Skip to content

Bump github.com/tink-crypto/tink-go/v2 from 2.4.0 to 2.7.0 - #1033

Open
dependabot[bot] wants to merge 2 commits into
masterfrom
dependabot/go_modules/github.com/tink-crypto/tink-go/v2-2.7.0
Open

Bump github.com/tink-crypto/tink-go/v2 from 2.4.0 to 2.7.0#1033
dependabot[bot] wants to merge 2 commits into
masterfrom
dependabot/go_modules/github.com/tink-crypto/tink-go/v2-2.7.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 31, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/tink-crypto/tink-go/v2 from 2.4.0 to 2.7.0.

Release notes

Sourced from github.com/tink-crypto/tink-go/v2's releases.

v2.7.0

This is Tink Go 2.7.0.

What's new

The complete list of changes since 2.7.0 can be found here.

  • Added ML-DSA-44 support to signatures.
  • Added test-only dependency on github.com/c2sp/wycheproof.
  • Removed runtime download of Wycheproof test vectors.
  • Removed internal test utilities from the testutil package:
    • PopulateSuite()
    • WycheproofSuite
    • WycheproofGroup
    • WycheproofCase
  • Added X-Wing and ML-KEM support to HPKE.
  • Added more SLH-DSA parameter sets.
  • ECDSA verification primitives no longer accept IEEE P1363 encoded signatures (IEEE Std 1363-2000) of a larger size than what's expected by the used curve. This is to reject signatures with extra 0...0 prefix, e.g., 0...0S||0....0R.

Future work

To see what we're working towards, check our project roadmap.

Get started

To get started using Tink, see the setup guide.

Go tooling

go get github.com/tink-crypto/tink-go/v2@2.7.0

v2.6.0

This is Tink Go 2.6.0

What's new

The complete list of changes since 2.5.0 can be found here.

  • Fixed non-determinism in test (fixes tink-crypto/tink-go#41).
  • Added ML_KEM768 and ML_KEM1024 to proto/hpke.proto
  • Added ML_DSA_87 to proto/ml_dsa.proto

Future work

To see what we're working towards, check our

... (truncated)

Commits
  • 25ed99c Bump Tink Go version to 2.7.0.
  • 7da7ef8 Fix error message
  • 294502d Rename MAC test functions from "Decrypt" to "Verify".
  • 8b8a800 Consistently error on nil or empty keyset handles in factory functions.
  • 01e7e2c Fix error message for legacy compatibility.
  • d6d305e Return error for empty keyset handle in NewWithConfig
  • 95b367a Refactor StreamingAEAD factory to use factoryutil.
  • 53c270f Remove the internal primitiveset package.
  • 896d4f9 Remove keyset.Primitives
  • af6875f Refactor signature factories to use factoryutil.
  • Additional commits viewable in compare view

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 31, 2026
@google-oss-prow
google-oss-prow Bot requested review from savija-tv and zoltak-g July 31, 2026 13:43
@google-oss-prow

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign paulinakania for approval. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@google-oss-prow

Copy link
Copy Markdown

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a GoogleCloudPlatform member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

Bumps [github.com/tink-crypto/tink-go/v2](https://github.com/tink-crypto/tink-go) from 2.4.0 to 2.7.0.
- [Release notes](https://github.com/tink-crypto/tink-go/releases)
- [Commits](tink-crypto/tink-go@v2.4.0...v2.7.0)

---
updated-dependencies:
- dependency-name: github.com/tink-crypto/tink-go/v2
  dependency-version: 2.7.0
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/github.com/tink-crypto/tink-go/v2-2.7.0 branch from 4500e96 to a6de194 Compare August 11, 2026 09:11
@burov

burov commented Aug 11, 2026

Copy link
Copy Markdown
Member

/gcbrun

1 similar comment
@burov

burov commented Aug 11, 2026

Copy link
Copy Markdown
Member

/gcbrun

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file needs-ok-to-test size/XS

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant