Skip to content

build(deps): bump github.com/cloudflare/circl from 1.3.3 to 1.6.3 in /backend - #3

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/backend/github.com/cloudflare/circl-1.6.3
Open

build(deps): bump github.com/cloudflare/circl from 1.3.3 to 1.6.3 in /backend#3
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/backend/github.com/cloudflare/circl-1.6.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 13, 2026

Copy link
Copy Markdown

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Bumps github.com/cloudflare/circl from 1.3.3 to 1.6.3.

Release notes

Sourced from github.com/cloudflare/circl's releases.

CIRCL v1.6.3

Fix a bug on ecc/p384 scalar multiplication.

What's Changed

Full Changelog: cloudflare/circl@v1.6.2...v1.6.3

CIRCL v1.6.2

  • New SLH-DSA, improvements in ML-DSA for arm64.
  • Tested compilation on WASM.

What's Changed

New Contributors

Full Changelog: cloudflare/circl@v1.6.1...v1.6.2

CIRCL v1.6.1

  • Fixes some point checks on the FourQ curve.
  • Hybrid KEM fails on low-order points.

... (truncated)

Commits
  • 24ae53c Release CIRCL v1.6.3
  • 581020b Rename method to oddMultiplesProjective.
  • 12209a4 Removing unused cmov for jacobian points.
  • fcba359 ecc/p384: use of complete projective formulas for scalar multiplication.
  • 5e1bae8 ecc/p384: handle point doubling in point addition with Jacobian coordinates.
  • 3416046 Check opts for nil value.
  • a763d47 Release CIRCL v1.6.2
  • 3c70bf9 Bump x/crypto x/sys dependencies.
  • 3f0f15b Revert to using package-declared HPKE errors for shortkem instead of standard...
  • 23491bd Adding generic Power2Round method.
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [github.com/cloudflare/circl](https://github.com/cloudflare/circl) from 1.3.3 to 1.6.3.
- [Release notes](https://github.com/cloudflare/circl/releases)
- [Commits](cloudflare/circl@v1.3.3...v1.6.3)

---
updated-dependencies:
- dependency-name: github.com/cloudflare/circl
  dependency-version: 1.6.3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels May 13, 2026
keksmd added a commit that referenced this pull request Jul 14, 2026
A non-DevOps user hit 'Подсистема сборки не настроена … задеплойте
build-agent' / 'the build-agent is not deployed' — component names the ICP
cannot parse or act on, with no recovery path (onboarding-UX audit finding
#3). Reworded the three build-unavailable strings (git.import.reposUnavailable,
git.import.unavailable, apps.deployments.unavailable) to plain, honest,
actionable copy ('temporarily unavailable, we're on it, try again shortly')
in both ru/en. No invented support channel (none exists yet).

No behavior change; message copy only.
keksmd pushed a commit that referenced this pull request Aug 31, 2026
… shipped, jenkins-lib CPS blocker filed

The internal-prod gateway has been down 13 days (709 restarts) because the
PublicApi CR list grew past the 256KiB WebClient default; shipped 0ab09d9 to
spring.gateway raising the buffer to 2MB in both the kube client and global
codec config. Jenkins build compiles, but deploy is blocked by a second bug:
springPipeline's deployDockerImageToNexus dies on
NotSerializableException(MavenXpp3Reader) in every spring repo since 08-18 -
filed as backlog 0488, gateway delivery as 0489.

Pulse: prod image == main, panel honest (2 CrashLoops, both root-caused;
gulyaev-ai-core is user-code vault key, not platform). Funnel: 3 active/48h,
21 CreateApp / 0 DeleteApp, builds 24/24 green; zero external succeeded
payments - gate #3 still open, artem's 4 canceled attempts (6790 RUB) show
willingness dying at the YooKassa step, not in our UI.

Not-tested: gateway fix compiles but image not deployed (blocked by 0488);
stopgap value in argo-infra values left unpushed - foreign uncommitted diff
in that worktree, will not commit someone else's tree state.
Directive: do not bump gateway image tag before 0488 lands or the stopgap
JAVA_TOOL_OPTIONS append is pushed.

Rejected: manual kubectl rollback of gateway to a pre-discovery image -
PublicApi discovery is load-bearing for route building now; rollback would
revert routes, not just the crash.
Constraint: sandbox lacks docker/jdk, so no local image build was possible.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants