@@ -18,20 +18,19 @@ require (
1818 github.com/go-git/go-billy/v5 v5.6.2
1919 github.com/go-git/go-git/v5 v5.13.1
2020 github.com/google/go-cmp v0.7.0
21- github.com/google/go-containerregistry v0.20.5
21+ github.com/google/go-containerregistry v0.20.7
2222 github.com/google/go-github/v41 v41.0.0
2323 github.com/lmittmann/tint v1.0.7
2424 github.com/sigstore/cosign/v2 v2.5.0
2525 github.com/stretchr/testify v1.10.0
2626 github.com/urfave/cli v1.22.16
2727 golang.org/x/exp v0.0.0-20241204233417-43b7b7cde48d
28- golang.org/x/oauth2 v0.30 .0
28+ golang.org/x/oauth2 v0.33 .0
2929 gopkg.in/yaml.v2 v2.4.0
3030 gopkg.in/yaml.v3 v3.0.1
3131 helm.sh/helm/v3 v3.16.3 // DO NOT upgrade - v4 breaks OCI tags with '+' character
3232 sigs.k8s.io/release-utils v0.11.1
3333 sigs.k8s.io/yaml v1.4.0
34-
3534)
3635
3736// Block Helm v4 - breaks OCI tag validation for versions with '+' character
@@ -64,7 +63,7 @@ require (
6463 github.com/containerd/errdefs v1.0.0 // indirect
6564 github.com/containerd/log v0.1.0 // indirect
6665 github.com/containerd/platforms v1.0.0-rc.1 // indirect
67- github.com/containerd/stargz-snapshotter/estargz v0.16.3 // indirect
66+ github.com/containerd/stargz-snapshotter/estargz v0.18.1 // indirect
6867 github.com/containerd/typeurl/v2 v2.2.3 // indirect
6968 github.com/cpuguy83/go-md2man/v2 v2.0.7 // indirect
7069 github.com/creack/pty v1.1.21 // indirect
@@ -74,9 +73,9 @@ require (
7473 github.com/digitorus/pkcs7 v0.0.0-20230818184609-3a137a874352 // indirect
7574 github.com/digitorus/timestamp v0.0.0-20231217203849-220c5c2851b7 // indirect
7675 github.com/distribution/reference v0.6.0 // indirect
77- github.com/docker/cli v28.1.1 +incompatible // indirect
76+ github.com/docker/cli v29.0.3 +incompatible // indirect
7877 github.com/docker/distribution v2.8.3+incompatible // indirect
79- github.com/docker/docker v28.1.1 +incompatible // indirect
78+ github.com/docker/docker v28.5.2 +incompatible // indirect
8079 github.com/docker/docker-credential-helpers v0.9.3 // indirect
8180 github.com/docker/go-connections v0.5.0 // indirect
8281 github.com/docker/go-events v0.0.0-20241114183025-9940093291f5 // indirect
@@ -96,7 +95,7 @@ require (
9695 github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect
9796 github.com/go-gorp/gorp/v3 v3.1.0 // indirect
9897 github.com/go-jose/go-jose/v4 v4.0.5 // indirect
99- github.com/go-logr/logr v1.4.2 // indirect
98+ github.com/go-logr/logr v1.4.3 // indirect
10099 github.com/go-logr/stdr v1.2.2 // indirect
101100 github.com/go-openapi/analysis v0.23.0 // indirect
102101 github.com/go-openapi/errors v0.22.1 // indirect
@@ -138,7 +137,7 @@ require (
138137 github.com/josharian/intern v1.0.0 // indirect
139138 github.com/json-iterator/go v1.1.12 // indirect
140139 github.com/kevinburke/ssh_config v1.2.0 // indirect
141- github.com/klauspost/compress v1.18.0 // indirect
140+ github.com/klauspost/compress v1.18.1 // indirect
142141 github.com/lann/builder v0.0.0-20180802200727-47ae307949d0 // indirect
143142 github.com/lann/ps v0.0.0-20150810152359-62de8c46ede0 // indirect
144143 github.com/letsencrypt/boulder v0.0.0-20240620165639-de9c06129bec // indirect
@@ -196,15 +195,15 @@ require (
196195 github.com/sourcegraph/conc v0.3.0 // indirect
197196 github.com/spf13/afero v1.12.0 // indirect
198197 github.com/spf13/cast v1.7.1 // indirect
199- github.com/spf13/cobra v1.9 .1 // indirect
200- github.com/spf13/pflag v1.0.6 // indirect
198+ github.com/spf13/cobra v1.10 .1 // indirect
199+ github.com/spf13/pflag v1.0.9 // indirect
201200 github.com/spf13/viper v1.20.1 // indirect
202201 github.com/subosito/gotenv v1.6.0 // indirect
203202 github.com/theupdateframework/go-tuf v0.7.0 // indirect
204203 github.com/theupdateframework/go-tuf/v2 v2.0.2 // indirect
205204 github.com/titanous/rocacheck v0.0.0-20171023193734-afe73141d399 // indirect
206205 github.com/transparency-dev/merkle v0.0.2 // indirect
207- github.com/vbatts/tar-split v0.12.1 // indirect
206+ github.com/vbatts/tar-split v0.12.2 // indirect
208207 github.com/x448/float16 v0.8.4 // indirect
209208 github.com/xanzy/ssh-agent v0.3.3 // indirect
210209 github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb // indirect
@@ -213,19 +212,19 @@ require (
213212 github.com/xlab/treeprint v1.2.0 // indirect
214213 go.mongodb.org/mongo-driver v1.14.0 // indirect
215214 go.opentelemetry.io/auto/sdk v1.1.0 // indirect
216- go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.60 .0 // indirect
217- go.opentelemetry.io/otel v1.35 .0 // indirect
215+ go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.61 .0 // indirect
216+ go.opentelemetry.io/otel v1.36 .0 // indirect
218217 go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.32.0 // indirect
219218 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.34.0 // indirect
220- go.opentelemetry.io/otel/metric v1.35 .0 // indirect
221- go.opentelemetry.io/otel/trace v1.35 .0 // indirect
219+ go.opentelemetry.io/otel/metric v1.36 .0 // indirect
220+ go.opentelemetry.io/otel/trace v1.36 .0 // indirect
222221 go.uber.org/multierr v1.11.0 // indirect
223222 go.uber.org/zap v1.27.0 // indirect
224223 golang.org/x/crypto v0.38.0 // indirect
225- golang.org/x/mod v0.24 .0 // indirect
224+ golang.org/x/mod v0.30 .0 // indirect
226225 golang.org/x/net v0.40.0 // indirect
227- golang.org/x/sync v0.14 .0 // indirect
228- golang.org/x/sys v0.33 .0 // indirect
226+ golang.org/x/sync v0.18 .0 // indirect
227+ golang.org/x/sys v0.38 .0 // indirect
229228 golang.org/x/term v0.32.0 // indirect
230229 golang.org/x/text v0.25.0 // indirect
231230 golang.org/x/time v0.11.0 // indirect
0 commit comments