Merge pull request #1895 from microsoft/dev/auto-sync/microsoft/release-branch.go1.24

Update submodule to latest `release-branch.go1.24` in `microsoft/release-branch.go1.24`

Author: bot-for-go[bot]

MICROSOFT_REVISION

@@ -0,0 +1 @@
+1

VERSION

@@ -1 +1 @@
-go1.24.7
+go1.24.8

go

@@ -254,10 +254,10 @@ index 7301ae09c45516..928a77bb8c3547 100644
  golang.org/x/crypto v0.30.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk=
  golang.org/x/net v0.32.1-0.20250304185419-76f9bf3279ef h1:oQtTn7aH5kyi7dPmG2Eot3aG1XBwnkrX+zIq+lNeZeM=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index e3e01077c18b17..72e56b5da8e582 100644
+index 48d8e4be177362..f7848010e97e3c 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -493,6 +493,24 @@ var depsRules = `
+@@ -495,6 +495,24 @@ var depsRules = `
  	< crypto/internal/fips140/rsa
  	< FIPS;
 
@@ -282,7 +282,7 @@ index e3e01077c18b17..72e56b5da8e582 100644
  	FIPS, internal/godebug < crypto/fips140;
 
  	crypto, hash !< FIPS;
-@@ -506,13 +524,12 @@ var depsRules = `
+@@ -508,13 +526,12 @@ var depsRules = `
  	FIPS, internal/godebug, hash, embed,
  	crypto/internal/boring/sig,
  	crypto/internal/boring/syso,
@@ -300,18 +300,18 @@ index e3e01077c18b17..72e56b5da8e582 100644
  	< crypto/internal/boring
  	< crypto/boring
  	< crypto/aes,
-@@ -533,6 +550,10 @@ var depsRules = `
+@@ -535,6 +552,10 @@ var depsRules = `
 
  	# CRYPTO-MATH is crypto that exposes math/big APIs - no cgo, net; fmt now ok.
 
 +	math/big, github.com/golang-fips/openssl/v2 < github.com/golang-fips/openssl/v2/bbig;
 +	math/big, github.com/microsoft/go-crypto-darwin/xcrypto < github.com/microsoft/go-crypto-darwin/bbig;
 +	math/big, github.com/microsoft/go-crypto-winnative/cng < github.com/microsoft/go-crypto-winnative/cng/bbig;
 +
- 	CRYPTO, FMT, math/big
+ 	CRYPTO, FMT, math/big, internal/saferio
  	< crypto/internal/boring/bbig
  	< crypto/rand
-@@ -837,7 +858,7 @@ var buildIgnore = []byte("\n//go:build ignore")
+@@ -839,7 +860,7 @@ var buildIgnore = []byte("\n//go:build ignore")
 
  func findImports(pkg string) ([]string, error) {
  	vpkg := pkg
@@ -320,7 +320,7 @@ index e3e01077c18b17..72e56b5da8e582 100644
  		vpkg = "vendor/" + pkg
  	}
  	dir := filepath.Join(Default.GOROOT, "src", vpkg)
-@@ -847,7 +868,7 @@ func findImports(pkg string) ([]string, error) {
+@@ -849,7 +870,7 @@ func findImports(pkg string) ([]string, error) {
  	}
  	var imports []string
  	var haveImport = map[string]bool{}

patches/0002-Vendor-crypto-backends.patch

@@ -2744,10 +2744,10 @@ index 00000000000000..032d6df3405a1b
 +
 +const TLS13KDFEnabled = true
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 72e56b5da8e582..45ceb3e2b4ce11 100644
+index f7848010e97e3c..b6e5cdad794673 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -511,6 +511,11 @@ var depsRules = `
+@@ -513,6 +513,11 @@ var depsRules = `
  	< github.com/microsoft/go-crypto-winnative/internal/bcrypt
  	< github.com/microsoft/go-crypto-winnative/cng;
 
@@ -2759,7 +2759,7 @@ index 72e56b5da8e582..45ceb3e2b4ce11 100644
  	FIPS, internal/godebug < crypto/fips140;
 
  	crypto, hash !< FIPS;
-@@ -521,16 +526,28 @@ var depsRules = `
+@@ -523,16 +528,28 @@ var depsRules = `
  	NONE < crypto/internal/boring/sig, crypto/internal/boring/syso;
  	sync/atomic < crypto/internal/boring/bcache;
 
@@ -2790,12 +2790,12 @@ index 72e56b5da8e582..45ceb3e2b4ce11 100644
  	< crypto/boring
  	< crypto/aes,
  	  crypto/des,
-@@ -554,8 +571,12 @@ var depsRules = `
+@@ -556,8 +573,12 @@ var depsRules = `
  	math/big, github.com/microsoft/go-crypto-darwin/xcrypto < github.com/microsoft/go-crypto-darwin/bbig;
  	math/big, github.com/microsoft/go-crypto-winnative/cng < github.com/microsoft/go-crypto-winnative/cng/bbig;
 
--	CRYPTO, FMT, math/big
-+	CRYPTO, FMT, math/big,
+-	CRYPTO, FMT, math/big, internal/saferio
++	CRYPTO, FMT, math/big, internal/saferio,
 +	github.com/golang-fips/openssl/v2/bbig,
 +	github.com/microsoft/go-crypto-darwin/bbig,
 +	github.com/microsoft/go-crypto-winnative/cng/bbig

patches/0003-Implement-crypto-internal-backend.patch

@@ -40,6 +40,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/hmac/hmac_test.go                  |   2 +-
  src/crypto/internal/cryptotest/allocations.go |   2 +-
  .../internal/cryptotest/implementations.go    |   2 +-
+ src/crypto/internal/fips140test/cast_test.go  |   2 +
  src/crypto/internal/fips140test/check_test.go |   8 +-
  src/crypto/md5/md5.go                         |  10 +
  src/crypto/md5/md5_test.go                    |  16 ++
@@ -76,6 +77,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/tls/internal/tls13/tls13.go        | 195 ++++++++++++++++++
  src/crypto/tls/key_schedule.go                |   2 +-
  src/crypto/tls/prf.go                         |  41 ++++
+ src/crypto/x509/verify_test.go                |   2 +-
  src/go/build/deps_test.go                     |   5 +-
  src/hash/boring_test.go                       |   9 +
  src/hash/example_test.go                      |   2 +
@@ -85,7 +87,7 @@ Subject: [PATCH] Use crypto backends
  src/net/smtp/smtp_test.go                     |  72 ++++---
  src/os/exec/exec_test.go                      |   9 +
  src/runtime/pprof/vminfo_darwin_test.go       |   6 +
- 81 files changed, 1151 insertions(+), 112 deletions(-)
+ 83 files changed, 1154 insertions(+), 113 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -1210,6 +1212,26 @@ index 3fa730459050f6..1f28f12a6e7b4f 100644
  	"crypto/internal/impl"
  	"internal/goos"
  	"internal/testenv"
+diff --git a/src/crypto/internal/fips140test/cast_test.go b/src/crypto/internal/fips140test/cast_test.go
+index 4294ff2cbfdac1..e33cf3346129f4 100644
+--- a/src/crypto/internal/fips140test/cast_test.go
++++ b/src/crypto/internal/fips140test/cast_test.go
+@@ -133,6 +133,7 @@ func TestConditionals(t *testing.T) {
+ }
+ 
+ func TestCASTPasses(t *testing.T) {
++	t.Skip("Skipping because Microsoft build of Go doesn't support CAST.")
+ 	testenv.MustHaveExec(t)
+ 	if err := fips140.Supported(); err != nil {
+ 		t.Skipf("FIPS140 not supported: %v", err)
+@@ -158,6 +159,7 @@ func TestCASTPasses(t *testing.T) {
+ }
+ 
+ func TestCASTFailures(t *testing.T) {
++	t.Skip("Skipping because Microsoft build of Go doesn't support CAST.")
+ 	testenv.MustHaveExec(t)
+ 	if err := fips140.Supported(); err != nil {
+ 		t.Skipf("FIPS140 not supported: %v", err)
 diff --git a/src/crypto/internal/fips140test/check_test.go b/src/crypto/internal/fips140test/check_test.go
 index e635a248096783..7ff73423d353b6 100644
 --- a/src/crypto/internal/fips140test/check_test.go
@@ -2198,7 +2220,7 @@ index c0396e75796add..2c00e119cb66e4 100644
  				confTranscript.Sum(nil),
  				8,
 diff --git a/src/crypto/tls/handshake_server.go b/src/crypto/tls/handshake_server.go
-index 7c75977ad3ffb2..b9db95ca7b9d5a 100644
+index 6aebb742229a50..d859e1294c3143 100644
 --- a/src/crypto/tls/handshake_server.go
 +++ b/src/crypto/tls/handshake_server.go
 @@ -64,7 +64,15 @@ func (c *Conn) serverHandshake(ctx context.Context) error {
@@ -2619,11 +2641,24 @@ index e7369542a73270..ff52175e4ac636 100644
  		return tls12.PRF(hashFunc, secret, label, seed, keyLen)
  	}
  }
+diff --git a/src/crypto/x509/verify_test.go b/src/crypto/x509/verify_test.go
+index 5595f99ea5e43a..e1a87fa839033a 100644
+--- a/src/crypto/x509/verify_test.go
++++ b/src/crypto/x509/verify_test.go
+@@ -3119,7 +3119,7 @@ func dsaSelfSignedCNX(t *testing.T) []byte {
+ 	t.Helper()
+ 	var params dsa.Parameters
+ 	if err := dsa.GenerateParameters(&params, rand.Reader, dsa.L1024N160); err != nil {
+-		t.Fatal(err)
++		t.Skip(err) // CBL-Mariner doesn't support dsa.L1024N160, skip test
+ 	}
+ 
+ 	var dsaPriv dsa.PrivateKey
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 45ceb3e2b4ce11..44f2dca0e85859 100644
+index b6e5cdad794673..9adb3fa9f84467 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -516,7 +516,7 @@ var depsRules = `
+@@ -518,7 +518,7 @@ var depsRules = `
  	< crypto/internal/backend/internal/opensslsetup
  	< crypto/internal/backend/fips140;
 
@@ -2632,15 +2667,15 @@ index 45ceb3e2b4ce11..44f2dca0e85859 100644
 
  	crypto, hash !< FIPS;
 
-@@ -561,6 +561,7 @@ var depsRules = `
+@@ -563,6 +563,7 @@ var depsRules = `
  	  crypto/pbkdf2,
  	  crypto/ecdh,
  	  crypto/mlkem
 +	< crypto/tls/internal/tls13
  	< CRYPTO;
 
  	CGO, fmt, net !< CRYPTO;
-@@ -590,7 +591,7 @@ var depsRules = `
+@@ -592,7 +593,7 @@ var depsRules = `
 
  	# TLS, Prince of Dependencies.