[deps] Update golang.org/x/crypto from v0.48.0 to v0.49.0 #21938

Summary

Update golang.org/x/crypto dependency from v0.48.0 to v0.49.0

Current State

• Package: golang.org/x/crypto
• Current Version: v0.48.0
• Proposed Version: v0.49.0
• Update Type: Minor (pre-1.0 package)

Why Separate Issue

⚠️ Minor version update for security-sensitive package

• Minor version update (v0.48.0 → v0.49.0) for a pre-1.0 package
• This is a cryptography package — security-sensitive changes require careful validation
• Pre-1.0 minor bumps may introduce behavior changes
• Needs individual review and testing

Safety Assessment

⚠️ Requires careful review

• Cryptography library update — must ensure no regressions in authentication/encryption
• golang.org/x packages follow Go release cycle and are generally stable
• Review commit history for any API changes
• Test all features that rely on crypto functionality

Links

• [Source Repository]((go.googlesource.com/redacted)
• [Commit History]((go.googlesource.com/redacted)
• [Go Package]((pkg.go.dev/redacted)

Note: This package is hosted on Google's Git (go.googlesource.com/crypto), not GitHub. There are no GitHub release pages.

Recommended Action

go get golang.org/x/crypto@v0.49.0
go mod tidy

Testing Notes

• Run all tests: make test-unit
• Test features that use SSH, TLS, or other cryptographic functionality
• Verify no deprecation warnings in crypto usage
• Run: make agent-finish before committing

References:

• §23336463675

Generated by Dependabot Dependency Checker · ◷

• expires on Mar 22, 2026, 9:26 AM UTC