Bump golang.org/x/crypto to v0.54.0

main

Commit

Soph1mo ago

Closes 13 open Dependabot alerts (7 critical, 3 high, 3 medium), all in the x/crypto SSH implementation. The dependency is pulled in transitively via go-git and ProtonMail openpgp; go-git still requires v0.51.0 and has no newer release, so we pin the indirect dependency directly via MVS.

Bumps to the latest x/crypto, which also lifts x/net to v0.56.0 and x/sys to v0.47.0.

Co-Authored-By: Claude Opus 4.8 (1M context) noreply@anthropic.com Entire-Checkpoint: 01KX3C7BMTWA91N5D9E0V15CXG

Checkpoints

Resolve Dependabot Security Alerts with golang.org/x/crypto

Claude CodeOpus 4.8[1m]
View session
Checkpoint 1