Skip to content

Update module github.com/xdg-go/scram to v1.2.0 - #1958

Merged
red-hat-konflux[bot] merged 1 commit into
masterfrom
konflux/mintmaker/master/github.com-xdg-go-scram-1.x
Dec 1, 2025
Merged

red-hat-konflux[bot] merged 1 commit into
masterfrom
konflux/mintmaker/master/github.com-xdg-go-scram-1.x

Conversation

@red-hat-konflux

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
github.com/xdg-go/scram v1.1.2 -> v1.2.0 age confidence

Release Notes

xdg-go/scram (github.com/xdg-go/scram)

v1.2.0

Compare Source

Added
  • Channel binding support for SCRAM-PLUS variants (RFC 5929, RFC 9266)
  • GetStoredCredentialsWithError() method that returns errors from PBKDF2
    key derivation instead of panicking.
  • Support for Go 1.24+ stdlib crypto/pbkdf2 package, which provides
    FIPS 140-3 compliance when using SHA-256 or SHA-512 hash functions.
Changed
  • Minimum Go version bumped from 1.11 to 1.18.
  • Migrated from github.com/xdg-go/pbkdf2 to stdlib crypto/pbkdf2 on
    Go 1.24+. Legacy Go versions (<1.24) continue using the external
    library via build tags for backward compatibility.
  • Internal error handling improved for PBKDF2 key derivation failures.
Deprecated
  • GetStoredCredentials() is deprecated in favor of
    GetStoredCredentialsWithError(). The old method panics on PBKDF2
    errors to maintain backward compatibility but will be removed in a
    future major version.
Notes
  • FIPS 140-3 compliance is available on Go 1.24+ when using SCRAM-SHA-256
    or SCRAM-SHA-512 with appropriate salt lengths (≥16 bytes). SCRAM-SHA-1
    is not FIPS-approved.

Configuration

📅 Schedule: Branch creation - Between 03:00 AM and 10:59 AM, only on Monday ( * 3-10 * * 1 ) in timezone Europe/Prague, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux
red-hat-konflux Bot enabled auto-merge (rebase) December 1, 2025 08:40
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/master/github.com-xdg-go-scram-1.x branch from bfc453b to d7a925d Compare December 1, 2025 08:41
@red-hat-konflux
red-hat-konflux Bot merged commit 4d23ffc into master Dec 1, 2025
9 of 10 checks passed
@codecov-commenter

codecov-commenter commented Dec 1, 2025

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 58.83%. Comparing base (bd9ea7c) to head (d7a925d).
⚠️ Report is 6 commits behind head on master.

Additional details and impacted files
@@           Coverage Diff           @@
##           master    #1958   +/-   ##
=======================================
  Coverage   58.83%   58.83%           
=======================================
  Files         131      131           
  Lines        8407     8407           
=======================================
  Hits         4946     4946           
  Misses       2927     2927           
  Partials      534      534           
Flag Coverage Δ
unittests 58.83% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@red-hat-konflux
red-hat-konflux Bot deleted the konflux/mintmaker/master/github.com-xdg-go-scram-1.x branch December 1, 2025 12:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant