Home Original page

Bump golang.org/x/crypto from 0.41.0 to 0.42.0 by dependabot[bot] · Pull Request #1483 · smallstep/cli

@dependabot bot added dependencies

Pull requests that update a dependency file

go

Pull requests that update Go code

labels

Sep 8, 2025 
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.41.0 to 0.42.0.
- [Commits](golang/crypto@v0.41.0...v0.42.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
In more recent Go versions requirements for RSA keys have been
strengthened, resulting in errors when trying to generate insecure
keys. In this specific test case we need a bad RSA key.

@hslatman

This was referenced

Sep 9, 2025

hslatman added a commit to smallstep/cli-utils that referenced this pull request

Sep 9, 2025 
In more recent Go versions requirements for RSA keys have been
strengthened, resulting in errors when trying to generate insecure
keys. In this specific test case we need a bad RSA key.

Also see smallstep/cli#1483.

smst-jeff

@hslatman 

Since we're now supporting Go 1.24+, there's no need to maintain
the exclusion of some test cases using `[go1.24]`, so those were
removed.

smst-jeff

@step-ci step-ci deleted the dependabot/go_modules/golang.org/x/crypto-0.42.0 branch

September 10, 2025 14:54