Update module golang.org/x/net to v0.28.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
This commit is contained in:
		
							parent
							
								
									128fde1734
								
							
						
					
					
						commit
						53ae4ea927
					
				
							
								
								
									
										8
									
								
								go.mod
								
								
								
								
							
							
						
						
									
										8
									
								
								go.mod
								
								
								
								
							|  | @ -70,13 +70,13 @@ require ( | |||
| 	github.com/vbauerster/mpb/v8 v8.7.5 | ||||
| 	github.com/vishvananda/netlink v1.2.1-beta.2 | ||||
| 	go.etcd.io/bbolt v1.3.10 | ||||
| 	golang.org/x/crypto v0.25.0 | ||||
| 	golang.org/x/crypto v0.26.0 | ||||
| 	golang.org/x/exp v0.0.0-20240719175910-8a7402abbf56 | ||||
| 	golang.org/x/net v0.27.0 | ||||
| 	golang.org/x/net v0.28.0 | ||||
| 	golang.org/x/sync v0.8.0 | ||||
| 	golang.org/x/sys v0.23.0 | ||||
| 	golang.org/x/term v0.22.0 | ||||
| 	golang.org/x/text v0.16.0 | ||||
| 	golang.org/x/term v0.23.0 | ||||
| 	golang.org/x/text v0.17.0 | ||||
| 	google.golang.org/protobuf v1.34.2 | ||||
| 	gopkg.in/inf.v0 v0.9.1 | ||||
| 	gopkg.in/yaml.v3 v3.0.1 | ||||
|  |  | |||
							
								
								
									
										16
									
								
								go.sum
								
								
								
								
							
							
						
						
									
										16
									
								
								go.sum
								
								
								
								
							|  | @ -572,8 +572,8 @@ golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPh | |||
| golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc= | ||||
| golang.org/x/crypto v0.1.0/go.mod h1:RecgLatLF4+eUMCP1PoPZQb+cVrJcOPbHkTkbkB9sbw= | ||||
| golang.org/x/crypto v0.19.0/go.mod h1:Iy9bg/ha4yyC70EfRS8jz+B6ybOBKMaSxLj6P6oBDfU= | ||||
| golang.org/x/crypto v0.25.0 h1:ypSNr+bnYL2YhwoMt2zPxHFmbAN1KZs/njMG3hxUp30= | ||||
| golang.org/x/crypto v0.25.0/go.mod h1:T+wALwcMOSE0kXgUAnPAHqTLW+XHgcELELW8VaDgm/M= | ||||
| golang.org/x/crypto v0.26.0 h1:RrRspgV4mU+YwB4FYnuBoKsUapNIL5cohGAmSH3azsw= | ||||
| golang.org/x/crypto v0.26.0/go.mod h1:GY7jblb9wI+FOo5y8/S2oY4zWP07AkOJ4+jxCqdqn54= | ||||
| golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA= | ||||
| golang.org/x/exp v0.0.0-20240719175910-8a7402abbf56 h1:2dVuKD2vS7b0QIHQbpyTISPd0LeHDbnYEryqj5Q1ug8= | ||||
| golang.org/x/exp v0.0.0-20240719175910-8a7402abbf56/go.mod h1:M4RDyNAINzryxdtnbRXRL/OHtkFuWGRjvuhBJpk2IlY= | ||||
|  | @ -602,8 +602,8 @@ golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug | |||
| golang.org/x/net v0.1.0/go.mod h1:Cx3nUiGt4eDBEyega/BKRp+/AlGL8hYe7U9odMt2Cco= | ||||
| golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs= | ||||
| golang.org/x/net v0.10.0/go.mod h1:0qNGK6F8kojg2nk9dLZ2mShWaEBan6FAoqfSigmmuDg= | ||||
| golang.org/x/net v0.27.0 h1:5K3Njcw06/l2y9vpGCSdcxWOYHOUk3dVNGDXN+FvAys= | ||||
| golang.org/x/net v0.27.0/go.mod h1:dDi0PyhWNoiUOrAS8uXv/vnScO4wnHQO4mj9fn/RytE= | ||||
| golang.org/x/net v0.28.0 h1:a9JDOJc5GMUJ0+UDqmLT86WiEy7iWyIhz8gz8E4e5hE= | ||||
| golang.org/x/net v0.28.0/go.mod h1:yqtgsTWOOnlGLG9GFRrK3++bGOUEkNBoHZc8MEDWPNg= | ||||
| golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U= | ||||
| golang.org/x/oauth2 v0.21.0 h1:tsimM75w1tF/uws5rbeHzIWxEqElMehnc+iW793zsZs= | ||||
| golang.org/x/oauth2 v0.21.0/go.mod h1:XYTD2NtWslqkgxebSiOHnXEap4TF09sJSc7H1sXbhtI= | ||||
|  | @ -653,8 +653,8 @@ golang.org/x/term v0.1.0/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8= | |||
| golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k= | ||||
| golang.org/x/term v0.8.0/go.mod h1:xPskH00ivmX89bAKVGSKKtLOWNx2+17Eiy94tnKShWo= | ||||
| golang.org/x/term v0.17.0/go.mod h1:lLRBjIVuehSbZlaOtGMbcMncT+aqLLLmKrsjNrUguwk= | ||||
| golang.org/x/term v0.22.0 h1:BbsgPEJULsl2fV/AT3v15Mjva5yXKQDyKf+TbDz7QJk= | ||||
| golang.org/x/term v0.22.0/go.mod h1:F3qCibpT5AMpCRfhfT53vVJwhLtIVHhB9XDjfFvnMI4= | ||||
| golang.org/x/term v0.23.0 h1:F6D4vR+EHoL9/sWAWgAR1H2DcHr4PareCbAaCo1RpuU= | ||||
| golang.org/x/term v0.23.0/go.mod h1:DgV24QBUrK6jhZXl+20l6UWznPlwAHm1Q1mGHtydmSk= | ||||
| golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= | ||||
| golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= | ||||
| golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ= | ||||
|  | @ -662,8 +662,8 @@ golang.org/x/text v0.4.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8= | |||
| golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8= | ||||
| golang.org/x/text v0.9.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8= | ||||
| golang.org/x/text v0.14.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU= | ||||
| golang.org/x/text v0.16.0 h1:a94ExnEXNtEwYLGJSIUxnWoxoRz/ZcCsV63ROupILh4= | ||||
| golang.org/x/text v0.16.0/go.mod h1:GhwF1Be+LQoKShO3cGOHzqOgRrGaYc9AvblQOmPVHnI= | ||||
| golang.org/x/text v0.17.0 h1:XtiM5bkSOt+ewxlOE/aE/AKEHibwj/6gvWMl9Rsh0Qc= | ||||
| golang.org/x/text v0.17.0/go.mod h1:BuEKDfySbSR4drPmRPG/7iBdf8hvFMuRexcpahXilzY= | ||||
| golang.org/x/time v0.5.0 h1:o7cqy6amK/52YcAKIPlM3a+Fpj35zvRj2TP+e1xFSfk= | ||||
| golang.org/x/time v0.5.0/go.mod h1:3BpzKBy/shNhVucY/MWOyx10tF3SFh9QdLuxbVysPQM= | ||||
| golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ= | ||||
|  |  | |||
|  | @ -1,4 +1,4 @@ | |||
| Copyright (c) 2009 The Go Authors. All rights reserved. | ||||
| Copyright 2009 The Go Authors. | ||||
| 
 | ||||
| Redistribution and use in source and binary forms, with or without | ||||
| modification, are permitted provided that the following conditions are | ||||
|  | @ -10,7 +10,7 @@ notice, this list of conditions and the following disclaimer. | |||
| copyright notice, this list of conditions and the following disclaimer | ||||
| in the documentation and/or other materials provided with the | ||||
| distribution. | ||||
|    * Neither the name of Google Inc. nor the names of its | ||||
|    * Neither the name of Google LLC nor the names of its | ||||
| contributors may be used to endorse or promote products derived from | ||||
| this software without specific prior written permission. | ||||
| 
 | ||||
|  |  | |||
										
											
												File diff suppressed because it is too large
												Load Diff
											
										
									
								
							|  | @ -488,7 +488,49 @@ func (r *rsaPublicKey) Verify(data []byte, sig *Signature) error { | |||
| 	h := hash.New() | ||||
| 	h.Write(data) | ||||
| 	digest := h.Sum(nil) | ||||
| 	return rsa.VerifyPKCS1v15((*rsa.PublicKey)(r), hash, digest, sig.Blob) | ||||
| 
 | ||||
| 	// Signatures in PKCS1v15 must match the key's modulus in
 | ||||
| 	// length. However with SSH, some signers provide RSA
 | ||||
| 	// signatures which are missing the MSB 0's of the bignum
 | ||||
| 	// represented. With ssh-rsa signatures, this is encouraged by
 | ||||
| 	// the spec (even though e.g. OpenSSH will give the full
 | ||||
| 	// length unconditionally). With rsa-sha2-* signatures, the
 | ||||
| 	// verifier is allowed to support these, even though they are
 | ||||
| 	// out of spec. See RFC 4253 Section 6.6 for ssh-rsa and RFC
 | ||||
| 	// 8332 Section 3 for rsa-sha2-* details.
 | ||||
| 	//
 | ||||
| 	// In practice:
 | ||||
| 	// * OpenSSH always allows "short" signatures:
 | ||||
| 	//   https://github.com/openssh/openssh-portable/blob/V_9_8_P1/ssh-rsa.c#L526
 | ||||
| 	//   but always generates padded signatures:
 | ||||
| 	//   https://github.com/openssh/openssh-portable/blob/V_9_8_P1/ssh-rsa.c#L439
 | ||||
| 	//
 | ||||
| 	// * PuTTY versions 0.81 and earlier will generate short
 | ||||
| 	//   signatures for all RSA signature variants. Note that
 | ||||
| 	//   PuTTY is embedded in other software, such as WinSCP and
 | ||||
| 	//   FileZilla. At the time of writing, a patch has been
 | ||||
| 	//   applied to PuTTY to generate padded signatures for
 | ||||
| 	//   rsa-sha2-*, but not yet released:
 | ||||
| 	//   https://git.tartarus.org/?p=simon/putty.git;a=commitdiff;h=a5bcf3d384e1bf15a51a6923c3724cbbee022d8e
 | ||||
| 	//
 | ||||
| 	// * SSH.NET versions 2024.0.0 and earlier will generate short
 | ||||
| 	//   signatures for all RSA signature variants, fixed in 2024.1.0:
 | ||||
| 	//   https://github.com/sshnet/SSH.NET/releases/tag/2024.1.0
 | ||||
| 	//
 | ||||
| 	// As a result, we pad these up to the key size by inserting
 | ||||
| 	// leading 0's.
 | ||||
| 	//
 | ||||
| 	// Note that support for short signatures with rsa-sha2-* may
 | ||||
| 	// be removed in the future due to such signatures not being
 | ||||
| 	// allowed by the spec.
 | ||||
| 	blob := sig.Blob | ||||
| 	keySize := (*rsa.PublicKey)(r).Size() | ||||
| 	if len(blob) < keySize { | ||||
| 		padded := make([]byte, keySize) | ||||
| 		copy(padded[keySize-len(blob):], blob) | ||||
| 		blob = padded | ||||
| 	} | ||||
| 	return rsa.VerifyPKCS1v15((*rsa.PublicKey)(r), hash, digest, blob) | ||||
| } | ||||
| 
 | ||||
| func (r *rsaPublicKey) CryptoPublicKey() crypto.PublicKey { | ||||
|  |  | |||
|  | @ -1,4 +1,4 @@ | |||
| Copyright (c) 2009 The Go Authors. All rights reserved. | ||||
| Copyright 2009 The Go Authors. | ||||
| 
 | ||||
| Redistribution and use in source and binary forms, with or without | ||||
| modification, are permitted provided that the following conditions are | ||||
|  | @ -10,7 +10,7 @@ notice, this list of conditions and the following disclaimer. | |||
| copyright notice, this list of conditions and the following disclaimer | ||||
| in the documentation and/or other materials provided with the | ||||
| distribution. | ||||
|    * Neither the name of Google Inc. nor the names of its | ||||
|    * Neither the name of Google LLC nor the names of its | ||||
| contributors may be used to endorse or promote products derived from | ||||
| this software without specific prior written permission. | ||||
| 
 | ||||
|  |  | |||
|  | @ -1,4 +1,4 @@ | |||
| Copyright (c) 2009 The Go Authors. All rights reserved. | ||||
| Copyright 2009 The Go Authors. | ||||
| 
 | ||||
| Redistribution and use in source and binary forms, with or without | ||||
| modification, are permitted provided that the following conditions are | ||||
|  | @ -10,7 +10,7 @@ notice, this list of conditions and the following disclaimer. | |||
| copyright notice, this list of conditions and the following disclaimer | ||||
| in the documentation and/or other materials provided with the | ||||
| distribution. | ||||
|    * Neither the name of Google Inc. nor the names of its | ||||
|    * Neither the name of Google LLC nor the names of its | ||||
| contributors may be used to endorse or promote products derived from | ||||
| this software without specific prior written permission. | ||||
| 
 | ||||
|  |  | |||
|  | @ -1,4 +1,4 @@ | |||
| Copyright (c) 2009 The Go Authors. All rights reserved. | ||||
| Copyright 2009 The Go Authors. | ||||
| 
 | ||||
| Redistribution and use in source and binary forms, with or without | ||||
| modification, are permitted provided that the following conditions are | ||||
|  | @ -10,7 +10,7 @@ notice, this list of conditions and the following disclaimer. | |||
| copyright notice, this list of conditions and the following disclaimer | ||||
| in the documentation and/or other materials provided with the | ||||
| distribution. | ||||
|    * Neither the name of Google Inc. nor the names of its | ||||
|    * Neither the name of Google LLC nor the names of its | ||||
| contributors may be used to endorse or promote products derived from | ||||
| this software without specific prior written permission. | ||||
| 
 | ||||
|  |  | |||
|  | @ -1148,7 +1148,7 @@ go.opentelemetry.io/otel/trace/embedded | |||
| # golang.org/x/arch v0.7.0 | ||||
| ## explicit; go 1.18 | ||||
| golang.org/x/arch/x86/x86asm | ||||
| # golang.org/x/crypto v0.25.0 | ||||
| # golang.org/x/crypto v0.26.0 | ||||
| ## explicit; go 1.20 | ||||
| golang.org/x/crypto/argon2 | ||||
| golang.org/x/crypto/blake2b | ||||
|  | @ -1186,7 +1186,7 @@ golang.org/x/exp/slices | |||
| ## explicit; go 1.18 | ||||
| golang.org/x/mod/semver | ||||
| golang.org/x/mod/sumdb/note | ||||
| # golang.org/x/net v0.27.0 | ||||
| # golang.org/x/net v0.28.0 | ||||
| ## explicit; go 1.18 | ||||
| golang.org/x/net/bpf | ||||
| golang.org/x/net/context | ||||
|  | @ -1218,10 +1218,10 @@ golang.org/x/sys/unix | |||
| golang.org/x/sys/windows | ||||
| golang.org/x/sys/windows/registry | ||||
| golang.org/x/sys/windows/svc/eventlog | ||||
| # golang.org/x/term v0.22.0 | ||||
| # golang.org/x/term v0.23.0 | ||||
| ## explicit; go 1.18 | ||||
| golang.org/x/term | ||||
| # golang.org/x/text v0.16.0 | ||||
| # golang.org/x/text v0.17.0 | ||||
| ## explicit; go 1.18 | ||||
| golang.org/x/text/encoding | ||||
| golang.org/x/text/encoding/charmap | ||||
|  |  | |||
		Loading…
	
		Reference in New Issue