@@ -10,7 +10,7 @@ require (
10
10
github.com/cloudevents/sdk-go/v2 v2.15.2
11
11
github.com/containerd/containerd v1.7.25
12
12
github.com/go-git/go-git/v5 v5.13.2
13
- github.com/google/go-cmp v0.6 .0
13
+ github.com/google/go-cmp v0.7 .0
14
14
github.com/google/go-containerregistry v0.20.2
15
15
github.com/google/uuid v1.6.0
16
16
github.com/hashicorp/errwrap v1.1.0 // indirect
@@ -21,13 +21,13 @@ require (
21
21
github.com/opencontainers/image-spec v1.1.0
22
22
github.com/pkg/errors v0.9.1
23
23
github.com/sigstore/sigstore v1.8.12
24
- github.com/spiffe/go-spiffe/v2 v2.4 .0
24
+ github.com/spiffe/go-spiffe/v2 v2.5 .0
25
25
github.com/spiffe/spire-api-sdk v1.11.1
26
26
github.com/tektoncd/plumbing v0.0.0-20220817140952-3da8ce01aeeb
27
27
go.opencensus.io v0.24.0
28
28
go.uber.org/zap v1.27.0
29
29
golang.org/x/exp v0.0.0-20240719175910-8a7402abbf56
30
- golang.org/x/oauth2 v0.25 .0 // indirect
30
+ golang.org/x/oauth2 v0.30 .0 // indirect
31
31
gomodules.xyz/jsonpatch/v2 v2.4.0
32
32
k8s.io/api v0.29.13
33
33
k8s.io/apimachinery v0.29.13
@@ -49,10 +49,10 @@ require (
49
49
github.com/sigstore/sigstore/pkg/signature/kms/azure v1.8.12
50
50
github.com/sigstore/sigstore/pkg/signature/kms/gcp v1.8.12
51
51
github.com/sigstore/sigstore/pkg/signature/kms/hashivault v1.8.12
52
- go.opentelemetry.io/otel v1.34 .0
52
+ go.opentelemetry.io/otel v1.36 .0
53
53
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.34.0
54
- go.opentelemetry.io/otel/sdk v1.34 .0
55
- go.opentelemetry.io/otel/trace v1.34 .0
54
+ go.opentelemetry.io/otel/sdk v1.36 .0
55
+ go.opentelemetry.io/otel/trace v1.36 .0
56
56
k8s.io/utils v0.0.0-20240102154912-e7106e64919e
57
57
)
58
58
@@ -69,14 +69,14 @@ require (
69
69
)
70
70
71
71
require (
72
- cel.dev/expr v0.19.1 // indirect
73
- cloud.google.com/go v0.116 .0 // indirect
74
- cloud.google.com/go/auth v0.13.0 // indirect
75
- cloud.google.com/go/auth/oauth2adapt v0.2.6 // indirect
76
- cloud.google.com/go/compute/metadata v0.6 .0 // indirect
77
- cloud.google.com/go/iam v1.2 .2 // indirect
78
- cloud.google.com/go/kms v1.20.4 // indirect
79
- cloud.google.com/go/longrunning v0.6.2 // indirect
72
+ cel.dev/expr v0.24.0 // indirect
73
+ cloud.google.com/go v0.120 .0 // indirect
74
+ cloud.google.com/go/auth v0.16.1 // indirect
75
+ cloud.google.com/go/auth/oauth2adapt v0.2.8 // indirect
76
+ cloud.google.com/go/compute/metadata v0.7 .0 // indirect
77
+ cloud.google.com/go/iam v1.5 .2 // indirect
78
+ cloud.google.com/go/kms v1.22.0 // indirect
79
+ cloud.google.com/go/longrunning v0.6.7 // indirect
80
80
dario.cat/mergo v1.0.0 // indirect
81
81
github.com/42wim/httpsig v1.2.1 // indirect
82
82
github.com/Azure/azure-sdk-for-go/sdk/azcore v1.16.0 // indirect
@@ -99,14 +99,14 @@ require (
99
99
github.com/emicklei/go-restful/v3 v3.11.0 // indirect
100
100
github.com/felixge/httpsnoop v1.0.4 // indirect
101
101
github.com/go-fed/httpsig v1.1.0 // indirect
102
- github.com/go-jose/go-jose/v4 v4.0.4 // indirect
102
+ github.com/go-jose/go-jose/v4 v4.0.5 // indirect
103
103
github.com/go-logr/stdr v1.2.2 // indirect
104
104
github.com/golang-jwt/jwt/v5 v5.2.2 // indirect
105
105
github.com/google/gnostic-models v0.6.8 // indirect
106
106
github.com/google/go-containerregistry/pkg/authn/kubernetes v0.0.0-20240108195214-a0658aa1d0cc // indirect
107
- github.com/google/s2a-go v0.1.8 // indirect
108
- github.com/googleapis/enterprise-certificate-proxy v0.3.4 // indirect
109
- github.com/googleapis/gax-go/v2 v2.14.0 // indirect
107
+ github.com/google/s2a-go v0.1.9 // indirect
108
+ github.com/googleapis/enterprise-certificate-proxy v0.3.6 // indirect
109
+ github.com/googleapis/gax-go/v2 v2.14.1 // indirect
110
110
github.com/grpc-ecosystem/grpc-gateway/v2 v2.25.1 // indirect
111
111
github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
112
112
github.com/hashicorp/go-retryablehttp v0.7.7 // indirect
@@ -129,15 +129,15 @@ require (
129
129
github.com/skeema/knownhosts v1.3.0 // indirect
130
130
github.com/stoewer/go-strcase v1.2.0 // indirect
131
131
github.com/titanous/rocacheck v0.0.0-20171023193734-afe73141d399 // indirect
132
- github.com/zeebo/errs v1.3 .0 // indirect
132
+ github.com/zeebo/errs v1.4 .0 // indirect
133
133
go.opentelemetry.io/auto/sdk v1.1.0 // indirect
134
- go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.54 .0 // indirect
135
- go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.54 .0 // indirect
134
+ go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.60 .0 // indirect
135
+ go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.60 .0 // indirect
136
136
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.34.0 // indirect
137
- go.opentelemetry.io/otel/metric v1.34 .0 // indirect
137
+ go.opentelemetry.io/otel/metric v1.36 .0 // indirect
138
138
go.opentelemetry.io/proto/otlp v1.5.0 // indirect
139
- google.golang.org/genproto/googleapis/api v0.0.0-20250115164207-1a7da9e5054f // indirect
140
- google.golang.org/genproto/googleapis/rpc v0.0.0-20250115164207-1a7da9e5054f // indirect
139
+ google.golang.org/genproto/googleapis/api v0.0.0-20250728155136-f173205681a0 // indirect
140
+ google.golang.org/genproto/googleapis/rpc v0.0.0-20250728155136-f173205681a0 // indirect
141
141
)
142
142
143
143
// TODO: Remove this once github.com/google/go-containerregistry uses github.com/aws/aws-sdk-go-v2 >v1.23.0
@@ -189,7 +189,7 @@ require (
189
189
github.com/evanphx/json-patch/v5 v5.9.0 // indirect
190
190
github.com/go-kit/log v0.2.1 // indirect
191
191
github.com/go-logfmt/logfmt v0.5.1 // indirect
192
- github.com/go-logr/logr v1.4.2 // indirect
192
+ github.com/go-logr/logr v1.4.3 // indirect
193
193
github.com/go-openapi/jsonpointer v0.19.6 // indirect
194
194
github.com/go-openapi/jsonreference v0.20.2 // indirect
195
195
github.com/go-openapi/swag v0.22.3 // indirect
@@ -229,19 +229,19 @@ require (
229
229
github.com/vbatts/tar-split v0.11.3 // indirect
230
230
go.uber.org/automaxprocs v1.5.3 // indirect
231
231
go.uber.org/multierr v1.11.0 // indirect
232
- golang.org/x/crypto v0.35 .0 // indirect
233
- golang.org/x/mod v0.19 .0 // indirect
234
- golang.org/x/net v0.34 .0 // indirect
235
- golang.org/x/sync v0.11 .0
236
- golang.org/x/sys v0.30 .0 // indirect
237
- golang.org/x/term v0.29 .0 // indirect
238
- golang.org/x/text v0.22 .0 // indirect
239
- golang.org/x/time v0.8 .0 // indirect
240
- golang.org/x/tools v0.23 .0 // indirect
241
- google.golang.org/api v0.214 .0 // indirect
242
- google.golang.org/genproto v0.0.0-20241118233622-e639e219e697 // indirect
243
- google.golang.org/grpc v1.70.0
244
- google.golang.org/protobuf v1.36.4
232
+ golang.org/x/crypto v0.40 .0 // indirect
233
+ golang.org/x/mod v0.25 .0 // indirect
234
+ golang.org/x/net v0.42 .0 // indirect
235
+ golang.org/x/sync v0.16 .0
236
+ golang.org/x/sys v0.34 .0 // indirect
237
+ golang.org/x/term v0.33 .0 // indirect
238
+ golang.org/x/text v0.27 .0 // indirect
239
+ golang.org/x/time v0.11 .0 // indirect
240
+ golang.org/x/tools v0.34 .0 // indirect
241
+ google.golang.org/api v0.232 .0 // indirect
242
+ google.golang.org/genproto v0.0.0-20250804133106-a7a43d27e69b // indirect
243
+ google.golang.org/grpc v1.74.2
244
+ google.golang.org/protobuf v1.36.6
245
245
gopkg.in/inf.v0 v0.9.1 // indirect
246
246
gopkg.in/yaml.v2 v2.4.0 // indirect
247
247
gopkg.in/yaml.v3 v3.0.1 // indirect
0 commit comments