@@ -5,16 +5,16 @@ go 1.23.4
55toolchain go1.24.2
66
77require (
8- github.com/containers/common v0.62.3
9- github.com/containers/podman/v5 v5.4.2
8+ github.com/containers/common v0.63.0
9+ github.com/containers/podman/v5 v5.5.0
1010 github.com/go-co-op/gocron v1.13.0
1111 github.com/go-git/go-git/v5 v5.14.0
1212 github.com/gobwas/glob v0.2.3
1313 github.com/natefinch/lumberjack v2.0.0+incompatible
1414 github.com/opencontainers/runtime-spec v1.2.1
1515 github.com/openshift/build-machinery-go v0.0.0-20220121085309-f94edc2d6874
1616 github.com/sigstore/gitsign v0.13.0
17- github.com/sigstore/rekor v1.3.9
17+ github.com/sigstore/rekor v1.3.10
1818 github.com/spf13/cobra v1.9.1
1919 github.com/spf13/viper v1.19.0
2020 go.uber.org/zap v1.27.0
@@ -25,90 +25,89 @@ require (
2525)
2626
2727require (
28- cloud.google.com/go v0.116.0 // indirect
29- cloud.google.com/go/auth v0.14.1 // indirect
30- cloud.google.com/go/auth/oauth2adapt v0.2.7 // indirect
28+ cloud.google.com/go v0.118.3 // indirect
29+ cloud.google.com/go/auth v0.15.0 // indirect
30+ cloud.google.com/go/auth/oauth2adapt v0.2.8 // indirect
3131 cloud.google.com/go/compute/metadata v0.6.0 // indirect
32- cloud.google.com/go/iam v1.2.2 // indirect
33- cloud.google.com/go/kms v1.20.5 // indirect
34- cloud.google.com/go/longrunning v0.6.2 // indirect
32+ cloud.google.com/go/iam v1.4.1 // indirect
33+ cloud.google.com/go/kms v1.21.1 // indirect
34+ cloud.google.com/go/longrunning v0.6.5 // indirect
3535 dario.cat/mergo v1.0.1 // indirect
3636 filippo.io/edwards25519 v1.1.0 // indirect
37- github.com/Azure/azure-sdk-for-go/sdk/azcore v1.17.0 // indirect
38- github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.8.1 // indirect
37+ github.com/Azure/azure-sdk-for-go/sdk/azcore v1.17.1 // indirect
38+ github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.8.2 // indirect
3939 github.com/Azure/azure-sdk-for-go/sdk/internal v1.10.0 // indirect
40- github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys v1.3.0 // indirect
41- github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal v1.1.0 // indirect
40+ github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys v1.3.1 // indirect
41+ github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal v1.1.1 // indirect
4242 github.com/Azure/go-ansiterm v0.0.0-20250102033503-faa5f7b0171c // indirect
43- github.com/AzureAD/microsoft-authentication-library-for-go v1.3.2 // indirect
44- github.com/BurntSushi/toml v1.4 .0 // indirect
43+ github.com/AzureAD/microsoft-authentication-library-for-go v1.3.3 // indirect
44+ github.com/BurntSushi/toml v1.5 .0 // indirect
4545 github.com/Microsoft/go-winio v0.6.2 // indirect
4646 github.com/Microsoft/hcsshim v0.12.9 // indirect
47- github.com/ProtonMail/go-crypto v1.1.5 // indirect
47+ github.com/ProtonMail/go-crypto v1.1.6 // indirect
4848 github.com/VividCortex/ewma v1.2.0 // indirect
4949 github.com/acarl005/stripansi v0.0.0-20180116102854-5a71ef0e047d // indirect
5050 github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect
5151 github.com/aws/aws-sdk-go v1.55.6 // indirect
52- github.com/aws/aws-sdk-go-v2 v1.36.1 // indirect
53- github.com/aws/aws-sdk-go-v2/config v1.29.6 // indirect
54- github.com/aws/aws-sdk-go-v2/credentials v1.17.59 // indirect
55- github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.28 // indirect
56- github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.32 // indirect
57- github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.32 // indirect
58- github.com/aws/aws-sdk-go-v2/internal/ini v1.8.2 // indirect
59- github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.12.2 // indirect
60- github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.12.13 // indirect
61- github.com/aws/aws-sdk-go-v2/service/kms v1.37.18 // indirect
62- github.com/aws/aws-sdk-go-v2/service/sso v1.24.15 // indirect
63- github.com/aws/aws-sdk-go-v2/service/ssooidc v1.28.14 // indirect
64- github.com/aws/aws-sdk-go-v2/service/sts v1.33.14 // indirect
52+ github.com/aws/aws-sdk-go-v2 v1.36.3 // indirect
53+ github.com/aws/aws-sdk-go-v2/config v1.29.10 // indirect
54+ github.com/aws/aws-sdk-go-v2/credentials v1.17.63 // indirect
55+ github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.30 // indirect
56+ github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.34 // indirect
57+ github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.34 // indirect
58+ github.com/aws/aws-sdk-go-v2/internal/ini v1.8.3 // indirect
59+ github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.12.3 // indirect
60+ github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.12.15 // indirect
61+ github.com/aws/aws-sdk-go-v2/service/kms v1.38.1 // indirect
62+ github.com/aws/aws-sdk-go-v2/service/sso v1.25.1 // indirect
63+ github.com/aws/aws-sdk-go-v2/service/ssooidc v1.29.2 // indirect
64+ github.com/aws/aws-sdk-go-v2/service/sts v1.33.17 // indirect
6565 github.com/aws/smithy-go v1.22.2 // indirect
6666 github.com/blang/semver v3.5.1+incompatible // indirect
6767 github.com/blang/semver/v4 v4.0.0 // indirect
6868 github.com/cenkalti/backoff/v4 v4.3.0 // indirect
6969 github.com/chzyer/readline v1.5.1 // indirect
7070 github.com/cloudflare/circl v1.6.0 // indirect
71- github.com/containerd/cgroups/v3 v3.0.3 // indirect
71+ github.com/containerd/cgroups/v3 v3.0.5 // indirect
7272 github.com/containerd/errdefs v1.0.0 // indirect
7373 github.com/containerd/errdefs/pkg v0.3.0 // indirect
7474 github.com/containerd/log v0.1.0 // indirect
7575 github.com/containerd/platforms v1.0.0-rc.1 // indirect
7676 github.com/containerd/stargz-snapshotter/estargz v0.16.3 // indirect
7777 github.com/containerd/typeurl/v2 v2.2.3 // indirect
78- github.com/containers/buildah v1.39.4 // indirect
79- github.com/containers/image/v5 v5.34.3 // indirect
78+ github.com/containers/buildah v1.40.0 // indirect
79+ github.com/containers/image/v5 v5.35.0 // indirect
8080 github.com/containers/libtrust v0.0.0-20230121012942-c1716e8a8d01 // indirect
8181 github.com/containers/ocicrypt v1.2.1 // indirect
8282 github.com/containers/psgo v1.9.0 // indirect
83- github.com/containers/storage v1.57.2 // indirect
83+ github.com/containers/storage v1.58.0 // indirect
8484 github.com/coreos/go-systemd/v22 v22.5.1-0.20231103132048-7d375ecc2b09 // indirect
8585 github.com/creack/pty v1.1.19 // indirect
86- github.com/cyberphone/json-canonicalization v0.0.0-20231217050601-ba74d44ecf5f // indirect
86+ github.com/cyberphone/json-canonicalization v0.0.0-20241213102144-19d51d7fe467 // indirect
8787 github.com/cyphar/filepath-securejoin v0.4.1 // indirect
8888 github.com/digitorus/pkcs7 v0.0.0-20230818184609-3a137a874352 // indirect
8989 github.com/digitorus/timestamp v0.0.0-20231217203849-220c5c2851b7 // indirect
9090 github.com/disiqueira/gotree/v3 v3.0.2 // indirect
9191 github.com/distribution/reference v0.6.0 // indirect
92- github.com/docker/cli v27.5.1 +incompatible // indirect
92+ github.com/docker/cli v28.0.4 +incompatible // indirect
9393 github.com/docker/distribution v2.8.3+incompatible // indirect
94- github.com/docker/docker v27.5 .1+incompatible // indirect
95- github.com/docker/docker-credential-helpers v0.8.2 // indirect
94+ github.com/docker/docker v28.1 .1+incompatible // indirect
95+ github.com/docker/docker-credential-helpers v0.9.3 // indirect
9696 github.com/docker/go-connections v0.5.0 // indirect
9797 github.com/docker/go-units v0.5.0 // indirect
9898 github.com/dustin/go-humanize v1.0.1 // indirect
9999 github.com/emirpasic/gods v1.18.1 // indirect
100100 github.com/felixge/httpsnoop v1.0.4 // indirect
101- github.com/fsnotify/fsnotify v1.8 .0 // indirect
101+ github.com/fsnotify/fsnotify v1.9 .0 // indirect
102102 github.com/github/smimesign v0.2.0 // indirect
103103 github.com/go-chi/chi v4.1.2+incompatible // indirect
104104 github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect
105105 github.com/go-git/go-billy/v5 v5.6.2 // indirect
106- github.com/go-jose/go-jose/v3 v3.0.4 // indirect
107106 github.com/go-jose/go-jose/v4 v4.0.5 // indirect
108107 github.com/go-logr/logr v1.4.2 // indirect
109108 github.com/go-logr/stdr v1.2.2 // indirect
110109 github.com/go-openapi/analysis v0.23.0 // indirect
111- github.com/go-openapi/errors v0.22.0 // indirect
110+ github.com/go-openapi/errors v0.22.1 // indirect
112111 github.com/go-openapi/jsonpointer v0.21.0 // indirect
113112 github.com/go-openapi/jsonreference v0.21.0 // indirect
114113 github.com/go-openapi/loads v0.22.0 // indirect
@@ -130,7 +129,7 @@ require (
130129 github.com/google/s2a-go v0.1.9 // indirect
131130 github.com/google/trillian v1.7.1 // indirect
132131 github.com/google/uuid v1.6.0 // indirect
133- github.com/googleapis/enterprise-certificate-proxy v0.3.4 // indirect
132+ github.com/googleapis/enterprise-certificate-proxy v0.3.6 // indirect
134133 github.com/googleapis/gax-go/v2 v2.14.1 // indirect
135134 github.com/gorilla/mux v1.8.1 // indirect
136135 github.com/gorilla/schema v1.4.1 // indirect
@@ -155,7 +154,7 @@ require (
155154 github.com/josharian/intern v1.0.0 // indirect
156155 github.com/json-iterator/go v1.1.12 // indirect
157156 github.com/kevinburke/ssh_config v1.2.0 // indirect
158- github.com/klauspost/compress v1.17.11 // indirect
157+ github.com/klauspost/compress v1.18.0 // indirect
159158 github.com/klauspost/pgzip v1.2.6 // indirect
160159 github.com/kr/fs v0.1.0 // indirect
161160 github.com/kylelemons/godebug v1.1.0 // indirect
@@ -172,7 +171,7 @@ require (
172171 github.com/moby/docker-image-spec v1.3.1 // indirect
173172 github.com/moby/sys/capability v0.4.0 // indirect
174173 github.com/moby/sys/mountinfo v0.7.2 // indirect
175- github.com/moby/sys/user v0.3 .0 // indirect
174+ github.com/moby/sys/user v0.4 .0 // indirect
176175 github.com/moby/sys/userns v0.1.0 // indirect
177176 github.com/moby/term v0.5.2 // indirect
178177 github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
@@ -181,18 +180,19 @@ require (
181180 github.com/nozzle/throttler v0.0.0-20180817012639-2ea982251481 // indirect
182181 github.com/nxadm/tail v1.4.11 // indirect
183182 github.com/oklog/ulid v1.3.1 // indirect
183+ github.com/opencontainers/cgroups v0.0.1 // indirect
184184 github.com/opencontainers/go-digest v1.0.0 // indirect
185- github.com/opencontainers/image-spec v1.1.0 // indirect
185+ github.com/opencontainers/image-spec v1.1.1 // indirect
186186 github.com/opencontainers/runc v1.2.6 // indirect
187- github.com/opencontainers/runtime-tools v0.9.1-0.20241108202711-f7e3563b0271 // indirect
188- github.com/opencontainers/selinux v1.11.1 // indirect
187+ github.com/opencontainers/runtime-tools v0.9.1-0.20250303011046-260e151b8552 // indirect
188+ github.com/opencontainers/selinux v1.12.0 // indirect
189189 github.com/opentracing/opentracing-go v1.2.0 // indirect
190190 github.com/ostreedev/ostree-go v0.0.0-20210805093236-719684c64e4f // indirect
191191 github.com/pelletier/go-toml/v2 v2.2.3 // indirect
192192 github.com/pjbgf/sha1cd v0.3.2 // indirect
193193 github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c // indirect
194194 github.com/pkg/errors v0.9.1 // indirect
195- github.com/pkg/sftp v1.13.7 // indirect
195+ github.com/pkg/sftp v1.13.9 // indirect
196196 github.com/proglottis/gpgme v0.1.4 // indirect
197197 github.com/rivo/uniseg v0.4.7 // indirect
198198 github.com/robfig/cron/v3 v3.0.1 // indirect
@@ -205,13 +205,13 @@ require (
205205 github.com/shibumi/go-pathspec v1.3.0 // indirect
206206 github.com/sigstore/cosign/v2 v2.4.3 // indirect
207207 github.com/sigstore/fulcio v1.6.6 // indirect
208- github.com/sigstore/protobuf-specs v0.4.0 // indirect
209- github.com/sigstore/sigstore v1.9.1 // indirect
208+ github.com/sigstore/protobuf-specs v0.4.1 // indirect
209+ github.com/sigstore/sigstore v1.9.3 // indirect
210210 github.com/sigstore/sigstore-go v0.7.0 // indirect
211- github.com/sigstore/sigstore/pkg/signature/kms/aws v1.8.15 // indirect
212- github.com/sigstore/sigstore/pkg/signature/kms/azure v1.8.15 // indirect
213- github.com/sigstore/sigstore/pkg/signature/kms/gcp v1.8.15 // indirect
214- github.com/sigstore/sigstore/pkg/signature/kms/hashivault v1.8.15 // indirect
211+ github.com/sigstore/sigstore/pkg/signature/kms/aws v1.9.1 // indirect
212+ github.com/sigstore/sigstore/pkg/signature/kms/azure v1.9.1 // indirect
213+ github.com/sigstore/sigstore/pkg/signature/kms/gcp v1.9.1 // indirect
214+ github.com/sigstore/sigstore/pkg/signature/kms/hashivault v1.9.1 // indirect
215215 github.com/sigstore/timestamp-authority v1.2.4 // indirect
216216 github.com/sirupsen/logrus v1.9.3 // indirect
217217 github.com/skeema/knownhosts v1.3.1 // indirect
@@ -222,7 +222,7 @@ require (
222222 github.com/spf13/pflag v1.0.6 // indirect
223223 github.com/stefanberger/go-pkcs11uri v0.0.0-20230803200340-78284954bff6 // indirect
224224 github.com/subosito/gotenv v1.6.0 // indirect
225- github.com/sylabs/sif/v2 v2.20.2 // indirect
225+ github.com/sylabs/sif/v2 v2.21.1 // indirect
226226 github.com/syndtr/gocapability v0.0.0-20200815063812-42c35b437635 // indirect
227227 github.com/syndtr/goleveldb v1.0.1-0.20220721030215-126854af5e6d // indirect
228228 github.com/tchap/go-patricia/v2 v2.3.2 // indirect
@@ -234,46 +234,45 @@ require (
234234 github.com/titanous/rocacheck v0.0.0-20171023193734-afe73141d399 // indirect
235235 github.com/transparency-dev/merkle v0.0.2 // indirect
236236 github.com/ulikunitz/xz v0.5.12 // indirect
237- github.com/vbatts/tar-split v0.11.7 // indirect
238- github.com/vbauerster/mpb/v8 v8.9.1 // indirect
237+ github.com/vbatts/tar-split v0.12.1 // indirect
238+ github.com/vbauerster/mpb/v8 v8.9.3 // indirect
239239 github.com/xanzy/ssh-agent v0.3.3 // indirect
240240 go.mongodb.org/mongo-driver v1.15.1 // indirect
241241 go.opencensus.io v0.24.0 // indirect
242242 go.opentelemetry.io/auto/sdk v1.1.0 // indirect
243- go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.58 .0 // indirect
243+ go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.59 .0 // indirect
244244 go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.59.0 // indirect
245245 go.opentelemetry.io/otel v1.34.0 // indirect
246246 go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.34.0 // indirect
247247 go.opentelemetry.io/otel/metric v1.34.0 // indirect
248248 go.opentelemetry.io/otel/trace v1.34.0 // indirect
249249 go.opentelemetry.io/proto/otlp v1.5.0 // indirect
250- go.step.sm/crypto v0.57 .0 // indirect
250+ go.step.sm/crypto v0.60 .0 // indirect
251251 go.uber.org/multierr v1.11.0 // indirect
252- golang.org/x/crypto v0.36 .0 // indirect
252+ golang.org/x/crypto v0.38 .0 // indirect
253253 golang.org/x/exp v0.0.0-20250103183323-7d7fa50e5329 // indirect
254- golang.org/x/mod v0.22 .0 // indirect
255- golang.org/x/net v0.36 .0 // indirect
256- golang.org/x/oauth2 v0.28 .0 // indirect
257- golang.org/x/sync v0.12 .0 // indirect
258- golang.org/x/sys v0.31 .0 // indirect
259- golang.org/x/term v0.30 .0 // indirect
260- golang.org/x/text v0.23 .0 // indirect
261- golang.org/x/time v0.10 .0 // indirect
262- google.golang.org/api v0.221 .0 // indirect
263- google.golang.org/genproto v0.0.0-20241118233622-e639e219e697 // indirect
264- google.golang.org/genproto/googleapis/api v0.0.0-20250115164207-1a7da9e5054f // indirect
265- google.golang.org/genproto/googleapis/rpc v0.0.0-20250207221924-e9438ea467c6 // indirect
266- google.golang.org/grpc v1.70 .0 // indirect
267- google.golang.org/protobuf v1.36.5 // indirect
254+ golang.org/x/mod v0.24 .0 // indirect
255+ golang.org/x/net v0.39 .0 // indirect
256+ golang.org/x/oauth2 v0.29 .0 // indirect
257+ golang.org/x/sync v0.14 .0 // indirect
258+ golang.org/x/sys v0.33 .0 // indirect
259+ golang.org/x/term v0.32 .0 // indirect
260+ golang.org/x/text v0.25 .0 // indirect
261+ golang.org/x/time v0.11 .0 // indirect
262+ google.golang.org/api v0.228 .0 // indirect
263+ google.golang.org/genproto v0.0.0-20250303144028-a0af3efb3deb // indirect
264+ google.golang.org/genproto/googleapis/api v0.0.0-20250303144028-a0af3efb3deb // indirect
265+ google.golang.org/genproto/googleapis/rpc v0.0.0-20250313205543-e70fdf4c4cb4 // indirect
266+ google.golang.org/grpc v1.71 .0 // indirect
267+ google.golang.org/protobuf v1.36.6 // indirect
268268 gopkg.in/inf.v0 v0.9.1 // indirect
269269 gopkg.in/ini.v1 v1.67.0 // indirect
270270 gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7 // indirect
271271 gopkg.in/warnings.v0 v0.1.2 // indirect
272272 gopkg.in/yaml.v2 v2.4.0 // indirect
273- gotest.tools/v3 v3.5.2 // indirect
274273 k8s.io/klog/v2 v2.130.1 // indirect
275274 k8s.io/utils v0.0.0-20240502163921-fe8a2dddb1d0 // indirect
276275 sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd // indirect
277276 sigs.k8s.io/structured-merge-diff/v4 v4.4.1 // indirect
278- tags.cncf.io/container-device-interface v0.8.0 // indirect
277+ tags.cncf.io/container-device-interface v1.0.1 // indirect
279278)
0 commit comments