fix(deps): bump the external group across 1 directory with 2 updates by dependabot[bot] · Pull Request #3739 · opentdf/platform

dependabot · 2026-07-09T17:53:36Z

Bumps the external group with 2 updates in the /lib/ocrypto directory: github.com/cloudflare/circl and golang.org/x/crypto.

Updates github.com/cloudflare/circl from 1.6.3 to 1.6.4

Release notes

Sourced from github.com/cloudflare/circl's releases.

CIRCL v1.6.4

What's Changed

Fix typo: it's to its by @04cb in cloudflare/circl#588

ci: Bump Go version to 1.26 by @armfazh in cloudflare/circl#591

tss/rsa: polynomial evaluation using Horner's method by @armfazh in cloudflare/circl#590

zk/qndleq: Ensure large security parameter by @armfazh in cloudflare/circl#592

sign/bls: rejects aggregated signatures built with duplicated messages. by @armfazh in cloudflare/circl#595

Bump golang.org/x/crypto from 0.30.0 to 0.45.0 by @dependabot[bot] in cloudflare/circl#585

tss/rsa: avoiding overflow in lambda calculation with big.Int by @armfazh in cloudflare/circl#598

deps: Update CIRCL version in code generators. by @armfazh in cloudflare/circl#599

ci: add Semgrep OSS scanning workflow by @hrushikeshdeshpande in cloudflare/circl#601

zk/qndleq: Fixes challenge calculation by @armfazh in cloudflare/circl#596

sign/bls: Check that signature cannot be the identity point by @armfazh in cloudflare/circl#603

ml-dsa: Don't use tr pointer by @bwesterb in cloudflare/circl#606

ecc/bls12381: affinize must handle identity elements. by @armfazh in cloudflare/circl#604

pki: check pem.Decode returned nil block. by @z9z in cloudflare/circl#607

abe/cpabe/tkn20: fix AND-gate secret sharing. by @cjpatton in cloudflare/circl#610

hpke: fix verifyPSKInputs() to match spec. by @cjpatton in cloudflare/circl#612

hpke: Warn about nonce misuse during marshaling by @cjpatton in cloudflare/circl#613

hpke: don't panic when parsing on hybrid keys/ciphertexts. by @cjpatton in cloudflare/circl#614

blindsign/blindrsa: reject non-canonical signatures. by @cjpatton in cloudflare/circl#615

blindsign/blindrsa: reject message unless co-prime with modulus by @cjpatton in cloudflare/circl#616

oprf: reject identity element as public key. by @cjpatton in cloudflare/circl#619

Add AGENTS.md and REVIEW.md for contributor and AI agent guidance by @dotjs in cloudflare/circl#620

ecc/bls12381: check input length for infinity encoding in SetBytes. by @bwesterb in cloudflare/circl#618

abe/cpabe/tkn20: bound recursion depth when parsing policies. by @cjpatton in cloudflare/circl#622

abe/cpabe/tkn20: reject ciphertexts with trailing data. by @cjpatton in cloudflare/circl#621

abe/cpabe/tkn20: handle short ciphertexts as errors. by @cjpatton in cloudflare/circl#611

abe/cpabe/tkn20: enforce wire count matches policy. by @cjpatton in cloudflare/circl#624

abe/cpabe/tkn20: handle malformed ciphertext header. by @cjpatton in cloudflare/circl#623

abe/cpabe/tkn20: reject circuits with invalid topologies. by @cjpatton in cloudflare/circl#625

Release CIRCL v1.6.4 by @cjpatton in cloudflare/circl#626

New Contributors

@04cb made their first contribution in cloudflare/circl#588

@z9z made their first contribution in cloudflare/circl#607

@dotjs made their first contribution in cloudflare/circl#620

Full Changelog: cloudflare/circl@v1.6.3...v1.6.4

Commits

901199c Release CIRCL v1.6.4
5e37b40 abe/cpabe/tkn20: reject circuits with invalid topologies.
4ea7e90 abe/cpabe/tkn20: handle malformed ciphertext header.
ae0b5c4 abe/cpabe/tkn20: enforce wire count matches policy.
9547f48 abe/cpabe/tkn20: handle short ciphertexts as errors.
bfa7605 abe/cpabe/tkn20: reject ciphertexts with trailing data.
bdde3c7 abe/cpabe/tkn20: bound recursion depth when parsing policies.
03204f3 ecc/bls12381: check input length for infinity encoding in SetBytes. (#618)
e9bd81b Add AGENTS.md and REVIEW.md for AI agent and human reviewer guidance
02ab708 oprf: reject identity element as public key.
Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.52.0 to 0.54.0

Commits

cdce021 go.mod: update golang.org/x dependencies
d9474cc openpgp: make the deprecation message more explicit
7626c50 ssh: verify declared key type matches decoded key in authorized_keys
0471e79 ssh/agent: enforce strict limits on DSA key parameters
6435c37 ssh: sanitize client disconnect messages
7d695da ssh/agent: drain channel stderr in agent forwarders
5b7f841 acme/autocert: fix data race in Manager.createCert
0b316e7 argon2: update RFC 9106 parameter recommendations
55aec0a x509roots/fallback: update bundle
5f2de1a internal: remove wycheproof tests
Additional commits viewable in compare view

github-actions · 2026-07-09T17:59:06Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	201.700643ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	105.622165ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	418.697567ms
Throughput	238.84 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	45.379890714s
Average Latency	451.871997ms
Throughput	110.18 requests/second

github-actions · 2026-07-09T18:08:33Z

github-actions · 2026-07-10T17:58:26Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	203.924677ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	100.541225ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	429.356529ms
Throughput	232.91 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	44.132864898s
Average Latency	439.740015ms
Throughput	113.29 requests/second

github-actions · 2026-07-10T18:08:19Z

github-actions · 2026-07-13T18:00:12Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	214.750926ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	112.20744ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	673.403359ms
Throughput	148.50 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	44.920547927s
Average Latency	447.777876ms
Throughput	111.31 requests/second

github-actions · 2026-07-13T18:10:05Z

github-actions · 2026-07-15T17:58:28Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	161.41234ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	80.047688ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	351.423107ms
Throughput	284.56 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	35.437392558s
Average Latency	353.197347ms
Throughput	141.09 requests/second

github-actions · 2026-07-15T18:09:17Z

github-actions · 2026-07-16T17:59:12Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	387.843902ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	109.413619ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	538.534541ms
Throughput	185.69 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	45.718577823s
Average Latency	455.027023ms
Throughput	109.36 requests/second

github-actions · 2026-07-16T18:07:45Z

Bumps the external group with 2 updates in the /lib/ocrypto directory: [github.com/cloudflare/circl](https://github.com/cloudflare/circl) and [golang.org/x/crypto](https://github.com/golang/crypto). Updates `github.com/cloudflare/circl` from 1.6.3 to 1.6.4 - [Release notes](https://github.com/cloudflare/circl/releases) - [Commits](cloudflare/circl@v1.6.3...v1.6.4) Updates `golang.org/x/crypto` from 0.52.0 to 0.54.0 - [Commits](golang/crypto@v0.52.0...v0.54.0) --- updated-dependencies: - dependency-name: github.com/cloudflare/circl dependency-version: 1.6.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: external - dependency-name: golang.org/x/crypto dependency-version: 0.54.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-07-17T17:58:46Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	209.798825ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	109.305898ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	438.761743ms
Throughput	227.91 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	46.268453018s
Average Latency	460.956603ms
Throughput	108.06 requests/second

github-actions · 2026-07-17T18:00:46Z

⚠️ Govulncheck found vulnerabilities ⚠️

The following modules have known vulnerabilities:

examples
otdfctl
sdk
service
lib/fixtures
tests-bdd

See the workflow run for details.

github-actions · 2026-07-17T18:07:30Z

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 9, 2026

dependabot Bot requested review from a team as code owners July 9, 2026 17:53

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 9, 2026

dependabot Bot mentioned this pull request Jul 9, 2026

fix(deps): bump the external group across 1 directory with 2 updates #3649

Closed

github-actions Bot added comp:lib:ocrypto size/s labels Jul 9, 2026

dependabot Bot force-pushed the dependabot/go_modules/lib/ocrypto/external-184833586b branch from 29b5dea to 17ff8af Compare July 10, 2026 17:53

dependabot Bot force-pushed the dependabot/go_modules/lib/ocrypto/external-184833586b branch from 17ff8af to a95020f Compare July 13, 2026 17:54

dependabot Bot force-pushed the dependabot/go_modules/lib/ocrypto/external-184833586b branch from a95020f to 2240c64 Compare July 15, 2026 17:53

dependabot Bot force-pushed the dependabot/go_modules/lib/ocrypto/external-184833586b branch from 2240c64 to 411b2f6 Compare July 16, 2026 17:53

dependabot Bot force-pushed the dependabot/go_modules/lib/ocrypto/external-184833586b branch from 411b2f6 to 918ac97 Compare July 17, 2026 17:53

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

CIRCL v1.6.4

What's Changed

New Contributors

Uh oh!

github-actions Bot commented Jul 9, 2026

Benchmark authorization.GetDecisions Results:

Benchmark authorization.v2.GetMultiResourceDecision Results:

Benchmark Statistics

Bulk Benchmark Results

TDF3 Benchmark Results:

Uh oh!

github-actions Bot commented Jul 9, 2026

X-Test Results

Uh oh!

github-actions Bot commented Jul 10, 2026

Benchmark authorization.GetDecisions Results:

Benchmark authorization.v2.GetMultiResourceDecision Results:

Benchmark Statistics

Bulk Benchmark Results

TDF3 Benchmark Results:

Uh oh!

github-actions Bot commented Jul 10, 2026

X-Test Results

Uh oh!

github-actions Bot commented Jul 13, 2026

Benchmark authorization.GetDecisions Results:

Benchmark authorization.v2.GetMultiResourceDecision Results:

Benchmark Statistics

Bulk Benchmark Results

TDF3 Benchmark Results:

Uh oh!

github-actions Bot commented Jul 13, 2026

X-Test Results

Uh oh!

github-actions Bot commented Jul 15, 2026

Benchmark authorization.GetDecisions Results:

Benchmark authorization.v2.GetMultiResourceDecision Results:

Benchmark Statistics

Bulk Benchmark Results

TDF3 Benchmark Results:

Uh oh!

github-actions Bot commented Jul 15, 2026

X-Test Results

Uh oh!

github-actions Bot commented Jul 16, 2026

Benchmark authorization.GetDecisions Results:

Benchmark authorization.v2.GetMultiResourceDecision Results:

Benchmark Statistics

Bulk Benchmark Results

TDF3 Benchmark Results:

Uh oh!

github-actions Bot commented Jul 16, 2026

X-Test Results

Uh oh!

github-actions Bot commented Jul 17, 2026

Benchmark authorization.GetDecisions Results:

Benchmark authorization.v2.GetMultiResourceDecision Results:

Benchmark Statistics

Bulk Benchmark Results

TDF3 Benchmark Results:

Uh oh!

github-actions Bot commented Jul 17, 2026

⚠️ Govulncheck found vulnerabilities ⚠️

Uh oh!

github-actions Bot commented Jul 17, 2026

X-Test Results

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 9, 2026 •

edited

Loading