[Cycode] Fix for vulnerable manifest file dependency - golang.org/x/crypto updated to version 0.52.0

[cycode-security]

Cycode Vulnerable Dependencies Update

This pull request updates the following manifest file:

File Path	Number of packages to update
go.mod	1

📂 go.mod

1 package will be updated to resolve vulnerabilities:

Package Name	Current Version	Updated Version
golang.org/x/crypto	0.41.0	0.52.0

---

Note

Low Risk
Single dependency version bump with no logic changes; typical patch-level crypto library update, though crypto deps warrant normal regression testing.

Overview
Bumps the direct golang.org/x/crypto dependency in go.mod from 0.41.0 to 0.52.0 to address reported vulnerabilities (Cycode dependency scan).

This is a manifest-only change with no application code edits in the diff.

^{Reviewed by Cursor Bugbot for commit 1d64ece. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 2 potential issues.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit 1d64ece. Configure here.}

[cursor]

Unpaired go.mod dependency bump

High Severity

The go.mod file updates golang.org/x/crypto to v0.52.0, but go.sum still contains checksums for v0.41.0. This mismatch causes module verification to fail and prevents CI checks that require a clean go.sum after module tidying, impacting reproducible builds.

 

^{Reviewed by Cursor Bugbot for commit 1d64ece. Configure here.}

[cursor]

Crypto version needs newer Go

Medium Severity

Selecting golang.org/x/crypto v0.52.0 pulls in a module whose own go.mod requires Go 1.25.0, while this repository still declares go 1.24.0 and toolchain go1.24.2. That mismatch can make go mod tidy or builds fail until the root Go toolchain is raised or a 1.24-compatible patched release is chosen.

 

^{Reviewed by Cursor Bugbot for commit 1d64ece. Configure here.}