@@ -6,7 +6,7 @@ toolchain go1.24.2
6
6
7
7
require (
8
8
github.com/google/go-containerregistry v0.20.3
9
- github.com/sigstore/cosign/v2 v2.4.3
9
+ github.com/sigstore/cosign/v2 v2.5.0
10
10
github.com/sigstore/rekor v1.3.9
11
11
github.com/sigstore/sigstore v1.9.1
12
12
github.com/sirupsen/logrus v1.9.3
@@ -35,15 +35,16 @@ require (
35
35
github.com/go-logr/logr v1.4.2 // indirect
36
36
github.com/go-logr/stdr v1.2.2 // indirect
37
37
github.com/go-openapi/analysis v0.23.0 // indirect
38
- github.com/go-openapi/errors v0.22.0 // indirect
38
+ github.com/go-openapi/errors v0.22.1 // indirect
39
39
github.com/go-openapi/jsonpointer v0.21.0 // indirect
40
40
github.com/go-openapi/jsonreference v0.21.0 // indirect
41
41
github.com/go-openapi/loads v0.22.0 // indirect
42
42
github.com/go-openapi/runtime v0.28.0 // indirect
43
43
github.com/go-openapi/spec v0.21.0 // indirect
44
44
github.com/go-openapi/strfmt v0.23.0 // indirect
45
- github.com/go-openapi/swag v0.23.0 // indirect
45
+ github.com/go-openapi/swag v0.23.1 // indirect
46
46
github.com/go-openapi/validate v0.24.0 // indirect
47
+ github.com/go-viper/mapstructure/v2 v2.2.1 // indirect
47
48
github.com/gogo/protobuf v1.3.2 // indirect
48
49
github.com/golang/protobuf v1.5.4 // indirect
49
50
github.com/golang/snappy v0.0.4 // indirect
@@ -55,18 +56,16 @@ require (
55
56
github.com/google/uuid v1.6.0 // indirect
56
57
github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
57
58
github.com/hashicorp/go-retryablehttp v0.7.7 // indirect
58
- github.com/hashicorp/hcl v1.0.1-vault-5 // indirect
59
59
github.com/imdario/mergo v0.3.16 // indirect
60
- github.com/in-toto/attestation v1.1.0 // indirect
60
+ github.com/in-toto/attestation v1.1.1 // indirect
61
61
github.com/in-toto/in-toto-golang v0.9.0 // indirect
62
62
github.com/inconshreveable/mousetrap v1.1.0 // indirect
63
63
github.com/jedisct1/go-minisign v0.0.0-20230811132847-661be99b8267 // indirect
64
64
github.com/josharian/intern v1.0.0 // indirect
65
65
github.com/json-iterator/go v1.1.12 // indirect
66
66
github.com/klauspost/compress v1.17.11 // indirect
67
67
github.com/letsencrypt/boulder v0.0.0-20240620165639-de9c06129bec // indirect
68
- github.com/magiconair/properties v1.8.9 // indirect
69
- github.com/mailru/easyjson v0.7.7 // indirect
68
+ github.com/mailru/easyjson v0.9.0 // indirect
70
69
github.com/miekg/pkcs11 v1.1.1 // indirect
71
70
github.com/mitchellh/go-homedir v1.1.0 // indirect
72
71
github.com/mitchellh/mapstructure v1.5.1-0.20231216201459-8508981c8b6c // indirect
@@ -80,57 +79,55 @@ require (
80
79
github.com/opentracing/opentracing-go v1.2.0 // indirect
81
80
github.com/pelletier/go-toml/v2 v2.2.3 // indirect
82
81
github.com/pkg/errors v0.9.1 // indirect
83
- github.com/sagikazarmark/locafero v0.4.0 // indirect
84
- github.com/sagikazarmark/slog-shim v0.1.0 // indirect
82
+ github.com/sagikazarmark/locafero v0.7.0 // indirect
85
83
github.com/sassoftware/relic v7.2.1+incompatible // indirect
86
84
github.com/secure-systems-lab/go-securesystemslib v0.9.0 // indirect
87
85
github.com/shibumi/go-pathspec v1.3.0 // indirect
88
- github.com/sigstore/protobuf-specs v0.4.0 // indirect
89
- github.com/sigstore/sigstore-go v0.7.0 // indirect
90
- github.com/sigstore/timestamp-authority v1.2.4 // indirect
86
+ github.com/sigstore/protobuf-specs v0.4.1 // indirect
87
+ github.com/sigstore/sigstore-go v0.7.1 // indirect
88
+ github.com/sigstore/timestamp-authority v1.2.5 // indirect
91
89
github.com/sourcegraph/conc v0.3.0 // indirect
92
- github.com/spf13/afero v1.11 .0 // indirect
93
- github.com/spf13/cast v1.7.0 // indirect
90
+ github.com/spf13/afero v1.12 .0 // indirect
91
+ github.com/spf13/cast v1.7.1 // indirect
94
92
github.com/spf13/cobra v1.9.1 // indirect
95
93
github.com/spf13/pflag v1.0.6 // indirect
96
- github.com/spf13/viper v1.19.0 // indirect
94
+ github.com/spf13/viper v1.20.1 // indirect
97
95
github.com/subosito/gotenv v1.6.0 // indirect
98
96
github.com/syndtr/goleveldb v1.0.1-0.20220721030215-126854af5e6d // indirect
99
97
github.com/thales-e-security/pool v0.0.2 // indirect
100
98
github.com/theupdateframework/go-tuf/v2 v2.0.2 // indirect
101
99
github.com/titanous/rocacheck v0.0.0-20171023193734-afe73141d399 // indirect
102
100
github.com/transparency-dev/merkle v0.0.2 // indirect
103
101
github.com/vbatts/tar-split v0.11.6 // indirect
104
- gitlab.com/gitlab-org/api/client-go v0.123 .0 // indirect
102
+ gitlab.com/gitlab-org/api/client-go v0.127 .0 // indirect
105
103
go.mongodb.org/mongo-driver v1.14.0 // indirect
106
104
go.opentelemetry.io/auto/sdk v1.1.0 // indirect
107
- go.opentelemetry.io/otel v1.34 .0 // indirect
108
- go.opentelemetry.io/otel/metric v1.34 .0 // indirect
109
- go.opentelemetry.io/otel/trace v1.34 .0 // indirect
105
+ go.opentelemetry.io/otel v1.35 .0 // indirect
106
+ go.opentelemetry.io/otel/metric v1.35 .0 // indirect
107
+ go.opentelemetry.io/otel/trace v1.35 .0 // indirect
110
108
go.uber.org/multierr v1.11.0 // indirect
111
109
go.uber.org/zap v1.27.0 // indirect
112
- golang.org/x/crypto v0.35 .0 // indirect
110
+ golang.org/x/crypto v0.37 .0 // indirect
113
111
golang.org/x/exp v0.0.0-20241108190413-2d47ceb2692f // indirect
114
- golang.org/x/mod v0.22 .0 // indirect
115
- golang.org/x/net v0.35 .0 // indirect
116
- golang.org/x/oauth2 v0.27 .0 // indirect
117
- golang.org/x/sync v0.11 .0 // indirect
118
- golang.org/x/sys v0.30 .0 // indirect
119
- golang.org/x/term v0.29 .0 // indirect
120
- golang.org/x/text v0.22 .0 // indirect
121
- golang.org/x/time v0.10 .0 // indirect
122
- google.golang.org/genproto/googleapis/api v0.0.0-20250115164207-1a7da9e5054f // indirect
123
- google.golang.org/protobuf v1.36.5 // indirect
112
+ golang.org/x/mod v0.24 .0 // indirect
113
+ golang.org/x/net v0.38 .0 // indirect
114
+ golang.org/x/oauth2 v0.29 .0 // indirect
115
+ golang.org/x/sync v0.13 .0 // indirect
116
+ golang.org/x/sys v0.32 .0 // indirect
117
+ golang.org/x/term v0.31 .0 // indirect
118
+ golang.org/x/text v0.24 .0 // indirect
119
+ golang.org/x/time v0.11 .0 // indirect
120
+ google.golang.org/genproto/googleapis/api v0.0.0-20250303144028-a0af3efb3deb // indirect
121
+ google.golang.org/protobuf v1.36.6 // indirect
124
122
gopkg.in/inf.v0 v0.9.1 // indirect
125
- gopkg.in/ini.v1 v1.67.0 // indirect
126
123
gopkg.in/yaml.v2 v2.4.0 // indirect
127
124
gopkg.in/yaml.v3 v3.0.1 // indirect
128
125
k8s.io/api v0.28.3 // indirect
129
126
k8s.io/apimachinery v0.30.1 // indirect
130
127
k8s.io/client-go v0.28.3 // indirect
131
128
k8s.io/klog/v2 v2.130.1 // indirect
132
129
k8s.io/kube-openapi v0.0.0-20240228011516-70dd3763d340 // indirect
133
- k8s.io/utils v0.0.0-20240502163921-fe8a2dddb1d0 // indirect
130
+ k8s.io/utils v0.0.0-20241210054802-24370beab758 // indirect
134
131
sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd // indirect
135
132
sigs.k8s.io/structured-merge-diff/v4 v4.4.1 // indirect
136
133
sigs.k8s.io/yaml v1.4.0 // indirect
0 commit comments