chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 - #6096
Merged
Calcium-Ion merged 1 commit intoJul 11, 2026
Conversation
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.51.0 to 0.52.0. - [Commits](golang/crypto@v0.51.0...v0.52.0) --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-version: 0.52.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
dependabot
Bot
deleted the
dependabot/go_modules/golang.org/x/crypto-0.52.0
branch
July 11, 2026 02:53
agogo233
added a commit
to agogo233/new-api
that referenced
this pull request
Jul 13, 2026
* upstream/main: (56 commits) fix: list only channel models in unset price models tab fix: harden unset price models tab batch copy, feedback, and memo equality feat: add unset price models tab to model pricing settings (QuantumNous#6124) feat: enhance model search functionality with status and sync filters fix: bound uncached remainder by prompt-max(cached,write) and forward compact prompt_cache_key feat: bill OpenAI cache_write_tokens at cache-creation price with zero clamp feat: enhance text protocol conversion and advanced custom routing (QuantumNous#5825) fix: adjust margin for StatusBadge component in logs columns feat: enhance stale instance handling and update theme colors feat: update theme colors feat(timing): add timing metrics display for stream logs and enhance localization revert: restore StatusBadge horizontal padding revert: undo t0ng7u UI design-system refactor ✨ feat(web): polish themed data views and add task log details feat(image): enhance image stream handling with client disconnect logic and billing adjustments fix(billing): improve quota handling and error reporting for pre-consume operations fix(billing): reject saturated pre-consume quota 🐛 fix: Fontsource asset resolution across workspace layouts fix: sync codex field (QuantumNous#6018) chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 (QuantumNous#6096) ...
lansine
pushed a commit
to evin-pubb/new-api-fork
that referenced
this pull request
Jul 14, 2026
…ous#6096) Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.51.0 to 0.52.0. - [Commits](golang/crypto@v0.51.0...v0.52.0) --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-version: 0.52.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
jiweiyeah
added a commit
to jiweiyeah/yutou-api
that referenced
this pull request
Jul 25, 2026
Synced upstream/main (8739c05 → 5a6c53d, 49 commits) into custom. Conflicts resolved by keeping custom side per user instruction: - controller/user.go: kept custom subscription filter + total_topup sort - model/user.go: kept custom queryUsers delegation (GetAllUsers/GetAllUsersFiltered/SearchUsers) - model/channel_cache.go: kept custom performance monitoring (RecordCacheSync) - web/default/src/features/users/components/users-columns.tsx: kept custom imports (formatNumber, cn) - web/default/src/features/users/components/users-table.tsx: kept custom controlled sorting + server-side ordering + subscriptionFilter Removed upstream test model/user_pagination_test.go — depends on the upstream sortOptions-based GetAllUsers/SearchUsers signatures that custom side does not expose (custom uses queryUsers with subStatus/orderBy/orderDir). Verified: go build ./... and web/default tsc --noEmit both pass. Notable upstream fixes absorbed: - QuantumNous#6225 prevent duplicate tool calls in Responses→Chat streaming - QuantumNous#6194 server-side sorting for user list (fix paged-data client-sort bug) - QuantumNous#6134 prevent large quota values from overflowing - QuantumNous#6168 purge authentication data on hard user deletion - QuantumNous#6096 golang.org/x/crypto 0.51.0 → 0.52.0 - Deadlock fix in channel_cache.go (InvalidatePricingCache lock ordering) NOT absorbed — custom side keeps performance monitoring branch. Manual review needed if pricing cache staleness is observed.
zhaodechao2008
pushed a commit
to zhaodechao2008/new-api
that referenced
this pull request
Jul 27, 2026
…ous#6096) Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.51.0 to 0.52.0. - [Commits](golang/crypto@v0.51.0...v0.52.0) --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-version: 0.52.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
330079598
pushed a commit
to 330079598/new-api
that referenced
this pull request
Aug 19, 2026
…ous#6096) Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.51.0 to 0.52.0. - [Commits](golang/crypto@v0.51.0...v0.52.0) --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-version: 0.52.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps golang.org/x/crypto from 0.51.0 to 0.52.0.
Commits
a1c0d99go.mod: update golang.org/x dependencies3c7c869ssh: fix deadlock on unexpected channel responses533fb3fssh: fix source-address critical option bypassabbc44dssh: fix incorrect operator ordere052873ssh: fix infinite loop on large channel writes due to integer overflowb61cf85ssh: enforce user presence verification for security keys9c2cd33ssh: enforce strict limits on DSA key parameters8907318ssh: reject RSA keys with excessively large moduliffd87b4ssh: fix panic when authority callbacks are nil4e7a738ssh: fix deadlock on unexpected global responsesDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.