2018-10-29 02:54:15 +02:00
|
|
|
module github.com/goreleaser/goreleaser
|
|
|
|
|
|
2023-02-05 18:39:39 +02:00
|
|
|
go 1.20
|
2019-09-09 15:17:30 +02:00
|
|
|
|
2018-10-29 02:54:15 +02:00
|
|
|
require (
|
2022-01-10 15:57:19 +02:00
|
|
|
code.gitea.io/sdk/gitea v0.15.1
|
2023-04-23 18:52:42 +02:00
|
|
|
github.com/Masterminds/semver/v3 v3.2.1
|
2023-06-12 13:56:14 +02:00
|
|
|
github.com/atc0005/go-teams-notify/v2 v2.7.1
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.0.0-20220517224237-e6f29200ae04
|
2022-08-17 15:58:18 +02:00
|
|
|
github.com/caarlos0/ctrlc v1.2.0
|
2023-04-07 03:50:09 +02:00
|
|
|
github.com/caarlos0/env/v8 v8.0.0
|
2022-01-10 16:10:35 +02:00
|
|
|
github.com/caarlos0/go-reddit/v3 v3.0.1
|
2021-03-22 13:45:18 +02:00
|
|
|
github.com/caarlos0/go-shellwords v1.0.12
|
2023-04-30 19:19:55 +02:00
|
|
|
github.com/caarlos0/go-version v0.1.1
|
2023-05-03 14:52:49 +02:00
|
|
|
github.com/caarlos0/log v0.4.1
|
2023-04-25 13:23:09 +02:00
|
|
|
github.com/charmbracelet/keygen v0.4.2
|
2023-03-20 03:47:02 +02:00
|
|
|
github.com/charmbracelet/lipgloss v0.7.1
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/chrismellard/docker-credential-acr-env v0.0.0-20220327082430-c57b701bfc08
|
2021-12-21 05:03:48 +02:00
|
|
|
github.com/dghubble/go-twitter v0.0.0-20211115160449-93a8679adecb
|
2022-12-08 14:41:38 +02:00
|
|
|
github.com/dghubble/oauth1 v0.7.2
|
2023-06-26 18:24:57 +02:00
|
|
|
github.com/disgoorg/disgo v0.16.7
|
2022-10-17 13:52:12 +02:00
|
|
|
github.com/disgoorg/snowflake/v2 v2.0.1
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/distribution/distribution/v3 v3.0.0-20221021092657-c47a966fded8
|
2021-10-29 19:02:33 +02:00
|
|
|
github.com/go-telegram-bot-api/telegram-bot-api v4.6.4+incompatible
|
2023-03-20 14:58:29 +02:00
|
|
|
github.com/google/go-containerregistry v0.14.0
|
2023-02-24 14:58:33 +02:00
|
|
|
github.com/google/go-github/v50 v50.1.0
|
2023-03-29 19:38:57 +02:00
|
|
|
github.com/google/ko v0.13.0
|
2022-01-10 15:29:04 +02:00
|
|
|
github.com/google/uuid v1.3.0
|
2022-02-12 04:17:13 +02:00
|
|
|
github.com/goreleaser/fileglob v1.3.0
|
2023-06-26 18:20:47 +02:00
|
|
|
github.com/goreleaser/nfpm/v2 v2.31.0
|
2022-12-28 17:24:21 +02:00
|
|
|
github.com/hashicorp/go-multierror v1.1.1
|
feat(deps): bump github.com/imdario/mergo from 0.3.15 to 0.3.16 (#4045)
Bumps [github.com/imdario/mergo](https://github.com/imdario/mergo) from
0.3.15 to 0.3.16.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/imdario/mergo/releases">github.com/imdario/mergo's
releases</a>.</em></p>
<blockquote>
<h2>Announcement: v1.0.0 will be released on June 18th</h2>
<p><em>This release doesn't contain code changes.</em></p>
<p>After 10 years, with many corner cases covered, very few issues
pending (at least, comparing them with the usage of the library as part
of Docker, Kubernetes, Datadog's agent, etc.), and a very stable API, I
think it's time to release a 1.0.0 version.</p>
<p>This version will be released under a vanity URL: dario.cat/mergo</p>
<p>PS: although I'll make sure that github.com/imdario/mergo will be
available, I'm going to also change my GitHub handle, so expect for a
few minutes to not be able to pull from github.com/imdario as I fork it
from the new handle to the old one.</p>
<p>PS2: I'm creating a discussion for this release to make sure we can
have a conversation around the topic, and anything else about Mergo that
you care about.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/imdario/mergo/commit/14fe2b165b83359196f820886a2b24f2771729e9"><code>14fe2b1</code></a>
fix: OpenSSF scorecard generation</li>
<li><a
href="https://github.com/imdario/mergo/commit/4cde94b0b56dabb656d2a925ebc9b57627205f3a"><code>4cde94b</code></a>
fix: remove Travis link and fix tests actions</li>
<li><a
href="https://github.com/imdario/mergo/commit/df62a52b84056251a249831ef16151f42184b08b"><code>df62a52</code></a>
chore: README and GitHub actions</li>
<li>See full diff in <a
href="https://github.com/imdario/mergo/compare/v0.3.15...v0.3.16">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-29 15:01:51 +02:00
|
|
|
github.com/imdario/mergo v0.3.16
|
2022-11-09 13:35:33 +02:00
|
|
|
github.com/invopop/jsonschema v0.7.0
|
chore(deps): bump github.com/jarcoal/httpmock from 1.2.0 to 1.3.0 (#3760)
Bumps [github.com/jarcoal/httpmock](https://github.com/jarcoal/httpmock)
from 1.2.0 to 1.3.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/jarcoal/httpmock/releases">github.com/jarcoal/httpmock's
releases</a>.</em></p>
<blockquote>
<h2>v1.3.0</h2>
<p>New features:</p>
<ul>
<li>new <a
href="https://pkg.go.dev/github.com/jarcoal/httpmock#Matcher">matcher
feature</a>, allowing to create a <a
href="https://pkg.go.dev/github.com/jarcoal/httpmock#Responder">Responder</a>
based on <a
href="https://pkg.go.dev/net/http#Request">net/http.Request</a> content
(header or body for example), so not only on method and URL as before.
See the following new registering functions & methods:
<ul>
<li><a
href="https://pkg.go.dev/github.com/jarcoal/httpmock#RegisterMatcherResponder">RegisterMatcherResponder</a>
& <a
href="https://pkg.go.dev/github.com/jarcoal/httpmock#MockTransport.RegisterMatcherResponder">MockTransport.RegisterMatcherResponder</a>,</li>
<li><a
href="https://pkg.go.dev/github.com/jarcoal/httpmock#RegisterRegexpMatcherResponder">RegisterRegexpMatcherResponder</a>
& <a
href="https://pkg.go.dev/github.com/jarcoal/httpmock#MockTransport.RegisterRegexpMatcherResponder">MockTransport.RegisterRegexpMatcherResponder</a>,</li>
<li><a
href="https://pkg.go.dev/github.com/jarcoal/httpmock#RegisterMatcherResponderWithQuery">RegisterMatcherResponderWithQuery</a>
& <a
href="https://pkg.go.dev/github.com/jarcoal/httpmock#MockTransport.RegisterMatcherResponderWithQuery">MockTransport.RegisterMatcherResponderWithQuery</a>;</li>
</ul>
</li>
<li>add following <a
href="https://pkg.go.dev/github.com/jarcoal/httpmock#Responder">Responder</a>
methods, allowing to easily add some headers to the returned <a
href="https://pkg.go.dev/net/http#Response">net/http.Response</a>
without the need to craft a <a
href="https://pkg.go.dev/github.com/jarcoal/httpmock#Responder">Responder</a>
by hand:
<ul>
<li><a
href="https://pkg.go.dev/github.com/jarcoal/httpmock#Responder.SetContentLength">SetContentLength</a>,</li>
<li><a
href="https://pkg.go.dev/github.com/jarcoal/httpmock#Responder.HeaderAdd">HeaderAdd</a>,</li>
<li><a
href="https://pkg.go.dev/github.com/jarcoal/httpmock#Responder.HeaderSet">HeaderSet</a>.</li>
</ul>
</li>
</ul>
<p>Miscellaneous:</p>
<ul>
<li>documentation now uses new go1.19 doc features;</li>
<li>go minimal version required is now 1.13;</li>
<li>CI tests using go1.20 & golangci-lint v1.51.0.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/jarcoal/httpmock/commit/e977d517e968810981a6178211fd88ccf508857a"><code>e977d51</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/jarcoal/httpmock/issues/139">#139</a>
from jarcoal/go120</li>
<li><a
href="https://github.com/jarcoal/httpmock/commit/df3afac771d156978fe08468e6d5470a86b7a75c"><code>df3afac</code></a>
ci: test with go1.20</li>
<li><a
href="https://github.com/jarcoal/httpmock/commit/837f061d506d01fe5154306d55a0a7ce046523de"><code>837f061</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/jarcoal/httpmock/issues/138">#138</a>
from jarcoal/headers</li>
<li><a
href="https://github.com/jarcoal/httpmock/commit/d4ab20c68d8b0c8ac08908ef5dc7bbc80d9b462f"><code>d4ab20c</code></a>
feat: add Responder.{SetContentLength,HeaderAdd,HeaderSet} methods</li>
<li><a
href="https://github.com/jarcoal/httpmock/commit/db50b7669db74ba622c08cb8be04231521d194a9"><code>db50b76</code></a>
perf(matchers): simplify http.NoBody case</li>
<li><a
href="https://github.com/jarcoal/httpmock/commit/b9e83a2877b27d4625b82d138c3ff57fb47f3757"><code>b9e83a2</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/jarcoal/httpmock/issues/136">#136</a>
from jarcoal/matchers</li>
<li><a
href="https://github.com/jarcoal/httpmock/commit/f69cd5e7f9cf588f1052ed212557a6e381ffcfa7"><code>f69cd5e</code></a>
feat: introduce new matchers feature</li>
<li><a
href="https://github.com/jarcoal/httpmock/commit/a55e9610f3ebbdd6e579dc9233d035e71042436f"><code>a55e961</code></a>
refactor: go1.13 required now, so drop go1.9 to go1.12 support</li>
<li><a
href="https://github.com/jarcoal/httpmock/commit/f6c487638cbd1275690adef582e09253a3c559da"><code>f6c4876</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/jarcoal/httpmock/issues/134">#134</a>
from jarcoal/go119</li>
<li><a
href="https://github.com/jarcoal/httpmock/commit/638f16c7002a28ec479fb817d266c96a50c2e17f"><code>638f16c</code></a>
docs: uses new go1.19 doc features</li>
<li>Additional commits viewable in <a
href="https://github.com/jarcoal/httpmock/compare/v1.2.0...v1.3.0">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-07 14:45:00 +02:00
|
|
|
github.com/jarcoal/httpmock v1.3.0
|
2023-05-11 14:38:19 +02:00
|
|
|
github.com/klauspost/pgzip v1.2.6
|
2022-11-18 01:40:00 +02:00
|
|
|
github.com/mattn/go-mastodon v0.0.6
|
2019-06-29 16:02:40 +02:00
|
|
|
github.com/mitchellh/go-homedir v1.1.0
|
2022-06-22 13:46:38 +02:00
|
|
|
github.com/muesli/mango-cobra v1.2.0
|
2022-01-18 15:17:52 +02:00
|
|
|
github.com/muesli/roff v0.1.0
|
2023-03-20 03:47:02 +02:00
|
|
|
github.com/muesli/termenv v0.15.1
|
2023-04-23 19:09:35 +02:00
|
|
|
github.com/ory/dockertest/v3 v3.10.0
|
2023-04-23 18:52:54 +02:00
|
|
|
github.com/slack-go/slack v0.12.2
|
2023-04-05 14:21:25 +02:00
|
|
|
github.com/spf13/cobra v1.7.0
|
2023-05-31 15:52:51 +02:00
|
|
|
github.com/stretchr/testify v1.8.4
|
2022-12-13 14:44:34 +02:00
|
|
|
github.com/ulikunitz/xz v0.5.11
|
2022-08-22 14:29:27 +02:00
|
|
|
github.com/withfig/autocomplete-tools/integrations/cobra v1.2.1
|
2023-06-21 20:56:09 +02:00
|
|
|
github.com/xanzy/go-gitlab v0.86.0
|
2023-06-20 14:04:08 +02:00
|
|
|
gocloud.dev v0.30.0
|
2023-06-14 14:36:28 +02:00
|
|
|
golang.org/x/crypto v0.10.0
|
2023-06-14 14:48:43 +02:00
|
|
|
golang.org/x/oauth2 v0.9.0
|
2023-06-15 16:23:43 +02:00
|
|
|
golang.org/x/sync v0.3.0
|
2023-06-14 14:36:28 +02:00
|
|
|
golang.org/x/text v0.10.0
|
2023-06-16 18:24:19 +02:00
|
|
|
golang.org/x/tools v0.10.0
|
2021-10-26 20:02:03 +02:00
|
|
|
gopkg.in/mail.v2 v2.3.1
|
2022-06-02 14:01:47 +02:00
|
|
|
gopkg.in/yaml.v3 v3.0.1
|
2021-10-26 20:02:03 +02:00
|
|
|
)
|
|
|
|
|
|
2021-08-25 01:49:11 +02:00
|
|
|
require (
|
2023-06-20 14:04:08 +02:00
|
|
|
cloud.google.com/go v0.110.2 // indirect
|
|
|
|
|
cloud.google.com/go/compute v1.20.0 // indirect
|
2023-02-05 17:09:06 +02:00
|
|
|
cloud.google.com/go/compute/metadata v0.2.3 // indirect
|
2023-06-20 14:04:08 +02:00
|
|
|
cloud.google.com/go/iam v1.1.0 // indirect
|
|
|
|
|
cloud.google.com/go/kms v1.12.0 // indirect
|
|
|
|
|
cloud.google.com/go/storage v1.30.1 // indirect
|
2021-11-14 03:23:11 +02:00
|
|
|
github.com/AlekSi/pointer v1.2.0 // indirect
|
2023-03-29 19:38:57 +02:00
|
|
|
github.com/Azure/azure-sdk-for-go v68.0.0+incompatible // indirect
|
2023-06-20 14:04:08 +02:00
|
|
|
github.com/Azure/azure-sdk-for-go/sdk/azcore v1.6.1 // indirect
|
|
|
|
|
github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.3.0 // indirect
|
|
|
|
|
github.com/Azure/azure-sdk-for-go/sdk/internal v1.3.0 // indirect
|
|
|
|
|
github.com/Azure/azure-sdk-for-go/sdk/keyvault/azkeys v0.10.0 // indirect
|
2023-01-11 14:09:51 +02:00
|
|
|
github.com/Azure/azure-sdk-for-go/sdk/keyvault/internal v0.7.1 // indirect
|
2023-03-06 18:07:00 +02:00
|
|
|
github.com/Azure/azure-sdk-for-go/sdk/storage/azblob v1.0.0 // indirect
|
2022-12-15 15:25:52 +02:00
|
|
|
github.com/Azure/go-ansiterm v0.0.0-20210617225240-d185dfc1b5a1 // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
github.com/Azure/go-autorest v14.2.0+incompatible // indirect
|
2023-05-27 05:24:50 +02:00
|
|
|
github.com/Azure/go-autorest/autorest v0.11.29 // indirect
|
2023-06-20 14:04:08 +02:00
|
|
|
github.com/Azure/go-autorest/autorest/adal v0.9.23 // indirect
|
2023-03-29 19:38:57 +02:00
|
|
|
github.com/Azure/go-autorest/autorest/azure/auth v0.5.12 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/Azure/go-autorest/autorest/azure/cli v0.4.6 // indirect
|
|
|
|
|
github.com/Azure/go-autorest/autorest/date v0.3.0 // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
github.com/Azure/go-autorest/autorest/to v0.4.0 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/Azure/go-autorest/logger v0.2.1 // indirect
|
|
|
|
|
github.com/Azure/go-autorest/tracing v0.6.0 // indirect
|
2023-06-20 14:04:08 +02:00
|
|
|
github.com/AzureAD/microsoft-authentication-library-for-go v1.0.0 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/BurntSushi/toml v1.1.0 // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
github.com/Masterminds/goutils v1.1.1 // indirect
|
2023-06-26 18:20:47 +02:00
|
|
|
github.com/Masterminds/sprig/v3 v3.2.3 // indirect
|
2023-01-17 13:55:56 +02:00
|
|
|
github.com/Microsoft/go-winio v0.6.0 // indirect
|
2022-12-15 15:25:52 +02:00
|
|
|
github.com/Nvveen/Gotty v0.0.0-20120604004816-cd527374f1e5 // indirect
|
2023-06-26 18:20:47 +02:00
|
|
|
github.com/ProtonMail/go-crypto v0.0.0-20230626094100-7e9e0395ebec // indirect
|
|
|
|
|
github.com/acomagu/bufpipe v1.0.4 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/alessio/shellescape v1.4.1 // indirect
|
2023-05-04 04:11:29 +02:00
|
|
|
github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect
|
2023-06-20 14:04:08 +02:00
|
|
|
github.com/aws/aws-sdk-go v1.44.284 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go-v2 v1.18.1 // indirect
|
2023-03-06 18:07:00 +02:00
|
|
|
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.4.10 // indirect
|
2023-06-20 14:04:08 +02:00
|
|
|
github.com/aws/aws-sdk-go-v2/config v1.18.27 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go-v2/credentials v1.13.26 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.13.4 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.11.70 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go-v2/internal/configsources v1.1.34 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.4.28 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go-v2/internal/ini v1.3.35 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go-v2/internal/v4a v1.0.26 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/aws/aws-sdk-go-v2/service/ecr v1.17.5 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.13.5 // indirect
|
2023-03-06 18:07:00 +02:00
|
|
|
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.9.11 // indirect
|
2023-06-20 14:04:08 +02:00
|
|
|
github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.1.29 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.9.28 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.14.3 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go-v2/service/kms v1.22.2 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go-v2/service/s3 v1.35.0 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go-v2/service/sso v1.12.12 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.14.12 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go-v2/service/sts v1.19.2 // indirect
|
2023-03-06 18:07:00 +02:00
|
|
|
github.com/aws/smithy-go v1.13.5 // indirect
|
2023-03-20 03:47:02 +02:00
|
|
|
github.com/aymanbagabas/go-osc52/v2 v2.0.1 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/beorn7/perks v1.0.1 // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
github.com/blakesmith/ar v0.0.0-20190502131153-809d4375e1fb // indirect
|
2023-04-23 19:21:33 +02:00
|
|
|
github.com/caarlos0/sshmarshal v0.1.0 // indirect
|
2021-12-21 05:03:48 +02:00
|
|
|
github.com/cavaliergopher/cpio v1.0.1 // indirect
|
2023-03-06 18:07:00 +02:00
|
|
|
github.com/cenkalti/backoff/v4 v4.2.0 // indirect
|
|
|
|
|
github.com/cespare/xxhash/v2 v2.2.0 // indirect
|
2023-06-26 18:20:47 +02:00
|
|
|
github.com/cloudflare/circl v1.3.3 // indirect
|
2022-12-15 15:25:52 +02:00
|
|
|
github.com/containerd/continuity v0.3.0 // indirect
|
2023-03-20 14:58:29 +02:00
|
|
|
github.com/containerd/stargz-snapshotter/estargz v0.14.3 // indirect
|
2022-06-21 14:29:43 +02:00
|
|
|
github.com/cpuguy83/go-md2man/v2 v2.0.2 // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
github.com/davecgh/go-spew v1.1.1 // indirect
|
2021-12-21 05:03:48 +02:00
|
|
|
github.com/dghubble/sling v1.4.0 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/dimchansky/utfbom v1.1.1 // indirect
|
2023-05-23 14:56:41 +02:00
|
|
|
github.com/disgoorg/json v1.1.0 // indirect
|
2022-08-18 21:22:41 +02:00
|
|
|
github.com/disgoorg/log v1.2.0 // indirect
|
2023-03-20 14:58:29 +02:00
|
|
|
github.com/docker/cli v23.0.1+incompatible // indirect
|
2023-05-12 02:58:37 +02:00
|
|
|
github.com/docker/distribution v2.8.2+incompatible // indirect
|
2023-06-20 14:04:08 +02:00
|
|
|
github.com/docker/docker v23.0.4+incompatible // indirect
|
2023-01-17 13:55:56 +02:00
|
|
|
github.com/docker/docker-credential-helpers v0.7.0 // indirect
|
2022-12-15 15:25:52 +02:00
|
|
|
github.com/docker/go-connections v0.4.0 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/docker/go-metrics v0.0.1 // indirect
|
2023-04-24 13:47:21 +02:00
|
|
|
github.com/docker/go-units v0.5.0
|
2023-05-02 14:06:35 +02:00
|
|
|
github.com/elliotchance/orderedmap/v2 v2.2.0 // indirect
|
2023-06-26 18:20:47 +02:00
|
|
|
github.com/emirpasic/gods v1.18.1 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/evanphx/json-patch/v5 v5.6.0 // indirect
|
|
|
|
|
github.com/fsnotify/fsnotify v1.6.0 // indirect
|
2023-06-26 18:20:47 +02:00
|
|
|
github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect
|
|
|
|
|
github.com/go-git/go-billy/v5 v5.4.1 // indirect
|
|
|
|
|
github.com/go-git/go-git/v5 v5.7.0 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/go-openapi/analysis v0.21.4 // indirect
|
|
|
|
|
github.com/go-openapi/errors v0.20.3 // indirect
|
2023-06-20 14:04:08 +02:00
|
|
|
github.com/go-openapi/jsonpointer v0.19.6 // indirect
|
|
|
|
|
github.com/go-openapi/jsonreference v0.20.2 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/go-openapi/loads v0.21.2 // indirect
|
2023-05-04 04:11:29 +02:00
|
|
|
github.com/go-openapi/runtime v0.26.0 // indirect
|
|
|
|
|
github.com/go-openapi/spec v0.20.9 // indirect
|
|
|
|
|
github.com/go-openapi/strfmt v0.21.7 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/go-openapi/swag v0.22.3 // indirect
|
2023-05-04 04:11:29 +02:00
|
|
|
github.com/go-openapi/validate v0.22.1 // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
github.com/gobwas/glob v0.2.3 // indirect
|
2022-12-15 15:25:52 +02:00
|
|
|
github.com/gogo/protobuf v1.3.2 // indirect
|
2023-05-27 05:24:50 +02:00
|
|
|
github.com/golang-jwt/jwt/v4 v4.5.0 // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
|
2023-03-20 03:28:33 +02:00
|
|
|
github.com/golang/protobuf v1.5.3 // indirect
|
2022-09-29 03:06:58 +02:00
|
|
|
github.com/google/go-cmp v0.5.9 // indirect
|
2021-10-14 14:32:52 +02:00
|
|
|
github.com/google/go-querystring v1.1.0 // indirect
|
2023-06-20 14:04:08 +02:00
|
|
|
github.com/google/s2a-go v0.1.4 // indirect
|
2023-03-29 19:38:57 +02:00
|
|
|
github.com/google/safetext v0.0.0-20220905092116-b49f7bc46da2 // indirect
|
2022-12-15 15:25:52 +02:00
|
|
|
github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
github.com/google/wire v0.5.0 // indirect
|
2023-06-20 14:04:08 +02:00
|
|
|
github.com/googleapis/enterprise-certificate-proxy v0.2.5 // indirect
|
|
|
|
|
github.com/googleapis/gax-go/v2 v2.11.0 // indirect
|
2023-06-26 18:20:47 +02:00
|
|
|
github.com/goreleaser/chglog v0.5.0 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/gorilla/mux v1.8.0 // indirect
|
2022-08-18 21:22:41 +02:00
|
|
|
github.com/gorilla/websocket v1.5.0 // indirect
|
2022-12-28 17:24:21 +02:00
|
|
|
github.com/hashicorp/errwrap v1.1.0 // indirect
|
2022-06-02 14:02:24 +02:00
|
|
|
github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
|
2023-03-20 03:28:33 +02:00
|
|
|
github.com/hashicorp/go-retryablehttp v0.7.2 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/hashicorp/go-version v1.6.0 // indirect
|
|
|
|
|
github.com/hashicorp/hcl v1.0.0 // indirect
|
2023-06-26 18:20:47 +02:00
|
|
|
github.com/huandu/xstrings v1.3.3 // indirect
|
2021-11-14 03:23:11 +02:00
|
|
|
github.com/iancoleman/orderedmap v0.2.0 // indirect
|
2023-03-20 14:58:29 +02:00
|
|
|
github.com/inconshreveable/mousetrap v1.1.0 // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect
|
|
|
|
|
github.com/jmespath/go-jmespath v0.4.0 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/josharian/intern v1.0.0 // indirect
|
2023-06-26 18:20:47 +02:00
|
|
|
github.com/kevinburke/ssh_config v1.2.0 // indirect
|
|
|
|
|
github.com/klauspost/compress v1.16.6 // indirect
|
2022-10-05 14:49:30 +02:00
|
|
|
github.com/kylelemons/godebug v1.1.0 // indirect
|
2023-03-29 19:38:57 +02:00
|
|
|
github.com/letsencrypt/boulder v0.0.0-20221109233200-85aa52084eaf // indirect
|
2022-06-22 02:11:15 +02:00
|
|
|
github.com/lucasb-eyer/go-colorful v1.2.0 // indirect
|
2023-02-05 17:09:06 +02:00
|
|
|
github.com/magiconair/properties v1.8.7 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/mailru/easyjson v0.7.7 // indirect
|
2023-02-07 14:35:50 +02:00
|
|
|
github.com/mattn/go-isatty v0.0.17 // indirect
|
2022-10-13 00:04:48 +02:00
|
|
|
github.com/mattn/go-runewidth v0.0.14 // indirect
|
2023-03-06 18:07:00 +02:00
|
|
|
github.com/matttproud/golang_protobuf_extensions v1.0.4 // indirect
|
2021-11-14 03:23:11 +02:00
|
|
|
github.com/mitchellh/copystructure v1.2.0 // indirect
|
2022-12-15 15:25:52 +02:00
|
|
|
github.com/mitchellh/mapstructure v1.5.0 // indirect
|
2021-11-14 03:23:11 +02:00
|
|
|
github.com/mitchellh/reflectwalk v1.0.2 // indirect
|
2022-12-15 15:25:52 +02:00
|
|
|
github.com/moby/term v0.0.0-20210619224110-3f7ff695adc6 // indirect
|
2022-02-04 20:51:42 +02:00
|
|
|
github.com/muesli/mango v0.1.0 // indirect
|
|
|
|
|
github.com/muesli/mango-pflag v0.1.0 // indirect
|
2022-09-12 04:06:01 +02:00
|
|
|
github.com/muesli/reflow v0.3.0 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/oklog/ulid v1.3.1 // indirect
|
2022-12-15 15:25:52 +02:00
|
|
|
github.com/opencontainers/go-digest v1.0.0 // indirect
|
2023-01-17 13:55:56 +02:00
|
|
|
github.com/opencontainers/image-spec v1.1.0-rc2 // indirect
|
feat(deps): bump github.com/opencontainers/runc from 1.1.2 to 1.1.5 (#3896)
Bumps
[github.com/opencontainers/runc](https://github.com/opencontainers/runc)
from 1.1.2 to 1.1.5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/opencontainers/runc/releases">github.com/opencontainers/runc's
releases</a>.</em></p>
<blockquote>
<h2>runc 1.1.5 -- "囚われた屈辱は 反撃の嚆矢だ"</h2>
<p>This is the fifth patch release in the 1.1.z series of runc, which
fixes
three CVEs found in runc.</p>
<ul>
<li>
<p>CVE-2023-25809 is a vulnerability involving rootless containers where
(under specific configurations), the container would have write access
to the /sys/fs/cgroup/user.slice/... cgroup hierarchy. No other
hierarchies on the host were affected. This vulnerability was
discovered by Akihiro Suda.
<a
href="https://github.com/opencontainers/runc/security/advisories/GHSA-m8cg-xc2p-r3fc">https://github.com/opencontainers/runc/security/advisories/GHSA-m8cg-xc2p-r3fc</a></p>
</li>
<li>
<p>CVE-2023-27561 was a regression which effectively re-introduced
CVE-2019-19921. This bug was present from v1.0.0-rc95 to v1.1.4. This
regression was discovered by <a
href="https://github.com/Beuc"><code>@Beuc</code></a>.
<a
href="https://github.com/advisories/GHSA-vpvm-3wq2-2wvm">https://github.com/advisories/GHSA-vpvm-3wq2-2wvm</a></p>
</li>
<li>
<p>CVE-2023-28642 is a variant of CVE-2023-27561 and was fixed by the
same
patch. This variant of the above vulnerability was reported by Lei
Wang.
<a
href="https://github.com/opencontainers/runc/security/advisories/GHSA-g2j6-57v7-gm8c">https://github.com/opencontainers/runc/security/advisories/GHSA-g2j6-57v7-gm8c</a></p>
</li>
</ul>
<p>In addition, the following other fixes are included in this
release:</p>
<ul>
<li>Fix the inability to use <code>/dev/null</code> when inside a
container. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3620">#3620</a>)</li>
<li>Fix changing the ownership of host's <code>/dev/null</code> caused
by fd redirection
(a regression in 1.1.1). (<a
href="https://redirect.github.com/opencontainers/runc/issues/3674">#3674</a>,
<a
href="https://redirect.github.com/opencontainers/runc/issues/3731">#3731</a>)</li>
<li>Fix rare runc exec/enter unshare error on older kernels, including
CentOS < 7.7. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3776">#3776</a>)</li>
<li>nsexec: Check for errors in <code>write_log()</code>. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3721">#3721</a>)</li>
</ul>
<h3>Static Linking Notices</h3>
<p>The <code>runc</code> binary distributed with this release are
<em>statically linked</em> with
the following <a
href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html">GNU
LGPL-2.1</a> licensed libraries, with <code>runc</code> acting
as a "work that uses the Library":</p>
<ul>
<li><a href="https://github.com/seccomp/libseccomp">libseccomp</a></li>
</ul>
<p>The versions of these libraries were not modified from their upstream
versions,
but in order to comply with the LGPL-2.1 (§6(a)), we have attached the
complete source code for those libraries which (when combined with the
attached
runc source code) may be used to exercise your rights under the
LGPL-2.1.</p>
<p>However we strongly suggest that you make use of your distribution's
packages
or download them from the authoritative upstream sources, especially
since
these libraries are related to the security of your containers.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/opencontainers/runc/blob/v1.1.5/CHANGELOG.md">github.com/opencontainers/runc's
changelog</a>.</em></p>
<blockquote>
<h2>[1.1.5] - 2023-03-29</h2>
<blockquote>
<p>囚われた屈辱は
反撃の嚆矢だ</p>
</blockquote>
<h3>Fixed</h3>
<ul>
<li>Prohibit container's <code>/proc</code> and <code>/sys</code> to be
symlinks (CVE-2019-19921,
CVE-2023-27561, CVE-2023-28642, <a
href="https://redirect.github.com/opencontainers/runc/issues/3785">#3785</a>)</li>
<li>rootless: rework /sys/fs/cgroup mounts to avoid exposing the host's
cgroup
hierarchy into the container. (CVE-2023-25809)</li>
<li>Fix the inability to use <code>/dev/null</code> when inside a
container. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3620">#3620</a>)</li>
<li>Fix changing the ownership of host's <code>/dev/null</code> caused
by fd redirection
(a regression in 1.1.1). (<a
href="https://redirect.github.com/opencontainers/runc/issues/3674">#3674</a>,
<a
href="https://redirect.github.com/opencontainers/runc/issues/3731">#3731</a>)</li>
<li>Fix rare runc exec/enter unshare error on older kernels, inlcuding
CentOS < 7.7. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3776">#3776</a>)</li>
<li>nsexec: Check for errors in <code>write_log()</code>. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3721">#3721</a>)</li>
<li>Various CI fixes and updates. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3618">#3618</a>,
<a
href="https://redirect.github.com/opencontainers/runc/issues/3630">#3630</a>,
<a
href="https://redirect.github.com/opencontainers/runc/issues/3640">#3640</a>,
<a
href="https://redirect.github.com/opencontainers/runc/issues/3729">#3729</a>)</li>
</ul>
<h2>[1.1.4] - 2022-08-24</h2>
<blockquote>
<p>If you look for perfection, you'll never be content.</p>
</blockquote>
<h3>Fixed</h3>
<ul>
<li>Fix mounting via wrong proc fd.
When the user and mount namespaces are used, and the bind mount is
followed by
the cgroup mount in the spec, the cgroup was mounted using the bind
mount's
mount fd. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3511">#3511</a>)</li>
<li>Switch <code>kill()</code> in <code>libcontainer/nsenter</code> to
<code>sane_kill()</code>. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3536">#3536</a>)</li>
<li>Fix "permission denied" error from <code>runc run</code>
on <code>noexec</code> fs. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3541">#3541</a>)</li>
<li>Fix failed exec after <code>systemctl daemon-reload</code>.
Due to a regression in v1.1.3, the <code>DeviceAllow=char-pts rwm</code>
rule was no
longer added and was causing an error <code>open /dev/pts/0: operation
not permitted: unknown</code>
when systemd was reloaded. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3554">#3554</a>)</li>
<li>Various CI fixes. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3538">#3538</a>,
<a
href="https://redirect.github.com/opencontainers/runc/issues/3558">#3558</a>,
<a
href="https://redirect.github.com/opencontainers/runc/issues/3562">#3562</a>)</li>
</ul>
<h2>[1.1.3] - 2022-06-09</h2>
<blockquote>
<p>In the beginning there was nothing, which exploded.</p>
</blockquote>
<h3>Fixed</h3>
<ul>
<li>Our seccomp <code>-ENOSYS</code> stub now correctly handles
multiplexed syscalls on
s390 and s390x. This solves the issue where syscalls the host kernel did
not
support would return <code>-EPERM</code> despite the existence of the
<code>-ENOSYS</code> stub
code (this was due to how s390x does syscall multiplexing). (<a
href="https://redirect.github.com/opencontainers/runc/issues/3478">#3478</a>)</li>
<li>Retry on dbus disconnect logic in libcontainer/cgroups/systemd now
works as
intended; this fix does not affect runc binary itself but is important
for
libcontainer users such as Kubernetes. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3476">#3476</a>)</li>
<li>Inability to compile with recent clang due to an issue with
duplicate</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/opencontainers/runc/commit/f19387a6bec4944c770f7668ab51c4348d9c2f38"><code>f19387a</code></a>
VERSION: release v1.1.5</li>
<li><a
href="https://github.com/opencontainers/runc/commit/58a9abee210c5a72ab10904f96e0026f684f24e3"><code>58a9abe</code></a>
Merge pull request from GHSA-m8cg-xc2p-r3fc</li>
<li><a
href="https://github.com/opencontainers/runc/commit/27fb72c7ffdbd509b3c15b2bdb4df3d2192bfe7b"><code>27fb72c</code></a>
merge branch 'pr-3776' into release-1.1</li>
<li><a
href="https://github.com/opencontainers/runc/commit/8ec02ea1b14edac85a6e9a2b622ae44e15e11ccd"><code>8ec02ea</code></a>
nsexec: retry unshare on EINVAL</li>
<li><a
href="https://github.com/opencontainers/runc/commit/059d7730fc102052c90fea52c7b3c6f04fbbc487"><code>059d773</code></a>
merge branch 'pr-3785' into release-1.1</li>
<li><a
href="https://github.com/opencontainers/runc/commit/0abab45c9b97c113ff2cdc16f3a7388444c3fbec"><code>0abab45</code></a>
Prohibit /proc and /sys to be symlinks</li>
<li><a
href="https://github.com/opencontainers/runc/commit/0e6b818a2b0d24fdb6697614e5c5f115bbe8e3a5"><code>0e6b818</code></a>
rootless: fix /sys/fs/cgroup mounts</li>
<li><a
href="https://github.com/opencontainers/runc/commit/c6781d100a73d2dcef84e9376d85fff02235a2ed"><code>c6781d1</code></a>
Merge pull request <a
href="https://redirect.github.com/opencontainers/runc/issues/3721">#3721</a>
from kinvolk/rata/nsfixes-backport</li>
<li><a
href="https://github.com/opencontainers/runc/commit/f6e2cd3baf661e1f377088e13084ccb5aadf41e6"><code>f6e2cd3</code></a>
nsexec: Check for errors in write_log()</li>
<li><a
href="https://github.com/opencontainers/runc/commit/3775df9fcb7828594114866e1df346f44d22ad16"><code>3775df9</code></a>
Merge pull request <a
href="https://redirect.github.com/opencontainers/runc/issues/3731">#3731</a>
from kolyshkin/1.1-fix-dev-null</li>
<li>Additional commits viewable in <a
href="https://github.com/opencontainers/runc/compare/v1.1.2...v1.1.5">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/goreleaser/goreleaser/network/alerts).
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-29 19:37:12 +02:00
|
|
|
github.com/opencontainers/runc v1.1.5 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/pelletier/go-toml v1.9.5 // indirect
|
2023-06-26 18:20:47 +02:00
|
|
|
github.com/pelletier/go-toml/v2 v2.0.8 // indirect
|
|
|
|
|
github.com/pjbgf/sha1cd v0.3.0 // indirect
|
2023-01-11 14:09:51 +02:00
|
|
|
github.com/pkg/browser v0.0.0-20210911075715-681adbf594b8 // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
github.com/pkg/errors v0.9.1 // indirect
|
|
|
|
|
github.com/pmezard/go-difflib v1.0.0 // indirect
|
2023-05-27 05:24:50 +02:00
|
|
|
github.com/prometheus/client_golang v1.15.1 // indirect
|
|
|
|
|
github.com/prometheus/client_model v0.4.0 // indirect
|
2023-05-04 04:11:29 +02:00
|
|
|
github.com/prometheus/common v0.42.0 // indirect
|
2023-03-29 19:38:57 +02:00
|
|
|
github.com/prometheus/procfs v0.9.0 // indirect
|
2022-09-12 04:06:01 +02:00
|
|
|
github.com/rivo/uniseg v0.4.2 // indirect
|
2021-11-14 03:23:11 +02:00
|
|
|
github.com/russross/blackfriday/v2 v2.1.0 // indirect
|
2022-08-18 21:22:41 +02:00
|
|
|
github.com/sasha-s/go-csync v0.0.0-20210812194225-61421b77c44b // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
github.com/sergi/go-diff v1.2.0 // indirect
|
2023-06-26 18:20:47 +02:00
|
|
|
github.com/shopspring/decimal v1.2.0 // indirect
|
2023-03-29 19:38:57 +02:00
|
|
|
github.com/sigstore/cosign/v2 v2.0.0 // indirect
|
2023-05-27 05:24:50 +02:00
|
|
|
github.com/sigstore/rekor v1.2.0 // indirect
|
|
|
|
|
github.com/sigstore/sigstore v1.6.4 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/sirupsen/logrus v1.9.0 // indirect
|
2023-06-26 18:20:47 +02:00
|
|
|
github.com/skeema/knownhosts v1.1.1 // indirect
|
|
|
|
|
github.com/spf13/afero v1.9.5 // indirect
|
|
|
|
|
github.com/spf13/cast v1.5.1 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/spf13/jwalterweatherman v1.1.0 // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
github.com/spf13/pflag v1.0.5 // indirect
|
2023-06-26 18:20:47 +02:00
|
|
|
github.com/spf13/viper v1.16.0 // indirect
|
2023-02-05 17:09:06 +02:00
|
|
|
github.com/subosito/gotenv v1.4.2 // indirect
|
2021-10-26 20:02:03 +02:00
|
|
|
github.com/technoweenie/multipartstreamer v1.0.1 // indirect
|
2023-03-29 19:38:57 +02:00
|
|
|
github.com/theupdateframework/go-tuf v0.5.2 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/titanous/rocacheck v0.0.0-20171023193734-afe73141d399 // indirect
|
2022-11-18 01:40:00 +02:00
|
|
|
github.com/tomnomnom/linkheader v0.0.0-20180905144013-02ca5825eb80 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/vbatts/tar-split v0.11.2 // indirect
|
2023-06-26 18:20:47 +02:00
|
|
|
github.com/xanzy/ssh-agent v0.3.3 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb // indirect
|
2022-12-15 15:25:52 +02:00
|
|
|
github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 // indirect
|
|
|
|
|
github.com/xeipuuv/gojsonschema v1.2.0 // indirect
|
2022-08-16 06:00:17 +02:00
|
|
|
gitlab.com/digitalxero/go-conventional-commit v1.0.7 // indirect
|
2023-05-04 04:11:29 +02:00
|
|
|
go.mongodb.org/mongo-driver v1.11.3 // indirect
|
2023-01-11 14:09:51 +02:00
|
|
|
go.opencensus.io v0.24.0 // indirect
|
fix: set parallelism to match Linux container CPU (#3901)
<!--
Hi, thanks for contributing!
Please make sure you read our CONTRIBUTING guide.
Also, add tests and the respective documentation changes as well.
-->
Currently Goreleaser uses `runtime.NumCPU()` as the default value if
`--parallelism` is not set.
However, this will get the number of CPUs on the host even when
Goreleaser is run in a container with a limit on the maximum number of
CPUs that can be used (typically in a Kubernetes pod).
Actually, `docker run --cpus=1 goreleaser/goreleaser --debug` shows
`parallelism: 4` on my machine.
This behavior causes CPU throttling, which increases execution time and,
in the worst case, terminates with an error.
I ran into this problem with Jenkins where the agent runs on pod
([Kubernetes plugin for
Jenkins](https://plugins.jenkins.io/kubernetes/)).
This commit introduces
[automaxprocs](https://github.com/uber-go/automaxprocs) to fix this
issue.
This library sets `GOMAXPROCS` to match Linux container CPU quota.
I have also looked for a library that can get CPU quota more directly,
but this seems to be the best I could find.
The reason it is set in a different notation from the automaxprocs
README is to prevent logs from being displayed
([comment](https://github.com/uber-go/automaxprocs/issues/18#issuecomment-511330567)).
I would have liked to write a test, but this change is dependent on the
number of CPUs in the execution environment, so I could not.
Instead, I wrote a Dockerfile for testing
```Dockerfile
FROM golang:1.20.2
WORKDIR /go/app
RUN sh -c "$(curl --location https://taskfile.dev/install.sh)" -- -d -b /usr/local/bin
COPY . .
RUN task build
```
and confirmed built binary shows expected parallelism by following
commands:
```sh
docker build --file Dockerfile.test . -t test-goreleaser
docker run --cpus=1 test-goreleaser ./goreleaser build --snapshot --debug # parallelism: 1
docker run test-goreleaser ./goreleaser build --snapshot --debug # parallelism: 4
```
I also ran the built binary on my Macbook and it was fine.
2023-04-02 22:16:41 +02:00
|
|
|
go.uber.org/automaxprocs v1.5.2
|
2023-05-27 05:24:50 +02:00
|
|
|
golang.org/x/exp v0.0.0-20230321023759-10a507213a29 // indirect
|
2023-06-16 18:24:19 +02:00
|
|
|
golang.org/x/mod v0.11.0 // indirect
|
2023-06-14 14:48:43 +02:00
|
|
|
golang.org/x/net v0.11.0 // indirect
|
2023-06-14 14:36:28 +02:00
|
|
|
golang.org/x/sys v0.9.0 // indirect
|
|
|
|
|
golang.org/x/term v0.9.0 // indirect
|
2023-01-10 13:55:31 +02:00
|
|
|
golang.org/x/time v0.3.0 // indirect
|
2023-01-11 14:09:51 +02:00
|
|
|
golang.org/x/xerrors v0.0.0-20220907171357-04be3eba64a2 // indirect
|
2023-06-20 14:04:08 +02:00
|
|
|
google.golang.org/api v0.128.0 // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
google.golang.org/appengine v1.6.7 // indirect
|
2023-06-20 14:04:08 +02:00
|
|
|
google.golang.org/genproto v0.0.0-20230530153820-e85fd2cbaebc // indirect
|
2023-06-26 18:20:47 +02:00
|
|
|
google.golang.org/genproto/googleapis/api v0.0.0-20230530153820-e85fd2cbaebc // indirect
|
|
|
|
|
google.golang.org/genproto/googleapis/rpc v0.0.0-20230530153820-e85fd2cbaebc // indirect
|
2023-06-20 14:04:08 +02:00
|
|
|
google.golang.org/grpc v1.56.0 // indirect
|
2023-05-04 04:11:29 +02:00
|
|
|
google.golang.org/protobuf v1.30.0 // indirect
|
2021-10-26 20:02:03 +02:00
|
|
|
gopkg.in/alexcesaro/quotedprintable.v3 v3.0.0-20150716171945-2caba252f4dc // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
gopkg.in/ini.v1 v1.67.0 // indirect
|
|
|
|
|
gopkg.in/square/go-jose.v2 v2.6.0 // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
gopkg.in/warnings.v0 v0.1.2 // indirect
|
2022-12-15 15:25:52 +02:00
|
|
|
gopkg.in/yaml.v2 v2.4.0 // indirect
|
2023-03-29 19:38:57 +02:00
|
|
|
sigs.k8s.io/kind v0.17.0 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
sigs.k8s.io/yaml v1.3.0 // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
)
|
2023-06-16 18:46:58 +02:00
|
|
|
|
|
|
|
|
replace github.com/invopop/jsonschema => github.com/caarlos0/jsonschema v0.0.0-20230614035932-131eafc78732
|
