OCPBUGS-101727: bump tests-extension dependencies

[ankitathomas]

Summary by CodeRabbit

• Chores
  • Updated supporting Go dependencies to newer versions.
  • No user-facing features or behavior changes.

[openshift-ci-robot]

@ankitathomas: This pull request references Jira Issue OCPBUGS-101727, which is valid. The bug has been moved to the POST state.

3 validation(s) were run on this bug

• bug is open, matching expected state (open)
• bug target version (5.0.0) matches configured target version for branch (5.0.0)
• bug is in the state ASSIGNED, which is one of the valid states (NEW, ASSIGNED, POST)

The bug has been updated to refer to the pull request using the external bug tracker.

Details

In response to this:

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: ankitathomas
Once this PR has been reviewed and has the lgtm label, please assign perdasilva for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• DOWNSTREAM_OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[coderabbitai]

Walkthrough

The pull request updates seven indirect golang.org/x/* dependencies in tests-extension/go.mod. The existing x/exp and x/time versions remain unchanged.

Changes

Go module updates

Layer / File(s)	Summary
Indirect dependency version updates tests-extension/go.mod	Selected indirect golang.org/x/* dependencies are upgraded. x/exp and x/time remain unchanged.

Estimated code review effort: 1 (Trivial) | ~2 minutes

---

Important

Pre-merge checks failed

Please resolve all errors before merging. Addressing warnings is optional.

❌ Failed checks (1 error)

Check name	Status	Explanation	Resolution
No-Weak-Crypto	❌ Error	The vendored x/crypto/ssh update registers RC4 and 3DES and implements HMAC-SHA1; these weak algorithms appear on added lines in the dependency update.	Remove or disable legacy RC4, 3DES, and SHA-1 registrations from the vendored dependency, or use a dependency version and configuration that excludes them.

✅ Passed checks (14 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely describes the dependency updates in tests-extension and includes the related issue.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names	✅ Passed	The commit changes dependency metadata and vendored sources only; no _test.go files or Ginkgo test declarations changed, so no test title can violate this check.
Test Structure And Quality	✅ Passed	The commit changes only dependency manifests and vendored x/* files; no non-vendor Go or Ginkgo test source changed, so this test-structure check is not applicable.
Microshift Test Compatibility	✅ Passed	The commit changes only dependency metadata and vendored dependencies; no non-vendored test files or Ginkgo declarations were added, so MicroShift compatibility is not applicable.
Single Node Openshift (Sno) Test Compatibility	✅ Passed	The commit changes only dependency metadata and vendored libraries; no non-vendor Go files or new Ginkgo tests were added, so no SNO compatibility issue applies.
Topology-Aware Scheduling Compatibility	✅ Passed	The diff changes only Go dependency declarations, checksums, and vendored golang.org/x libraries; no deployment, operator, controller, or scheduling constraint changes are present.
Ote Binary Stdout Contract	✅ Passed	PR modifies only go.mod, go.sum, and vendor dependencies; no application code changes (0 additions/deletions to cmd/, pkg/, test/). OTE stdout contract violations only possible through source code...
Ipv6 And Disconnected Network Test Compatibility	✅ Passed	The commit changes only dependency metadata and vendored libraries; it adds or modifies no Ginkgo e2e tests, IPv4 assumptions, or external connectivity tests.
Container-Privileges	✅ Passed	The PR changes only Go dependency metadata and vendored Go sources; no YAML/YML or Dockerfile manifests changed, and no privilege declarations appear in changed files.
No-Sensitive-Data-In-Logs	✅ Passed	The PR modifies only tests-extension/go.mod, a Go dependency configuration file containing no logging code, executable statements, or sensitive data declarations.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

_{Comment @coderabbitai help to get the list of available commands.}

[openshift-ci-robot]

@ankitathomas: This pull request references Jira Issue OCPBUGS-101727, which is valid.

3 validation(s) were run on this bug

• bug is open, matching expected state (open)
• bug target version (5.0.0) matches configured target version for branch (5.0.0)
• bug is in the state POST, which is one of the valid states (NEW, ASSIGNED, POST)

Details

In response to this:

Summary by CodeRabbit

• Chores
• Updated supporting Go dependencies to newer versions.
• No user-facing features or behavior changes.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@tests-extension/go.mod`:
- Around line 112-120: Update the golang.org/x/crypto dependency in
tests-extension/go.mod from v0.51.0 to v0.52.0 or later, then regenerate
tests-extension/go.sum so its checksums match the upgraded module.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Repository: openshift/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 5be82bda-b39c-40fe-9c34-aa705dc3eff3

📥 Commits

Reviewing files that changed from the base of the PR and between 7687017 and 7dcc456.

⛔ Files ignored due to path filters (217)

• tests-extension/go.sum is excluded by !**/*.sum
• tests-extension/vendor/golang.org/x/crypto/chacha20/chacha_arm64.s is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/crypto/curve25519/curve25519.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/crypto/ssh/cipher.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/crypto/ssh/client_auth.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/crypto/ssh/common.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/crypto/ssh/doc.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/crypto/ssh/handshake.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/crypto/ssh/kex.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/crypto/ssh/keys.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/crypto/ssh/mac.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/crypto/ssh/messages.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/crypto/ssh/mlkem.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/crypto/ssh/server.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/crypto/ssh/ssh_gss.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/crypto/ssh/streamlocal.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/crypto/ssh/tcpip.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/crypto/ssh/transport.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/context/context.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/html/escape.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/html/iter.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/html/node.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/html/nodetype_string.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/html/parse.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/html/render.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/html/token.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/http2/README.md is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/http2/client_conn_pool.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/http2/client_priority_go126.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/http2/client_priority_go127.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/http2/clientconn.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/http2/config.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/http2/config_go124.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/http2/config_go125.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/http2/config_go126.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/http2/config_pre_go124.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/http2/frame.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/http2/gotrack.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/http2/http2.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/http2/server.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/http2/server_common.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/http2/server_wrap.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/http2/timer.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/http2/transport.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/http2/transport_common.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/http2/transport_wrap.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/http2/writesched.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/http2/writesched_common.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/http2/writesched_priority_rfc7540.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/http2/writesched_priority_rfc9218.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/http2/writesched_random.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/http2/writesched_roundrobin.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/idna/go118.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/idna/idna.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/idna/idna9.0.0.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/idna/pre_go118.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/idna/punycode.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/idna/tables10.0.0.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/idna/tables11.0.0.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/idna/tables12.0.0.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/idna/tables13.0.0.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/idna/tables15.0.0.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/idna/tables17.0.0.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/idna/tables9.0.0.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/idna/trie12.0.0.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/idna/trie13.0.0.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/internal/httpcommon/request.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/internal/httpsfv/httpsfv.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/internal/socks/socks.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/trace/events.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/net/websocket/hybi.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sync/singleflight/singleflight.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/cpu/asm_darwin_arm64_gc.s is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/cpu/cpu.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/cpu/cpu_arm64.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/cpu/cpu_arm64.s is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/cpu/cpu_darwin_arm64.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/cpu/cpu_darwin_arm64_other.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/cpu/cpu_gccgo_arm64.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/cpu/cpu_linux_riscv64.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/cpu/cpu_loong64.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/cpu/cpu_other_arm64.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/cpu/cpu_riscv64.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/cpu/cpu_windows.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/cpu/cpu_windows_arm64.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/cpu/cpu_x86.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/cpu/syscall_darwin_arm64_gc.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/cpu/zcpu_windows.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/plan9/pwd_go15_plan9.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/plan9/pwd_plan9.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/plan9/syscall_plan9.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/affinity_linux.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/fdset.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/ifreq_linux.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/ioctl_signed.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/ioctl_unsigned.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/mkall.sh is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/mkerrors.sh is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/readv_unix.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/syscall_darwin.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/syscall_linux.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/syscall_linux_arm.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/syscall_linux_arm64.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/syscall_linux_loong64.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/syscall_linux_riscv64.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/syscall_netbsd.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/syscall_openbsd.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/syscall_solaris.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/syscall_unix.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zerrors_linux.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zerrors_linux_386.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zerrors_linux_amd64.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zerrors_linux_arm.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zerrors_linux_arm64.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zerrors_linux_loong64.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zerrors_linux_mips.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zerrors_linux_mips64.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zerrors_linux_mips64le.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zerrors_linux_mipsle.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zerrors_linux_ppc.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zerrors_linux_ppc64.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zerrors_linux_ppc64le.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zerrors_linux_riscv64.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zerrors_linux_s390x.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zerrors_linux_sparc64.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zsyscall_linux.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zsyscall_openbsd_386.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zsyscall_openbsd_386.s is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zsyscall_openbsd_amd64.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zsyscall_openbsd_amd64.s is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zsyscall_openbsd_arm.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zsyscall_openbsd_arm.s is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zsyscall_openbsd_arm64.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zsyscall_openbsd_arm64.s is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zsyscall_openbsd_mips64.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zsyscall_openbsd_mips64.s is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zsyscall_openbsd_ppc64.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zsyscall_openbsd_ppc64.s is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zsyscall_openbsd_riscv64.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zsyscall_openbsd_riscv64.s is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zsyscall_solaris_amd64.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zsysnum_linux_386.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zsysnum_linux_amd64.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zsysnum_linux_arm.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zsysnum_linux_arm64.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zsysnum_linux_loong64.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zsysnum_linux_mips.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zsysnum_linux_mips64.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zsysnum_linux_mips64le.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zsysnum_linux_mipsle.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zsysnum_linux_ppc.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zsysnum_linux_ppc64.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zsysnum_linux_ppc64le.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zsysnum_linux_riscv64.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zsysnum_linux_s390x.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/zsysnum_linux_sparc64.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/ztypes_linux.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/ztypes_linux_386.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/ztypes_linux_amd64.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/ztypes_linux_arm.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/ztypes_linux_arm64.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/ztypes_linux_loong64.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/ztypes_linux_mips.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/ztypes_linux_mips64.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/ztypes_linux_mips64le.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/ztypes_linux_mipsle.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/ztypes_linux_ppc.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/ztypes_linux_ppc64.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/ztypes_linux_ppc64le.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/ztypes_linux_riscv64.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/ztypes_linux_s390x.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/ztypes_linux_sparc64.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/unix/ztypes_netbsd_arm.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/windows/aliases.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/windows/dll_windows.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/windows/registry/key.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/windows/registry/zsyscall_windows.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/windows/security_windows.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/windows/syscall_windows.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/windows/types_windows.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/sys/windows/zsyscall_windows.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/term/terminal.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/text/encoding/japanese/eucjp.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/text/encoding/japanese/iso2022jp.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/text/encoding/japanese/shiftjis.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/text/encoding/korean/euckr.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/text/encoding/simplifiedchinese/gbk.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/text/encoding/simplifiedchinese/hzgb2312.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/text/encoding/traditionalchinese/big5.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/text/encoding/unicode/unicode.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/text/message/catalog/catalog.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/text/message/catalog/dict.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/text/message/catalog/go19.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/text/message/catalog/gopre19.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/text/secure/bidirule/bidirule.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/text/secure/bidirule/bidirule10.0.0.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/text/secure/bidirule/bidirule9.0.0.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/text/unicode/bidi/core.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/text/unicode/bidi/tables10.0.0.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/text/unicode/bidi/tables11.0.0.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/text/unicode/bidi/tables12.0.0.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/text/unicode/bidi/tables13.0.0.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/text/unicode/bidi/tables15.0.0.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/text/unicode/bidi/tables17.0.0.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/text/unicode/bidi/tables9.0.0.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/text/unicode/norm/forminfo.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/text/unicode/norm/tables10.0.0.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/text/unicode/norm/tables11.0.0.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/text/unicode/norm/tables12.0.0.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/text/unicode/norm/tables15.0.0.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/text/unicode/norm/tables17.0.0.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/text/unicode/norm/tables9.0.0.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/tools/go/ast/inspector/cursor.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/tools/go/ast/inspector/inspector.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/tools/go/ast/inspector/iter.go is excluded by !**/vendor/**
• tests-extension/vendor/golang.org/x/tools/go/ast/inspector/typeof.go is excluded by !**/vendor/**
• tests-extension/vendor/modules.txt is excluded by !**/vendor/**

📒 Files selected for processing (1)

• tests-extension/go.mod

[coderabbitai]

🔒 Security & Privacy | 🟠 Major | ⚡ Quick win

🧩 Analysis chain

🌐 Web query:

OSV golang.org/x/crypto v0.51.0 CVE-2026-39830 v0.52.0

💡 Result:

CVE-2026-39830 is a security vulnerability affecting the golang.org/x/crypto package, specifically within the ssh component [1][2]. The vulnerability allows a malicious SSH peer to send unsolicited global request responses that fill an internal buffer [3][4][1]. This action blocks the connection's read loop, preventing the associated goroutine from being released even when Close is called, which leads to a resource leak per connection [1][2]. The vulnerability is fixed in version v0.52.0 [4][1][5]. All versions of golang.org/x/crypto prior to v0.52.0 are considered affected [1][5]. Users are advised to upgrade to v0.52.0 or later to mitigate this issue [4][1][6]. This issue is documented across several security databases, including the Go Vulnerability Database (as GO-2026-5017) and the GitHub Advisory Database (as GHSA-vgwf-h737-ff37) [4][1][7][5].

Citations:

• 1: GHSA-vgwf-h737-ff37
• 2: x/crypto/ssh: client can cause server deadlock on unexpected responses golang/go#79564
• 3: https://nvd.nist.gov/vuln/detail/CVE-2026-39830
• 4: https://osv.dev/vulnerability/CVE-2026-39830
• 5: https://pkg.go.dev/vuln/GO-2026-5017
• 6: https://www.openwall.com/lists/oss-security/2026/05/22/6
• 7: https://deps.dev/advisory/osv/GO-2026-5017

---

Denial of Service (CWE-400): Uncontrolled Resource Consumption

Exploitability: Moderate

Bump golang.org/x/crypto to v0.52.0 or later.

v0.51.0 is affected by CVE-2026-39830, which allows a malicious SSH peer to cause a per-connection resource leak. Upgrade the dependency and update tests-extension/go.sum.

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@tests-extension/go.mod` around lines 112 - 120, Update the
golang.org/x/crypto dependency in tests-extension/go.mod from v0.51.0 to v0.52.0
or later, then regenerate tests-extension/go.sum so its checksums match the
upgraded module.

[openshift-ci-robot]

@ankitathomas: This pull request references Jira Issue OCPBUGS-101727. The bug has been updated to no longer refer to the pull request using the external bug tracker.

Details

In response to this:

Summary by CodeRabbit

• Chores
• Updated supporting Go dependencies to newer versions.
• No user-facing features or behavior changes.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

[openshift-ci]

@ankitathomas: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/unit-olm	7dcc456	link	true	/test unit-olm
ci/prow/e2e-gcp-ovn	7dcc456	link	true	/test e2e-gcp-ovn

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.