OCM-00000 | ci: Update module golang.org/x/crypto to v0.53.0

[red-hat-konflux]

This PR contains the following updates:

Package	Change	Age	Confidence
golang.org/x/crypto	v0.46.0 → v0.53.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[coderabbitai]

📝 Walkthrough

Walkthrough

Updated several golang.org/x/* module versions in go.mod, including x/mod, x/sync, x/crypto, x/net, x/sys, x/term, x/text, and x/tools. golang.org/x/oauth2 was unchanged.

Possibly related issues

• Update golang.org/x/crypto to address security vulnerabilities assisted-installer#1404: Updates golang.org/x/crypto in go.mod, matching one of the dependency bumps here.
• Update golang.org/x/crypto to address security vulnerabilities oauth-server#206: Updates golang.org/x/crypto in go.mod, overlapping with this PR.
• Update golang.org/x/crypto to address security vulnerabilities machine-api-provider-azure#178: Updates golang.org/x/crypto in go.mod, which is included in this change.
• Update golang.org/x/crypto to address security vulnerabilities installer#10170: Updates golang.org/x/crypto in go.mod, matching this dependency update.
• Update golang.org/x/crypto to address security vulnerabilities machine-config-operator#5506: Updates golang.org/x/crypto in go.mod, aligning with this PR.
• Update golang.org/x/crypto to address security vulnerabilities cluster-api-provider-ibmcloud#141: Updates golang.org/x/crypto in go.mod, overlapping with this change.
• Update golang.org/x/crypto to address security vulnerabilities azure-service-operator#15: Updates golang.org/x/crypto in go.mod, which is part of this PR.
• Update golang.org/x/crypto to address security vulnerabilities cluster-baremetal-operator#536: Updates golang.org/x/crypto in go.mod, matching this dependency bump.
• Update golang.org/x/crypto to address security vulnerabilities cluster-api-provider-gcp#256: Updates golang.org/x/crypto in go.mod, which is included here.

Suggested reviewers

• amandahla
• jerichokeyne

🚥 Pre-merge checks | ✅ 14 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The PR uses a Renovate template but misses most required sections, including issue context, change rationale, testing, and verification details.	Add the required template sections: PR summary, issue description, related issues, change type, behavior impact, testing steps, proof, and checklist.

✅ Passed checks (14 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately summarizes the main change: a dependency bump for golang.org/x/crypto to v0.53.0.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names	✅ Passed	Only go.mod was changed; no Ginkgo specs or test titles were added or modified.
Test Structure And Quality	✅ Passed	PR only changes go.mod dependency versions; no *_test.go files or Ginkgo tests are touched, so the test-structure review is not applicable.
Microshift Test Compatibility	✅ Passed	PR only updates go.mod; no new Ginkgo e2e tests or MicroShift-sensitive test changes were added, and tests/e2e has no MicroShift guards to assess here.
Single Node Openshift (Sno) Test Compatibility	✅ Passed	PR only updates dependencies/vendor files; no Ginkgo e2e tests or test paths were added or changed.
Topology-Aware Scheduling Compatibility	✅ Passed	PR is dependency-only in go.mod; no deployment manifests, controllers, or scheduling logic were modified.
Ote Binary Stdout Contract	✅ Passed	PR only updates go.mod dependency versions; no process-level code or stdout setup changes were introduced.
Ipv6 And Disconnected Network Test Compatibility	✅ Passed	PR only bumps go.mod dependencies; no new Ginkgo e2e tests or network-dependent test code were added.
No-Weak-Crypto	✅ Passed	PR only bumps Go module versions in go.mod; no crypto code or weak-crypto patterns were added.
Container-Privileges	✅ Passed	Only go.mod/go.sum/vendor files changed; no container/K8s manifests or privilege settings were added.
No-Sensitive-Data-In-Logs	✅ Passed	The PR only updates dependency versions in go.mod; no logging code or sensitive data exposure was introduced.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch konflux/mintmaker/master/golang.org-x-crypto-0.x

---

_{Comment @coderabbitai help to get the list of available commands.}

[openshift-ci]

Hi @red-hat-konflux[bot]. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 26.17%. Comparing base (aae6b62) to head (291d904).
⚠️ Report is 2 commits behind head on master.

Additional details and impacted files

@@           Coverage Diff           @@
##           master    #3290   +/-   ##
=======================================
  Coverage   26.17%   26.17%           
=======================================
  Files         334      334           
  Lines       36704    36704           
=======================================
  Hits         9608     9608           
  Misses      26359    26359           
  Partials      737      737           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[red-hat-konflux]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 7 additional dependencies were updated

Details:

Package	Change
golang.org/x/mod	v0.30.0 -> v0.36.0
golang.org/x/sync	v0.19.0 -> v0.21.0
golang.org/x/net	v0.48.0 -> v0.55.0
golang.org/x/sys	v0.39.0 -> v0.46.0
golang.org/x/term	v0.38.0 -> v0.44.0
golang.org/x/text	v0.32.0 -> v0.38.0
golang.org/x/tools	v0.39.0 -> v0.45.0

[openshift-ci]

@red-hat-konflux[bot]: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

[amandahla]

/approve
/lgtm
/check-required-labels

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: amandahla, red-hat-konflux[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [amandahla]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment