@@ -6,7 +6,7 @@ toolchain go1.24.2
66
77require (
88 github.com/google/go-containerregistry v0.20.3
9- github.com/sigstore/cosign/v2 v2.4.3
9+ github.com/sigstore/cosign/v2 v2.5.0
1010 github.com/sigstore/rekor v1.3.9
1111 github.com/sigstore/sigstore v1.9.1
1212 github.com/sirupsen/logrus v1.9.3
@@ -35,15 +35,16 @@ require (
3535 github.com/go-logr/logr v1.4.2 // indirect
3636 github.com/go-logr/stdr v1.2.2 // indirect
3737 github.com/go-openapi/analysis v0.23.0 // indirect
38- github.com/go-openapi/errors v0.22.0 // indirect
38+ github.com/go-openapi/errors v0.22.1 // indirect
3939 github.com/go-openapi/jsonpointer v0.21.0 // indirect
4040 github.com/go-openapi/jsonreference v0.21.0 // indirect
4141 github.com/go-openapi/loads v0.22.0 // indirect
4242 github.com/go-openapi/runtime v0.28.0 // indirect
4343 github.com/go-openapi/spec v0.21.0 // indirect
4444 github.com/go-openapi/strfmt v0.23.0 // indirect
45- github.com/go-openapi/swag v0.23.0 // indirect
45+ github.com/go-openapi/swag v0.23.1 // indirect
4646 github.com/go-openapi/validate v0.24.0 // indirect
47+ github.com/go-viper/mapstructure/v2 v2.2.1 // indirect
4748 github.com/gogo/protobuf v1.3.2 // indirect
4849 github.com/golang/protobuf v1.5.4 // indirect
4950 github.com/golang/snappy v0.0.4 // indirect
@@ -55,18 +56,16 @@ require (
5556 github.com/google/uuid v1.6.0 // indirect
5657 github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
5758 github.com/hashicorp/go-retryablehttp v0.7.7 // indirect
58- github.com/hashicorp/hcl v1.0.1-vault-5 // indirect
5959 github.com/imdario/mergo v0.3.16 // indirect
60- github.com/in-toto/attestation v1.1.0 // indirect
60+ github.com/in-toto/attestation v1.1.1 // indirect
6161 github.com/in-toto/in-toto-golang v0.9.0 // indirect
6262 github.com/inconshreveable/mousetrap v1.1.0 // indirect
6363 github.com/jedisct1/go-minisign v0.0.0-20230811132847-661be99b8267 // indirect
6464 github.com/josharian/intern v1.0.0 // indirect
6565 github.com/json-iterator/go v1.1.12 // indirect
6666 github.com/klauspost/compress v1.17.11 // indirect
6767 github.com/letsencrypt/boulder v0.0.0-20240620165639-de9c06129bec // indirect
68- github.com/magiconair/properties v1.8.9 // indirect
69- github.com/mailru/easyjson v0.7.7 // indirect
68+ github.com/mailru/easyjson v0.9.0 // indirect
7069 github.com/miekg/pkcs11 v1.1.1 // indirect
7170 github.com/mitchellh/go-homedir v1.1.0 // indirect
7271 github.com/mitchellh/mapstructure v1.5.1-0.20231216201459-8508981c8b6c // indirect
@@ -80,57 +79,55 @@ require (
8079 github.com/opentracing/opentracing-go v1.2.0 // indirect
8180 github.com/pelletier/go-toml/v2 v2.2.3 // indirect
8281 github.com/pkg/errors v0.9.1 // indirect
83- github.com/sagikazarmark/locafero v0.4.0 // indirect
84- github.com/sagikazarmark/slog-shim v0.1.0 // indirect
82+ github.com/sagikazarmark/locafero v0.7.0 // indirect
8583 github.com/sassoftware/relic v7.2.1+incompatible // indirect
8684 github.com/secure-systems-lab/go-securesystemslib v0.9.0 // indirect
8785 github.com/shibumi/go-pathspec v1.3.0 // indirect
88- github.com/sigstore/protobuf-specs v0.4.0 // indirect
89- github.com/sigstore/sigstore-go v0.7.0 // indirect
90- github.com/sigstore/timestamp-authority v1.2.4 // indirect
86+ github.com/sigstore/protobuf-specs v0.4.1 // indirect
87+ github.com/sigstore/sigstore-go v0.7.1 // indirect
88+ github.com/sigstore/timestamp-authority v1.2.5 // indirect
9189 github.com/sourcegraph/conc v0.3.0 // indirect
92- github.com/spf13/afero v1.11 .0 // indirect
93- github.com/spf13/cast v1.7.0 // indirect
90+ github.com/spf13/afero v1.12 .0 // indirect
91+ github.com/spf13/cast v1.7.1 // indirect
9492 github.com/spf13/cobra v1.9.1 // indirect
9593 github.com/spf13/pflag v1.0.6 // indirect
96- github.com/spf13/viper v1.19.0 // indirect
94+ github.com/spf13/viper v1.20.1 // indirect
9795 github.com/subosito/gotenv v1.6.0 // indirect
9896 github.com/syndtr/goleveldb v1.0.1-0.20220721030215-126854af5e6d // indirect
9997 github.com/thales-e-security/pool v0.0.2 // indirect
10098 github.com/theupdateframework/go-tuf/v2 v2.0.2 // indirect
10199 github.com/titanous/rocacheck v0.0.0-20171023193734-afe73141d399 // indirect
102100 github.com/transparency-dev/merkle v0.0.2 // indirect
103101 github.com/vbatts/tar-split v0.11.6 // indirect
104- gitlab.com/gitlab-org/api/client-go v0.123 .0 // indirect
102+ gitlab.com/gitlab-org/api/client-go v0.127 .0 // indirect
105103 go.mongodb.org/mongo-driver v1.14.0 // indirect
106104 go.opentelemetry.io/auto/sdk v1.1.0 // indirect
107- go.opentelemetry.io/otel v1.34 .0 // indirect
108- go.opentelemetry.io/otel/metric v1.34 .0 // indirect
109- go.opentelemetry.io/otel/trace v1.34 .0 // indirect
105+ go.opentelemetry.io/otel v1.35 .0 // indirect
106+ go.opentelemetry.io/otel/metric v1.35 .0 // indirect
107+ go.opentelemetry.io/otel/trace v1.35 .0 // indirect
110108 go.uber.org/multierr v1.11.0 // indirect
111109 go.uber.org/zap v1.27.0 // indirect
112- golang.org/x/crypto v0.35 .0 // indirect
110+ golang.org/x/crypto v0.37 .0 // indirect
113111 golang.org/x/exp v0.0.0-20241108190413-2d47ceb2692f // indirect
114- golang.org/x/mod v0.22 .0 // indirect
115- golang.org/x/net v0.35 .0 // indirect
116- golang.org/x/oauth2 v0.27 .0 // indirect
117- golang.org/x/sync v0.11 .0 // indirect
118- golang.org/x/sys v0.30 .0 // indirect
119- golang.org/x/term v0.29 .0 // indirect
120- golang.org/x/text v0.22 .0 // indirect
121- golang.org/x/time v0.10 .0 // indirect
122- google.golang.org/genproto/googleapis/api v0.0.0-20250115164207-1a7da9e5054f // indirect
123- google.golang.org/protobuf v1.36.5 // indirect
112+ golang.org/x/mod v0.24 .0 // indirect
113+ golang.org/x/net v0.38 .0 // indirect
114+ golang.org/x/oauth2 v0.29 .0 // indirect
115+ golang.org/x/sync v0.13 .0 // indirect
116+ golang.org/x/sys v0.32 .0 // indirect
117+ golang.org/x/term v0.31 .0 // indirect
118+ golang.org/x/text v0.24 .0 // indirect
119+ golang.org/x/time v0.11 .0 // indirect
120+ google.golang.org/genproto/googleapis/api v0.0.0-20250303144028-a0af3efb3deb // indirect
121+ google.golang.org/protobuf v1.36.6 // indirect
124122 gopkg.in/inf.v0 v0.9.1 // indirect
125- gopkg.in/ini.v1 v1.67.0 // indirect
126123 gopkg.in/yaml.v2 v2.4.0 // indirect
127124 gopkg.in/yaml.v3 v3.0.1 // indirect
128125 k8s.io/api v0.28.3 // indirect
129126 k8s.io/apimachinery v0.30.1 // indirect
130127 k8s.io/client-go v0.28.3 // indirect
131128 k8s.io/klog/v2 v2.130.1 // indirect
132129 k8s.io/kube-openapi v0.0.0-20240228011516-70dd3763d340 // indirect
133- k8s.io/utils v0.0.0-20240502163921-fe8a2dddb1d0 // indirect
130+ k8s.io/utils v0.0.0-20241210054802-24370beab758 // indirect
134131 sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd // indirect
135132 sigs.k8s.io/structured-merge-diff/v4 v4.4.1 // indirect
136133 sigs.k8s.io/yaml v1.4.0 // indirect
0 commit comments