fix(security): update module golang.org/x/crypto to v0.45.0 [security]

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
golang.org/x/crypto	v0.39.0 -> v0.45.0

GitHub Vulnerability Alerts

CVE-2025-58181

SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption.

CVE-2025-47914

SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled because a matching PR was automerged previously.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: flagd/go.sum

Command failed: go get -t ./...
go: downloading buf.build/gen/go/open-feature/flagd/connectrpc/go v1.18.1-20250529171031-ebdc14163473.1
go: downloading github.com/rs/xid v1.6.0
go: downloading github.com/stretchr/testify v1.10.0
go: downloading go.uber.org/mock v0.5.2
go: downloading github.com/gorilla/mux v1.8.1
go: downloading github.com/rs/cors v1.11.1
go: downloading github.com/cpuguy83/go-md2man/v2 v2.0.6
go: downloading github.com/diegoholiveira/jsonlogic/v3 v3.8.4
go: downloading github.com/twmb/murmur3 v1.1.8
go: downloading github.com/zeebo/xxh3 v1.0.2
go: downloading golang.org/x/mod v0.29.0
go: downloading connectrpc.com/otelconnect v0.7.2
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.37.0
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.37.0
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.37.0
go: downloading github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2
go: downloading github.com/russross/blackfriday/v2 v2.1.0
go: downloading github.com/barkimedes/go-deepcopy v0.0.0-20220514131651-17c30cfc62df
go: downloading github.com/klauspost/cpuid/v2 v2.2.7
go: downloading go.opentelemetry.io/proto/otlp v1.7.0
go: downloading github.com/cenkalti/backoff/v5 v5.0.2
go: downloading github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.1
go: downloading github.com/open-feature/flagd/core v0.12.1
go: downloading github.com/open-feature/flagd v0.4.2
go: github.com/open-feature/flagd/flagd/pkg/service/flag-evaluation imports
	github.com/open-feature/flagd/core/pkg/notifications: cannot find module providing package github.com/open-feature/flagd/core/pkg/notifications
go: warning: go.opentelemetry.io/otel/exporters/[email protected]: retracted by module author: v0.59.0 produces incorrect metric names when bracketed units are used.
go: to switch to the latest unretracted version, run:
	go get go.opentelemetry.io/otel/exporters/prometheus@latest

[netlify]

✅ Deploy Preview for polite-licorice-3db33c canceled.

Name	Link
🔨 Latest commit	f3d5bc0
🔍 Latest deploy log	https://app.netlify.com/projects/polite-licorice-3db33c/deploys/691ee0c58168240008fe5244

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud