@@ -5,15 +5,16 @@ go 1.25.0
55require (
66 github.com/caarlos0/go-version v0.2.2
77 github.com/cenkalti/backoff/v5 v5.0.3
8- github.com/sigstore/sigstore-go v1.1.4
8+ github.com/sigstore/sigstore-go v1.1.5-0.20260202082308-3f2ee9eda9b2
99 github.com/spf13/cobra v1.10.2
1010 github.com/theupdateframework/go-tuf/v2 v2.3.0
1111 go.opentelemetry.io/otel v1.39.0
1212 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.39.0
1313 go.opentelemetry.io/otel/sdk v1.39.0
1414 go.opentelemetry.io/otel/trace v1.39.0
1515 go.yaml.in/yaml/v4 v4.0.0-rc.3
16- golang.org/x/term v0.37.0
16+ golang.org/x/sync v0.19.0
17+ golang.org/x/term v0.38.0
1718)
1819
1920require (
@@ -26,12 +27,12 @@ require (
2627 github.com/go-logr/logr v1.4.3 // indirect
2728 github.com/go-logr/stdr v1.2.2 // indirect
2829 github.com/go-openapi/analysis v0.24.1 // indirect
29- github.com/go-openapi/errors v0.22.4 // indirect
30- github.com/go-openapi/jsonpointer v0.22.1 // indirect
31- github.com/go-openapi/jsonreference v0.21.3 // indirect
30+ github.com/go-openapi/errors v0.22.5 // indirect
31+ github.com/go-openapi/jsonpointer v0.22.4 // indirect
32+ github.com/go-openapi/jsonreference v0.21.4 // indirect
3233 github.com/go-openapi/loads v0.23.2 // indirect
3334 github.com/go-openapi/runtime v0.29.2 // indirect
34- github.com/go-openapi/spec v0.22.1 // indirect
35+ github.com/go-openapi/spec v0.22.2 // indirect
3536 github.com/go-openapi/strfmt v0.25.0 // indirect
3637 github.com/go-openapi/swag v0.25.4 // indirect
3738 github.com/go-openapi/swag/cmdutils v0.25.4 // indirect
@@ -50,20 +51,20 @@ require (
5051 github.com/google/certificate-transparency-go v1.3.2 // indirect
5152 github.com/google/go-containerregistry v0.20.7 // indirect
5253 github.com/google/uuid v1.6.0 // indirect
53- github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3 // indirect
54+ github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.4 // indirect
5455 github.com/in-toto/attestation v1.1.2 // indirect
5556 github.com/in-toto/in-toto-golang v0.9.0 // indirect
5657 github.com/inconshreveable/mousetrap v1.1.0 // indirect
5758 github.com/oklog/ulid v1.3.1 // indirect
5859 github.com/opencontainers/go-digest v1.0.0 // indirect
5960 github.com/pkg/errors v0.9.1 // indirect
60- github.com/secure-systems-lab/go-securesystemslib v0.9.1 // indirect
61+ github.com/secure-systems-lab/go-securesystemslib v0.10.0 // indirect
6162 github.com/shibumi/go-pathspec v1.3.0 // indirect
6263 github.com/sigstore/protobuf-specs v0.5.0 // indirect
6364 github.com/sigstore/rekor v1.4.3 // indirect
64- github.com/sigstore/rekor-tiles/v2 v2.0.1 // indirect
65- github.com/sigstore/sigstore v1.10.0 // indirect
66- github.com/sigstore/timestamp-authority/v2 v2.0.3 // indirect
65+ github.com/sigstore/rekor-tiles/v2 v2.1.0 // indirect
66+ github.com/sigstore/sigstore v1.10.3 // indirect
67+ github.com/sigstore/timestamp-authority/v2 v2.0.4 // indirect
6768 github.com/spf13/pflag v1.0.10 // indirect
6869 github.com/transparency-dev/formats v0.0.0-20251017110053-404c0d5b696c // indirect
6970 github.com/transparency-dev/merkle v0.0.2 // indirect
@@ -73,14 +74,13 @@ require (
7374 go.opentelemetry.io/otel/metric v1.39.0 // indirect
7475 go.opentelemetry.io/proto/otlp v1.9.0 // indirect
7576 go.yaml.in/yaml/v3 v3.0.4 // indirect
76- golang.org/x/crypto v0.45.0 // indirect
77- golang.org/x/mod v0.30.0 // indirect
78- golang.org/x/net v0.47.0 // indirect
79- golang.org/x/sync v0.18.0 // indirect
77+ golang.org/x/crypto v0.46.0 // indirect
78+ golang.org/x/mod v0.31.0 // indirect
79+ golang.org/x/net v0.48.0 // indirect
8080 golang.org/x/sys v0.39.0 // indirect
81- golang.org/x/text v0.31 .0 // indirect
82- google.golang.org/genproto/googleapis/api v0.0.0-20251202230838-ff82c1b0f217 // indirect
83- google.golang.org/genproto/googleapis/rpc v0.0.0-20251202230838-ff82c1b0f217 // indirect
81+ golang.org/x/text v0.32 .0 // indirect
82+ google.golang.org/genproto/googleapis/api v0.0.0-20251222181119-0a764e51fe1b // indirect
83+ google.golang.org/genproto/googleapis/rpc v0.0.0-20251222181119-0a764e51fe1b // indirect
8484 google.golang.org/grpc v1.78.0 // indirect
85- google.golang.org/protobuf v1.36.10 // indirect
85+ google.golang.org/protobuf v1.36.11 // indirect
8686)
0 commit comments