An open index of dependabot pull requests across open source projects.

chore: bump the x group with 3 updates

Open
Number: #19820
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 0
Created: September 15, 2025 at 12:08 PM UTC
(about 1 month ago)
Updated: September 15, 2025 at 12:08 PM UTC
(about 1 month ago)
Labels:
dependencies go
Description:

Bumps the x group with 3 updates: golang.org/x/crypto, golang.org/x/net and golang.org/x/tools.

Updates golang.org/x/crypto from 0.41.0 to 0.42.0

Commits
  • 5307a0c go.mod: update golang.org/x dependencies
  • 9d77937 acme: include order problem in OrderError
  • 8f580de ssh: remove Go 1.24 build tag for ML-KEM kex
  • a4d1237 ssh/knownhosts: improve IPv6 support in Normalize
  • b8d8dae curve25519: include potential fips140=only error in panic message
  • f5a2eab ssh: use curve25519.X25519 instead of curve25519.ScalarMult
  • 44ecf3a all: upgrade go directive to at least 1.24.0 [generated]
  • See full diff in compare view

Updates golang.org/x/net from 0.43.0 to 0.44.0

Commits
  • 3b23d57 http2: fix race condition when disabling goroutine debugging for one test
  • 8741050 http2: simplify TestServer_Push_RejectAfterGoAway
  • 96e405c http2: modernize TestTransportRoundtripCloseOnWriteError
  • 6dc6880 http2: simplify ClientConn Close and Shutdown tests
  • 4e2915b http2: modernize TestTransportAllocationsAfterResponseBodyClose
  • 30b0e78 http2: modernize TestRoundTripDoesntConsumeRequestBodyEarly
  • b9acd77 http2: speed up TestTransportFlowControl
  • 5153f4d go.mod: update golang.org/x dependencies
  • 9338bdd http2: speed up TestTransportHandlerBodyClose
  • 6b20036 http2: add synchronous handler support to serverTester
  • Additional commits viewable in compare view

Updates golang.org/x/tools from 0.36.0 to 0.37.0

Commits
  • d49da96 go/analysis/internal/checker: fix panic due to nil Pass
  • 9da4f7b gopls/internal/test/integration/completion: make test go1.26-robust
  • 4409ea7 gopls/internal/server: add telemetry for Zed, Helix clientInfo
  • 75023ae go/ast/inspector: update outdated documentation
  • 785cd66 gopls/internal/test/integration/completion: skip TestFuzzFunc pre-go1.25
  • ac2e4a5 go.mod: update golang.org/x dependencies
  • bc9374d go/callgraph/vta: remove unnecessary use of unsafe
  • 12d7e15 gopls/internal/analysis/modernize: add test of no gopls imports
  • 263a769 gopls/internal/mcp: use official go mcp sdk
  • e548c70 gopls/internal/analysis/modernize: fix bad edit in var ( ... ) decl
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
Pull Request Statistics
Commits:
0
Files Changed:
0
Additions:
+0
Deletions:
-0
Package Dependencies
Ecosystem:
go
Version Change:
0.41.0 → 0.42.0
Update Type:
Minor
Ecosystem:
go
Version Change:
0.43.0 → 0.44.0
Update Type:
Minor
Ecosystem:
go
Version Change:
0.36.0 → 0.37.0
Update Type:
Minor
Technical Details
ID: 7777438
UUID: 2829010704
Node ID: PR_kwDOGkVX1s6on0cQ
Host: GitHub
Repository: coder/coder