@@ -23,7 +23,7 @@ require (
2323 github.com/sigstore/sigstore v1.9.4
2424 github.com/spf13/cobra v1.9.1
2525 github.com/spf13/pflag v1.0.6
26- github.com/tektoncd/chains v0.24.0
26+ github.com/tektoncd/chains v0.25.1
2727 github.com/tektoncd/hub v1.21.0
2828 github.com/tektoncd/pipeline v1.0.0
2929 github.com/tektoncd/plumbing v0.0.0-20250430145243-3b7cd59879c1
@@ -47,16 +47,16 @@ replace github.com/alibabacloud-go/cr-20160607 => github.com/vdemeester/cr-20160
4747
4848require (
4949 cel.dev/expr v0.23.1 // indirect
50- cloud.google.com/go v0.118.3 // indirect
51- cloud.google.com/go/auth v0.15 .0 // indirect
52- cloud.google.com/go/auth/oauth2adapt v0.2.7 // indirect
50+ cloud.google.com/go v0.120.0 // indirect
51+ cloud.google.com/go/auth v0.16 .0 // indirect
52+ cloud.google.com/go/auth/oauth2adapt v0.2.8 // indirect
5353 cloud.google.com/go/compute/metadata v0.6.0 // indirect
5454 cloud.google.com/go/firestore v1.18.0 // indirect
55- cloud.google.com/go/iam v1.4.1 // indirect
55+ cloud.google.com/go/iam v1.5.0 // indirect
5656 cloud.google.com/go/kms v1.21.1 // indirect
57- cloud.google.com/go/longrunning v0.6.5 // indirect
58- cloud.google.com/go/monitoring v1.24.0 // indirect
59- cloud.google.com/go/storage v1.50 .0 // indirect
57+ cloud.google.com/go/longrunning v0.6.6 // indirect
58+ cloud.google.com/go/monitoring v1.24.1 // indirect
59+ cloud.google.com/go/storage v1.52 .0 // indirect
6060 contrib.go.opencensus.io/exporter/ocagent v0.7.1-0.20200907061046-05415f1de66d // indirect
6161 contrib.go.opencensus.io/exporter/prometheus v0.4.2 // indirect
6262 github.com/AliyunContainerService/ack-ram-tool/pkg/credentials/provider v0.14.0 // indirect
@@ -75,11 +75,11 @@ require (
7575 github.com/Azure/go-autorest/autorest/date v0.3.0 // indirect
7676 github.com/Azure/go-autorest/logger v0.2.1 // indirect
7777 github.com/Azure/go-autorest/tracing v0.6.0 // indirect
78- github.com/AzureAD/microsoft-authentication-library-for-go v1.3.3 // indirect
79- github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.26 .0 // indirect
80- github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.49 .0 // indirect
81- github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.49 .0 // indirect
82- github.com/IBM/sarama v1.43.3 // indirect
78+ github.com/AzureAD/microsoft-authentication-library-for-go v1.4.2 // indirect
79+ github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.27 .0 // indirect
80+ github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.51 .0 // indirect
81+ github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.51 .0 // indirect
82+ github.com/IBM/sarama v1.45.1 // indirect
8383 github.com/Microsoft/go-winio v0.6.2 // indirect
8484 github.com/ProtonMail/go-crypto v1.1.5 // indirect
8585 github.com/ThalesIgnite/crypto11 v1.2.5 // indirect
@@ -98,8 +98,8 @@ require (
9898 github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect
9999 github.com/aws/aws-sdk-go v1.55.6 // indirect
100100 github.com/aws/aws-sdk-go-v2 v1.36.3 // indirect
101- github.com/aws/aws-sdk-go-v2/config v1.29.10 // indirect
102- github.com/aws/aws-sdk-go-v2/credentials v1.17.63 // indirect
101+ github.com/aws/aws-sdk-go-v2/config v1.29.12 // indirect
102+ github.com/aws/aws-sdk-go-v2/credentials v1.17.65 // indirect
103103 github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.30 // indirect
104104 github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.34 // indirect
105105 github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.34 // indirect
@@ -109,10 +109,10 @@ require (
109109 github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.12.3 // indirect
110110 github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.12.15 // indirect
111111 github.com/aws/aws-sdk-go-v2/service/kms v1.38.1 // indirect
112- github.com/aws/aws-sdk-go-v2/service/sso v1.25.1 // indirect
113- github.com/aws/aws-sdk-go-v2/service/ssooidc v1.29.2 // indirect
112+ github.com/aws/aws-sdk-go-v2/service/sso v1.25.2 // indirect
113+ github.com/aws/aws-sdk-go-v2/service/ssooidc v1.30.0 // indirect
114114 github.com/aws/aws-sdk-go-v2/service/sts v1.33.17 // indirect
115- github.com/aws/smithy-go v1.22.2 // indirect
115+ github.com/aws/smithy-go v1.22.3 // indirect
116116 github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.9.1 // indirect
117117 github.com/beorn7/perks v1.0.1 // indirect
118118 github.com/blendle/zapdriver v1.3.1 // indirect
@@ -123,7 +123,7 @@ require (
123123 github.com/clbanning/mxj/v2 v2.7.0 // indirect
124124 github.com/cloudevents/sdk-go/v2 v2.16.0 // indirect
125125 github.com/cloudflare/circl v1.3.7 // indirect
126- github.com/cncf/xds/go v0.0.0-20250121191232-2f005788dc42 // indirect
126+ github.com/cncf/xds/go v0.0.0-20250326154945-ae57f3c0d45f // indirect
127127 github.com/common-nighthawk/go-figure v0.0.0-20210622060536-734e95fb86be // indirect
128128 github.com/containerd/stargz-snapshotter/estargz v0.16.3 // indirect
129129 github.com/coreos/go-oidc/v3 v3.14.1 // indirect
@@ -138,13 +138,14 @@ require (
138138 github.com/eapache/go-resiliency v1.7.0 // indirect
139139 github.com/eapache/go-xerial-snappy v0.0.0-20230731223053-c322873962e3 // indirect
140140 github.com/eapache/queue v1.1.0 // indirect
141+ github.com/edwarnicke/gitoid v0.0.0-20220710194850-1be5bfda1f9d // indirect
141142 github.com/emicklei/go-restful/v3 v3.12.1 // indirect
142143 github.com/envoyproxy/go-control-plane/envoy v1.32.4 // indirect
143144 github.com/envoyproxy/protoc-gen-validate v1.2.1 // indirect
144145 github.com/evanphx/json-patch v5.9.0+incompatible // indirect
145146 github.com/evanphx/json-patch/v5 v5.9.11 // indirect
146147 github.com/felixge/httpsnoop v1.0.4 // indirect
147- github.com/fsnotify/fsnotify v1.8 .0 // indirect
148+ github.com/fsnotify/fsnotify v1.9 .0 // indirect
148149 github.com/fxamacker/cbor/v2 v2.7.0 // indirect
149150 github.com/gdamore/encoding v1.0.0 // indirect
150151 github.com/gdamore/tcell/v2 v2.6.0 // indirect
@@ -171,9 +172,9 @@ require (
171172 github.com/gogo/protobuf v1.3.2 // indirect
172173 github.com/golang-jwt/jwt/v4 v4.5.2 // indirect
173174 github.com/golang-jwt/jwt/v5 v5.2.2 // indirect
174- github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
175+ github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 // indirect
175176 github.com/golang/protobuf v1.5.4 // indirect
176- github.com/golang/snappy v0 .0.4 // indirect
177+ github.com/golang/snappy v1 .0.0 // indirect
177178 github.com/google/btree v1.1.3 // indirect
178179 github.com/google/cel-go v0.25.0 // indirect
179180 github.com/google/certificate-transparency-go v1.3.1 // indirect
@@ -206,7 +207,9 @@ require (
206207 github.com/hashicorp/hcl v1.0.1-vault-5 // indirect
207208 github.com/hashicorp/vault/api v1.16.0 // indirect
208209 github.com/imdario/mergo v0.3.16 // indirect
210+ github.com/in-toto/archivista v0.9.1 // indirect
209211 github.com/in-toto/attestation v1.1.1 // indirect
212+ github.com/in-toto/go-witness v0.8.1 // indirect
210213 github.com/in-toto/in-toto-golang v0.9.1-0.20240317085821-8e2966059a09 // indirect
211214 github.com/inconshreveable/mousetrap v1.1.0 // indirect
212215 github.com/jcmturner/aescts/v2 v2.0.0 // indirect
@@ -222,14 +225,14 @@ require (
222225 github.com/json-iterator/go v1.1.12 // indirect
223226 github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51 // indirect
224227 github.com/kelseyhightower/envconfig v1.4.0 // indirect
225- github.com/klauspost/compress v1.17.11 // indirect
228+ github.com/klauspost/compress v1.18.0 // indirect
226229 github.com/ktr0731/go-ansisgr v0.1.0 // indirect
227230 github.com/kylelemons/godebug v1.1.0 // indirect
228231 github.com/letsencrypt/boulder v0.0.0-20240620165639-de9c06129bec // indirect
229232 github.com/liggitt/tabwriter v0.0.0-20181228230101-89fcab3d43de // indirect
230233 github.com/lucasb-eyer/go-colorful v1.2.0 // indirect
231234 github.com/mailru/easyjson v0.9.0 // indirect
232- github.com/mattn/go-colorable v0.1.13 // indirect
235+ github.com/mattn/go-colorable v0.1.14 // indirect
233236 github.com/mattn/go-isatty v0.0.20 // indirect
234237 github.com/mattn/go-runewidth v0.0.16 // indirect
235238 github.com/mgutz/ansi v0.0.0-20200706080929-d51e80ef957d // indirect
@@ -251,7 +254,7 @@ require (
251254 github.com/openzipkin/zipkin-go v0.4.3 // indirect
252255 github.com/pelletier/go-toml/v2 v2.2.3 // indirect
253256 github.com/peterbourgon/diskv v2.0.1+incompatible // indirect
254- github.com/pierrec/lz4/v4 v4.1.21 // indirect
257+ github.com/pierrec/lz4/v4 v4.1.22 // indirect
255258 github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c // indirect
256259 github.com/planetscale/vtprotobuf v0.6.1-0.20240319094008-0393e58bdf10 // indirect
257260 github.com/prometheus/client_golang v1.21.1 // indirect
@@ -270,7 +273,7 @@ require (
270273 github.com/shibumi/go-pathspec v1.3.0 // indirect
271274 github.com/sigstore/fulcio v1.6.6 // indirect
272275 github.com/sigstore/protobuf-specs v0.4.1 // indirect
273- github.com/sigstore/rekor v1.3.9 // indirect
276+ github.com/sigstore/rekor v1.3.10 // indirect
274277 github.com/sigstore/sigstore-go v0.7.1 // indirect
275278 github.com/sigstore/sigstore/pkg/signature/kms/aws v1.9.1 // indirect
276279 github.com/sigstore/sigstore/pkg/signature/kms/azure v1.9.1 // indirect
@@ -305,15 +308,15 @@ require (
305308 github.com/youmark/pkcs8 v0.0.0-20240726163527-a2c0da244d78 // indirect
306309 github.com/zeebo/errs v1.4.0 // indirect
307310 gitlab.com/gitlab-org/api/client-go v0.127.0 // indirect
308- go.mongodb.org/mongo-driver v1.16.1 // indirect
311+ go.mongodb.org/mongo-driver v1.17.3 // indirect
309312 go.opentelemetry.io/auto/sdk v1.1.0 // indirect
310- go.opentelemetry.io/contrib/detectors/gcp v1.34 .0 // indirect
311- go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.59 .0 // indirect
312- go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.59 .0 // indirect
313+ go.opentelemetry.io/contrib/detectors/gcp v1.35 .0 // indirect
314+ go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.60 .0 // indirect
315+ go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.60 .0 // indirect
313316 go.opentelemetry.io/otel v1.35.0 // indirect
314317 go.opentelemetry.io/otel/metric v1.35.0 // indirect
315318 go.opentelemetry.io/otel/sdk v1.35.0 // indirect
316- go.opentelemetry.io/otel/sdk/metric v1.34 .0 // indirect
319+ go.opentelemetry.io/otel/sdk/metric v1.35 .0 // indirect
317320 go.opentelemetry.io/otel/trace v1.35.0 // indirect
318321 go.starlark.net v0.0.0-20230525235612-a134d8f9ddca // indirect
319322 goa.design/goa/v3 v3.20.0 // indirect
@@ -329,12 +332,12 @@ require (
329332 golang.org/x/sys v0.33.0 // indirect
330333 golang.org/x/text v0.24.0 // indirect
331334 golang.org/x/time v0.11.0 // indirect
332- golang.org/x/xerrors v0.0.0-20240716161551-93cc26a95ae9 // indirect
335+ golang.org/x/xerrors v0.0.0-20240903120638-7835f813f4da // indirect
333336 gomodules.xyz/jsonpatch/v2 v2.5.0 // indirect
334- google.golang.org/api v0.227 .0 // indirect
335- google.golang.org/genproto v0.0.0-20250303144028-a0af3efb3deb // indirect
336- google.golang.org/genproto/googleapis/api v0.0.0-20250303144028-a0af3efb3deb // indirect
337- google.golang.org/genproto/googleapis/rpc v0.0.0-20250313205543-e70fdf4c4cb4 // indirect
337+ google.golang.org/api v0.229 .0 // indirect
338+ google.golang.org/genproto v0.0.0-20250324211829-b45e905df463 // indirect
339+ google.golang.org/genproto/googleapis/api v0.0.0-20250414145226-207652e42e2e // indirect
340+ google.golang.org/genproto/googleapis/rpc v0.0.0-20250414145226-207652e42e2e // indirect
338341 google.golang.org/grpc v1.72.0 // indirect
339342 google.golang.org/protobuf v1.36.6 // indirect
340343 gopkg.in/evanphx/json-patch.v4 v4.12.0 // indirect
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?v=4&size=40){kind=avatar}
0 commit comments