Please update golang.org/x/crypto to v0.56.0 and commit the resulting go.mod and go.sum changes. This requires raising the Go directive to 1.26.0 and updates golang.org/x/net, x/sys, x/term, and x/text to compatible versions.
This is needed so downstream cism-tools can pin an immutable certigo revision that fixes the reported crypto vulnerabilities. The changes have been verified with Go 1.26.7 using CGO_ENABLED=0 go test ./... and a static build.
Please update
golang.org/x/cryptoto v0.56.0 and commit the resultinggo.modandgo.sumchanges. This requires raising the Go directive to 1.26.0 and updatesgolang.org/x/net,x/sys,x/term, andx/textto compatible versions.This is needed so downstream cism-tools can pin an immutable certigo revision that fixes the reported crypto vulnerabilities. The changes have been verified with Go 1.26.7 using
CGO_ENABLED=0 go test ./...and a static build.