chore(deps): bump github.com/eclipse-keypont/crypto11 from 1.6.5 to 1.6.8

[dependabot]

Bumps github.com/eclipse-keypont/crypto11 from 1.6.5 to 1.6.8.

Release notes

Sourced from github.com/eclipse-keypont/crypto11's releases.

v1.6.8

What's Changed

• downgrade the go version to 1.25.0 and add go toolchain by @​Nicolas-Peiffer in eclipse-keypont/crypto11#139
• fix: restore eclipse-keypont module path; refresh README install command, Go Reference badge and documentation links

Full Changelog: eclipse-keypont/crypto11@v1.6.5...v1.6.8

Module path restored — github.com/eclipse-keypont/crypto11

This release restores the correct module path following the repository move from github.com/ThalesGroup/crypto11 to github.com/eclipse-keypont/crypto11.

Migrating

go get github.com/eclipse-keypont/crypto11@v1.6.8

-import "github.com/ThalesGroup/crypto11"
+import "github.com/eclipse-keypont/crypto11"

The old path is deprecated and frozen at ThalesGroup/crypto11@v1.6.7. It will receive no further updates, including security fixes. GitHub still redirects the old repository URL, but the Go module path must be updated by hand — go get cannot follow it for you.

If you are already on this path: upgrade v1.6.5 → v1.6.8

v1.6.6 and v1.6.7 declare the old module path and exist only to publish the deprecation notice for github.com/ThalesGroup/crypto11. They are not usable as github.com/eclipse-keypont/crypto11 and will fail with:

module declares its path as: github.com/ThalesGroup/crypto11
        but was required as: github.com/eclipse-keypont/crypto11

v1.6.8 fixes this, so github.com/eclipse-keypont/crypto11@latest resolves correctly again.

Go version policy

go.mod targets go 1.25.0 with toolchain go1.25.8. The go directive is kept conservative so this library does not raise the minimum Go version for projects that import it, while maintainers build and test with the latest patch toolchain. See #137 and #139.

The v1.6.x series is the current stable line. v2.x.y on github.com/eclipse-keypont/crypto11/v2 is in development (v2.0.0-rc3), which is why pkg.go.dev reports a higher tagged major version.

Commits

• 9fabe64 fix: restore eclipse-keypont module path, refresh README for the new home
• 53afa74 set back config for others
• 35c8270 Merge branch 'master' into fix_pool
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[deepsource-io]

DeepSource Code Review

We reviewed changes in 023d409...0cad652 on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade

Security   Reliability   Complexity   Hygiene   Coverage

Code Review Summary

Analyzer	Status	Updated (UTC)	Details
Go		Jul 29, 2026 7:22p.m.	Review ↗
Code coverage		Jul 29, 2026 7:22p.m.	Review ↗

Code Coverage Summary

Language	Line Coverage (Overall)
Aggregate	51.9%
Go	51.9%

➟ Additional coverage metrics may have been reported. See full coverage report ↗

---

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.