Bump golang.org/x/crypto from 0.51.0 to 0.52.0

[dependabot]

Bumps golang.org/x/crypto from 0.51.0 to 0.52.0.

Commits

• a1c0d99 go.mod: update golang.org/x dependencies
• 3c7c869 ssh: fix deadlock on unexpected channel responses
• 533fb3f ssh: fix source-address critical option bypass
• abbc44d ssh: fix incorrect operator order
• e052873 ssh: fix infinite loop on large channel writes due to integer overflow
• b61cf85 ssh: enforce user presence verification for security keys
• 9c2cd33 ssh: enforce strict limits on DSA key parameters
• 8907318 ssh: reject RSA keys with excessively large moduli
• ffd87b4 ssh: fix panic when authority callbacks are nil
• 4e7a738 ssh: fix deadlock on unexpected global responses
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[nitecon]

Automated review (eventic-global / pull_request.opened)

Overview

• Dependabot bump: golang.org/x/crypto 0.51.0 → 0.52.0 (semver patch in golang.org/x convention).
• Transitive indirect updates: golang.org/x/net 0.53.0 → 0.54.0, golang.org/x/sys 0.44.0 → 0.45.0.
• Scope: go.mod + go.sum only (+9 / -9, 2 files). No source/API/CLI/config changes.
• Upstream commits are security-focused SSH fixes: source-address critical option bypass, deadlocks on unexpected channel/global responses, integer-overflow infinite loop on large channel writes, security-key user-presence verification, DSA parameter limits, oversized RSA modulus rejection, panic on nil authority callbacks. Patch-level surface; no API breakage expected.

Checks

• CodeQL Analyze (go, 1.20.3): SUCCESS.
• CodeQL aggregate: SUCCESS.
• mergeStateStatus: CLEAN, mergeable: MERGEABLE.

Concerns

• None. Lockfile-only, all checks green.

Suggestions

• None.

Verdict: Looks good — safe to merge. Consistent with the prior golang.org/x/crypto 0.50.0 → 0.51.0 bump (#165) and the established Dependabot patch-flow on this repo.