@@ -13,54 +13,61 @@ replace github.com/fluxcd/image-automation-controller/api => ./api
1313replace github.com/libgit2/git2go/v33 => github.com/fluxcd/git2go/v33 v33.0.9-flux
1414
1515require (
16- github.com/AdaLogics/go-fuzz-headers v0.0.0-20220903154154-e8044f6e4c72
16+ github.com/AdaLogics/go-fuzz-headers v0.0.0-20221007124625-37f5449ff7df
1717 github.com/Masterminds/sprig/v3 v3.2.2
18- github.com/ProtonMail/go-crypto v0.0.0-20220824120805-4b6e5c587895
18+ github.com/ProtonMail/go-crypto v0.0.0-20220930113650-c6815a8c17ad
1919 github.com/cyphar/filepath-securejoin v0.2.3
2020 github.com/fluxcd/image-automation-controller/api v0.26.0
21- github.com/fluxcd/image-reflector-controller/api v0.22.0
21+ github.com/fluxcd/image-reflector-controller/api v0.22.1
2222 github.com/fluxcd/pkg/apis/acl v0.1.0
23- github.com/fluxcd/pkg/apis/meta v0.16 .0
23+ github.com/fluxcd/pkg/apis/meta v0.17 .0
2424 github.com/fluxcd/pkg/gittestserver v0.7.0
25- github.com/fluxcd/pkg/runtime v0.19 .0
25+ github.com/fluxcd/pkg/runtime v0.22 .0
2626 github.com/fluxcd/pkg/ssh v0.6.0
27- github.com/fluxcd/source-controller v0.30 .0
28- github.com/fluxcd/source-controller/api v0.30 .0
27+ github.com/fluxcd/source-controller v0.31 .0
28+ github.com/fluxcd/source-controller/api v0.31 .0
2929 github.com/go-git/go-billy/v5 v5.3.1
3030 github.com/go-git/go-git/v5 v5.4.2
3131 github.com/go-logr/logr v1.2.3
3232 github.com/google/go-containerregistry v0.11.0
3333 github.com/libgit2/git2go/v33 v33.0.9
34- github.com/onsi/gomega v1.20.2
34+ github.com/onsi/gomega v1.22.1
3535 github.com/otiai10/copy v1.7.0
3636 github.com/spf13/pflag v1.0.5
37- golang.org/x/crypto v0.0.0-20220926161630-eccd6366d1be
38- k8s.io/api v0.25.2
39- k8s.io/apimachinery v0.25.2
40- k8s.io/client-go v0.25.2
41- k8s.io/kube-openapi v0.0.0-20220928191237-829ce0c27909
37+ golang.org/x/crypto v0.1.0
38+ k8s.io/api v0.25.3
39+ k8s.io/apimachinery v0.25.3
40+ k8s.io/client-go v0.25.3
41+ k8s.io/kube-openapi v0.0.0-20221012153701-172d655c2280
4242 sigs.k8s.io/controller-runtime v0.13.0
4343 sigs.k8s.io/kustomize/kyaml v0.13.9
4444)
4545
46+ // Fix CVE-2022-32149
47+ replace golang.org/x/text => golang.org/x/text v0.4.0
48+
4649// Fix CVE-2022-1996 (for v2, Go Modules incompatible)
4750replace github.com/emicklei/go-restful => github.com/emicklei/go-restful v2.16.0+incompatible
4851
4952require (
50- cloud.google.com/go/compute v1.7.0 // indirect
53+ cloud.google.com/go/compute v1.10.0 // indirect
54+ github.com/Azure/go-ansiterm v0.0.0-20210617225240-d185dfc1b5a1 // indirect
55+ github.com/MakeNowJust/heredoc v1.0.0 // indirect
5156 github.com/Masterminds/goutils v1.1.1 // indirect
5257 github.com/Masterminds/semver/v3 v3.1.1 // indirect
53- github.com/Microsoft/go-winio v0.5.2 // indirect
58+ github.com/Microsoft/go-winio v0.6.0 // indirect
5459 github.com/acomagu/bufpipe v1.0.3 // indirect
5560 github.com/asaskevich/govalidator v0.0.0-20210307081110-f21760c49a8d // indirect
5661 github.com/beorn7/perks v1.0.1 // indirect
5762 github.com/cespare/xxhash/v2 v2.1.2 // indirect
63+ github.com/chai2010/gettext-go v1.0.2 // indirect
5864 github.com/cloudflare/circl v1.1.0 // indirect
5965 github.com/davecgh/go-spew v1.1.1 // indirect
60- github.com/emicklei/go-restful/v3 v3.8 .0 // indirect
66+ github.com/emicklei/go-restful/v3 v3.9 .0 // indirect
6167 github.com/emirpasic/gods v1.18.1 // indirect
6268 github.com/evanphx/json-patch v5.6.0+incompatible // indirect
6369 github.com/evanphx/json-patch/v5 v5.6.0 // indirect
70+ github.com/exponent-io/jsonpath v0.0.0-20151013193312-d6023ce2651d // indirect
6471 github.com/fluxcd/gitkit v0.6.0 // indirect
6572 github.com/fluxcd/pkg/gitutil v0.2.0 // indirect
6673 github.com/fluxcd/pkg/version v0.2.0 // indirect
@@ -75,68 +82,84 @@ require (
7582 github.com/gogo/protobuf v1.3.2 // indirect
7683 github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
7784 github.com/golang/protobuf v1.5.2 // indirect
85+ github.com/google/btree v1.1.2 // indirect
7886 github.com/google/gnostic v0.6.9 // indirect
7987 github.com/google/go-cmp v0.5.9 // indirect
8088 github.com/google/gofuzz v1.2.0 // indirect
89+ github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 // indirect
8190 github.com/google/uuid v1.3.0 // indirect
91+ github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 // indirect
8292 github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
83- github.com/hashicorp/go-hclog v1.2.2 // indirect
93+ github.com/hashicorp/go-hclog v1.3.1 // indirect
8494 github.com/hashicorp/go-retryablehttp v0.7.1 // indirect
8595 github.com/huandu/xstrings v1.3.2 // indirect
8696 github.com/imdario/mergo v0.3.12 // indirect
87- github.com/inconshreveable/mousetrap v1.0.0 // indirect
97+ github.com/inconshreveable/mousetrap v1.0.1 // indirect
8898 github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect
8999 github.com/josharian/intern v1.0.0 // indirect
90100 github.com/json-iterator/go v1.1.12 // indirect
91101 github.com/kevinburke/ssh_config v1.2.0 // indirect
102+ github.com/liggitt/tabwriter v0.0.0-20181228230101-89fcab3d43de // indirect
92103 github.com/mailru/easyjson v0.7.7 // indirect
93104 github.com/matryer/is v1.4.0 // indirect
94105 github.com/matttproud/golang_protobuf_extensions v1.0.2-0.20181231171920-c182affec369 // indirect
95106 github.com/mitchellh/copystructure v1.2.0 // indirect
96107 github.com/mitchellh/go-homedir v1.1.0 // indirect
108+ github.com/mitchellh/go-wordwrap v1.0.0 // indirect
97109 github.com/mitchellh/mapstructure v1.5.0 // indirect
98110 github.com/mitchellh/reflectwalk v1.0.2 // indirect
111+ github.com/moby/spdystream v0.2.0 // indirect
112+ github.com/moby/term v0.0.0-20210619224110-3f7ff695adc6 // indirect
99113 github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
100114 github.com/modern-go/reflect2 v1.0.2 // indirect
101115 github.com/monochromegane/go-gitignore v0.0.0-20200626010858-205db1a8cc00 // indirect
102116 github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
103117 github.com/opencontainers/go-digest v1.0.0 // indirect
118+ github.com/peterbourgon/diskv v2.0.1+incompatible // indirect
104119 github.com/pkg/errors v0.9.1 // indirect
105120 github.com/prometheus/client_golang v1.13.0 // indirect
106121 github.com/prometheus/client_model v0.2.0 // indirect
107122 github.com/prometheus/common v0.37.0 // indirect
108123 github.com/prometheus/procfs v0.8.0 // indirect
109124 github.com/rogpeppe/go-internal v1.8.0 // indirect
125+ github.com/russross/blackfriday v1.6.0 // indirect
110126 github.com/sergi/go-diff v1.2.0 // indirect
111127 github.com/shopspring/decimal v1.2.0 // indirect
112128 github.com/spf13/cast v1.5.0 // indirect
113- github.com/spf13/cobra v1.5 .0 // indirect
129+ github.com/spf13/cobra v1.6 .0 // indirect
114130 github.com/stretchr/objx v0.4.0 // indirect
115131 github.com/xanzy/ssh-agent v0.3.1 // indirect
116132 github.com/xlab/treeprint v1.1.0 // indirect
133+ go.starlark.net v0.0.0-20200306205701-8dd3e2ee1dd5 // indirect
117134 go.uber.org/atomic v1.10.0 // indirect
118135 go.uber.org/goleak v1.2.0 // indirect
119136 go.uber.org/multierr v1.8.0 // indirect
120137 go.uber.org/zap v1.23.0 // indirect
121- golang.org/x/net v0.0.0-20220927171203-f486391704dc // indirect
122- golang.org/x/oauth2 v0.0.0-20220909003341-f21342109be1 // indirect
123- golang.org/x/sys v0.0.0-20220919091848-fb04ddd9f9c8 // indirect
124- golang.org/x/term v0.0.0-20220526004731-065cf7ba2467 // indirect
125- golang.org/x/text v0.3.8-0.20211004125949-5bd84dd9b33b // indirect
126- golang.org/x/time v0.0.0-20220722155302-e5dcc9cfc0b9 // indirect
138+ golang.org/x/mod v0.6.0 // indirect
139+ golang.org/x/net v0.1.0 // indirect
140+ golang.org/x/oauth2 v0.1.0 // indirect
141+ golang.org/x/sys v0.1.0 // indirect
142+ golang.org/x/term v0.1.0 // indirect
143+ golang.org/x/text v0.4.0 // indirect
144+ golang.org/x/time v0.1.0 // indirect
145+ golang.org/x/tools v0.1.12 // indirect
127146 gomodules.xyz/jsonpatch/v2 v2.2.0 // indirect
128147 google.golang.org/appengine v1.6.7 // indirect
129148 google.golang.org/protobuf v1.28.1 // indirect
130149 gopkg.in/inf.v0 v0.9.1 // indirect
131150 gopkg.in/warnings.v0 v0.1.2 // indirect
132151 gopkg.in/yaml.v2 v2.4.0 // indirect
133152 gopkg.in/yaml.v3 v3.0.1 // indirect
134- k8s.io/apiextensions-apiserver v0.25.0 // indirect
153+ gotest.tools/v3 v3.1.0 // indirect
154+ k8s.io/apiextensions-apiserver v0.25.2 // indirect
155+ k8s.io/cli-runtime v0.25.2 // indirect
135156 k8s.io/component-base v0.25.2 // indirect
136157 k8s.io/klog/v2 v2.80.1 // indirect
137- k8s.io/utils v0.0.0-20220922133306-665eaaec4324 // indirect
158+ k8s.io/kubectl v0.25.2 // indirect
159+ k8s.io/utils v0.0.0-20221012122500-cfd413dd9e85 // indirect
138160 sigs.k8s.io/cli-utils v0.33.0 // indirect
139161 sigs.k8s.io/json v0.0.0-20220713155537-f223a00ba0e2 // indirect
162+ sigs.k8s.io/kustomize/api v0.12.1 // indirect
140163 sigs.k8s.io/structured-merge-diff/v4 v4.2.3 // indirect
141164 sigs.k8s.io/yaml v1.3.0 // indirect
142165)
0 commit comments