From cc7c37a839011d7579a383d785699e5dc40d9656 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Tue, 17 Dec 2024 11:30:26 +0100 Subject: [PATCH] chore(deps): update module github.com/cloudflare/circl to v1.5.0 (#6063) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [github.com/cloudflare/circl](https://redirect.github.com/cloudflare/circl) | `v1.3.7` -> `v1.5.0` | [![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fcloudflare%2fcircl/v1.5.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/go/github.com%2fcloudflare%2fcircl/v1.5.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/go/github.com%2fcloudflare%2fcircl/v1.3.7/v1.5.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fcloudflare%2fcircl/v1.3.7/v1.5.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes
cloudflare/circl (github.com/cloudflare/circl) ### [`v1.5.0`](https://redirect.github.com/cloudflare/circl/releases/tag/v1.5.0): CIRCL v1.5.0 [Compare Source](https://redirect.github.com/cloudflare/circl/compare/v1.4.0...v1.5.0) ### CIRCL v1.5.0 **New:** ML-DSA, Module-Lattice-based Digital Signature Algorithm. ##### What's Changed - kem: add X25519MLKEM768 TLS hybrid KEM by [@​bwesterb](https://redirect.github.com/bwesterb) in [https://github.com/cloudflare/circl/pull/510](https://redirect.github.com/cloudflare/circl/pull/510) - Create semgrep.yml by [@​hrushikeshdeshpande](https://redirect.github.com/hrushikeshdeshpande) in [https://github.com/cloudflare/circl/pull/514](https://redirect.github.com/cloudflare/circl/pull/514) - repo: Some fixes reported by CodeQL by [@​armfazh](https://redirect.github.com/armfazh) in [https://github.com/cloudflare/circl/pull/515](https://redirect.github.com/cloudflare/circl/pull/515) - Add ML-DSA (FIPS204) by [@​bwesterb](https://redirect.github.com/bwesterb) in [https://github.com/cloudflare/circl/pull/480](https://redirect.github.com/cloudflare/circl/pull/480) - sign/mldsa: Add test for ML-DSA signature verification. by [@​armfazh](https://redirect.github.com/armfazh) in [https://github.com/cloudflare/circl/pull/517](https://redirect.github.com/cloudflare/circl/pull/517) - Release v1.5.0 by [@​armfazh](https://redirect.github.com/armfazh) in [https://github.com/cloudflare/circl/pull/518](https://redirect.github.com/cloudflare/circl/pull/518) ##### New Contributors - [@​hrushikeshdeshpande](https://redirect.github.com/hrushikeshdeshpande) made their first contribution in [https://github.com/cloudflare/circl/pull/514](https://redirect.github.com/cloudflare/circl/pull/514) **Full Changelog**: https://github.com/cloudflare/circl/compare/v1.4.0...v1.5.0 ### [`v1.4.0`](https://redirect.github.com/cloudflare/circl/releases/tag/v1.4.0): CIRCL v1.4.0 [Compare Source](https://redirect.github.com/cloudflare/circl/compare/v1.3.9...v1.4.0) ### CIRCL v1.4.0 ##### Changes New: ML-KEM compatible with FIPS-203. ##### Commit History - eddilithium3: fix typos by [@​bwesterb](https://redirect.github.com/bwesterb) in [https://github.com/cloudflare/circl/pull/503](https://redirect.github.com/cloudflare/circl/pull/503) - Add ML-KEM (FIPS 203). by [@​bwesterb](https://redirect.github.com/bwesterb) in [https://github.com/cloudflare/circl/pull/470](https://redirect.github.com/cloudflare/circl/pull/470) - Add ML-KEM decapsulation key check. by [@​bwesterb](https://redirect.github.com/bwesterb) in [https://github.com/cloudflare/circl/pull/507](https://redirect.github.com/cloudflare/circl/pull/507) - Preparing for release v1.4.0 by [@​armfazh](https://redirect.github.com/armfazh) in [https://github.com/cloudflare/circl/pull/508](https://redirect.github.com/cloudflare/circl/pull/508) **Full Changelog**: https://github.com/cloudflare/circl/compare/v1.3.9...v1.4.0 ### [`v1.3.9`](https://redirect.github.com/cloudflare/circl/releases/tag/v1.3.9): CIRCL v1.3.9 [Compare Source](https://redirect.github.com/cloudflare/circl/compare/v1.3.8...v1.3.9) #### CIRCL v1.3.9 ##### Changes: - Fix bug on BLS12381 decoding elements. ##### Commit History - dilithium: fix typo by [@​bwesterb](https://redirect.github.com/bwesterb) in [https://github.com/cloudflare/circl/pull/498](https://redirect.github.com/cloudflare/circl/pull/498) - bls12381: Detects invalid prefix in G1 and G2 serialized elements by [@​armfazh](https://redirect.github.com/armfazh) in [https://github.com/cloudflare/circl/pull/500](https://redirect.github.com/cloudflare/circl/pull/500) - Preparing CIRCL release v1.3.9 by [@​armfazh](https://redirect.github.com/armfazh) in [https://github.com/cloudflare/circl/pull/501](https://redirect.github.com/cloudflare/circl/pull/501) **Full Changelog**: https://github.com/cloudflare/circl/compare/v1.3.8...v1.3.9 ### [`v1.3.8`](https://redirect.github.com/cloudflare/circl/releases/tag/v1.3.8): CIRCL v1.3.8 [Compare Source](https://redirect.github.com/cloudflare/circl/compare/v1.3.7...v1.3.8) ### CIRCL v1.3.8 #### New - BLS Signatures on top of BLS12-381. - Adopt faster squaring in pairings. - BlindRSA compliant with RFC9474. - (Verifiable) Secret Sharing compatible with the Group interface (elliptic curves). #### Notice - Update on cpabe/tkn20 ciphertexts, read more at https://github.com/cloudflare/circl/wiki/tkn20-Ciphertext-Format-(v1.3.8) ##### What's Changed - Implement Granger-Scott faster squaring in the cyclotomic subgroup. by [@​armfazh](https://redirect.github.com/armfazh) in [https://github.com/cloudflare/circl/pull/449](https://redirect.github.com/cloudflare/circl/pull/449) - Updates avo and CIRCL's own dependency. by [@​armfazh](https://redirect.github.com/armfazh) in [https://github.com/cloudflare/circl/pull/474](https://redirect.github.com/cloudflare/circl/pull/474) - Updating documentation for OPRF package. by [@​armfazh](https://redirect.github.com/armfazh) in [https://github.com/cloudflare/circl/pull/475](https://redirect.github.com/cloudflare/circl/pull/475) - group: removes order method from group interface by [@​armfazh](https://redirect.github.com/armfazh) in [https://github.com/cloudflare/circl/pull/356](https://redirect.github.com/cloudflare/circl/pull/356) - zk/dleq: Adding DLEQ proofs for Qn, the subgroup of squares in (Z/nZ)\* by [@​armfazh](https://redirect.github.com/armfazh) in [https://github.com/cloudflare/circl/pull/451](https://redirect.github.com/cloudflare/circl/pull/451) - Reduce x/crypto and x/sys versions to match Go 1.21 by [@​Lekensteyn](https://redirect.github.com/Lekensteyn) in [https://github.com/cloudflare/circl/pull/476](https://redirect.github.com/cloudflare/circl/pull/476) - Bump GitHub Actions versions and use Go 1.22 and 1.21 by [@​Lekensteyn](https://redirect.github.com/Lekensteyn) in [https://github.com/cloudflare/circl/pull/477](https://redirect.github.com/cloudflare/circl/pull/477) - Adding rule for constant values by [@​armfazh](https://redirect.github.com/armfazh) in [https://github.com/cloudflare/circl/pull/478](https://redirect.github.com/cloudflare/circl/pull/478) - Add BLS signatures over BLS12-381 by [@​armfazh](https://redirect.github.com/armfazh) in [https://github.com/cloudflare/circl/pull/446](https://redirect.github.com/cloudflare/circl/pull/446) - group: Implements Shamir and Feldman secret sharing. by [@​armfazh](https://redirect.github.com/armfazh) in [https://github.com/cloudflare/circl/pull/348](https://redirect.github.com/cloudflare/circl/pull/348) - blindrsa: add support for all variants of RFC9474 by [@​armfazh](https://redirect.github.com/armfazh) in [https://github.com/cloudflare/circl/pull/479](https://redirect.github.com/cloudflare/circl/pull/479) - Explicitly installs Go with version before CodeQL analysis. by [@​armfazh](https://redirect.github.com/armfazh) in [https://github.com/cloudflare/circl/pull/481](https://redirect.github.com/cloudflare/circl/pull/481) - Bumps golangci-lint action by [@​armfazh](https://redirect.github.com/armfazh) in [https://github.com/cloudflare/circl/pull/485](https://redirect.github.com/cloudflare/circl/pull/485) - ecc/bls12381: Ensures pairing operations don't overwrite their input by [@​armfazh](https://redirect.github.com/armfazh) in [https://github.com/cloudflare/circl/pull/494](https://redirect.github.com/cloudflare/circl/pull/494) - Align to the `purego` build tag, removing `noasm` build tag by [@​mattyclarkson](https://redirect.github.com/mattyclarkson) in [https://github.com/cloudflare/circl/pull/492](https://redirect.github.com/cloudflare/circl/pull/492) - cpabe: Serializing ciphertext with 32-bit prefixes. by [@​armfazh](https://redirect.github.com/armfazh) in [https://github.com/cloudflare/circl/pull/490](https://redirect.github.com/cloudflare/circl/pull/490) ##### New Contributors - [@​mattyclarkson](https://redirect.github.com/mattyclarkson) made their first contribution in [https://github.com/cloudflare/circl/pull/492](https://redirect.github.com/cloudflare/circl/pull/492) **Full Changelog**: https://github.com/cloudflare/circl/compare/v1.3.7...v1.3.8
--- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go). Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- internal/tools/go.mod | 2 +- internal/tools/go.sum | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/internal/tools/go.mod b/internal/tools/go.mod index 330884e18..a7298e0a8 100644 --- a/internal/tools/go.mod +++ b/internal/tools/go.mod @@ -54,7 +54,7 @@ require ( github.com/charithe/durationcheck v0.0.10 // indirect github.com/chavacava/garif v0.1.0 // indirect github.com/ckaznocha/intrange v0.2.1 // indirect - github.com/cloudflare/circl v1.3.7 // indirect + github.com/cloudflare/circl v1.5.0 // indirect github.com/curioswitch/go-reassign v0.2.0 // indirect github.com/cyphar/filepath-securejoin v0.2.4 // indirect github.com/daixiang0/gci v0.13.5 // indirect diff --git a/internal/tools/go.sum b/internal/tools/go.sum index 80989c915..067cf1cfe 100644 --- a/internal/tools/go.sum +++ b/internal/tools/go.sum @@ -83,8 +83,8 @@ github.com/ckaznocha/intrange v0.2.1/go.mod h1:7NEhVyf8fzZO5Ds7CRaqPEm52Ut83hsTi github.com/client9/misspell v0.3.4 h1:ta993UF76GwbvJcIo3Y68y/M3WxlpEHPWIGDkJYwzJI= github.com/client9/misspell v0.3.4/go.mod h1:qj6jICC3Q7zFZvVWo7KLAzC3yx5G7kyvSDkc90ppPyw= github.com/cloudflare/circl v1.3.3/go.mod h1:5XYMA4rFBvNIrhs50XuiBJ15vF2pZn4nnUKZrLbUZFA= -github.com/cloudflare/circl v1.3.7 h1:qlCDlTPz2n9fu58M0Nh1J/JzcFpfgkFHHX3O35r5vcU= -github.com/cloudflare/circl v1.3.7/go.mod h1:sRTcRWXGLrKw6yIGJ+l7amYJFfAXbZG0kBSc8r4zxgA= +github.com/cloudflare/circl v1.5.0 h1:hxIWksrX6XN5a1L2TI/h53AGPhNHoUBo+TD1ms9+pys= +github.com/cloudflare/circl v1.5.0/go.mod h1:uddAzsPgqdMAYatqJ0lsjX1oECcQLIlRpzZh3pJrofs= github.com/cpuguy83/go-md2man/v2 v2.0.4/go.mod h1:tgQtvFlXSQOSOSIRvRPT7W67SCa46tRHOmNcaadrF8o= github.com/curioswitch/go-reassign v0.2.0 h1:G9UZyOcpk/d7Gd6mqYgd8XYWFMw/znxwGDUstnC9DIo= github.com/curioswitch/go-reassign v0.2.0/go.mod h1:x6OpXuWvgfQaMGks2BZybTngWjT84hqJfKoO8Tt/Roc=