Commit e9ad381
committed
[release-v0.76.x] bump fulcio and cosign to fix cve CVE-2025-66506
1 parent 58c2a43 commit e9ad381
File tree
1,346 files changed
+92871
-83437
lines changed- vendor
- cel.dev/expr
- cloud.google.com/go
- auth
- credentials
- impersonate
- internal/impersonate
- httptransport
- internal
- retry
- transport
- headers
- trustboundary
- compute/metadata
- github.com
- aws
- aws-sdk-go-v2
- aws
- middleware
- retry
- signer/v4
- transport/http
- config
- credentials
- feature/ec2/imds
- internal
- configsources
- endpoints
- awsrulesfn
- v2
- ini
- service
- internal
- accept-encoding
- presigned-url
- ssooidc
- internal/endpoints
- types
- sso
- internal/endpoints
- sts
- internal/endpoints
- types
- smithy-go
- endpoints
- metrics
- middleware
- transport/http
- containerd/stargz-snapshotter/estargz
- coreos/go-oidc/v3/oidc
- docker
- cli
- cli/config
- configfile
- credentials
- memorystore
- types
- docker-credential-helpers/client
- fsnotify/fsnotify
- internal
- go-chi/chi
- middleware
- v5
- middleware
- go-logr/logr
- funcr
- go-openapi
- analysis
- internal
- debug
- flatten
- normalize
- operations
- replace
- schutils
- sortref
- errors
- jsonpointer
- jsonreference
- internal
- loads
- runtime
- client
- logger
- middleware
- denco
- header
- untyped
- security
- yamlpc
- spec
- strfmt
- swag
- cmdutils
- conv
- fileutils
- jsonname
- jsonutils
- adapters
- ifaces
- stdlib/json
- loading
- mangling
- netutils
- stringutils
- typeutils
- yamlutils
- validate
- go-viper/mapstructure/v2
- google
- certificate-transparency-go
- client
- jsonclient
- loglist3
- x509util
- x509
- pkix
- go-containerregistry/pkg
- name
- v1
- google
- layout
- mutate
- remote
- transport
- grpc-ecosystem/grpc-gateway/v2/runtime
- hashicorp/go-retryablehttp
- josharian/intern
- klauspost/compress
- fse
- huff0
- internal
- le
- snapref
- zstd
- letsencrypt/boulder
- core
- goodkey
- identifier
- probs
- revocation
- strictyaml
- mailru/easyjson
- buffer
- jlexer
- jwriter
- mattn/go-runewidth
- mitchellh/mapstructure
- opentracing/opentracing-go
- ext
- log
- pelletier/go-toml/v2
- pkg/browser
- prometheus
- client_golang/prometheus
- internal
- promhttp
- common
- expfmt
- model
- promslog
- rivo/uniseg
- sagikazarmark/locafero
- secure-systems-lab/go-securesystemslib/signerverifier
- segmentio/ksuid
- sigstore
- protobuf-specs/gen/pb-go
- bundle/v1
- common/v1
- dsse
- rekor/v1
- trustroot/v1
- rekor/pkg
- generated
- client
- entries
- index
- pubkey
- tlog
- models
- internal/log
- log
- pki
- pkitypes
- x509
- tle
- types
- dsse/v0.0.1
- hashedrekord/v0.0.1
- intoto
- v0.0.1
- v0.0.2
- rekord/v0.0.1
- util
- verify
- sigstore/pkg
- cryptoutils
- oauthflow
- signature
- kms
- skratchdot/open-golang
- open
- sourcegraph/conc
- internal/multierror
- iter
- pool
- spf13
- afero
- mem
- cast
- internal
- cobra
- pflag
- viper
- internal/encoding/yaml
- spiffe/go-spiffe/v2
- bundle
- jwtbundle
- spiffebundle
- x509bundle
- proto/spiffe/workload
- svid
- jwtsvid
- x509svid
- workloadapi
- stretchr/testify
- assert
- yaml
- require
- suite
- titanous/rocacheck
- vbatts/tar-split/archive/tar
- zeebo/errs
- go.mongodb.org/mongo-driver
- bson
- bsoncodec
- bsonrw
- primitive
- x/bsonx/bsoncore
- go.opentelemetry.io
- auto/sdk
- internal/telemetry
- contrib/instrumentation/net/http/otelhttp
- internal
- request
- semconvutil
- semconv
- otel
- attribute
- internal
- baggage
- codes
- internal
- global
- metric
- noop
- propagation
- sdk
- internal
- env
- x
- resource
- trace
- internal/x
- semconv
- internal/v2
- v1.17.0
- httpconv
- v1.20.0
- v1.26.0
- v1.37.0
- httpconv
- otelconv
- trace
- internal/telemetry
- noop
- go.uber.org/zap
- zapcore
- zaptest/observer
- go.yaml.in/yaml
- v2
- v3
- golang.org/x
- crypto
- argon2
- blake2b
- chacha20poly1305
- chacha20
- curve25519
- ed25519
- ocsp
- openpgp/s2k
- pkcs12
- salsa20/salsa
- sha3
- ssh
- mod
- modfile
- module
- semver
- sumdb/dirhash
- net
- http2
- internal
- httpcommon
- socks
- trace
- oauth2
- google
- externalaccount
- sync/errgroup
- sys
- cpu
- plan9
- unix
- windows
- registry
- term
- text/unicode/bidi
- time/rate
- tools
- go
- ast
- astutil
- edge
- inspector
- packages
- types
- objectpath
- typeutil
- imports
- internal
- event/core
- gcimporter
- imports
- modindex
- packagesinternal
- stdlib
- typeparams
- typesinternal
- versions
- google.golang.org
- api
- idtoken
- internal
- option/internaloption
- grpc
- balancer
- endpointsharding
- pickfirst
- pickfirstleaf
- roundrobin
- binarylog/grpc_binarylog_v1
- credentials
- insecure
- encoding
- internal
- proto
- experimental/stats
- health/grpc_health_v1
- internal
- balancer/gracefulswitch
- buffer
- channelz
- credentials
- envconfig
- grpcsync
- resolver
- delegatingresolver
- dns
- stats
- status
- transport
- mem
- resolver
- stats
- protobuf
- encoding/protowire
- internal
- editiondefaults
- editionssupport
- filedesc
- genid
- impl
- version
- reflect
- protodesc
- protoreflect
- types/descriptorpb
- k8s.io/utils
- buffer
- net
- sigs.k8s.io
- release-utils/version
- yaml
- goyaml.v2
Some content is hidden
Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.
1,346 files changed
+92871
-83437
lines changedLarge diffs are not rendered by default.
Large diffs are not rendered by default.
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
Lines changed: 106 additions & 21 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
Lines changed: 1 addition & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
0 commit comments