Skip to content

Commit a349e50

Browse files
renovate-botcopybara-github
authored andcommitted
fix(deps): update osv-scalibr minor (#775)
This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | Type | Update | |---|---|---|---|---|---|---|---| | [deps.dev/api/v3](https://redirect.github.com/google/deps.dev) | `v3.0.0-20250307021655-d811e36f9cad` -> `v3.0.0-20250429014815-ac0aa6a085fa` | [![age](https://developer.mend.io/api/mc/badges/age/go/deps.dev%2fapi%2fv3/v3.0.0-20250429014815-ac0aa6a085fa?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/go/deps.dev%2fapi%2fv3/v3.0.0-20250429014815-ac0aa6a085fa?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/go/deps.dev%2fapi%2fv3/v3.0.0-20250307021655-d811e36f9cad/v3.0.0-20250429014815-ac0aa6a085fa?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/deps.dev%2fapi%2fv3/v3.0.0-20250307021655-d811e36f9cad/v3.0.0-20250429014815-ac0aa6a085fa?slim=true)](https://docs.renovatebot.com/merge-confidence/) | require | patch | | [deps.dev/util/maven](https://redirect.github.com/google/deps.dev) | `d811e36` -> `ac0aa6a` | [![age](https://developer.mend.io/api/mc/badges/age/go/deps.dev%2futil%2fmaven/v0.0.0-20250429014815-ac0aa6a085fa?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/go/deps.dev%2futil%2fmaven/v0.0.0-20250429014815-ac0aa6a085fa?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/go/deps.dev%2futil%2fmaven/v0.0.0-20250307021655-d811e36f9cad/v0.0.0-20250429014815-ac0aa6a085fa?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/deps.dev%2futil%2fmaven/v0.0.0-20250307021655-d811e36f9cad/v0.0.0-20250429014815-ac0aa6a085fa?slim=true)](https://docs.renovatebot.com/merge-confidence/) | require | digest | | [deps.dev/util/pypi](https://redirect.github.com/google/deps.dev) | `d811e36` -> `ac0aa6a` | [![age](https://developer.mend.io/api/mc/badges/age/go/deps.dev%2futil%2fpypi/v0.0.0-20250429014815-ac0aa6a085fa?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/go/deps.dev%2futil%2fpypi/v0.0.0-20250429014815-ac0aa6a085fa?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/go/deps.dev%2futil%2fpypi/v0.0.0-20250307021655-d811e36f9cad/v0.0.0-20250429014815-ac0aa6a085fa?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/deps.dev%2futil%2fpypi/v0.0.0-20250307021655-d811e36f9cad/v0.0.0-20250429014815-ac0aa6a085fa?slim=true)](https://docs.renovatebot.com/merge-confidence/) | require | digest | | [deps.dev/util/resolve](https://redirect.github.com/google/deps.dev) | `f4cf91c` -> `ac0aa6a` | [![age](https://developer.mend.io/api/mc/badges/age/go/deps.dev%2futil%2fresolve/v0.0.0-20250429014815-ac0aa6a085fa?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/go/deps.dev%2futil%2fresolve/v0.0.0-20250429014815-ac0aa6a085fa?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/go/deps.dev%2futil%2fresolve/v0.0.0-20250310223405-f4cf91c9e684/v0.0.0-20250429014815-ac0aa6a085fa?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/deps.dev%2futil%2fresolve/v0.0.0-20250310223405-f4cf91c9e684/v0.0.0-20250429014815-ac0aa6a085fa?slim=true)](https://docs.renovatebot.com/merge-confidence/) | require | digest | | [deps.dev/util/semver](https://redirect.github.com/google/deps.dev) | `d811e36` -> `ac0aa6a` | [![age](https://developer.mend.io/api/mc/badges/age/go/deps.dev%2futil%2fsemver/v0.0.0-20250429014815-ac0aa6a085fa?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/go/deps.dev%2futil%2fsemver/v0.0.0-20250429014815-ac0aa6a085fa?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/go/deps.dev%2futil%2fsemver/v0.0.0-20250307021655-d811e36f9cad/v0.0.0-20250429014815-ac0aa6a085fa?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/deps.dev%2futil%2fsemver/v0.0.0-20250307021655-d811e36f9cad/v0.0.0-20250429014815-ac0aa6a085fa?slim=true)](https://docs.renovatebot.com/merge-confidence/) | require | digest | | [github.com/BurntSushi/toml](https://redirect.github.com/BurntSushi/toml) | `v1.3.2` -> `v1.5.0` | [![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fBurntSushi%2ftoml/v1.5.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/go/github.com%2fBurntSushi%2ftoml/v1.5.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/go/github.com%2fBurntSushi%2ftoml/v1.3.2/v1.5.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fBurntSushi%2ftoml/v1.3.2/v1.5.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | require | minor | | [github.com/CycloneDX/cyclonedx-go](https://redirect.github.com/CycloneDX/cyclonedx-go) | `v0.9.0` -> `v0.9.2` | [![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fCycloneDX%2fcyclonedx-go/v0.9.2?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/go/github.com%2fCycloneDX%2fcyclonedx-go/v0.9.2?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/go/github.com%2fCycloneDX%2fcyclonedx-go/v0.9.0/v0.9.2?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fCycloneDX%2fcyclonedx-go/v0.9.0/v0.9.2?slim=true)](https://docs.renovatebot.com/merge-confidence/) | require | patch | | [github.com/containerd/containerd/api](https://redirect.github.com/containerd/containerd) | `v1.8.0` -> `v1.9.0` | [![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fcontainerd%2fcontainerd%2fapi/v1.9.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/go/github.com%2fcontainerd%2fcontainerd%2fapi/v1.9.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/go/github.com%2fcontainerd%2fcontainerd%2fapi/v1.8.0/v1.9.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fcontainerd%2fcontainerd%2fapi/v1.8.0/v1.9.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | require | minor | | [github.com/docker/docker](https://redirect.github.com/docker/docker) | `v28.0.4+incompatible` -> `v28.1.1+incompatible` | [![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fdocker%2fdocker/v28.1.1+incompatible?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/go/github.com%2fdocker%2fdocker/v28.1.1+incompatible?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/go/github.com%2fdocker%2fdocker/v28.0.4+incompatible/v28.1.1+incompatible?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fdocker%2fdocker/v28.0.4+incompatible/v28.1.1+incompatible?slim=true)](https://docs.renovatebot.com/merge-confidence/) | require | minor | | [github.com/erikvarga/go-rpmdb](https://redirect.github.com/erikvarga/go-rpmdb) | `b97e041` -> `017833e` | [![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2ferikvarga%2fgo-rpmdb/v0.0.0-20250128120918-017833ef22e5?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/go/github.com%2ferikvarga%2fgo-rpmdb/v0.0.0-20250128120918-017833ef22e5?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/go/github.com%2ferikvarga%2fgo-rpmdb/v0.0.0-20240208180226-b97e041ef9af/v0.0.0-20250128120918-017833ef22e5?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2ferikvarga%2fgo-rpmdb/v0.0.0-20240208180226-b97e041ef9af/v0.0.0-20250128120918-017833ef22e5?slim=true)](https://docs.renovatebot.com/merge-confidence/) | require | digest | | [github.com/go-git/go-git/v5](https://redirect.github.com/go-git/go-git) | `v5.14.0` -> `v5.16.0` | [![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgo-git%2fgo-git%2fv5/v5.16.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/go/github.com%2fgo-git%2fgo-git%2fv5/v5.16.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/go/github.com%2fgo-git%2fgo-git%2fv5/v5.14.0/v5.16.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgo-git%2fgo-git%2fv5/v5.14.0/v5.16.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | require | minor | | [github.com/google/go-containerregistry](https://redirect.github.com/google/go-containerregistry) | `v0.19.1` -> `v0.20.4` | [![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgoogle%2fgo-containerregistry/v0.20.4?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/go/github.com%2fgoogle%2fgo-containerregistry/v0.20.4?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/go/github.com%2fgoogle%2fgo-containerregistry/v0.19.1/v0.20.4?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgoogle%2fgo-containerregistry/v0.19.1/v0.20.4?slim=true)](https://docs.renovatebot.com/merge-confidence/) | require | minor | | [github.com/michaelkedar/xml](https://redirect.github.com/michaelkedar/xml) | `5d14c93` -> `021a7b1` | [![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fmichaelkedar%2fxml/v0.0.0-20250501021638-021a7b1a061e?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/go/github.com%2fmichaelkedar%2fxml/v0.0.0-20250501021638-021a7b1a061e?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/go/github.com%2fmichaelkedar%2fxml/v0.0.0-20250310223042-5d14c9302b17/v0.0.0-20250501021638-021a7b1a061e?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fmichaelkedar%2fxml/v0.0.0-20250310223042-5d14c9302b17/v0.0.0-20250501021638-021a7b1a061e?slim=true)](https://docs.renovatebot.com/merge-confidence/) | require | digest | | [github.com/opencontainers/image-spec](https://redirect.github.com/opencontainers/image-spec) | `v1.1.0` -> `v1.1.1` | [![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fopencontainers%2fimage-spec/v1.1.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/go/github.com%2fopencontainers%2fimage-spec/v1.1.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/go/github.com%2fopencontainers%2fimage-spec/v1.1.0/v1.1.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fopencontainers%2fimage-spec/v1.1.0/v1.1.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | require | patch | | [github.com/opencontainers/runtime-spec](https://redirect.github.com/opencontainers/runtime-spec) | `v1.1.0` -> `v1.2.1` | [![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fopencontainers%2fruntime-spec/v1.2.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/go/github.com%2fopencontainers%2fruntime-spec/v1.2.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/go/github.com%2fopencontainers%2fruntime-spec/v1.1.0/v1.2.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fopencontainers%2fruntime-spec/v1.1.0/v1.2.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | require | minor | | [github.com/ossf/osv-schema/bindings/go](https://redirect.github.com/ossf/osv-schema) | `ab8a4f6` -> `66427d1` | [![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fossf%2fosv-schema%2fbindings%2fgo/v0.0.0-20250521053223-66427d119b39?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/go/github.com%2fossf%2fosv-schema%2fbindings%2fgo/v0.0.0-20250521053223-66427d119b39?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/go/github.com%2fossf%2fosv-schema%2fbindings%2fgo/v0.0.0-20250210065807-ab8a4f6e6389/v0.0.0-20250521053223-66427d119b39?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fossf%2fosv-schema%2fbindings%2fgo/v0.0.0-20250210065807-ab8a4f6e6389/v0.0.0-20250521053223-66427d119b39?slim=true)](https://docs.renovatebot.com/merge-confidence/) | require | digest | | [github.com/package-url/packageurl-go](https://redirect.github.com/package-url/packageurl-go) | `v0.1.2` -> `v0.1.3` | [![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fpackage-url%2fpackageurl-go/v0.1.3?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/go/github.com%2fpackage-url%2fpackageurl-go/v0.1.3?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/go/github.com%2fpackage-url%2fpackageurl-go/v0.1.2/v0.1.3?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fpackage-url%2fpackageurl-go/v0.1.2/v0.1.3?slim=true)](https://docs.renovatebot.com/merge-confidence/) | require | patch | | [github.com/spdx/tools-golang](https://redirect.github.com/spdx/tools-golang) | `v0.5.3` -> `v0.5.5` | [![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fspdx%2ftools-golang/v0.5.5?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/go/github.com%2fspdx%2ftools-golang/v0.5.5?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/go/github.com%2fspdx%2ftools-golang/v0.5.3/v0.5.5?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fspdx%2ftools-golang/v0.5.3/v0.5.5?slim=true)](https://docs.renovatebot.com/merge-confidence/) | require | patch | | [go.etcd.io/bbolt](https://redirect.github.com/etcd-io/bbolt) | `v1.3.10` -> `v1.4.0` | [![age](https://developer.mend.io/api/mc/badges/age/go/go.etcd.io%2fbbolt/v1.4.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/go/go.etcd.io%2fbbolt/v1.4.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/go/go.etcd.io%2fbbolt/v1.3.10/v1.4.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.etcd.io%2fbbolt/v1.3.10/v1.4.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | require | minor | | golang.org/x/crypto | `v0.36.0` -> `v0.38.0` | [![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2fcrypto/v0.38.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/go/golang.org%2fx%2fcrypto/v0.38.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/go/golang.org%2fx%2fcrypto/v0.36.0/v0.38.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2fcrypto/v0.36.0/v0.38.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | require | minor | | golang.org/x/mod | `v0.21.0` -> `v0.24.0` | [![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2fmod/v0.24.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/go/golang.org%2fx%2fmod/v0.24.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/go/golang.org%2fx%2fmod/v0.21.0/v0.24.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2fmod/v0.21.0/v0.24.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | require | minor | | golang.org/x/net | `v0.38.0` -> `v0.40.0` | [![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2fnet/v0.40.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/go/golang.org%2fx%2fnet/v0.40.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/go/golang.org%2fx%2fnet/v0.38.0/v0.40.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2fnet/v0.38.0/v0.40.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | require | minor | | golang.org/x/sys | `v0.31.0` -> `v0.33.0` | [![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2fsys/v0.33.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/go/golang.org%2fx%2fsys/v0.33.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/go/golang.org%2fx%2fsys/v0.31.0/v0.33.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2fsys/v0.31.0/v0.33.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | require | minor | | golang.org/x/text | `v0.23.0` -> `v0.25.0` | [![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2ftext/v0.25.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/go/golang.org%2fx%2ftext/v0.25.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/go/golang.org%2fx%2ftext/v0.23.0/v0.25.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2ftext/v0.23.0/v0.25.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | require | minor | | golang.org/x/vuln | `v1.0.4` -> `v1.1.4` | [![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2fvuln/v1.1.4?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/go/golang.org%2fx%2fvuln/v1.1.4?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/go/golang.org%2fx%2fvuln/v1.0.4/v1.1.4?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2fvuln/v1.0.4/v1.1.4?slim=true)](https://docs.renovatebot.com/merge-confidence/) | require | minor | | [google.golang.org/grpc](https://redirect.github.com/grpc/grpc-go) | `v1.72.0` -> `v1.72.1` | [![age](https://developer.mend.io/api/mc/badges/age/go/google.golang.org%2fgrpc/v1.72.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/go/google.golang.org%2fgrpc/v1.72.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/go/google.golang.org%2fgrpc/v1.72.0/v1.72.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/google.golang.org%2fgrpc/v1.72.0/v1.72.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | require | patch | | [www.velocidex.com/golang/regparser](https://redirect.github.com/Velocidex/regparser) | `2169ac0` -> `31e704a` | [![age](https://developer.mend.io/api/mc/badges/age/go/www.velocidex.com%2fgolang%2fregparser/v0.0.0-20250203141505-31e704a67ef7?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/go/www.velocidex.com%2fgolang%2fregparser/v0.0.0-20250203141505-31e704a67ef7?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/go/www.velocidex.com%2fgolang%2fregparser/v0.0.0-20240404115756-2169ac0e3c09/v0.0.0-20250203141505-31e704a67ef7?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/www.velocidex.com%2fgolang%2fregparser/v0.0.0-20240404115756-2169ac0e3c09/v0.0.0-20250203141505-31e704a67ef7?slim=true)](https://docs.renovatebot.com/merge-confidence/) | require | digest | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>BurntSushi/toml (github.com/BurntSushi/toml)</summary> ### [`v1.5.0`](https://redirect.github.com/BurntSushi/toml/releases/tag/v1.5.0) [Compare Source](https://redirect.github.com/BurntSushi/toml/compare/v1.4.0...v1.5.0) Mostly some small bugfixes, with a few small new features: - Add Position.Col, to mark the column an error occurred ([#&#8203;410](https://redirect.github.com/BurntSushi/toml/issues/410)) - Print more detailed errors in the `tomlv` CLI. - Ensure ParseError.Message is always set ([#&#8203;411](https://redirect.github.com/BurntSushi/toml/issues/411)) - Allow custom string types as map keys ([#&#8203;414](https://redirect.github.com/BurntSushi/toml/issues/414)) - Mark meta keys as decoded when using Unmarshaler interface ([#&#8203;426](https://redirect.github.com/BurntSushi/toml/issues/426)) - Fix encoding when nested inline table ends with map ([#&#8203;438](https://redirect.github.com/BurntSushi/toml/issues/438)) - Fix encoding of several layers of embedded structs ([#&#8203;430](https://redirect.github.com/BurntSushi/toml/issues/430)) - Fix ErrorWithPosition panic when there is no newline in the TOML document ([#&#8203;433](https://redirect.github.com/BurntSushi/toml/issues/433)) ### [`v1.4.0`](https://redirect.github.com/BurntSushi/toml/releases/tag/v1.4.0) [Compare Source](https://redirect.github.com/BurntSushi/toml/compare/v1.3.2...v1.4.0) This version requires Go 1.18 - Add toml.Marshal() ([#&#8203;405](https://redirect.github.com/BurntSushi/toml/issues/405)) - Require 2-digit hour ([#&#8203;320](https://redirect.github.com/BurntSushi/toml/issues/320)) - Wrap UnmarshalTOML() and UnmarshalText() return values in ParseError for position information ([#&#8203;398](https://redirect.github.com/BurntSushi/toml/issues/398)) - Fix inline tables with dotted keys inside inline arrays (e.g. `k=[{a.b=1}]`) ([#&#8203;400](https://redirect.github.com/BurntSushi/toml/issues/400)) </details> <details> <summary>CycloneDX/cyclonedx-go (github.com/CycloneDX/cyclonedx-go)</summary> ### [`v0.9.2`](https://redirect.github.com/CycloneDX/cyclonedx-go/releases/tag/v0.9.2) [Compare Source](https://redirect.github.com/CycloneDX/cyclonedx-go/compare/v0.9.1...v0.9.2) #### Changelog ##### Features - [`39ede21`](https://redirect.github.com/CycloneDX/cyclonedx-go/commit/39ede217f126cfbc80eabf880f6643be3d392a4f): feat: add MarshalXML and UnmarshalXML ([@&#8203;DmitriyLewen](https://redirect.github.com/DmitriyLewen)) - [`e9191ed`](https://redirect.github.com/CycloneDX/cyclonedx-go/commit/e9191ed11a269fcb6b3fb54e000ed6d81b5bf9db): feat: add UnmarshalJSON ([@&#8203;DmitriyLewen](https://redirect.github.com/DmitriyLewen)) ##### Fixes - [`80fede1`](https://redirect.github.com/CycloneDX/cyclonedx-go/commit/80fede1f13a956d35eb14696cd2ca9d2d943f809): fix: add json tag for `Identity` ([@&#8203;DmitriyLewen](https://redirect.github.com/DmitriyLewen)) - [`24e9503`](https://redirect.github.com/CycloneDX/cyclonedx-go/commit/24e9503293f0837e6e7ea3ff670ef958e6075b87): fix: tests ([@&#8203;DmitriyLewen](https://redirect.github.com/DmitriyLewen)) - [`d68a199`](https://redirect.github.com/CycloneDX/cyclonedx-go/commit/d68a199bc1747e5d6a7d4196c2f270535bbf6e3e): fix: use `identity` as array in `valid-evidence.json` ([@&#8203;DmitriyLewen](https://redirect.github.com/DmitriyLewen)) - [`ff9cc28`](https://redirect.github.com/CycloneDX/cyclonedx-go/commit/ff9cc28f9c9554328bd6c1ad56098be5a692d5e9): fix: use componentEvidence array for Evidence.Identity field ([@&#8203;DmitriyLewen](https://redirect.github.com/DmitriyLewen)) ##### Building and Packaging - [`016ee29`](https://redirect.github.com/CycloneDX/cyclonedx-go/commit/016ee293d464d6383be3a714f7fb0debebef8ad5): build(deps): bump actions/checkout from 4.1.7 to 4.2.0 ([@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot]) - [`77153ab`](https://redirect.github.com/CycloneDX/cyclonedx-go/commit/77153ab5fe005f6484ac1e1225e7152df00db3f1): build(deps): bump actions/checkout from 4.2.0 to 4.2.1 ([@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot]) - [`4f50d02`](https://redirect.github.com/CycloneDX/cyclonedx-go/commit/4f50d02c1282ac1d0d7448502b231a0e84a1e529): build(deps): bump actions/checkout from 4.2.1 to 4.2.2 ([@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot]) - [`b844512`](https://redirect.github.com/CycloneDX/cyclonedx-go/commit/b84451219e77e0fbbe7d5ba054bcf25dbc7aaea4): build(deps): bump actions/setup-go from 5.0.2 to 5.1.0 ([@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot]) - [`238cbea`](https://redirect.github.com/CycloneDX/cyclonedx-go/commit/238cbea3479fed9fdfcbfa5f1751828390a05211): build(deps): bump actions/setup-go from 5.1.0 to 5.2.0 ([@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot]) - [`bbe8f3c`](https://redirect.github.com/CycloneDX/cyclonedx-go/commit/bbe8f3c2c7c4567514ae966c69bf93fc1b3dba2a): build(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0 ([@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot]) - [`05f8930`](https://redirect.github.com/CycloneDX/cyclonedx-go/commit/05f8930fe918a31941ebf90eec627e5e6e908d1c): build(deps): bump github.com/terminalstatic/go-xsd-validate ([@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot]) - [`082f877`](https://redirect.github.com/CycloneDX/cyclonedx-go/commit/082f87791a5e290c9d4c6e8126dc0cc987028a60): build(deps): bump gitpod/workspace-go from `2a9e01c` to `9c95281` ([@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot]) - [`093b1c1`](https://redirect.github.com/CycloneDX/cyclonedx-go/commit/093b1c15164dad5d46768db0e3f6ee43eb60ca20): build(deps): bump gitpod/workspace-go from `9c95281` to `6932342` ([@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot]) - [`47b7e01`](https://redirect.github.com/CycloneDX/cyclonedx-go/commit/47b7e01ce8f8209894065e9656217b8c00a3c8ea): build(deps): bump golangci/golangci-lint-action from 6.1.0 to 6.1.1 ([@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot]) - [`ce6eb84`](https://redirect.github.com/CycloneDX/cyclonedx-go/commit/ce6eb841cb1e21aa28efbccd9eb8fe5eea0555c9): build(deps): bump goreleaser/goreleaser-action from 6.0.0 to 6.1.0 ([@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot]) ##### Others - [`4d3aff9`](https://redirect.github.com/CycloneDX/cyclonedx-go/commit/4d3aff9fab9ae78bd6fbbc9fd0912fab14c8fb64): UPDATE_SNAPSHOTS=true make test ([@&#8203;DmitriyLewen](https://redirect.github.com/DmitriyLewen)) - [`31d9544`](https://redirect.github.com/CycloneDX/cyclonedx-go/commit/31d954443e6563aeee69d82bdfb82aee83e07df1): refactor ([@&#8203;DmitriyLewen](https://redirect.github.com/DmitriyLewen)) - [`0170729`](https://redirect.github.com/CycloneDX/cyclonedx-go/commit/0170729e313a681fc8659643601410ae10ffe803): refactor: update convert package ([@&#8203;DmitriyLewen](https://redirect.github.com/DmitriyLewen)) ### [`v0.9.1`](https://redirect.github.com/CycloneDX/cyclonedx-go/releases/tag/v0.9.1) [Compare Source](https://redirect.github.com/CycloneDX/cyclonedx-go/compare/v0.9.0...v0.9.1) #### Changelog ##### Fixes - [`6f0e0cf`](https://redirect.github.com/CycloneDX/cyclonedx-go/commit/6f0e0cf025dd99ab903e33f8e043d92b28dab4f6): fix: `nil` pointer dereference during evidence conversion ([@&#8203;nscuro](https://redirect.github.com/nscuro)) - [`ce43b6f`](https://redirect.github.com/CycloneDX/cyclonedx-go/commit/ce43b6f4cb5707d3ef2db1af1d597f5b23bf0e15): fix: make linter happy ([@&#8203;nscuro](https://redirect.github.com/nscuro)) - [`5d799e6`](https://redirect.github.com/CycloneDX/cyclonedx-go/commit/5d799e634b9bed9c86621048544737b210e433e8): fix: remove deprecated goreleaser flag ([@&#8203;nscuro](https://redirect.github.com/nscuro)) ##### Building and Packaging - [`6d5bcb0`](https://redirect.github.com/CycloneDX/cyclonedx-go/commit/6d5bcb0e277207551dbc728eb29959f1d3cbd685): build(deps): bump actions/checkout from 4.1.6 to 4.1.7 ([@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot]) - [`f34fc0c`](https://redirect.github.com/CycloneDX/cyclonedx-go/commit/f34fc0c413da74d20d1cc240863aaf2eb6b274f7): build(deps): bump actions/setup-go from 5.0.1 to 5.0.2 ([@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot]) - [`71cff22`](https://redirect.github.com/CycloneDX/cyclonedx-go/commit/71cff221b8dbbc1d50f839fa76ecea4e42d83a2b): build(deps): bump gitpod/workspace-go from `8d15123` to `2a9e01c` ([@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot]) - [`ea69355`](https://redirect.github.com/CycloneDX/cyclonedx-go/commit/ea693550558d230b3fbba810b6e75ac2eb0b55c8): build(deps): bump golangci/golangci-lint-action from 6.0.1 to 6.1.0 ([@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot]) - [`d5cbdad`](https://redirect.github.com/CycloneDX/cyclonedx-go/commit/d5cbdad49dfbf54f2dab4ad95bd1a47c710a526c): build(deps): bump goreleaser/goreleaser-action from 5.1.0 to 6.0.0 ([@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot]) </details> <details> <summary>docker/docker (github.com/docker/docker)</summary> ### [`v28.1.1+incompatible`](https://redirect.github.com/docker/docker/compare/v28.1.0...v28.1.1) [Compare Source](https://redirect.github.com/docker/docker/compare/v28.1.0...v28.1.1) ### [`v28.1.0+incompatible`](https://redirect.github.com/docker/docker/compare/v28.0.4...v28.1.0) [Compare Source](https://redirect.github.com/docker/docker/compare/v28.0.4...v28.1.0) </details> <details> <summary>go-git/go-git (github.com/go-git/go-git/v5)</summary> ### [`v5.16.0`](https://redirect.github.com/go-git/go-git/releases/tag/v5.16.0) [Compare Source](https://redirect.github.com/go-git/go-git/compare/v5.15.0...v5.16.0) #### What's Changed - \[v5] plumbing: support mTLS for HTTPS protocol by [@&#8203;hiddeco](https://redirect.github.com/hiddeco) in [https://github.com/go-git/go-git/pull/1510](https://redirect.github.com/go-git/go-git/pull/1510) - v5: plumbing: transport, Reintroduce SetHostKeyCallback. Fix [#&#8203;1514](https://redirect.github.com/go-git/go-git/issues/1514) by [@&#8203;pjbgf](https://redirect.github.com/pjbgf) in [https://github.com/go-git/go-git/pull/1515](https://redirect.github.com/go-git/go-git/pull/1515) **Full Changelog**: https://github.com/go-git/go-git/compare/v5.15.0...v5.16.0 ### [`v5.15.0`](https://redirect.github.com/go-git/go-git/releases/tag/v5.15.0) [Compare Source](https://redirect.github.com/go-git/go-git/compare/v5.14.0...v5.15.0) #### What's Changed - plumbing: add cert auth support to `releases/v5.x` by [@&#8203;Javier-varez](https://redirect.github.com/Javier-varez) in [https://github.com/go-git/go-git/pull/1482](https://redirect.github.com/go-git/go-git/pull/1482) - v5: Bump dependencies by [@&#8203;pjbgf](https://redirect.github.com/pjbgf) in [https://github.com/go-git/go-git/pull/1505](https://redirect.github.com/go-git/go-git/pull/1505) **Full Changelog**: https://github.com/go-git/go-git/compare/v5.14.0...v5.15.0 </details> <details> <summary>google/go-containerregistry (github.com/google/go-containerregistry)</summary> ### [`v0.20.4`](https://redirect.github.com/google/go-containerregistry/releases/tag/v0.20.4) [Compare Source](https://redirect.github.com/google/go-containerregistry/compare/v0.20.3...v0.20.4) #### What's Changed - build(deps): bump docker/docker to v28.0.0+incompatible by [@&#8203;luhring](https://redirect.github.com/luhring) in [https://github.com/google/go-containerregistry/pull/2071](https://redirect.github.com/google/go-containerregistry/pull/2071) - Migrate linter to v2 by [@&#8203;Subserial](https://redirect.github.com/Subserial) in [https://github.com/google/go-containerregistry/pull/2096](https://redirect.github.com/google/go-containerregistry/pull/2096) - bump go version + bump deps by [@&#8203;Subserial](https://redirect.github.com/Subserial) in [https://github.com/google/go-containerregistry/pull/2093](https://redirect.github.com/google/go-containerregistry/pull/2093) - implement TextMarshaler/JSONMarshaler more consistently by [@&#8203;imjasonh](https://redirect.github.com/imjasonh) in [https://github.com/google/go-containerregistry/pull/2097](https://redirect.github.com/google/go-containerregistry/pull/2097) - Update CodeQL permissions by [@&#8203;Subserial](https://redirect.github.com/Subserial) in [https://github.com/google/go-containerregistry/pull/2103](https://redirect.github.com/google/go-containerregistry/pull/2103) - Update goreleaser permissions by [@&#8203;Subserial](https://redirect.github.com/Subserial) in [https://github.com/google/go-containerregistry/pull/2104](https://redirect.github.com/google/go-containerregistry/pull/2104) - Update provenance action in release by [@&#8203;Subserial](https://redirect.github.com/Subserial) in [https://github.com/google/go-containerregistry/pull/2105](https://redirect.github.com/google/go-containerregistry/pull/2105) - Update validator action by [@&#8203;Subserial](https://redirect.github.com/Subserial) in [https://github.com/google/go-containerregistry/pull/2106](https://redirect.github.com/google/go-containerregistry/pull/2106) #### New Contributors - [@&#8203;luhring](https://redirect.github.com/luhring) made their first contribution in [https://github.com/google/go-containerregistry/pull/2071](https://redirect.github.com/google/go-containerregistry/pull/2071) - [@&#8203;Subserial](https://redirect.github.com/Subserial) made their first contribution in [https://github.com/google/go-containerregistry/pull/2096](https://redirect.github.com/google/go-containerregistry/pull/2096) **Full Changelog**: https://github.com/google/go-containerregistry/compare/v0.20.3...v0.20.4 ### [`v0.20.3`](https://redirect.github.com/google/go-containerregistry/releases/tag/v0.20.3) [Compare Source](https://redirect.github.com/google/go-containerregistry/compare/v0.20.2...v0.20.3) #### What's Changed - remote/transport: Make bearer transport go-routine-safe by [@&#8203;2opremio](https://redirect.github.com/2opremio) in [https://github.com/google/go-containerregistry/pull/1806](https://redirect.github.com/google/go-containerregistry/pull/1806) - Expose compare package by [@&#8203;jonjohnsonjr](https://redirect.github.com/jonjohnsonjr) in [https://github.com/google/go-containerregistry/pull/2001](https://redirect.github.com/google/go-containerregistry/pull/2001) - fix: redact.URL uses (\*URL).Redacted to omit basic-auth password by [@&#8203;bmoylan](https://redirect.github.com/bmoylan) in [https://github.com/google/go-containerregistry/pull/1947](https://redirect.github.com/google/go-containerregistry/pull/1947) - bump actions to latest by [@&#8203;ajayk](https://redirect.github.com/ajayk) in [https://github.com/google/go-containerregistry/pull/2011](https://redirect.github.com/google/go-containerregistry/pull/2011) - don't pin chainguard-dev/actions by [@&#8203;imjasonh](https://redirect.github.com/imjasonh) in [https://github.com/google/go-containerregistry/pull/2025](https://redirect.github.com/google/go-containerregistry/pull/2025) - Check for 406 status code when handling referrers API endpoint response by [@&#8203;malancas](https://redirect.github.com/malancas) in [https://github.com/google/go-containerregistry/pull/2026](https://redirect.github.com/google/go-containerregistry/pull/2026) - mutate: Create a defensive annotations copy by [@&#8203;jonjohnsonjr](https://redirect.github.com/jonjohnsonjr) in [https://github.com/google/go-containerregistry/pull/2030](https://redirect.github.com/google/go-containerregistry/pull/2030) - Detect zstd in crane append by [@&#8203;jonjohnsonjr](https://redirect.github.com/jonjohnsonjr) in [https://github.com/google/go-containerregistry/pull/2023](https://redirect.github.com/google/go-containerregistry/pull/2023) - bump deps using hack/bump-deps.sh by [@&#8203;imjasonh](https://redirect.github.com/imjasonh) in [https://github.com/google/go-containerregistry/pull/2042](https://redirect.github.com/google/go-containerregistry/pull/2042) #### New Contributors - [@&#8203;bmoylan](https://redirect.github.com/bmoylan) made their first contribution in [https://github.com/google/go-containerregistry/pull/1947](https://redirect.github.com/google/go-containerregistry/pull/1947) - [@&#8203;ajayk](https://redirect.github.com/ajayk) made their first contribution in [https://github.com/google/go-containerregistry/pull/2011](https://redirect.github.com/google/go-containerregistry/pull/2011) - [@&#8203;malancas](https://redirect.github.com/malancas) made their first contribution in [https://github.com/google/go-containerregistry/pull/2026](https://redirect.github.com/google/go-containerregistry/pull/2026) **Full Changelog**: https://github.com/google/go-containerregistry/compare/v0.20.2...v0.20.3 ### [`v0.20.2`](https://redirect.github.com/google/go-containerregistry/releases/tag/v0.20.2) [Compare Source](https://redirect.github.com/google/go-containerregistry/compare/v0.20.1...v0.20.2) #### What's Changed - deps: bump docker dep by [@&#8203;imjasonh](https://redirect.github.com/imjasonh) in [https://github.com/google/go-containerregistry/pull/1991](https://redirect.github.com/google/go-containerregistry/pull/1991) **Full Changelog**: https://github.com/google/go-containerregistry/compare/v0.20.1...v0.20.2 ### [`v0.20.1`](https://redirect.github.com/google/go-containerregistry/releases/tag/v0.20.1) [Compare Source](https://redirect.github.com/google/go-containerregistry/compare/v0.20.0...v0.20.1) #### What's Changed - Create `remote.Push` by [@&#8203;mattmoor](https://redirect.github.com/mattmoor) in [https://github.com/google/go-containerregistry/pull/1978](https://redirect.github.com/google/go-containerregistry/pull/1978) **Full Changelog**: https://github.com/google/go-containerregistry/compare/v0.20.0...v0.20.1 ### [`v0.20.0`](https://redirect.github.com/google/go-containerregistry/releases/tag/v0.20.0) [Compare Source](https://redirect.github.com/google/go-containerregistry/compare/v0.19.2...v0.20.0) #### What's Changed - Referrer API must return correct Content-Type by [@&#8203;GregoireW](https://redirect.github.com/GregoireW) in [https://github.com/google/go-containerregistry/pull/1968](https://redirect.github.com/google/go-containerregistry/pull/1968) - 🚨 POTENTIALLY BREAKING: Restore blind-write to remote.Put by [@&#8203;jonjohnsonjr](https://redirect.github.com/jonjohnsonjr) in [https://github.com/google/go-containerregistry/pull/1970](https://redirect.github.com/google/go-containerregistry/pull/1970) #### New Contributors - [@&#8203;GregoireW](https://redirect.github.com/GregoireW) made their first contribution in [https://github.com/google/go-containerregistry/pull/1968](https://redirect.github.com/google/go-containerregistry/pull/1968) **Full Changelog**: https://github.com/google/go-containerregistry/compare/v0.19.2...v0.20.0 ### [`v0.19.2`](https://redirect.github.com/google/go-containerregistry/releases/tag/v0.19.2) [Compare Source](https://redirect.github.com/google/go-containerregistry/compare/v0.19.1...v0.19.2) #### What's Changed - Add JSON marshalling funcs for Digest. by [@&#8203;wlynch](https://redirect.github.com/wlynch) in [https://github.com/google/go-containerregistry/pull/1915](https://redirect.github.com/google/go-containerregistry/pull/1915) - registry: Implement Range requests for blobs by [@&#8203;jonjohnsonjr](https://redirect.github.com/jonjohnsonjr) in [https://github.com/google/go-containerregistry/pull/1917](https://redirect.github.com/google/go-containerregistry/pull/1917) - Support podman auth file REGISTRY_AUTH_FILE. by [@&#8203;zhaoyonghe](https://redirect.github.com/zhaoyonghe) in [https://github.com/google/go-containerregistry/pull/1914](https://redirect.github.com/google/go-containerregistry/pull/1914) - feat: crane mutate platform by [@&#8203;joshwlewis](https://redirect.github.com/joshwlewis) in [https://github.com/google/go-containerregistry/pull/1919](https://redirect.github.com/google/go-containerregistry/pull/1919) - Add Context support to auth methods by [@&#8203;jonjohnsonjr](https://redirect.github.com/jonjohnsonjr) in [https://github.com/google/go-containerregistry/pull/1949](https://redirect.github.com/google/go-containerregistry/pull/1949) - Fix windows race condition when writing image with duplicate layers by [@&#8203;dgannon991](https://redirect.github.com/dgannon991) in [https://github.com/google/go-containerregistry/pull/1921](https://redirect.github.com/google/go-containerregistry/pull/1921) - Add -O shorthand for --omit-digest-tags to crane. by [@&#8203;smoser](https://redirect.github.com/smoser) in [https://github.com/google/go-containerregistry/pull/1958](https://redirect.github.com/google/go-containerregistry/pull/1958) #### New Contributors - [@&#8203;wlynch](https://redirect.github.com/wlynch) made their first contribution in [https://github.com/google/go-containerregistry/pull/1915](https://redirect.github.com/google/go-containerregistry/pull/1915) - [@&#8203;zhaoyonghe](https://redirect.github.com/zhaoyonghe) made their first contribution in [https://github.com/google/go-containerregistry/pull/1914](https://redirect.github.com/google/go-containerregistry/pull/1914) - [@&#8203;joshwlewis](https://redirect.github.com/joshwlewis) made their first contribution in [https://github.com/google/go-containerregistry/pull/1919](https://redirect.github.com/google/go-containerregistry/pull/1919) - [@&#8203;dgannon991](https://redirect.github.com/dgannon991) made their first contribution in [https://github.com/google/go-containerregistry/pull/1921](https://redirect.github.com/google/go-containerregistry/pull/1921) - [@&#8203;smoser](https://redirect.github.com/smoser) made their first contribution in [https://github.com/google/go-containerregistry/pull/1958](https://redirect.github.com/google/go-containerregistry/pull/1958) **Full Changelog**: https://github.com/google/go-containerregistry/compare/v0.19.1...v0.19.2 </details> <details> <summary>opencontainers/image-spec (github.com/opencontainers/image-spec)</summary> ### [`v1.1.1`](https://redirect.github.com/opencontainers/image-spec/releases/tag/v1.1.1) [Compare Source](https://redirect.github.com/opencontainers/image-spec/compare/v1.1.0...v1.1.1) Vote Passed `[+5 -0 nv1]` - https://groups.google.com/a/opencontainers.org/g/dev/c/T-olx0jdT18 **Release PR** : [https://github.com/opencontainers/image-spec/pull/1247](https://redirect.github.com/opencontainers/image-spec/pull/1247) **Full Changelog**: https://github.com/opencontainers/image-spec/compare/v1.1.0...v1.1.1 </details> <details> <summary>opencontainers/runtime-spec (github.com/opencontainers/runtime-spec)</summary> ### [`v1.2.1`](https://redirect.github.com/opencontainers/runtime-spec/releases/tag/v1.2.1) [Compare Source](https://redirect.github.com/opencontainers/runtime-spec/compare/v1.2.0...v1.2.1) This is the first patch release of the v1.2.z series of the Open Container Initative Runtime Specification. It primarily includes a series of minor fixes as well as new support for the specification of the CPU affinity of container processes. ##### Additions - zos updates ([#&#8203;1273](https://redirect.github.com/opencontainers/runtime-spec/issues/1273)) - Add support for windows CPU affinity ([#&#8203;1258](https://redirect.github.com/opencontainers/runtime-spec/issues/1258)) - specs-go: sync SCMP_ARCH_\* constants with libseccomp main ([#&#8203;1229](https://redirect.github.com/opencontainers/runtime-spec/issues/1229)) - Add CPU affinity to executed processes ([#&#8203;1253](https://redirect.github.com/opencontainers/runtime-spec/issues/1253), [#&#8203;1261](https://redirect.github.com/opencontainers/runtime-spec/issues/1261)) - config-linux: describe the format of cpus and mems ([#&#8203;1253](https://redirect.github.com/opencontainers/runtime-spec/issues/1253)) ##### Minor fixes - Fix description of errnoRet in Seccomp ([#&#8203;1277](https://redirect.github.com/opencontainers/runtime-spec/issues/1277)) - config-linux: update for libseccomp v2.6.0 ([#&#8203;1276](https://redirect.github.com/opencontainers/runtime-spec/issues/1276)) - Correct `prestart` hook description in summary ([#&#8203;1275](https://redirect.github.com/opencontainers/runtime-spec/issues/1275)) ##### Documentation, CI & Governance - ci: Add a github actions workflow for lint ([#&#8203;1257](https://redirect.github.com/opencontainers/runtime-spec/issues/1257)) - update http links to https ([#&#8203;1269](https://redirect.github.com/opencontainers/runtime-spec/issues/1269)) - doc: fix the invalid hyperlink naming-a-volume ([#&#8203;1268](https://redirect.github.com/opencontainers/runtime-spec/issues/1268)) - ci: remove redundunt actions ([#&#8203;1256](https://redirect.github.com/opencontainers/runtime-spec/issues/1256)) - chore: format JSON file `make -C schema fmt` ([#&#8203;1255](https://redirect.github.com/opencontainers/runtime-spec/issues/1255)) - CODEOWNERS: remove vbatts ([#&#8203;1248](https://redirect.github.com/opencontainers/runtime-spec/issues/1248)) - MAINTAINERS: move vbatts to EMERITUS ([#&#8203;1248](https://redirect.github.com/opencontainers/runtime-spec/issues/1248)) - Update golangci-lint to v1.56.1 in CI ([#&#8203;1245](https://redirect.github.com/opencontainers/runtime-spec/issues/1245)) - Add Go v1.21 and v1.22 to GitHub Actions CI matrix ([#&#8203;1245](https://redirect.github.com/opencontainers/runtime-spec/issues/1245)) - Update GitHub Actions packages to resolve warnings in CI ([#&#8203;1244](https://redirect.github.com/opencontainers/runtime-spec/issues/1244)) Thanks to the following contributors for making this release possible: - Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp> - Austin Vazquez <macedonv@amazon.com> - Kaita Nakamura <kaita.nakamura0830@&#8203;gmail.com> - Kershaw Mehta <kershaw@us.ibm.com> - Kijima Daigo <norimaking777@&#8203;gmail.com> - Kir Kolyshkin <kolyshkin@gmail.com> - Kirtana Ashok <kiashok@microsoft.com> - Lei Wang <ssst0n3@&#8203;gmail.com> - Neil Johnson <najohnsn@us.ibm.com> - Patrickuuuu <hank93513@&#8203;gmail.com> - Sebastiaan van Stijn <github@gone.nl> - Tianon Gravi <admwiggin@gmail.com> - Toru Komatsu <k0ma@utam0k.jp> - Vincent Batts <vbatts@hashbangbash.com> Vote-Results: +8 -0 \*3 ([#&#8203;1278](https://redirect.github.com/opencontainers/runtime-spec/issues/1278)) Signed-off-by: Aleksa Sarai <cyphar@cyphar.com> ### [`v1.2.0`](https://redirect.github.com/opencontainers/runtime-spec/releases/tag/v1.2.0) [Compare Source](https://redirect.github.com/opencontainers/runtime-spec/compare/v1.1.0...v1.2.0) Votes: [#&#8203;1242](https://redirect.github.com/opencontainers/runtime-spec/issues/1242) ##### Additions - config: add idmap and ridmap mount options ([#&#8203;1222](https://redirect.github.com/opencontainers/runtime-spec/issues/1222)) - config.md: allow empty mappings for \[r]idmap ([#&#8203;1224](https://redirect.github.com/opencontainers/runtime-spec/issues/1224)) - features-linux: Expose idmap information ([#&#8203;1219](https://redirect.github.com/opencontainers/runtime-spec/issues/1219)) - mount: Allow relative mount destinations on Linux ([#&#8203;1225](https://redirect.github.com/opencontainers/runtime-spec/issues/1225)) - features: add potentiallyUnsafeConfigAnnotations ([#&#8203;1205](https://redirect.github.com/opencontainers/runtime-spec/issues/1205)) - config: add support for org.opencontainers.image annotations [#&#8203;1197](https://redirect.github.com/opencontainers/runtime-spec/issues/1197) ##### Minor fixes: - config: improve bind mount and propagation doc ([#&#8203;1228](https://redirect.github.com/opencontainers/runtime-spec/issues/1228)) ##### Documentation, CI & Governance: - fix link to hooks in features ([#&#8203;1226](https://redirect.github.com/opencontainers/runtime-spec/issues/1226)) - specs-go: add missing deprecation comment for Hooks.Prestart ([#&#8203;1232](https://redirect.github.com/opencontainers/runtime-spec/issues/1232)) - specs-go: mark LinuxMemory.Kernel as deprecated ()[#&#8203;1233](https://redirect.github.com/opencontainers/runtime-spec/issues/1233)) </details> <details> <summary>package-url/packageurl-go (github.com/package-url/packageurl-go)</summary> ### [`v0.1.3`](https://redirect.github.com/package-url/packageurl-go/releases/tag/v0.1.3) [Compare Source](https://redirect.github.com/package-url/packageurl-go/compare/v0.1.2...v0.1.3) #### What's Changed - go.mod: Bump required Go version to 1.18 by [@&#8203;magnusbaeck](https://redirect.github.com/magnusbaeck) in [https://github.com/package-url/packageurl-go/pull/66](https://redirect.github.com/package-url/packageurl-go/pull/66) - Fix Github Actions by [@&#8203;shibumi](https://redirect.github.com/shibumi) in [https://github.com/package-url/packageurl-go/pull/69](https://redirect.github.com/package-url/packageurl-go/pull/69) - Adds `./` and `../` as valid subpath prefix by [@&#8203;ridhoq](https://redirect.github.com/ridhoq) in [https://github.com/package-url/packageurl-go/pull/68](https://redirect.github.com/package-url/packageurl-go/pull/68) #### New Contributors - [@&#8203;magnusbaeck](https://redirect.github.com/magnusbaeck) made their first contribution in [https://github.com/package-url/packageurl-go/pull/66](https://redirect.github.com/package-url/packageurl-go/pull/66) - [@&#8203;ridhoq](https://redirect.github.com/ridhoq) made their first contribution in [https://github.com/package-url/packageurl-go/pull/68](https://redirect.github.com/package-url/packageurl-go/pull/68) **Full Changelog**: https://github.com/package-url/packageurl-go/compare/v0.1.2...v0.1.3 </details> <details> <summary>spdx/tools-golang (github.com/spdx/tools-golang)</summary> ### [`v0.5.5`](https://redirect.github.com/spdx/tools-golang/releases/tag/v0.5.5) [Compare Source](https://redirect.github.com/spdx/tools-golang/compare/v0.5.4...v0.5.5) #### What's Changed - fix: properly normalize Windows paths, add windows test runner by [@&#8203;kzantow](https://redirect.github.com/kzantow) in [https://github.com/spdx/tools-golang/pull/242](https://redirect.github.com/spdx/tools-golang/pull/242) - fix: panic if JSON relationship array contains null by [@&#8203;kzantow](https://redirect.github.com/kzantow) in [https://github.com/spdx/tools-golang/pull/239](https://redirect.github.com/spdx/tools-golang/pull/239) - chore: provide a clearer error when using an invalid Originator by [@&#8203;LaurentGoderre](https://redirect.github.com/LaurentGoderre) in [https://github.com/spdx/tools-golang/pull/246](https://redirect.github.com/spdx/tools-golang/pull/246) #### New Contributors - [@&#8203;LaurentGoderre](https://redirect.github.com/LaurentGoderre) made their first contribution in [https://github.com/spdx/tools-golang/pull/246](https://redirect.github.com/spdx/tools-golang/pull/246) **Full Changelog**: https://github.com/spdx/tools-golang/compare/v0.5.4...v0.5.5 ### [`v0.5.4`](https://redirect.github.com/spdx/tools-golang/releases/tag/v0.5.4) [Compare Source](https://redirect.github.com/spdx/tools-golang/compare/v0.5.3...v0.5.4) #### What's Changed - Stop escaping HTML by [@&#8203;kzantow](https://redirect.github.com/kzantow) in [https://github.com/spdx/tools-golang/pull/224](https://redirect.github.com/spdx/tools-golang/pull/224) - Don't create empty `ExcludedFiles` array by [@&#8203;DmitriyLewen](https://redirect.github.com/DmitriyLewen) in [https://github.com/spdx/tools-golang/pull/230](https://redirect.github.com/spdx/tools-golang/pull/230) - Add external reference category `OTHER` by [@&#8203;mcombuechen](https://redirect.github.com/mcombuechen) in [https://github.com/spdx/tools-golang/pull/229](https://redirect.github.com/spdx/tools-golang/pull/229) - Remove empty packageVerificationCode in 2.2 JSON by [@&#8203;kzantow](https://redirect.github.com/kzantow) in [https://github.com/spdx/tools-golang/pull/223](https://redirect.github.com/spdx/tools-golang/pull/223) #### New Contributors - [@&#8203;mcombuechen](https://redirect.github.com/mcombuechen) made their first contribution in [https://github.com/spdx/tools-golang/pull/229](https://redirect.github.com/spdx/tools-golang/pull/229) **Full Changelog**: https://github.com/spdx/tools-golang/compare/v0.5.3...v0.5.4 </details> <details> <summary>etcd-io/bbolt (go.etcd.io/bbolt)</summary> ### [`v1.4.0`](https://redirect.github.com/etcd-io/bbolt/releases/tag/v1.4.0) [Compare Source](https://redirect.github.com/etcd-io/bbolt/compare/v1.3.11...v1.4.0) See the [CHANGELOG/v1.4.0](https://redirect.github.com/etcd-io/bbolt/blob/main/CHANGELOG/CHANGELOG-1.4.md#v1402025-02-05) for more details. ### [`v1.3.11`](https://redirect.github.com/etcd-io/bbolt/releases/tag/v1.3.11) [Compare Source](https://redirect.github.com/etcd-io/bbolt/compare/v1.3.10...v1.3.11) See the [CHANGELOG/v1.3.11](https://redirect.github.com/etcd-io/bbolt/blob/main/CHANGELOG/CHANGELOG-1.3.md#v13112024-08-21) for more details. </details> <details> <summary>grpc/grpc-go (google.golang.org/grpc)</summary> ### [`v1.72.1`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.72.1): Release 1.72.1 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.72.0...v1.72.1) ### Bug Fixes - client: HTTP Proxy connections are no longer attempted for addresses with non-TCP network types. ([#&#8203;8215](https://redirect.github.com/grpc/grpc-go/issues/8215)) - client: Fix bug that causes RPCs to fail with status INTERNAL instead of CANCELLED or DEADLINE_EXCEEDED when receiving a RST_STREAM frame in the middle of the gRPC message. ([#&#8203;8289](https://redirect.github.com/grpc/grpc-go/issues/8289)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 6am on monday" in timezone Australia/Sydney, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/google/osv-scalibr). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC4xNi4wIiwidXBkYXRlZEluVmVyIjoiNDAuMTYuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIl19--> Closes #775 COPYBARA_INTEGRATE_REVIEW=https://github.com/google/osv-scalibr/pull/775 from renovate-bot:renovate/osv-scalibr-minor e41fd93ddb2eabe8715f72960e861df30c377205 PiperOrigin-RevId: 762219739
1 parent 41af3c7 commit a349e50

File tree

2 files changed

+136
-130
lines changed

2 files changed

+136
-130
lines changed

go.mod

Lines changed: 41 additions & 40 deletions
Original file line numberDiff line numberDiff line change
@@ -3,56 +3,56 @@ module github.com/google/osv-scalibr
33
go 1.24.0
44

55
require (
6-
deps.dev/api/v3 v3.0.0-20250307021655-d811e36f9cad
6+
deps.dev/api/v3 v3.0.0-20250429014815-ac0aa6a085fa
77
deps.dev/api/v3alpha v0.0.0-20250429014815-ac0aa6a085fa
8-
deps.dev/util/maven v0.0.0-20250307021655-d811e36f9cad
9-
deps.dev/util/pypi v0.0.0-20250307021655-d811e36f9cad
10-
deps.dev/util/resolve v0.0.0-20250310223405-f4cf91c9e684
11-
deps.dev/util/semver v0.0.0-20250307021655-d811e36f9cad
12-
github.com/BurntSushi/toml v1.3.2
13-
github.com/CycloneDX/cyclonedx-go v0.9.0
8+
deps.dev/util/maven v0.0.0-20250429014815-ac0aa6a085fa
9+
deps.dev/util/pypi v0.0.0-20250429014815-ac0aa6a085fa
10+
deps.dev/util/resolve v0.0.0-20250429014815-ac0aa6a085fa
11+
deps.dev/util/semver v0.0.0-20250429014815-ac0aa6a085fa
12+
github.com/BurntSushi/toml v1.5.0
13+
github.com/CycloneDX/cyclonedx-go v0.9.2
1414
github.com/GehirnInc/crypt v0.0.0-20230320061759-8cc1b52080c5
1515
github.com/containerd/containerd v1.7.27
16-
github.com/containerd/containerd/api v1.8.0
16+
github.com/containerd/containerd/api v1.9.0
1717
github.com/deitch/magic v0.0.0-20240306090643-c67ab88f10cb
18-
github.com/docker/docker v28.0.4+incompatible
19-
github.com/erikvarga/go-rpmdb v0.0.0-20240208180226-b97e041ef9af
20-
github.com/go-git/go-git/v5 v5.14.0
18+
github.com/docker/docker v28.1.1+incompatible
19+
github.com/erikvarga/go-rpmdb v0.0.0-20250128120918-017833ef22e5
20+
github.com/go-git/go-git/v5 v5.16.0
2121
github.com/gobwas/glob v0.2.3
2222
github.com/gohugoio/hashstructure v0.5.0
2323
github.com/google/go-cmp v0.7.0
24-
github.com/google/go-containerregistry v0.19.1
24+
github.com/google/go-containerregistry v0.20.4
2525
github.com/google/go-cpy v0.0.0-20211218193943-a9c933c06932
2626
github.com/google/uuid v1.6.0
2727
github.com/mattn/go-sqlite3 v1.14.28
28-
github.com/michaelkedar/xml v0.0.0-20250310223042-5d14c9302b17
28+
github.com/michaelkedar/xml v0.0.0-20250501021638-021a7b1a061e
2929
github.com/micromdm/plist v0.2.1
3030
github.com/mohae/deepcopy v0.0.0-20170929034955-c48cc78d4826
3131
github.com/opencontainers/go-digest v1.0.0
32-
github.com/opencontainers/image-spec v1.1.0
33-
github.com/opencontainers/runtime-spec v1.1.0
34-
github.com/ossf/osv-schema/bindings/go v0.0.0-20250210065807-ab8a4f6e6389
35-
github.com/package-url/packageurl-go v0.1.2
32+
github.com/opencontainers/image-spec v1.1.1
33+
github.com/opencontainers/runtime-spec v1.2.1
34+
github.com/ossf/osv-schema/bindings/go v0.0.0-20250521053223-66427d119b39
35+
github.com/package-url/packageurl-go v0.1.3
3636
github.com/pandatix/go-cvss v0.6.2
3737
github.com/rust-secure-code/go-rustaudit v0.0.0-20250226111315-e20ec32e963c
3838
github.com/saferwall/pe v1.5.6
39-
github.com/spdx/tools-golang v0.5.3
39+
github.com/spdx/tools-golang v0.5.5
4040
github.com/tidwall/gjson v1.18.0
4141
github.com/tidwall/jsonc v0.3.2
4242
github.com/tidwall/sjson v1.2.5
43-
go.etcd.io/bbolt v1.3.10
43+
go.etcd.io/bbolt v1.4.0
4444
go.uber.org/multierr v1.11.0
45-
golang.org/x/crypto v0.36.0
46-
golang.org/x/mod v0.21.0
47-
golang.org/x/net v0.38.0
48-
golang.org/x/sys v0.31.0
49-
golang.org/x/text v0.23.0
50-
golang.org/x/vuln v1.0.4
51-
google.golang.org/grpc v1.72.0
45+
golang.org/x/crypto v0.38.0
46+
golang.org/x/mod v0.24.0
47+
golang.org/x/net v0.40.0
48+
golang.org/x/sys v0.33.0
49+
golang.org/x/text v0.25.0
50+
golang.org/x/vuln v1.1.4
51+
google.golang.org/grpc v1.72.1
5252
google.golang.org/protobuf v1.36.6
5353
gopkg.in/ini.v1 v1.67.0
5454
gopkg.in/yaml.v3 v3.0.1
55-
www.velocidex.com/golang/regparser v0.0.0-20240404115756-2169ac0e3c09
55+
www.velocidex.com/golang/regparser v0.0.0-20250203141505-31e704a67ef7
5656
)
5757

5858
require (
@@ -68,27 +68,27 @@ require (
6868
github.com/containerd/fifo v1.1.0 // indirect
6969
github.com/containerd/log v0.1.0 // indirect
7070
github.com/containerd/platforms v0.2.1 // indirect
71-
github.com/containerd/stargz-snapshotter/estargz v0.15.1 // indirect
71+
github.com/containerd/stargz-snapshotter/estargz v0.16.3 // indirect
7272
github.com/containerd/ttrpc v1.2.7 // indirect
7373
github.com/containerd/typeurl/v2 v2.1.1 // indirect
7474
github.com/davecgh/go-spew v1.1.1 // indirect
7575
github.com/distribution/reference v0.6.0 // indirect
76-
github.com/docker/cli v25.0.3+incompatible // indirect
76+
github.com/docker/cli v28.1.1+incompatible // indirect
7777
github.com/docker/distribution v2.8.3+incompatible // indirect
78-
github.com/docker/docker-credential-helpers v0.8.1 // indirect
79-
github.com/docker/go-connections v0.4.0 // indirect
78+
github.com/docker/docker-credential-helpers v0.9.3 // indirect
79+
github.com/docker/go-connections v0.5.0 // indirect
8080
github.com/docker/go-events v0.0.0-20190806004212-e31b211e4f1c // indirect
8181
github.com/docker/go-units v0.5.0 // indirect
8282
github.com/edsrzf/mmap-go v1.1.0 // indirect
83-
github.com/felixge/httpsnoop v1.0.3 // indirect
83+
github.com/felixge/httpsnoop v1.0.4 // indirect
8484
github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect
8585
github.com/go-git/go-billy/v5 v5.6.2 // indirect
8686
github.com/go-logr/logr v1.4.2 // indirect
8787
github.com/go-logr/stdr v1.2.2 // indirect
8888
github.com/gogo/protobuf v1.3.2 // indirect
8989
github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 // indirect
9090
github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect
91-
github.com/klauspost/compress v1.17.7 // indirect
91+
github.com/klauspost/compress v1.18.0 // indirect
9292
github.com/mattn/go-isatty v0.0.20 // indirect
9393
github.com/mitchellh/go-homedir v1.1.0 // indirect
9494
github.com/moby/docker-image-spec v1.3.1 // indirect
@@ -105,15 +105,16 @@ require (
105105
github.com/spdx/gordf v0.0.0-20221230105357-b735bd5aac89 // indirect
106106
github.com/tidwall/match v1.1.1 // indirect
107107
github.com/tidwall/pretty v1.2.0 // indirect
108-
github.com/vbatts/tar-split v0.11.5 // indirect
108+
github.com/vbatts/tar-split v0.12.1 // indirect
109109
go.opencensus.io v0.24.0 // indirect
110110
go.opentelemetry.io/auto/sdk v1.1.0 // indirect
111-
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.45.0 // indirect
112-
go.opentelemetry.io/otel v1.34.0 // indirect
113-
go.opentelemetry.io/otel/metric v1.34.0 // indirect
114-
go.opentelemetry.io/otel/trace v1.34.0 // indirect
115-
golang.org/x/sync v0.12.0 // indirect
116-
golang.org/x/tools v0.26.0 // indirect
111+
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.60.0 // indirect
112+
go.opentelemetry.io/otel v1.35.0 // indirect
113+
go.opentelemetry.io/otel/metric v1.35.0 // indirect
114+
go.opentelemetry.io/otel/trace v1.35.0 // indirect
115+
golang.org/x/sync v0.14.0 // indirect
116+
golang.org/x/telemetry v0.0.0-20240522233618-39ace7a40ae7 // indirect
117+
golang.org/x/tools v0.33.0 // indirect
117118
golang.org/x/xerrors v0.0.0-20231012003039-104605ab7028 // indirect
118119
google.golang.org/genproto v0.0.0-20240123012728-ef4313101c80 // indirect
119120
google.golang.org/genproto/googleapis/api v0.0.0-20250218202821-56aae31c358a // indirect

0 commit comments

Comments
 (0)