloudflare/circl](https://github.com/cloudflare/circl) from 1.6.1 to 1.6.3.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cloudflare/circl/releases\"\u003egithub.com/cloudflare/circl's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eCIRCL v1.6.3\u003c/h2\u003e\n\u003cp\u003eFix a bug on ecc/p384 scalar multiplication.\u003c/p\u003e\n\u003ch3\u003eWhat's Changed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esign/mldsa: Check opts for nil value  by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/582\"\u003ecloudflare/circl#582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eecc/p384: Point addition must handle point doubling case. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/583\"\u003ecloudflare/circl#583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease CIRCL v1.6.3 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/584\"\u003ecloudflare/circl#584\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNew SLH-DSA, improvements in ML-DSA for arm64.\u003c/li\u003e\n\u003cli\u003eTested compilation on WASM.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize pairing product computation by moving exponentiations to G1. by \u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esign: Adding SLH-DSA signature by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/512\"\u003ecloudflare/circl#512\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate code generators to CIRCL v1.6.1. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/548\"\u003ecloudflare/circl#548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eML-DSA: Add preliminary Wycheproof test vectors by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/552\"\u003ecloudflare/circl#552\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ego fmt by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/554\"\u003ecloudflare/circl#554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egz-compressing test vectors, use of HexBytes and ReadGzip functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/555\"\u003ecloudflare/circl#555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Removes use of elliptic Marshal and Unmarshal functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/556\"\u003ecloudflare/circl#556\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport encoding/decoding ML-DSA private keys (as long as they contain seeds) by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/559\"\u003ecloudflare/circl#559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to golangci-lint v2 by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/560\"\u003ecloudflare/circl#560\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreparation for ARM64 Implementation of poly operations for dilithium package. by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eprepare power2Round for custom implementations in assembly by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/564\"\u003ecloudflare/circl#564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eARM64 implementation for poly.PackLe16 by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/563\"\u003ecloudflare/circl#563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polyMulBy2toD by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/565\"\u003ecloudflare/circl#565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polySub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/566\"\u003ecloudflare/circl#566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: add byteLen method for short groups and RandomScalar uses rand.Int by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/568\"\u003ecloudflare/circl#568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of poly.Add/Sub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/572\"\u003ecloudflare/circl#572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Adding cryptobyte marshaling to scalars by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/569\"\u003ecloudflare/circl#569\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumping up to Go1.25 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/574\"\u003ecloudflare/circl#574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: Including WASM compilation. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/577\"\u003ecloudflare/circl#577\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to using package-declared HPKE errors for shortkem instead of standard library errors by \u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease v1.6.2 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/579\"\u003ecloudflare/circl#579\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/24ae53c5d6f7fe18203adc125ba3ed76a38703e1\"\u003e\u003ccode\u003e24ae53c\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/581020bd4a836b8ce7bd4e414ba2884c07dbc906\"\u003e\u003ccode\u003e581020b\u003c/code\u003e\u003c/a\u003e Rename method to oddMultiplesProjective.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/12209a4566605692a8402594e367a5aed5148460\"\u003e\u003ccode\u003e12209a4\u003c/code\u003e\u003c/a\u003e Removing unused cmov for jacobian points.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/fcba359f4178645d2c9e50f29ab6966337da4b95\"\u003e\u003ccode\u003efcba359\u003c/code\u003e\u003c/a\u003e ecc/p384: use of complete projective formulas for scalar multiplication.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/5e1bae8d8c2df4e717c2c5c2d5b5d60b629b2ac6\"\u003e\u003ccode\u003e5e1bae8\u003c/code\u003e\u003c/a\u003e ecc/p384: handle point doubling in point addition with Jacobian coordinates.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/341604685ff97e8f7440ae4b4711ba1c118c648c\"\u003e\u003ccode\u003e3416046\u003c/code\u003e\u003c/a\u003e Check opts for nil value.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/a763d47a6dce43d1f4f7b697d1d7810463a526f6\"\u003e\u003ccode\u003ea763d47\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3c70bf9ad53b681fbe5ba6067e454a86549fee8a\"\u003e\u003ccode\u003e3c70bf9\u003c/code\u003e\u003c/a\u003e Bump x/crypto x/sys dependencies.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3f0f15b2bfe67bad81a35e8aec81ae42ca78349d\"\u003e\u003ccode\u003e3f0f15b\u003c/code\u003e\u003c/a\u003e Revert to using package-declared HPKE errors for shortkem instead of standard...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/23491bd573cf29b6f567057a158203a2c9dfa30d\"\u003e\u003ccode\u003e23491bd\u003c/code\u003e\u003c/a\u003e Adding generic Power2Round method.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/cloudflare/circl\u0026package-manager=go_modules\u0026previous-version=1.6.1\u0026new-version=1.6.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/envoyproxy/ai-gateway/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/envoyproxy/ai-gateway/pull/2017","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/envoyproxy%2Fai-gateway/issues/2017","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2017/packages"}},{"old_version":"1.6.1","new_version":"1.6.3","update_type":"patch","path":null,"pr_created_at":"2026-04-06T22:59:00.000Z","version_change":"1.6.1 → 1.6.3","issue":{"uuid":"4214484758","node_id":"PR_kwDOPaxcXs7QVn-n","number":188,"state":"closed","title":"chore(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-06-02T01:47:57.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-06T22:59:00.000Z","updated_at":"2026-06-02T01:48:47.000Z","time_to_close":4848537,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"github.com/cloudflare/circl","old_version":"1.6.1","new_version":"1.6.3","repository_url":"https://github.com/cloudflare/circl"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/cloudflare/circl](https://github.com/cloudflare/circl) from 1.6.1 to 1.6.3.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cloudflare/circl/releases\"\u003egithub.com/cloudflare/circl's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eCIRCL v1.6.3\u003c/h2\u003e\n\u003cp\u003eFix a bug on ecc/p384 scalar multiplication.\u003c/p\u003e\n\u003ch3\u003eWhat's Changed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esign/mldsa: Check opts for nil value  by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/582\"\u003ecloudflare/circl#582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eecc/p384: Point addition must handle point doubling case. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/583\"\u003ecloudflare/circl#583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease CIRCL v1.6.3 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/584\"\u003ecloudflare/circl#584\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNew SLH-DSA, improvements in ML-DSA for arm64.\u003c/li\u003e\n\u003cli\u003eTested compilation on WASM.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize pairing product computation by moving exponentiations to G1. by \u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esign: Adding SLH-DSA signature by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/512\"\u003ecloudflare/circl#512\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate code generators to CIRCL v1.6.1. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/548\"\u003ecloudflare/circl#548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eML-DSA: Add preliminary Wycheproof test vectors by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/552\"\u003ecloudflare/circl#552\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ego fmt by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/554\"\u003ecloudflare/circl#554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egz-compressing test vectors, use of HexBytes and ReadGzip functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/555\"\u003ecloudflare/circl#555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Removes use of elliptic Marshal and Unmarshal functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/556\"\u003ecloudflare/circl#556\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport encoding/decoding ML-DSA private keys (as long as they contain seeds) by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/559\"\u003ecloudflare/circl#559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to golangci-lint v2 by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/560\"\u003ecloudflare/circl#560\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreparation for ARM64 Implementation of poly operations for dilithium package. by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eprepare power2Round for custom implementations in assembly by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/564\"\u003ecloudflare/circl#564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eARM64 implementation for poly.PackLe16 by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/563\"\u003ecloudflare/circl#563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polyMulBy2toD by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/565\"\u003ecloudflare/circl#565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polySub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/566\"\u003ecloudflare/circl#566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: add byteLen method for short groups and RandomScalar uses rand.Int by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/568\"\u003ecloudflare/circl#568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of poly.Add/Sub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/572\"\u003ecloudflare/circl#572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Adding cryptobyte marshaling to scalars by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/569\"\u003ecloudflare/circl#569\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumping up to Go1.25 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/574\"\u003ecloudflare/circl#574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: Including WASM compilation. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/577\"\u003ecloudflare/circl#577\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to using package-declared HPKE errors for shortkem instead of standard library errors by \u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease v1.6.2 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/579\"\u003ecloudflare/circl#579\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/24ae53c5d6f7fe18203adc125ba3ed76a38703e1\"\u003e\u003ccode\u003e24ae53c\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/581020bd4a836b8ce7bd4e414ba2884c07dbc906\"\u003e\u003ccode\u003e581020b\u003c/code\u003e\u003c/a\u003e Rename method to oddMultiplesProjective.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/12209a4566605692a8402594e367a5aed5148460\"\u003e\u003ccode\u003e12209a4\u003c/code\u003e\u003c/a\u003e Removing unused cmov for jacobian points.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/fcba359f4178645d2c9e50f29ab6966337da4b95\"\u003e\u003ccode\u003efcba359\u003c/code\u003e\u003c/a\u003e ecc/p384: use of complete projective formulas for scalar multiplication.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/5e1bae8d8c2df4e717c2c5c2d5b5d60b629b2ac6\"\u003e\u003ccode\u003e5e1bae8\u003c/code\u003e\u003c/a\u003e ecc/p384: handle point doubling in point addition with Jacobian coordinates.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/341604685ff97e8f7440ae4b4711ba1c118c648c\"\u003e\u003ccode\u003e3416046\u003c/code\u003e\u003c/a\u003e Check opts for nil value.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/a763d47a6dce43d1f4f7b697d1d7810463a526f6\"\u003e\u003ccode\u003ea763d47\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3c70bf9ad53b681fbe5ba6067e454a86549fee8a\"\u003e\u003ccode\u003e3c70bf9\u003c/code\u003e\u003c/a\u003e Bump x/crypto x/sys dependencies.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3f0f15b2bfe67bad81a35e8aec81ae42ca78349d\"\u003e\u003ccode\u003e3f0f15b\u003c/code\u003e\u003c/a\u003e Revert to using package-declared HPKE errors for shortkem instead of standard...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/23491bd573cf29b6f567057a158203a2c9dfa30d\"\u003e\u003ccode\u003e23491bd\u003c/code\u003e\u003c/a\u003e Adding generic Power2Round method.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\u003e **Note**\n\u003e Automatic rebases have been disabled on this pull request as it has been open for over 30 days.\n","html_url":"https://github.com/FairForge/vaultaire/pull/188","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/FairForge%2Fvaultaire/issues/188","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/188/packages"}},{"old_version":"1.6.1","new_version":"1.6.3","update_type":"patch","path":null,"pr_created_at":"2026-04-06T09:50:55.000Z","version_change":"1.6.1 → 1.6.3","issue":{"uuid":"4210895385","node_id":"PR_kwDORz3dwc7QKvVx","number":14,"state":"closed","title":"Bump github.com/cloudflare/circl from 1.6.1 to 1.6.3","user":"dependabot[bot]","labels":["type: imperfection","topic: infrastructure","topic: security"],"assignees":["per1234"],"locked":false,"comments_count":5,"pull_request":true,"closed_at":"2026-04-06T10:57:35.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-06T09:50:55.000Z","updated_at":"2026-04-06T10:57:44.000Z","time_to_close":4000,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"github.com/cloudflare/circl","old_version":"1.6.1","new_version":"1.6.3","repository_url":"https://github.com/cloudflare/circl"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/cloudflare/circl](https://github.com/cloudflare/circl) from 1.6.1 to 1.6.3.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cloudflare/circl/releases\"\u003egithub.com/cloudflare/circl's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eCIRCL v1.6.3\u003c/h2\u003e\n\u003cp\u003eFix a bug on ecc/p384 scalar multiplication.\u003c/p\u003e\n\u003ch3\u003eWhat's Changed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esign/mldsa: Check opts for nil value  by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/582\"\u003ecloudflare/circl#582\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eecc/p384: Point addition must handle point doubling case. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/583\"\u003ecloudflare/circl#583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease CIRCL v1.6.3 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/584\"\u003ecloudflare/circl#584\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eCIRCL v1.6.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNew SLH-DSA, improvements in ML-DSA for arm64.\u003c/li\u003e\n\u003cli\u003eTested compilation on WASM.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize pairing product computation by moving exponentiations to G1. by \u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esign: Adding SLH-DSA signature by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/512\"\u003ecloudflare/circl#512\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate code generators to CIRCL v1.6.1. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/548\"\u003ecloudflare/circl#548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eML-DSA: Add preliminary Wycheproof test vectors by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/552\"\u003ecloudflare/circl#552\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ego fmt by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/554\"\u003ecloudflare/circl#554\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egz-compressing test vectors, use of HexBytes and ReadGzip functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/555\"\u003ecloudflare/circl#555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Removes use of elliptic Marshal and Unmarshal functions. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/556\"\u003ecloudflare/circl#556\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport encoding/decoding ML-DSA private keys (as long as they contain seeds) by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/559\"\u003ecloudflare/circl#559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to golangci-lint v2 by \u003ca href=\"https://github.com/bwesterb\"\u003e\u003ccode\u003e@​bwesterb\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/560\"\u003ecloudflare/circl#560\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreparation for ARM64 Implementation of poly operations for dilithium package. by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eprepare power2Round for custom implementations in assembly by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/564\"\u003ecloudflare/circl#564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eARM64 implementation for poly.PackLe16 by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/563\"\u003ecloudflare/circl#563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polyMulBy2toD by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/565\"\u003ecloudflare/circl#565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of polySub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/566\"\u003ecloudflare/circl#566\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: add byteLen method for short groups and RandomScalar uses rand.Int by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/568\"\u003ecloudflare/circl#568\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd arm64 version of poly.Add/Sub by \u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/572\"\u003ecloudflare/circl#572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egroup: Adding cryptobyte marshaling to scalars by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/569\"\u003ecloudflare/circl#569\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumping up to Go1.25 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/574\"\u003ecloudflare/circl#574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: Including WASM compilation. by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/577\"\u003ecloudflare/circl#577\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to using package-declared HPKE errors for shortkem instead of standard library errors by \u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease v1.6.2 by \u003ca href=\"https://github.com/armfazh\"\u003e\u003ccode\u003e@​armfazh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/579\"\u003ecloudflare/circl#579\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dfaranha\"\u003e\u003ccode\u003e@​dfaranha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/547\"\u003ecloudflare/circl#547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elementrics\"\u003e\u003ccode\u003e@​elementrics\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/562\"\u003ecloudflare/circl#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/harshiniwho\"\u003e\u003ccode\u003e@​harshiniwho\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/cloudflare/circl/pull/578\"\u003ecloudflare/circl#578\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\"\u003ehttps://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/24ae53c5d6f7fe18203adc125ba3ed76a38703e1\"\u003e\u003ccode\u003e24ae53c\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/581020bd4a836b8ce7bd4e414ba2884c07dbc906\"\u003e\u003ccode\u003e581020b\u003c/code\u003e\u003c/a\u003e Rename method to oddMultiplesProjective.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/12209a4566605692a8402594e367a5aed5148460\"\u003e\u003ccode\u003e12209a4\u003c/code\u003e\u003c/a\u003e Removing unused cmov for jacobian points.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/fcba359f4178645d2c9e50f29ab6966337da4b95\"\u003e\u003ccode\u003efcba359\u003c/code\u003e\u003c/a\u003e ecc/p384: use of complete projective formulas for scalar multiplication.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/5e1bae8d8c2df4e717c2c5c2d5b5d60b629b2ac6\"\u003e\u003ccode\u003e5e1bae8\u003c/code\u003e\u003c/a\u003e ecc/p384: handle point doubling in point addition with Jacobian coordinates.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/341604685ff97e8f7440ae4b4711ba1c118c648c\"\u003e\u003ccode\u003e3416046\u003c/code\u003e\u003c/a\u003e Check opts for nil value.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/a763d47a6dce43d1f4f7b697d1d7810463a526f6\"\u003e\u003ccode\u003ea763d47\u003c/code\u003e\u003c/a\u003e Release CIRCL v1.6.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3c70bf9ad53b681fbe5ba6067e454a86549fee8a\"\u003e\u003ccode\u003e3c70bf9\u003c/code\u003e\u003c/a\u003e Bump x/crypto x/sys dependencies.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/3f0f15b2bfe67bad81a35e8aec81ae42ca78349d\"\u003e\u003ccode\u003e3f0f15b\u003c/code\u003e\u003c/a\u003e Revert to using package-declared HPKE errors for shortkem instead of standard...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cloudflare/circl/commit/23491bd573cf29b6f567057a158203a2c9dfa30d\"\u003e\u003ccode\u003e23491bd\u003c/code\u003e\u003c/a\u003e Adding generic Power2Round method.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e","html_url":"https://github.com/per1234-org/ino-platform-discovery/pull/14","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/per1234-org%2Fino-platform-discovery/issues/14","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/14/packages"}}]}