fix(deps): vuln minor: golang.org/x/crypto, golang.org/x/mod [examples/single_service/src/go-project/go.mod]

[gh-worker-campaigns-3e9aa4]

Summary: High-severity security update — 2 packages upgraded (MINOR changes included)

Manifests changed:

• examples/single_service/src/go-project/go.mod (go)

---

✅ Action Required: Please review the changes below. If they look good, approve and merge this PR.

---

Updates

Package	From	To	Type	Dep Type	Vulnerabilities Fixed
golang.org/x/crypto	v0.54.0	v0.57.0	minor	Transitive	4 HIGH, 2 UNKNOWN
golang.org/x/mod	v0.38.0	v0.41.0	minor	Transitive	2 UNKNOWN

---

Security Details

🚨 Critical & High Severity (4 fixed)

Package	CVE	Severity	Summary	Unsafe Version	Fixed In	Case
golang.org/x/crypto	GO-2026-6354	high	Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh	v0.54.0	0.56.0	-
golang.org/x/crypto	CVE-2026-78662	high	Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh	v0.54.0	-	-
golang.org/x/crypto	GO-2026-6355	high	Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh	v0.54.0	0.56.0	-
golang.org/x/crypto	CVE-2026-56855	high	Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh	v0.54.0	-	-

ℹ️ Other Vulnerabilities (4)

Package	CVE	Severity	Summary	Unsafe Version	Fixed In	Case
golang.org/x/crypto	GO-2026-6303	unknown	Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh	v0.54.0	0.55.0	-
golang.org/x/crypto	GO-2026-5932	unknown	The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues	v0.54.0	-	-
golang.org/x/mod	GO-2026-6180	unknown	Ignore unrelated, unauthenticated hashes in Lookup in golang.org/x/mod/sumdb	v0.38.0	0.40.0	-
golang.org/x/mod	GO-2026-6179	unknown	Fix transparency log tile verification bypass in golang.org/x/mod/sumdb/tlog	v0.38.0	0.40.0	-

---

Review Checklist

Standard review:

• Review changes for compatibility with your code
• Check for breaking changes in release notes
• Run tests locally or wait for CI
• Approve and merge this PR

---

Update Mode: all_vulns

🤖 Generated by DataDog Automated Dependency Management System

[gh-worker-campaigns-3e9aa4]

Auto-rebase complete

Branch is up to date with main — rebased onto 9b59002.

---

_{Auto-Rebase · Add no-auto-rebase to opt out}

[dd-prapprover-prod-77c48c]

PRApprover will approve and merge this PR, FAQ, #dx-source-code-management

🛠️ PRApproval Status

• ✅ PR is eligible for auto-approval by rule dependency-management-version-updater - 2026-09-22T19:13:51Z
• ✅ CI tests passed - 2026-09-22T19:13:55Z
• ✅ Approved (commit: dbb215e) - 2026-09-22T19:13:57Z
• ✅ Merge Started
• ✅ Merged - 2026-09-22T19:14:08Z

➡️ Current phase: PR merged successfully! ✅

[dd-prapprover-prod-77c48c]

This PR has been automatically approved by the DD PR Approver bot.