[gooohgb]

Description

This PR bumps golang.org/x/crypto from 0.55.0 to 0.56.0 to address
GO-2026-6355 / CVE-2026-56855 and
GO-2026-6354 / CVE-2026-78662,
denial-of-service vulnerabilities involving deadlocked SSH channels.

The module-wide apidiff comparison reports no exported API changes. Dgraph's
direct imports are bcrypt and blake2b, whose source is unchanged in this
release. Upstream SSH validation behavior is tightened, and the module's minimum
Go version rises from 1.25 to 1.26; Dgraph already requires Go 1.27.

No application code changes or other dependency upgrades: go.mod/go.sum only.

Verified with:

• golang.org/x/exp/cmd/apidiff -m against both module versions: no API differences.
• go test -count=1 ./types/... ./tok/... on Linux/amd64, Go 1.27.1.
• go build -o /tmp/dgraph-xcrypto-0.56.0 ./dgraph on Linux/amd64 with CGO enabled.
• Upstream go test -count=1 ./acme ./ssh ./ssh/knownhosts on Windows/amd64.
• go mod tidy, go mod verify, and git diff --check.

Trunk and Docker integration suites were not run locally.

Checklist

• The PR title follows Conventional Commits.
• The code compiles and the relevant existing tests pass.

---

^{Need help on this PR? Tag @codesmith-bot with what you need.}

Summary by CodeRabbit

• Chores
  • Updated an underlying component to a newer version. This maintenance update does not change the product’s available features or user-facing behavior. No new settings, workflows, or functionality are included. The update is limited to internal maintenance, with no changes to the experience or capabilities available to users.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: ffe6baa1-b855-4000-bcac-d144a8d847f8

📥 Commits

Reviewing files that changed from the base of the PR and between 1863427 and fcf6584.

⛔ Files ignored due to path filters: 1

• go.sum is excluded by !**/*.sum

📒 Files selected for processing: 1

• go.mod

Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 9 remain after this review.

📝 Walkthrough

The golang.org/x/crypto dependency requirement changes from v0.55.0 to v0.56.0.

Changes: Crypto dependency update

Layer / File(s)	Summary
Update crypto dependency version go.mod	go.mod now requires golang.org/x/crypto v0.56.0 instead of v0.55.0.

Priority: ⬆️ High

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other

Suggested reviewers: matthewmcneely

Merge Risk: ⚪ Minimal · up to fcf65

This dependency-only update has no demonstrated regression in the supplied evidence. The broader integration suites were not run locally, so rely on normal CI checks before merging.

Pre-merge checks: 5

Check name	Status	Explanation
Description Check		Check skipped - CodeRabbit’s high-level summary is enabled.
Title check		The title clearly and concisely identifies the dependency upgrade from golang.org/x/crypto 0.55.0 to 0.56.0, which is the main change.
Docstring Coverage		No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}