@@ -4,11 +4,11 @@ go 1.25.7
44
55require (
66 github.com/spf13/cobra v1.10.2
7- ocm.software/ocm v0.36 .0
7+ ocm.software/ocm v0.37 .0
88)
99
1010require (
11- cloud.google.com/go/auth v0.18.0 // indirect
11+ cloud.google.com/go/auth v0.18.1 // indirect
1212 cloud.google.com/go/auth/oauth2adapt v0.2.8 // indirect
1313 cloud.google.com/go/compute/metadata v0.9.0 // indirect
1414 dario.cat/mergo v1.0.2 // indirect
@@ -49,30 +49,30 @@ require (
4949 github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect
5050 github.com/aws/aws-sdk-go-v2 v1.41.1 // indirect
5151 github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.4 // indirect
52- github.com/aws/aws-sdk-go-v2/config v1.32.7 // indirect
53- github.com/aws/aws-sdk-go-v2/credentials v1.19.7 // indirect
52+ github.com/aws/aws-sdk-go-v2/config v1.32.9 // indirect
53+ github.com/aws/aws-sdk-go-v2/credentials v1.19.9 // indirect
5454 github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.17 // indirect
55- github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.21.0 // indirect
55+ github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager v0.1.4 // indirect
5656 github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.17 // indirect
5757 github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.17 // indirect
5858 github.com/aws/aws-sdk-go-v2/internal/ini v1.8.4 // indirect
5959 github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.17 // indirect
60- github.com/aws/aws-sdk-go-v2/service/ecr v1.55.1 // indirect
60+ github.com/aws/aws-sdk-go-v2/service/ecr v1.55.2 // indirect
6161 github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.38.2 // indirect
6262 github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.4 // indirect
6363 github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.8 // indirect
6464 github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.17 // indirect
6565 github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.17 // indirect
66- github.com/aws/aws-sdk-go-v2/service/s3 v1.95.1 // indirect
66+ github.com/aws/aws-sdk-go-v2/service/s3 v1.96.0 // indirect
6767 github.com/aws/aws-sdk-go-v2/service/signin v1.0.5 // indirect
68- github.com/aws/aws-sdk-go-v2/service/sso v1.30.9 // indirect
69- github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.13 // indirect
68+ github.com/aws/aws-sdk-go-v2/service/sso v1.30.10 // indirect
69+ github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.14 // indirect
7070 github.com/aws/aws-sdk-go-v2/service/sts v1.41.6 // indirect
7171 github.com/aws/smithy-go v1.24.0 // indirect
7272 github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.11.0 // indirect
7373 github.com/blang/semver v3.5.1+incompatible // indirect
7474 github.com/blang/semver/v4 v4.0.0 // indirect
75- github.com/buildkite/agent/v3 v3.115.2 // indirect
75+ github.com/buildkite/agent/v3 v3.115.4 // indirect
7676 github.com/buildkite/go-pipeline v0.16.0 // indirect
7777 github.com/buildkite/interpolate v0.1.5 // indirect
7878 github.com/buildkite/roko v1.4.0 // indirect
@@ -106,24 +106,25 @@ require (
106106 github.com/digitorus/timestamp v0.0.0-20250524132541-c45532741eea // indirect
107107 github.com/dimchansky/utfbom v1.1.1 // indirect
108108 github.com/distribution/reference v0.6.0 // indirect
109- github.com/docker/cli v29.1.5 +incompatible // indirect
109+ github.com/docker/cli v29.2.1 +incompatible // indirect
110110 github.com/docker/distribution v2.8.3+incompatible // indirect
111111 github.com/docker/docker v28.5.2+incompatible // indirect
112112 github.com/docker/docker-credential-helpers v0.9.4 // indirect
113113 github.com/docker/go-connections v0.6.0 // indirect
114114 github.com/docker/go-units v0.5.0 // indirect
115115 github.com/drone/envsubst v1.0.3 // indirect
116116 github.com/dustin/go-humanize v1.0.1 // indirect
117+ github.com/dylibso/observe-sdk/go v0.0.0-20240819160327-2d926c5d788a // indirect
117118 github.com/elliotchance/orderedmap v1.8.0 // indirect
118119 github.com/emicklei/go-restful/v3 v3.13.0 // indirect
119120 github.com/emirpasic/gods v1.18.1 // indirect
120- github.com/evanphx/json-patch v5.9.11+incompatible // indirect
121121 github.com/evanphx/json-patch/v5 v5.9.11 // indirect
122122 github.com/exponent-io/jsonpath v0.0.0-20210407135951-1de76d718b3f // indirect
123+ github.com/extism/go-sdk v1.7.1 // indirect
123124 github.com/fatih/color v1.18.0 // indirect
124125 github.com/felixge/httpsnoop v1.0.4 // indirect
125126 github.com/fluxcd/cli-utils v0.37.1-flux.1 // indirect
126- github.com/fluxcd/pkg/ssa v0.64 .0 // indirect
127+ github.com/fluxcd/pkg/ssa v0.69 .0 // indirect
127128 github.com/fsnotify/fsnotify v1.9.0 // indirect
128129 github.com/fvbommel/sortorder v1.1.0 // indirect
129130 github.com/fxamacker/cbor/v2 v2.9.0 // indirect
@@ -133,7 +134,7 @@ require (
133134 github.com/go-errors/errors v1.5.1 // indirect
134135 github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect
135136 github.com/go-git/go-billy/v5 v5.7.0 // indirect
136- github.com/go-git/go-git/v5 v5.16.4 // indirect
137+ github.com/go-git/go-git/v5 v5.16.5 // indirect
137138 github.com/go-ini/ini v1.67.0 // indirect
138139 github.com/go-jose/go-jose/v4 v4.1.3 // indirect
139140 github.com/go-logr/logr v1.4.3 // indirect
@@ -160,7 +161,7 @@ require (
160161 github.com/go-openapi/swag/yamlutils v0.25.4 // indirect
161162 github.com/go-openapi/validate v0.25.1 // indirect
162163 github.com/go-test/deep v1.1.1 // indirect
163- github.com/go-viper/mapstructure/v2 v2.4 .0 // indirect
164+ github.com/go-viper/mapstructure/v2 v2.5 .0 // indirect
164165 github.com/gobwas/glob v0.2.3 // indirect
165166 github.com/goccy/go-json v0.10.5 // indirect
166167 github.com/goccy/go-yaml v1.18.0 // indirect
@@ -177,19 +178,18 @@ require (
177178 github.com/google/go-querystring v1.2.0 // indirect
178179 github.com/google/s2a-go v0.1.9 // indirect
179180 github.com/google/uuid v1.6.0 // indirect
180- github.com/googleapis/enterprise-certificate-proxy v0.3.9 // indirect
181- github.com/googleapis/gax-go/v2 v2.16 .0 // indirect
181+ github.com/googleapis/enterprise-certificate-proxy v0.3.11 // indirect
182+ github.com/googleapis/gax-go/v2 v2.17 .0 // indirect
182183 github.com/gowebpki/jcs v1.0.1 // indirect
183184 github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 // indirect
184- github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.4 // indirect
185- github.com/hashicorp/errwrap v1.1.0 // indirect
185+ github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.5 // indirect
186186 github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
187- github.com/hashicorp/go-multierror v1.1.1 // indirect
188187 github.com/hashicorp/go-retryablehttp v0.7.8 // indirect
189188 github.com/hashicorp/go-rootcerts v1.0.2 // indirect
190189 github.com/hashicorp/go-secure-stdlib/strutil v0.1.2 // indirect
191190 github.com/hashicorp/vault-client-go v0.4.3 // indirect
192191 github.com/huandu/xstrings v1.5.0 // indirect
192+ github.com/ianlancetaylor/demangle v0.0.0-20250417193237-f615e6bd150b // indirect
193193 github.com/in-toto/attestation v1.1.2 // indirect
194194 github.com/in-toto/in-toto-golang v0.9.0 // indirect
195195 github.com/inconshreveable/mousetrap v1.1.0 // indirect
@@ -198,7 +198,7 @@ require (
198198 github.com/jinzhu/copier v0.4.0 // indirect
199199 github.com/json-iterator/go v1.1.12 // indirect
200200 github.com/kevinburke/ssh_config v1.4.0 // indirect
201- github.com/klauspost/compress v1.18.3 // indirect
201+ github.com/klauspost/compress v1.18.4 // indirect
202202 github.com/klauspost/cpuid/v2 v2.3.0 // indirect
203203 github.com/klauspost/pgzip v1.2.6 // indirect
204204 github.com/letsencrypt/boulder v0.20251110.0 // indirect
@@ -213,16 +213,16 @@ require (
213213 github.com/mattn/go-colorable v0.1.14 // indirect
214214 github.com/mattn/go-isatty v0.0.20 // indirect
215215 github.com/mattn/go-runewidth v0.0.19 // indirect
216- github.com/miekg/pkcs11 v1.1.1 // indirect
216+ github.com/miekg/pkcs11 v1.1.2 // indirect
217217 github.com/mikefarah/yq/v4 v4.48.1 // indirect
218218 github.com/mitchellh/copystructure v1.2.0 // indirect
219219 github.com/mitchellh/go-homedir v1.1.0 // indirect
220220 github.com/mitchellh/go-wordwrap v1.0.1 // indirect
221221 github.com/mitchellh/reflectwalk v1.0.2 // indirect
222222 github.com/moby/docker-image-spec v1.3.1 // indirect
223223 github.com/moby/locker v1.0.1 // indirect
224- github.com/moby/moby/api v1.52 .0 // indirect
225- github.com/moby/moby/client v0.2.1 // indirect
224+ github.com/moby/moby/api v1.53 .0 // indirect
225+ github.com/moby/moby/client v0.2.2 // indirect
226226 github.com/moby/sys/atomicwriter v0.1.0 // indirect
227227 github.com/moby/sys/capability v0.4.0 // indirect
228228 github.com/moby/sys/mountinfo v0.7.2 // indirect
@@ -248,22 +248,22 @@ require (
248248 github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c // indirect
249249 github.com/pkg/errors v0.9.1 // indirect
250250 github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
251- github.com/redis/go-redis/v9 v9.17.2 // indirect
251+ github.com/redis/go-redis/v9 v9.18.0 // indirect
252252 github.com/rogpeppe/go-internal v1.14.1 // indirect
253253 github.com/russross/blackfriday/v2 v2.1.0 // indirect
254254 github.com/ryanuber/go-glob v1.0.0 // indirect
255255 github.com/sagikazarmark/locafero v0.12.0 // indirect
256256 github.com/santhosh-tekuri/jsonschema/v6 v6.0.2 // indirect
257257 github.com/sassoftware/relic v7.2.1+incompatible // indirect
258- github.com/secure-systems-lab/go-securesystemslib v0.9.1 // indirect
258+ github.com/secure-systems-lab/go-securesystemslib v0.10.0 // indirect
259259 github.com/sergi/go-diff v1.4.0 // indirect
260260 github.com/shibumi/go-pathspec v1.3.0 // indirect
261261 github.com/shopspring/decimal v1.4.0 // indirect
262- github.com/sigstore/cosign/v3 v3.0.4 // indirect
262+ github.com/sigstore/cosign/v3 v3.0.5 // indirect
263263 github.com/sigstore/fulcio v1.8.5 // indirect
264264 github.com/sigstore/protobuf-specs v0.5.0 // indirect
265265 github.com/sigstore/rekor v1.5.0 // indirect
266- github.com/sigstore/rekor-tiles/v2 v2.0.1 // indirect
266+ github.com/sigstore/rekor-tiles/v2 v2.2.0 // indirect
267267 github.com/sigstore/sigstore v1.10.4 // indirect
268268 github.com/sigstore/sigstore-go v1.1.4 // indirect
269269 github.com/sigstore/timestamp-authority/v2 v2.0.4 // indirect
@@ -276,10 +276,12 @@ require (
276276 github.com/spiffe/go-spiffe/v2 v2.6.0 // indirect
277277 github.com/subosito/gotenv v1.6.0 // indirect
278278 github.com/syndtr/goleveldb v1.0.1-0.20220721030215-126854af5e6d // indirect
279+ github.com/tetratelabs/wabin v0.0.0-20230304001439-f6f874872834 // indirect
280+ github.com/tetratelabs/wazero v1.11.0 // indirect
279281 github.com/texttheater/golang-levenshtein v1.0.1 // indirect
280282 github.com/thales-e-security/pool v0.0.2 // indirect
281283 github.com/theupdateframework/go-tuf v0.7.0 // indirect
282- github.com/theupdateframework/go-tuf/v2 v2.3.0 // indirect
284+ github.com/theupdateframework/go-tuf/v2 v2.4.1 // indirect
283285 github.com/titanous/rocacheck v0.0.0-20171023193734-afe73141d399 // indirect
284286 github.com/tjfoc/gmsm v1.4.1 // indirect
285287 github.com/tonglil/buflogr v1.1.1 // indirect
@@ -296,8 +298,8 @@ require (
296298 github.com/xeipuuv/gojsonschema v1.2.0 // indirect
297299 github.com/xlab/treeprint v1.2.0 // indirect
298300 github.com/yuin/gopher-lua v1.1.1 // indirect
299- gitlab.com/gitlab-org/api/client-go v1.11 .0 // indirect
300- go.mongodb.org/mongo-driver v1.17.6 // indirect
301+ gitlab.com/gitlab-org/api/client-go v1.25 .0 // indirect
302+ go.mongodb.org/mongo-driver v1.17.9 // indirect
301303 go.opentelemetry.io/auto/sdk v1.2.1 // indirect
302304 go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0 // indirect
303305 go.opentelemetry.io/otel v1.39.0 // indirect
@@ -309,23 +311,24 @@ require (
309311 go.opentelemetry.io/otel/sdk/metric v1.39.0 // indirect
310312 go.opentelemetry.io/otel/trace v1.39.0 // indirect
311313 go.opentelemetry.io/proto/otlp v1.9.0 // indirect
314+ go.uber.org/atomic v1.11.0 // indirect
312315 go.uber.org/multierr v1.11.0 // indirect
313316 go.uber.org/zap v1.27.1 // indirect
314317 go.yaml.in/yaml/v2 v2.4.3 // indirect
315318 go.yaml.in/yaml/v3 v3.0.4 // indirect
316- golang.org/x/crypto v0.47 .0 // indirect
319+ golang.org/x/crypto v0.48 .0 // indirect
317320 golang.org/x/exp v0.0.0-20251023183803-a4bb9ffd2546 // indirect
318- golang.org/x/mod v0.31 .0 // indirect
319- golang.org/x/net v0.49 .0 // indirect
320- golang.org/x/oauth2 v0.34 .0 // indirect
321+ golang.org/x/mod v0.32 .0 // indirect
322+ golang.org/x/net v0.50 .0 // indirect
323+ golang.org/x/oauth2 v0.35 .0 // indirect
321324 golang.org/x/sync v0.19.0 // indirect
322- golang.org/x/sys v0.40 .0 // indirect
323- golang.org/x/term v0.39 .0 // indirect
324- golang.org/x/text v0.33 .0 // indirect
325+ golang.org/x/sys v0.41 .0 // indirect
326+ golang.org/x/term v0.40 .0 // indirect
327+ golang.org/x/text v0.34 .0 // indirect
325328 golang.org/x/time v0.14.0 // indirect
326- google.golang.org/api v0.260 .0 // indirect
327- google.golang.org/genproto/googleapis/api v0.0.0-20251222181119-0a764e51fe1b // indirect
328- google.golang.org/genproto/googleapis/rpc v0.0.0-20251222181119-0a764e51fe1b // indirect
329+ google.golang.org/api v0.267 .0 // indirect
330+ google.golang.org/genproto/googleapis/api v0.0.0-20260128011058-8636f8732409 // indirect
331+ google.golang.org/genproto/googleapis/rpc v0.0.0-20260203192932-546029d2fa20 // indirect
329332 google.golang.org/grpc v1.78.0 // indirect
330333 google.golang.org/protobuf v1.36.11 // indirect
331334 gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect
@@ -335,25 +338,25 @@ require (
335338 gopkg.in/warnings.v0 v0.1.2 // indirect
336339 gopkg.in/yaml.v2 v2.4.0 // indirect
337340 gopkg.in/yaml.v3 v3.0.1 // indirect
338- helm.sh/helm/v3 v3.20.0 // indirect
339- k8s.io/api v0.35.0 // indirect
340- k8s.io/apiextensions-apiserver v0.35.0 // indirect
341- k8s.io/apimachinery v0.35.0 // indirect
342- k8s.io/cli-runtime v0.35.0 // indirect
343- k8s.io/client-go v0.35.0 // indirect
344- k8s.io/component-base v0.35.0 // indirect
341+ helm.sh/helm/v4 v4.1.1 // indirect
342+ k8s.io/api v0.35.1 // indirect
343+ k8s.io/apiextensions-apiserver v0.35.1 // indirect
344+ k8s.io/apimachinery v0.35.1 // indirect
345+ k8s.io/cli-runtime v0.35.1 // indirect
346+ k8s.io/client-go v0.35.1 // indirect
347+ k8s.io/component-base v0.35.1 // indirect
345348 k8s.io/klog/v2 v2.130.1 // indirect
346349 k8s.io/kube-openapi v0.0.0-20250910181357-589584f1c912 // indirect
347350 k8s.io/kubectl v0.35.0 // indirect
348351 k8s.io/utils v0.0.0-20251002143259-bc988d571ff4 // indirect
349352 oras.land/oras-go/v2 v2.6.0 // indirect
350- sigs.k8s.io/controller-runtime v0.23.0 // indirect
353+ sigs.k8s.io/controller-runtime v0.23.1 // indirect
351354 sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 // indirect
352- sigs.k8s.io/kustomize/api v0.21.0 // indirect
353- sigs.k8s.io/kustomize/kyaml v0.21.0 // indirect
355+ sigs.k8s.io/kustomize/api v0.21.1 // indirect
356+ sigs.k8s.io/kustomize/kyaml v0.21.1 // indirect
354357 sigs.k8s.io/randfill v1.0.0 // indirect
355358 sigs.k8s.io/release-utils v0.12.3 // indirect
356- sigs.k8s.io/structured-merge-diff/v6 v6.3.0 // indirect
359+ sigs.k8s.io/structured-merge-diff/v6 v6.3.2-0.20260122202528-d9cc6641c482 // indirect
357360 sigs.k8s.io/yaml v1.6.0 // indirect
358361)
359362
0 commit comments