Repository navigation
build(deps): bump github.com/cloudflare/circl from 1.6.4 to 1.6.5 - #32
Conversation
Bumps [github.com/cloudflare/circl](https://github.com/cloudflare/circl) from 1.6.4 to 1.6.5. - [Release notes](https://github.com/cloudflare/circl/releases) - [Commits](cloudflare/circl@v1.6.4...v1.6.5) --- updated-dependencies: - dependency-name: github.com/cloudflare/circl dependency-version: 1.6.5 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
intel352
left a comment
intel352
left a comment
There was a problem hiding this comment.
Reviewed the dependency-only source update at exact commit 440fbb7. Independent security and quality source review checked official action/module provenance and hashes, manifest/lock consistency, toolchain/API compatibility, unintended source or permission changes, and the full adversarial bug checklist; no blocking source findings. The dependency change is meaningful and currently integrates without conflict. This source approval does not replace missing required CodeQL configurations, Code Quality analyses, or current-base integration CI; all applicable checks and review rules must be satisfied before normal merge. No bypass or auto-merge is requested.
intel352
left a comment
intel352
left a comment
There was a problem hiding this comment.
Renewed security and quality approval for exact head 690e672. The CI refresh commit preserves the original reviewed source tree. The meaningful current-main diff is only CIRCL v1.6.4 to v1.6.5 and its authenticated Go module checksums; the previously merged crypto, sys and protobuf upgrades remain in the conflict-free integration tree. No runtime adapters, tests, permissions or security gates changed. All 11 fresh exact-head checks passed, including Linux/macOS tests, live interoperability, CodeQL Actions/Go/Rust and Code Quality Go/Python. No material security or quality findings.
Bumps github.com/cloudflare/circl from 1.6.4 to 1.6.5.
Release notes
Sourced from github.com/cloudflare/circl's releases.
... (truncated)
Commits
cfa7c70oprf: validate finalize state (#687)76cf862vdaf/prio3: reject degenerate parameters (#685)ddeb7fcoprf: reject invalid deterministic blinds (#688)9279449vdaf/prio3: validate preparation inputs (#683)e850bcdvdaf/prio3/sum: reject aggregate field overflow (#681)2ce0fd7tss/rsa: validate sign share protocol parameters (#674)c1552d5vdaf/prio3/sum: reject unsafe measurement bounds (#682)df9fbeaot/simot: make sender sessions one-shot (#679)617634azk/dleq: validate batch shape (#684)cc3976adh/csidh: harden key imports (#689)You can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)