go/goreleaser
go/goreleaser
1
0
Fork 0
mirror of https://github.com/goreleaser/goreleaser.git synced 2025-01-08 03:31:59 +02:00
Code Issues Releases Activity
dcdd6234fa
goreleaser/go.sum

1324 lines
125 KiB
Plaintext
Raw Normal View History

feat: add support for pushing artifacts to cloud storage provider( S3, Azure Blob, GCS) (#1036) * feat: adding support to push artifacts to AWS S3,Azure Blob and Google Cloud Storage readme for blob publisher test: add unit test for blob using testify and mockery test: add unit test for publish method fix: openbucket instance initialization remove unwanted packages: go mod tidy test: add missing unit test for publish method * doc: add missing comment for func * fix: add accidental delete file * fix : add missing Snapcrafts project * fix: unit test for Azure blob * fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue * fmt: fix linter reporeted issues fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue fmt: linter fix * test: fix typo in test error string * feat: add support to provider folder inside bucket, resolves discussed comments
2019-06-05 15:51:01 +02:00
cloud.google.com/go v0.26.0/go.mod h1:aQUYkXzVsufM+DwF1aE+0xfcU+56JwCaLick0ClmMTw=
cloud.google.com/go v0.34.0/go.mod h1:aQUYkXzVsufM+DwF1aE+0xfcU+56JwCaLick0ClmMTw=
feat: go 1.13 (#1135) * feat: go 1.13 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: go.mod Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: update to go 1.13 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * bump: deps Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: deps Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: trying replace Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: go mod init Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: disable funlen lint Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2019-09-13 14:53:56 +02:00
cloud.google.com/go v0.38.0/go.mod h1:990N+gfupTy94rShfmMCWGDn0LpTmnzTp2qbd1dvSRU=
chore(deps): bump gocloud.dev from 0.18.0 to 0.19.0 (#1340) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.18.0 to 0.19.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.18.0...v0.19.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-02-17 14:56:49 +02:00
cloud.google.com/go v0.44.1/go.mod h1:iSa0KzasP4Uvy3f1mN/7PiObzGgflwredwwASm/v6AU=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
cloud.google.com/go v0.44.2/go.mod h1:60680Gw3Yr4ikxnPRS/oxxkBccT6SA1yMk63TGekxKY=
feat(deps): bump gocloud.dev from 0.27.0 to 0.28.0 (#3689) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.27.0 to 0.28.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.28.0</h2> <p><strong>BREAKING CHANGES</strong>:</p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK.</li> <li><strong>blob/azureblob</strong>: Updated to match recent breaking changes in the Azure packages (yes, again).</li> <li><strong>pubsub/awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>blob</strong></p> <ul> <li><strong>memblob</strong>: Fixed bug where use of <code>BeforeCopy</code> callback would drop the actual copying.</li> <li><strong>azureblob</strong>: Updated to match recent breaking changes in the Azure packages.</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>all</strong>: Simplified and improved batch sizing, should resolve issues with too-frequent polling in some situations.</li> <li><strong>azurepubsub</strong>: Made <code>ListenerTimeout</code> configurable.</li> <li><strong>gcppubsub</strong> and <strong>awssnssqs</strong>: Support lazy mode for <code>Nack</code> (where no explicit <code>Nack</code> is sent).</li> <li><strong>awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>secrets</strong></p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK. Use azidentity.NewDefaultAzureCredential.</li> </ul> <p><strong>sql</strong></p> <ul> <li><strong>gcp/cloudsql</strong>: Fixed IAM login.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/24166090495b8e084a23aa7d11fcc81ec33e4729"><code>2416609</code></a> all: prep for v0.28.0 (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3207">#3207</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/13f46eb8065d5ea62b757f5f0f11a56f48faf7cc"><code>13f46eb</code></a> pubsub: simplify and improve batch sizing, especially for low message rates</li> <li><a href="https://github.com/google/go-cloud/commit/8f2c2b9a392a8e4a3d7a4942f88f3df607f8f6d0"><code>8f2c2b9</code></a> pubsub/memsub: Add Options for batching (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3205">#3205</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fe0a3d75fe43c039258df25ebf102602526e3052"><code>fe0a3d7</code></a> pubsub/awssqs: Fix BeforeSend/As to enable changes to the sqs input message (...</li> <li><a href="https://github.com/google/go-cloud/commit/dfaf95af34dd9022a69a061028e0ceec98e9c670"><code>dfaf95a</code></a> secrets/azurekeyvault: Use azidentity.NewDefaultAzureCredential to support ot...</li> <li><a href="https://github.com/google/go-cloud/commit/1e26311532928f060c490a7fbf2be92b55ee12c4"><code>1e26311</code></a> blob: Remove some debug logging (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3197">#3197</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/43ed5a499864c08b7b6549ff7085f19634a1f02c"><code>43ed5a4</code></a> pubsub/gcppubsub: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3195">#3195</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/be80e70b3dcf7a6b86481881c7ac0b44a8095178"><code>be80e70</code></a> pubsub/awssnssqs: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3194">#3194</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/7d690993a53cf8cc2e7af07872876d58601f1261"><code>7d69099</code></a> blob/azblob: Update to latest, and restore As for dirlist (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3191">#3191</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/e942f3c339f0eb617ac4dbc7f37cc4e5920ee7cc"><code>e942f3c</code></a> blob/azblob: Restore As for List entry (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3188">#3188</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.27.0...v0.28.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.27.0&new-version=0.28.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-11 14:09:51 +02:00
cloud.google.com/go v0.44.3/go.mod h1:60680Gw3Yr4ikxnPRS/oxxkBccT6SA1yMk63TGekxKY=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
cloud.google.com/go v0.45.1/go.mod h1:RpBamKRgapWJb87xiFSdk4g1CME7QZg3uwTez+TSTjc=
cloud.google.com/go v0.46.3/go.mod h1:a6bKKbmY7er1mI7TEI4lsAkts/mkhTSZK8w33B4RAg0=
cloud.google.com/go v0.50.0/go.mod h1:r9sluTvynVuxRIOHXQEHMFffphuXHOMZMycpNR5e6To=
cloud.google.com/go v0.52.0/go.mod h1:pXajvRH/6o3+F9jDHZWQ5PbGhn+o8w9qiu/CffaVdO4=
cloud.google.com/go v0.53.0/go.mod h1:fp/UouUEsRkN6ryDKNW/Upv/JBKnv6WDthjR6+vze6M=
cloud.google.com/go v0.54.0/go.mod h1:1rq2OEkV3YMf6n/9ZvGWI3GWw0VoqH/1x2nd8Is/bPc=
cloud.google.com/go v0.56.0/go.mod h1:jr7tqZxxKOVYizybht9+26Z/gUq7tiRzu+ACVAMbKVk=
cloud.google.com/go v0.57.0/go.mod h1:oXiQ6Rzq3RAkkY7N6t3TcE6jE+CIBBbA36lwQ1JyzZs=
chore(deps): bump gocloud.dev from 0.20.0 to 0.21.0 (#1941) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.20.0 to 0.21.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.20.0...v0.21.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-12 01:14:58 +02:00
cloud.google.com/go v0.62.0/go.mod h1:jmCYTdRCQuc1PHIIJ/maLInMho30T/Y0M4hTdTShOYc=
cloud.google.com/go v0.65.0/go.mod h1:O5N8zS7uWy9vkA9vayVHs65eM1ubvY4h553ofrNHObY=
cloud.google.com/go v0.72.0/go.mod h1:M+5Vjvlc2wnp6tjzE102Dw08nGShTscUx2nZMufOKPI=
chore(deps): bump gocloud.dev from 0.22.0 to 0.23.0 (#2225) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.22.0 to 0.23.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.22.0...v0.23.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-17 14:03:45 +02:00
cloud.google.com/go v0.74.0/go.mod h1:VV1xSbzvo+9QJOxLDaJfTjx5e+MePCpCWwvftOeQmWk=
feat(deps): bump gocloud.dev from 0.27.0 to 0.28.0 (#3689) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.27.0 to 0.28.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.28.0</h2> <p><strong>BREAKING CHANGES</strong>:</p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK.</li> <li><strong>blob/azureblob</strong>: Updated to match recent breaking changes in the Azure packages (yes, again).</li> <li><strong>pubsub/awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>blob</strong></p> <ul> <li><strong>memblob</strong>: Fixed bug where use of <code>BeforeCopy</code> callback would drop the actual copying.</li> <li><strong>azureblob</strong>: Updated to match recent breaking changes in the Azure packages.</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>all</strong>: Simplified and improved batch sizing, should resolve issues with too-frequent polling in some situations.</li> <li><strong>azurepubsub</strong>: Made <code>ListenerTimeout</code> configurable.</li> <li><strong>gcppubsub</strong> and <strong>awssnssqs</strong>: Support lazy mode for <code>Nack</code> (where no explicit <code>Nack</code> is sent).</li> <li><strong>awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>secrets</strong></p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK. Use azidentity.NewDefaultAzureCredential.</li> </ul> <p><strong>sql</strong></p> <ul> <li><strong>gcp/cloudsql</strong>: Fixed IAM login.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/24166090495b8e084a23aa7d11fcc81ec33e4729"><code>2416609</code></a> all: prep for v0.28.0 (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3207">#3207</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/13f46eb8065d5ea62b757f5f0f11a56f48faf7cc"><code>13f46eb</code></a> pubsub: simplify and improve batch sizing, especially for low message rates</li> <li><a href="https://github.com/google/go-cloud/commit/8f2c2b9a392a8e4a3d7a4942f88f3df607f8f6d0"><code>8f2c2b9</code></a> pubsub/memsub: Add Options for batching (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3205">#3205</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fe0a3d75fe43c039258df25ebf102602526e3052"><code>fe0a3d7</code></a> pubsub/awssqs: Fix BeforeSend/As to enable changes to the sqs input message (...</li> <li><a href="https://github.com/google/go-cloud/commit/dfaf95af34dd9022a69a061028e0ceec98e9c670"><code>dfaf95a</code></a> secrets/azurekeyvault: Use azidentity.NewDefaultAzureCredential to support ot...</li> <li><a href="https://github.com/google/go-cloud/commit/1e26311532928f060c490a7fbf2be92b55ee12c4"><code>1e26311</code></a> blob: Remove some debug logging (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3197">#3197</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/43ed5a499864c08b7b6549ff7085f19634a1f02c"><code>43ed5a4</code></a> pubsub/gcppubsub: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3195">#3195</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/be80e70b3dcf7a6b86481881c7ac0b44a8095178"><code>be80e70</code></a> pubsub/awssnssqs: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3194">#3194</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/7d690993a53cf8cc2e7af07872876d58601f1261"><code>7d69099</code></a> blob/azblob: Update to latest, and restore As for dirlist (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3191">#3191</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/e942f3c339f0eb617ac4dbc7f37cc4e5920ee7cc"><code>e942f3c</code></a> blob/azblob: Restore As for List entry (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3188">#3188</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.27.0...v0.28.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.27.0&new-version=0.28.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-11 14:09:51 +02:00
cloud.google.com/go v0.75.0/go.mod h1:VGuuCn7PG0dwsd5XPVm2Mm3wlh3EL55/79EKB6hlPTY=
feat(deps): bump gocloud.dev from 0.34.0 to 0.35.0 (#4467) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.34.0 to 0.35.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.35.0</h2> <p><strong>BREAKING CHANGES</strong></p> <p>This release updates the dependency on AWS/S3, which included some breaking changes; see <a href="https://redirect.github.com/google/go-cloud/pull/3342">google/go-cloud#3342</a> for details.</p> <p><strong>blob</strong></p> <ul> <li><em>gcsblob</em>: Fix unauthenticated requests.</li> </ul> <p><strong>runtimevar</strong></p> <ul> <li><em>constantvar</em>: Add support for reading the constant variable value from the environment.</li> </ul> <p><strong>docstore</strong></p> <ul> <li><em>gcpfilestore</em>: Add support for non-default databases.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/27e0bca95dae3165b94cab4f9b7e2e4b087c8aef"><code>27e0bca</code></a> all: prep for release (<a href="https://redirect.github.com/google/go-cloud/issues/3350">#3350</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/53ccd8db26a14fd2a40bfcb28af1a1ceba4663f4"><code>53ccd8d</code></a> all: update deps, including a breaking S3 change (<a href="https://redirect.github.com/google/go-cloud/issues/3342">#3342</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fa413a39cdf8ffe0890a1b0a4cf5e06e0c915592"><code>fa413a3</code></a> docstore/gcpfilestore: add support for non-default databases. (<a href="https://redirect.github.com/google/go-cloud/issues/3345">#3345</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/c04000b96462ad3ec62e633eafd759185991bb27"><code>c04000b</code></a> secrets/hashivault: Update go-jose per dependabot (<a href="https://redirect.github.com/google/go-cloud/issues/3346">#3346</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/6d5d2890816abc88cd11ef13d6cd6506eb5b5537"><code>6d5d289</code></a> pubsub/natspubsub: upgrade a dependency (<a href="https://redirect.github.com/google/go-cloud/issues/3336">#3336</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/375e097193225b4ef300a336e04ccad9ace50bc1"><code>375e097</code></a> pubsub/natspubsub: Update dependency (<a href="https://redirect.github.com/google/go-cloud/issues/3331">#3331</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/35ac324ff7fae5ddc0f9dc2ff234a7d6b4935a20"><code>35ac324</code></a> all: update dependencies (<a href="https://redirect.github.com/google/go-cloud/issues/3329">#3329</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/4a18be0f4a48c145da4a76499485a45478fd69aa"><code>4a18be0</code></a> secrets/awskms: update the example for the AWS ARN use case (<a href="https://redirect.github.com/google/go-cloud/issues/3320">#3320</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/486d484a8f73fd5bedc910d4fd89c52e11412e68"><code>486d484</code></a> kafkapubsub: rename dependency Shopify/sarama to IBM/sarama (<a href="https://redirect.github.com/google/go-cloud/issues/3319">#3319</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/db7e808e313228ed8607a94d6e5cd075d66f4e86"><code>db7e808</code></a> runtimevar/constantvar: Add support for reading the constantvar from an envir...</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.34.0...v0.35.0">compare view</a></li> </ul> </details> <br /> <details> <summary>Most Recent Ignore Conditions Applied to This Pull Request</summary> | Dependency Name | Ignore Conditions | | --- | --- | | gocloud.dev | [>= 0.25.a, < 0.26] | </details> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.34.0&new-version=0.35.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-11 12:55:26 +02:00
cloud.google.com/go v0.110.10 h1:LXy9GEO+timppncPIAZoOj3l58LIU9k+kn48AN7IO3Y=
cloud.google.com/go v0.110.10/go.mod h1:v1OoFqYxiBkUrruItNM3eT4lLByNjxmJSV/xDKJNnic=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
cloud.google.com/go/bigquery v1.0.1/go.mod h1:i/xbL2UlR5RvWAURpBYZTtm/cXjCha9lbfbpx4poX+o=
cloud.google.com/go/bigquery v1.3.0/go.mod h1:PjpwJnslEMmckchkHFfq+HTD2DmtT67aNFKH1/VBDHE=
cloud.google.com/go/bigquery v1.4.0/go.mod h1:S8dzgnTigyfTmLBfrtrhyYhwRxG72rYxvftPBK2Dvzc=
cloud.google.com/go/bigquery v1.5.0/go.mod h1:snEHRnqQbz117VIFhE8bmtwIDY80NLUZUMb4Nv6dBIg=
cloud.google.com/go/bigquery v1.7.0/go.mod h1://okPTzCYNXSlb24MZs83e2Do+h+VXtc4gLoIoXIAPc=
cloud.google.com/go/bigquery v1.8.0/go.mod h1:J5hqkt3O0uAFnINi6JXValWIb1v0goeZM77hZzJN/fQ=
feat(deps): bump gocloud.dev from 0.34.0 to 0.35.0 (#4467) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.34.0 to 0.35.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.35.0</h2> <p><strong>BREAKING CHANGES</strong></p> <p>This release updates the dependency on AWS/S3, which included some breaking changes; see <a href="https://redirect.github.com/google/go-cloud/pull/3342">google/go-cloud#3342</a> for details.</p> <p><strong>blob</strong></p> <ul> <li><em>gcsblob</em>: Fix unauthenticated requests.</li> </ul> <p><strong>runtimevar</strong></p> <ul> <li><em>constantvar</em>: Add support for reading the constant variable value from the environment.</li> </ul> <p><strong>docstore</strong></p> <ul> <li><em>gcpfilestore</em>: Add support for non-default databases.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/27e0bca95dae3165b94cab4f9b7e2e4b087c8aef"><code>27e0bca</code></a> all: prep for release (<a href="https://redirect.github.com/google/go-cloud/issues/3350">#3350</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/53ccd8db26a14fd2a40bfcb28af1a1ceba4663f4"><code>53ccd8d</code></a> all: update deps, including a breaking S3 change (<a href="https://redirect.github.com/google/go-cloud/issues/3342">#3342</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fa413a39cdf8ffe0890a1b0a4cf5e06e0c915592"><code>fa413a3</code></a> docstore/gcpfilestore: add support for non-default databases. (<a href="https://redirect.github.com/google/go-cloud/issues/3345">#3345</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/c04000b96462ad3ec62e633eafd759185991bb27"><code>c04000b</code></a> secrets/hashivault: Update go-jose per dependabot (<a href="https://redirect.github.com/google/go-cloud/issues/3346">#3346</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/6d5d2890816abc88cd11ef13d6cd6506eb5b5537"><code>6d5d289</code></a> pubsub/natspubsub: upgrade a dependency (<a href="https://redirect.github.com/google/go-cloud/issues/3336">#3336</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/375e097193225b4ef300a336e04ccad9ace50bc1"><code>375e097</code></a> pubsub/natspubsub: Update dependency (<a href="https://redirect.github.com/google/go-cloud/issues/3331">#3331</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/35ac324ff7fae5ddc0f9dc2ff234a7d6b4935a20"><code>35ac324</code></a> all: update dependencies (<a href="https://redirect.github.com/google/go-cloud/issues/3329">#3329</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/4a18be0f4a48c145da4a76499485a45478fd69aa"><code>4a18be0</code></a> secrets/awskms: update the example for the AWS ARN use case (<a href="https://redirect.github.com/google/go-cloud/issues/3320">#3320</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/486d484a8f73fd5bedc910d4fd89c52e11412e68"><code>486d484</code></a> kafkapubsub: rename dependency Shopify/sarama to IBM/sarama (<a href="https://redirect.github.com/google/go-cloud/issues/3319">#3319</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/db7e808e313228ed8607a94d6e5cd075d66f4e86"><code>db7e808</code></a> runtimevar/constantvar: Add support for reading the constantvar from an envir...</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.34.0...v0.35.0">compare view</a></li> </ul> </details> <br /> <details> <summary>Most Recent Ignore Conditions Applied to This Pull Request</summary> | Dependency Name | Ignore Conditions | | --- | --- | | gocloud.dev | [>= 0.25.a, < 0.26] | </details> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.34.0&new-version=0.35.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-11 12:55:26 +02:00
cloud.google.com/go/compute v1.23.3 h1:6sVlXXBmbd7jNX0Ipq0trII3e4n1/MsADLK6a+aiVlk=
cloud.google.com/go/compute v1.23.3/go.mod h1:VCgBUoMnIVIR0CscqQiPJLAG25E3ZRZMzcFZeQ+h8CI=
fix: force specific version of go-crypto (#3756) refs #3745 Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2023-02-05 17:09:06 +02:00
cloud.google.com/go/compute/metadata v0.2.3 h1:mg4jlk7mCAj6xXp9UJ4fjI9VUI5rubuGBW5aJ7UnBMY=
cloud.google.com/go/compute/metadata v0.2.3/go.mod h1:VAV5nSsACxMJvgaAuX6Pk2AawlZn8kiOGuCv6gTkwuA=
chore(deps): bump gocloud.dev from 0.18.0 to 0.19.0 (#1340) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.18.0 to 0.19.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.18.0...v0.19.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-02-17 14:56:49 +02:00
cloud.google.com/go/datastore v1.0.0/go.mod h1:LXYbyblFSglQ5pkeyhO+Qmw7ukd3C+pD7TKLgZqpHYE=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
cloud.google.com/go/datastore v1.1.0/go.mod h1:umbIZjpQpHh4hmRpGhH4tLFup+FVzqBi1b3c64qFpCk=
feat(deps): bump gocloud.dev from 0.34.0 to 0.35.0 (#4467) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.34.0 to 0.35.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.35.0</h2> <p><strong>BREAKING CHANGES</strong></p> <p>This release updates the dependency on AWS/S3, which included some breaking changes; see <a href="https://redirect.github.com/google/go-cloud/pull/3342">google/go-cloud#3342</a> for details.</p> <p><strong>blob</strong></p> <ul> <li><em>gcsblob</em>: Fix unauthenticated requests.</li> </ul> <p><strong>runtimevar</strong></p> <ul> <li><em>constantvar</em>: Add support for reading the constant variable value from the environment.</li> </ul> <p><strong>docstore</strong></p> <ul> <li><em>gcpfilestore</em>: Add support for non-default databases.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/27e0bca95dae3165b94cab4f9b7e2e4b087c8aef"><code>27e0bca</code></a> all: prep for release (<a href="https://redirect.github.com/google/go-cloud/issues/3350">#3350</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/53ccd8db26a14fd2a40bfcb28af1a1ceba4663f4"><code>53ccd8d</code></a> all: update deps, including a breaking S3 change (<a href="https://redirect.github.com/google/go-cloud/issues/3342">#3342</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fa413a39cdf8ffe0890a1b0a4cf5e06e0c915592"><code>fa413a3</code></a> docstore/gcpfilestore: add support for non-default databases. (<a href="https://redirect.github.com/google/go-cloud/issues/3345">#3345</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/c04000b96462ad3ec62e633eafd759185991bb27"><code>c04000b</code></a> secrets/hashivault: Update go-jose per dependabot (<a href="https://redirect.github.com/google/go-cloud/issues/3346">#3346</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/6d5d2890816abc88cd11ef13d6cd6506eb5b5537"><code>6d5d289</code></a> pubsub/natspubsub: upgrade a dependency (<a href="https://redirect.github.com/google/go-cloud/issues/3336">#3336</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/375e097193225b4ef300a336e04ccad9ace50bc1"><code>375e097</code></a> pubsub/natspubsub: Update dependency (<a href="https://redirect.github.com/google/go-cloud/issues/3331">#3331</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/35ac324ff7fae5ddc0f9dc2ff234a7d6b4935a20"><code>35ac324</code></a> all: update dependencies (<a href="https://redirect.github.com/google/go-cloud/issues/3329">#3329</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/4a18be0f4a48c145da4a76499485a45478fd69aa"><code>4a18be0</code></a> secrets/awskms: update the example for the AWS ARN use case (<a href="https://redirect.github.com/google/go-cloud/issues/3320">#3320</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/486d484a8f73fd5bedc910d4fd89c52e11412e68"><code>486d484</code></a> kafkapubsub: rename dependency Shopify/sarama to IBM/sarama (<a href="https://redirect.github.com/google/go-cloud/issues/3319">#3319</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/db7e808e313228ed8607a94d6e5cd075d66f4e86"><code>db7e808</code></a> runtimevar/constantvar: Add support for reading the constantvar from an envir...</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.34.0...v0.35.0">compare view</a></li> </ul> </details> <br /> <details> <summary>Most Recent Ignore Conditions Applied to This Pull Request</summary> | Dependency Name | Ignore Conditions | | --- | --- | | gocloud.dev | [>= 0.25.a, < 0.26] | </details> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.34.0&new-version=0.35.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-11 12:55:26 +02:00
cloud.google.com/go/iam v1.1.5 h1:1jTsCu4bcsNsE4iiqNT5SHwrDRCfRmIaaaVFhRveTJI=
cloud.google.com/go/iam v1.1.5/go.mod h1:rB6P/Ic3mykPbFio+vo7403drjlgvoWfYpJhMXEbzv8=
cloud.google.com/go/kms v1.15.5 h1:pj1sRfut2eRbD9pFRjNnPNg/CzJPuQAzUujMIM1vVeM=
cloud.google.com/go/kms v1.15.5/go.mod h1:cU2H5jnp6G2TDpUGZyqTCoy1n16fbubHZjmVXSMtwDI=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
cloud.google.com/go/pubsub v1.0.1/go.mod h1:R0Gpsv3s54REJCy4fxDixWD93lHJMoZTyQ2kNxGRt3I=
cloud.google.com/go/pubsub v1.1.0/go.mod h1:EwwdRX2sKPjnvnqCa270oGRyludottCI76h+R3AArQw=
cloud.google.com/go/pubsub v1.2.0/go.mod h1:jhfEVHT8odbXTkndysNHCcx0awwzvfOlguIAii9o8iA=
cloud.google.com/go/pubsub v1.3.1/go.mod h1:i+ucay31+CNRpDW4Lu78I4xXG+O1r/MAHgjpRVR+TSU=
cloud.google.com/go/storage v1.0.0/go.mod h1:IhtSnM/ZTZV8YYJWCY8RULGVqBDmpoyjwiyrjsg+URw=
cloud.google.com/go/storage v1.5.0/go.mod h1:tpKbwo567HUNpVclU5sGELwQWBDZ8gh0ZeosJ0Rtdos=
cloud.google.com/go/storage v1.6.0/go.mod h1:N7U0C8pVQ/+NIKOBQyamJIeKQKkZ+mxpohlUTyfDhBk=
cloud.google.com/go/storage v1.8.0/go.mod h1:Wv1Oy7z6Yz3DshWRJFhqM/UCfaWIRTdp0RXyy7KQOVs=
chore(deps): bump gocloud.dev from 0.20.0 to 0.21.0 (#1941) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.20.0 to 0.21.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.20.0...v0.21.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-12 01:14:58 +02:00
cloud.google.com/go/storage v1.10.0/go.mod h1:FLPqc6j+Ki4BU591ie1oL6qBQGu2Bl/tZ9ullr3+Kg0=
feat(deps): bump gocloud.dev from 0.27.0 to 0.28.0 (#3689) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.27.0 to 0.28.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.28.0</h2> <p><strong>BREAKING CHANGES</strong>:</p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK.</li> <li><strong>blob/azureblob</strong>: Updated to match recent breaking changes in the Azure packages (yes, again).</li> <li><strong>pubsub/awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>blob</strong></p> <ul> <li><strong>memblob</strong>: Fixed bug where use of <code>BeforeCopy</code> callback would drop the actual copying.</li> <li><strong>azureblob</strong>: Updated to match recent breaking changes in the Azure packages.</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>all</strong>: Simplified and improved batch sizing, should resolve issues with too-frequent polling in some situations.</li> <li><strong>azurepubsub</strong>: Made <code>ListenerTimeout</code> configurable.</li> <li><strong>gcppubsub</strong> and <strong>awssnssqs</strong>: Support lazy mode for <code>Nack</code> (where no explicit <code>Nack</code> is sent).</li> <li><strong>awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>secrets</strong></p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK. Use azidentity.NewDefaultAzureCredential.</li> </ul> <p><strong>sql</strong></p> <ul> <li><strong>gcp/cloudsql</strong>: Fixed IAM login.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/24166090495b8e084a23aa7d11fcc81ec33e4729"><code>2416609</code></a> all: prep for v0.28.0 (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3207">#3207</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/13f46eb8065d5ea62b757f5f0f11a56f48faf7cc"><code>13f46eb</code></a> pubsub: simplify and improve batch sizing, especially for low message rates</li> <li><a href="https://github.com/google/go-cloud/commit/8f2c2b9a392a8e4a3d7a4942f88f3df607f8f6d0"><code>8f2c2b9</code></a> pubsub/memsub: Add Options for batching (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3205">#3205</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fe0a3d75fe43c039258df25ebf102602526e3052"><code>fe0a3d7</code></a> pubsub/awssqs: Fix BeforeSend/As to enable changes to the sqs input message (...</li> <li><a href="https://github.com/google/go-cloud/commit/dfaf95af34dd9022a69a061028e0ceec98e9c670"><code>dfaf95a</code></a> secrets/azurekeyvault: Use azidentity.NewDefaultAzureCredential to support ot...</li> <li><a href="https://github.com/google/go-cloud/commit/1e26311532928f060c490a7fbf2be92b55ee12c4"><code>1e26311</code></a> blob: Remove some debug logging (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3197">#3197</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/43ed5a499864c08b7b6549ff7085f19634a1f02c"><code>43ed5a4</code></a> pubsub/gcppubsub: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3195">#3195</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/be80e70b3dcf7a6b86481881c7ac0b44a8095178"><code>be80e70</code></a> pubsub/awssnssqs: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3194">#3194</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/7d690993a53cf8cc2e7af07872876d58601f1261"><code>7d69099</code></a> blob/azblob: Update to latest, and restore As for dirlist (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3191">#3191</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/e942f3c339f0eb617ac4dbc7f37cc4e5920ee7cc"><code>e942f3c</code></a> blob/azblob: Restore As for List entry (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3188">#3188</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.27.0...v0.28.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.27.0&new-version=0.28.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-11 14:09:51 +02:00
cloud.google.com/go/storage v1.14.0/go.mod h1:GrKmX003DSIwi9o29oFT7YDnHYwZoctc3fOKtUw0Xmo=
feat(deps): bump gocloud.dev from 0.34.0 to 0.35.0 (#4467) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.34.0 to 0.35.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.35.0</h2> <p><strong>BREAKING CHANGES</strong></p> <p>This release updates the dependency on AWS/S3, which included some breaking changes; see <a href="https://redirect.github.com/google/go-cloud/pull/3342">google/go-cloud#3342</a> for details.</p> <p><strong>blob</strong></p> <ul> <li><em>gcsblob</em>: Fix unauthenticated requests.</li> </ul> <p><strong>runtimevar</strong></p> <ul> <li><em>constantvar</em>: Add support for reading the constant variable value from the environment.</li> </ul> <p><strong>docstore</strong></p> <ul> <li><em>gcpfilestore</em>: Add support for non-default databases.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/27e0bca95dae3165b94cab4f9b7e2e4b087c8aef"><code>27e0bca</code></a> all: prep for release (<a href="https://redirect.github.com/google/go-cloud/issues/3350">#3350</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/53ccd8db26a14fd2a40bfcb28af1a1ceba4663f4"><code>53ccd8d</code></a> all: update deps, including a breaking S3 change (<a href="https://redirect.github.com/google/go-cloud/issues/3342">#3342</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fa413a39cdf8ffe0890a1b0a4cf5e06e0c915592"><code>fa413a3</code></a> docstore/gcpfilestore: add support for non-default databases. (<a href="https://redirect.github.com/google/go-cloud/issues/3345">#3345</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/c04000b96462ad3ec62e633eafd759185991bb27"><code>c04000b</code></a> secrets/hashivault: Update go-jose per dependabot (<a href="https://redirect.github.com/google/go-cloud/issues/3346">#3346</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/6d5d2890816abc88cd11ef13d6cd6506eb5b5537"><code>6d5d289</code></a> pubsub/natspubsub: upgrade a dependency (<a href="https://redirect.github.com/google/go-cloud/issues/3336">#3336</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/375e097193225b4ef300a336e04ccad9ace50bc1"><code>375e097</code></a> pubsub/natspubsub: Update dependency (<a href="https://redirect.github.com/google/go-cloud/issues/3331">#3331</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/35ac324ff7fae5ddc0f9dc2ff234a7d6b4935a20"><code>35ac324</code></a> all: update dependencies (<a href="https://redirect.github.com/google/go-cloud/issues/3329">#3329</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/4a18be0f4a48c145da4a76499485a45478fd69aa"><code>4a18be0</code></a> secrets/awskms: update the example for the AWS ARN use case (<a href="https://redirect.github.com/google/go-cloud/issues/3320">#3320</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/486d484a8f73fd5bedc910d4fd89c52e11412e68"><code>486d484</code></a> kafkapubsub: rename dependency Shopify/sarama to IBM/sarama (<a href="https://redirect.github.com/google/go-cloud/issues/3319">#3319</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/db7e808e313228ed8607a94d6e5cd075d66f4e86"><code>db7e808</code></a> runtimevar/constantvar: Add support for reading the constantvar from an envir...</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.34.0...v0.35.0">compare view</a></li> </ul> </details> <br /> <details> <summary>Most Recent Ignore Conditions Applied to This Pull Request</summary> | Dependency Name | Ignore Conditions | | --- | --- | | gocloud.dev | [>= 0.25.a, < 0.26] | </details> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.34.0&new-version=0.35.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-11 12:55:26 +02:00
cloud.google.com/go/storage v1.35.1 h1:B59ahL//eDfx2IIKFBeT5Atm9wnNmj3+8xG/W4WB//w=
cloud.google.com/go/storage v1.35.1/go.mod h1:M6M/3V/D3KpzMTJyPOR/HU6n2Si5QdaXYEsng2xgOs8=
fix(deps): bump code.gitea.io/sdk/gitea from 0.17.0 to 0.17.1 (#4512) Bumps code.gitea.io/sdk/gitea from 0.17.0 to 0.17.1. [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=code.gitea.io/sdk/gitea&package-manager=go_modules&previous-version=0.17.0&new-version=0.17.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-06 14:10:04 +02:00
code.gitea.io/sdk/gitea v0.17.1 h1:3jCPOG2ojbl8AcfaUCRYLT5MUcBMFwS0OSK2mA5Zok8=
code.gitea.io/sdk/gitea v0.17.1/go.mod h1:aCnBqhHpoEWA180gMbaCtdX9Pl6BWBAuuP2miadoTNM=
feat(deps): use mergo 1.0.0
2023-07-31 18:32:36 +02:00
dario.cat/mergo v1.0.0 h1:AGCNq9Evsj31mOgNPcLyXc+4PNABt905YmuqPYYpBWk=
dario.cat/mergo v1.0.0/go.mod h1:uNxQE+84aUszobStD9th8a29P2fMDhsBdgRYvZOxGmk=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
dmitri.shuralyov.com/gpu/mtl v0.0.0-20190408044501-666a987793e9/go.mod h1:H6x//7gZCb22OMCxBHrMx7a5I7Hp++hsVxbQ4BYO7hU=
feat: update nfpm (#2640) * feat: update nfpm * feat: update nfpm * feat: update nfpm * feat: update nfpm * fix: dir type * docs: dir * docs: typo * fix: race * fix: race cond
2021-11-14 03:23:11 +02:00
github.com/AlekSi/pointer v1.2.0 h1:glcy/gc4h8HnG2Z3ZECSzZ1IX1x2JxRVuDzaJwQE0+w=
github.com/AlekSi/pointer v1.2.0/go.mod h1:gZGfd3dpW4vEc/UlyfKKi1roIqcCgwOIvb0tSNSBle0=
feat(deps): bump github.com/google/ko from 0.12.0 to 0.13.0 (#3880) Bumps [github.com/google/ko](https://github.com/google/ko) from 0.12.0 to 0.13.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/ko/releases">github.com/google/ko's releases</a>.</em></p> <blockquote> <h2>v0.13.0</h2> <h2>What's Changed</h2> <ul> <li>SPDX: Fix package manager label by <a href="https://github.com/puerco"><code>@​puerco</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/801">ko-build/ko#801</a></li> <li>SPDX 2.3 support by <a href="https://github.com/puerco"><code>@​puerco</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/803">ko-build/ko#803</a></li> <li>ci: build and test using 1.18 and 1.19 (drop 1.17) by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/812">ko-build/ko#812</a></li> <li>removes repo move message by <a href="https://github.com/mchmarny"><code>@​mchmarny</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/814">ko-build/ko#814</a></li> <li>feat: write sbom result to disk by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/822">ko-build/ko#822</a></li> <li>feat: adding support for using multiple keychain for sending sbom results to a different repository by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/821">ko-build/ko#821</a></li> <li>Move docs to ko.build by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/749">ko-build/ko#749</a></li> <li>Update setup-ko version by <a href="https://github.com/ianlewis"><code>@​ianlewis</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/836">ko-build/ko#836</a></li> <li>Add -- usage in readme by <a href="https://github.com/jwcesign"><code>@​jwcesign</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/840">ko-build/ko#840</a></li> <li>add CONTRIBUTING, code of conduct, roadmap by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/837">ko-build/ko#837</a></li> <li>attempt to fix GH Pages publishing by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/843">ko-build/ko#843</a></li> <li>doc: fix link to Installation page in Getting Started by <a href="https://github.com/antoineco"><code>@​antoineco</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/846">ko-build/ko#846</a></li> <li>.ko.yaml: bump golang 1.18 -&gt; 1.19 by <a href="https://github.com/srenatus"><code>@​srenatus</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/848">ko-build/ko#848</a></li> <li>truncate -image-refs file by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/855">ko-build/ko#855</a></li> <li>update docs: fix broken links, align with README by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/854">ko-build/ko#854</a></li> <li>Handle KO_DOCKER_REPO=ko.local/repo and --bare correctly by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/820">ko-build/ko#820</a></li> <li>another docs update by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/856">ko-build/ko#856</a></li> <li>ko.build: support some common shortlinks by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/872">ko-build/ko#872</a></li> <li>install: fail with 404 instead of gzip error when url was wrong by <a href="https://github.com/grosser"><code>@​grosser</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/879">ko-build/ko#879</a></li> <li>feat: deduplicate tags by <a href="https://github.com/bluebrown"><code>@​bluebrown</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/884">ko-build/ko#884</a></li> <li>install mkdocs-redirect when publishing site by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/873">ko-build/ko#873</a></li> <li>nit: replace one-item slice with const by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/885">ko-build/ko#885</a></li> <li>Temp fix for SLSA generators by <a href="https://github.com/laurentsimon"><code>@​laurentsimon</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/886">ko-build/ko#886</a></li> <li>Fix verifier by <a href="https://github.com/laurentsimon"><code>@​laurentsimon</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/891">ko-build/ko#891</a></li> <li>Fix link in static-assets.md by <a href="https://github.com/yuryu"><code>@​yuryu</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/893">ko-build/ko#893</a></li> <li>add KO_DEFAULTBASEIMAGE usage to docs by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/895">ko-build/ko#895</a></li> <li>Publish an tagged image on release by <a href="https://github.com/vdemeester"><code>@​vdemeester</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/868">ko-build/ko#868</a></li> <li>Add option to configure default platforms by <a href="https://github.com/ReToCode"><code>@​ReToCode</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/897">ko-build/ko#897</a></li> <li>Fix broken SLSA link by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/899">ko-build/ko#899</a></li> <li>add MAINTAINERS.md by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/905">ko-build/ko#905</a></li> <li>fix: possible race condition when applying templates to flags/ldflags by <a href="https://github.com/caarlos0"><code>@​caarlos0</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/913">ko-build/ko#913</a></li> <li>update docs to reflect actual default base image by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/903">ko-build/ko#903</a></li> <li>remove repeated error message on failure by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/921">ko-build/ko#921</a></li> <li>website: update CNCF announcement by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/920">ko-build/ko#920</a></li> <li>fix KO_CONFIG_PATH pointing to a file by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/923">ko-build/ko#923</a></li> <li>upgrade to cosign v2.0.0-rc.0 by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/933">ko-build/ko#933</a></li> <li>Feature: Add ECR presubmit testing. by <a href="https://github.com/mattmoor"><code>@​mattmoor</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/934">ko-build/ko#934</a></li> <li>remove 'ko deps' by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/937">ko-build/ko#937</a></li> <li>feat: Add KO_GO_PATH env var by <a href="https://github.com/embano1"><code>@​embano1</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/930">ko-build/ko#930</a></li> <li>add ko.build/slack short link by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/945">ko-build/ko#945</a></li> <li>update link to ko goreleaser docs by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/936">ko-build/ko#936</a></li> <li>add ko community meeting details by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/938">ko-build/ko#938</a></li> <li>fix cosign by adding --yes by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/973">ko-build/ko#973</a></li> <li>fix: handle docker's unknown/unknown platform in index manifests by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/975">ko-build/ko#975</a></li> <li>fix file extension for cyclonedx by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/974">ko-build/ko#974</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/ianlewis"><code>@​ianlewis</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/836">ko-build/ko#836</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ko-build/ko/commit/e22e7a15ffb988adc14c3fc6a964f61ed711812f"><code>e22e7a1</code></a> bump ggcr dep to <a href="https://github.com/main"><code>@​main</code></a> (<a href="https://redirect.github.com/google/ko/issues/976">#976</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/8e075ae1f1822bb61a871f11197566b362c342f0"><code>8e075ae</code></a> fix file extension for cyclonedx (<a href="https://redirect.github.com/google/ko/issues/974">#974</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/11670b7498be63bc0e04e7ba36433fd22f9654ce"><code>11670b7</code></a> fix: handle docker's unknown/unknown platform in index manifests (<a href="https://redirect.github.com/google/ko/issues/975">#975</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/7ce947817e2f59942cb181aa833bfd13533bcc19"><code>7ce9478</code></a> fix cosign by adding --yes (<a href="https://redirect.github.com/google/ko/issues/973">#973</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/9302da78dc995b2b2dd70c044708c3c4c6a056b6"><code>9302da7</code></a> Bump k8s.io/apimachinery from 0.26.1 to 0.26.2 (<a href="https://redirect.github.com/google/ko/issues/972">#972</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/a1588838ba1698c3ca3f6785363a1a9f82ed4baa"><code>a158883</code></a> Bump sigstore/cosign-installer from 2.8.1 to 3.0.1 (<a href="https://redirect.github.com/google/ko/issues/971">#971</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/86b6c2854f8a7c321ce1b8ea121938ce9cc79475"><code>86b6c28</code></a> Bump actions/checkout from 2 to 3 (<a href="https://redirect.github.com/google/ko/issues/966">#966</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/0bd12fb106ed9d03994a6b8883f8a5d834a2aa15"><code>0bd12fb</code></a> Bump slsa-framework/slsa-github-generator from 1.2.1 to 1.5.0 (<a href="https://redirect.github.com/google/ko/issues/967">#967</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/d5125daacd07306d3814a6910cc54422824331e6"><code>d5125da</code></a> Bump github.com/sigstore/cosign/v2 from 2.0.0-rc.2 to 2.0.0 (<a href="https://redirect.github.com/google/ko/issues/965">#965</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/03f4aed68268fb320b32195c80292300056b264c"><code>03f4aed</code></a> add ko community meeting details (<a href="https://redirect.github.com/google/ko/issues/938">#938</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/ko/compare/v0.12.0...v0.13.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/ko&package-manager=go_modules&previous-version=0.12.0&new-version=0.13.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --------- Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2023-03-29 19:38:57 +02:00
github.com/Azure/azure-sdk-for-go v68.0.0+incompatible h1:fcYLmCpyNYRnvJbPerq7U0hS+6+I79yEDJBqVNcqUzU=
github.com/Azure/azure-sdk-for-go v68.0.0+incompatible/go.mod h1:9XXNKU+eRnpl9moKnB4QOLf1HestfXbmab5FXxiDBjc=
feat(deps): bump gocloud.dev from 0.34.0 to 0.35.0 (#4467) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.34.0 to 0.35.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.35.0</h2> <p><strong>BREAKING CHANGES</strong></p> <p>This release updates the dependency on AWS/S3, which included some breaking changes; see <a href="https://redirect.github.com/google/go-cloud/pull/3342">google/go-cloud#3342</a> for details.</p> <p><strong>blob</strong></p> <ul> <li><em>gcsblob</em>: Fix unauthenticated requests.</li> </ul> <p><strong>runtimevar</strong></p> <ul> <li><em>constantvar</em>: Add support for reading the constant variable value from the environment.</li> </ul> <p><strong>docstore</strong></p> <ul> <li><em>gcpfilestore</em>: Add support for non-default databases.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/27e0bca95dae3165b94cab4f9b7e2e4b087c8aef"><code>27e0bca</code></a> all: prep for release (<a href="https://redirect.github.com/google/go-cloud/issues/3350">#3350</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/53ccd8db26a14fd2a40bfcb28af1a1ceba4663f4"><code>53ccd8d</code></a> all: update deps, including a breaking S3 change (<a href="https://redirect.github.com/google/go-cloud/issues/3342">#3342</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fa413a39cdf8ffe0890a1b0a4cf5e06e0c915592"><code>fa413a3</code></a> docstore/gcpfilestore: add support for non-default databases. (<a href="https://redirect.github.com/google/go-cloud/issues/3345">#3345</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/c04000b96462ad3ec62e633eafd759185991bb27"><code>c04000b</code></a> secrets/hashivault: Update go-jose per dependabot (<a href="https://redirect.github.com/google/go-cloud/issues/3346">#3346</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/6d5d2890816abc88cd11ef13d6cd6506eb5b5537"><code>6d5d289</code></a> pubsub/natspubsub: upgrade a dependency (<a href="https://redirect.github.com/google/go-cloud/issues/3336">#3336</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/375e097193225b4ef300a336e04ccad9ace50bc1"><code>375e097</code></a> pubsub/natspubsub: Update dependency (<a href="https://redirect.github.com/google/go-cloud/issues/3331">#3331</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/35ac324ff7fae5ddc0f9dc2ff234a7d6b4935a20"><code>35ac324</code></a> all: update dependencies (<a href="https://redirect.github.com/google/go-cloud/issues/3329">#3329</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/4a18be0f4a48c145da4a76499485a45478fd69aa"><code>4a18be0</code></a> secrets/awskms: update the example for the AWS ARN use case (<a href="https://redirect.github.com/google/go-cloud/issues/3320">#3320</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/486d484a8f73fd5bedc910d4fd89c52e11412e68"><code>486d484</code></a> kafkapubsub: rename dependency Shopify/sarama to IBM/sarama (<a href="https://redirect.github.com/google/go-cloud/issues/3319">#3319</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/db7e808e313228ed8607a94d6e5cd075d66f4e86"><code>db7e808</code></a> runtimevar/constantvar: Add support for reading the constantvar from an envir...</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.34.0...v0.35.0">compare view</a></li> </ul> </details> <br /> <details> <summary>Most Recent Ignore Conditions Applied to This Pull Request</summary> | Dependency Name | Ignore Conditions | | --- | --- | | gocloud.dev | [>= 0.25.a, < 0.26] | </details> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.34.0&new-version=0.35.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-11 12:55:26 +02:00
github.com/Azure/azure-sdk-for-go/sdk/azcore v1.9.0 h1:fb8kj/Dh4CSwgsOzHeZY4Xh68cFVbzXx+ONXGMY//4w=
github.com/Azure/azure-sdk-for-go/sdk/azcore v1.9.0/go.mod h1:uReU2sSxZExRPBAg3qKzmAucSi51+SP1OhohieR821Q=
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419) Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.1.1 to 2.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's releases</a>.</em></p> <blockquote> <h2>v2.2.1</h2> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's changelog</a>.</em></p> <blockquote> <h1>v2.2.1</h1> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign/commit/12cbf9ea177d22bbf5cf028bcb4712b5f174ebc6"><code>12cbf9e</code></a> add changelog for v2.2.1 release (<a href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/827f24e9d4a1f8e845cb1597d02053410f5bbe2a"><code>827f24e</code></a> feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8ac891ff0e29ddc67965423bee8f826219c6eb0f"><code>8ac891f</code></a> Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li><a href="https://github.com/sigstore/cosign/commit/8b366c497bd22b9be7742d057b8f59083dcadee0"><code>8b366c4</code></a> add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/23920de5623a505921ba4e62fa97e2553eff4699"><code>23920de</code></a> chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/e022e1c13240d1ae5b3c408bc53e389154331713"><code>e022e1c</code></a> chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/28c59c5eca6386924cc8f381afe94efe1e957679"><code>28c59c5</code></a> add missing groups key (<a href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8e5bdcc0ff39b8dc1b477251fef521601df76ec0"><code>8e5bdcc</code></a> chore(deps): bump github.com/google/certificate-transparency-go (<a href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/510cac4ef54274823599082e3a57a556ccd5c9e5"><code>510cac4</code></a> chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/063902b1d78fed7c12c9d9ce06248d36963e8169"><code>063902b</code></a> chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 18:39:49 +02:00
github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.4.0 h1:BMAjVKJM0U/CYF27gA0ZMmXGkOcvfFtD0oHVZ1TIPRI=
github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.4.0/go.mod h1:1fXstnBMas5kzG+S3q8UoJcmyU6nUeunJcMDHcRYHhs=
feat(deps): bump gocloud.dev from 0.34.0 to 0.35.0 (#4467) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.34.0 to 0.35.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.35.0</h2> <p><strong>BREAKING CHANGES</strong></p> <p>This release updates the dependency on AWS/S3, which included some breaking changes; see <a href="https://redirect.github.com/google/go-cloud/pull/3342">google/go-cloud#3342</a> for details.</p> <p><strong>blob</strong></p> <ul> <li><em>gcsblob</em>: Fix unauthenticated requests.</li> </ul> <p><strong>runtimevar</strong></p> <ul> <li><em>constantvar</em>: Add support for reading the constant variable value from the environment.</li> </ul> <p><strong>docstore</strong></p> <ul> <li><em>gcpfilestore</em>: Add support for non-default databases.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/27e0bca95dae3165b94cab4f9b7e2e4b087c8aef"><code>27e0bca</code></a> all: prep for release (<a href="https://redirect.github.com/google/go-cloud/issues/3350">#3350</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/53ccd8db26a14fd2a40bfcb28af1a1ceba4663f4"><code>53ccd8d</code></a> all: update deps, including a breaking S3 change (<a href="https://redirect.github.com/google/go-cloud/issues/3342">#3342</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fa413a39cdf8ffe0890a1b0a4cf5e06e0c915592"><code>fa413a3</code></a> docstore/gcpfilestore: add support for non-default databases. (<a href="https://redirect.github.com/google/go-cloud/issues/3345">#3345</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/c04000b96462ad3ec62e633eafd759185991bb27"><code>c04000b</code></a> secrets/hashivault: Update go-jose per dependabot (<a href="https://redirect.github.com/google/go-cloud/issues/3346">#3346</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/6d5d2890816abc88cd11ef13d6cd6506eb5b5537"><code>6d5d289</code></a> pubsub/natspubsub: upgrade a dependency (<a href="https://redirect.github.com/google/go-cloud/issues/3336">#3336</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/375e097193225b4ef300a336e04ccad9ace50bc1"><code>375e097</code></a> pubsub/natspubsub: Update dependency (<a href="https://redirect.github.com/google/go-cloud/issues/3331">#3331</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/35ac324ff7fae5ddc0f9dc2ff234a7d6b4935a20"><code>35ac324</code></a> all: update dependencies (<a href="https://redirect.github.com/google/go-cloud/issues/3329">#3329</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/4a18be0f4a48c145da4a76499485a45478fd69aa"><code>4a18be0</code></a> secrets/awskms: update the example for the AWS ARN use case (<a href="https://redirect.github.com/google/go-cloud/issues/3320">#3320</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/486d484a8f73fd5bedc910d4fd89c52e11412e68"><code>486d484</code></a> kafkapubsub: rename dependency Shopify/sarama to IBM/sarama (<a href="https://redirect.github.com/google/go-cloud/issues/3319">#3319</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/db7e808e313228ed8607a94d6e5cd075d66f4e86"><code>db7e808</code></a> runtimevar/constantvar: Add support for reading the constantvar from an envir...</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.34.0...v0.35.0">compare view</a></li> </ul> </details> <br /> <details> <summary>Most Recent Ignore Conditions Applied to This Pull Request</summary> | Dependency Name | Ignore Conditions | | --- | --- | | gocloud.dev | [>= 0.25.a, < 0.26] | </details> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.34.0&new-version=0.35.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-11 12:55:26 +02:00
github.com/Azure/azure-sdk-for-go/sdk/internal v1.5.0 h1:d81/ng9rET2YqdVkVwkb6EXeRrLJIwyGnJcAlAWKwhs=
github.com/Azure/azure-sdk-for-go/sdk/internal v1.5.0/go.mod h1:s4kgfzA0covAXNicZHDMN58jExvcng2mC/DepXiF1EI=
feat(deps): bump gocloud.dev from 0.29.0 to 0.30.0 (#4129) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.29.0 to 0.30.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.30.0</h2> <p><strong>blob</strong></p> <ul> <li><strong>all</strong>: Add <code>Upload</code> and <code>Download</code> methods that may be more efficient for some drivers.</li> <li><strong>s3blob</strong>: Add support for per-request <code>s3v2.Options</code>.</li> <li><strong>s3blob</strong>: Stop escaping second <code>/</code> in <code>//</code>; it's no longer necessary.</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>gcppubsub</strong>: Make it possible to configure <code>max_send_batch_size</code>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/d2d5bedb50683e2a6b893b75aafc193eca2715db"><code>d2d5bed</code></a> all: prep for release (<a href="https://redirect.github.com/google/go-cloud/issues/3263">#3263</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/c2e172b5a78def74973f7f3a8ece7c0bd6967432"><code>c2e172b</code></a> all: update dependencies (<a href="https://redirect.github.com/google/go-cloud/issues/3262">#3262</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/098177a48cae1bebfc90f88ed43d319444cab804"><code>098177a</code></a> blob/s3blob: fix the 'awssdk' argument examples</li> <li><a href="https://github.com/google/go-cloud/commit/2e4fad43f0b2606833b6a0de3e18628c70e11398"><code>2e4fad4</code></a> all: remove refs to deprecated xerrors</li> <li><a href="https://github.com/google/go-cloud/commit/1db413f1b3c4e344618b36401ba7e6dca3892929"><code>1db413f</code></a> pubsub/gcppubsub: make it possible to configure max_send_batch_size</li> <li><a href="https://github.com/google/go-cloud/commit/0c8428bf433136e7a4d96de0841f6373c6eacb53"><code>0c8428b</code></a> blob: Add Upload and Download methods that may be more efficient for some dri...</li> <li><a href="https://github.com/google/go-cloud/commit/54c71241a56f4c89eb64f587e5dc55667eaa40a3"><code>54c7124</code></a> all: cleanup duplicate import statements</li> <li><a href="https://github.com/google/go-cloud/commit/28b1328ae4fee939441faa5ee2e4eeba74c88ce7"><code>28b1328</code></a> all: minor code simplifications for returned boolean expressions</li> <li><a href="https://github.com/google/go-cloud/commit/2a407f5e6a71951384531445e25c58194f235062"><code>2a407f5</code></a> blob/gcsblob: Refresh goldens</li> <li><a href="https://github.com/google/go-cloud/commit/0cc16c8ae11e47028df24c4973debd6c56d29729"><code>0cc16c8</code></a> all: update goldens (<a href="https://redirect.github.com/google/go-cloud/issues/3252">#3252</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.29.0...v0.30.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.29.0&new-version=0.30.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-20 14:04:08 +02:00
github.com/Azure/azure-sdk-for-go/sdk/keyvault/azkeys v0.10.0 h1:m/sWOGCREuSBqg2htVQTBY8nOZpyajYztF0vUvSZTuM=
github.com/Azure/azure-sdk-for-go/sdk/keyvault/azkeys v0.10.0/go.mod h1:Pu5Zksi2KrU7LPbZbNINx6fuVrUp/ffvpxdDj+i8LeE=
feat(deps): bump gocloud.dev from 0.27.0 to 0.28.0 (#3689) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.27.0 to 0.28.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.28.0</h2> <p><strong>BREAKING CHANGES</strong>:</p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK.</li> <li><strong>blob/azureblob</strong>: Updated to match recent breaking changes in the Azure packages (yes, again).</li> <li><strong>pubsub/awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>blob</strong></p> <ul> <li><strong>memblob</strong>: Fixed bug where use of <code>BeforeCopy</code> callback would drop the actual copying.</li> <li><strong>azureblob</strong>: Updated to match recent breaking changes in the Azure packages.</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>all</strong>: Simplified and improved batch sizing, should resolve issues with too-frequent polling in some situations.</li> <li><strong>azurepubsub</strong>: Made <code>ListenerTimeout</code> configurable.</li> <li><strong>gcppubsub</strong> and <strong>awssnssqs</strong>: Support lazy mode for <code>Nack</code> (where no explicit <code>Nack</code> is sent).</li> <li><strong>awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>secrets</strong></p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK. Use azidentity.NewDefaultAzureCredential.</li> </ul> <p><strong>sql</strong></p> <ul> <li><strong>gcp/cloudsql</strong>: Fixed IAM login.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/24166090495b8e084a23aa7d11fcc81ec33e4729"><code>2416609</code></a> all: prep for v0.28.0 (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3207">#3207</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/13f46eb8065d5ea62b757f5f0f11a56f48faf7cc"><code>13f46eb</code></a> pubsub: simplify and improve batch sizing, especially for low message rates</li> <li><a href="https://github.com/google/go-cloud/commit/8f2c2b9a392a8e4a3d7a4942f88f3df607f8f6d0"><code>8f2c2b9</code></a> pubsub/memsub: Add Options for batching (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3205">#3205</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fe0a3d75fe43c039258df25ebf102602526e3052"><code>fe0a3d7</code></a> pubsub/awssqs: Fix BeforeSend/As to enable changes to the sqs input message (...</li> <li><a href="https://github.com/google/go-cloud/commit/dfaf95af34dd9022a69a061028e0ceec98e9c670"><code>dfaf95a</code></a> secrets/azurekeyvault: Use azidentity.NewDefaultAzureCredential to support ot...</li> <li><a href="https://github.com/google/go-cloud/commit/1e26311532928f060c490a7fbf2be92b55ee12c4"><code>1e26311</code></a> blob: Remove some debug logging (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3197">#3197</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/43ed5a499864c08b7b6549ff7085f19634a1f02c"><code>43ed5a4</code></a> pubsub/gcppubsub: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3195">#3195</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/be80e70b3dcf7a6b86481881c7ac0b44a8095178"><code>be80e70</code></a> pubsub/awssnssqs: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3194">#3194</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/7d690993a53cf8cc2e7af07872876d58601f1261"><code>7d69099</code></a> blob/azblob: Update to latest, and restore As for dirlist (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3191">#3191</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/e942f3c339f0eb617ac4dbc7f37cc4e5920ee7cc"><code>e942f3c</code></a> blob/azblob: Restore As for List entry (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3188">#3188</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.27.0...v0.28.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.27.0&new-version=0.28.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-11 14:09:51 +02:00
github.com/Azure/azure-sdk-for-go/sdk/keyvault/internal v0.7.1 h1:FbH3BbSb4bvGluTesZZ+ttN/MDsnMmQP36OSnDuSXqw=
github.com/Azure/azure-sdk-for-go/sdk/keyvault/internal v0.7.1/go.mod h1:9V2j0jn9jDEkCkv8w/bKTNppX/d0FVA1ud77xCIP4KA=
feat(deps): bump the gomod-deps group with 3 updates (#4200) Bumps the gomod-deps group with 3 updates: [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab), [gocloud.dev](https://github.com/google/go-cloud) and [go.uber.org/automaxprocs](https://github.com/uber-go/automaxprocs). Updates `github.com/xanzy/go-gitlab` from 0.86.0 to 0.88.0 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/xanzy/go-gitlab/commit/7e3c23c9c221c0a334e11356503a99d41f206651"><code>7e3c23c</code></a> Update pipeline tests</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/2ac3eea05ffd9c096624ce3f88bf88132940b025"><code>2ac3eea</code></a> Merge pull request <a href="https://redirect.github.com/xanzy/go-gitlab/issues/1758">#1758</a> from billiechar/billiechar-snippet-moves</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/ddb5ca097455e3087ade383fec32ab07d24cb2c0"><code>ddb5ca0</code></a> Update the PR to make the code consistent</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/a4d27d6848beb49923d87d6201330f869f230f8b"><code>a4d27d6</code></a> Merge pull request <a href="https://redirect.github.com/xanzy/go-gitlab/issues/1759">#1759</a> from PatrickRice-KSC/add-missing-housekeeping-setting</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/a42af8593e45e5a55a6008e482ecbc3dc6f5d06b"><code>a42af85</code></a> Change PipelineTestCases.SystemOutput to interface{}</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/89486a0530374b782bb0267664a5bd49394fbb31"><code>89486a0</code></a> Add missing housekeeping setting</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/852645c7728d7a4284053806b68682b2905c856a"><code>852645c</code></a> Update tests</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/f2c344ca14c5829c55154263b6504d57b26126c3"><code>f2c344c</code></a> Use separate options for each schedule</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/86dd6321cdc296bc3f9a065718e58ea33cb1e686"><code>86dd632</code></a> Add snippet repository storage move APIs</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/3c1f9bfa0d349acfb0aba8991a1abdf62495ee81"><code>3c1f9bf</code></a> Use io.ReadAll instead of ioutil.ReadAll</li> <li>Additional commits viewable in <a href="https://github.com/xanzy/go-gitlab/compare/v0.86.0...v0.88.0">compare view</a></li> </ul> </details> <br /> Updates `gocloud.dev` from 0.30.0 to 0.32.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.32.0</h2> <p>Redoing <code>v0.31.0</code> since I think I messed up the tags. Copying the release notes:</p> <p><strong>all</strong></p> <ul> <li>Update <code>go</code> version in <code>go.mod</code> to maintain cleaner <code>go.mod</code> and <code>go.sum</code> files.</li> </ul> <p><strong>blob</strong></p> <ul> <li><strong>all</strong>: Pass through reader/writer to <code>WriteTo</code>/<code>ReadFrom</code> if available (optimization).</li> <li><strong>all</strong>: Make <code>blob.Bucket</code> implement <code>io/fs.FS</code> and <code>io/fs.SubFS</code>.</li> <li><strong>gcsblob</strong>: Add support for forcing an unauthenticated client.</li> </ul> <p><strong>server</strong></p> <ul> <li>Make <code>requestlog</code> internal structs implement <code>http.Flusher</code>.</li> <li>Don't always read the full request in order to calculate the request size; use <code>Content-Length</code> when available.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/728b7c1395cb35d23e85ee0a8e957744e2560183"><code>728b7c1</code></a> all: prerelease take 2 (<a href="https://redirect.github.com/google/go-cloud/issues/3278">#3278</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/838a8fd9b6b7efc90b55cb5ed10e19463cbb1262"><code>838a8fd</code></a> all: prerelease (<a href="https://redirect.github.com/google/go-cloud/issues/3277">#3277</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0f33c81c8dbec9d5302d9615b95c5ba878e0ede9"><code>0f33c81</code></a> all: add dragonfly build to test suite (<a href="https://redirect.github.com/google/go-cloud/issues/3268">#3268</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/bfd1b284ad86ce55bd0a7bc3e1c27fc8814fb87a"><code>bfd1b28</code></a> all: update dependencies (<a href="https://redirect.github.com/google/go-cloud/issues/3276">#3276</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8d4590ac1e51bca704bc85422cb0a2f2d0b1b7ba"><code>8d4590a</code></a> server/requestlog: Don't consume entire body just to get a request size (<a href="https://redirect.github.com/google/go-cloud/issues/3274">#3274</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/a1d9f4295c59f30b30a085682b47e314c6960673"><code>a1d9f42</code></a> server/requestlog: make responseStats implement http.Flusher (<a href="https://redirect.github.com/google/go-cloud/issues/3275">#3275</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cab06ea136cfdd73f67300332994f81234469bc"><code>8cab06e</code></a> blob/gcsblob: add support for forcing an authenticated client (<a href="https://redirect.github.com/google/go-cloud/issues/3273">#3273</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0e5728dd337838e82e07e03dcef9f54dfc04cc52"><code>0e5728d</code></a> blob: make blob.Bucket implement io/fs.FS and io/fs.SubFS (<a href="https://redirect.github.com/google/go-cloud/issues/3272">#3272</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/a6551792237ccc995a6e95169210ac8e77dbcd94"><code>a655179</code></a> all: update go.mod files to go 1.19 (<a href="https://redirect.github.com/google/go-cloud/issues/3271">#3271</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8385fc39c70f6589823ca019e399f5514feb377d"><code>8385fc3</code></a> blob: pass through reader/writer to <code>WriteTo</code>/<code>ReadFrom</code> if available (<a href="https://redirect.github.com/google/go-cloud/issues/3267">#3267</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.30.0...v0.32.0">compare view</a></li> </ul> </details> <br /> Updates `go.uber.org/automaxprocs` from 1.5.2 to 1.5.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/uber-go/automaxprocs/releases">go.uber.org/automaxprocs's releases</a>.</em></p> <blockquote> <h2>v1.5.3</h2> <ul> <li>Fix mountinfo parsing when super options have fields with spaces.</li> <li>Fix division by zero while parsing cgroups.</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/uber-go/automaxprocs/blob/master/CHANGELOG.md">go.uber.org/automaxprocs's changelog</a>.</em></p> <blockquote> <h2>v1.5.3 (2023-07-19)</h2> <ul> <li>Fix mountinfo parsing when super options have fields with spaces.</li> <li>Fix division by zero while parsing cgroups.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/uber-go/automaxprocs/commit/e83e959d8845f659d02749ba5598fd62a7129e4e"><code>e83e959</code></a> Release v1.5.3 (<a href="https://redirect.github.com/uber-go/automaxprocs/issues/77">#77</a>)</li> <li><a href="https://github.com/uber-go/automaxprocs/commit/94404505e072633727945d6adc276be8759dadcf"><code>9440450</code></a> Update actions (<a href="https://redirect.github.com/uber-go/automaxprocs/issues/76">#76</a>)</li> <li><a href="https://github.com/uber-go/automaxprocs/commit/4b0a5c9c3c30af086d1251cecd4114b7d4b55a45"><code>4b0a5c9</code></a> set CI perms to readonly (<a href="https://redirect.github.com/uber-go/automaxprocs/issues/75">#75</a>)</li> <li><a href="https://github.com/uber-go/automaxprocs/commit/c64632e175f532a5fe994622797d70b06338337e"><code>c64632e</code></a> Drop Go 1.17 and Go 1.18 from CI (<a href="https://redirect.github.com/uber-go/automaxprocs/issues/74">#74</a>)</li> <li><a href="https://github.com/uber-go/automaxprocs/commit/60f22786b2d20055ca8d888ed455a25aed935bea"><code>60f2278</code></a> fix: mountinfo parsing (<a href="https://redirect.github.com/uber-go/automaxprocs/issues/73">#73</a>)</li> <li><a href="https://github.com/uber-go/automaxprocs/commit/d064ede19db88036b1a2fb6b41113717a84dfda2"><code>d064ede</code></a> Fix division by zero (<a href="https://redirect.github.com/uber-go/automaxprocs/issues/71">#71</a>)</li> <li>See full diff in <a href="https://github.com/uber-go/automaxprocs/compare/v1.5.2...v1.5.3">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-20 14:56:26 +02:00
github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/storage/armstorage v1.2.0 h1:Ma67P/GGprNwsslzEH6+Kb8nybI8jpDTm4Wmzu2ReK8=
chore: go mod tidy Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-09-13 19:03:05 +02:00
github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/storage/armstorage v1.2.0/go.mod h1:c+Lifp3EDEamAkPVzMooRNOK6CZjNSdEnf1A7jsI9u4=
feat(deps): bump gocloud.dev from 0.34.0 to 0.35.0 (#4467) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.34.0 to 0.35.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.35.0</h2> <p><strong>BREAKING CHANGES</strong></p> <p>This release updates the dependency on AWS/S3, which included some breaking changes; see <a href="https://redirect.github.com/google/go-cloud/pull/3342">google/go-cloud#3342</a> for details.</p> <p><strong>blob</strong></p> <ul> <li><em>gcsblob</em>: Fix unauthenticated requests.</li> </ul> <p><strong>runtimevar</strong></p> <ul> <li><em>constantvar</em>: Add support for reading the constant variable value from the environment.</li> </ul> <p><strong>docstore</strong></p> <ul> <li><em>gcpfilestore</em>: Add support for non-default databases.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/27e0bca95dae3165b94cab4f9b7e2e4b087c8aef"><code>27e0bca</code></a> all: prep for release (<a href="https://redirect.github.com/google/go-cloud/issues/3350">#3350</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/53ccd8db26a14fd2a40bfcb28af1a1ceba4663f4"><code>53ccd8d</code></a> all: update deps, including a breaking S3 change (<a href="https://redirect.github.com/google/go-cloud/issues/3342">#3342</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fa413a39cdf8ffe0890a1b0a4cf5e06e0c915592"><code>fa413a3</code></a> docstore/gcpfilestore: add support for non-default databases. (<a href="https://redirect.github.com/google/go-cloud/issues/3345">#3345</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/c04000b96462ad3ec62e633eafd759185991bb27"><code>c04000b</code></a> secrets/hashivault: Update go-jose per dependabot (<a href="https://redirect.github.com/google/go-cloud/issues/3346">#3346</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/6d5d2890816abc88cd11ef13d6cd6506eb5b5537"><code>6d5d289</code></a> pubsub/natspubsub: upgrade a dependency (<a href="https://redirect.github.com/google/go-cloud/issues/3336">#3336</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/375e097193225b4ef300a336e04ccad9ace50bc1"><code>375e097</code></a> pubsub/natspubsub: Update dependency (<a href="https://redirect.github.com/google/go-cloud/issues/3331">#3331</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/35ac324ff7fae5ddc0f9dc2ff234a7d6b4935a20"><code>35ac324</code></a> all: update dependencies (<a href="https://redirect.github.com/google/go-cloud/issues/3329">#3329</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/4a18be0f4a48c145da4a76499485a45478fd69aa"><code>4a18be0</code></a> secrets/awskms: update the example for the AWS ARN use case (<a href="https://redirect.github.com/google/go-cloud/issues/3320">#3320</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/486d484a8f73fd5bedc910d4fd89c52e11412e68"><code>486d484</code></a> kafkapubsub: rename dependency Shopify/sarama to IBM/sarama (<a href="https://redirect.github.com/google/go-cloud/issues/3319">#3319</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/db7e808e313228ed8607a94d6e5cd075d66f4e86"><code>db7e808</code></a> runtimevar/constantvar: Add support for reading the constantvar from an envir...</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.34.0...v0.35.0">compare view</a></li> </ul> </details> <br /> <details> <summary>Most Recent Ignore Conditions Applied to This Pull Request</summary> | Dependency Name | Ignore Conditions | | --- | --- | | gocloud.dev | [>= 0.25.a, < 0.26] | </details> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.34.0&new-version=0.35.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-11 12:55:26 +02:00
github.com/Azure/azure-sdk-for-go/sdk/storage/azblob v1.2.0 h1:gggzg0SUMs6SQbEw+3LoSsYf9YMjkupeAnHMX8O9mmY=
github.com/Azure/azure-sdk-for-go/sdk/storage/azblob v1.2.0/go.mod h1:+6KLcKIVgxoBDMqMO/Nvy7bZ9a0nbU3I1DtFQK3YvB4=
feat(deps): bump github.com/google/ko from 0.13.0 to 0.14.1 (#4132) Bumps [github.com/google/ko](https://github.com/google/ko) from 0.13.0 to 0.14.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/ko/releases">github.com/google/ko's releases</a>.</em></p> <blockquote> <h2>v0.14.1</h2> <h2>What's Changed</h2> <ul> <li>fix: Use attestation-name output by <a href="https://github.com/ianlewis"><code>@​ianlewis</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/980">ko-build/ko#980</a></li> <li>Upgrade to go120 by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/984">ko-build/ko#984</a></li> <li>fix release workflow by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/977">ko-build/ko#977</a></li> <li>fix deprecated attestation name by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/983">ko-build/ko#983</a></li> <li>refactor release job by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/986">ko-build/ko#986</a></li> <li>use git hash instead of git tag by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/988">ko-build/ko#988</a></li> <li>Correct a typo in resolver.go by <a href="https://github.com/felixonmars"><code>@​felixonmars</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/989">ko-build/ko#989</a></li> <li>feat: add riscv64 to goreleaser goarch by <a href="https://github.com/ernado"><code>@​ernado</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/990">ko-build/ko#990</a></li> <li>try to fix codeql workflow by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/994">ko-build/ko#994</a></li> <li>Push images faster by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1005">ko-build/ko#1005</a></li> <li>Don't publish tags twice by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1010">ko-build/ko#1010</a></li> <li>Add context to many gobuild errors by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1016">ko-build/ko#1016</a></li> <li>Fix --local with KO_DOCKER_REPO by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1017">ko-build/ko#1017</a></li> <li>Fix: Incorporate platform architecture by <a href="https://github.com/mattmoor"><code>@​mattmoor</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1029">ko-build/ko#1029</a></li> <li>Update community.md by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1035">ko-build/ko#1035</a></li> <li>mention ko tekton task by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1039">ko-build/ko#1039</a></li> <li>Update community.md by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1037">ko-build/ko#1037</a></li> <li>Fix kind image loading for MacOS by <a href="https://github.com/aidy"><code>@​aidy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1026">ko-build/ko#1026</a></li> <li>Revert &quot;Fix kind image loading for MacOS&quot; by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1054">ko-build/ko#1054</a></li> <li>update boilerplate file to be KO Build Authors by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1056">ko-build/ko#1056</a></li> <li>Pin setup-ko to previous release by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1082">ko-build/ko#1082</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/felixonmars"><code>@​felixonmars</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/989">ko-build/ko#989</a></li> <li><a href="https://github.com/ernado"><code>@​ernado</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/990">ko-build/ko#990</a></li> <li><a href="https://github.com/aidy"><code>@​aidy</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1026">ko-build/ko#1026</a></li> <li><a href="https://github.com/luhring"><code>@​luhring</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1073">ko-build/ko#1073</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/ko-build/ko/compare/v0.13.0...v0.14.1">https://github.com/ko-build/ko/compare/v0.13.0...v0.14.1</a></p> <h2>v0.14.0</h2> <p>No release notes provided.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ko-build/ko/commit/200db7243f02b5c0303e21d8ab8e3b4ad3a229d0"><code>200db72</code></a> Pin setup-ko to previous release (<a href="https://redirect.github.com/google/ko/issues/1082">#1082</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/4366ded82cdda05ef85bc5483d19daa241d08f38"><code>4366ded</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1079">#1079</a> from ko-build/dependabot/github_actions/slsa-framewo...</li> <li><a href="https://github.com/ko-build/ko/commit/adbea950c10e2c69c7bf0589a6bf0b4e7ceafbfa"><code>adbea95</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1078">#1078</a> from ko-build/dependabot/github_actions/goreleaser/g...</li> <li><a href="https://github.com/ko-build/ko/commit/6175237fe6539a48206da87c239ad98b4f7d7312"><code>6175237</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1077">#1077</a> from ko-build/dependabot/go_modules/github.com/spf13...</li> <li><a href="https://github.com/ko-build/ko/commit/5e5fe2e703c1f0c9186975b06090ae563283f48d"><code>5e5fe2e</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1076">#1076</a> from ko-build/dependabot/github_actions/aws-actions/...</li> <li><a href="https://github.com/ko-build/ko/commit/dc9b3eebef9818e2efab17cec8dd3eebff72e074"><code>dc9b3ee</code></a> Bump github.com/spf13/viper from 1.15.0 to 1.16.0</li> <li><a href="https://github.com/ko-build/ko/commit/ed445128e25c7bd0b6643b58ac44383a583d84f5"><code>ed44512</code></a> Bump golang.org/x/tools from 0.9.3 to 0.10.0 (<a href="https://redirect.github.com/google/ko/issues/1080">#1080</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/fcd95ec958cad910b4746245662506b1f974f40e"><code>fcd95ec</code></a> Bump slsa-framework/slsa-github-generator from 1.6.0 to 1.7.0</li> <li><a href="https://github.com/ko-build/ko/commit/974f09cdeacd7042c3db573366768ecbb32246a5"><code>974f09c</code></a> Bump goreleaser/goreleaser-action from 4.2.0 to 4.3.0</li> <li><a href="https://github.com/ko-build/ko/commit/893f6e877f7c352261c13e078bb8fc9709bb285c"><code>893f6e8</code></a> Bump aws-actions/configure-aws-credentials from 2.1.0 to 2.2.0</li> <li>Additional commits viewable in <a href="https://github.com/google/ko/compare/v0.13.0...v0.14.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/ko&package-manager=go_modules&previous-version=0.13.0&new-version=0.14.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-26 18:56:50 +02:00
github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161 h1:L/gRVlceqvL25UVaW/CKtUDjefjrs0SPonmDGUVOYP0=
github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161/go.mod h1:xomTg63KZ2rFqZQzSB4Vz2SUXa1BpHTVz9L5PTmPC4E=
chore(deps): bump gocloud.dev from 0.20.0 to 0.21.0 (#1941) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.20.0 to 0.21.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.20.0...v0.21.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-12 01:14:58 +02:00
github.com/Azure/go-autorest v14.2.0+incompatible h1:V5VMDjClD3GiElqLWO7mz2MxNAK/vTfRHdAubSIPRgs=
github.com/Azure/go-autorest v14.2.0+incompatible/go.mod h1:r+4oMnoxhatjLLJ6zxSWATqVooLgysK6ZNox3g/xq24=
feat: add ko support (#3653) continuing the PR by @developer-guy - [x] should be a publisher, as it does publish the images it builds every time - [x] `Default` method does not work - [x] the `fromConfig` thing should probably be on the defaults, too - [x] wire `--skip-ko` - [x] documentation - [x] more tests - [x] use same registry as docker tests does - [ ] see if we can make the log output match goreleaser's - [ ] ?? closes #2556 closes #3490 Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com> Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> Co-authored-by: actions-user <actions@github.com> Co-authored-by: Jason Hall <jason@chainguard.dev> Co-authored-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2023-01-17 03:34:49 +02:00
github.com/Azure/go-autorest/autorest v0.11.24/go.mod h1:G6kyRlFnTuSbEYkQGawPfsCswgme4iYf6rfSKUDzbCc=
feat(deps): bump github.com/sigstore/rekor from 1.1.1 to 1.2.0 (#4044) Bumps [github.com/sigstore/rekor](https://github.com/sigstore/rekor) from 1.1.1 to 1.2.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/rekor/blob/main/CHANGELOG.md">github.com/sigstore/rekor's changelog</a>.</em></p> <blockquote> <h1>v1.2.0</h1> <h2>Functional Enhancements</h2> <ul> <li>add client method to generate TLE struct (<a href="https://redirect.github.com/sigstore/rekor/issues/1498">#1498</a>)</li> <li>add dsse type (<a href="https://redirect.github.com/sigstore/rekor/issues/1487">#1487</a>)</li> <li>support other KMS providers (AWS, Azure, Hashicorp) in addition to GCP (<a href="https://redirect.github.com/sigstore/rekor/issues/1488">#1488</a>)</li> <li>Add concurrency to backfill-redis (<a href="https://redirect.github.com/sigstore/rekor/issues/1504">#1504</a>)</li> <li>omit informational message if machine-parseable output has been requested (<a href="https://redirect.github.com/sigstore/rekor/issues/1486">#1486</a>)</li> <li>Publish stable checkpoint periodically to Redis (<a href="https://redirect.github.com/sigstore/rekor/issues/1461">#1461</a>)</li> <li>Add intoto v0.0.2 to backfill script (<a href="https://redirect.github.com/sigstore/rekor/issues/1500">#1500</a>)</li> <li>add new method to test insertability of proposed entries into log (<a href="https://redirect.github.com/sigstore/rekor/issues/1410">#1410</a>)</li> </ul> <h2>Quality Enhancements</h2> <ul> <li>use t.Skip() in fuzzers (<a href="https://redirect.github.com/sigstore/rekor/issues/1506">#1506</a>)</li> <li>improve fuzzing coverage (<a href="https://redirect.github.com/sigstore/rekor/issues/1499">#1499</a>)</li> <li>Remove watcher script (<a href="https://redirect.github.com/sigstore/rekor/issues/1484">#1484</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-frqx-jfcm-6jjr</li> <li>Remove requirement of PayloadHash for intoto 0.0.1 (<a href="https://redirect.github.com/sigstore/rekor/issues/1490">#1490</a>)</li> <li>fix lint errors, bump linter up to 1.52 (<a href="https://redirect.github.com/sigstore/rekor/issues/1485">#1485</a>)</li> <li>Remove dependencies from pkg/util (<a href="https://redirect.github.com/sigstore/rekor/issues/1469">#1469</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>Bob Callaway</li> <li>Carlos Tadeu Panato Junior</li> <li>Ceridwen Coghlan</li> <li>Cody Soyland</li> <li>Hayden B</li> <li>Miloslav Trmač</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/rekor/commit/20a995116b1548b79e62ba0ad9c29800387e8641"><code>20a9951</code></a> update for v1.2.0 (<a href="https://redirect.github.com/sigstore/rekor/issues/1507">#1507</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/140c5add105179e5ffd9e3e114fd1b6b93aebbd4"><code>140c5ad</code></a> Merge pull request from GHSA-frqx-jfcm-6jjr</li> <li><a href="https://github.com/sigstore/rekor/commit/85bb2bc7a35dcc94cd94e18984711806f437dcb6"><code>85bb2bc</code></a> use t.Skip() in fuzzers (<a href="https://redirect.github.com/sigstore/rekor/issues/1506">#1506</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/3adca0d2528699d2ff93bf78babef8b5cac46122"><code>3adca0d</code></a> Add concurrency to backfill-redis (<a href="https://redirect.github.com/sigstore/rekor/issues/1504">#1504</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/795a23619d5db1c9625a71f776474033c6712b56"><code>795a236</code></a> add client method to generate TLE struct (<a href="https://redirect.github.com/sigstore/rekor/issues/1498">#1498</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/161a796f91d7255443aa6ce98e7981e6926762f0"><code>161a796</code></a> build(deps): bump github/codeql-action from 2.3.3 to 2.3.4 (<a href="https://redirect.github.com/sigstore/rekor/issues/1505">#1505</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/35c4489abcff256298f1bc9f7caaf5a946750dac"><code>35c4489</code></a> add dsse type (<a href="https://redirect.github.com/sigstore/rekor/issues/1487">#1487</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/d318e2bf433d398d95923f3509557777a2fe5abb"><code>d318e2b</code></a> support other KMS providers (AWS, Azure, Hashicorp) in addition to GCP (<a href="https://redirect.github.com/sigstore/rekor/issues/1488">#1488</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/d508ebad91ef4e39d8e0dd3543cebe20321dc752"><code>d508eba</code></a> Remove requirement of PayloadHash for intoto 0.0.1 (<a href="https://redirect.github.com/sigstore/rekor/issues/1490">#1490</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/b387701f27aace3e3396ad4fdbb8d3ccc869fb5f"><code>b387701</code></a> Add intoto v0.0.2 to backfill script (<a href="https://redirect.github.com/sigstore/rekor/issues/1500">#1500</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/rekor/compare/v1.1.1...v1.2.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/rekor&package-manager=go_modules&previous-version=1.1.1&new-version=1.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-27 05:24:50 +02:00
github.com/Azure/go-autorest/autorest v0.11.29 h1:I4+HL/JDvErx2LjyzaVxllw2lRDB5/BT2Bm4g20iqYw=
github.com/Azure/go-autorest/autorest v0.11.29/go.mod h1:ZtEzC4Jy2JDrZLxvWs8LrBWEBycl1hbT1eknI8MtfAs=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/Azure/go-autorest/autorest/adal v0.9.18/go.mod h1:XVVeme+LZwABT8K5Lc3hA4nAe8LDBVle26gTrguhhPQ=
feat(deps): bump gocloud.dev from 0.28.0 to 0.29.0 (#3837) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.28.0 to 0.29.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.29.0</h2> <p><strong>BREAKING CHANGES</strong></p> <ul> <li>Updated to latest <code>azureblob</code>, which had some non-backward-compatible changes (again).</li> </ul> <p><strong>all</strong></p> <ul> <li>Defaulting to <code>go</code> version <code>1.2</code>.</li> <li><strong>aws</strong>: Added support for custom endpoints for AWS SDK v2.</li> <li><strong>gcp</strong>: Updated imports for <code>credentialspb</code>.</li> </ul> <p><strong>blob</strong></p> <ul> <li><strong>azureblob</strong>: Updated to latest (breaking change).</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>kafkapub</strong>: Fixed nil Options pointer dereference.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/62397121ec57013e925de45ec6fb7a7bacbf5799"><code>6239712</code></a> all: prep for release (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3236">#3236</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/973ec8737135d7bf2e2c21975ed871526e38ef8a"><code>973ec87</code></a> all: prep for release (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3235">#3235</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/3348a6a4a0ccbcc4cc179866ea682d54ba3e0276"><code>3348a6a</code></a> aws: fix typo on awssdk=v2 docstring</li> <li><a href="https://github.com/google/go-cloud/commit/ec0a2bbc3f48f58b707fcad9e1926044efb242cb"><code>ec0a2bb</code></a> pubsub/rabbitpubsub: give rabbitmq more time to come up (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3233">#3233</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/082a4958948e4a36875570f6ee931ebfe950e29c"><code>082a495</code></a> docstore/gcpfirestore: update proto import (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3229">#3229</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/53ba9013f0a1240e7266b64a1c8f37ac891a84f8"><code>53ba901</code></a> pubsub/gcppubsub: update proto import (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3230">#3230</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b3612581b153f8ecbf63590c9087e746b5df9f8e"><code>b361258</code></a> runtimevar/gcpsecretmanager: update proto import (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3231">#3231</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/e5235d85eb9a1674f26984a068fcd91f445ef620"><code>e5235d8</code></a> blob/gcsblob: update proto import (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3228">#3228</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/7cd8b2b9f63cb8b15c114ea64fbef28aed00f0cc"><code>7cd8b2b</code></a> secrets/gcpkms: update proto import (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3227">#3227</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cddf16323d2af04a4bdd9b58fb85d9b28a1abee"><code>8cddf16</code></a> all: update deps BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3225">#3225</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.28.0...v0.29.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.28.0&new-version=0.29.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-06 18:07:00 +02:00
github.com/Azure/go-autorest/autorest/adal v0.9.22/go.mod h1:XuAbAEUv2Tta//+voMI038TrJBqjKam0me7qR+L8Cmk=
feat(deps): bump gocloud.dev from 0.29.0 to 0.30.0 (#4129) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.29.0 to 0.30.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.30.0</h2> <p><strong>blob</strong></p> <ul> <li><strong>all</strong>: Add <code>Upload</code> and <code>Download</code> methods that may be more efficient for some drivers.</li> <li><strong>s3blob</strong>: Add support for per-request <code>s3v2.Options</code>.</li> <li><strong>s3blob</strong>: Stop escaping second <code>/</code> in <code>//</code>; it's no longer necessary.</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>gcppubsub</strong>: Make it possible to configure <code>max_send_batch_size</code>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/d2d5bedb50683e2a6b893b75aafc193eca2715db"><code>d2d5bed</code></a> all: prep for release (<a href="https://redirect.github.com/google/go-cloud/issues/3263">#3263</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/c2e172b5a78def74973f7f3a8ece7c0bd6967432"><code>c2e172b</code></a> all: update dependencies (<a href="https://redirect.github.com/google/go-cloud/issues/3262">#3262</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/098177a48cae1bebfc90f88ed43d319444cab804"><code>098177a</code></a> blob/s3blob: fix the 'awssdk' argument examples</li> <li><a href="https://github.com/google/go-cloud/commit/2e4fad43f0b2606833b6a0de3e18628c70e11398"><code>2e4fad4</code></a> all: remove refs to deprecated xerrors</li> <li><a href="https://github.com/google/go-cloud/commit/1db413f1b3c4e344618b36401ba7e6dca3892929"><code>1db413f</code></a> pubsub/gcppubsub: make it possible to configure max_send_batch_size</li> <li><a href="https://github.com/google/go-cloud/commit/0c8428bf433136e7a4d96de0841f6373c6eacb53"><code>0c8428b</code></a> blob: Add Upload and Download methods that may be more efficient for some dri...</li> <li><a href="https://github.com/google/go-cloud/commit/54c71241a56f4c89eb64f587e5dc55667eaa40a3"><code>54c7124</code></a> all: cleanup duplicate import statements</li> <li><a href="https://github.com/google/go-cloud/commit/28b1328ae4fee939441faa5ee2e4eeba74c88ce7"><code>28b1328</code></a> all: minor code simplifications for returned boolean expressions</li> <li><a href="https://github.com/google/go-cloud/commit/2a407f5e6a71951384531445e25c58194f235062"><code>2a407f5</code></a> blob/gcsblob: Refresh goldens</li> <li><a href="https://github.com/google/go-cloud/commit/0cc16c8ae11e47028df24c4973debd6c56d29729"><code>0cc16c8</code></a> all: update goldens (<a href="https://redirect.github.com/google/go-cloud/issues/3252">#3252</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.29.0...v0.30.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.29.0&new-version=0.30.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-20 14:04:08 +02:00
github.com/Azure/go-autorest/autorest/adal v0.9.23 h1:Yepx8CvFxwNKpH6ja7RZ+sKX+DWYNldbLiALMC3BTz8=
github.com/Azure/go-autorest/autorest/adal v0.9.23/go.mod h1:5pcMqFkdPhviJdlEy3kC/v1ZLnQl0MH6XA5YCcMhy4c=
feat(deps): bump github.com/google/ko from 0.12.0 to 0.13.0 (#3880) Bumps [github.com/google/ko](https://github.com/google/ko) from 0.12.0 to 0.13.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/ko/releases">github.com/google/ko's releases</a>.</em></p> <blockquote> <h2>v0.13.0</h2> <h2>What's Changed</h2> <ul> <li>SPDX: Fix package manager label by <a href="https://github.com/puerco"><code>@​puerco</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/801">ko-build/ko#801</a></li> <li>SPDX 2.3 support by <a href="https://github.com/puerco"><code>@​puerco</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/803">ko-build/ko#803</a></li> <li>ci: build and test using 1.18 and 1.19 (drop 1.17) by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/812">ko-build/ko#812</a></li> <li>removes repo move message by <a href="https://github.com/mchmarny"><code>@​mchmarny</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/814">ko-build/ko#814</a></li> <li>feat: write sbom result to disk by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/822">ko-build/ko#822</a></li> <li>feat: adding support for using multiple keychain for sending sbom results to a different repository by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/821">ko-build/ko#821</a></li> <li>Move docs to ko.build by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/749">ko-build/ko#749</a></li> <li>Update setup-ko version by <a href="https://github.com/ianlewis"><code>@​ianlewis</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/836">ko-build/ko#836</a></li> <li>Add -- usage in readme by <a href="https://github.com/jwcesign"><code>@​jwcesign</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/840">ko-build/ko#840</a></li> <li>add CONTRIBUTING, code of conduct, roadmap by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/837">ko-build/ko#837</a></li> <li>attempt to fix GH Pages publishing by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/843">ko-build/ko#843</a></li> <li>doc: fix link to Installation page in Getting Started by <a href="https://github.com/antoineco"><code>@​antoineco</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/846">ko-build/ko#846</a></li> <li>.ko.yaml: bump golang 1.18 -&gt; 1.19 by <a href="https://github.com/srenatus"><code>@​srenatus</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/848">ko-build/ko#848</a></li> <li>truncate -image-refs file by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/855">ko-build/ko#855</a></li> <li>update docs: fix broken links, align with README by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/854">ko-build/ko#854</a></li> <li>Handle KO_DOCKER_REPO=ko.local/repo and --bare correctly by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/820">ko-build/ko#820</a></li> <li>another docs update by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/856">ko-build/ko#856</a></li> <li>ko.build: support some common shortlinks by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/872">ko-build/ko#872</a></li> <li>install: fail with 404 instead of gzip error when url was wrong by <a href="https://github.com/grosser"><code>@​grosser</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/879">ko-build/ko#879</a></li> <li>feat: deduplicate tags by <a href="https://github.com/bluebrown"><code>@​bluebrown</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/884">ko-build/ko#884</a></li> <li>install mkdocs-redirect when publishing site by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/873">ko-build/ko#873</a></li> <li>nit: replace one-item slice with const by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/885">ko-build/ko#885</a></li> <li>Temp fix for SLSA generators by <a href="https://github.com/laurentsimon"><code>@​laurentsimon</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/886">ko-build/ko#886</a></li> <li>Fix verifier by <a href="https://github.com/laurentsimon"><code>@​laurentsimon</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/891">ko-build/ko#891</a></li> <li>Fix link in static-assets.md by <a href="https://github.com/yuryu"><code>@​yuryu</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/893">ko-build/ko#893</a></li> <li>add KO_DEFAULTBASEIMAGE usage to docs by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/895">ko-build/ko#895</a></li> <li>Publish an tagged image on release by <a href="https://github.com/vdemeester"><code>@​vdemeester</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/868">ko-build/ko#868</a></li> <li>Add option to configure default platforms by <a href="https://github.com/ReToCode"><code>@​ReToCode</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/897">ko-build/ko#897</a></li> <li>Fix broken SLSA link by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/899">ko-build/ko#899</a></li> <li>add MAINTAINERS.md by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/905">ko-build/ko#905</a></li> <li>fix: possible race condition when applying templates to flags/ldflags by <a href="https://github.com/caarlos0"><code>@​caarlos0</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/913">ko-build/ko#913</a></li> <li>update docs to reflect actual default base image by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/903">ko-build/ko#903</a></li> <li>remove repeated error message on failure by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/921">ko-build/ko#921</a></li> <li>website: update CNCF announcement by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/920">ko-build/ko#920</a></li> <li>fix KO_CONFIG_PATH pointing to a file by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/923">ko-build/ko#923</a></li> <li>upgrade to cosign v2.0.0-rc.0 by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/933">ko-build/ko#933</a></li> <li>Feature: Add ECR presubmit testing. by <a href="https://github.com/mattmoor"><code>@​mattmoor</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/934">ko-build/ko#934</a></li> <li>remove 'ko deps' by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/937">ko-build/ko#937</a></li> <li>feat: Add KO_GO_PATH env var by <a href="https://github.com/embano1"><code>@​embano1</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/930">ko-build/ko#930</a></li> <li>add ko.build/slack short link by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/945">ko-build/ko#945</a></li> <li>update link to ko goreleaser docs by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/936">ko-build/ko#936</a></li> <li>add ko community meeting details by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/938">ko-build/ko#938</a></li> <li>fix cosign by adding --yes by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/973">ko-build/ko#973</a></li> <li>fix: handle docker's unknown/unknown platform in index manifests by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/975">ko-build/ko#975</a></li> <li>fix file extension for cyclonedx by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/974">ko-build/ko#974</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/ianlewis"><code>@​ianlewis</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/836">ko-build/ko#836</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ko-build/ko/commit/e22e7a15ffb988adc14c3fc6a964f61ed711812f"><code>e22e7a1</code></a> bump ggcr dep to <a href="https://github.com/main"><code>@​main</code></a> (<a href="https://redirect.github.com/google/ko/issues/976">#976</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/8e075ae1f1822bb61a871f11197566b362c342f0"><code>8e075ae</code></a> fix file extension for cyclonedx (<a href="https://redirect.github.com/google/ko/issues/974">#974</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/11670b7498be63bc0e04e7ba36433fd22f9654ce"><code>11670b7</code></a> fix: handle docker's unknown/unknown platform in index manifests (<a href="https://redirect.github.com/google/ko/issues/975">#975</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/7ce947817e2f59942cb181aa833bfd13533bcc19"><code>7ce9478</code></a> fix cosign by adding --yes (<a href="https://redirect.github.com/google/ko/issues/973">#973</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/9302da78dc995b2b2dd70c044708c3c4c6a056b6"><code>9302da7</code></a> Bump k8s.io/apimachinery from 0.26.1 to 0.26.2 (<a href="https://redirect.github.com/google/ko/issues/972">#972</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/a1588838ba1698c3ca3f6785363a1a9f82ed4baa"><code>a158883</code></a> Bump sigstore/cosign-installer from 2.8.1 to 3.0.1 (<a href="https://redirect.github.com/google/ko/issues/971">#971</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/86b6c2854f8a7c321ce1b8ea121938ce9cc79475"><code>86b6c28</code></a> Bump actions/checkout from 2 to 3 (<a href="https://redirect.github.com/google/ko/issues/966">#966</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/0bd12fb106ed9d03994a6b8883f8a5d834a2aa15"><code>0bd12fb</code></a> Bump slsa-framework/slsa-github-generator from 1.2.1 to 1.5.0 (<a href="https://redirect.github.com/google/ko/issues/967">#967</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/d5125daacd07306d3814a6910cc54422824331e6"><code>d5125da</code></a> Bump github.com/sigstore/cosign/v2 from 2.0.0-rc.2 to 2.0.0 (<a href="https://redirect.github.com/google/ko/issues/965">#965</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/03f4aed68268fb320b32195c80292300056b264c"><code>03f4aed</code></a> add ko community meeting details (<a href="https://redirect.github.com/google/ko/issues/938">#938</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/ko/compare/v0.12.0...v0.13.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/ko&package-manager=go_modules&previous-version=0.12.0&new-version=0.13.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --------- Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2023-03-29 19:38:57 +02:00
github.com/Azure/go-autorest/autorest/azure/auth v0.5.12 h1:wkAZRgT/pn8HhFyzfe9UnqOjJYqlembgCTi72Bm/xKk=
github.com/Azure/go-autorest/autorest/azure/auth v0.5.12/go.mod h1:84w/uV8E37feW2NCJ08uT9VBfjfUHpgLVnG2InYD6cg=
feat: add ko support (#3653) continuing the PR by @developer-guy - [x] should be a publisher, as it does publish the images it builds every time - [x] `Default` method does not work - [x] the `fromConfig` thing should probably be on the defaults, too - [x] wire `--skip-ko` - [x] documentation - [x] more tests - [x] use same registry as docker tests does - [ ] see if we can make the log output match goreleaser's - [ ] ?? closes #2556 closes #3490 Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com> Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> Co-authored-by: actions-user <actions@github.com> Co-authored-by: Jason Hall <jason@chainguard.dev> Co-authored-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2023-01-17 03:34:49 +02:00
github.com/Azure/go-autorest/autorest/azure/cli v0.4.5/go.mod h1:ADQAXrkgm7acgWVUNamOgh8YNrv4p27l3Wc55oVfpzg=
github.com/Azure/go-autorest/autorest/azure/cli v0.4.6 h1:w77/uPk80ZET2F+AfQExZyEWtn+0Rk/uw17m9fv5Ajc=
github.com/Azure/go-autorest/autorest/azure/cli v0.4.6/go.mod h1:piCfgPho7BiIDdEQ1+g4VmKyD5y+p/XtSNqE6Hc4QD0=
github.com/Azure/go-autorest/autorest/date v0.3.0 h1:7gUk1U5M/CQbp9WoqinNzJar+8KY+LPI6wiWrP/myHw=
chore(deps): bump gocloud.dev from 0.20.0 to 0.21.0 (#1941) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.20.0 to 0.21.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.20.0...v0.21.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-12 01:14:58 +02:00
github.com/Azure/go-autorest/autorest/date v0.3.0/go.mod h1:BI0uouVdmngYNUzGWeSYnokU+TrmwEsOqdt8Y6sso74=
github.com/Azure/go-autorest/autorest/mocks v0.4.1/go.mod h1:LTp+uSrOhSkaKrUy935gNZuuIPPVsHlr9DSOxSayd+k=
feat: add ko support (#3653) continuing the PR by @developer-guy - [x] should be a publisher, as it does publish the images it builds every time - [x] `Default` method does not work - [x] the `fromConfig` thing should probably be on the defaults, too - [x] wire `--skip-ko` - [x] documentation - [x] more tests - [x] use same registry as docker tests does - [ ] see if we can make the log output match goreleaser's - [ ] ?? closes #2556 closes #3490 Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com> Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> Co-authored-by: actions-user <actions@github.com> Co-authored-by: Jason Hall <jason@chainguard.dev> Co-authored-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2023-01-17 03:34:49 +02:00
github.com/Azure/go-autorest/autorest/mocks v0.4.2 h1:PGN4EDXnuQbojHbU0UWoNvmu9AGVwYHG9/fkDYhtAfw=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/Azure/go-autorest/autorest/mocks v0.4.2/go.mod h1:Vy7OitM9Kei0i1Oj+LvyAWMXJHeKH1MVlzFugfVrmyU=
chore(deps): bump gocloud.dev from 0.20.0 to 0.21.0 (#1941) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.20.0 to 0.21.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.20.0...v0.21.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-12 01:14:58 +02:00
github.com/Azure/go-autorest/autorest/to v0.4.0 h1:oXVqrxakqqV1UZdSazDOPOLvOIz+XA683u8EctwboHk=
github.com/Azure/go-autorest/autorest/to v0.4.0/go.mod h1:fE8iZBn7LQR7zH/9XU2NcPR4o9jEImooCeWJcYV/zLE=
feat: add ko support (#3653) continuing the PR by @developer-guy - [x] should be a publisher, as it does publish the images it builds every time - [x] `Default` method does not work - [x] the `fromConfig` thing should probably be on the defaults, too - [x] wire `--skip-ko` - [x] documentation - [x] more tests - [x] use same registry as docker tests does - [ ] see if we can make the log output match goreleaser's - [ ] ?? closes #2556 closes #3490 Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com> Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> Co-authored-by: actions-user <actions@github.com> Co-authored-by: Jason Hall <jason@chainguard.dev> Co-authored-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2023-01-17 03:34:49 +02:00
github.com/Azure/go-autorest/logger v0.2.1 h1:IG7i4p/mDa2Ce4TRyAO8IHnVhAVF3RFU+ZtXWSmf4Tg=
chore(deps): bump gocloud.dev from 0.22.0 to 0.23.0 (#2225) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.22.0 to 0.23.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.22.0...v0.23.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-17 14:03:45 +02:00
github.com/Azure/go-autorest/logger v0.2.1/go.mod h1:T9E3cAhj2VqvPOtCYAvby9aBXkZmbF5NWuPV8+WeEW8=
feat: add ko support (#3653) continuing the PR by @developer-guy - [x] should be a publisher, as it does publish the images it builds every time - [x] `Default` method does not work - [x] the `fromConfig` thing should probably be on the defaults, too - [x] wire `--skip-ko` - [x] documentation - [x] more tests - [x] use same registry as docker tests does - [ ] see if we can make the log output match goreleaser's - [ ] ?? closes #2556 closes #3490 Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com> Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> Co-authored-by: actions-user <actions@github.com> Co-authored-by: Jason Hall <jason@chainguard.dev> Co-authored-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2023-01-17 03:34:49 +02:00
github.com/Azure/go-autorest/tracing v0.6.0 h1:TYi4+3m5t6K48TGI9AUdb+IzbnSxvnvUMfuitfgcfuo=
chore(deps): bump gocloud.dev from 0.20.0 to 0.21.0 (#1941) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.20.0 to 0.21.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.20.0...v0.21.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-12 01:14:58 +02:00
github.com/Azure/go-autorest/tracing v0.6.0/go.mod h1:+vhtPC754Xsa23ID7GlGsrdKBpUA79WCAKPPZVC2DeU=
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419) Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.1.1 to 2.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's releases</a>.</em></p> <blockquote> <h2>v2.2.1</h2> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's changelog</a>.</em></p> <blockquote> <h1>v2.2.1</h1> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign/commit/12cbf9ea177d22bbf5cf028bcb4712b5f174ebc6"><code>12cbf9e</code></a> add changelog for v2.2.1 release (<a href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/827f24e9d4a1f8e845cb1597d02053410f5bbe2a"><code>827f24e</code></a> feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8ac891ff0e29ddc67965423bee8f826219c6eb0f"><code>8ac891f</code></a> Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li><a href="https://github.com/sigstore/cosign/commit/8b366c497bd22b9be7742d057b8f59083dcadee0"><code>8b366c4</code></a> add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/23920de5623a505921ba4e62fa97e2553eff4699"><code>23920de</code></a> chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/e022e1c13240d1ae5b3c408bc53e389154331713"><code>e022e1c</code></a> chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/28c59c5eca6386924cc8f381afe94efe1e957679"><code>28c59c5</code></a> add missing groups key (<a href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8e5bdcc0ff39b8dc1b477251fef521601df76ec0"><code>8e5bdcc</code></a> chore(deps): bump github.com/google/certificate-transparency-go (<a href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/510cac4ef54274823599082e3a57a556ccd5c9e5"><code>510cac4</code></a> chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/063902b1d78fed7c12c9d9ce06248d36963e8169"><code>063902b</code></a> chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 18:39:49 +02:00
github.com/AzureAD/microsoft-authentication-library-for-go v1.2.0 h1:hVeq+yCyUi+MsoO/CU95yqCIcdzra5ovzk8Q2BBpV2M=
github.com/AzureAD/microsoft-authentication-library-for-go v1.2.0/go.mod h1:wP83P5OoQ5p6ip3ScPr0BAq0BvuPAvacpEuSzyouqAI=
feat: add support for pushing artifacts to cloud storage provider( S3, Azure Blob, GCS) (#1036) * feat: adding support to push artifacts to AWS S3,Azure Blob and Google Cloud Storage readme for blob publisher test: add unit test for blob using testify and mockery test: add unit test for publish method fix: openbucket instance initialization remove unwanted packages: go mod tidy test: add missing unit test for publish method * doc: add missing comment for func * fix: add accidental delete file * fix : add missing Snapcrafts project * fix: unit test for Azure blob * fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue * fmt: fix linter reporeted issues fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue fmt: linter fix * test: fix typo in test error string * feat: add support to provider folder inside bucket, resolves discussed comments
2019-06-05 15:51:01 +02:00
github.com/BurntSushi/toml v0.3.1/go.mod h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03qcyfWMU=
feat: add ko support (#3653) continuing the PR by @developer-guy - [x] should be a publisher, as it does publish the images it builds every time - [x] `Default` method does not work - [x] the `fromConfig` thing should probably be on the defaults, too - [x] wire `--skip-ko` - [x] documentation - [x] more tests - [x] use same registry as docker tests does - [ ] see if we can make the log output match goreleaser's - [ ] ?? closes #2556 closes #3490 Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com> Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> Co-authored-by: actions-user <actions@github.com> Co-authored-by: Jason Hall <jason@chainguard.dev> Co-authored-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2023-01-17 03:34:49 +02:00
github.com/BurntSushi/toml v1.0.0/go.mod h1:CxXYINrC8qIiEnFrOxCa7Jy5BFHlXnUU2pbicEuybxQ=
feat(deps): bump github.com/google/ko from 0.13.0 to 0.14.1 (#4132) Bumps [github.com/google/ko](https://github.com/google/ko) from 0.13.0 to 0.14.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/ko/releases">github.com/google/ko's releases</a>.</em></p> <blockquote> <h2>v0.14.1</h2> <h2>What's Changed</h2> <ul> <li>fix: Use attestation-name output by <a href="https://github.com/ianlewis"><code>@​ianlewis</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/980">ko-build/ko#980</a></li> <li>Upgrade to go120 by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/984">ko-build/ko#984</a></li> <li>fix release workflow by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/977">ko-build/ko#977</a></li> <li>fix deprecated attestation name by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/983">ko-build/ko#983</a></li> <li>refactor release job by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/986">ko-build/ko#986</a></li> <li>use git hash instead of git tag by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/988">ko-build/ko#988</a></li> <li>Correct a typo in resolver.go by <a href="https://github.com/felixonmars"><code>@​felixonmars</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/989">ko-build/ko#989</a></li> <li>feat: add riscv64 to goreleaser goarch by <a href="https://github.com/ernado"><code>@​ernado</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/990">ko-build/ko#990</a></li> <li>try to fix codeql workflow by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/994">ko-build/ko#994</a></li> <li>Push images faster by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1005">ko-build/ko#1005</a></li> <li>Don't publish tags twice by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1010">ko-build/ko#1010</a></li> <li>Add context to many gobuild errors by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1016">ko-build/ko#1016</a></li> <li>Fix --local with KO_DOCKER_REPO by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1017">ko-build/ko#1017</a></li> <li>Fix: Incorporate platform architecture by <a href="https://github.com/mattmoor"><code>@​mattmoor</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1029">ko-build/ko#1029</a></li> <li>Update community.md by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1035">ko-build/ko#1035</a></li> <li>mention ko tekton task by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1039">ko-build/ko#1039</a></li> <li>Update community.md by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1037">ko-build/ko#1037</a></li> <li>Fix kind image loading for MacOS by <a href="https://github.com/aidy"><code>@​aidy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1026">ko-build/ko#1026</a></li> <li>Revert &quot;Fix kind image loading for MacOS&quot; by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1054">ko-build/ko#1054</a></li> <li>update boilerplate file to be KO Build Authors by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1056">ko-build/ko#1056</a></li> <li>Pin setup-ko to previous release by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1082">ko-build/ko#1082</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/felixonmars"><code>@​felixonmars</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/989">ko-build/ko#989</a></li> <li><a href="https://github.com/ernado"><code>@​ernado</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/990">ko-build/ko#990</a></li> <li><a href="https://github.com/aidy"><code>@​aidy</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1026">ko-build/ko#1026</a></li> <li><a href="https://github.com/luhring"><code>@​luhring</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1073">ko-build/ko#1073</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/ko-build/ko/compare/v0.13.0...v0.14.1">https://github.com/ko-build/ko/compare/v0.13.0...v0.14.1</a></p> <h2>v0.14.0</h2> <p>No release notes provided.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ko-build/ko/commit/200db7243f02b5c0303e21d8ab8e3b4ad3a229d0"><code>200db72</code></a> Pin setup-ko to previous release (<a href="https://redirect.github.com/google/ko/issues/1082">#1082</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/4366ded82cdda05ef85bc5483d19daa241d08f38"><code>4366ded</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1079">#1079</a> from ko-build/dependabot/github_actions/slsa-framewo...</li> <li><a href="https://github.com/ko-build/ko/commit/adbea950c10e2c69c7bf0589a6bf0b4e7ceafbfa"><code>adbea95</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1078">#1078</a> from ko-build/dependabot/github_actions/goreleaser/g...</li> <li><a href="https://github.com/ko-build/ko/commit/6175237fe6539a48206da87c239ad98b4f7d7312"><code>6175237</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1077">#1077</a> from ko-build/dependabot/go_modules/github.com/spf13...</li> <li><a href="https://github.com/ko-build/ko/commit/5e5fe2e703c1f0c9186975b06090ae563283f48d"><code>5e5fe2e</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1076">#1076</a> from ko-build/dependabot/github_actions/aws-actions/...</li> <li><a href="https://github.com/ko-build/ko/commit/dc9b3eebef9818e2efab17cec8dd3eebff72e074"><code>dc9b3ee</code></a> Bump github.com/spf13/viper from 1.15.0 to 1.16.0</li> <li><a href="https://github.com/ko-build/ko/commit/ed445128e25c7bd0b6643b58ac44383a583d84f5"><code>ed44512</code></a> Bump golang.org/x/tools from 0.9.3 to 0.10.0 (<a href="https://redirect.github.com/google/ko/issues/1080">#1080</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/fcd95ec958cad910b4746245662506b1f974f40e"><code>fcd95ec</code></a> Bump slsa-framework/slsa-github-generator from 1.6.0 to 1.7.0</li> <li><a href="https://github.com/ko-build/ko/commit/974f09cdeacd7042c3db573366768ecbb32246a5"><code>974f09c</code></a> Bump goreleaser/goreleaser-action from 4.2.0 to 4.3.0</li> <li><a href="https://github.com/ko-build/ko/commit/893f6e877f7c352261c13e078bb8fc9709bb285c"><code>893f6e8</code></a> Bump aws-actions/configure-aws-credentials from 2.1.0 to 2.2.0</li> <li>Additional commits viewable in <a href="https://github.com/google/ko/compare/v0.13.0...v0.14.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/ko&package-manager=go_modules&previous-version=0.13.0&new-version=0.14.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-26 18:56:50 +02:00
github.com/BurntSushi/toml v1.2.1 h1:9F2/+DoOYIOksmaJFPw1tGFy1eDnIJXg+UHjuD8lTak=
github.com/BurntSushi/toml v1.2.1/go.mod h1:CxXYINrC8qIiEnFrOxCa7Jy5BFHlXnUU2pbicEuybxQ=
chore(deps): bump gocloud.dev from 0.18.0 to 0.19.0 (#1340) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.18.0 to 0.19.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.18.0...v0.19.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-02-17 14:56:49 +02:00
github.com/BurntSushi/xgb v0.0.0-20160522181843-27f122750802/go.mod h1:IVnqGOEym/WlBOVXweHU+Q+/VP0lqqI8lqeDx9IjBqo=
feat: update nfpm (#2640) * feat: update nfpm * feat: update nfpm * feat: update nfpm * feat: update nfpm * fix: dir type * docs: dir * docs: typo * fix: race * fix: race cond
2021-11-14 03:23:11 +02:00
github.com/DataDog/zstd v1.4.5 h1:EndNeuB0l9syBZhut0wns3gV1hL8zX8LIu6ZiVHWLIQ=
chore: go mod tidy Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-09-13 19:03:05 +02:00
github.com/DataDog/zstd v1.4.5/go.mod h1:1jcaCB/ufaK+sKp1NBhlGmpz41jOoPQ35bpF36t7BBo=
chore(deps): bump github.com/goreleaser/nfpm/v2 from 2.3.1 to 2.4.0 (#2170) Bumps [github.com/goreleaser/nfpm/v2](https://github.com/goreleaser/nfpm) from 2.3.1 to 2.4.0. - [Release notes](https://github.com/goreleaser/nfpm/releases) - [Changelog](https://github.com/goreleaser/nfpm/blob/master/.goreleaser.yml) - [Commits](https://github.com/goreleaser/nfpm/compare/v2.3.1...v2.4.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-04-16 14:50:21 +02:00
github.com/Masterminds/goutils v1.1.1 h1:5nUrii3FMTL5diU80unEVvNevw1nH4+ZV4DSLVJLSYI=
github.com/Masterminds/goutils v1.1.1/go.mod h1:8cTjp+g8YejhMuvIA5y2vz3BpJxksy863GQaJW2MFNU=
feat(deps): bump github.com/goreleaser/nfpm/v2 from 2.30.1 to 2.31.0 (#4144) latest and greatest
2023-06-26 18:20:47 +02:00
github.com/Masterminds/semver/v3 v3.2.0/go.mod h1:qvl/7zhW3nngYb5+80sSMF+FG2BjYrf8m9wsX0PNOMQ=
feat(deps): bump github.com/Masterminds/semver/v3 from 3.2.0 to 3.2.1 (#3927) Bumps [github.com/Masterminds/semver/v3](https://github.com/Masterminds/semver) from 3.2.0 to 3.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/Masterminds/semver/releases">github.com/Masterminds/semver/v3's releases</a>.</em></p> <blockquote> <h2>v3.2.1</h2> <h3>Changed</h3> <ul> <li><a href="https://redirect.github.com/Masterminds/semver/issues/198">#198</a>: Improved testing around pre-release names</li> <li><a href="https://redirect.github.com/Masterminds/semver/issues/200">#200</a>: Improved code scanning with addition of CodeQL</li> <li><a href="https://redirect.github.com/Masterminds/semver/issues/201">#201</a>: Testing now includes Go 1.20. Go 1.17 has been dropped</li> <li><a href="https://redirect.github.com/Masterminds/semver/issues/202">#202</a>: Migrated Fuzz testing to Go built-in Fuzzing. CI runs daily</li> <li><a href="https://redirect.github.com/Masterminds/semver/issues/203">#203</a>: Docs updated for security details</li> </ul> <h3>Fixed</h3> <ul> <li><a href="https://redirect.github.com/Masterminds/semver/issues/199">#199</a>: Fixed issue with range transformations</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/Masterminds/semver/compare/v3.2.0...v3.2.1">https://github.com/Masterminds/semver/compare/v3.2.0...v3.2.1</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/Masterminds/semver/blob/master/CHANGELOG.md">github.com/Masterminds/semver/v3's changelog</a>.</em></p> <blockquote> <h2>3.2.1 (2023-04-10)</h2> <h3>Changed</h3> <ul> <li><a href="https://redirect.github.com/Masterminds/semver/issues/198">#198</a>: Improved testing around pre-release names</li> <li><a href="https://redirect.github.com/Masterminds/semver/issues/200">#200</a>: Improved code scanning with addition of CodeQL</li> <li><a href="https://redirect.github.com/Masterminds/semver/issues/201">#201</a>: Testing now includes Go 1.20. Go 1.17 has been dropped</li> <li><a href="https://redirect.github.com/Masterminds/semver/issues/202">#202</a>: Migrated Fuzz testing to Go built-in Fuzzing. CI runs daily</li> <li><a href="https://redirect.github.com/Masterminds/semver/issues/203">#203</a>: Docs updated for security details</li> </ul> <h3>Fixed</h3> <ul> <li><a href="https://redirect.github.com/Masterminds/semver/issues/199">#199</a>: Fixed issue with range transformations</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/Masterminds/semver/commit/e06051f8fcc4c8b4a4990c337b9862a2448722e5"><code>e06051f</code></a> Merge pull request <a href="https://redirect.github.com/Masterminds/semver/issues/203">#203</a> from mattfarina/update-readme-fuzz</li> <li><a href="https://github.com/Masterminds/semver/commit/36ea773e91f1694fd18f8579d4ea331b6808abf7"><code>36ea773</code></a> Updating docs for security, fuzz, codeql, gosec</li> <li><a href="https://github.com/Masterminds/semver/commit/e683c4bc93bf35ff810cb0eab188e8e8e9f72fda"><code>e683c4b</code></a> Merge pull request <a href="https://redirect.github.com/Masterminds/semver/issues/202">#202</a> from mattfarina/move-fuzz</li> <li><a href="https://github.com/Masterminds/semver/commit/e485a0d5ffd5c94376b8b4a94a4cad3797c18009"><code>e485a0d</code></a> Migrating Fuzz testing to Go built-in testing</li> <li><a href="https://github.com/Masterminds/semver/commit/4e0f582ff0c63c1f59c5e1cae1a21def0d05d923"><code>4e0f582</code></a> Merge pull request <a href="https://redirect.github.com/Masterminds/semver/issues/201">#201</a> from mattfarina/bump-go-1.20</li> <li><a href="https://github.com/Masterminds/semver/commit/0605d1d86a75a6473619b995afc80469919dbf03"><code>0605d1d</code></a> Updating Go for 1.20</li> <li><a href="https://github.com/Masterminds/semver/commit/cc175775be019f549ae70c9c371bc6e2214af450"><code>cc17577</code></a> Merge pull request <a href="https://redirect.github.com/Masterminds/semver/issues/200">#200</a> from mattfarina/codeql</li> <li><a href="https://github.com/Masterminds/semver/commit/bf2d1900137bc4f5dfc2a3e222066e7725b6d1b0"><code>bf2d190</code></a> Adding CodeQL scanning</li> <li><a href="https://github.com/Masterminds/semver/commit/2c5535be35664eef2e4a4e3253b4f4cb9bc8c22e"><code>2c5535b</code></a> Merge pull request <a href="https://redirect.github.com/Masterminds/semver/issues/199">#199</a> from mattfarina/bug-197</li> <li><a href="https://github.com/Masterminds/semver/commit/b1bb76193b9e8c97a10a4cb1d37d94a7b17e8482"><code>b1bb761</code></a> Fix issue with - ranges being transformed to something imparsible</li> <li>Additional commits viewable in <a href="https://github.com/Masterminds/semver/compare/v3.2.0...v3.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/Masterminds/semver/v3&package-manager=go_modules&previous-version=3.2.0&new-version=3.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-23 18:52:42 +02:00
github.com/Masterminds/semver/v3 v3.2.1 h1:RN9w6+7QoMeJVGyfmbcgs28Br8cvmnucEXnY0rYXWg0=
github.com/Masterminds/semver/v3 v3.2.1/go.mod h1:qvl/7zhW3nngYb5+80sSMF+FG2BjYrf8m9wsX0PNOMQ=
feat(deps): bump github.com/goreleaser/nfpm/v2 from 2.30.1 to 2.31.0 (#4144) latest and greatest
2023-06-26 18:20:47 +02:00
github.com/Masterminds/sprig/v3 v3.2.3 h1:eL2fZNezLomi0uOLqjQoN6BfsDD+fyLtgbJMAj9n6YA=
github.com/Masterminds/sprig/v3 v3.2.3/go.mod h1:rXcFaZ2zZbLRJv/xSysmlgIM1u11eBaRMhvYXJNkGuM=
github.com/Microsoft/go-winio v0.5.2/go.mod h1:WpS1mjBmmwHBEWmogvA2mj8546UReBk4v8QkMxJ6pZY=
feat(deps): bump github.com/google/ko from 0.13.0 to 0.14.1 (#4132) Bumps [github.com/google/ko](https://github.com/google/ko) from 0.13.0 to 0.14.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/ko/releases">github.com/google/ko's releases</a>.</em></p> <blockquote> <h2>v0.14.1</h2> <h2>What's Changed</h2> <ul> <li>fix: Use attestation-name output by <a href="https://github.com/ianlewis"><code>@​ianlewis</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/980">ko-build/ko#980</a></li> <li>Upgrade to go120 by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/984">ko-build/ko#984</a></li> <li>fix release workflow by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/977">ko-build/ko#977</a></li> <li>fix deprecated attestation name by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/983">ko-build/ko#983</a></li> <li>refactor release job by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/986">ko-build/ko#986</a></li> <li>use git hash instead of git tag by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/988">ko-build/ko#988</a></li> <li>Correct a typo in resolver.go by <a href="https://github.com/felixonmars"><code>@​felixonmars</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/989">ko-build/ko#989</a></li> <li>feat: add riscv64 to goreleaser goarch by <a href="https://github.com/ernado"><code>@​ernado</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/990">ko-build/ko#990</a></li> <li>try to fix codeql workflow by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/994">ko-build/ko#994</a></li> <li>Push images faster by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1005">ko-build/ko#1005</a></li> <li>Don't publish tags twice by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1010">ko-build/ko#1010</a></li> <li>Add context to many gobuild errors by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1016">ko-build/ko#1016</a></li> <li>Fix --local with KO_DOCKER_REPO by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1017">ko-build/ko#1017</a></li> <li>Fix: Incorporate platform architecture by <a href="https://github.com/mattmoor"><code>@​mattmoor</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1029">ko-build/ko#1029</a></li> <li>Update community.md by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1035">ko-build/ko#1035</a></li> <li>mention ko tekton task by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1039">ko-build/ko#1039</a></li> <li>Update community.md by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1037">ko-build/ko#1037</a></li> <li>Fix kind image loading for MacOS by <a href="https://github.com/aidy"><code>@​aidy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1026">ko-build/ko#1026</a></li> <li>Revert &quot;Fix kind image loading for MacOS&quot; by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1054">ko-build/ko#1054</a></li> <li>update boilerplate file to be KO Build Authors by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1056">ko-build/ko#1056</a></li> <li>Pin setup-ko to previous release by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1082">ko-build/ko#1082</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/felixonmars"><code>@​felixonmars</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/989">ko-build/ko#989</a></li> <li><a href="https://github.com/ernado"><code>@​ernado</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/990">ko-build/ko#990</a></li> <li><a href="https://github.com/aidy"><code>@​aidy</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1026">ko-build/ko#1026</a></li> <li><a href="https://github.com/luhring"><code>@​luhring</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1073">ko-build/ko#1073</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/ko-build/ko/compare/v0.13.0...v0.14.1">https://github.com/ko-build/ko/compare/v0.13.0...v0.14.1</a></p> <h2>v0.14.0</h2> <p>No release notes provided.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ko-build/ko/commit/200db7243f02b5c0303e21d8ab8e3b4ad3a229d0"><code>200db72</code></a> Pin setup-ko to previous release (<a href="https://redirect.github.com/google/ko/issues/1082">#1082</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/4366ded82cdda05ef85bc5483d19daa241d08f38"><code>4366ded</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1079">#1079</a> from ko-build/dependabot/github_actions/slsa-framewo...</li> <li><a href="https://github.com/ko-build/ko/commit/adbea950c10e2c69c7bf0589a6bf0b4e7ceafbfa"><code>adbea95</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1078">#1078</a> from ko-build/dependabot/github_actions/goreleaser/g...</li> <li><a href="https://github.com/ko-build/ko/commit/6175237fe6539a48206da87c239ad98b4f7d7312"><code>6175237</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1077">#1077</a> from ko-build/dependabot/go_modules/github.com/spf13...</li> <li><a href="https://github.com/ko-build/ko/commit/5e5fe2e703c1f0c9186975b06090ae563283f48d"><code>5e5fe2e</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1076">#1076</a> from ko-build/dependabot/github_actions/aws-actions/...</li> <li><a href="https://github.com/ko-build/ko/commit/dc9b3eebef9818e2efab17cec8dd3eebff72e074"><code>dc9b3ee</code></a> Bump github.com/spf13/viper from 1.15.0 to 1.16.0</li> <li><a href="https://github.com/ko-build/ko/commit/ed445128e25c7bd0b6643b58ac44383a583d84f5"><code>ed44512</code></a> Bump golang.org/x/tools from 0.9.3 to 0.10.0 (<a href="https://redirect.github.com/google/ko/issues/1080">#1080</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/fcd95ec958cad910b4746245662506b1f974f40e"><code>fcd95ec</code></a> Bump slsa-framework/slsa-github-generator from 1.6.0 to 1.7.0</li> <li><a href="https://github.com/ko-build/ko/commit/974f09cdeacd7042c3db573366768ecbb32246a5"><code>974f09c</code></a> Bump goreleaser/goreleaser-action from 4.2.0 to 4.3.0</li> <li><a href="https://github.com/ko-build/ko/commit/893f6e877f7c352261c13e078bb8fc9709bb285c"><code>893f6e8</code></a> Bump aws-actions/configure-aws-credentials from 2.1.0 to 2.2.0</li> <li>Additional commits viewable in <a href="https://github.com/google/ko/compare/v0.13.0...v0.14.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/ko&package-manager=go_modules&previous-version=0.13.0&new-version=0.14.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-26 18:56:50 +02:00
github.com/Microsoft/go-winio v0.6.1 h1:9/kr64B9VUZrLm5YYwbGtUJnMgqWVOdUAXu6Migciow=
github.com/Microsoft/go-winio v0.6.1/go.mod h1:LRdKpFKfdobln8UmuiYcKPot9D2v6svN5+sAH+4kjUM=
refactor: improving minio and docker tests (#3642) using ory/dockertest to simplify integration tests Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-12-15 15:25:52 +02:00
github.com/Nvveen/Gotty v0.0.0-20120604004816-cd527374f1e5 h1:TngWCqHvy9oXAN6lEVMRuU21PR1EtLVZJmdB18Gu3Rw=
github.com/Nvveen/Gotty v0.0.0-20120604004816-cd527374f1e5/go.mod h1:lmUJ/7eu/Q8D7ML55dXQrVaamCz2vxCfdQBasLZfHKk=
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419) Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.1.1 to 2.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's releases</a>.</em></p> <blockquote> <h2>v2.2.1</h2> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's changelog</a>.</em></p> <blockquote> <h1>v2.2.1</h1> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign/commit/12cbf9ea177d22bbf5cf028bcb4712b5f174ebc6"><code>12cbf9e</code></a> add changelog for v2.2.1 release (<a href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/827f24e9d4a1f8e845cb1597d02053410f5bbe2a"><code>827f24e</code></a> feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8ac891ff0e29ddc67965423bee8f826219c6eb0f"><code>8ac891f</code></a> Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li><a href="https://github.com/sigstore/cosign/commit/8b366c497bd22b9be7742d057b8f59083dcadee0"><code>8b366c4</code></a> add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/23920de5623a505921ba4e62fa97e2553eff4699"><code>23920de</code></a> chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/e022e1c13240d1ae5b3c408bc53e389154331713"><code>e022e1c</code></a> chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/28c59c5eca6386924cc8f381afe94efe1e957679"><code>28c59c5</code></a> add missing groups key (<a href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8e5bdcc0ff39b8dc1b477251fef521601df76ec0"><code>8e5bdcc</code></a> chore(deps): bump github.com/google/certificate-transparency-go (<a href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/510cac4ef54274823599082e3a57a556ccd5c9e5"><code>510cac4</code></a> chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/063902b1d78fed7c12c9d9ce06248d36963e8169"><code>063902b</code></a> chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 18:39:49 +02:00
github.com/ProtonMail/go-crypto v0.0.0-20230923063757-afb1ddc0824c h1:kMFnB0vCcX7IL/m9Y5LO+KQYv+t1CQOiFe6+SV2J7bE=
github.com/ProtonMail/go-crypto v0.0.0-20230923063757-afb1ddc0824c/go.mod h1:EjAoLdwvbIOoOQr3ihjnSoLZRtE8azugULFRteWMNc0=
feat(deps): bump github.com/goreleaser/nfpm/v2 from 2.30.1 to 2.31.0 (#4144) latest and greatest
2023-06-26 18:20:47 +02:00
github.com/ProtonMail/go-mime v0.0.0-20230322103455-7d82a3887f2f h1:tCbYj7/299ekTTXpdwKYF8eBlsYsDVoggDAuAjoK66k=
chore: go mod tidy Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-09-13 19:03:05 +02:00
github.com/ProtonMail/go-mime v0.0.0-20230322103455-7d82a3887f2f/go.mod h1:gcr0kNtGBqin9zDW9GOHcVntrwnjrK+qdJ06mWYBybw=
feat(deps): bump github.com/goreleaser/nfpm/v2 from 2.30.1 to 2.31.0 (#4144) latest and greatest
2023-06-26 18:20:47 +02:00
github.com/ProtonMail/gopenpgp/v2 v2.7.1 h1:Awsg7MPc2gD3I7IFac2qE3Gdls0lZW8SzrFZ3k1oz0s=
chore: go mod tidy Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-09-13 19:03:05 +02:00
github.com/ProtonMail/gopenpgp/v2 v2.7.1/go.mod h1:/BU5gfAVwqyd8EfC3Eu7zmuhwYQpKs+cGD8M//iiaxs=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/PuerkitoBio/purell v1.1.1/go.mod h1:c11w/QuzBsJSee3cPx9rAFu61PvFxuPbtSwDGJws/X0=
github.com/PuerkitoBio/urlesc v0.0.0-20170810143723-de5bf2ad4578/go.mod h1:uGdkoq3SwY9Y+13GIhn11/XLaGBb4BfwItxLd5jeuXE=
github.com/alecthomas/template v0.0.0-20160405071501-a0175ee3bccc/go.mod h1:LOuyumcjzFXgccqObfd/Ljyb9UuFJ6TxHnclSeseNhc=
github.com/alecthomas/units v0.0.0-20151022065526-2efee857e7cf/go.mod h1:ybxpYRFXyAe+OPACYpWeL0wqObRcbAqCMya13uyzqw0=
feat: add ko support (#3653) continuing the PR by @developer-guy - [x] should be a publisher, as it does publish the images it builds every time - [x] `Default` method does not work - [x] the `fromConfig` thing should probably be on the defaults, too - [x] wire `--skip-ko` - [x] documentation - [x] more tests - [x] use same registry as docker tests does - [ ] see if we can make the log output match goreleaser's - [ ] ?? closes #2556 closes #3490 Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com> Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> Co-authored-by: actions-user <actions@github.com> Co-authored-by: Jason Hall <jason@chainguard.dev> Co-authored-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2023-01-17 03:34:49 +02:00
github.com/alessio/shellescape v1.4.1 h1:V7yhSDDn8LP4lc4jS8pFkt0zCnzVJlG5JXy9BVKJUX0=
github.com/alessio/shellescape v1.4.1/go.mod h1:PZAiSCk0LJaZkiCSkPv8qIobYglO3FPpyFjDCtHLS30=
feat(deps): bump github.com/goreleaser/nfpm/v2 from 2.30.1 to 2.31.0 (#4144) latest and greatest
2023-06-26 18:20:47 +02:00
github.com/anmitsu/go-shlex v0.0.0-20200514113438-38f4b401e2be h1:9AeTilPcZAjCFIImctFaOjnTIavg87rW78vTPkQqLI8=
chore: go mod tidy Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-09-13 19:03:05 +02:00
github.com/anmitsu/go-shlex v0.0.0-20200514113438-38f4b401e2be/go.mod h1:ySMOLuWl6zY27l47sB3qLNK6tF2fkHG55UZxx8oIVo4=
chore(deps): go mod tidy (#1699) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2020-07-22 14:05:47 +02:00
github.com/armon/go-socks5 v0.0.0-20160902184237-e75332964ef5 h1:0CwZNZbxp69SHPdPJAN/hZIm0C4OItdklCFmMRWYpio=
chore: go mod tidy Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-09-13 19:03:05 +02:00
github.com/armon/go-socks5 v0.0.0-20160902184237-e75332964ef5/go.mod h1:wHh0iHkYZB8zMSxRWpUBQtwG5a7fFgvEO+odwuTv2gs=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/asaskevich/govalidator v0.0.0-20200907205600-7a23bdc65eef/go.mod h1:WaHUgvxTVq04UNunO+XhnAqY/wQc+bxr74GqbsZ/Jqw=
feat(deps): bump github.com/sigstore/rekor from 1.0.1 to 1.1.1 (#3979) Bumps [github.com/sigstore/rekor](https://github.com/sigstore/rekor) from 1.0.1 to 1.1.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/rekor/releases">github.com/sigstore/rekor's releases</a>.</em></p> <blockquote> <h1>v1.1.1</h1> <h2>Functional Enhancements</h2> <ul> <li>Refactor Trillian client with exported methods (<a href="https://redirect.github.com/sigstore/rekor/issues/1454">#1454</a>)</li> <li>Switch to official redis-go client (<a href="https://redirect.github.com/sigstore/rekor/issues/1459">#1459</a>)</li> <li>Remove replace in go.mod (<a href="https://redirect.github.com/sigstore/rekor/issues/1444">#1444</a>)</li> <li>Add Rekor OID info. (<a href="https://redirect.github.com/sigstore/rekor/issues/1390">#1390</a>)</li> </ul> <h2>Quality Enhancements</h2> <ul> <li>remove legacy encrypted cosign key (<a href="https://redirect.github.com/sigstore/rekor/issues/1446">#1446</a>)</li> <li>swap cjson dependency (<a href="https://redirect.github.com/sigstore/rekor/issues/1441">#1441</a>)</li> <li>Update release readme (<a href="https://redirect.github.com/sigstore/rekor/issues/1456">#1456</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-2h5h-59f5-c5x9</li> </ul> <h2>Contributors</h2> <ul> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Carlos Tadeu Panato Junior</li> <li>Ceridwen Coghlan</li> <li>Hayden B</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/sigstore/rekor/compare/v1.1.0...v1.1.1">https://github.com/sigstore/rekor/compare/v1.1.0...v1.1.1</a></p> <h1>v1.1.0</h1> <h2>Functional Enhancements</h2> <ul> <li>improve validation on intoto v0.0.2 type (<a href="https://redirect.github.com/sigstore/rekor/issues/1351">#1351</a>)</li> <li>add feature to limit HTTP request body length to process (<a href="https://redirect.github.com/sigstore/rekor/issues/1334">#1334</a>)</li> <li>add information about the file size limit (<a href="https://redirect.github.com/sigstore/rekor/issues/1313">#1313</a>)</li> <li>Add script to backfill Redis from Rekor (<a href="https://redirect.github.com/sigstore/rekor/issues/1163">#1163</a>)</li> <li>Feature: add search support for sha512 (<a href="https://redirect.github.com/sigstore/rekor/issues/1142">#1142</a>)</li> </ul> <h2>Quality Enhancements</h2> <ul> <li>fuzzing: refactor OSS-Fuzz build script (<a href="https://redirect.github.com/sigstore/rekor/issues/1377">#1377</a>)</li> <li>Update cloudbuild for cosign 2.0 (<a href="https://redirect.github.com/sigstore/rekor/issues/1375">#1375</a>)</li> <li>Tests - Additional sharding tests (<a href="https://redirect.github.com/sigstore/rekor/issues/1180">#1180</a>)</li> <li>jar type: add fuzzer for 3rd-party dep (<a href="https://redirect.github.com/sigstore/rekor/issues/1360">#1360</a>)</li> <li>update cosign to 2.0.0 and builder image and also cosign flags (<a href="https://redirect.github.com/sigstore/rekor/issues/1368">#1368</a>)</li> <li>fuzzing: move alpine utils to fuzz utils (<a href="https://redirect.github.com/sigstore/rekor/issues/1335">#1335</a>)</li> <li>fuzzing: add seed for alpine fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1342">#1342</a>)</li> <li>jar: add v001 fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1327">#1327</a>)</li> <li>fuzzing: open writer later in fuzz utils (<a href="https://redirect.github.com/sigstore/rekor/issues/1326">#1326</a>)</li> <li>fuzzing: remove tar operations in alpine fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1322">#1322</a>)</li> <li>alpine: add v001 fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1316">#1316</a>)</li> <li>hashedrekord: add v001 fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1315">#1315</a>)</li> <li>fuzzing: add call to IndexKeys in multiple fuzzers (<a href="https://redirect.github.com/sigstore/rekor/issues/1302">#1302</a>)</li> <li>fuzzing: improve cose fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1300">#1300</a>)</li> <li>fuzzing: improve fuzz utils (<a href="https://redirect.github.com/sigstore/rekor/issues/1298">#1298</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/rekor/blob/main/CHANGELOG.md">github.com/sigstore/rekor's changelog</a>.</em></p> <blockquote> <h1>v1.1.1</h1> <h2>Functional Enhancements</h2> <ul> <li>Refactor Trillian client with exported methods (<a href="https://redirect.github.com/sigstore/rekor/issues/1454">#1454</a>)</li> <li>Switch to official redis-go client (<a href="https://redirect.github.com/sigstore/rekor/issues/1459">#1459</a>)</li> <li>Remove replace in go.mod (<a href="https://redirect.github.com/sigstore/rekor/issues/1444">#1444</a>)</li> <li>Add Rekor OID info. (<a href="https://redirect.github.com/sigstore/rekor/issues/1390">#1390</a>)</li> </ul> <h2>Quality Enhancements</h2> <ul> <li>remove legacy encrypted cosign key (<a href="https://redirect.github.com/sigstore/rekor/issues/1446">#1446</a>)</li> <li>swap cjson dependency (<a href="https://redirect.github.com/sigstore/rekor/issues/1441">#1441</a>)</li> <li>Update release readme (<a href="https://redirect.github.com/sigstore/rekor/issues/1456">#1456</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-2h5h-59f5-c5x9</li> </ul> <h2>Contributors</h2> <ul> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Carlos Tadeu Panato Junior</li> <li>Ceridwen Coghlan</li> <li>Hayden B</li> </ul> <h1>v1.1.0</h1> <h2>Functional Enhancements</h2> <ul> <li>improve validation on intoto v0.0.2 type (<a href="https://redirect.github.com/sigstore/rekor/issues/1351">#1351</a>)</li> <li>add feature to limit HTTP request body length to process (<a href="https://redirect.github.com/sigstore/rekor/issues/1334">#1334</a>)</li> <li>add information about the file size limit (<a href="https://redirect.github.com/sigstore/rekor/issues/1313">#1313</a>)</li> <li>Add script to backfill Redis from Rekor (<a href="https://redirect.github.com/sigstore/rekor/issues/1163">#1163</a>)</li> <li>Feature: add search support for sha512 (<a href="https://redirect.github.com/sigstore/rekor/issues/1142">#1142</a>)</li> </ul> <h2>Quality Enhancements</h2> <ul> <li>fuzzing: refactor OSS-Fuzz build script (<a href="https://redirect.github.com/sigstore/rekor/issues/1377">#1377</a>)</li> <li>Update cloudbuild for cosign 2.0 (<a href="https://redirect.github.com/sigstore/rekor/issues/1375">#1375</a>)</li> <li>Tests - Additional sharding tests (<a href="https://redirect.github.com/sigstore/rekor/issues/1180">#1180</a>)</li> <li>jar type: add fuzzer for 3rd-party dep (<a href="https://redirect.github.com/sigstore/rekor/issues/1360">#1360</a>)</li> <li>update cosign to 2.0.0 and builder image and also cosign flags (<a href="https://redirect.github.com/sigstore/rekor/issues/1368">#1368</a>)</li> <li>fuzzing: move alpine utils to fuzz utils (<a href="https://redirect.github.com/sigstore/rekor/issues/1335">#1335</a>)</li> <li>fuzzing: add seed for alpine fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1342">#1342</a>)</li> <li>jar: add v001 fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1327">#1327</a>)</li> <li>fuzzing: open writer later in fuzz utils (<a href="https://redirect.github.com/sigstore/rekor/issues/1326">#1326</a>)</li> <li>fuzzing: remove tar operations in alpine fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1322">#1322</a>)</li> <li>alpine: add v001 fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1316">#1316</a>)</li> <li>hashedrekord: add v001 fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1315">#1315</a>)</li> <li>fuzzing: add call to IndexKeys in multiple fuzzers (<a href="https://redirect.github.com/sigstore/rekor/issues/1302">#1302</a>)</li> <li>fuzzing: improve cose fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1300">#1300</a>)</li> <li>fuzzing: improve fuzz utils (<a href="https://redirect.github.com/sigstore/rekor/issues/1298">#1298</a>)</li> <li>fuzzing: improve alpine fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1273">#1273</a>)</li> <li>fuzzing: go mod edit go-fuzz-headers (<a href="https://redirect.github.com/sigstore/rekor/issues/1272">#1272</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/rekor/commit/0c1914e5e955cb9f514e32b222cf61a13e91ab08"><code>0c1914e</code></a> update CHANGELOG for v1.1.1 (<a href="https://redirect.github.com/sigstore/rekor/issues/1462">#1462</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/cf42ace82667025fe128f7a50cf6b4cdff51cc48"><code>cf42ace</code></a> Merge pull request from GHSA-2h5h-59f5-c5x9</li> <li><a href="https://github.com/sigstore/rekor/commit/46ac0b224e673b969457597b15af2d125ae8c5c2"><code>46ac0b2</code></a> Refactor Trillian client with exported methods (<a href="https://redirect.github.com/sigstore/rekor/issues/1454">#1454</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/5d6e9723b1d251001906c5583b0fd6fe7e3a1cb3"><code>5d6e972</code></a> build(deps): bump github.com/redis/go-redis/v9 from 9.0.3 to 9.0.4 (<a href="https://redirect.github.com/sigstore/rekor/issues/1460">#1460</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/baa14ce4ebe621399ff8330dd8ddc4a6ca2e2533"><code>baa14ce</code></a> Switch to official redis-go client (<a href="https://redirect.github.com/sigstore/rekor/issues/1459">#1459</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/059e097a0b6856ff6ed79c96cba171df691eb3d8"><code>059e097</code></a> build(deps): bump github.com/go-playground/validator/v10 (<a href="https://redirect.github.com/sigstore/rekor/issues/1457">#1457</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/1f75c792567e6a4b2fa0ebb5e12fe500434d33b1"><code>1f75c79</code></a> Update release readme (<a href="https://redirect.github.com/sigstore/rekor/issues/1456">#1456</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/98163f336ce3db11d776c0eabc4c7bccda7612dd"><code>98163f3</code></a> build(deps): bump github/codeql-action from 2.3.1 to 2.3.2 (<a href="https://redirect.github.com/sigstore/rekor/issues/1455">#1455</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/24cb647106d74051ba70ce867b5c7319ad29e3b9"><code>24cb647</code></a> Remove replace in go.mod (<a href="https://redirect.github.com/sigstore/rekor/issues/1444">#1444</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/39bd69bc7c474ff07fef392ff139d0c01c2e116a"><code>39bd69b</code></a> Add Rekor OID info. (<a href="https://redirect.github.com/sigstore/rekor/issues/1390">#1390</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/rekor/compare/v1.0.1...v1.1.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/rekor&package-manager=go_modules&previous-version=1.0.1&new-version=1.1.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-04 04:11:29 +02:00
github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 h1:DklsrG3dyBCFEj5IhUbnKptjxatkF07cF2ak3yi77so=
github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2/go.mod h1:WaHUgvxTVq04UNunO+XhnAqY/wQc+bxr74GqbsZ/Jqw=
feat(deps): bump github.com/atc0005/go-teams-notify/v2 from 2.7.1 to 2.8.0 (#4216)
2023-07-31 16:14:23 +02:00
github.com/atc0005/go-teams-notify/v2 v2.8.0 h1:971J5qivrzBbYMDAdmW7v9s7W2u2jiIRVcY+LaIJqww=
github.com/atc0005/go-teams-notify/v2 v2.8.0/go.mod h1:SIeE1UfCcVRYMqP5b+r1ZteHyA/2UAjzWF5COnZ8q0w=
feat(deps): bump gocloud.dev from 0.34.0 to 0.35.0 (#4467) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.34.0 to 0.35.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.35.0</h2> <p><strong>BREAKING CHANGES</strong></p> <p>This release updates the dependency on AWS/S3, which included some breaking changes; see <a href="https://redirect.github.com/google/go-cloud/pull/3342">google/go-cloud#3342</a> for details.</p> <p><strong>blob</strong></p> <ul> <li><em>gcsblob</em>: Fix unauthenticated requests.</li> </ul> <p><strong>runtimevar</strong></p> <ul> <li><em>constantvar</em>: Add support for reading the constant variable value from the environment.</li> </ul> <p><strong>docstore</strong></p> <ul> <li><em>gcpfilestore</em>: Add support for non-default databases.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/27e0bca95dae3165b94cab4f9b7e2e4b087c8aef"><code>27e0bca</code></a> all: prep for release (<a href="https://redirect.github.com/google/go-cloud/issues/3350">#3350</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/53ccd8db26a14fd2a40bfcb28af1a1ceba4663f4"><code>53ccd8d</code></a> all: update deps, including a breaking S3 change (<a href="https://redirect.github.com/google/go-cloud/issues/3342">#3342</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fa413a39cdf8ffe0890a1b0a4cf5e06e0c915592"><code>fa413a3</code></a> docstore/gcpfilestore: add support for non-default databases. (<a href="https://redirect.github.com/google/go-cloud/issues/3345">#3345</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/c04000b96462ad3ec62e633eafd759185991bb27"><code>c04000b</code></a> secrets/hashivault: Update go-jose per dependabot (<a href="https://redirect.github.com/google/go-cloud/issues/3346">#3346</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/6d5d2890816abc88cd11ef13d6cd6506eb5b5537"><code>6d5d289</code></a> pubsub/natspubsub: upgrade a dependency (<a href="https://redirect.github.com/google/go-cloud/issues/3336">#3336</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/375e097193225b4ef300a336e04ccad9ace50bc1"><code>375e097</code></a> pubsub/natspubsub: Update dependency (<a href="https://redirect.github.com/google/go-cloud/issues/3331">#3331</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/35ac324ff7fae5ddc0f9dc2ff234a7d6b4935a20"><code>35ac324</code></a> all: update dependencies (<a href="https://redirect.github.com/google/go-cloud/issues/3329">#3329</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/4a18be0f4a48c145da4a76499485a45478fd69aa"><code>4a18be0</code></a> secrets/awskms: update the example for the AWS ARN use case (<a href="https://redirect.github.com/google/go-cloud/issues/3320">#3320</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/486d484a8f73fd5bedc910d4fd89c52e11412e68"><code>486d484</code></a> kafkapubsub: rename dependency Shopify/sarama to IBM/sarama (<a href="https://redirect.github.com/google/go-cloud/issues/3319">#3319</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/db7e808e313228ed8607a94d6e5cd075d66f4e86"><code>db7e808</code></a> runtimevar/constantvar: Add support for reading the constantvar from an envir...</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.34.0...v0.35.0">compare view</a></li> </ul> </details> <br /> <details> <summary>Most Recent Ignore Conditions Applied to This Pull Request</summary> | Dependency Name | Ignore Conditions | | --- | --- | | gocloud.dev | [>= 0.25.a, < 0.26] | </details> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.34.0&new-version=0.35.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-11 12:55:26 +02:00
github.com/aws/aws-sdk-go v1.48.3 h1:btYjT+opVFxUbRz+qSCjJe07cdX82BHmMX/FXYmoL7g=
github.com/aws/aws-sdk-go v1.48.3/go.mod h1:LF8svs817+Nz+DmiMQKTO3ubZ/6IaTpq3TjupRn3Eqk=
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419) Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.1.1 to 2.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's releases</a>.</em></p> <blockquote> <h2>v2.2.1</h2> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's changelog</a>.</em></p> <blockquote> <h1>v2.2.1</h1> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign/commit/12cbf9ea177d22bbf5cf028bcb4712b5f174ebc6"><code>12cbf9e</code></a> add changelog for v2.2.1 release (<a href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/827f24e9d4a1f8e845cb1597d02053410f5bbe2a"><code>827f24e</code></a> feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8ac891ff0e29ddc67965423bee8f826219c6eb0f"><code>8ac891f</code></a> Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li><a href="https://github.com/sigstore/cosign/commit/8b366c497bd22b9be7742d057b8f59083dcadee0"><code>8b366c4</code></a> add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/23920de5623a505921ba4e62fa97e2553eff4699"><code>23920de</code></a> chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/e022e1c13240d1ae5b3c408bc53e389154331713"><code>e022e1c</code></a> chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/28c59c5eca6386924cc8f381afe94efe1e957679"><code>28c59c5</code></a> add missing groups key (<a href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8e5bdcc0ff39b8dc1b477251fef521601df76ec0"><code>8e5bdcc</code></a> chore(deps): bump github.com/google/certificate-transparency-go (<a href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/510cac4ef54274823599082e3a57a556ccd5c9e5"><code>510cac4</code></a> chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/063902b1d78fed7c12c9d9ce06248d36963e8169"><code>063902b</code></a> chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 18:39:49 +02:00
github.com/aws/aws-sdk-go-v2 v1.21.2/go.mod h1:ErQhvNuEMhJjweavOYhxVkn2RUx7kQXVATHrjKtxIpM=
feat(deps): bump gocloud.dev from 0.34.0 to 0.35.0 (#4467) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.34.0 to 0.35.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.35.0</h2> <p><strong>BREAKING CHANGES</strong></p> <p>This release updates the dependency on AWS/S3, which included some breaking changes; see <a href="https://redirect.github.com/google/go-cloud/pull/3342">google/go-cloud#3342</a> for details.</p> <p><strong>blob</strong></p> <ul> <li><em>gcsblob</em>: Fix unauthenticated requests.</li> </ul> <p><strong>runtimevar</strong></p> <ul> <li><em>constantvar</em>: Add support for reading the constant variable value from the environment.</li> </ul> <p><strong>docstore</strong></p> <ul> <li><em>gcpfilestore</em>: Add support for non-default databases.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/27e0bca95dae3165b94cab4f9b7e2e4b087c8aef"><code>27e0bca</code></a> all: prep for release (<a href="https://redirect.github.com/google/go-cloud/issues/3350">#3350</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/53ccd8db26a14fd2a40bfcb28af1a1ceba4663f4"><code>53ccd8d</code></a> all: update deps, including a breaking S3 change (<a href="https://redirect.github.com/google/go-cloud/issues/3342">#3342</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fa413a39cdf8ffe0890a1b0a4cf5e06e0c915592"><code>fa413a3</code></a> docstore/gcpfilestore: add support for non-default databases. (<a href="https://redirect.github.com/google/go-cloud/issues/3345">#3345</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/c04000b96462ad3ec62e633eafd759185991bb27"><code>c04000b</code></a> secrets/hashivault: Update go-jose per dependabot (<a href="https://redirect.github.com/google/go-cloud/issues/3346">#3346</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/6d5d2890816abc88cd11ef13d6cd6506eb5b5537"><code>6d5d289</code></a> pubsub/natspubsub: upgrade a dependency (<a href="https://redirect.github.com/google/go-cloud/issues/3336">#3336</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/375e097193225b4ef300a336e04ccad9ace50bc1"><code>375e097</code></a> pubsub/natspubsub: Update dependency (<a href="https://redirect.github.com/google/go-cloud/issues/3331">#3331</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/35ac324ff7fae5ddc0f9dc2ff234a7d6b4935a20"><code>35ac324</code></a> all: update dependencies (<a href="https://redirect.github.com/google/go-cloud/issues/3329">#3329</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/4a18be0f4a48c145da4a76499485a45478fd69aa"><code>4a18be0</code></a> secrets/awskms: update the example for the AWS ARN use case (<a href="https://redirect.github.com/google/go-cloud/issues/3320">#3320</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/486d484a8f73fd5bedc910d4fd89c52e11412e68"><code>486d484</code></a> kafkapubsub: rename dependency Shopify/sarama to IBM/sarama (<a href="https://redirect.github.com/google/go-cloud/issues/3319">#3319</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/db7e808e313228ed8607a94d6e5cd075d66f4e86"><code>db7e808</code></a> runtimevar/constantvar: Add support for reading the constantvar from an envir...</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.34.0...v0.35.0">compare view</a></li> </ul> </details> <br /> <details> <summary>Most Recent Ignore Conditions Applied to This Pull Request</summary> | Dependency Name | Ignore Conditions | | --- | --- | | gocloud.dev | [>= 0.25.a, < 0.26] | </details> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.34.0&new-version=0.35.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-11 12:55:26 +02:00
github.com/aws/aws-sdk-go-v2 v1.23.1 h1:qXaFsOOMA+HsZtX8WoCa+gJnbyW7qyFFBlPqvTSzbaI=
github.com/aws/aws-sdk-go-v2 v1.23.1/go.mod h1:i1XDttT4rnf6vxc9AuskLc6s7XBee8rlLilKlc03uAA=
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.5.1 h1:ZY3108YtBNq96jNZTICHxN1gSBSbnvIdYwwqnvCV4Mc=
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.5.1/go.mod h1:t8PYl/6LzdAqsU4/9tz28V/kU+asFePvpOMkdul0gEQ=
github.com/aws/aws-sdk-go-v2/config v1.25.5 h1:UGKm9hpQS2hoK8CEJ1BzAW8NbUpvwDJJ4lyqXSzu8bk=
github.com/aws/aws-sdk-go-v2/config v1.25.5/go.mod h1:Bf4gDvy4ZcFIK0rqDu1wp9wrubNba2DojiPB2rt6nvI=
github.com/aws/aws-sdk-go-v2/credentials v1.16.4 h1:i7UQYYDSJrtc30RSwJwfBKwLFNnBTiICqAJ0pPdum8E=
github.com/aws/aws-sdk-go-v2/credentials v1.16.4/go.mod h1:Kdh/okh+//vQ/AjEt81CjvkTo64+/zIE4OewP7RpfXk=
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.14.5 h1:KehRNiVzIfAcj6gw98zotVbb/K67taJE0fkfgM6vzqU=
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.14.5/go.mod h1:VhnExhw6uXy9QzetvpXDolo1/hjhx4u9qukBGkuUwjs=
github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.14.2 h1:3q7vcLhq6JXqTLPpPuDJgw3f+DFqd4p+BWL2DlplRPc=
github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.14.2/go.mod h1:9aqZoo/OeMBK/Nf3wzQzTlM92u7Bip256GHpY0oQbX4=
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419) Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.1.1 to 2.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's releases</a>.</em></p> <blockquote> <h2>v2.2.1</h2> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's changelog</a>.</em></p> <blockquote> <h1>v2.2.1</h1> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign/commit/12cbf9ea177d22bbf5cf028bcb4712b5f174ebc6"><code>12cbf9e</code></a> add changelog for v2.2.1 release (<a href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/827f24e9d4a1f8e845cb1597d02053410f5bbe2a"><code>827f24e</code></a> feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8ac891ff0e29ddc67965423bee8f826219c6eb0f"><code>8ac891f</code></a> Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li><a href="https://github.com/sigstore/cosign/commit/8b366c497bd22b9be7742d057b8f59083dcadee0"><code>8b366c4</code></a> add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/23920de5623a505921ba4e62fa97e2553eff4699"><code>23920de</code></a> chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/e022e1c13240d1ae5b3c408bc53e389154331713"><code>e022e1c</code></a> chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/28c59c5eca6386924cc8f381afe94efe1e957679"><code>28c59c5</code></a> add missing groups key (<a href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8e5bdcc0ff39b8dc1b477251fef521601df76ec0"><code>8e5bdcc</code></a> chore(deps): bump github.com/google/certificate-transparency-go (<a href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/510cac4ef54274823599082e3a57a556ccd5c9e5"><code>510cac4</code></a> chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/063902b1d78fed7c12c9d9ce06248d36963e8169"><code>063902b</code></a> chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 18:39:49 +02:00
github.com/aws/aws-sdk-go-v2/internal/configsources v1.1.43/go.mod h1:auo+PiyLl0n1l8A0e8RIeR8tOzYPfZZH/JNlrJ8igTQ=
feat(deps): bump gocloud.dev from 0.34.0 to 0.35.0 (#4467) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.34.0 to 0.35.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.35.0</h2> <p><strong>BREAKING CHANGES</strong></p> <p>This release updates the dependency on AWS/S3, which included some breaking changes; see <a href="https://redirect.github.com/google/go-cloud/pull/3342">google/go-cloud#3342</a> for details.</p> <p><strong>blob</strong></p> <ul> <li><em>gcsblob</em>: Fix unauthenticated requests.</li> </ul> <p><strong>runtimevar</strong></p> <ul> <li><em>constantvar</em>: Add support for reading the constant variable value from the environment.</li> </ul> <p><strong>docstore</strong></p> <ul> <li><em>gcpfilestore</em>: Add support for non-default databases.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/27e0bca95dae3165b94cab4f9b7e2e4b087c8aef"><code>27e0bca</code></a> all: prep for release (<a href="https://redirect.github.com/google/go-cloud/issues/3350">#3350</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/53ccd8db26a14fd2a40bfcb28af1a1ceba4663f4"><code>53ccd8d</code></a> all: update deps, including a breaking S3 change (<a href="https://redirect.github.com/google/go-cloud/issues/3342">#3342</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fa413a39cdf8ffe0890a1b0a4cf5e06e0c915592"><code>fa413a3</code></a> docstore/gcpfilestore: add support for non-default databases. (<a href="https://redirect.github.com/google/go-cloud/issues/3345">#3345</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/c04000b96462ad3ec62e633eafd759185991bb27"><code>c04000b</code></a> secrets/hashivault: Update go-jose per dependabot (<a href="https://redirect.github.com/google/go-cloud/issues/3346">#3346</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/6d5d2890816abc88cd11ef13d6cd6506eb5b5537"><code>6d5d289</code></a> pubsub/natspubsub: upgrade a dependency (<a href="https://redirect.github.com/google/go-cloud/issues/3336">#3336</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/375e097193225b4ef300a336e04ccad9ace50bc1"><code>375e097</code></a> pubsub/natspubsub: Update dependency (<a href="https://redirect.github.com/google/go-cloud/issues/3331">#3331</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/35ac324ff7fae5ddc0f9dc2ff234a7d6b4935a20"><code>35ac324</code></a> all: update dependencies (<a href="https://redirect.github.com/google/go-cloud/issues/3329">#3329</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/4a18be0f4a48c145da4a76499485a45478fd69aa"><code>4a18be0</code></a> secrets/awskms: update the example for the AWS ARN use case (<a href="https://redirect.github.com/google/go-cloud/issues/3320">#3320</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/486d484a8f73fd5bedc910d4fd89c52e11412e68"><code>486d484</code></a> kafkapubsub: rename dependency Shopify/sarama to IBM/sarama (<a href="https://redirect.github.com/google/go-cloud/issues/3319">#3319</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/db7e808e313228ed8607a94d6e5cd075d66f4e86"><code>db7e808</code></a> runtimevar/constantvar: Add support for reading the constantvar from an envir...</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.34.0...v0.35.0">compare view</a></li> </ul> </details> <br /> <details> <summary>Most Recent Ignore Conditions Applied to This Pull Request</summary> | Dependency Name | Ignore Conditions | | --- | --- | | gocloud.dev | [>= 0.25.a, < 0.26] | </details> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.34.0&new-version=0.35.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-11 12:55:26 +02:00
github.com/aws/aws-sdk-go-v2/internal/configsources v1.2.4 h1:LAm3Ycm9HJfbSCd5I+wqC2S9Ej7FPrgr5CQoOljJZcE=
github.com/aws/aws-sdk-go-v2/internal/configsources v1.2.4/go.mod h1:xEhvbJcyUf/31yfGSQBe01fukXwXJ0gxDp7rLfymWE0=
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419) Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.1.1 to 2.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's releases</a>.</em></p> <blockquote> <h2>v2.2.1</h2> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's changelog</a>.</em></p> <blockquote> <h1>v2.2.1</h1> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign/commit/12cbf9ea177d22bbf5cf028bcb4712b5f174ebc6"><code>12cbf9e</code></a> add changelog for v2.2.1 release (<a href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/827f24e9d4a1f8e845cb1597d02053410f5bbe2a"><code>827f24e</code></a> feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8ac891ff0e29ddc67965423bee8f826219c6eb0f"><code>8ac891f</code></a> Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li><a href="https://github.com/sigstore/cosign/commit/8b366c497bd22b9be7742d057b8f59083dcadee0"><code>8b366c4</code></a> add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/23920de5623a505921ba4e62fa97e2553eff4699"><code>23920de</code></a> chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/e022e1c13240d1ae5b3c408bc53e389154331713"><code>e022e1c</code></a> chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/28c59c5eca6386924cc8f381afe94efe1e957679"><code>28c59c5</code></a> add missing groups key (<a href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8e5bdcc0ff39b8dc1b477251fef521601df76ec0"><code>8e5bdcc</code></a> chore(deps): bump github.com/google/certificate-transparency-go (<a href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/510cac4ef54274823599082e3a57a556ccd5c9e5"><code>510cac4</code></a> chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/063902b1d78fed7c12c9d9ce06248d36963e8169"><code>063902b</code></a> chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 18:39:49 +02:00
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.4.37/go.mod h1:Qe+2KtKml+FEsQF/DHmDV+xjtche/hwoF75EG4UlHW8=
feat(deps): bump gocloud.dev from 0.34.0 to 0.35.0 (#4467) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.34.0 to 0.35.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.35.0</h2> <p><strong>BREAKING CHANGES</strong></p> <p>This release updates the dependency on AWS/S3, which included some breaking changes; see <a href="https://redirect.github.com/google/go-cloud/pull/3342">google/go-cloud#3342</a> for details.</p> <p><strong>blob</strong></p> <ul> <li><em>gcsblob</em>: Fix unauthenticated requests.</li> </ul> <p><strong>runtimevar</strong></p> <ul> <li><em>constantvar</em>: Add support for reading the constant variable value from the environment.</li> </ul> <p><strong>docstore</strong></p> <ul> <li><em>gcpfilestore</em>: Add support for non-default databases.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/27e0bca95dae3165b94cab4f9b7e2e4b087c8aef"><code>27e0bca</code></a> all: prep for release (<a href="https://redirect.github.com/google/go-cloud/issues/3350">#3350</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/53ccd8db26a14fd2a40bfcb28af1a1ceba4663f4"><code>53ccd8d</code></a> all: update deps, including a breaking S3 change (<a href="https://redirect.github.com/google/go-cloud/issues/3342">#3342</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fa413a39cdf8ffe0890a1b0a4cf5e06e0c915592"><code>fa413a3</code></a> docstore/gcpfilestore: add support for non-default databases. (<a href="https://redirect.github.com/google/go-cloud/issues/3345">#3345</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/c04000b96462ad3ec62e633eafd759185991bb27"><code>c04000b</code></a> secrets/hashivault: Update go-jose per dependabot (<a href="https://redirect.github.com/google/go-cloud/issues/3346">#3346</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/6d5d2890816abc88cd11ef13d6cd6506eb5b5537"><code>6d5d289</code></a> pubsub/natspubsub: upgrade a dependency (<a href="https://redirect.github.com/google/go-cloud/issues/3336">#3336</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/375e097193225b4ef300a336e04ccad9ace50bc1"><code>375e097</code></a> pubsub/natspubsub: Update dependency (<a href="https://redirect.github.com/google/go-cloud/issues/3331">#3331</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/35ac324ff7fae5ddc0f9dc2ff234a7d6b4935a20"><code>35ac324</code></a> all: update dependencies (<a href="https://redirect.github.com/google/go-cloud/issues/3329">#3329</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/4a18be0f4a48c145da4a76499485a45478fd69aa"><code>4a18be0</code></a> secrets/awskms: update the example for the AWS ARN use case (<a href="https://redirect.github.com/google/go-cloud/issues/3320">#3320</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/486d484a8f73fd5bedc910d4fd89c52e11412e68"><code>486d484</code></a> kafkapubsub: rename dependency Shopify/sarama to IBM/sarama (<a href="https://redirect.github.com/google/go-cloud/issues/3319">#3319</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/db7e808e313228ed8607a94d6e5cd075d66f4e86"><code>db7e808</code></a> runtimevar/constantvar: Add support for reading the constantvar from an envir...</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.34.0...v0.35.0">compare view</a></li> </ul> </details> <br /> <details> <summary>Most Recent Ignore Conditions Applied to This Pull Request</summary> | Dependency Name | Ignore Conditions | | --- | --- | | gocloud.dev | [>= 0.25.a, < 0.26] | </details> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.34.0&new-version=0.35.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-11 12:55:26 +02:00
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.5.4 h1:4GV0kKZzUxiWxSVpn/9gwR0g21NF1Jsyduzo9rHgC/Q=
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.5.4/go.mod h1:dYvTNAggxDZy6y1AF7YDwXsPuHFy/VNEpEI/2dWK9IU=
github.com/aws/aws-sdk-go-v2/internal/ini v1.7.1 h1:uR9lXYjdPX0xY+NhvaJ4dD8rpSRz5VY81ccIIoNG+lw=
github.com/aws/aws-sdk-go-v2/internal/ini v1.7.1/go.mod h1:6fQQgfuGmw8Al/3M2IgIllycxV7ZW7WCdVSqfBeUiCY=
github.com/aws/aws-sdk-go-v2/internal/v4a v1.2.4 h1:40Q4X5ebZruRtknEZH/bg91sT5pR853F7/1X9QRbI54=
github.com/aws/aws-sdk-go-v2/internal/v4a v1.2.4/go.mod h1:u77N7eEECzUv7F0xl2gcfK/vzc8wcjWobpy+DcrLJ5E=
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419) Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.1.1 to 2.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's releases</a>.</em></p> <blockquote> <h2>v2.2.1</h2> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's changelog</a>.</em></p> <blockquote> <h1>v2.2.1</h1> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign/commit/12cbf9ea177d22bbf5cf028bcb4712b5f174ebc6"><code>12cbf9e</code></a> add changelog for v2.2.1 release (<a href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/827f24e9d4a1f8e845cb1597d02053410f5bbe2a"><code>827f24e</code></a> feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8ac891ff0e29ddc67965423bee8f826219c6eb0f"><code>8ac891f</code></a> Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li><a href="https://github.com/sigstore/cosign/commit/8b366c497bd22b9be7742d057b8f59083dcadee0"><code>8b366c4</code></a> add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/23920de5623a505921ba4e62fa97e2553eff4699"><code>23920de</code></a> chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/e022e1c13240d1ae5b3c408bc53e389154331713"><code>e022e1c</code></a> chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/28c59c5eca6386924cc8f381afe94efe1e957679"><code>28c59c5</code></a> add missing groups key (<a href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8e5bdcc0ff39b8dc1b477251fef521601df76ec0"><code>8e5bdcc</code></a> chore(deps): bump github.com/google/certificate-transparency-go (<a href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/510cac4ef54274823599082e3a57a556ccd5c9e5"><code>510cac4</code></a> chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/063902b1d78fed7c12c9d9ce06248d36963e8169"><code>063902b</code></a> chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 18:39:49 +02:00
github.com/aws/aws-sdk-go-v2/service/ecr v1.20.2 h1:y6LX9GUoEA3mO0qpFl1ZQHj1rFyPWVphlzebiSt2tKE=
github.com/aws/aws-sdk-go-v2/service/ecr v1.20.2/go.mod h1:Q0LcmaN/Qr8+4aSBrdrXXePqoX0eOuYpJLbYpilmWnA=
github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.18.2 h1:PpbXaecV3sLAS6rjQiaKw4/jyq3Z8gNzmoJupHAoBp0=
github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.18.2/go.mod h1:fUHpGXr4DrXkEDpGAjClPsviWf+Bszeb0daKE0blxv8=
feat(deps): bump gocloud.dev from 0.34.0 to 0.35.0 (#4467) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.34.0 to 0.35.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.35.0</h2> <p><strong>BREAKING CHANGES</strong></p> <p>This release updates the dependency on AWS/S3, which included some breaking changes; see <a href="https://redirect.github.com/google/go-cloud/pull/3342">google/go-cloud#3342</a> for details.</p> <p><strong>blob</strong></p> <ul> <li><em>gcsblob</em>: Fix unauthenticated requests.</li> </ul> <p><strong>runtimevar</strong></p> <ul> <li><em>constantvar</em>: Add support for reading the constant variable value from the environment.</li> </ul> <p><strong>docstore</strong></p> <ul> <li><em>gcpfilestore</em>: Add support for non-default databases.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/27e0bca95dae3165b94cab4f9b7e2e4b087c8aef"><code>27e0bca</code></a> all: prep for release (<a href="https://redirect.github.com/google/go-cloud/issues/3350">#3350</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/53ccd8db26a14fd2a40bfcb28af1a1ceba4663f4"><code>53ccd8d</code></a> all: update deps, including a breaking S3 change (<a href="https://redirect.github.com/google/go-cloud/issues/3342">#3342</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fa413a39cdf8ffe0890a1b0a4cf5e06e0c915592"><code>fa413a3</code></a> docstore/gcpfilestore: add support for non-default databases. (<a href="https://redirect.github.com/google/go-cloud/issues/3345">#3345</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/c04000b96462ad3ec62e633eafd759185991bb27"><code>c04000b</code></a> secrets/hashivault: Update go-jose per dependabot (<a href="https://redirect.github.com/google/go-cloud/issues/3346">#3346</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/6d5d2890816abc88cd11ef13d6cd6506eb5b5537"><code>6d5d289</code></a> pubsub/natspubsub: upgrade a dependency (<a href="https://redirect.github.com/google/go-cloud/issues/3336">#3336</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/375e097193225b4ef300a336e04ccad9ace50bc1"><code>375e097</code></a> pubsub/natspubsub: Update dependency (<a href="https://redirect.github.com/google/go-cloud/issues/3331">#3331</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/35ac324ff7fae5ddc0f9dc2ff234a7d6b4935a20"><code>35ac324</code></a> all: update dependencies (<a href="https://redirect.github.com/google/go-cloud/issues/3329">#3329</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/4a18be0f4a48c145da4a76499485a45478fd69aa"><code>4a18be0</code></a> secrets/awskms: update the example for the AWS ARN use case (<a href="https://redirect.github.com/google/go-cloud/issues/3320">#3320</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/486d484a8f73fd5bedc910d4fd89c52e11412e68"><code>486d484</code></a> kafkapubsub: rename dependency Shopify/sarama to IBM/sarama (<a href="https://redirect.github.com/google/go-cloud/issues/3319">#3319</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/db7e808e313228ed8607a94d6e5cd075d66f4e86"><code>db7e808</code></a> runtimevar/constantvar: Add support for reading the constantvar from an envir...</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.34.0...v0.35.0">compare view</a></li> </ul> </details> <br /> <details> <summary>Most Recent Ignore Conditions Applied to This Pull Request</summary> | Dependency Name | Ignore Conditions | | --- | --- | | gocloud.dev | [>= 0.25.a, < 0.26] | </details> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.34.0&new-version=0.35.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-11 12:55:26 +02:00
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.10.1 h1:rpkF4n0CyFcrJUG/rNNohoTmhtWlFTRI4BsZOh9PvLs=
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.10.1/go.mod h1:l9ymW25HOqymeU2m1gbUQ3rUIsTwKs8gYHXkqDQUhiI=
github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.2.4 h1:6DRKQc+9cChgzL5gplRGusI5dBGeiEod4m/pmGbcX48=
github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.2.4/go.mod h1:s8ORvrW4g4v7IvYKIAoBg17w3GQ+XuwXDXYrQ5SkzU0=
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.10.4 h1:rdovz3rEu0vZKbzoMYPTehp0E8veoE9AyfzqCr5Eeao=
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.10.4/go.mod h1:aYCGNjyUCUelhofxlZyj63srdxWUSsBSGg5l6MCuXuE=
github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.16.4 h1:o3DcfCxGDIT20pTbVKVhp3vWXOj/VvgazNJvumWeYW0=
github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.16.4/go.mod h1:Uy0KVOxuTK2ne+/PKQ+VvEeWmjMMksE17k/2RK/r5oM=
github.com/aws/aws-sdk-go-v2/service/kms v1.26.3 h1:li5dFiK1tkAFXvOC9QPWAVWqTu8ZxpIR0KzKmof6TIE=
github.com/aws/aws-sdk-go-v2/service/kms v1.26.3/go.mod h1:N3++/sLV97B8Zliz7KRqNcojOX7iMBZWKiuit5FKtH0=
github.com/aws/aws-sdk-go-v2/service/s3 v1.44.0 h1:FJTWR2nP1ddLIbk4n7Glw8wGbeWGHaViUwADPzE/EBo=
github.com/aws/aws-sdk-go-v2/service/s3 v1.44.0/go.mod h1:dqJ5JBL0clzgHriH35Amx3LRFY6wNIPUX7QO/BerSBo=
github.com/aws/aws-sdk-go-v2/service/sso v1.17.3 h1:CdsSOGlFF3Pn+koXOIpTtvX7st0IuGsZ8kJqcWMlX54=
github.com/aws/aws-sdk-go-v2/service/sso v1.17.3/go.mod h1:oA6VjNsLll2eVuUoF2D+CMyORgNzPEW/3PyUdq6WQjI=
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.20.1 h1:cbRqFTVnJV+KRpwFl76GJdIZJKKCdTPnjUZ7uWh3pIU=
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.20.1/go.mod h1:hHL974p5auvXlZPIjJTblXJpbkfK4klBczlsEaMCGVY=
github.com/aws/aws-sdk-go-v2/service/sts v1.25.4 h1:yEvZ4neOQ/KpUqyR+X0ycUTW/kVRNR4nDZ38wStHGAA=
github.com/aws/aws-sdk-go-v2/service/sts v1.25.4/go.mod h1:feTnm2Tk/pJxdX+eooEsxvlvTWBvDm6CasRZ+JOs2IY=
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419) Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.1.1 to 2.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's releases</a>.</em></p> <blockquote> <h2>v2.2.1</h2> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's changelog</a>.</em></p> <blockquote> <h1>v2.2.1</h1> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign/commit/12cbf9ea177d22bbf5cf028bcb4712b5f174ebc6"><code>12cbf9e</code></a> add changelog for v2.2.1 release (<a href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/827f24e9d4a1f8e845cb1597d02053410f5bbe2a"><code>827f24e</code></a> feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8ac891ff0e29ddc67965423bee8f826219c6eb0f"><code>8ac891f</code></a> Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li><a href="https://github.com/sigstore/cosign/commit/8b366c497bd22b9be7742d057b8f59083dcadee0"><code>8b366c4</code></a> add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/23920de5623a505921ba4e62fa97e2553eff4699"><code>23920de</code></a> chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/e022e1c13240d1ae5b3c408bc53e389154331713"><code>e022e1c</code></a> chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/28c59c5eca6386924cc8f381afe94efe1e957679"><code>28c59c5</code></a> add missing groups key (<a href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8e5bdcc0ff39b8dc1b477251fef521601df76ec0"><code>8e5bdcc</code></a> chore(deps): bump github.com/google/certificate-transparency-go (<a href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/510cac4ef54274823599082e3a57a556ccd5c9e5"><code>510cac4</code></a> chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/063902b1d78fed7c12c9d9ce06248d36963e8169"><code>063902b</code></a> chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 18:39:49 +02:00
github.com/aws/smithy-go v1.15.0/go.mod h1:Tg+OJXh4MB2R/uN61Ko2f6hTZwB/ZYGOtib8J3gBHzA=
feat(deps): bump gocloud.dev from 0.34.0 to 0.35.0 (#4467) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.34.0 to 0.35.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.35.0</h2> <p><strong>BREAKING CHANGES</strong></p> <p>This release updates the dependency on AWS/S3, which included some breaking changes; see <a href="https://redirect.github.com/google/go-cloud/pull/3342">google/go-cloud#3342</a> for details.</p> <p><strong>blob</strong></p> <ul> <li><em>gcsblob</em>: Fix unauthenticated requests.</li> </ul> <p><strong>runtimevar</strong></p> <ul> <li><em>constantvar</em>: Add support for reading the constant variable value from the environment.</li> </ul> <p><strong>docstore</strong></p> <ul> <li><em>gcpfilestore</em>: Add support for non-default databases.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/27e0bca95dae3165b94cab4f9b7e2e4b087c8aef"><code>27e0bca</code></a> all: prep for release (<a href="https://redirect.github.com/google/go-cloud/issues/3350">#3350</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/53ccd8db26a14fd2a40bfcb28af1a1ceba4663f4"><code>53ccd8d</code></a> all: update deps, including a breaking S3 change (<a href="https://redirect.github.com/google/go-cloud/issues/3342">#3342</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fa413a39cdf8ffe0890a1b0a4cf5e06e0c915592"><code>fa413a3</code></a> docstore/gcpfilestore: add support for non-default databases. (<a href="https://redirect.github.com/google/go-cloud/issues/3345">#3345</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/c04000b96462ad3ec62e633eafd759185991bb27"><code>c04000b</code></a> secrets/hashivault: Update go-jose per dependabot (<a href="https://redirect.github.com/google/go-cloud/issues/3346">#3346</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/6d5d2890816abc88cd11ef13d6cd6506eb5b5537"><code>6d5d289</code></a> pubsub/natspubsub: upgrade a dependency (<a href="https://redirect.github.com/google/go-cloud/issues/3336">#3336</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/375e097193225b4ef300a336e04ccad9ace50bc1"><code>375e097</code></a> pubsub/natspubsub: Update dependency (<a href="https://redirect.github.com/google/go-cloud/issues/3331">#3331</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/35ac324ff7fae5ddc0f9dc2ff234a7d6b4935a20"><code>35ac324</code></a> all: update dependencies (<a href="https://redirect.github.com/google/go-cloud/issues/3329">#3329</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/4a18be0f4a48c145da4a76499485a45478fd69aa"><code>4a18be0</code></a> secrets/awskms: update the example for the AWS ARN use case (<a href="https://redirect.github.com/google/go-cloud/issues/3320">#3320</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/486d484a8f73fd5bedc910d4fd89c52e11412e68"><code>486d484</code></a> kafkapubsub: rename dependency Shopify/sarama to IBM/sarama (<a href="https://redirect.github.com/google/go-cloud/issues/3319">#3319</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/db7e808e313228ed8607a94d6e5cd075d66f4e86"><code>db7e808</code></a> runtimevar/constantvar: Add support for reading the constantvar from an envir...</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.34.0...v0.35.0">compare view</a></li> </ul> </details> <br /> <details> <summary>Most Recent Ignore Conditions Applied to This Pull Request</summary> | Dependency Name | Ignore Conditions | | --- | --- | | gocloud.dev | [>= 0.25.a, < 0.26] | </details> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.34.0&new-version=0.35.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-11 12:55:26 +02:00
github.com/aws/smithy-go v1.17.0 h1:wWJD7LX6PBV6etBUwO0zElG0nWN9rUhp0WdYeHSHAaI=
github.com/aws/smithy-go v1.17.0/go.mod h1:NukqUGpCZIILqqiV0NIjeFh24kd/FAa4beRb6nbIUPE=
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419) Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.1.1 to 2.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's releases</a>.</em></p> <blockquote> <h2>v2.2.1</h2> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's changelog</a>.</em></p> <blockquote> <h1>v2.2.1</h1> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign/commit/12cbf9ea177d22bbf5cf028bcb4712b5f174ebc6"><code>12cbf9e</code></a> add changelog for v2.2.1 release (<a href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/827f24e9d4a1f8e845cb1597d02053410f5bbe2a"><code>827f24e</code></a> feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8ac891ff0e29ddc67965423bee8f826219c6eb0f"><code>8ac891f</code></a> Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li><a href="https://github.com/sigstore/cosign/commit/8b366c497bd22b9be7742d057b8f59083dcadee0"><code>8b366c4</code></a> add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/23920de5623a505921ba4e62fa97e2553eff4699"><code>23920de</code></a> chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/e022e1c13240d1ae5b3c408bc53e389154331713"><code>e022e1c</code></a> chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/28c59c5eca6386924cc8f381afe94efe1e957679"><code>28c59c5</code></a> add missing groups key (<a href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8e5bdcc0ff39b8dc1b477251fef521601df76ec0"><code>8e5bdcc</code></a> chore(deps): bump github.com/google/certificate-transparency-go (<a href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/510cac4ef54274823599082e3a57a556ccd5c9e5"><code>510cac4</code></a> chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/063902b1d78fed7c12c9d9ce06248d36963e8169"><code>063902b</code></a> chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 18:39:49 +02:00
github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.0.0-20231024185945-8841054dbdb8 h1:SoFYaT9UyGkR0+nogNyD/Lj+bsixB+SNuAS4ABlEs6M=
github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.0.0-20231024185945-8841054dbdb8/go.mod h1:2JF49jcDOrLStIXN/j/K1EKRq8a8R2qRnlZA6/o/c7c=
feat(deps): bump github.com/caarlos0/log from v0.2.1 to v0.2.2 (#3875) update caarlos0/log Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2023-03-20 03:47:02 +02:00
github.com/aymanbagabas/go-osc52/v2 v2.0.1 h1:HwpRHbFMcZLEVr42D4p7XBqjyuxQH5SMiErDT4WkJ2k=
github.com/aymanbagabas/go-osc52/v2 v2.0.1/go.mod h1:uYgXzlJ7ZpABp8OJ+exZzJJhRNQ2ASbcXHWsFqH8hp8=
feat(deps): bump github.com/invopop/jsonschema from 0.8.0 to 0.9.0 Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-09-22 04:17:31 +02:00
github.com/bahlo/generic-list-go v0.2.0 h1:5sz/EEAK+ls5wF+NeqDpk5+iNdMDXrh3z3nPnH1Wvgk=
github.com/bahlo/generic-list-go v0.2.0/go.mod h1:2KvAjgMlE5NNynlg/5iLrrCCZ2+5xWbdbCW3pNTGyYg=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/beorn7/perks v0.0.0-20180321164747-3a771d992973/go.mod h1:Dwedo/Wpr24TaqPxmxbtue+5NUziq4I4S80YR8gNf3Q=
github.com/beorn7/perks v1.0.0/go.mod h1:KWe93zE9D1o94FZ5RNwFwVgaQK1VOXiVxmqh+CedLV8=
feat: add ko support (#3653) continuing the PR by @developer-guy - [x] should be a publisher, as it does publish the images it builds every time - [x] `Default` method does not work - [x] the `fromConfig` thing should probably be on the defaults, too - [x] wire `--skip-ko` - [x] documentation - [x] more tests - [x] use same registry as docker tests does - [ ] see if we can make the log output match goreleaser's - [ ] ?? closes #2556 closes #3490 Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com> Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> Co-authored-by: actions-user <actions@github.com> Co-authored-by: Jason Hall <jason@chainguard.dev> Co-authored-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2023-01-17 03:34:49 +02:00
github.com/beorn7/perks v1.0.1 h1:VlbKKnNfV8bJzeqoa4cOKqO6bYr3WgKZxO8Z16+hsOM=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/beorn7/perks v1.0.1/go.mod h1:G2ZrVWU2WbWT9wwq4/hrbKbnv/1ERSJQ0ibhJ6rlkpw=
feat: nfpm without rpmbuild (#1187) thanks @djgilcrease for all the hard work on nfpm and google/rpmpack. thanks to @jarondl who works on rpmpack as well. great work everyone! 🚀 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2019-10-11 14:00:19 +02:00
github.com/blakesmith/ar v0.0.0-20190502131153-809d4375e1fb h1:m935MPodAbYS46DG4pJSv7WO+VECIWUQ7OJYSoTrMh4=
github.com/blakesmith/ar v0.0.0-20190502131153-809d4375e1fb/go.mod h1:PkYb9DJNAwrSvRx5DYA+gUcOIgTGVMNkfSCbZM8cWpI=
feat(deps): bump github.com/invopop/jsonschema from 0.8.0 to 0.9.0 Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-09-22 04:17:31 +02:00
github.com/buger/jsonparser v1.1.1 h1:2PnMjfWD7wBILjqQbt530v576A/cAbQvEW9gGIpYMUs=
github.com/buger/jsonparser v1.1.1/go.mod h1:6RYKKt7H4d4+iWqouImQ9R2FZql3VbhNgx27UK13J/0=
feat(deps): bump github.com/goreleaser/nfpm/v2 from 2.30.1 to 2.31.0 (#4144) latest and greatest
2023-06-26 18:20:47 +02:00
github.com/bwesterb/go-ristretto v1.2.3/go.mod h1:fUIoIZaG73pV5biE2Blr2xEzDoMj7NFEuV9ekS419A0=
feat(deps): bump github.com/caarlos0/ctrlc from 1.1.0 to 1.2.0 (#3316) Bumps [github.com/caarlos0/ctrlc](https://github.com/caarlos0/ctrlc) from 1.1.0 to 1.2.0. - [Release notes](https://github.com/caarlos0/ctrlc/releases) - [Changelog](https://github.com/caarlos0/ctrlc/blob/main/.goreleaser.yml) - [Commits](https://github.com/caarlos0/ctrlc/compare/v1.1.0...v1.2.0) --- updated-dependencies: - dependency-name: github.com/caarlos0/ctrlc dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-17 15:58:18 +02:00
github.com/caarlos0/ctrlc v1.2.0 h1:AtbThhmbeYx1WW3WXdWrd94EHKi+0NPRGS4/4pzrjwk=
github.com/caarlos0/ctrlc v1.2.0/go.mod h1:n3gDlSjsXZ7rbD9/RprIR040b7oaLfNStikPd4gFago=
feat(deps): update env to v9 Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-06-28 18:29:19 +02:00
github.com/caarlos0/env/v9 v9.0.0 h1:SI6JNsOA+y5gj9njpgybykATIylrRMklbs5ch6wO6pc=
github.com/caarlos0/env/v9 v9.0.0/go.mod h1:ye5mlCVMYh6tZ+vCgrs/B95sj88cg5Tlnc0XIzgZ020=
fix: go install and go-reddit (#2823) Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
2022-01-10 16:10:35 +02:00
github.com/caarlos0/go-reddit/v3 v3.0.1 h1:w8ugvsrHhaE/m4ez0BO/sTBOBWI9WZTjG7VTecHnql4=
github.com/caarlos0/go-reddit/v3 v3.0.1/go.mod h1:QlwgmG5SAqxMeQvg/A2dD1x9cIZCO56BMnMdjXLoisI=
feat: update nfpm (#2640) * feat: update nfpm * feat: update nfpm * feat: update nfpm * feat: update nfpm * fix: dir type * docs: dir * docs: typo * fix: race * fix: race cond
2021-11-14 03:23:11 +02:00
github.com/caarlos0/go-rpmutils v0.2.1-0.20211112020245-2cd62ff89b11 h1:IRrDwVlWQr6kS1U8/EtyA1+EHcc4yl8pndcqXWrEamg=
chore: go mod tidy Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-09-13 19:03:05 +02:00
github.com/caarlos0/go-rpmutils v0.2.1-0.20211112020245-2cd62ff89b11/go.mod h1:je2KZ+LxaCNvCoKg32jtOIULcFogJKcL1ZWUaIBjKj0=
fix: remove replace closes #2080 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2021-03-22 13:45:18 +02:00
github.com/caarlos0/go-shellwords v1.0.12 h1:HWrUnu6lGbWfrDcFiHcZiwOLzHWjjrPVehULaTFgPp8=
github.com/caarlos0/go-shellwords v1.0.12/go.mod h1:bYeeX1GrTLPl5cAMYEzdm272qdsQAZiaHgeF0KTk1Gw=
feat: new --version output (#3962) using the same output as most cloud-native Go-written CLI's use, i.e. using [sigs.k8s.io/release-utils](https://github.com/kubernetes-sigs/release-utils). --------- Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-04-30 19:19:55 +02:00
github.com/caarlos0/go-version v0.1.1 h1:1bikKHkGGVIIxqCmufhSSs3hpBScgHGacrvsi8FuIfc=
github.com/caarlos0/go-version v0.1.1/go.mod h1:Ze5Qx4TsBBi5FyrSKVg1Ibc44KGV/llAaKGp86oTwZ0=
feat(deps): bump github.com/caarlos0/log from 0.4.3 to 0.4.4 (#4372) Bumps [github.com/caarlos0/log](https://github.com/caarlos0/log) from 0.4.3 to 0.4.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/caarlos0/log/releases">github.com/caarlos0/log's releases</a>.</em></p> <blockquote> <h2>v0.4.4</h2> <h2>Changelog</h2> <hr /> <p><em>Released with <a href="https://goreleaser.com/pro">GoReleaser Pro</a>!</em></p> <h2>v0.4.4</h2> <h2>Changelog</h2> <hr /> <p><em>Released with <a href="https://goreleaser.com/pro">GoReleaser Pro</a>!</em></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/caarlos0/log/commit/614b0a8e4b542760fb69222d5787f9d0e380b08f"><code>614b0a8</code></a> chore(deps): bump github.com/charmbracelet/lipgloss from 0.9.0 to 0.9.1 (<a href="https://redirect.github.com/caarlos0/log/issues/25">#25</a>)</li> <li>See full diff in <a href="https://github.com/caarlos0/log/compare/v0.4.3...v0.4.4">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/caarlos0/log&package-manager=go_modules&previous-version=0.4.3&new-version=0.4.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-16 13:18:55 +02:00
github.com/caarlos0/log v0.4.4 h1:LnvgBz/ofsJ00AupP/cEfksJSZglb1L69g4Obk/sdAc=
github.com/caarlos0/log v0.4.4/go.mod h1:+AmCI9Liv5LKXmzFmFI1htuHdTTj/0R3KuoP9DMY7Mo=
feat(deps): bump github.com/goreleaser/fileglob from 1.2.0 to 1.3.0 (#2896) Bumps [github.com/goreleaser/fileglob](https://github.com/goreleaser/fileglob) from 1.2.0 to 1.3.0. - [Release notes](https://github.com/goreleaser/fileglob/releases) - [Changelog](https://github.com/goreleaser/fileglob/blob/main/.goreleaser.yml) - [Commits](https://github.com/goreleaser/fileglob/compare/v1.2.0...v1.3.0) --- updated-dependencies: - dependency-name: github.com/goreleaser/fileglob dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-02-12 04:17:13 +02:00
github.com/caarlos0/testfs v0.4.4 h1:3PHvzHi5Lt+g332CiShwS8ogTgS3HjrmzZxCm6JCDr8=
github.com/caarlos0/testfs v0.4.4/go.mod h1:bRN55zgG4XCUVVHZCeU+/Tz1Q6AxEJOEJTliBy+1DMk=
feat: update deps Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
2021-12-21 05:03:48 +02:00
github.com/cavaliergopher/cpio v1.0.1 h1:KQFSeKmZhv0cr+kawA3a0xTQCU4QxXF1vhU7P7av2KM=
github.com/cavaliergopher/cpio v1.0.1/go.mod h1:pBdaqQjnvXxdS/6CvNDwIANIFSP0xRKI16PX4xejRQc=
github.com/cenkalti/backoff/v4 v4.1.2/go.mod h1:scbssz8iZGpm3xbr14ovlUdkxfGXNInqkPWOWmG2CLw=
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419) Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.1.1 to 2.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's releases</a>.</em></p> <blockquote> <h2>v2.2.1</h2> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's changelog</a>.</em></p> <blockquote> <h1>v2.2.1</h1> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign/commit/12cbf9ea177d22bbf5cf028bcb4712b5f174ebc6"><code>12cbf9e</code></a> add changelog for v2.2.1 release (<a href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/827f24e9d4a1f8e845cb1597d02053410f5bbe2a"><code>827f24e</code></a> feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8ac891ff0e29ddc67965423bee8f826219c6eb0f"><code>8ac891f</code></a> Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li><a href="https://github.com/sigstore/cosign/commit/8b366c497bd22b9be7742d057b8f59083dcadee0"><code>8b366c4</code></a> add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/23920de5623a505921ba4e62fa97e2553eff4699"><code>23920de</code></a> chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/e022e1c13240d1ae5b3c408bc53e389154331713"><code>e022e1c</code></a> chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/28c59c5eca6386924cc8f381afe94efe1e957679"><code>28c59c5</code></a> add missing groups key (<a href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8e5bdcc0ff39b8dc1b477251fef521601df76ec0"><code>8e5bdcc</code></a> chore(deps): bump github.com/google/certificate-transparency-go (<a href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/510cac4ef54274823599082e3a57a556ccd5c9e5"><code>510cac4</code></a> chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/063902b1d78fed7c12c9d9ce06248d36963e8169"><code>063902b</code></a> chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 18:39:49 +02:00
github.com/cenkalti/backoff/v4 v4.2.1 h1:y4OZtCnogmCPw98Zjyt5a6+QwPLGkiQsYW5oUqylYbM=
github.com/cenkalti/backoff/v4 v4.2.1/go.mod h1:Y3VNntkOUPxTVeUxJ/G5vcM//AlwfmyYozVcomhLiZE=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
github.com/census-instrumentation/opencensus-proto v0.2.1/go.mod h1:f6KPmirojxKA12rnyqOA5BBL4O983OfeGPqjHWSTneU=
feat(deps): bump gocloud.dev from 0.28.0 to 0.29.0 (#3837) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.28.0 to 0.29.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.29.0</h2> <p><strong>BREAKING CHANGES</strong></p> <ul> <li>Updated to latest <code>azureblob</code>, which had some non-backward-compatible changes (again).</li> </ul> <p><strong>all</strong></p> <ul> <li>Defaulting to <code>go</code> version <code>1.2</code>.</li> <li><strong>aws</strong>: Added support for custom endpoints for AWS SDK v2.</li> <li><strong>gcp</strong>: Updated imports for <code>credentialspb</code>.</li> </ul> <p><strong>blob</strong></p> <ul> <li><strong>azureblob</strong>: Updated to latest (breaking change).</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>kafkapub</strong>: Fixed nil Options pointer dereference.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/62397121ec57013e925de45ec6fb7a7bacbf5799"><code>6239712</code></a> all: prep for release (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3236">#3236</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/973ec8737135d7bf2e2c21975ed871526e38ef8a"><code>973ec87</code></a> all: prep for release (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3235">#3235</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/3348a6a4a0ccbcc4cc179866ea682d54ba3e0276"><code>3348a6a</code></a> aws: fix typo on awssdk=v2 docstring</li> <li><a href="https://github.com/google/go-cloud/commit/ec0a2bbc3f48f58b707fcad9e1926044efb242cb"><code>ec0a2bb</code></a> pubsub/rabbitpubsub: give rabbitmq more time to come up (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3233">#3233</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/082a4958948e4a36875570f6ee931ebfe950e29c"><code>082a495</code></a> docstore/gcpfirestore: update proto import (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3229">#3229</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/53ba9013f0a1240e7266b64a1c8f37ac891a84f8"><code>53ba901</code></a> pubsub/gcppubsub: update proto import (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3230">#3230</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b3612581b153f8ecbf63590c9087e746b5df9f8e"><code>b361258</code></a> runtimevar/gcpsecretmanager: update proto import (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3231">#3231</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/e5235d85eb9a1674f26984a068fcd91f445ef620"><code>e5235d8</code></a> blob/gcsblob: update proto import (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3228">#3228</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/7cd8b2b9f63cb8b15c114ea64fbef28aed00f0cc"><code>7cd8b2b</code></a> secrets/gcpkms: update proto import (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3227">#3227</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cddf16323d2af04a4bdd9b58fb85d9b28a1abee"><code>8cddf16</code></a> all: update deps BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3225">#3225</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.28.0...v0.29.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.28.0&new-version=0.29.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-06 18:07:00 +02:00
github.com/cespare/xxhash/v2 v2.2.0 h1:DC2CZ1Ep5Y4k3ZQ899DldepgrayRUGE6BBZ/cd9Cj44=
github.com/cespare/xxhash/v2 v2.2.0/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs=
feat(deps): update charmbracelet/keygen Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-10-07 17:17:16 +02:00
github.com/charmbracelet/keygen v0.5.0 h1:XY0fsoYiCSM9axkrU+2ziE6u6YjJulo/b9Dghnw6MZc=
github.com/charmbracelet/keygen v0.5.0/go.mod h1:DfvCgLHxZ9rJxdK0DGw3C/LkV4SgdGbnliHcObV3L+8=
feat(deps): bump github.com/charmbracelet/lipgloss from 0.9.0 to 0.9.1 (#4367) Bumps [github.com/charmbracelet/lipgloss](https://github.com/charmbracelet/lipgloss) from 0.9.0 to 0.9.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/charmbracelet/lipgloss/releases">github.com/charmbracelet/lipgloss's releases</a>.</em></p> <blockquote> <h2>v0.9.1</h2> <p>This bugfix release changes the Table <code>Headers</code> API to accept <code>[]string</code> for consistency with <code>Row</code> / <code>Rows</code> and downgrades Lip Gloss to Go version <code>v1.17</code>.</p> <h2>What's Changed</h2> <ul> <li>Table Headers type from <code>[]any</code> → <code>[]string</code> by <a href="https://github.com/maaslalani"><code>@​maaslalani</code></a> in <a href="https://redirect.github.com/charmbracelet/lipgloss/pull/234">charmbracelet/lipgloss#234</a></li> <li>Downgrade Lip Gloss to <code>v1.17</code> by <a href="https://github.com/maaslalani"><code>@​maaslalani</code></a> in <a href="https://redirect.github.com/charmbracelet/lipgloss/pull/234">charmbracelet/lipgloss#234</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/charmbracelet/lipgloss/compare/v0.9.0...v0.9.1">https://github.com/charmbracelet/lipgloss/compare/v0.9.0...v0.9.1</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/charmbracelet/lipgloss/commit/f093bc15098a6f7ea879f4345445684fdb458601"><code>f093bc1</code></a> Make headers <code>[]string</code> (<a href="https://redirect.github.com/charmbracelet/lipgloss/issues/234">#234</a>)</li> <li><a href="https://github.com/charmbracelet/lipgloss/commit/42db8736172b8e35766ae630f04d0be3b16951aa"><code>42db873</code></a> test(table): ensure README example works</li> <li>See full diff in <a href="https://github.com/charmbracelet/lipgloss/compare/v0.9.0...v0.9.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/charmbracelet/lipgloss&package-manager=go_modules&previous-version=0.9.0&new-version=0.9.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-14 23:57:21 +02:00
github.com/charmbracelet/lipgloss v0.9.1 h1:PNyd3jvaJbg4jRHKWXnCj1akQm4rh8dbEzN1p/u1KWg=
github.com/charmbracelet/lipgloss v0.9.1/go.mod h1:1mPmG4cxScwUQALAAnacHaigiiHB9Pmr+v1VEawJl6I=
refactor: use ordered.First (#4362)
2023-10-11 04:16:27 +02:00
github.com/charmbracelet/x/exp/ordered v0.0.0-20231010190216-1cb11efc897d h1:+o+e/8hf7cG0SbAzEAm/usJ8qoZPgFXhudLjop+TM0g=
github.com/charmbracelet/x/exp/ordered v0.0.0-20231010190216-1cb11efc897d/go.mod h1:aoG4bThKYIOnyB55r202eHqo6TkN7ZXV+cu4Do3eoBQ=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/checkpoint-restore/go-criu/v5 v5.3.0/go.mod h1:E/eQpaFtUKGOOSEBZgmKAcn+zUUwWxqcaKZlF54wK8E=
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419) Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.1.1 to 2.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's releases</a>.</em></p> <blockquote> <h2>v2.2.1</h2> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's changelog</a>.</em></p> <blockquote> <h1>v2.2.1</h1> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign/commit/12cbf9ea177d22bbf5cf028bcb4712b5f174ebc6"><code>12cbf9e</code></a> add changelog for v2.2.1 release (<a href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/827f24e9d4a1f8e845cb1597d02053410f5bbe2a"><code>827f24e</code></a> feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8ac891ff0e29ddc67965423bee8f826219c6eb0f"><code>8ac891f</code></a> Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li><a href="https://github.com/sigstore/cosign/commit/8b366c497bd22b9be7742d057b8f59083dcadee0"><code>8b366c4</code></a> add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/23920de5623a505921ba4e62fa97e2553eff4699"><code>23920de</code></a> chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/e022e1c13240d1ae5b3c408bc53e389154331713"><code>e022e1c</code></a> chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/28c59c5eca6386924cc8f381afe94efe1e957679"><code>28c59c5</code></a> add missing groups key (<a href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8e5bdcc0ff39b8dc1b477251fef521601df76ec0"><code>8e5bdcc</code></a> chore(deps): bump github.com/google/certificate-transparency-go (<a href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/510cac4ef54274823599082e3a57a556ccd5c9e5"><code>510cac4</code></a> chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/063902b1d78fed7c12c9d9ce06248d36963e8169"><code>063902b</code></a> chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 18:39:49 +02:00
github.com/chrismellard/docker-credential-acr-env v0.0.0-20230304212654-82a0ddb27589 h1:krfRl01rzPzxSxyLyrChD+U+MzsBXbm0OwYYB67uF+4=
github.com/chrismellard/docker-credential-acr-env v0.0.0-20230304212654-82a0ddb27589/go.mod h1:OuDyvmLnMCwa2ep4Jkm6nyA0ocJuZlGyk2gGseVzERM=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
github.com/chzyer/logex v1.1.10/go.mod h1:+Ywpsq7O8HXn0nuIou7OrIPyXbp3wmkHB+jjWRnGsAI=
github.com/chzyer/readline v0.0.0-20180603132655-2972be24d48e/go.mod h1:nSuG5e5PlCu98SY8svDHJxuZscDgtXS6KTTbou5AhLI=
github.com/chzyer/test v0.0.0-20180213035817-a1ea475d72b1/go.mod h1:Q3SI9o4m/ZMnBNeIyt5eFwwo7qiLfzFZmjNmxjkiQlU=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/cilium/ebpf v0.7.0/go.mod h1:/oI2+1shJiTGAMgl6/RgJr36Eo1jzrRcAWbcXO2usCA=
feat: add support for pushing artifacts to cloud storage provider( S3, Azure Blob, GCS) (#1036) * feat: adding support to push artifacts to AWS S3,Azure Blob and Google Cloud Storage readme for blob publisher test: add unit test for blob using testify and mockery test: add unit test for publish method fix: openbucket instance initialization remove unwanted packages: go mod tidy test: add missing unit test for publish method * doc: add missing comment for func * fix: add accidental delete file * fix : add missing Snapcrafts project * fix: unit test for Azure blob * fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue * fmt: fix linter reporeted issues fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue fmt: linter fix * test: fix typo in test error string * feat: add support to provider folder inside bucket, resolves discussed comments
2019-06-05 15:51:01 +02:00
github.com/client9/misspell v0.3.4/go.mod h1:qj6jICC3Q7zFZvVWo7KLAzC3yx5G7kyvSDkc90ppPyw=
feat(deps): bump github.com/goreleaser/nfpm/v2 from 2.30.1 to 2.31.0 (#4144) latest and greatest
2023-06-26 18:20:47 +02:00
github.com/cloudflare/circl v1.3.3/go.mod h1:5XYMA4rFBvNIrhs50XuiBJ15vF2pZn4nnUKZrLbUZFA=
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419) Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.1.1 to 2.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's releases</a>.</em></p> <blockquote> <h2>v2.2.1</h2> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's changelog</a>.</em></p> <blockquote> <h1>v2.2.1</h1> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign/commit/12cbf9ea177d22bbf5cf028bcb4712b5f174ebc6"><code>12cbf9e</code></a> add changelog for v2.2.1 release (<a href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/827f24e9d4a1f8e845cb1597d02053410f5bbe2a"><code>827f24e</code></a> feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8ac891ff0e29ddc67965423bee8f826219c6eb0f"><code>8ac891f</code></a> Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li><a href="https://github.com/sigstore/cosign/commit/8b366c497bd22b9be7742d057b8f59083dcadee0"><code>8b366c4</code></a> add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/23920de5623a505921ba4e62fa97e2553eff4699"><code>23920de</code></a> chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/e022e1c13240d1ae5b3c408bc53e389154331713"><code>e022e1c</code></a> chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/28c59c5eca6386924cc8f381afe94efe1e957679"><code>28c59c5</code></a> add missing groups key (<a href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8e5bdcc0ff39b8dc1b477251fef521601df76ec0"><code>8e5bdcc</code></a> chore(deps): bump github.com/google/certificate-transparency-go (<a href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/510cac4ef54274823599082e3a57a556ccd5c9e5"><code>510cac4</code></a> chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/063902b1d78fed7c12c9d9ce06248d36963e8169"><code>063902b</code></a> chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 18:39:49 +02:00
github.com/cloudflare/circl v1.3.5 h1:g+wWynZqVALYAlpSQFAa7TscDnUK8mKYtrxMpw6AUKo=
github.com/cloudflare/circl v1.3.5/go.mod h1:5XYMA4rFBvNIrhs50XuiBJ15vF2pZn4nnUKZrLbUZFA=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
github.com/cncf/udpa/go v0.0.0-20191209042840-269d4d468f6f/go.mod h1:M8M6+tZqaGXZJjfX53e64911xZQV5JYwmTeXPW+k8Sc=
chore(deps): bump gocloud.dev from 0.20.0 to 0.21.0 (#1941) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.20.0 to 0.21.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.20.0...v0.21.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-12 01:14:58 +02:00
github.com/cncf/udpa/go v0.0.0-20200629203442-efcf912fb354/go.mod h1:WmhPx2Nbnhtbo57+VJT5O0JRkEi1Wbu0z5j0R8u5Hbk=
chore(deps): bump gocloud.dev from 0.22.0 to 0.23.0 (#2225) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.22.0 to 0.23.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.22.0...v0.23.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-17 14:03:45 +02:00
github.com/cncf/udpa/go v0.0.0-20201120205902-5459f2c99403/go.mod h1:WmhPx2Nbnhtbo57+VJT5O0JRkEi1Wbu0z5j0R8u5Hbk=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/containerd/console v1.0.3/go.mod h1:7LqA/THxQ86k76b8c/EMSiaJ3h1eZkMkXar0TQ1gf3U=
refactor: improving minio and docker tests (#3642) using ory/dockertest to simplify integration tests Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-12-15 15:25:52 +02:00
github.com/containerd/continuity v0.3.0 h1:nisirsYROK15TAMVukJOUyGJjz4BNQJBVsNvAXZJ/eg=
github.com/containerd/continuity v0.3.0/go.mod h1:wJEAIwKOm/pBZuBd0JmeTvnLquTB1Ag8espWhkykbPM=
feat(deps): bump github.com/google/go-containerregistry from 0.13.0 to 0.14.0 (#3878) Bumps [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) from 0.13.0 to 0.14.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-containerregistry/releases">github.com/google/go-containerregistry's releases</a>.</em></p> <blockquote> <h2>v0.14.0</h2> <h2>Changelog</h2> <ul> <li>9306ebad Allow crane edit to generate non-image artifacts (<a href="https://redirect.github.com/google/go-containerregistry/issues/1545">#1545</a>)</li> <li>de35f0f7 Allow setting Content-Type in crane edit manifest (<a href="https://redirect.github.com/google/go-containerregistry/issues/1551">#1551</a>)</li> <li>4b081f80 Avoid v1.Manifest in crane edit config (<a href="https://redirect.github.com/google/go-containerregistry/issues/1583">#1583</a>)</li> <li>1cfe1fc2 Bump aws-actions/configure-aws-credentials from 1.7.0 to 2.0.0 (<a href="https://redirect.github.com/google/go-containerregistry/issues/1593">#1593</a>)</li> <li>da1008fb Bump golangci/golangci-lint-action from 3.3.1 to 3.4.0 (<a href="https://redirect.github.com/google/go-containerregistry/issues/1548">#1548</a>)</li> <li>86be45fb Bump goreleaser/goreleaser-action from 4.1.0 to 4.1.1 (<a href="https://redirect.github.com/google/go-containerregistry/issues/1547">#1547</a>)</li> <li>62f183e5 Bump goreleaser/goreleaser-action from 4.1.1 to 4.2.0 (<a href="https://redirect.github.com/google/go-containerregistry/issues/1556">#1556</a>)</li> <li>1b8dc2ba Bump slsa-framework/slsa-github-generator from 1.2.2 to 1.5.0 (<a href="https://redirect.github.com/google/go-containerregistry/issues/1580">#1580</a>)</li> <li>11843ba2 Enforce proper sha256 usage (<a href="https://redirect.github.com/google/go-containerregistry/issues/1544">#1544</a>)</li> <li>2ceebaaf Implement crane index subcommand (<a href="https://redirect.github.com/google/go-containerregistry/issues/1561">#1561</a>)</li> <li>9f42e028 Set mediaType for empty.ImageIndex in RawManifest (<a href="https://redirect.github.com/google/go-containerregistry/issues/1562">#1562</a>)</li> <li>759b19f7 Support artifactType, for images whose config.mediaType is not a config (<a href="https://redirect.github.com/google/go-containerregistry/issues/1541">#1541</a>)</li> <li>b3c23b4c Support for OCI 1.1+ referrers via API (<a href="https://redirect.github.com/google/go-containerregistry/issues/1546">#1546</a>)</li> <li>061ee6bf Support for OCI 1.1+ referrers via fallback tag (<a href="https://redirect.github.com/google/go-containerregistry/issues/1543">#1543</a>)</li> <li>67703048 Update descriptor &quot;data&quot; field (when valid) during &quot;crane edit config&quot; (<a href="https://redirect.github.com/google/go-containerregistry/issues/1584">#1584</a>)</li> <li>76bac933 Update release.yml (<a href="https://redirect.github.com/google/go-containerregistry/issues/1540">#1540</a>)</li> <li>eb7d746c authn: also read mount secrets (<a href="https://redirect.github.com/google/go-containerregistry/issues/1560">#1560</a>)</li> <li>e94d4089 bump deps using ./hack/bump-deps.sh (<a href="https://redirect.github.com/google/go-containerregistry/issues/1592">#1592</a>)</li> <li>4e95ae2b crane: add --flatten for index append (<a href="https://redirect.github.com/google/go-containerregistry/issues/1566">#1566</a>)</li> <li>ff810c18 crane: add serve subcommand (<a href="https://redirect.github.com/google/go-containerregistry/issues/1586">#1586</a>)</li> <li>8ea5e0e8 crane: support --omit-digest-tags in crane ls (<a href="https://redirect.github.com/google/go-containerregistry/issues/1528">#1528</a>)</li> <li>824efc77 fix(mutate): also set timestamps only present in some formats (<a href="https://redirect.github.com/google/go-containerregistry/issues/1550">#1550</a>)</li> <li>e04520bc fix: Fix the crane release url and add more steps (<a href="https://redirect.github.com/google/go-containerregistry/issues/1532">#1532</a>)</li> <li>d8722327 hash: use generic instantiation (<a href="https://redirect.github.com/google/go-containerregistry/issues/1538">#1538</a>)</li> <li>57f010d2 replace manual slsa-verifier installation with action (<a href="https://redirect.github.com/google/go-containerregistry/issues/1585">#1585</a>)</li> <li>9cd098e3 skip tls verification if default transport is used with insecure option (<a href="https://redirect.github.com/google/go-containerregistry/issues/1559">#1559</a>)</li> <li>36249683 tarball: pass imageToTags (<a href="https://redirect.github.com/google/go-containerregistry/issues/1563">#1563</a>)</li> </ul> <h3>Container Images</h3> <p><a href="https://gcr.io/go-containerregistry/crane:v0.14.0">https://gcr.io/go-containerregistry/crane:v0.14.0</a> <a href="https://gcr.io/go-containerregistry/gcrane:v0.14.0">https://gcr.io/go-containerregistry/gcrane:v0.14.0</a></p> <p>For example:</p> <pre><code>docker pull gcr.io/go-containerregistry/crane:v0.14.0 docker pull gcr.io/go-containerregistry/gcrane:v0.14.0 </code></pre> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-containerregistry/commit/4b081f801f399fa293f23e42ba4c4ac6a6003f2c"><code>4b081f8</code></a> Avoid v1.Manifest in crane edit config (<a href="https://redirect.github.com/google/go-containerregistry/issues/1583">#1583</a>)</li> <li><a href="https://github.com/google/go-containerregistry/commit/1cfe1fc25f233b40aa5d3b0edd572ed5c3f854c9"><code>1cfe1fc</code></a> Bump aws-actions/configure-aws-credentials from 1.7.0 to 2.0.0 (<a href="https://redirect.github.com/google/go-containerregistry/issues/1593">#1593</a>)</li> <li><a href="https://github.com/google/go-containerregistry/commit/e94d40893b2d013992192f8a1a04fd1984fd24dc"><code>e94d408</code></a> bump deps using ./hack/bump-deps.sh (<a href="https://redirect.github.com/google/go-containerregistry/issues/1592">#1592</a>)</li> <li><a href="https://github.com/google/go-containerregistry/commit/ff810c186c772e1056aa4081278ee84ee3fb565b"><code>ff810c1</code></a> crane: add serve subcommand (<a href="https://redirect.github.com/google/go-containerregistry/issues/1586">#1586</a>)</li> <li><a href="https://github.com/google/go-containerregistry/commit/57f010d26af871587be87f5aed2550893d564a8c"><code>57f010d</code></a> replace manual slsa-verifier installation with action (<a href="https://redirect.github.com/google/go-containerregistry/issues/1585">#1585</a>)</li> <li><a href="https://github.com/google/go-containerregistry/commit/67703048992e9b025adf1a7b08f3bb195636be33"><code>6770304</code></a> Update descriptor &quot;data&quot; field (when valid) during &quot;crane edit config&quot; (<a href="https://redirect.github.com/google/go-containerregistry/issues/1584">#1584</a>)</li> <li><a href="https://github.com/google/go-containerregistry/commit/1b8dc2babc55fd72d274e8f470f00e9e5ba43f1b"><code>1b8dc2b</code></a> Bump slsa-framework/slsa-github-generator from 1.2.2 to 1.5.0 (<a href="https://redirect.github.com/google/go-containerregistry/issues/1580">#1580</a>)</li> <li><a href="https://github.com/google/go-containerregistry/commit/8ea5e0e8f045d827389d13bde5ae8269630e2e2e"><code>8ea5e0e</code></a> crane: support --omit-digest-tags in crane ls (<a href="https://redirect.github.com/google/go-containerregistry/issues/1528">#1528</a>)</li> <li><a href="https://github.com/google/go-containerregistry/commit/4e95ae2b72dd3b58fccb4ed579dbddf5c884822c"><code>4e95ae2</code></a> crane: add --flatten for index append (<a href="https://redirect.github.com/google/go-containerregistry/issues/1566">#1566</a>)</li> <li><a href="https://github.com/google/go-containerregistry/commit/4a0e0af4bf958c0bfb17bdfac71c38204b930623"><code>4a0e0af</code></a> docs: Update crane installation and verification instructions (<a href="https://redirect.github.com/google/go-containerregistry/issues/1567">#1567</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-containerregistry/compare/v0.13.0...v0.14.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/go-containerregistry&package-manager=go_modules&previous-version=0.13.0&new-version=0.14.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-20 14:58:29 +02:00
github.com/containerd/stargz-snapshotter/estargz v0.14.3 h1:OqlDCK3ZVUO6C3B/5FSkDwbkEETK84kQgEeFwDC+62k=
github.com/containerd/stargz-snapshotter/estargz v0.14.3/go.mod h1:KY//uOCIkSuNAHhJogcZtrNHdKrA99/FCCRjE3HD36o=
chore(deps): bump github.com/spf13/cobra from 1.1.3 to 1.2.0 (#2328) * feat: upgrade cobra Signed-off-by: Carlos A Becker <caarlos0@gmail.com> * feat: upgrade cobra Signed-off-by: Carlos A Becker <caarlos0@gmail.com> * fix: docs Signed-off-by: Carlos A Becker <caarlos0@gmail.com> * chore: less diffs Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
2021-07-03 19:04:19 +02:00
github.com/coreos/go-systemd/v22 v22.3.2/go.mod h1:Y58oyj3AT4RCenI/lSvhwexgC+NSVTIJ3seZv2GcEnc=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/cpuguy83/go-md2man/v2 v2.0.0-20190314233015-f79a8a8ca69d/go.mod h1:maD7wRr/U5Z6m/iR4s+kqSMx2CaBsrgA7czyZG/E6dU=
feat: add ko support (#3653) continuing the PR by @developer-guy - [x] should be a publisher, as it does publish the images it builds every time - [x] `Default` method does not work - [x] the `fromConfig` thing should probably be on the defaults, too - [x] wire `--skip-ko` - [x] documentation - [x] more tests - [x] use same registry as docker tests does - [ ] see if we can make the log output match goreleaser's - [ ] ?? closes #2556 closes #3490 Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com> Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> Co-authored-by: actions-user <actions@github.com> Co-authored-by: Jason Hall <jason@chainguard.dev> Co-authored-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2023-01-17 03:34:49 +02:00
github.com/cpuguy83/go-md2man/v2 v2.0.1/go.mod h1:tgQtvFlXSQOSOSIRvRPT7W67SCa46tRHOmNcaadrF8o=
feat(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (#4410) Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.7.0 to 1.8.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spf13/cobra/releases">github.com/spf13/cobra's releases</a>.</em></p> <blockquote> <h2>v1.8.0</h2> <h2>✨ Features</h2> <ul> <li>Support usage as plugin for tools like kubectl by <a href="https://github.com/nirs"><code>@​nirs</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/2018">spf13/cobra#2018</a> - this means that programs that utilize a &quot;plugin-like&quot; structure have much better support and usage (like for completions, command paths, etc.)</li> <li>Move documentation sources to site/content by <a href="https://github.com/umarcor"><code>@​umarcor</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/1428">spf13/cobra#1428</a></li> <li>Add 'one required flag' group by <a href="https://github.com/marevers"><code>@​marevers</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/1952">spf13/cobra#1952</a> - this includes a new <code>MarkFlagsOneRequired</code> API for flags which can be used to mark a flag group as required and cause command failure if at least one is not used when invoked.</li> <li>Customizable error message prefix by <a href="https://github.com/5ouma"><code>@​5ouma</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/2023">spf13/cobra#2023</a> - This adds the <code>SetErrPrefix</code> and <code>ErrPrefix</code> APIs on the <code>Command</code> struct to allow for setting a custom prefix for errors</li> <li>feat: add getters for flag completions by <a href="https://github.com/avirtopeanu-ionos"><code>@​avirtopeanu-ionos</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/1943">spf13/cobra#1943</a></li> <li>Feature: allow running persistent run hooks of all parents by <a href="https://github.com/vkhoroz"><code>@​vkhoroz</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/2044">spf13/cobra#2044</a></li> <li>Improve API to get flag completion function by <a href="https://github.com/marckhouzam"><code>@​marckhouzam</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/2063">spf13/cobra#2063</a></li> </ul> <h2>🐛 Bug fixes</h2> <ul> <li>Fix typo in fish completions by <a href="https://github.com/twpayne"><code>@​twpayne</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/1945">spf13/cobra#1945</a></li> <li>Fix grammar: 'allows to' by <a href="https://github.com/supertassu"><code>@​supertassu</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/1978">spf13/cobra#1978</a></li> <li>powershell: escape variable with curly brackets by <a href="https://github.com/Luap99"><code>@​Luap99</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/1960">spf13/cobra#1960</a></li> <li>Don't complete --help flag when flag parsing disabled by <a href="https://github.com/marckhouzam"><code>@​marckhouzam</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/2061">spf13/cobra#2061</a></li> <li>Replace all non-alphanumerics in active help env var program prefix by <a href="https://github.com/scop"><code>@​scop</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/1940">spf13/cobra#1940</a></li> </ul> <h2>🔧 Maintenance</h2> <ul> <li>build(deps): bump golangci/golangci-lint-action from 3.4.0 to 3.5.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/1971">spf13/cobra#1971</a></li> <li>build(deps): bump golangci/golangci-lint-action from 3.5.0 to 3.6.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/1976">spf13/cobra#1976</a></li> <li>build(deps): bump golangci/golangci-lint-action from 3.6.0 to 3.7.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/2021">spf13/cobra#2021</a></li> <li>build(deps): bump actions/setup-go from 3 to 4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/1934">spf13/cobra#1934</a></li> <li>build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.2 to 2.0.3 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/2047">spf13/cobra#2047</a></li> <li>build(deps): bump actions/checkout from 3 to 4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/2028">spf13/cobra#2028</a></li> <li>command: temporarily disable G602 due to <a href="https://redirect.github.com/securego/gosec/issues/1005">securego/gosec#1005</a> by <a href="https://github.com/umarcor"><code>@​umarcor</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/2022">spf13/cobra#2022</a></li> </ul> <h2>🧪 Testing &amp; CI/CD</h2> <ul> <li>test: make fish_completions_test more robust by <a href="https://github.com/branchvincent"><code>@​branchvincent</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/1980">spf13/cobra#1980</a></li> <li>golangci: enable 'unused' and disable deprecated replaced by it by <a href="https://github.com/umarcor"><code>@​umarcor</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/1983">spf13/cobra#1983</a></li> <li>cleanup: minor corrections to unit tests by <a href="https://github.com/JunNishimura"><code>@​JunNishimura</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/2003">spf13/cobra#2003</a></li> <li>ci: test golang 1.21 by <a href="https://github.com/nunoadrego"><code>@​nunoadrego</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/2024">spf13/cobra#2024</a></li> <li>Fix linter errors by <a href="https://github.com/marckhouzam"><code>@​marckhouzam</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/2052">spf13/cobra#2052</a></li> <li>Add tests for flag completion registration by <a href="https://github.com/marckhouzam"><code>@​marckhouzam</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/2053">spf13/cobra#2053</a></li> </ul> <h2>✏️ Documentation</h2> <ul> <li>doc: fix typo, Deperecated -&gt; Deprecated by <a href="https://github.com/callthingsoff"><code>@​callthingsoff</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/2000">spf13/cobra#2000</a></li> <li>Add notes to doc about the execution condition of *PreRun and *PostRun functions by <a href="https://github.com/haoming29"><code>@​haoming29</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/2041">spf13/cobra#2041</a></li> </ul> <hr /> <p>Thank you everyone who contributed to this release and all your hard work! Cobra and this community would never be possible without all of you!!!! 🐍</p> <p><strong>Full Changelog</strong>: <a href="https://github.com/spf13/cobra/compare/v1.7.0...v1.8.0">https://github.com/spf13/cobra/compare/v1.7.0...v1.8.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/spf13/cobra/commit/a0a6ae020bb3899ff0276067863e50523f897370"><code>a0a6ae0</code></a> Improve API to get flag completion function (<a href="https://redirect.github.com/spf13/cobra/issues/2063">#2063</a>)</li> <li><a href="https://github.com/spf13/cobra/commit/890302a35f578311404a462b3cdd404f34db3720"><code>890302a</code></a> Support usage as plugin for tools like kubectl (<a href="https://redirect.github.com/spf13/cobra/issues/2018">#2018</a>)</li> <li><a href="https://github.com/spf13/cobra/commit/48cea5c87b5299b68c3f5b7f2c67ea948717276f"><code>48cea5c</code></a> build(deps): bump actions/checkout from 3 to 4 (<a href="https://redirect.github.com/spf13/cobra/issues/2028">#2028</a>)</li> <li><a href="https://github.com/spf13/cobra/commit/22953d88453ec9343b4a78b9d67400a3326f3138"><code>22953d8</code></a> Replace all non-alphanumerics in active help env var program prefix (<a href="https://redirect.github.com/spf13/cobra/issues/1940">#1940</a>)</li> <li><a href="https://github.com/spf13/cobra/commit/00b68a1c260eaf2b9bcb10a3178d36cec81548ca"><code>00b68a1</code></a> Add tests for flag completion registration (<a href="https://redirect.github.com/spf13/cobra/issues/2053">#2053</a>)</li> <li><a href="https://github.com/spf13/cobra/commit/b711e8760b73c6aa1b4aa1bef3a26da5926f175d"><code>b711e87</code></a> Don't complete --help flag when flag parsing disabled (<a href="https://redirect.github.com/spf13/cobra/issues/2061">#2061</a>)</li> <li><a href="https://github.com/spf13/cobra/commit/8b1eba47616566fc4d258a93da48d5d8741865f0"><code>8b1eba4</code></a> Fix linter errors (<a href="https://redirect.github.com/spf13/cobra/issues/2052">#2052</a>)</li> <li><a href="https://github.com/spf13/cobra/commit/4cafa37bc4bb85633b4245aa118280fe5a9edcd5"><code>4cafa37</code></a> Allow running persistent run hooks of all parents (<a href="https://redirect.github.com/spf13/cobra/issues/2044">#2044</a>)</li> <li><a href="https://github.com/spf13/cobra/commit/5c962a221e70fd6b12296e5d7075f28b422f98b2"><code>5c962a2</code></a> build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.2 to 2.0.3 (<a href="https://redirect.github.com/spf13/cobra/issues/2047">#2047</a>)</li> <li><a href="https://github.com/spf13/cobra/commit/efe8fa3e4453e41d6419b26c9769a51e42825632"><code>efe8fa3</code></a> build(deps): bump actions/setup-go from 3 to 4 (<a href="https://redirect.github.com/spf13/cobra/issues/1934">#1934</a>)</li> <li>Additional commits viewable in <a href="https://github.com/spf13/cobra/compare/v1.7.0...v1.8.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/spf13/cobra&package-manager=go_modules&previous-version=1.7.0&new-version=1.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) Dependabot will merge this PR once CI passes on it, as requested by @caarlos0. [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-06 17:44:28 +02:00
github.com/cpuguy83/go-md2man/v2 v2.0.3 h1:qMCsGGgs+MAzDFyp9LpAe1Lqy/fY/qCovCm0qnXZOBM=
github.com/cpuguy83/go-md2man/v2 v2.0.3/go.mod h1:tgQtvFlXSQOSOSIRvRPT7W67SCa46tRHOmNcaadrF8o=
chore(deps): bump github.com/golangci/golangci-lint from 1.23.7 to 1.27.0 (#1563) * chore(deps): bump github.com/golangci/golangci-lint from 1.23.7 to 1.27.0 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: tests Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2020-05-26 05:48:10 +02:00
github.com/creack/pty v1.1.9/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ33E=
feat(deps): bump github.com/google/ko from 0.13.0 to 0.14.1 (#4132) Bumps [github.com/google/ko](https://github.com/google/ko) from 0.13.0 to 0.14.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/ko/releases">github.com/google/ko's releases</a>.</em></p> <blockquote> <h2>v0.14.1</h2> <h2>What's Changed</h2> <ul> <li>fix: Use attestation-name output by <a href="https://github.com/ianlewis"><code>@​ianlewis</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/980">ko-build/ko#980</a></li> <li>Upgrade to go120 by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/984">ko-build/ko#984</a></li> <li>fix release workflow by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/977">ko-build/ko#977</a></li> <li>fix deprecated attestation name by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/983">ko-build/ko#983</a></li> <li>refactor release job by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/986">ko-build/ko#986</a></li> <li>use git hash instead of git tag by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/988">ko-build/ko#988</a></li> <li>Correct a typo in resolver.go by <a href="https://github.com/felixonmars"><code>@​felixonmars</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/989">ko-build/ko#989</a></li> <li>feat: add riscv64 to goreleaser goarch by <a href="https://github.com/ernado"><code>@​ernado</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/990">ko-build/ko#990</a></li> <li>try to fix codeql workflow by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/994">ko-build/ko#994</a></li> <li>Push images faster by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1005">ko-build/ko#1005</a></li> <li>Don't publish tags twice by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1010">ko-build/ko#1010</a></li> <li>Add context to many gobuild errors by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1016">ko-build/ko#1016</a></li> <li>Fix --local with KO_DOCKER_REPO by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1017">ko-build/ko#1017</a></li> <li>Fix: Incorporate platform architecture by <a href="https://github.com/mattmoor"><code>@​mattmoor</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1029">ko-build/ko#1029</a></li> <li>Update community.md by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1035">ko-build/ko#1035</a></li> <li>mention ko tekton task by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1039">ko-build/ko#1039</a></li> <li>Update community.md by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1037">ko-build/ko#1037</a></li> <li>Fix kind image loading for MacOS by <a href="https://github.com/aidy"><code>@​aidy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1026">ko-build/ko#1026</a></li> <li>Revert &quot;Fix kind image loading for MacOS&quot; by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1054">ko-build/ko#1054</a></li> <li>update boilerplate file to be KO Build Authors by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1056">ko-build/ko#1056</a></li> <li>Pin setup-ko to previous release by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1082">ko-build/ko#1082</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/felixonmars"><code>@​felixonmars</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/989">ko-build/ko#989</a></li> <li><a href="https://github.com/ernado"><code>@​ernado</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/990">ko-build/ko#990</a></li> <li><a href="https://github.com/aidy"><code>@​aidy</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1026">ko-build/ko#1026</a></li> <li><a href="https://github.com/luhring"><code>@​luhring</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1073">ko-build/ko#1073</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/ko-build/ko/compare/v0.13.0...v0.14.1">https://github.com/ko-build/ko/compare/v0.13.0...v0.14.1</a></p> <h2>v0.14.0</h2> <p>No release notes provided.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ko-build/ko/commit/200db7243f02b5c0303e21d8ab8e3b4ad3a229d0"><code>200db72</code></a> Pin setup-ko to previous release (<a href="https://redirect.github.com/google/ko/issues/1082">#1082</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/4366ded82cdda05ef85bc5483d19daa241d08f38"><code>4366ded</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1079">#1079</a> from ko-build/dependabot/github_actions/slsa-framewo...</li> <li><a href="https://github.com/ko-build/ko/commit/adbea950c10e2c69c7bf0589a6bf0b4e7ceafbfa"><code>adbea95</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1078">#1078</a> from ko-build/dependabot/github_actions/goreleaser/g...</li> <li><a href="https://github.com/ko-build/ko/commit/6175237fe6539a48206da87c239ad98b4f7d7312"><code>6175237</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1077">#1077</a> from ko-build/dependabot/go_modules/github.com/spf13...</li> <li><a href="https://github.com/ko-build/ko/commit/5e5fe2e703c1f0c9186975b06090ae563283f48d"><code>5e5fe2e</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1076">#1076</a> from ko-build/dependabot/github_actions/aws-actions/...</li> <li><a href="https://github.com/ko-build/ko/commit/dc9b3eebef9818e2efab17cec8dd3eebff72e074"><code>dc9b3ee</code></a> Bump github.com/spf13/viper from 1.15.0 to 1.16.0</li> <li><a href="https://github.com/ko-build/ko/commit/ed445128e25c7bd0b6643b58ac44383a583d84f5"><code>ed44512</code></a> Bump golang.org/x/tools from 0.9.3 to 0.10.0 (<a href="https://redirect.github.com/google/ko/issues/1080">#1080</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/fcd95ec958cad910b4746245662506b1f974f40e"><code>fcd95ec</code></a> Bump slsa-framework/slsa-github-generator from 1.6.0 to 1.7.0</li> <li><a href="https://github.com/ko-build/ko/commit/974f09cdeacd7042c3db573366768ecbb32246a5"><code>974f09c</code></a> Bump goreleaser/goreleaser-action from 4.2.0 to 4.3.0</li> <li><a href="https://github.com/ko-build/ko/commit/893f6e877f7c352261c13e078bb8fc9709bb285c"><code>893f6e8</code></a> Bump aws-actions/configure-aws-credentials from 2.1.0 to 2.2.0</li> <li>Additional commits viewable in <a href="https://github.com/google/ko/compare/v0.13.0...v0.14.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/ko&package-manager=go_modules&previous-version=0.13.0&new-version=0.14.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-26 18:56:50 +02:00
github.com/creack/pty v1.1.18 h1:n56/Zwd5o6whRC5PMGretI4IdRLlmBXYNjScPaBgsbY=
chore: go mod tidy Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-09-13 19:03:05 +02:00
github.com/creack/pty v1.1.18/go.mod h1:MOBLtS5ELjhRRrroQr9kyvTxUAFNvYEK993ew/Vr4O4=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/cyphar/filepath-securejoin v0.2.3/go.mod h1:aPGpWjXOXUn2NCNjFvBE6aRxGGx79pTxQpKOJNYHHl4=
sec(deps): bump github.com/go-git/go-git/v5 from 5.7.0 to 5.11.0 (#4505) Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.7.0 to 5.11.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/go-git/go-git/releases">github.com/go-git/go-git/v5's releases</a>.</em></p> <blockquote> <h2>v5.11.0</h2> <h2>What's Changed</h2> <ul> <li>git: validate reference names (<a href="https://redirect.github.com/go-git/go-git/issues/929">#929</a>) by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/950">go-git/go-git#950</a></li> <li>git: stop iterating at oldest shallow when pulling. Fixes <a href="https://redirect.github.com/go-git/go-git/issues/305">#305</a> by <a href="https://github.com/dhoizner"><code>@​dhoizner</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/939">go-git/go-git#939</a></li> <li>plumbing: object, enable renames in getFileStatsFromFilePatches by <a href="https://github.com/djmoch"><code>@​djmoch</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/941">go-git/go-git#941</a></li> <li>storage: filesystem, Add option to set a specific FS for alternates by <a href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/953">go-git/go-git#953</a></li> <li>Align worktree validation with upstream and remove build warnings by <a href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/958">go-git/go-git#958</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/dhoizner"><code>@​dhoizner</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/939">go-git/go-git#939</a></li> <li><a href="https://github.com/djmoch"><code>@​djmoch</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/941">go-git/go-git#941</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/go-git/go-git/compare/v5.10.1...v5.11.0">https://github.com/go-git/go-git/compare/v5.10.1...v5.11.0</a></p> <h2>v5.10.1</h2> <h2>What's Changed</h2> <ul> <li>Worktree, ignore ModeSocket files by <a href="https://github.com/steiler"><code>@​steiler</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/930">go-git/go-git#930</a></li> <li>git: add tracer package by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/916">go-git/go-git#916</a></li> <li>remote: Flip clause for fast-forward only check by <a href="https://github.com/adityasaky"><code>@​adityasaky</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/875">go-git/go-git#875</a></li> <li>plumbing: transport/ssh, Fix nil pointer dereference caused when an unreachable proxy server is set. Fixes <a href="https://redirect.github.com/go-git/go-git/issues/900">#900</a> by <a href="https://github.com/anandf"><code>@​anandf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/901">go-git/go-git#901</a></li> <li>plumbing: uppload-server-info, implement upload-server-info by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/896">go-git/go-git#896</a></li> <li>plumbing: optimise memory consumption for filesystem storage by <a href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/799">go-git/go-git#799</a></li> <li>plumbing: format/packfile, Refactor patch delta by <a href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/908">go-git/go-git#908</a></li> <li>plumbing: fix empty uploadpack request error by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/932">go-git/go-git#932</a></li> <li>plumbing: transport/git, Improve tests error message by <a href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/752">go-git/go-git#752</a></li> <li>plumbing: format/pktline, Respect pktline error-line errors by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/936">go-git/go-git#936</a></li> <li>utils: remove ioutil.Pipe and use std library io.Pipe by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/922">go-git/go-git#922</a></li> <li>utils: move trace to utils by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/931">go-git/go-git#931</a></li> <li>cli: separate go module for cli by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/914">go-git/go-git#914</a></li> <li>build: bump github.com/google/go-cmp from 0.5.9 to 0.6.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/887">go-git/go-git#887</a></li> <li>build: bump actions/setup-go from 3 to 4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/891">go-git/go-git#891</a></li> <li>build: bump github.com/skeema/knownhosts from 1.2.0 to 1.2.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/888">go-git/go-git#888</a></li> <li>build: bump actions/checkout from 3 to 4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/890">go-git/go-git#890</a></li> <li>build: bump golang.org/x/sys from 0.13.0 to 0.14.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/907">go-git/go-git#907</a></li> <li>build: bump golang.org/x/text from 0.13.0 to 0.14.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/906">go-git/go-git#906</a></li> <li>build: bump golang.org/x/crypto from 0.14.0 to 0.15.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/917">go-git/go-git#917</a></li> <li>build: bump golang.org/x/net from 0.17.0 to 0.18.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/918">go-git/go-git#918</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/anandf"><code>@​anandf</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/901">go-git/go-git#901</a></li> <li><a href="https://github.com/steiler"><code>@​steiler</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/930">go-git/go-git#930</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/go-git/go-git/compare/v5.10.0...v5.10.1">https://github.com/go-git/go-git/compare/v5.10.0...v5.10.1</a></p> <h2>v5.10.0</h2> <h2>What's Changed</h2> <ul> <li>PlainInitOptions.Bare and allow using InitOptions with PlainInitWithOptions by <a href="https://github.com/ThinkChaos"><code>@​ThinkChaos</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/782">go-git/go-git#782</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/go-git/go-git/commit/5d08d3bd94c65a3b6c25c6fba6907d12b0dac4ca"><code>5d08d3b</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/958">#958</a> from pjbgf/workval</li> <li><a href="https://github.com/go-git/go-git/commit/5bd1d8f4abcfbf1345a1e5a5ec9a96121f3746dc"><code>5bd1d8f</code></a> build: Ensure checkout is the first operation</li> <li><a href="https://github.com/go-git/go-git/commit/b2c19824771bbcbb21abb51abb319c1a610aa6b3"><code>b2c1982</code></a> git: worktree, Align validation with upstream rules</li> <li><a href="https://github.com/go-git/go-git/commit/cec7da63ca0412fce55a0bf0715b7ba44a41eaa2"><code>cec7da6</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/953">#953</a> from pjbgf/alternates</li> <li><a href="https://github.com/go-git/go-git/commit/8b47ceb1aa854f3c3bfa1c347157a04324fcd51e"><code>8b47ceb</code></a> storage: filesystem, Add option to set a specific FS for alternates</li> <li><a href="https://github.com/go-git/go-git/commit/4f614891047bae5d0f7a253f014175505b9821d7"><code>4f61489</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/941">#941</a> from djmoch/filestats-rename</li> <li><a href="https://github.com/go-git/go-git/commit/ae552ce0bf32cddb689727c4c9fa6bf4d3bd6499"><code>ae552ce</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/939">#939</a> from dhoizner/fix-pull-after-shallow</li> <li><a href="https://github.com/go-git/go-git/commit/cc1895b905ebadb09504d88444ff05932fa6e928"><code>cc1895b</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/950">#950</a> from aymanbagabas/validate-ref</li> <li><a href="https://github.com/go-git/go-git/commit/de1d5a5978b9599ca3dacd58bbf699e4bb4cf6bd"><code>de1d5a5</code></a> git: validate reference names</li> <li><a href="https://github.com/go-git/go-git/commit/d87110b492c94d99ebdaea732b23a54b7efba94b"><code>d87110b</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/948">#948</a> from go-git/dependabot/go_modules/cli/go-git/github.c...</li> <li>Additional commits viewable in <a href="https://github.com/go-git/go-git/compare/v5.7.0...v5.11.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/go-git/go-git/v5&package-manager=go_modules&previous-version=5.7.0&new-version=5.11.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-28 14:46:28 +02:00
github.com/cyphar/filepath-securejoin v0.2.4 h1:Ugdm7cg7i6ZK6x3xDF1oEu1nfkyfH53EtKeQYTC3kyg=
github.com/cyphar/filepath-securejoin v0.2.4/go.mod h1:aPGpWjXOXUn2NCNjFvBE6aRxGGx79pTxQpKOJNYHHl4=
bump: nfpm
2018-10-31 04:26:58 +02:00
github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
chore: go modules
2018-10-29 02:54:15 +02:00
github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
feat(deps): bump github.com/google/ko from 0.14.1 to 0.15.0 (#4373) Bumps [github.com/google/ko](https://github.com/google/ko) from 0.14.1 to 0.15.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/ko/releases">github.com/google/ko's releases</a>.</em></p> <blockquote> <h2>v0.15.0</h2> <h2>What's Changed</h2> <ul> <li>implement dumb cache for images by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1102">ko-build/ko#1102</a></li> <li>fixed typo in configuration.md by <a href="https://github.com/samlaf"><code>@​samlaf</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1105">ko-build/ko#1105</a></li> <li>pkg/commands: fix dropped errors by <a href="https://github.com/alrs"><code>@​alrs</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1109">ko-build/ko#1109</a></li> <li>ci: add govulncheck by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1110">ko-build/ko#1110</a></li> <li>chore: remove refs to deprecated io/ioutil by <a href="https://github.com/testwill"><code>@​testwill</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1092">ko-build/ko#1092</a></li> <li>Update install docs to install ko using Scoop by <a href="https://github.com/pgrunm"><code>@​pgrunm</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1118">ko-build/ko#1118</a></li> <li>include go build output in build error by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1127">ko-build/ko#1127</a></li> <li>Use go1.21, clean up ci and drop go1.19 by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1137">ko-build/ko#1137</a></li> <li>Update e2e.yaml by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1141">ko-build/ko#1141</a></li> <li>handle newfound lint errors by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1142">ko-build/ko#1142</a></li> <li>fix test broken by lint fix by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1143">ko-build/ko#1143</a></li> <li>Bump actions/checkout from 3.6.0 to 4.0.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1136">ko-build/ko#1136</a></li> <li>fix env var for go env by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1140">ko-build/ko#1140</a></li> <li>docs: add docs for TF and Lambda by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1139">ko-build/ko#1139</a></li> <li>docs: add Lambda and TF pages to sidebar by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1144">ko-build/ko#1144</a></li> <li>include example using go packages by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1145">ko-build/ko#1145</a></li> <li>fix the release workflow and install instructions by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1150">ko-build/ko#1150</a></li> <li>update missing places that was using go1.20 by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1163">ko-build/ko#1163</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/samlaf"><code>@​samlaf</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1105">ko-build/ko#1105</a></li> <li><a href="https://github.com/alrs"><code>@​alrs</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1109">ko-build/ko#1109</a></li> <li><a href="https://github.com/testwill"><code>@​testwill</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1092">ko-build/ko#1092</a></li> <li><a href="https://github.com/pgrunm"><code>@​pgrunm</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1118">ko-build/ko#1118</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/ko-build/ko/compare/v0.14.1...v0.15.0">https://github.com/ko-build/ko/compare/v0.14.1...v0.15.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ko-build/ko/commit/31035ad2026bfbafaa4f009baefe72463af1b3a7"><code>31035ad</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1164">#1164</a> from ko-build/dependabot/go_modules/golang.org/x/net...</li> <li><a href="https://github.com/ko-build/ko/commit/ba952fd091f9d27ee5c136e842b5e94dd715100c"><code>ba952fd</code></a> Bump golang.org/x/net from 0.16.0 to 0.17.0</li> <li><a href="https://github.com/ko-build/ko/commit/277f5d74353950c8663fc04b7546f66e57bd6aaf"><code>277f5d7</code></a> update missing places that was using go1.20 (<a href="https://redirect.github.com/google/ko/issues/1163">#1163</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/b8b3b21f8348d7cab863fe1b4eaa47dfc47632da"><code>b8b3b21</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1162">#1162</a> from ko-build/dependabot/go_modules/github.com/googl...</li> <li><a href="https://github.com/ko-build/ko/commit/4890ab2887b653d3c340de4d119bfd17b703f182"><code>4890ab2</code></a> Bump github.com/google/go-cmp from 0.5.9 to 0.6.0</li> <li><a href="https://github.com/ko-build/ko/commit/30b62aee3faf6866cee6513ea7eb13f5a27cd7ca"><code>30b62ae</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1161">#1161</a> from ko-build/dependabot/go_modules/github.com/spf13...</li> <li><a href="https://github.com/ko-build/ko/commit/449bcb61926cb3e3bcf191e8ca53fad5ab3a4e3c"><code>449bcb6</code></a> Bump github.com/spf13/viper from 1.16.0 to 1.17.0</li> <li><a href="https://github.com/ko-build/ko/commit/c543dd83cc75cd849fb95637ea29e3c7c66d6f87"><code>c543dd8</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1160">#1160</a> from ko-build/dependabot/go_modules/golang.org/x/too...</li> <li><a href="https://github.com/ko-build/ko/commit/c1ae5f5ce4fe058830f24827c853d4db39a95250"><code>c1ae5f5</code></a> Bump golang.org/x/tools from 0.13.0 to 0.14.0</li> <li><a href="https://github.com/ko-build/ko/commit/e50d2fd5ff0ec88ac837ffe6f6c2f122eb54b9f8"><code>e50d2fd</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1159">#1159</a> from ko-build/dependabot/go_modules/golang.org/x/syn...</li> <li>Additional commits viewable in <a href="https://github.com/google/ko/compare/v0.14.1...v0.15.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/ko&package-manager=go_modules&previous-version=0.14.1&new-version=0.15.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-17 17:47:47 +02:00
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc h1:U9qPSI2PIWSS1VwoXQT9A3Wy9MM3WgvqSxFWenqJduM=
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
feat(deps): bump code.gitea.io/sdk/gitea from 0.15.1 to 0.16.0 (#4313) [//]: # (dependabot-start) ⚠️ **Dependabot is rebasing this PR** ⚠️ Rebasing might not happen immediately, so don't worry if this takes some time. Note: if you make any changes to this PR yourself, they will take precedence over the rebase. --- [//]: # (dependabot-end) Bumps code.gitea.io/sdk/gitea from 0.15.1 to 0.16.0. [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=code.gitea.io/sdk/gitea&package-manager=go_modules&previous-version=0.15.1&new-version=0.16.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) Dependabot will merge this PR once it's up-to-date and CI passes on it, as requested by @caarlos0. [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-20 16:32:07 +02:00
github.com/davidmz/go-pageant v1.0.2 h1:bPblRCh5jGU+Uptpz6LgMZGD5hJoOt7otgT454WvHn0=
github.com/davidmz/go-pageant v1.0.2/go.mod h1:P2EDDnMqIwG5Rrp05dTRITj9z2zpGcD9efWSkTNKLIE=
feat: update deps Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
2021-12-21 05:03:48 +02:00
github.com/dghubble/go-twitter v0.0.0-20211115160449-93a8679adecb h1:7ENzkH+O3juL+yj2undESLTaAeRllHwCs/b8z6aWSfc=
github.com/dghubble/go-twitter v0.0.0-20211115160449-93a8679adecb/go.mod h1:qhZBgV9e4WyB1JNjHpcXVkUe3knWUwYuAPB1hITdm50=
feat(deps): bump github.com/dghubble/oauth1 from 0.7.1 to 0.7.2 (#3627) Bumps [github.com/dghubble/oauth1](https://github.com/dghubble/oauth1) from 0.7.1 to 0.7.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/dghubble/oauth1/releases">github.com/dghubble/oauth1's releases</a>.</em></p> <blockquote> <h2>v0.7.2</h2> <ul> <li>Update minimum Go version from v1.17 to v1.18 (<a href="https://github-redirect.dependabot.com/dghubble/oauth1/pull/66">#66</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/dghubble/oauth1/blob/main/CHANGES.md">github.com/dghubble/oauth1's changelog</a>.</em></p> <blockquote> <h2>v0.7.2</h2> <ul> <li>Update minimum Go version from v1.17 to v1.18 (<a href="https://github-redirect.dependabot.com/dghubble/oauth1/pull/66">#66</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/dghubble/oauth1/commit/1445aad23c118bb4e08833df4138dda4a3a75526"><code>1445aad</code></a> Update minimum Go version from v1.17 to v1.18</li> <li><a href="https://github.com/dghubble/oauth1/commit/953dec31c201ba0f010e4e4c92f37a42e3e3ab2f"><code>953dec3</code></a> Bump github.com/stretchr/testify from 1.8.0 to 1.8.1</li> <li><a href="https://github.com/dghubble/oauth1/commit/56d749ba2f40f6612205e7b4df68e4d09ef9e572"><code>56d749b</code></a> Add go 1.19 to test matrix</li> <li><a href="https://github.com/dghubble/oauth1/commit/6f7198ab32d8eeddb3672a919bbccf7484829bae"><code>6f7198a</code></a> Bump github.com/stretchr/testify from 1.7.5 to 1.8.0</li> <li><a href="https://github.com/dghubble/oauth1/commit/2e9b39a9c1f1aae46c6f8d5d9cf4a8bb65f479d6"><code>2e9b39a</code></a> Bump github.com/stretchr/testify from 1.7.4 to 1.7.5</li> <li><a href="https://github.com/dghubble/oauth1/commit/52fe6714386f6ba61b6b34347d87e58c9f15e551"><code>52fe671</code></a> Bump github.com/stretchr/testify from 1.7.2 to 1.7.4</li> <li><a href="https://github.com/dghubble/oauth1/commit/4590427589d46d554afe6ce5b8ec751bf871d16d"><code>4590427</code></a> Bump github.com/stretchr/testify from 1.7.1 to 1.7.2</li> <li><a href="https://github.com/dghubble/oauth1/commit/74c7d8947468a2ee3735220495712f172ff41cfc"><code>74c7d89</code></a> Update Go test matrix to add Go v1.18</li> <li><a href="https://github.com/dghubble/oauth1/commit/dec88a17f74adc6da3d8f61e403e11577e90b28c"><code>dec88a1</code></a> Bump github.com/stretchr/testify from 1.7.0 to 1.7.1</li> <li>See full diff in <a href="https://github.com/dghubble/oauth1/compare/v0.7.1...v0.7.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/dghubble/oauth1&package-manager=go_modules&previous-version=0.7.1&new-version=0.7.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-08 14:41:38 +02:00
github.com/dghubble/oauth1 v0.7.2 h1:pwcinOZy8z6XkNxvPmUDY52M7RDPxt0Xw1zgZ6Cl5JA=
github.com/dghubble/oauth1 v0.7.2/go.mod h1:9erQdIhqhOHG/7K9s/tgh9Ks/AfoyrO5mW/43Lu2+kE=
feat: update deps Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
2021-12-21 05:03:48 +02:00
github.com/dghubble/sling v1.4.0 h1:/n8MRosVTthvMbwlNZgLx579OGVjUOy3GNEv5BIqAWY=
github.com/dghubble/sling v1.4.0/go.mod h1:0r40aNsU9EdDUVBNhfCstAtFgutjgJGYbO1oNzkMoM8=
feat: add ko support (#3653) continuing the PR by @developer-guy - [x] should be a publisher, as it does publish the images it builds every time - [x] `Default` method does not work - [x] the `fromConfig` thing should probably be on the defaults, too - [x] wire `--skip-ko` - [x] documentation - [x] more tests - [x] use same registry as docker tests does - [ ] see if we can make the log output match goreleaser's - [ ] ?? closes #2556 closes #3490 Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com> Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> Co-authored-by: actions-user <actions@github.com> Co-authored-by: Jason Hall <jason@chainguard.dev> Co-authored-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2023-01-17 03:34:49 +02:00
github.com/dimchansky/utfbom v1.1.1 h1:vV6w1AhK4VMnhBno/TPVCoK9U/LP0PkLCS9tbxHdi/U=
github.com/dimchansky/utfbom v1.1.1/go.mod h1:SxdoEBH5qIqFocHMyGOXVAybYJdr71b1Q/j0mACtrfE=
github.com/distribution/distribution/v3 v3.0.0-20221021092657-c47a966fded8 h1:zuxvqNfQKyGNH3a1yFh1ofD4Y7ycgdwQhHX6QRH+Cwo=
github.com/distribution/distribution/v3 v3.0.0-20221021092657-c47a966fded8/go.mod h1:6rIc5NMSjXjjnwzWWy3HAm9gDBu+X7aCzL8VrHIKgxM=
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419) Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.1.1 to 2.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's releases</a>.</em></p> <blockquote> <h2>v2.2.1</h2> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's changelog</a>.</em></p> <blockquote> <h1>v2.2.1</h1> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign/commit/12cbf9ea177d22bbf5cf028bcb4712b5f174ebc6"><code>12cbf9e</code></a> add changelog for v2.2.1 release (<a href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/827f24e9d4a1f8e845cb1597d02053410f5bbe2a"><code>827f24e</code></a> feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8ac891ff0e29ddc67965423bee8f826219c6eb0f"><code>8ac891f</code></a> Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li><a href="https://github.com/sigstore/cosign/commit/8b366c497bd22b9be7742d057b8f59083dcadee0"><code>8b366c4</code></a> add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/23920de5623a505921ba4e62fa97e2553eff4699"><code>23920de</code></a> chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/e022e1c13240d1ae5b3c408bc53e389154331713"><code>e022e1c</code></a> chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/28c59c5eca6386924cc8f381afe94efe1e957679"><code>28c59c5</code></a> add missing groups key (<a href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8e5bdcc0ff39b8dc1b477251fef521601df76ec0"><code>8e5bdcc</code></a> chore(deps): bump github.com/google/certificate-transparency-go (<a href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/510cac4ef54274823599082e3a57a556ccd5c9e5"><code>510cac4</code></a> chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/063902b1d78fed7c12c9d9ce06248d36963e8169"><code>063902b</code></a> chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 18:39:49 +02:00
github.com/distribution/reference v0.5.0 h1:/FUIFXtfc/x2gpa5/VGfiGLuOIdYa1t65IKK2OFGvA0=
github.com/distribution/reference v0.5.0/go.mod h1:BbU0aIcezP1/5jX/8MP0YiH4SdvB5Y4f/wlDRiLyi3E=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/dnaeon/go-vcr v1.2.0 h1:zHCHvJYTMh1N7xnV7zf1m1GPBF9Ad0Jk/whtQ1663qI=
chore: go mod tidy Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-09-13 19:03:05 +02:00
github.com/dnaeon/go-vcr v1.2.0/go.mod h1:R4UdLID7HZT3taECzJs4YgbbH6PIGXB6W/sc5OLb6RQ=
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419) Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.1.1 to 2.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's releases</a>.</em></p> <blockquote> <h2>v2.2.1</h2> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's changelog</a>.</em></p> <blockquote> <h1>v2.2.1</h1> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign/commit/12cbf9ea177d22bbf5cf028bcb4712b5f174ebc6"><code>12cbf9e</code></a> add changelog for v2.2.1 release (<a href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/827f24e9d4a1f8e845cb1597d02053410f5bbe2a"><code>827f24e</code></a> feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8ac891ff0e29ddc67965423bee8f826219c6eb0f"><code>8ac891f</code></a> Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li><a href="https://github.com/sigstore/cosign/commit/8b366c497bd22b9be7742d057b8f59083dcadee0"><code>8b366c4</code></a> add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/23920de5623a505921ba4e62fa97e2553eff4699"><code>23920de</code></a> chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/e022e1c13240d1ae5b3c408bc53e389154331713"><code>e022e1c</code></a> chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/28c59c5eca6386924cc8f381afe94efe1e957679"><code>28c59c5</code></a> add missing groups key (<a href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8e5bdcc0ff39b8dc1b477251fef521601df76ec0"><code>8e5bdcc</code></a> chore(deps): bump github.com/google/certificate-transparency-go (<a href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/510cac4ef54274823599082e3a57a556ccd5c9e5"><code>510cac4</code></a> chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/063902b1d78fed7c12c9d9ce06248d36963e8169"><code>063902b</code></a> chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 18:39:49 +02:00
github.com/docker/cli v24.0.7+incompatible h1:wa/nIwYFW7BVTGa7SWPVyyXU9lgORqUb1xfI36MSkFg=
github.com/docker/cli v24.0.7+incompatible/go.mod h1:JLrzqnKDaYBop7H2jaqPtU4hHvMKP+vjCwu2uszcLI8=
github.com/docker/distribution v2.8.3+incompatible h1:AtKxIZ36LoNK51+Z6RpzLpddBirtxJnzDrHLEKxTAYk=
github.com/docker/distribution v2.8.3+incompatible/go.mod h1:J2gT2udsDAN96Uj4KfcMRqY0/ypR+oyYUYmja8H+y+w=
feat(deps): bump github.com/docker/docker Bumps [github.com/docker/docker](https://github.com/docker/docker) from 24.0.6+incompatible to 24.0.7+incompatible. - [Release notes](https://github.com/docker/docker/releases) - [Commits](https://github.com/docker/docker/compare/v24.0.6...v24.0.7) --- updated-dependencies: - dependency-name: github.com/docker/docker dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
2023-10-30 17:52:07 +02:00
github.com/docker/docker v24.0.7+incompatible h1:Wo6l37AuwP3JaMnZa226lzVXGA3F9Ig1seQen0cKYlM=
github.com/docker/docker v24.0.7+incompatible/go.mod h1:eEKB0N0r5NX/I1kEveEz05bcu8tLC/8azJZsviup8Sk=
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419) Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.1.1 to 2.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's releases</a>.</em></p> <blockquote> <h2>v2.2.1</h2> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's changelog</a>.</em></p> <blockquote> <h1>v2.2.1</h1> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign/commit/12cbf9ea177d22bbf5cf028bcb4712b5f174ebc6"><code>12cbf9e</code></a> add changelog for v2.2.1 release (<a href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/827f24e9d4a1f8e845cb1597d02053410f5bbe2a"><code>827f24e</code></a> feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8ac891ff0e29ddc67965423bee8f826219c6eb0f"><code>8ac891f</code></a> Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li><a href="https://github.com/sigstore/cosign/commit/8b366c497bd22b9be7742d057b8f59083dcadee0"><code>8b366c4</code></a> add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/23920de5623a505921ba4e62fa97e2553eff4699"><code>23920de</code></a> chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/e022e1c13240d1ae5b3c408bc53e389154331713"><code>e022e1c</code></a> chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/28c59c5eca6386924cc8f381afe94efe1e957679"><code>28c59c5</code></a> add missing groups key (<a href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8e5bdcc0ff39b8dc1b477251fef521601df76ec0"><code>8e5bdcc</code></a> chore(deps): bump github.com/google/certificate-transparency-go (<a href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/510cac4ef54274823599082e3a57a556ccd5c9e5"><code>510cac4</code></a> chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/063902b1d78fed7c12c9d9ce06248d36963e8169"><code>063902b</code></a> chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 18:39:49 +02:00
github.com/docker/docker-credential-helpers v0.8.0 h1:YQFtbBQb4VrpoPxhFuzEBPQ9E16qz5SpHLS+uswaCp8=
github.com/docker/docker-credential-helpers v0.8.0/go.mod h1:UGFXcuoQ5TxPiB54nHOZ32AWRqQdECoh/Mg0AlEYb40=
refactor: improving minio and docker tests (#3642) using ory/dockertest to simplify integration tests Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-12-15 15:25:52 +02:00
github.com/docker/go-connections v0.4.0 h1:El9xVISelRB7BuFusrZozjnkIM5YnzCViNKohAFqRJQ=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/docker/go-connections v0.4.0/go.mod h1:Gbd7IOopHjR8Iph03tsViu4nIes5XhDvyHbTtUxmeec=
feat: add ko support (#3653) continuing the PR by @developer-guy - [x] should be a publisher, as it does publish the images it builds every time - [x] `Default` method does not work - [x] the `fromConfig` thing should probably be on the defaults, too - [x] wire `--skip-ko` - [x] documentation - [x] more tests - [x] use same registry as docker tests does - [ ] see if we can make the log output match goreleaser's - [ ] ?? closes #2556 closes #3490 Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com> Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> Co-authored-by: actions-user <actions@github.com> Co-authored-by: Jason Hall <jason@chainguard.dev> Co-authored-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2023-01-17 03:34:49 +02:00
github.com/docker/go-metrics v0.0.1 h1:AgB/0SvBxihN0X8OR4SjsblXkbMvalQ8cjmtKQ2rQV8=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/docker/go-metrics v0.0.1/go.mod h1:cG1hvH2utMXtqgqqYE9plW6lDxS3/5ayHzueweSI3Vw=
github.com/docker/go-units v0.4.0/go.mod h1:fgPhTUdO+D/Jk86RDLlptpiXQzgHJF7gydDDbaIK4Dk=
feat(deps): bump gocloud.dev from 0.27.0 to 0.28.0 (#3689) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.27.0 to 0.28.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.28.0</h2> <p><strong>BREAKING CHANGES</strong>:</p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK.</li> <li><strong>blob/azureblob</strong>: Updated to match recent breaking changes in the Azure packages (yes, again).</li> <li><strong>pubsub/awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>blob</strong></p> <ul> <li><strong>memblob</strong>: Fixed bug where use of <code>BeforeCopy</code> callback would drop the actual copying.</li> <li><strong>azureblob</strong>: Updated to match recent breaking changes in the Azure packages.</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>all</strong>: Simplified and improved batch sizing, should resolve issues with too-frequent polling in some situations.</li> <li><strong>azurepubsub</strong>: Made <code>ListenerTimeout</code> configurable.</li> <li><strong>gcppubsub</strong> and <strong>awssnssqs</strong>: Support lazy mode for <code>Nack</code> (where no explicit <code>Nack</code> is sent).</li> <li><strong>awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>secrets</strong></p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK. Use azidentity.NewDefaultAzureCredential.</li> </ul> <p><strong>sql</strong></p> <ul> <li><strong>gcp/cloudsql</strong>: Fixed IAM login.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/24166090495b8e084a23aa7d11fcc81ec33e4729"><code>2416609</code></a> all: prep for v0.28.0 (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3207">#3207</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/13f46eb8065d5ea62b757f5f0f11a56f48faf7cc"><code>13f46eb</code></a> pubsub: simplify and improve batch sizing, especially for low message rates</li> <li><a href="https://github.com/google/go-cloud/commit/8f2c2b9a392a8e4a3d7a4942f88f3df607f8f6d0"><code>8f2c2b9</code></a> pubsub/memsub: Add Options for batching (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3205">#3205</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fe0a3d75fe43c039258df25ebf102602526e3052"><code>fe0a3d7</code></a> pubsub/awssqs: Fix BeforeSend/As to enable changes to the sqs input message (...</li> <li><a href="https://github.com/google/go-cloud/commit/dfaf95af34dd9022a69a061028e0ceec98e9c670"><code>dfaf95a</code></a> secrets/azurekeyvault: Use azidentity.NewDefaultAzureCredential to support ot...</li> <li><a href="https://github.com/google/go-cloud/commit/1e26311532928f060c490a7fbf2be92b55ee12c4"><code>1e26311</code></a> blob: Remove some debug logging (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3197">#3197</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/43ed5a499864c08b7b6549ff7085f19634a1f02c"><code>43ed5a4</code></a> pubsub/gcppubsub: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3195">#3195</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/be80e70b3dcf7a6b86481881c7ac0b44a8095178"><code>be80e70</code></a> pubsub/awssnssqs: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3194">#3194</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/7d690993a53cf8cc2e7af07872876d58601f1261"><code>7d69099</code></a> blob/azblob: Update to latest, and restore As for dirlist (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3191">#3191</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/e942f3c339f0eb617ac4dbc7f37cc4e5920ee7cc"><code>e942f3c</code></a> blob/azblob: Restore As for List entry (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3188">#3188</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.27.0...v0.28.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.27.0&new-version=0.28.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-11 14:09:51 +02:00
github.com/docker/go-units v0.5.0 h1:69rxXcBk27SvSaaxTtLh/8llcHD8vYHT7WSdRZ/jvr4=
github.com/docker/go-units v0.5.0/go.mod h1:fgPhTUdO+D/Jk86RDLlptpiXQzgHJF7gydDDbaIK4Dk=
sec(deps): bump github.com/go-git/go-git/v5 from 5.7.0 to 5.11.0 (#4505) Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.7.0 to 5.11.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/go-git/go-git/releases">github.com/go-git/go-git/v5's releases</a>.</em></p> <blockquote> <h2>v5.11.0</h2> <h2>What's Changed</h2> <ul> <li>git: validate reference names (<a href="https://redirect.github.com/go-git/go-git/issues/929">#929</a>) by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/950">go-git/go-git#950</a></li> <li>git: stop iterating at oldest shallow when pulling. Fixes <a href="https://redirect.github.com/go-git/go-git/issues/305">#305</a> by <a href="https://github.com/dhoizner"><code>@​dhoizner</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/939">go-git/go-git#939</a></li> <li>plumbing: object, enable renames in getFileStatsFromFilePatches by <a href="https://github.com/djmoch"><code>@​djmoch</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/941">go-git/go-git#941</a></li> <li>storage: filesystem, Add option to set a specific FS for alternates by <a href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/953">go-git/go-git#953</a></li> <li>Align worktree validation with upstream and remove build warnings by <a href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/958">go-git/go-git#958</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/dhoizner"><code>@​dhoizner</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/939">go-git/go-git#939</a></li> <li><a href="https://github.com/djmoch"><code>@​djmoch</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/941">go-git/go-git#941</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/go-git/go-git/compare/v5.10.1...v5.11.0">https://github.com/go-git/go-git/compare/v5.10.1...v5.11.0</a></p> <h2>v5.10.1</h2> <h2>What's Changed</h2> <ul> <li>Worktree, ignore ModeSocket files by <a href="https://github.com/steiler"><code>@​steiler</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/930">go-git/go-git#930</a></li> <li>git: add tracer package by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/916">go-git/go-git#916</a></li> <li>remote: Flip clause for fast-forward only check by <a href="https://github.com/adityasaky"><code>@​adityasaky</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/875">go-git/go-git#875</a></li> <li>plumbing: transport/ssh, Fix nil pointer dereference caused when an unreachable proxy server is set. Fixes <a href="https://redirect.github.com/go-git/go-git/issues/900">#900</a> by <a href="https://github.com/anandf"><code>@​anandf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/901">go-git/go-git#901</a></li> <li>plumbing: uppload-server-info, implement upload-server-info by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/896">go-git/go-git#896</a></li> <li>plumbing: optimise memory consumption for filesystem storage by <a href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/799">go-git/go-git#799</a></li> <li>plumbing: format/packfile, Refactor patch delta by <a href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/908">go-git/go-git#908</a></li> <li>plumbing: fix empty uploadpack request error by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/932">go-git/go-git#932</a></li> <li>plumbing: transport/git, Improve tests error message by <a href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/752">go-git/go-git#752</a></li> <li>plumbing: format/pktline, Respect pktline error-line errors by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/936">go-git/go-git#936</a></li> <li>utils: remove ioutil.Pipe and use std library io.Pipe by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/922">go-git/go-git#922</a></li> <li>utils: move trace to utils by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/931">go-git/go-git#931</a></li> <li>cli: separate go module for cli by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/914">go-git/go-git#914</a></li> <li>build: bump github.com/google/go-cmp from 0.5.9 to 0.6.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/887">go-git/go-git#887</a></li> <li>build: bump actions/setup-go from 3 to 4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/891">go-git/go-git#891</a></li> <li>build: bump github.com/skeema/knownhosts from 1.2.0 to 1.2.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/888">go-git/go-git#888</a></li> <li>build: bump actions/checkout from 3 to 4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/890">go-git/go-git#890</a></li> <li>build: bump golang.org/x/sys from 0.13.0 to 0.14.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/907">go-git/go-git#907</a></li> <li>build: bump golang.org/x/text from 0.13.0 to 0.14.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/906">go-git/go-git#906</a></li> <li>build: bump golang.org/x/crypto from 0.14.0 to 0.15.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/917">go-git/go-git#917</a></li> <li>build: bump golang.org/x/net from 0.17.0 to 0.18.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/918">go-git/go-git#918</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/anandf"><code>@​anandf</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/901">go-git/go-git#901</a></li> <li><a href="https://github.com/steiler"><code>@​steiler</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/930">go-git/go-git#930</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/go-git/go-git/compare/v5.10.0...v5.10.1">https://github.com/go-git/go-git/compare/v5.10.0...v5.10.1</a></p> <h2>v5.10.0</h2> <h2>What's Changed</h2> <ul> <li>PlainInitOptions.Bare and allow using InitOptions with PlainInitWithOptions by <a href="https://github.com/ThinkChaos"><code>@​ThinkChaos</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/782">go-git/go-git#782</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/go-git/go-git/commit/5d08d3bd94c65a3b6c25c6fba6907d12b0dac4ca"><code>5d08d3b</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/958">#958</a> from pjbgf/workval</li> <li><a href="https://github.com/go-git/go-git/commit/5bd1d8f4abcfbf1345a1e5a5ec9a96121f3746dc"><code>5bd1d8f</code></a> build: Ensure checkout is the first operation</li> <li><a href="https://github.com/go-git/go-git/commit/b2c19824771bbcbb21abb51abb319c1a610aa6b3"><code>b2c1982</code></a> git: worktree, Align validation with upstream rules</li> <li><a href="https://github.com/go-git/go-git/commit/cec7da63ca0412fce55a0bf0715b7ba44a41eaa2"><code>cec7da6</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/953">#953</a> from pjbgf/alternates</li> <li><a href="https://github.com/go-git/go-git/commit/8b47ceb1aa854f3c3bfa1c347157a04324fcd51e"><code>8b47ceb</code></a> storage: filesystem, Add option to set a specific FS for alternates</li> <li><a href="https://github.com/go-git/go-git/commit/4f614891047bae5d0f7a253f014175505b9821d7"><code>4f61489</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/941">#941</a> from djmoch/filestats-rename</li> <li><a href="https://github.com/go-git/go-git/commit/ae552ce0bf32cddb689727c4c9fa6bf4d3bd6499"><code>ae552ce</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/939">#939</a> from dhoizner/fix-pull-after-shallow</li> <li><a href="https://github.com/go-git/go-git/commit/cc1895b905ebadb09504d88444ff05932fa6e928"><code>cc1895b</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/950">#950</a> from aymanbagabas/validate-ref</li> <li><a href="https://github.com/go-git/go-git/commit/de1d5a5978b9599ca3dacd58bbf699e4bb4cf6bd"><code>de1d5a5</code></a> git: validate reference names</li> <li><a href="https://github.com/go-git/go-git/commit/d87110b492c94d99ebdaea732b23a54b7efba94b"><code>d87110b</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/948">#948</a> from go-git/dependabot/go_modules/cli/go-git/github.c...</li> <li>Additional commits viewable in <a href="https://github.com/go-git/go-git/compare/v5.7.0...v5.11.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/go-git/go-git/v5&package-manager=go_modules&previous-version=5.7.0&new-version=5.11.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-28 14:46:28 +02:00
github.com/elazarl/goproxy v0.0.0-20230808193330-2592e75ae04a h1:mATvB/9r/3gvcejNsXKSkQ6lcIaNec2nyfOdlTBR2lU=
github.com/elazarl/goproxy v0.0.0-20230808193330-2592e75ae04a/go.mod h1:Ro8st/ElPeALwNFlcTpWmkr6IoMFfkjXAvTHpevnDsM=
feat: improve output (#3966) - log keys will be ordered as intended instead of sorted - paths always relative to cwd --------- Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-05-02 14:06:35 +02:00
github.com/elliotchance/orderedmap/v2 v2.2.0 h1:7/2iwO98kYT4XkOjA9mBEIwvi4KpGB4cyHeOFOnj4Vk=
github.com/elliotchance/orderedmap/v2 v2.2.0/go.mod h1:85lZyVbpGaGvHvnKa7Qhx7zncAdBIBq6u56Hb1PRU5Q=
feat(deps): bump github.com/goreleaser/nfpm/v2 from 2.30.1 to 2.31.0 (#4144) latest and greatest
2023-06-26 18:20:47 +02:00
github.com/emirpasic/gods v1.18.1 h1:FXtiHYKDGKCW2KzwZKx0iC0PQmdlorYgdFG9jPXJ1Bc=
github.com/emirpasic/gods v1.18.1/go.mod h1:8tpGGwCnJ5H4r6BWwaV6OrWmMoPhUl5jm/FMNAnJvWQ=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
github.com/envoyproxy/go-control-plane v0.9.0/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymFceY/DCBVvsKhRF0iEA4=
github.com/envoyproxy/go-control-plane v0.9.1-0.20191026205805-5f8ba28d4473/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymFceY/DCBVvsKhRF0iEA4=
github.com/envoyproxy/go-control-plane v0.9.4/go.mod h1:6rpuAdCZL397s3pYoYcLgu1mIlRU8Am5FuJP05cCM98=
chore(deps): bump gocloud.dev from 0.20.0 to 0.21.0 (#1941) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.20.0 to 0.21.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.20.0...v0.21.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-12 01:14:58 +02:00
github.com/envoyproxy/go-control-plane v0.9.7/go.mod h1:cwu0lG7PUMfa9snN8LXBig5ynNVH9qI8YYLbd1fK2po=
chore(deps): bump gocloud.dev from 0.22.0 to 0.23.0 (#2225) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.22.0 to 0.23.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.22.0...v0.23.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-17 14:03:45 +02:00
github.com/envoyproxy/go-control-plane v0.9.9-0.20201210154907-fd9021fe5dad/go.mod h1:cXg6YxExXjJnVBQHBLXeUAgxn2UodCpnH306RInaBQk=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
github.com/envoyproxy/protoc-gen-validate v0.1.0/go.mod h1:iSmxcyjqTsJpI2R4NaDN7+kN2VEUnK/pcBlmesArF7c=
feat: add ko support (#3653) continuing the PR by @developer-guy - [x] should be a publisher, as it does publish the images it builds every time - [x] `Default` method does not work - [x] the `fromConfig` thing should probably be on the defaults, too - [x] wire `--skip-ko` - [x] documentation - [x] more tests - [x] use same registry as docker tests does - [ ] see if we can make the log output match goreleaser's - [ ] ?? closes #2556 closes #3490 Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com> Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> Co-authored-by: actions-user <actions@github.com> Co-authored-by: Jason Hall <jason@chainguard.dev> Co-authored-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2023-01-17 03:34:49 +02:00
github.com/evanphx/json-patch/v5 v5.6.0 h1:b91NhWfaz02IuVxO9faSllyAtNXHMPkC5J8sJCLunww=
github.com/evanphx/json-patch/v5 v5.6.0/go.mod h1:G79N1coSVB93tBe7j6PhzjmR3/2VvlbKOFpnXhI9Bw4=
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419) Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.1.1 to 2.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's releases</a>.</em></p> <blockquote> <h2>v2.2.1</h2> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's changelog</a>.</em></p> <blockquote> <h1>v2.2.1</h1> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign/commit/12cbf9ea177d22bbf5cf028bcb4712b5f174ebc6"><code>12cbf9e</code></a> add changelog for v2.2.1 release (<a href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/827f24e9d4a1f8e845cb1597d02053410f5bbe2a"><code>827f24e</code></a> feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8ac891ff0e29ddc67965423bee8f826219c6eb0f"><code>8ac891f</code></a> Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li><a href="https://github.com/sigstore/cosign/commit/8b366c497bd22b9be7742d057b8f59083dcadee0"><code>8b366c4</code></a> add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/23920de5623a505921ba4e62fa97e2553eff4699"><code>23920de</code></a> chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/e022e1c13240d1ae5b3c408bc53e389154331713"><code>e022e1c</code></a> chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/28c59c5eca6386924cc8f381afe94efe1e957679"><code>28c59c5</code></a> add missing groups key (<a href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8e5bdcc0ff39b8dc1b477251fef521601df76ec0"><code>8e5bdcc</code></a> chore(deps): bump github.com/google/certificate-transparency-go (<a href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/510cac4ef54274823599082e3a57a556ccd5c9e5"><code>510cac4</code></a> chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/063902b1d78fed7c12c9d9ce06248d36963e8169"><code>063902b</code></a> chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 18:39:49 +02:00
github.com/fatih/color v1.15.0 h1:kOqh6YHBtK8aywxGerMG2Eq3H6Qgoqeo13Bk2Mv/nBs=
github.com/fatih/color v1.15.0/go.mod h1:0h5ZqXfHYED7Bhv2ZJamyIOUej9KtShiJESRwBDUSsw=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/frankban/quicktest v1.11.3/go.mod h1:wRf/ReqHper53s+kmmSZizM8NamnL3IM0I9ntUbOk+k=
feat(deps): bump github.com/goreleaser/nfpm/v2 from 2.30.1 to 2.31.0 (#4144) latest and greatest
2023-06-26 18:20:47 +02:00
github.com/frankban/quicktest v1.14.4 h1:g2rn0vABPOOXmZUj+vbmUp0lPoXEMuhTpIluN0XL9UY=
chore: go mod tidy Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-09-13 19:03:05 +02:00
github.com/frankban/quicktest v1.14.4/go.mod h1:4ptaffx2x8+WTWXmUCuVU6aPUX1/Mz7zb5vbUoiM6w0=
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419) Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.1.1 to 2.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's releases</a>.</em></p> <blockquote> <h2>v2.2.1</h2> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's changelog</a>.</em></p> <blockquote> <h1>v2.2.1</h1> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign/commit/12cbf9ea177d22bbf5cf028bcb4712b5f174ebc6"><code>12cbf9e</code></a> add changelog for v2.2.1 release (<a href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/827f24e9d4a1f8e845cb1597d02053410f5bbe2a"><code>827f24e</code></a> feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8ac891ff0e29ddc67965423bee8f826219c6eb0f"><code>8ac891f</code></a> Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li><a href="https://github.com/sigstore/cosign/commit/8b366c497bd22b9be7742d057b8f59083dcadee0"><code>8b366c4</code></a> add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/23920de5623a505921ba4e62fa97e2553eff4699"><code>23920de</code></a> chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/e022e1c13240d1ae5b3c408bc53e389154331713"><code>e022e1c</code></a> chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/28c59c5eca6386924cc8f381afe94efe1e957679"><code>28c59c5</code></a> add missing groups key (<a href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8e5bdcc0ff39b8dc1b477251fef521601df76ec0"><code>8e5bdcc</code></a> chore(deps): bump github.com/google/certificate-transparency-go (<a href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/510cac4ef54274823599082e3a57a556ccd5c9e5"><code>510cac4</code></a> chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/063902b1d78fed7c12c9d9ce06248d36963e8169"><code>063902b</code></a> chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 18:39:49 +02:00
github.com/fsnotify/fsnotify v1.7.0 h1:8JEhPFa5W2WU7YfeZzPNqzMP6Lwt7L2715Ggo0nosvA=
github.com/fsnotify/fsnotify v1.7.0/go.mod h1:40Bi/Hjc2AVfZrqy+aj+yEI+/bRxZnMJyTJwOpGvigM=
feat(deps): bump github.com/goreleaser/nfpm/v2 from 2.30.1 to 2.31.0 (#4144) latest and greatest
2023-06-26 18:20:47 +02:00
github.com/gliderlabs/ssh v0.3.5 h1:OcaySEmAQJgyYcArR+gGGTHCyE7nvhEMTlYY+Dp8CpY=
chore: go mod tidy Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-09-13 19:03:05 +02:00
github.com/gliderlabs/ssh v0.3.5/go.mod h1:8XB4KraRrX39qHhT6yxPsHedjA08I/uBVwj4xC+/+z4=
feat(deps): bump code.gitea.io/sdk/gitea from 0.15.1 to 0.16.0 (#4313) [//]: # (dependabot-start) ⚠️ **Dependabot is rebasing this PR** ⚠️ Rebasing might not happen immediately, so don't worry if this takes some time. Note: if you make any changes to this PR yourself, they will take precedence over the rebase. --- [//]: # (dependabot-end) Bumps code.gitea.io/sdk/gitea from 0.15.1 to 0.16.0. [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=code.gitea.io/sdk/gitea&package-manager=go_modules&previous-version=0.15.1&new-version=0.16.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) Dependabot will merge this PR once it's up-to-date and CI passes on it, as requested by @caarlos0. [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-20 16:32:07 +02:00
github.com/go-fed/httpsig v1.1.0 h1:9M+hb0jkEICD8/cAiNqEB66R87tTINszBRTjwjQzWcI=
github.com/go-fed/httpsig v1.1.0/go.mod h1:RCMrTZvN1bJYtofsG4rd5NaO5obxQ5xBkdiS7xsT7bM=
feat(deps): bump github.com/goreleaser/nfpm/v2 from 2.30.1 to 2.31.0 (#4144) latest and greatest
2023-06-26 18:20:47 +02:00
github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 h1:+zs/tPmkDkHx3U66DAb0lQFJrpS6731Oaa12ikc+DiI=
github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376/go.mod h1:an3vInlBmSxCcxctByoQdvwPiA7DTK7jaaFDBTtu0ic=
sec(deps): bump github.com/go-git/go-git/v5 from 5.7.0 to 5.11.0 (#4505) Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.7.0 to 5.11.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/go-git/go-git/releases">github.com/go-git/go-git/v5's releases</a>.</em></p> <blockquote> <h2>v5.11.0</h2> <h2>What's Changed</h2> <ul> <li>git: validate reference names (<a href="https://redirect.github.com/go-git/go-git/issues/929">#929</a>) by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/950">go-git/go-git#950</a></li> <li>git: stop iterating at oldest shallow when pulling. Fixes <a href="https://redirect.github.com/go-git/go-git/issues/305">#305</a> by <a href="https://github.com/dhoizner"><code>@​dhoizner</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/939">go-git/go-git#939</a></li> <li>plumbing: object, enable renames in getFileStatsFromFilePatches by <a href="https://github.com/djmoch"><code>@​djmoch</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/941">go-git/go-git#941</a></li> <li>storage: filesystem, Add option to set a specific FS for alternates by <a href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/953">go-git/go-git#953</a></li> <li>Align worktree validation with upstream and remove build warnings by <a href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/958">go-git/go-git#958</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/dhoizner"><code>@​dhoizner</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/939">go-git/go-git#939</a></li> <li><a href="https://github.com/djmoch"><code>@​djmoch</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/941">go-git/go-git#941</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/go-git/go-git/compare/v5.10.1...v5.11.0">https://github.com/go-git/go-git/compare/v5.10.1...v5.11.0</a></p> <h2>v5.10.1</h2> <h2>What's Changed</h2> <ul> <li>Worktree, ignore ModeSocket files by <a href="https://github.com/steiler"><code>@​steiler</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/930">go-git/go-git#930</a></li> <li>git: add tracer package by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/916">go-git/go-git#916</a></li> <li>remote: Flip clause for fast-forward only check by <a href="https://github.com/adityasaky"><code>@​adityasaky</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/875">go-git/go-git#875</a></li> <li>plumbing: transport/ssh, Fix nil pointer dereference caused when an unreachable proxy server is set. Fixes <a href="https://redirect.github.com/go-git/go-git/issues/900">#900</a> by <a href="https://github.com/anandf"><code>@​anandf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/901">go-git/go-git#901</a></li> <li>plumbing: uppload-server-info, implement upload-server-info by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/896">go-git/go-git#896</a></li> <li>plumbing: optimise memory consumption for filesystem storage by <a href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/799">go-git/go-git#799</a></li> <li>plumbing: format/packfile, Refactor patch delta by <a href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/908">go-git/go-git#908</a></li> <li>plumbing: fix empty uploadpack request error by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/932">go-git/go-git#932</a></li> <li>plumbing: transport/git, Improve tests error message by <a href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/752">go-git/go-git#752</a></li> <li>plumbing: format/pktline, Respect pktline error-line errors by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/936">go-git/go-git#936</a></li> <li>utils: remove ioutil.Pipe and use std library io.Pipe by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/922">go-git/go-git#922</a></li> <li>utils: move trace to utils by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/931">go-git/go-git#931</a></li> <li>cli: separate go module for cli by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/914">go-git/go-git#914</a></li> <li>build: bump github.com/google/go-cmp from 0.5.9 to 0.6.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/887">go-git/go-git#887</a></li> <li>build: bump actions/setup-go from 3 to 4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/891">go-git/go-git#891</a></li> <li>build: bump github.com/skeema/knownhosts from 1.2.0 to 1.2.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/888">go-git/go-git#888</a></li> <li>build: bump actions/checkout from 3 to 4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/890">go-git/go-git#890</a></li> <li>build: bump golang.org/x/sys from 0.13.0 to 0.14.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/907">go-git/go-git#907</a></li> <li>build: bump golang.org/x/text from 0.13.0 to 0.14.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/906">go-git/go-git#906</a></li> <li>build: bump golang.org/x/crypto from 0.14.0 to 0.15.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/917">go-git/go-git#917</a></li> <li>build: bump golang.org/x/net from 0.17.0 to 0.18.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/918">go-git/go-git#918</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/anandf"><code>@​anandf</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/901">go-git/go-git#901</a></li> <li><a href="https://github.com/steiler"><code>@​steiler</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/930">go-git/go-git#930</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/go-git/go-git/compare/v5.10.0...v5.10.1">https://github.com/go-git/go-git/compare/v5.10.0...v5.10.1</a></p> <h2>v5.10.0</h2> <h2>What's Changed</h2> <ul> <li>PlainInitOptions.Bare and allow using InitOptions with PlainInitWithOptions by <a href="https://github.com/ThinkChaos"><code>@​ThinkChaos</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/782">go-git/go-git#782</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/go-git/go-git/commit/5d08d3bd94c65a3b6c25c6fba6907d12b0dac4ca"><code>5d08d3b</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/958">#958</a> from pjbgf/workval</li> <li><a href="https://github.com/go-git/go-git/commit/5bd1d8f4abcfbf1345a1e5a5ec9a96121f3746dc"><code>5bd1d8f</code></a> build: Ensure checkout is the first operation</li> <li><a href="https://github.com/go-git/go-git/commit/b2c19824771bbcbb21abb51abb319c1a610aa6b3"><code>b2c1982</code></a> git: worktree, Align validation with upstream rules</li> <li><a href="https://github.com/go-git/go-git/commit/cec7da63ca0412fce55a0bf0715b7ba44a41eaa2"><code>cec7da6</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/953">#953</a> from pjbgf/alternates</li> <li><a href="https://github.com/go-git/go-git/commit/8b47ceb1aa854f3c3bfa1c347157a04324fcd51e"><code>8b47ceb</code></a> storage: filesystem, Add option to set a specific FS for alternates</li> <li><a href="https://github.com/go-git/go-git/commit/4f614891047bae5d0f7a253f014175505b9821d7"><code>4f61489</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/941">#941</a> from djmoch/filestats-rename</li> <li><a href="https://github.com/go-git/go-git/commit/ae552ce0bf32cddb689727c4c9fa6bf4d3bd6499"><code>ae552ce</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/939">#939</a> from dhoizner/fix-pull-after-shallow</li> <li><a href="https://github.com/go-git/go-git/commit/cc1895b905ebadb09504d88444ff05932fa6e928"><code>cc1895b</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/950">#950</a> from aymanbagabas/validate-ref</li> <li><a href="https://github.com/go-git/go-git/commit/de1d5a5978b9599ca3dacd58bbf699e4bb4cf6bd"><code>de1d5a5</code></a> git: validate reference names</li> <li><a href="https://github.com/go-git/go-git/commit/d87110b492c94d99ebdaea732b23a54b7efba94b"><code>d87110b</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/948">#948</a> from go-git/dependabot/go_modules/cli/go-git/github.c...</li> <li>Additional commits viewable in <a href="https://github.com/go-git/go-git/compare/v5.7.0...v5.11.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/go-git/go-git/v5&package-manager=go_modules&previous-version=5.7.0&new-version=5.11.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-28 14:46:28 +02:00
github.com/go-git/go-billy/v5 v5.5.0 h1:yEY4yhzCDuMGSv83oGxiBotRzhwhNr8VZyphhiu+mTU=
github.com/go-git/go-billy/v5 v5.5.0/go.mod h1:hmexnoNsr2SJU1Ju67OaNz5ASJY3+sHgFRpCtpDCKow=
github.com/go-git/go-git-fixtures/v4 v4.3.2-0.20231010084843-55a94097c399 h1:eMje31YglSBqCdIqdhKBW8lokaMrL3uTkpGYlE2OOT4=
github.com/go-git/go-git-fixtures/v4 v4.3.2-0.20231010084843-55a94097c399/go.mod h1:1OCfN199q1Jm3HZlxleg+Dw/mwps2Wbk9frAWm+4FII=
github.com/go-git/go-git/v5 v5.11.0 h1:XIZc1p+8YzypNr34itUfSvYJcv+eYdTnTvOZ2vD3cA4=
github.com/go-git/go-git/v5 v5.11.0/go.mod h1:6GFcX2P3NM7FPBfpePbpLd21XxsgdAt+lKqXmCUiUCY=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
github.com/go-gl/glfw v0.0.0-20190409004039-e6da0acd62b1/go.mod h1:vR7hzQXu2zJy9AVAgeJqvqgH9Q5CA+iKCZ2gyEVpxRU=
github.com/go-gl/glfw/v3.3/glfw v0.0.0-20191125211704-12ad95a8df72/go.mod h1:tQ2UAYgL5IevRw8kRxooKSPJfGvJ9fJQFa0TUsXzTg8=
github.com/go-gl/glfw/v3.3/glfw v0.0.0-20200222043503-6f7a984d4dc4/go.mod h1:tQ2UAYgL5IevRw8kRxooKSPJfGvJ9fJQFa0TUsXzTg8=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/go-kit/kit v0.8.0/go.mod h1:xBxKIO96dXMWWy0MnWVtmwkA9/13aqxPnvrjFYMA2as=
github.com/go-logfmt/logfmt v0.3.0/go.mod h1:Qt1PoO58o5twSAckw1HlFXLmHsOX5/0LbT9GBnD5lWE=
github.com/go-logfmt/logfmt v0.4.0/go.mod h1:3RMwSq7FuexP4Kalkev3ejPJsZTpXXBr9+V4qmtdjCk=
github.com/go-openapi/analysis v0.21.2/go.mod h1:HZwRk4RRisyG8vx2Oe6aqeSQcoxRp47Xkp3+K6q+LdY=
feat: add ko support (#3653) continuing the PR by @developer-guy - [x] should be a publisher, as it does publish the images it builds every time - [x] `Default` method does not work - [x] the `fromConfig` thing should probably be on the defaults, too - [x] wire `--skip-ko` - [x] documentation - [x] more tests - [x] use same registry as docker tests does - [ ] see if we can make the log output match goreleaser's - [ ] ?? closes #2556 closes #3490 Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com> Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> Co-authored-by: actions-user <actions@github.com> Co-authored-by: Jason Hall <jason@chainguard.dev> Co-authored-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2023-01-17 03:34:49 +02:00
github.com/go-openapi/analysis v0.21.4 h1:ZDFLvSNxpDaomuCueM0BlSXxpANBlFYiBvr+GXrvIHc=
github.com/go-openapi/analysis v0.21.4/go.mod h1:4zQ35W4neeZTqh3ol0rv/O8JBbka9QyAgQRPp9y3pfo=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/go-openapi/errors v0.19.8/go.mod h1:cM//ZKUKyO06HSwqAelJ5NsEMMcpa6VpXe8DOa1Mi1M=
github.com/go-openapi/errors v0.19.9/go.mod h1:cM//ZKUKyO06HSwqAelJ5NsEMMcpa6VpXe8DOa1Mi1M=
github.com/go-openapi/errors v0.20.2/go.mod h1:cM//ZKUKyO06HSwqAelJ5NsEMMcpa6VpXe8DOa1Mi1M=
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419) Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.1.1 to 2.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's releases</a>.</em></p> <blockquote> <h2>v2.2.1</h2> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's changelog</a>.</em></p> <blockquote> <h1>v2.2.1</h1> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign/commit/12cbf9ea177d22bbf5cf028bcb4712b5f174ebc6"><code>12cbf9e</code></a> add changelog for v2.2.1 release (<a href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/827f24e9d4a1f8e845cb1597d02053410f5bbe2a"><code>827f24e</code></a> feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8ac891ff0e29ddc67965423bee8f826219c6eb0f"><code>8ac891f</code></a> Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li><a href="https://github.com/sigstore/cosign/commit/8b366c497bd22b9be7742d057b8f59083dcadee0"><code>8b366c4</code></a> add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/23920de5623a505921ba4e62fa97e2553eff4699"><code>23920de</code></a> chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/e022e1c13240d1ae5b3c408bc53e389154331713"><code>e022e1c</code></a> chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/28c59c5eca6386924cc8f381afe94efe1e957679"><code>28c59c5</code></a> add missing groups key (<a href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8e5bdcc0ff39b8dc1b477251fef521601df76ec0"><code>8e5bdcc</code></a> chore(deps): bump github.com/google/certificate-transparency-go (<a href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/510cac4ef54274823599082e3a57a556ccd5c9e5"><code>510cac4</code></a> chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/063902b1d78fed7c12c9d9ce06248d36963e8169"><code>063902b</code></a> chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 18:39:49 +02:00
github.com/go-openapi/errors v0.20.4 h1:unTcVm6PispJsMECE3zWgvG4xTiKda1LIR5rCRWLG6M=
github.com/go-openapi/errors v0.20.4/go.mod h1:Z3FlZ4I8jEGxjUK+bugx3on2mIAk4txuAOhlsB1FSgk=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/go-openapi/jsonpointer v0.19.3/go.mod h1:Pl9vOtqEWErmShwVjC8pYs9cog34VGT37dQOVbmoatg=
github.com/go-openapi/jsonpointer v0.19.5/go.mod h1:Pl9vOtqEWErmShwVjC8pYs9cog34VGT37dQOVbmoatg=
feat(deps): bump gocloud.dev from 0.29.0 to 0.30.0 (#4129) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.29.0 to 0.30.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.30.0</h2> <p><strong>blob</strong></p> <ul> <li><strong>all</strong>: Add <code>Upload</code> and <code>Download</code> methods that may be more efficient for some drivers.</li> <li><strong>s3blob</strong>: Add support for per-request <code>s3v2.Options</code>.</li> <li><strong>s3blob</strong>: Stop escaping second <code>/</code> in <code>//</code>; it's no longer necessary.</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>gcppubsub</strong>: Make it possible to configure <code>max_send_batch_size</code>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/d2d5bedb50683e2a6b893b75aafc193eca2715db"><code>d2d5bed</code></a> all: prep for release (<a href="https://redirect.github.com/google/go-cloud/issues/3263">#3263</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/c2e172b5a78def74973f7f3a8ece7c0bd6967432"><code>c2e172b</code></a> all: update dependencies (<a href="https://redirect.github.com/google/go-cloud/issues/3262">#3262</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/098177a48cae1bebfc90f88ed43d319444cab804"><code>098177a</code></a> blob/s3blob: fix the 'awssdk' argument examples</li> <li><a href="https://github.com/google/go-cloud/commit/2e4fad43f0b2606833b6a0de3e18628c70e11398"><code>2e4fad4</code></a> all: remove refs to deprecated xerrors</li> <li><a href="https://github.com/google/go-cloud/commit/1db413f1b3c4e344618b36401ba7e6dca3892929"><code>1db413f</code></a> pubsub/gcppubsub: make it possible to configure max_send_batch_size</li> <li><a href="https://github.com/google/go-cloud/commit/0c8428bf433136e7a4d96de0841f6373c6eacb53"><code>0c8428b</code></a> blob: Add Upload and Download methods that may be more efficient for some dri...</li> <li><a href="https://github.com/google/go-cloud/commit/54c71241a56f4c89eb64f587e5dc55667eaa40a3"><code>54c7124</code></a> all: cleanup duplicate import statements</li> <li><a href="https://github.com/google/go-cloud/commit/28b1328ae4fee939441faa5ee2e4eeba74c88ce7"><code>28b1328</code></a> all: minor code simplifications for returned boolean expressions</li> <li><a href="https://github.com/google/go-cloud/commit/2a407f5e6a71951384531445e25c58194f235062"><code>2a407f5</code></a> blob/gcsblob: Refresh goldens</li> <li><a href="https://github.com/google/go-cloud/commit/0cc16c8ae11e47028df24c4973debd6c56d29729"><code>0cc16c8</code></a> all: update goldens (<a href="https://redirect.github.com/google/go-cloud/issues/3252">#3252</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.29.0...v0.30.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.29.0&new-version=0.30.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-20 14:04:08 +02:00
github.com/go-openapi/jsonpointer v0.19.6/go.mod h1:osyAmYz/mB/C3I+WsTTSgw1ONzaLJoLCyoi6/zppojs=
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419) Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.1.1 to 2.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's releases</a>.</em></p> <blockquote> <h2>v2.2.1</h2> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's changelog</a>.</em></p> <blockquote> <h1>v2.2.1</h1> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign/commit/12cbf9ea177d22bbf5cf028bcb4712b5f174ebc6"><code>12cbf9e</code></a> add changelog for v2.2.1 release (<a href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/827f24e9d4a1f8e845cb1597d02053410f5bbe2a"><code>827f24e</code></a> feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8ac891ff0e29ddc67965423bee8f826219c6eb0f"><code>8ac891f</code></a> Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li><a href="https://github.com/sigstore/cosign/commit/8b366c497bd22b9be7742d057b8f59083dcadee0"><code>8b366c4</code></a> add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/23920de5623a505921ba4e62fa97e2553eff4699"><code>23920de</code></a> chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/e022e1c13240d1ae5b3c408bc53e389154331713"><code>e022e1c</code></a> chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/28c59c5eca6386924cc8f381afe94efe1e957679"><code>28c59c5</code></a> add missing groups key (<a href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8e5bdcc0ff39b8dc1b477251fef521601df76ec0"><code>8e5bdcc</code></a> chore(deps): bump github.com/google/certificate-transparency-go (<a href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/510cac4ef54274823599082e3a57a556ccd5c9e5"><code>510cac4</code></a> chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/063902b1d78fed7c12c9d9ce06248d36963e8169"><code>063902b</code></a> chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 18:39:49 +02:00
github.com/go-openapi/jsonpointer v0.20.0 h1:ESKJdU9ASRfaPNOPRx12IUyA1vn3R9GiE3KYD14BXdQ=
github.com/go-openapi/jsonpointer v0.20.0/go.mod h1:6PGzBjjIIumbLYysB73Klnms1mwnU4G3YHOECG3CedA=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/go-openapi/jsonreference v0.19.6/go.mod h1:diGHMEHg2IqXZGKxqyvWdfWU/aim5Dprw5bqpKkTvns=
feat: add ko support (#3653) continuing the PR by @developer-guy - [x] should be a publisher, as it does publish the images it builds every time - [x] `Default` method does not work - [x] the `fromConfig` thing should probably be on the defaults, too - [x] wire `--skip-ko` - [x] documentation - [x] more tests - [x] use same registry as docker tests does - [ ] see if we can make the log output match goreleaser's - [ ] ?? closes #2556 closes #3490 Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com> Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> Co-authored-by: actions-user <actions@github.com> Co-authored-by: Jason Hall <jason@chainguard.dev> Co-authored-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2023-01-17 03:34:49 +02:00
github.com/go-openapi/jsonreference v0.20.0/go.mod h1:Ag74Ico3lPc+zR+qjn4XBUmXymS4zJbYVCZmcgkasdo=
feat(deps): bump gocloud.dev from 0.29.0 to 0.30.0 (#4129) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.29.0 to 0.30.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.30.0</h2> <p><strong>blob</strong></p> <ul> <li><strong>all</strong>: Add <code>Upload</code> and <code>Download</code> methods that may be more efficient for some drivers.</li> <li><strong>s3blob</strong>: Add support for per-request <code>s3v2.Options</code>.</li> <li><strong>s3blob</strong>: Stop escaping second <code>/</code> in <code>//</code>; it's no longer necessary.</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>gcppubsub</strong>: Make it possible to configure <code>max_send_batch_size</code>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/d2d5bedb50683e2a6b893b75aafc193eca2715db"><code>d2d5bed</code></a> all: prep for release (<a href="https://redirect.github.com/google/go-cloud/issues/3263">#3263</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/c2e172b5a78def74973f7f3a8ece7c0bd6967432"><code>c2e172b</code></a> all: update dependencies (<a href="https://redirect.github.com/google/go-cloud/issues/3262">#3262</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/098177a48cae1bebfc90f88ed43d319444cab804"><code>098177a</code></a> blob/s3blob: fix the 'awssdk' argument examples</li> <li><a href="https://github.com/google/go-cloud/commit/2e4fad43f0b2606833b6a0de3e18628c70e11398"><code>2e4fad4</code></a> all: remove refs to deprecated xerrors</li> <li><a href="https://github.com/google/go-cloud/commit/1db413f1b3c4e344618b36401ba7e6dca3892929"><code>1db413f</code></a> pubsub/gcppubsub: make it possible to configure max_send_batch_size</li> <li><a href="https://github.com/google/go-cloud/commit/0c8428bf433136e7a4d96de0841f6373c6eacb53"><code>0c8428b</code></a> blob: Add Upload and Download methods that may be more efficient for some dri...</li> <li><a href="https://github.com/google/go-cloud/commit/54c71241a56f4c89eb64f587e5dc55667eaa40a3"><code>54c7124</code></a> all: cleanup duplicate import statements</li> <li><a href="https://github.com/google/go-cloud/commit/28b1328ae4fee939441faa5ee2e4eeba74c88ce7"><code>28b1328</code></a> all: minor code simplifications for returned boolean expressions</li> <li><a href="https://github.com/google/go-cloud/commit/2a407f5e6a71951384531445e25c58194f235062"><code>2a407f5</code></a> blob/gcsblob: Refresh goldens</li> <li><a href="https://github.com/google/go-cloud/commit/0cc16c8ae11e47028df24c4973debd6c56d29729"><code>0cc16c8</code></a> all: update goldens (<a href="https://redirect.github.com/google/go-cloud/issues/3252">#3252</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.29.0...v0.30.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.29.0&new-version=0.30.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-20 14:04:08 +02:00
github.com/go-openapi/jsonreference v0.20.2 h1:3sVjiK66+uXK/6oQ8xgcRKcFgQ5KXa2KvnJRumpMGbE=
github.com/go-openapi/jsonreference v0.20.2/go.mod h1:Bl1zwGIM8/wsvqjsOQLJ/SH+En5Ap4rVB5KVcIDZG2k=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/go-openapi/loads v0.21.1/go.mod h1:/DtAMXXneXFjbQMGEtbamCZb+4x7eGwkvZCvBmwUG+g=
feat: add ko support (#3653) continuing the PR by @developer-guy - [x] should be a publisher, as it does publish the images it builds every time - [x] `Default` method does not work - [x] the `fromConfig` thing should probably be on the defaults, too - [x] wire `--skip-ko` - [x] documentation - [x] more tests - [x] use same registry as docker tests does - [ ] see if we can make the log output match goreleaser's - [ ] ?? closes #2556 closes #3490 Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com> Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> Co-authored-by: actions-user <actions@github.com> Co-authored-by: Jason Hall <jason@chainguard.dev> Co-authored-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2023-01-17 03:34:49 +02:00
github.com/go-openapi/loads v0.21.2 h1:r2a/xFIYeZ4Qd2TnGpWDIQNcP80dIaZgf704za8enro=
github.com/go-openapi/loads v0.21.2/go.mod h1:Jq58Os6SSGz0rzh62ptiu8Z31I+OTHqmULx5e/gJbNw=
feat(deps): bump github.com/sigstore/rekor from 1.0.1 to 1.1.1 (#3979) Bumps [github.com/sigstore/rekor](https://github.com/sigstore/rekor) from 1.0.1 to 1.1.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/rekor/releases">github.com/sigstore/rekor's releases</a>.</em></p> <blockquote> <h1>v1.1.1</h1> <h2>Functional Enhancements</h2> <ul> <li>Refactor Trillian client with exported methods (<a href="https://redirect.github.com/sigstore/rekor/issues/1454">#1454</a>)</li> <li>Switch to official redis-go client (<a href="https://redirect.github.com/sigstore/rekor/issues/1459">#1459</a>)</li> <li>Remove replace in go.mod (<a href="https://redirect.github.com/sigstore/rekor/issues/1444">#1444</a>)</li> <li>Add Rekor OID info. (<a href="https://redirect.github.com/sigstore/rekor/issues/1390">#1390</a>)</li> </ul> <h2>Quality Enhancements</h2> <ul> <li>remove legacy encrypted cosign key (<a href="https://redirect.github.com/sigstore/rekor/issues/1446">#1446</a>)</li> <li>swap cjson dependency (<a href="https://redirect.github.com/sigstore/rekor/issues/1441">#1441</a>)</li> <li>Update release readme (<a href="https://redirect.github.com/sigstore/rekor/issues/1456">#1456</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-2h5h-59f5-c5x9</li> </ul> <h2>Contributors</h2> <ul> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Carlos Tadeu Panato Junior</li> <li>Ceridwen Coghlan</li> <li>Hayden B</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/sigstore/rekor/compare/v1.1.0...v1.1.1">https://github.com/sigstore/rekor/compare/v1.1.0...v1.1.1</a></p> <h1>v1.1.0</h1> <h2>Functional Enhancements</h2> <ul> <li>improve validation on intoto v0.0.2 type (<a href="https://redirect.github.com/sigstore/rekor/issues/1351">#1351</a>)</li> <li>add feature to limit HTTP request body length to process (<a href="https://redirect.github.com/sigstore/rekor/issues/1334">#1334</a>)</li> <li>add information about the file size limit (<a href="https://redirect.github.com/sigstore/rekor/issues/1313">#1313</a>)</li> <li>Add script to backfill Redis from Rekor (<a href="https://redirect.github.com/sigstore/rekor/issues/1163">#1163</a>)</li> <li>Feature: add search support for sha512 (<a href="https://redirect.github.com/sigstore/rekor/issues/1142">#1142</a>)</li> </ul> <h2>Quality Enhancements</h2> <ul> <li>fuzzing: refactor OSS-Fuzz build script (<a href="https://redirect.github.com/sigstore/rekor/issues/1377">#1377</a>)</li> <li>Update cloudbuild for cosign 2.0 (<a href="https://redirect.github.com/sigstore/rekor/issues/1375">#1375</a>)</li> <li>Tests - Additional sharding tests (<a href="https://redirect.github.com/sigstore/rekor/issues/1180">#1180</a>)</li> <li>jar type: add fuzzer for 3rd-party dep (<a href="https://redirect.github.com/sigstore/rekor/issues/1360">#1360</a>)</li> <li>update cosign to 2.0.0 and builder image and also cosign flags (<a href="https://redirect.github.com/sigstore/rekor/issues/1368">#1368</a>)</li> <li>fuzzing: move alpine utils to fuzz utils (<a href="https://redirect.github.com/sigstore/rekor/issues/1335">#1335</a>)</li> <li>fuzzing: add seed for alpine fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1342">#1342</a>)</li> <li>jar: add v001 fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1327">#1327</a>)</li> <li>fuzzing: open writer later in fuzz utils (<a href="https://redirect.github.com/sigstore/rekor/issues/1326">#1326</a>)</li> <li>fuzzing: remove tar operations in alpine fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1322">#1322</a>)</li> <li>alpine: add v001 fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1316">#1316</a>)</li> <li>hashedrekord: add v001 fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1315">#1315</a>)</li> <li>fuzzing: add call to IndexKeys in multiple fuzzers (<a href="https://redirect.github.com/sigstore/rekor/issues/1302">#1302</a>)</li> <li>fuzzing: improve cose fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1300">#1300</a>)</li> <li>fuzzing: improve fuzz utils (<a href="https://redirect.github.com/sigstore/rekor/issues/1298">#1298</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/rekor/blob/main/CHANGELOG.md">github.com/sigstore/rekor's changelog</a>.</em></p> <blockquote> <h1>v1.1.1</h1> <h2>Functional Enhancements</h2> <ul> <li>Refactor Trillian client with exported methods (<a href="https://redirect.github.com/sigstore/rekor/issues/1454">#1454</a>)</li> <li>Switch to official redis-go client (<a href="https://redirect.github.com/sigstore/rekor/issues/1459">#1459</a>)</li> <li>Remove replace in go.mod (<a href="https://redirect.github.com/sigstore/rekor/issues/1444">#1444</a>)</li> <li>Add Rekor OID info. (<a href="https://redirect.github.com/sigstore/rekor/issues/1390">#1390</a>)</li> </ul> <h2>Quality Enhancements</h2> <ul> <li>remove legacy encrypted cosign key (<a href="https://redirect.github.com/sigstore/rekor/issues/1446">#1446</a>)</li> <li>swap cjson dependency (<a href="https://redirect.github.com/sigstore/rekor/issues/1441">#1441</a>)</li> <li>Update release readme (<a href="https://redirect.github.com/sigstore/rekor/issues/1456">#1456</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-2h5h-59f5-c5x9</li> </ul> <h2>Contributors</h2> <ul> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Carlos Tadeu Panato Junior</li> <li>Ceridwen Coghlan</li> <li>Hayden B</li> </ul> <h1>v1.1.0</h1> <h2>Functional Enhancements</h2> <ul> <li>improve validation on intoto v0.0.2 type (<a href="https://redirect.github.com/sigstore/rekor/issues/1351">#1351</a>)</li> <li>add feature to limit HTTP request body length to process (<a href="https://redirect.github.com/sigstore/rekor/issues/1334">#1334</a>)</li> <li>add information about the file size limit (<a href="https://redirect.github.com/sigstore/rekor/issues/1313">#1313</a>)</li> <li>Add script to backfill Redis from Rekor (<a href="https://redirect.github.com/sigstore/rekor/issues/1163">#1163</a>)</li> <li>Feature: add search support for sha512 (<a href="https://redirect.github.com/sigstore/rekor/issues/1142">#1142</a>)</li> </ul> <h2>Quality Enhancements</h2> <ul> <li>fuzzing: refactor OSS-Fuzz build script (<a href="https://redirect.github.com/sigstore/rekor/issues/1377">#1377</a>)</li> <li>Update cloudbuild for cosign 2.0 (<a href="https://redirect.github.com/sigstore/rekor/issues/1375">#1375</a>)</li> <li>Tests - Additional sharding tests (<a href="https://redirect.github.com/sigstore/rekor/issues/1180">#1180</a>)</li> <li>jar type: add fuzzer for 3rd-party dep (<a href="https://redirect.github.com/sigstore/rekor/issues/1360">#1360</a>)</li> <li>update cosign to 2.0.0 and builder image and also cosign flags (<a href="https://redirect.github.com/sigstore/rekor/issues/1368">#1368</a>)</li> <li>fuzzing: move alpine utils to fuzz utils (<a href="https://redirect.github.com/sigstore/rekor/issues/1335">#1335</a>)</li> <li>fuzzing: add seed for alpine fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1342">#1342</a>)</li> <li>jar: add v001 fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1327">#1327</a>)</li> <li>fuzzing: open writer later in fuzz utils (<a href="https://redirect.github.com/sigstore/rekor/issues/1326">#1326</a>)</li> <li>fuzzing: remove tar operations in alpine fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1322">#1322</a>)</li> <li>alpine: add v001 fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1316">#1316</a>)</li> <li>hashedrekord: add v001 fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1315">#1315</a>)</li> <li>fuzzing: add call to IndexKeys in multiple fuzzers (<a href="https://redirect.github.com/sigstore/rekor/issues/1302">#1302</a>)</li> <li>fuzzing: improve cose fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1300">#1300</a>)</li> <li>fuzzing: improve fuzz utils (<a href="https://redirect.github.com/sigstore/rekor/issues/1298">#1298</a>)</li> <li>fuzzing: improve alpine fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1273">#1273</a>)</li> <li>fuzzing: go mod edit go-fuzz-headers (<a href="https://redirect.github.com/sigstore/rekor/issues/1272">#1272</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/rekor/commit/0c1914e5e955cb9f514e32b222cf61a13e91ab08"><code>0c1914e</code></a> update CHANGELOG for v1.1.1 (<a href="https://redirect.github.com/sigstore/rekor/issues/1462">#1462</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/cf42ace82667025fe128f7a50cf6b4cdff51cc48"><code>cf42ace</code></a> Merge pull request from GHSA-2h5h-59f5-c5x9</li> <li><a href="https://github.com/sigstore/rekor/commit/46ac0b224e673b969457597b15af2d125ae8c5c2"><code>46ac0b2</code></a> Refactor Trillian client with exported methods (<a href="https://redirect.github.com/sigstore/rekor/issues/1454">#1454</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/5d6e9723b1d251001906c5583b0fd6fe7e3a1cb3"><code>5d6e972</code></a> build(deps): bump github.com/redis/go-redis/v9 from 9.0.3 to 9.0.4 (<a href="https://redirect.github.com/sigstore/rekor/issues/1460">#1460</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/baa14ce4ebe621399ff8330dd8ddc4a6ca2e2533"><code>baa14ce</code></a> Switch to official redis-go client (<a href="https://redirect.github.com/sigstore/rekor/issues/1459">#1459</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/059e097a0b6856ff6ed79c96cba171df691eb3d8"><code>059e097</code></a> build(deps): bump github.com/go-playground/validator/v10 (<a href="https://redirect.github.com/sigstore/rekor/issues/1457">#1457</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/1f75c792567e6a4b2fa0ebb5e12fe500434d33b1"><code>1f75c79</code></a> Update release readme (<a href="https://redirect.github.com/sigstore/rekor/issues/1456">#1456</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/98163f336ce3db11d776c0eabc4c7bccda7612dd"><code>98163f3</code></a> build(deps): bump github/codeql-action from 2.3.1 to 2.3.2 (<a href="https://redirect.github.com/sigstore/rekor/issues/1455">#1455</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/24cb647106d74051ba70ce867b5c7319ad29e3b9"><code>24cb647</code></a> Remove replace in go.mod (<a href="https://redirect.github.com/sigstore/rekor/issues/1444">#1444</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/39bd69bc7c474ff07fef392ff139d0c01c2e116a"><code>39bd69b</code></a> Add Rekor OID info. (<a href="https://redirect.github.com/sigstore/rekor/issues/1390">#1390</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/rekor/compare/v1.0.1...v1.1.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/rekor&package-manager=go_modules&previous-version=1.0.1&new-version=1.1.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-04 04:11:29 +02:00
github.com/go-openapi/runtime v0.26.0 h1:HYOFtG00FM1UvqrcxbEJg/SwvDRvYLQKGhw2zaQjTcc=
github.com/go-openapi/runtime v0.26.0/go.mod h1:QgRGeZwrUcSHdeh4Ka9Glvo0ug1LC5WyE+EV88plZrQ=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/go-openapi/spec v0.20.4/go.mod h1:faYFR1CvsJZ0mNsmsphTMSoRrNV3TEDoAM7FOEWeq8I=
feat: add ko support (#3653) continuing the PR by @developer-guy - [x] should be a publisher, as it does publish the images it builds every time - [x] `Default` method does not work - [x] the `fromConfig` thing should probably be on the defaults, too - [x] wire `--skip-ko` - [x] documentation - [x] more tests - [x] use same registry as docker tests does - [ ] see if we can make the log output match goreleaser's - [ ] ?? closes #2556 closes #3490 Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com> Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> Co-authored-by: actions-user <actions@github.com> Co-authored-by: Jason Hall <jason@chainguard.dev> Co-authored-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2023-01-17 03:34:49 +02:00
github.com/go-openapi/spec v0.20.6/go.mod h1:2OpW+JddWPrpXSCIX8eOx7lZ5iyuWj3RYR6VaaBKcWA=
feat(deps): bump github.com/sigstore/rekor from 1.0.1 to 1.1.1 (#3979) Bumps [github.com/sigstore/rekor](https://github.com/sigstore/rekor) from 1.0.1 to 1.1.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/rekor/releases">github.com/sigstore/rekor's releases</a>.</em></p> <blockquote> <h1>v1.1.1</h1> <h2>Functional Enhancements</h2> <ul> <li>Refactor Trillian client with exported methods (<a href="https://redirect.github.com/sigstore/rekor/issues/1454">#1454</a>)</li> <li>Switch to official redis-go client (<a href="https://redirect.github.com/sigstore/rekor/issues/1459">#1459</a>)</li> <li>Remove replace in go.mod (<a href="https://redirect.github.com/sigstore/rekor/issues/1444">#1444</a>)</li> <li>Add Rekor OID info. (<a href="https://redirect.github.com/sigstore/rekor/issues/1390">#1390</a>)</li> </ul> <h2>Quality Enhancements</h2> <ul> <li>remove legacy encrypted cosign key (<a href="https://redirect.github.com/sigstore/rekor/issues/1446">#1446</a>)</li> <li>swap cjson dependency (<a href="https://redirect.github.com/sigstore/rekor/issues/1441">#1441</a>)</li> <li>Update release readme (<a href="https://redirect.github.com/sigstore/rekor/issues/1456">#1456</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-2h5h-59f5-c5x9</li> </ul> <h2>Contributors</h2> <ul> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Carlos Tadeu Panato Junior</li> <li>Ceridwen Coghlan</li> <li>Hayden B</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/sigstore/rekor/compare/v1.1.0...v1.1.1">https://github.com/sigstore/rekor/compare/v1.1.0...v1.1.1</a></p> <h1>v1.1.0</h1> <h2>Functional Enhancements</h2> <ul> <li>improve validation on intoto v0.0.2 type (<a href="https://redirect.github.com/sigstore/rekor/issues/1351">#1351</a>)</li> <li>add feature to limit HTTP request body length to process (<a href="https://redirect.github.com/sigstore/rekor/issues/1334">#1334</a>)</li> <li>add information about the file size limit (<a href="https://redirect.github.com/sigstore/rekor/issues/1313">#1313</a>)</li> <li>Add script to backfill Redis from Rekor (<a href="https://redirect.github.com/sigstore/rekor/issues/1163">#1163</a>)</li> <li>Feature: add search support for sha512 (<a href="https://redirect.github.com/sigstore/rekor/issues/1142">#1142</a>)</li> </ul> <h2>Quality Enhancements</h2> <ul> <li>fuzzing: refactor OSS-Fuzz build script (<a href="https://redirect.github.com/sigstore/rekor/issues/1377">#1377</a>)</li> <li>Update cloudbuild for cosign 2.0 (<a href="https://redirect.github.com/sigstore/rekor/issues/1375">#1375</a>)</li> <li>Tests - Additional sharding tests (<a href="https://redirect.github.com/sigstore/rekor/issues/1180">#1180</a>)</li> <li>jar type: add fuzzer for 3rd-party dep (<a href="https://redirect.github.com/sigstore/rekor/issues/1360">#1360</a>)</li> <li>update cosign to 2.0.0 and builder image and also cosign flags (<a href="https://redirect.github.com/sigstore/rekor/issues/1368">#1368</a>)</li> <li>fuzzing: move alpine utils to fuzz utils (<a href="https://redirect.github.com/sigstore/rekor/issues/1335">#1335</a>)</li> <li>fuzzing: add seed for alpine fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1342">#1342</a>)</li> <li>jar: add v001 fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1327">#1327</a>)</li> <li>fuzzing: open writer later in fuzz utils (<a href="https://redirect.github.com/sigstore/rekor/issues/1326">#1326</a>)</li> <li>fuzzing: remove tar operations in alpine fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1322">#1322</a>)</li> <li>alpine: add v001 fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1316">#1316</a>)</li> <li>hashedrekord: add v001 fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1315">#1315</a>)</li> <li>fuzzing: add call to IndexKeys in multiple fuzzers (<a href="https://redirect.github.com/sigstore/rekor/issues/1302">#1302</a>)</li> <li>fuzzing: improve cose fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1300">#1300</a>)</li> <li>fuzzing: improve fuzz utils (<a href="https://redirect.github.com/sigstore/rekor/issues/1298">#1298</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/rekor/blob/main/CHANGELOG.md">github.com/sigstore/rekor's changelog</a>.</em></p> <blockquote> <h1>v1.1.1</h1> <h2>Functional Enhancements</h2> <ul> <li>Refactor Trillian client with exported methods (<a href="https://redirect.github.com/sigstore/rekor/issues/1454">#1454</a>)</li> <li>Switch to official redis-go client (<a href="https://redirect.github.com/sigstore/rekor/issues/1459">#1459</a>)</li> <li>Remove replace in go.mod (<a href="https://redirect.github.com/sigstore/rekor/issues/1444">#1444</a>)</li> <li>Add Rekor OID info. (<a href="https://redirect.github.com/sigstore/rekor/issues/1390">#1390</a>)</li> </ul> <h2>Quality Enhancements</h2> <ul> <li>remove legacy encrypted cosign key (<a href="https://redirect.github.com/sigstore/rekor/issues/1446">#1446</a>)</li> <li>swap cjson dependency (<a href="https://redirect.github.com/sigstore/rekor/issues/1441">#1441</a>)</li> <li>Update release readme (<a href="https://redirect.github.com/sigstore/rekor/issues/1456">#1456</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-2h5h-59f5-c5x9</li> </ul> <h2>Contributors</h2> <ul> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Carlos Tadeu Panato Junior</li> <li>Ceridwen Coghlan</li> <li>Hayden B</li> </ul> <h1>v1.1.0</h1> <h2>Functional Enhancements</h2> <ul> <li>improve validation on intoto v0.0.2 type (<a href="https://redirect.github.com/sigstore/rekor/issues/1351">#1351</a>)</li> <li>add feature to limit HTTP request body length to process (<a href="https://redirect.github.com/sigstore/rekor/issues/1334">#1334</a>)</li> <li>add information about the file size limit (<a href="https://redirect.github.com/sigstore/rekor/issues/1313">#1313</a>)</li> <li>Add script to backfill Redis from Rekor (<a href="https://redirect.github.com/sigstore/rekor/issues/1163">#1163</a>)</li> <li>Feature: add search support for sha512 (<a href="https://redirect.github.com/sigstore/rekor/issues/1142">#1142</a>)</li> </ul> <h2>Quality Enhancements</h2> <ul> <li>fuzzing: refactor OSS-Fuzz build script (<a href="https://redirect.github.com/sigstore/rekor/issues/1377">#1377</a>)</li> <li>Update cloudbuild for cosign 2.0 (<a href="https://redirect.github.com/sigstore/rekor/issues/1375">#1375</a>)</li> <li>Tests - Additional sharding tests (<a href="https://redirect.github.com/sigstore/rekor/issues/1180">#1180</a>)</li> <li>jar type: add fuzzer for 3rd-party dep (<a href="https://redirect.github.com/sigstore/rekor/issues/1360">#1360</a>)</li> <li>update cosign to 2.0.0 and builder image and also cosign flags (<a href="https://redirect.github.com/sigstore/rekor/issues/1368">#1368</a>)</li> <li>fuzzing: move alpine utils to fuzz utils (<a href="https://redirect.github.com/sigstore/rekor/issues/1335">#1335</a>)</li> <li>fuzzing: add seed for alpine fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1342">#1342</a>)</li> <li>jar: add v001 fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1327">#1327</a>)</li> <li>fuzzing: open writer later in fuzz utils (<a href="https://redirect.github.com/sigstore/rekor/issues/1326">#1326</a>)</li> <li>fuzzing: remove tar operations in alpine fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1322">#1322</a>)</li> <li>alpine: add v001 fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1316">#1316</a>)</li> <li>hashedrekord: add v001 fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1315">#1315</a>)</li> <li>fuzzing: add call to IndexKeys in multiple fuzzers (<a href="https://redirect.github.com/sigstore/rekor/issues/1302">#1302</a>)</li> <li>fuzzing: improve cose fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1300">#1300</a>)</li> <li>fuzzing: improve fuzz utils (<a href="https://redirect.github.com/sigstore/rekor/issues/1298">#1298</a>)</li> <li>fuzzing: improve alpine fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1273">#1273</a>)</li> <li>fuzzing: go mod edit go-fuzz-headers (<a href="https://redirect.github.com/sigstore/rekor/issues/1272">#1272</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/rekor/commit/0c1914e5e955cb9f514e32b222cf61a13e91ab08"><code>0c1914e</code></a> update CHANGELOG for v1.1.1 (<a href="https://redirect.github.com/sigstore/rekor/issues/1462">#1462</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/cf42ace82667025fe128f7a50cf6b4cdff51cc48"><code>cf42ace</code></a> Merge pull request from GHSA-2h5h-59f5-c5x9</li> <li><a href="https://github.com/sigstore/rekor/commit/46ac0b224e673b969457597b15af2d125ae8c5c2"><code>46ac0b2</code></a> Refactor Trillian client with exported methods (<a href="https://redirect.github.com/sigstore/rekor/issues/1454">#1454</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/5d6e9723b1d251001906c5583b0fd6fe7e3a1cb3"><code>5d6e972</code></a> build(deps): bump github.com/redis/go-redis/v9 from 9.0.3 to 9.0.4 (<a href="https://redirect.github.com/sigstore/rekor/issues/1460">#1460</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/baa14ce4ebe621399ff8330dd8ddc4a6ca2e2533"><code>baa14ce</code></a> Switch to official redis-go client (<a href="https://redirect.github.com/sigstore/rekor/issues/1459">#1459</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/059e097a0b6856ff6ed79c96cba171df691eb3d8"><code>059e097</code></a> build(deps): bump github.com/go-playground/validator/v10 (<a href="https://redirect.github.com/sigstore/rekor/issues/1457">#1457</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/1f75c792567e6a4b2fa0ebb5e12fe500434d33b1"><code>1f75c79</code></a> Update release readme (<a href="https://redirect.github.com/sigstore/rekor/issues/1456">#1456</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/98163f336ce3db11d776c0eabc4c7bccda7612dd"><code>98163f3</code></a> build(deps): bump github/codeql-action from 2.3.1 to 2.3.2 (<a href="https://redirect.github.com/sigstore/rekor/issues/1455">#1455</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/24cb647106d74051ba70ce867b5c7319ad29e3b9"><code>24cb647</code></a> Remove replace in go.mod (<a href="https://redirect.github.com/sigstore/rekor/issues/1444">#1444</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/39bd69bc7c474ff07fef392ff139d0c01c2e116a"><code>39bd69b</code></a> Add Rekor OID info. (<a href="https://redirect.github.com/sigstore/rekor/issues/1390">#1390</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/rekor/compare/v1.0.1...v1.1.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/rekor&package-manager=go_modules&previous-version=1.0.1&new-version=1.1.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-04 04:11:29 +02:00
github.com/go-openapi/spec v0.20.9 h1:xnlYNQAwKd2VQRRfwTEI0DcK+2cbuvI/0c7jx3gA8/8=
github.com/go-openapi/spec v0.20.9/go.mod h1:2OpW+JddWPrpXSCIX8eOx7lZ5iyuWj3RYR6VaaBKcWA=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/go-openapi/strfmt v0.21.0/go.mod h1:ZRQ409bWMj+SOgXofQAGTIo2Ebu72Gs+WaRADcS5iNg=
github.com/go-openapi/strfmt v0.21.1/go.mod h1:I/XVKeLc5+MM5oPNN7P6urMOpuLXEcNrCX/rPGuWb0k=
feat(deps): bump gocloud.dev from 0.27.0 to 0.28.0 (#3689) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.27.0 to 0.28.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.28.0</h2> <p><strong>BREAKING CHANGES</strong>:</p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK.</li> <li><strong>blob/azureblob</strong>: Updated to match recent breaking changes in the Azure packages (yes, again).</li> <li><strong>pubsub/awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>blob</strong></p> <ul> <li><strong>memblob</strong>: Fixed bug where use of <code>BeforeCopy</code> callback would drop the actual copying.</li> <li><strong>azureblob</strong>: Updated to match recent breaking changes in the Azure packages.</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>all</strong>: Simplified and improved batch sizing, should resolve issues with too-frequent polling in some situations.</li> <li><strong>azurepubsub</strong>: Made <code>ListenerTimeout</code> configurable.</li> <li><strong>gcppubsub</strong> and <strong>awssnssqs</strong>: Support lazy mode for <code>Nack</code> (where no explicit <code>Nack</code> is sent).</li> <li><strong>awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>secrets</strong></p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK. Use azidentity.NewDefaultAzureCredential.</li> </ul> <p><strong>sql</strong></p> <ul> <li><strong>gcp/cloudsql</strong>: Fixed IAM login.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/24166090495b8e084a23aa7d11fcc81ec33e4729"><code>2416609</code></a> all: prep for v0.28.0 (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3207">#3207</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/13f46eb8065d5ea62b757f5f0f11a56f48faf7cc"><code>13f46eb</code></a> pubsub: simplify and improve batch sizing, especially for low message rates</li> <li><a href="https://github.com/google/go-cloud/commit/8f2c2b9a392a8e4a3d7a4942f88f3df607f8f6d0"><code>8f2c2b9</code></a> pubsub/memsub: Add Options for batching (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3205">#3205</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fe0a3d75fe43c039258df25ebf102602526e3052"><code>fe0a3d7</code></a> pubsub/awssqs: Fix BeforeSend/As to enable changes to the sqs input message (...</li> <li><a href="https://github.com/google/go-cloud/commit/dfaf95af34dd9022a69a061028e0ceec98e9c670"><code>dfaf95a</code></a> secrets/azurekeyvault: Use azidentity.NewDefaultAzureCredential to support ot...</li> <li><a href="https://github.com/google/go-cloud/commit/1e26311532928f060c490a7fbf2be92b55ee12c4"><code>1e26311</code></a> blob: Remove some debug logging (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3197">#3197</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/43ed5a499864c08b7b6549ff7085f19634a1f02c"><code>43ed5a4</code></a> pubsub/gcppubsub: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3195">#3195</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/be80e70b3dcf7a6b86481881c7ac0b44a8095178"><code>be80e70</code></a> pubsub/awssnssqs: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3194">#3194</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/7d690993a53cf8cc2e7af07872876d58601f1261"><code>7d69099</code></a> blob/azblob: Update to latest, and restore As for dirlist (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3191">#3191</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/e942f3c339f0eb617ac4dbc7f37cc4e5920ee7cc"><code>e942f3c</code></a> blob/azblob: Restore As for List entry (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3188">#3188</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.27.0...v0.28.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.27.0&new-version=0.28.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-11 14:09:51 +02:00
github.com/go-openapi/strfmt v0.21.3/go.mod h1:k+RzNO0Da+k3FrrynSNN8F7n/peCmQQqbbXjtDfvmGg=
feat(deps): bump github.com/sigstore/rekor from 1.0.1 to 1.1.1 (#3979) Bumps [github.com/sigstore/rekor](https://github.com/sigstore/rekor) from 1.0.1 to 1.1.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/rekor/releases">github.com/sigstore/rekor's releases</a>.</em></p> <blockquote> <h1>v1.1.1</h1> <h2>Functional Enhancements</h2> <ul> <li>Refactor Trillian client with exported methods (<a href="https://redirect.github.com/sigstore/rekor/issues/1454">#1454</a>)</li> <li>Switch to official redis-go client (<a href="https://redirect.github.com/sigstore/rekor/issues/1459">#1459</a>)</li> <li>Remove replace in go.mod (<a href="https://redirect.github.com/sigstore/rekor/issues/1444">#1444</a>)</li> <li>Add Rekor OID info. (<a href="https://redirect.github.com/sigstore/rekor/issues/1390">#1390</a>)</li> </ul> <h2>Quality Enhancements</h2> <ul> <li>remove legacy encrypted cosign key (<a href="https://redirect.github.com/sigstore/rekor/issues/1446">#1446</a>)</li> <li>swap cjson dependency (<a href="https://redirect.github.com/sigstore/rekor/issues/1441">#1441</a>)</li> <li>Update release readme (<a href="https://redirect.github.com/sigstore/rekor/issues/1456">#1456</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-2h5h-59f5-c5x9</li> </ul> <h2>Contributors</h2> <ul> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Carlos Tadeu Panato Junior</li> <li>Ceridwen Coghlan</li> <li>Hayden B</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/sigstore/rekor/compare/v1.1.0...v1.1.1">https://github.com/sigstore/rekor/compare/v1.1.0...v1.1.1</a></p> <h1>v1.1.0</h1> <h2>Functional Enhancements</h2> <ul> <li>improve validation on intoto v0.0.2 type (<a href="https://redirect.github.com/sigstore/rekor/issues/1351">#1351</a>)</li> <li>add feature to limit HTTP request body length to process (<a href="https://redirect.github.com/sigstore/rekor/issues/1334">#1334</a>)</li> <li>add information about the file size limit (<a href="https://redirect.github.com/sigstore/rekor/issues/1313">#1313</a>)</li> <li>Add script to backfill Redis from Rekor (<a href="https://redirect.github.com/sigstore/rekor/issues/1163">#1163</a>)</li> <li>Feature: add search support for sha512 (<a href="https://redirect.github.com/sigstore/rekor/issues/1142">#1142</a>)</li> </ul> <h2>Quality Enhancements</h2> <ul> <li>fuzzing: refactor OSS-Fuzz build script (<a href="https://redirect.github.com/sigstore/rekor/issues/1377">#1377</a>)</li> <li>Update cloudbuild for cosign 2.0 (<a href="https://redirect.github.com/sigstore/rekor/issues/1375">#1375</a>)</li> <li>Tests - Additional sharding tests (<a href="https://redirect.github.com/sigstore/rekor/issues/1180">#1180</a>)</li> <li>jar type: add fuzzer for 3rd-party dep (<a href="https://redirect.github.com/sigstore/rekor/issues/1360">#1360</a>)</li> <li>update cosign to 2.0.0 and builder image and also cosign flags (<a href="https://redirect.github.com/sigstore/rekor/issues/1368">#1368</a>)</li> <li>fuzzing: move alpine utils to fuzz utils (<a href="https://redirect.github.com/sigstore/rekor/issues/1335">#1335</a>)</li> <li>fuzzing: add seed for alpine fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1342">#1342</a>)</li> <li>jar: add v001 fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1327">#1327</a>)</li> <li>fuzzing: open writer later in fuzz utils (<a href="https://redirect.github.com/sigstore/rekor/issues/1326">#1326</a>)</li> <li>fuzzing: remove tar operations in alpine fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1322">#1322</a>)</li> <li>alpine: add v001 fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1316">#1316</a>)</li> <li>hashedrekord: add v001 fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1315">#1315</a>)</li> <li>fuzzing: add call to IndexKeys in multiple fuzzers (<a href="https://redirect.github.com/sigstore/rekor/issues/1302">#1302</a>)</li> <li>fuzzing: improve cose fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1300">#1300</a>)</li> <li>fuzzing: improve fuzz utils (<a href="https://redirect.github.com/sigstore/rekor/issues/1298">#1298</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/rekor/blob/main/CHANGELOG.md">github.com/sigstore/rekor's changelog</a>.</em></p> <blockquote> <h1>v1.1.1</h1> <h2>Functional Enhancements</h2> <ul> <li>Refactor Trillian client with exported methods (<a href="https://redirect.github.com/sigstore/rekor/issues/1454">#1454</a>)</li> <li>Switch to official redis-go client (<a href="https://redirect.github.com/sigstore/rekor/issues/1459">#1459</a>)</li> <li>Remove replace in go.mod (<a href="https://redirect.github.com/sigstore/rekor/issues/1444">#1444</a>)</li> <li>Add Rekor OID info. (<a href="https://redirect.github.com/sigstore/rekor/issues/1390">#1390</a>)</li> </ul> <h2>Quality Enhancements</h2> <ul> <li>remove legacy encrypted cosign key (<a href="https://redirect.github.com/sigstore/rekor/issues/1446">#1446</a>)</li> <li>swap cjson dependency (<a href="https://redirect.github.com/sigstore/rekor/issues/1441">#1441</a>)</li> <li>Update release readme (<a href="https://redirect.github.com/sigstore/rekor/issues/1456">#1456</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-2h5h-59f5-c5x9</li> </ul> <h2>Contributors</h2> <ul> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Carlos Tadeu Panato Junior</li> <li>Ceridwen Coghlan</li> <li>Hayden B</li> </ul> <h1>v1.1.0</h1> <h2>Functional Enhancements</h2> <ul> <li>improve validation on intoto v0.0.2 type (<a href="https://redirect.github.com/sigstore/rekor/issues/1351">#1351</a>)</li> <li>add feature to limit HTTP request body length to process (<a href="https://redirect.github.com/sigstore/rekor/issues/1334">#1334</a>)</li> <li>add information about the file size limit (<a href="https://redirect.github.com/sigstore/rekor/issues/1313">#1313</a>)</li> <li>Add script to backfill Redis from Rekor (<a href="https://redirect.github.com/sigstore/rekor/issues/1163">#1163</a>)</li> <li>Feature: add search support for sha512 (<a href="https://redirect.github.com/sigstore/rekor/issues/1142">#1142</a>)</li> </ul> <h2>Quality Enhancements</h2> <ul> <li>fuzzing: refactor OSS-Fuzz build script (<a href="https://redirect.github.com/sigstore/rekor/issues/1377">#1377</a>)</li> <li>Update cloudbuild for cosign 2.0 (<a href="https://redirect.github.com/sigstore/rekor/issues/1375">#1375</a>)</li> <li>Tests - Additional sharding tests (<a href="https://redirect.github.com/sigstore/rekor/issues/1180">#1180</a>)</li> <li>jar type: add fuzzer for 3rd-party dep (<a href="https://redirect.github.com/sigstore/rekor/issues/1360">#1360</a>)</li> <li>update cosign to 2.0.0 and builder image and also cosign flags (<a href="https://redirect.github.com/sigstore/rekor/issues/1368">#1368</a>)</li> <li>fuzzing: move alpine utils to fuzz utils (<a href="https://redirect.github.com/sigstore/rekor/issues/1335">#1335</a>)</li> <li>fuzzing: add seed for alpine fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1342">#1342</a>)</li> <li>jar: add v001 fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1327">#1327</a>)</li> <li>fuzzing: open writer later in fuzz utils (<a href="https://redirect.github.com/sigstore/rekor/issues/1326">#1326</a>)</li> <li>fuzzing: remove tar operations in alpine fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1322">#1322</a>)</li> <li>alpine: add v001 fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1316">#1316</a>)</li> <li>hashedrekord: add v001 fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1315">#1315</a>)</li> <li>fuzzing: add call to IndexKeys in multiple fuzzers (<a href="https://redirect.github.com/sigstore/rekor/issues/1302">#1302</a>)</li> <li>fuzzing: improve cose fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1300">#1300</a>)</li> <li>fuzzing: improve fuzz utils (<a href="https://redirect.github.com/sigstore/rekor/issues/1298">#1298</a>)</li> <li>fuzzing: improve alpine fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1273">#1273</a>)</li> <li>fuzzing: go mod edit go-fuzz-headers (<a href="https://redirect.github.com/sigstore/rekor/issues/1272">#1272</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/rekor/commit/0c1914e5e955cb9f514e32b222cf61a13e91ab08"><code>0c1914e</code></a> update CHANGELOG for v1.1.1 (<a href="https://redirect.github.com/sigstore/rekor/issues/1462">#1462</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/cf42ace82667025fe128f7a50cf6b4cdff51cc48"><code>cf42ace</code></a> Merge pull request from GHSA-2h5h-59f5-c5x9</li> <li><a href="https://github.com/sigstore/rekor/commit/46ac0b224e673b969457597b15af2d125ae8c5c2"><code>46ac0b2</code></a> Refactor Trillian client with exported methods (<a href="https://redirect.github.com/sigstore/rekor/issues/1454">#1454</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/5d6e9723b1d251001906c5583b0fd6fe7e3a1cb3"><code>5d6e972</code></a> build(deps): bump github.com/redis/go-redis/v9 from 9.0.3 to 9.0.4 (<a href="https://redirect.github.com/sigstore/rekor/issues/1460">#1460</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/baa14ce4ebe621399ff8330dd8ddc4a6ca2e2533"><code>baa14ce</code></a> Switch to official redis-go client (<a href="https://redirect.github.com/sigstore/rekor/issues/1459">#1459</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/059e097a0b6856ff6ed79c96cba171df691eb3d8"><code>059e097</code></a> build(deps): bump github.com/go-playground/validator/v10 (<a href="https://redirect.github.com/sigstore/rekor/issues/1457">#1457</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/1f75c792567e6a4b2fa0ebb5e12fe500434d33b1"><code>1f75c79</code></a> Update release readme (<a href="https://redirect.github.com/sigstore/rekor/issues/1456">#1456</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/98163f336ce3db11d776c0eabc4c7bccda7612dd"><code>98163f3</code></a> build(deps): bump github/codeql-action from 2.3.1 to 2.3.2 (<a href="https://redirect.github.com/sigstore/rekor/issues/1455">#1455</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/24cb647106d74051ba70ce867b5c7319ad29e3b9"><code>24cb647</code></a> Remove replace in go.mod (<a href="https://redirect.github.com/sigstore/rekor/issues/1444">#1444</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/39bd69bc7c474ff07fef392ff139d0c01c2e116a"><code>39bd69b</code></a> Add Rekor OID info. (<a href="https://redirect.github.com/sigstore/rekor/issues/1390">#1390</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/rekor/compare/v1.0.1...v1.1.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/rekor&package-manager=go_modules&previous-version=1.0.1&new-version=1.1.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-04 04:11:29 +02:00
github.com/go-openapi/strfmt v0.21.7 h1:rspiXgNWgeUzhjo1YU01do6qsahtJNByjLVbPLNHb8k=
github.com/go-openapi/strfmt v0.21.7/go.mod h1:adeGTkxE44sPyLk0JV235VQAO/ZXUr8KAzYjclFs3ew=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/go-openapi/swag v0.19.5/go.mod h1:POnQmlKehdgb5mhVOsnJFsivZCEZ/vjK9gh66Z9tfKk=
github.com/go-openapi/swag v0.19.15/go.mod h1:QYRuS/SOXUCsnplDa677K7+DxSOj6IPNl/eQntq43wQ=
github.com/go-openapi/swag v0.21.1/go.mod h1:QYRuS/SOXUCsnplDa677K7+DxSOj6IPNl/eQntq43wQ=
feat: add ko support (#3653) continuing the PR by @developer-guy - [x] should be a publisher, as it does publish the images it builds every time - [x] `Default` method does not work - [x] the `fromConfig` thing should probably be on the defaults, too - [x] wire `--skip-ko` - [x] documentation - [x] more tests - [x] use same registry as docker tests does - [ ] see if we can make the log output match goreleaser's - [ ] ?? closes #2556 closes #3490 Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com> Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> Co-authored-by: actions-user <actions@github.com> Co-authored-by: Jason Hall <jason@chainguard.dev> Co-authored-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2023-01-17 03:34:49 +02:00
github.com/go-openapi/swag v0.22.3/go.mod h1:UzaqsxGiab7freDnrUUra0MwWfN/q7tE4j+VcZ0yl14=
feat(deps): bump github.com/google/ko from 0.14.1 to 0.15.0 (#4373) Bumps [github.com/google/ko](https://github.com/google/ko) from 0.14.1 to 0.15.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/ko/releases">github.com/google/ko's releases</a>.</em></p> <blockquote> <h2>v0.15.0</h2> <h2>What's Changed</h2> <ul> <li>implement dumb cache for images by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1102">ko-build/ko#1102</a></li> <li>fixed typo in configuration.md by <a href="https://github.com/samlaf"><code>@​samlaf</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1105">ko-build/ko#1105</a></li> <li>pkg/commands: fix dropped errors by <a href="https://github.com/alrs"><code>@​alrs</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1109">ko-build/ko#1109</a></li> <li>ci: add govulncheck by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1110">ko-build/ko#1110</a></li> <li>chore: remove refs to deprecated io/ioutil by <a href="https://github.com/testwill"><code>@​testwill</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1092">ko-build/ko#1092</a></li> <li>Update install docs to install ko using Scoop by <a href="https://github.com/pgrunm"><code>@​pgrunm</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1118">ko-build/ko#1118</a></li> <li>include go build output in build error by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1127">ko-build/ko#1127</a></li> <li>Use go1.21, clean up ci and drop go1.19 by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1137">ko-build/ko#1137</a></li> <li>Update e2e.yaml by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1141">ko-build/ko#1141</a></li> <li>handle newfound lint errors by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1142">ko-build/ko#1142</a></li> <li>fix test broken by lint fix by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1143">ko-build/ko#1143</a></li> <li>Bump actions/checkout from 3.6.0 to 4.0.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1136">ko-build/ko#1136</a></li> <li>fix env var for go env by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1140">ko-build/ko#1140</a></li> <li>docs: add docs for TF and Lambda by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1139">ko-build/ko#1139</a></li> <li>docs: add Lambda and TF pages to sidebar by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1144">ko-build/ko#1144</a></li> <li>include example using go packages by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1145">ko-build/ko#1145</a></li> <li>fix the release workflow and install instructions by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1150">ko-build/ko#1150</a></li> <li>update missing places that was using go1.20 by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1163">ko-build/ko#1163</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/samlaf"><code>@​samlaf</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1105">ko-build/ko#1105</a></li> <li><a href="https://github.com/alrs"><code>@​alrs</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1109">ko-build/ko#1109</a></li> <li><a href="https://github.com/testwill"><code>@​testwill</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1092">ko-build/ko#1092</a></li> <li><a href="https://github.com/pgrunm"><code>@​pgrunm</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1118">ko-build/ko#1118</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/ko-build/ko/compare/v0.14.1...v0.15.0">https://github.com/ko-build/ko/compare/v0.14.1...v0.15.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ko-build/ko/commit/31035ad2026bfbafaa4f009baefe72463af1b3a7"><code>31035ad</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1164">#1164</a> from ko-build/dependabot/go_modules/golang.org/x/net...</li> <li><a href="https://github.com/ko-build/ko/commit/ba952fd091f9d27ee5c136e842b5e94dd715100c"><code>ba952fd</code></a> Bump golang.org/x/net from 0.16.0 to 0.17.0</li> <li><a href="https://github.com/ko-build/ko/commit/277f5d74353950c8663fc04b7546f66e57bd6aaf"><code>277f5d7</code></a> update missing places that was using go1.20 (<a href="https://redirect.github.com/google/ko/issues/1163">#1163</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/b8b3b21f8348d7cab863fe1b4eaa47dfc47632da"><code>b8b3b21</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1162">#1162</a> from ko-build/dependabot/go_modules/github.com/googl...</li> <li><a href="https://github.com/ko-build/ko/commit/4890ab2887b653d3c340de4d119bfd17b703f182"><code>4890ab2</code></a> Bump github.com/google/go-cmp from 0.5.9 to 0.6.0</li> <li><a href="https://github.com/ko-build/ko/commit/30b62aee3faf6866cee6513ea7eb13f5a27cd7ca"><code>30b62ae</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1161">#1161</a> from ko-build/dependabot/go_modules/github.com/spf13...</li> <li><a href="https://github.com/ko-build/ko/commit/449bcb61926cb3e3bcf191e8ca53fad5ab3a4e3c"><code>449bcb6</code></a> Bump github.com/spf13/viper from 1.16.0 to 1.17.0</li> <li><a href="https://github.com/ko-build/ko/commit/c543dd83cc75cd849fb95637ea29e3c7c66d6f87"><code>c543dd8</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1160">#1160</a> from ko-build/dependabot/go_modules/golang.org/x/too...</li> <li><a href="https://github.com/ko-build/ko/commit/c1ae5f5ce4fe058830f24827c853d4db39a95250"><code>c1ae5f5</code></a> Bump golang.org/x/tools from 0.13.0 to 0.14.0</li> <li><a href="https://github.com/ko-build/ko/commit/e50d2fd5ff0ec88ac837ffe6f6c2f122eb54b9f8"><code>e50d2fd</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1159">#1159</a> from ko-build/dependabot/go_modules/golang.org/x/syn...</li> <li>Additional commits viewable in <a href="https://github.com/google/ko/compare/v0.14.1...v0.15.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/ko&package-manager=go_modules&previous-version=0.14.1&new-version=0.15.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-17 17:47:47 +02:00
github.com/go-openapi/swag v0.22.4 h1:QLMzNJnMGPRNDCbySlcj1x01tzU8/9LTTL9hZZZogBU=
github.com/go-openapi/swag v0.22.4/go.mod h1:UzaqsxGiab7freDnrUUra0MwWfN/q7tE4j+VcZ0yl14=
feat(deps): bump github.com/sigstore/rekor from 1.0.1 to 1.1.1 (#3979) Bumps [github.com/sigstore/rekor](https://github.com/sigstore/rekor) from 1.0.1 to 1.1.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/rekor/releases">github.com/sigstore/rekor's releases</a>.</em></p> <blockquote> <h1>v1.1.1</h1> <h2>Functional Enhancements</h2> <ul> <li>Refactor Trillian client with exported methods (<a href="https://redirect.github.com/sigstore/rekor/issues/1454">#1454</a>)</li> <li>Switch to official redis-go client (<a href="https://redirect.github.com/sigstore/rekor/issues/1459">#1459</a>)</li> <li>Remove replace in go.mod (<a href="https://redirect.github.com/sigstore/rekor/issues/1444">#1444</a>)</li> <li>Add Rekor OID info. (<a href="https://redirect.github.com/sigstore/rekor/issues/1390">#1390</a>)</li> </ul> <h2>Quality Enhancements</h2> <ul> <li>remove legacy encrypted cosign key (<a href="https://redirect.github.com/sigstore/rekor/issues/1446">#1446</a>)</li> <li>swap cjson dependency (<a href="https://redirect.github.com/sigstore/rekor/issues/1441">#1441</a>)</li> <li>Update release readme (<a href="https://redirect.github.com/sigstore/rekor/issues/1456">#1456</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-2h5h-59f5-c5x9</li> </ul> <h2>Contributors</h2> <ul> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Carlos Tadeu Panato Junior</li> <li>Ceridwen Coghlan</li> <li>Hayden B</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/sigstore/rekor/compare/v1.1.0...v1.1.1">https://github.com/sigstore/rekor/compare/v1.1.0...v1.1.1</a></p> <h1>v1.1.0</h1> <h2>Functional Enhancements</h2> <ul> <li>improve validation on intoto v0.0.2 type (<a href="https://redirect.github.com/sigstore/rekor/issues/1351">#1351</a>)</li> <li>add feature to limit HTTP request body length to process (<a href="https://redirect.github.com/sigstore/rekor/issues/1334">#1334</a>)</li> <li>add information about the file size limit (<a href="https://redirect.github.com/sigstore/rekor/issues/1313">#1313</a>)</li> <li>Add script to backfill Redis from Rekor (<a href="https://redirect.github.com/sigstore/rekor/issues/1163">#1163</a>)</li> <li>Feature: add search support for sha512 (<a href="https://redirect.github.com/sigstore/rekor/issues/1142">#1142</a>)</li> </ul> <h2>Quality Enhancements</h2> <ul> <li>fuzzing: refactor OSS-Fuzz build script (<a href="https://redirect.github.com/sigstore/rekor/issues/1377">#1377</a>)</li> <li>Update cloudbuild for cosign 2.0 (<a href="https://redirect.github.com/sigstore/rekor/issues/1375">#1375</a>)</li> <li>Tests - Additional sharding tests (<a href="https://redirect.github.com/sigstore/rekor/issues/1180">#1180</a>)</li> <li>jar type: add fuzzer for 3rd-party dep (<a href="https://redirect.github.com/sigstore/rekor/issues/1360">#1360</a>)</li> <li>update cosign to 2.0.0 and builder image and also cosign flags (<a href="https://redirect.github.com/sigstore/rekor/issues/1368">#1368</a>)</li> <li>fuzzing: move alpine utils to fuzz utils (<a href="https://redirect.github.com/sigstore/rekor/issues/1335">#1335</a>)</li> <li>fuzzing: add seed for alpine fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1342">#1342</a>)</li> <li>jar: add v001 fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1327">#1327</a>)</li> <li>fuzzing: open writer later in fuzz utils (<a href="https://redirect.github.com/sigstore/rekor/issues/1326">#1326</a>)</li> <li>fuzzing: remove tar operations in alpine fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1322">#1322</a>)</li> <li>alpine: add v001 fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1316">#1316</a>)</li> <li>hashedrekord: add v001 fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1315">#1315</a>)</li> <li>fuzzing: add call to IndexKeys in multiple fuzzers (<a href="https://redirect.github.com/sigstore/rekor/issues/1302">#1302</a>)</li> <li>fuzzing: improve cose fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1300">#1300</a>)</li> <li>fuzzing: improve fuzz utils (<a href="https://redirect.github.com/sigstore/rekor/issues/1298">#1298</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/rekor/blob/main/CHANGELOG.md">github.com/sigstore/rekor's changelog</a>.</em></p> <blockquote> <h1>v1.1.1</h1> <h2>Functional Enhancements</h2> <ul> <li>Refactor Trillian client with exported methods (<a href="https://redirect.github.com/sigstore/rekor/issues/1454">#1454</a>)</li> <li>Switch to official redis-go client (<a href="https://redirect.github.com/sigstore/rekor/issues/1459">#1459</a>)</li> <li>Remove replace in go.mod (<a href="https://redirect.github.com/sigstore/rekor/issues/1444">#1444</a>)</li> <li>Add Rekor OID info. (<a href="https://redirect.github.com/sigstore/rekor/issues/1390">#1390</a>)</li> </ul> <h2>Quality Enhancements</h2> <ul> <li>remove legacy encrypted cosign key (<a href="https://redirect.github.com/sigstore/rekor/issues/1446">#1446</a>)</li> <li>swap cjson dependency (<a href="https://redirect.github.com/sigstore/rekor/issues/1441">#1441</a>)</li> <li>Update release readme (<a href="https://redirect.github.com/sigstore/rekor/issues/1456">#1456</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-2h5h-59f5-c5x9</li> </ul> <h2>Contributors</h2> <ul> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Carlos Tadeu Panato Junior</li> <li>Ceridwen Coghlan</li> <li>Hayden B</li> </ul> <h1>v1.1.0</h1> <h2>Functional Enhancements</h2> <ul> <li>improve validation on intoto v0.0.2 type (<a href="https://redirect.github.com/sigstore/rekor/issues/1351">#1351</a>)</li> <li>add feature to limit HTTP request body length to process (<a href="https://redirect.github.com/sigstore/rekor/issues/1334">#1334</a>)</li> <li>add information about the file size limit (<a href="https://redirect.github.com/sigstore/rekor/issues/1313">#1313</a>)</li> <li>Add script to backfill Redis from Rekor (<a href="https://redirect.github.com/sigstore/rekor/issues/1163">#1163</a>)</li> <li>Feature: add search support for sha512 (<a href="https://redirect.github.com/sigstore/rekor/issues/1142">#1142</a>)</li> </ul> <h2>Quality Enhancements</h2> <ul> <li>fuzzing: refactor OSS-Fuzz build script (<a href="https://redirect.github.com/sigstore/rekor/issues/1377">#1377</a>)</li> <li>Update cloudbuild for cosign 2.0 (<a href="https://redirect.github.com/sigstore/rekor/issues/1375">#1375</a>)</li> <li>Tests - Additional sharding tests (<a href="https://redirect.github.com/sigstore/rekor/issues/1180">#1180</a>)</li> <li>jar type: add fuzzer for 3rd-party dep (<a href="https://redirect.github.com/sigstore/rekor/issues/1360">#1360</a>)</li> <li>update cosign to 2.0.0 and builder image and also cosign flags (<a href="https://redirect.github.com/sigstore/rekor/issues/1368">#1368</a>)</li> <li>fuzzing: move alpine utils to fuzz utils (<a href="https://redirect.github.com/sigstore/rekor/issues/1335">#1335</a>)</li> <li>fuzzing: add seed for alpine fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1342">#1342</a>)</li> <li>jar: add v001 fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1327">#1327</a>)</li> <li>fuzzing: open writer later in fuzz utils (<a href="https://redirect.github.com/sigstore/rekor/issues/1326">#1326</a>)</li> <li>fuzzing: remove tar operations in alpine fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1322">#1322</a>)</li> <li>alpine: add v001 fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1316">#1316</a>)</li> <li>hashedrekord: add v001 fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1315">#1315</a>)</li> <li>fuzzing: add call to IndexKeys in multiple fuzzers (<a href="https://redirect.github.com/sigstore/rekor/issues/1302">#1302</a>)</li> <li>fuzzing: improve cose fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1300">#1300</a>)</li> <li>fuzzing: improve fuzz utils (<a href="https://redirect.github.com/sigstore/rekor/issues/1298">#1298</a>)</li> <li>fuzzing: improve alpine fuzzer (<a href="https://redirect.github.com/sigstore/rekor/issues/1273">#1273</a>)</li> <li>fuzzing: go mod edit go-fuzz-headers (<a href="https://redirect.github.com/sigstore/rekor/issues/1272">#1272</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/rekor/commit/0c1914e5e955cb9f514e32b222cf61a13e91ab08"><code>0c1914e</code></a> update CHANGELOG for v1.1.1 (<a href="https://redirect.github.com/sigstore/rekor/issues/1462">#1462</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/cf42ace82667025fe128f7a50cf6b4cdff51cc48"><code>cf42ace</code></a> Merge pull request from GHSA-2h5h-59f5-c5x9</li> <li><a href="https://github.com/sigstore/rekor/commit/46ac0b224e673b969457597b15af2d125ae8c5c2"><code>46ac0b2</code></a> Refactor Trillian client with exported methods (<a href="https://redirect.github.com/sigstore/rekor/issues/1454">#1454</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/5d6e9723b1d251001906c5583b0fd6fe7e3a1cb3"><code>5d6e972</code></a> build(deps): bump github.com/redis/go-redis/v9 from 9.0.3 to 9.0.4 (<a href="https://redirect.github.com/sigstore/rekor/issues/1460">#1460</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/baa14ce4ebe621399ff8330dd8ddc4a6ca2e2533"><code>baa14ce</code></a> Switch to official redis-go client (<a href="https://redirect.github.com/sigstore/rekor/issues/1459">#1459</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/059e097a0b6856ff6ed79c96cba171df691eb3d8"><code>059e097</code></a> build(deps): bump github.com/go-playground/validator/v10 (<a href="https://redirect.github.com/sigstore/rekor/issues/1457">#1457</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/1f75c792567e6a4b2fa0ebb5e12fe500434d33b1"><code>1f75c79</code></a> Update release readme (<a href="https://redirect.github.com/sigstore/rekor/issues/1456">#1456</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/98163f336ce3db11d776c0eabc4c7bccda7612dd"><code>98163f3</code></a> build(deps): bump github/codeql-action from 2.3.1 to 2.3.2 (<a href="https://redirect.github.com/sigstore/rekor/issues/1455">#1455</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/24cb647106d74051ba70ce867b5c7319ad29e3b9"><code>24cb647</code></a> Remove replace in go.mod (<a href="https://redirect.github.com/sigstore/rekor/issues/1444">#1444</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/39bd69bc7c474ff07fef392ff139d0c01c2e116a"><code>39bd69b</code></a> Add Rekor OID info. (<a href="https://redirect.github.com/sigstore/rekor/issues/1390">#1390</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/rekor/compare/v1.0.1...v1.1.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/rekor&package-manager=go_modules&previous-version=1.0.1&new-version=1.1.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-04 04:11:29 +02:00
github.com/go-openapi/validate v0.22.1 h1:G+c2ub6q47kfX1sOBLwIQwzBVt8qmOAARyo/9Fqs9NU=
github.com/go-openapi/validate v0.22.1/go.mod h1:rjnrwK57VJ7A8xqfpAOEKRH8yQSGUriMu5/zuPSQ1hg=
feat(deps): bump gocloud.dev from 0.29.0 to 0.30.0 (#4129) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.29.0 to 0.30.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.30.0</h2> <p><strong>blob</strong></p> <ul> <li><strong>all</strong>: Add <code>Upload</code> and <code>Download</code> methods that may be more efficient for some drivers.</li> <li><strong>s3blob</strong>: Add support for per-request <code>s3v2.Options</code>.</li> <li><strong>s3blob</strong>: Stop escaping second <code>/</code> in <code>//</code>; it's no longer necessary.</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>gcppubsub</strong>: Make it possible to configure <code>max_send_batch_size</code>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/d2d5bedb50683e2a6b893b75aafc193eca2715db"><code>d2d5bed</code></a> all: prep for release (<a href="https://redirect.github.com/google/go-cloud/issues/3263">#3263</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/c2e172b5a78def74973f7f3a8ece7c0bd6967432"><code>c2e172b</code></a> all: update dependencies (<a href="https://redirect.github.com/google/go-cloud/issues/3262">#3262</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/098177a48cae1bebfc90f88ed43d319444cab804"><code>098177a</code></a> blob/s3blob: fix the 'awssdk' argument examples</li> <li><a href="https://github.com/google/go-cloud/commit/2e4fad43f0b2606833b6a0de3e18628c70e11398"><code>2e4fad4</code></a> all: remove refs to deprecated xerrors</li> <li><a href="https://github.com/google/go-cloud/commit/1db413f1b3c4e344618b36401ba7e6dca3892929"><code>1db413f</code></a> pubsub/gcppubsub: make it possible to configure max_send_batch_size</li> <li><a href="https://github.com/google/go-cloud/commit/0c8428bf433136e7a4d96de0841f6373c6eacb53"><code>0c8428b</code></a> blob: Add Upload and Download methods that may be more efficient for some dri...</li> <li><a href="https://github.com/google/go-cloud/commit/54c71241a56f4c89eb64f587e5dc55667eaa40a3"><code>54c7124</code></a> all: cleanup duplicate import statements</li> <li><a href="https://github.com/google/go-cloud/commit/28b1328ae4fee939441faa5ee2e4eeba74c88ce7"><code>28b1328</code></a> all: minor code simplifications for returned boolean expressions</li> <li><a href="https://github.com/google/go-cloud/commit/2a407f5e6a71951384531445e25c58194f235062"><code>2a407f5</code></a> blob/gcsblob: Refresh goldens</li> <li><a href="https://github.com/google/go-cloud/commit/0cc16c8ae11e47028df24c4973debd6c56d29729"><code>0cc16c8</code></a> all: update goldens (<a href="https://redirect.github.com/google/go-cloud/issues/3252">#3252</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.29.0...v0.30.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.29.0&new-version=0.30.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-20 14:04:08 +02:00
github.com/go-sql-driver/mysql v1.7.1 h1:lUIinVbN1DY0xBg0eMOzmmtGoHwWBbvnWubQUrtU8EI=
chore: go mod tidy Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-09-13 19:03:05 +02:00
github.com/go-sql-driver/mysql v1.7.1/go.mod h1:OXbVy3sEdcQ2Doequ6Z5BW6fXNQTmx+9S1MCJN5yJMI=
feat: refactor main.go to spf13/cobra (#1472) * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: revert Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: lint Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: move Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2020-04-28 02:42:44 +02:00
github.com/go-stack/stack v1.8.0/go.mod h1:v0f6uXyyMGvRgIKkXu+yp6POWl0qKG85gN/melR3HDY=
Add telegram announcer (#2563) * feat: add telegram announcer * chore: remove hooks and use the Send method of the bot API * chore: add docs and default config * chore: add docs and default config * chore: fix tabs * chore: add docs * chore: fix pr comments * chore: fix pr comments * chore: fix pr comments * chore: add missing links in docs
2021-10-07 15:01:31 +02:00
github.com/go-telegram-bot-api/telegram-bot-api v4.6.4+incompatible h1:2cauKuaELYAEARXRkq2LrJ0yDDv1rW7+wrTEdVL3uaU=
github.com/go-telegram-bot-api/telegram-bot-api v4.6.4+incompatible/go.mod h1:qf9acutJ8cwBUhm1bqgz6Bei9/C/c93FPDljKWwsOgM=
feat: announce: slack (#2429) Fixes #2425 Signed-off-by: Furkan <furkan.turkal@trendyol.com>
2021-09-01 21:46:25 +02:00
github.com/go-test/deep v1.0.4/go.mod h1:wGDj63lr65AM2AQyKZd/NYHGb0R+1RLqB8NKt3aSFNA=
feat(deps): bump github.com/google/ko from 0.12.0 to 0.13.0 (#3880) Bumps [github.com/google/ko](https://github.com/google/ko) from 0.12.0 to 0.13.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/ko/releases">github.com/google/ko's releases</a>.</em></p> <blockquote> <h2>v0.13.0</h2> <h2>What's Changed</h2> <ul> <li>SPDX: Fix package manager label by <a href="https://github.com/puerco"><code>@​puerco</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/801">ko-build/ko#801</a></li> <li>SPDX 2.3 support by <a href="https://github.com/puerco"><code>@​puerco</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/803">ko-build/ko#803</a></li> <li>ci: build and test using 1.18 and 1.19 (drop 1.17) by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/812">ko-build/ko#812</a></li> <li>removes repo move message by <a href="https://github.com/mchmarny"><code>@​mchmarny</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/814">ko-build/ko#814</a></li> <li>feat: write sbom result to disk by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/822">ko-build/ko#822</a></li> <li>feat: adding support for using multiple keychain for sending sbom results to a different repository by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/821">ko-build/ko#821</a></li> <li>Move docs to ko.build by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/749">ko-build/ko#749</a></li> <li>Update setup-ko version by <a href="https://github.com/ianlewis"><code>@​ianlewis</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/836">ko-build/ko#836</a></li> <li>Add -- usage in readme by <a href="https://github.com/jwcesign"><code>@​jwcesign</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/840">ko-build/ko#840</a></li> <li>add CONTRIBUTING, code of conduct, roadmap by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/837">ko-build/ko#837</a></li> <li>attempt to fix GH Pages publishing by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/843">ko-build/ko#843</a></li> <li>doc: fix link to Installation page in Getting Started by <a href="https://github.com/antoineco"><code>@​antoineco</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/846">ko-build/ko#846</a></li> <li>.ko.yaml: bump golang 1.18 -&gt; 1.19 by <a href="https://github.com/srenatus"><code>@​srenatus</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/848">ko-build/ko#848</a></li> <li>truncate -image-refs file by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/855">ko-build/ko#855</a></li> <li>update docs: fix broken links, align with README by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/854">ko-build/ko#854</a></li> <li>Handle KO_DOCKER_REPO=ko.local/repo and --bare correctly by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/820">ko-build/ko#820</a></li> <li>another docs update by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/856">ko-build/ko#856</a></li> <li>ko.build: support some common shortlinks by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/872">ko-build/ko#872</a></li> <li>install: fail with 404 instead of gzip error when url was wrong by <a href="https://github.com/grosser"><code>@​grosser</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/879">ko-build/ko#879</a></li> <li>feat: deduplicate tags by <a href="https://github.com/bluebrown"><code>@​bluebrown</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/884">ko-build/ko#884</a></li> <li>install mkdocs-redirect when publishing site by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/873">ko-build/ko#873</a></li> <li>nit: replace one-item slice with const by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/885">ko-build/ko#885</a></li> <li>Temp fix for SLSA generators by <a href="https://github.com/laurentsimon"><code>@​laurentsimon</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/886">ko-build/ko#886</a></li> <li>Fix verifier by <a href="https://github.com/laurentsimon"><code>@​laurentsimon</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/891">ko-build/ko#891</a></li> <li>Fix link in static-assets.md by <a href="https://github.com/yuryu"><code>@​yuryu</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/893">ko-build/ko#893</a></li> <li>add KO_DEFAULTBASEIMAGE usage to docs by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/895">ko-build/ko#895</a></li> <li>Publish an tagged image on release by <a href="https://github.com/vdemeester"><code>@​vdemeester</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/868">ko-build/ko#868</a></li> <li>Add option to configure default platforms by <a href="https://github.com/ReToCode"><code>@​ReToCode</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/897">ko-build/ko#897</a></li> <li>Fix broken SLSA link by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/899">ko-build/ko#899</a></li> <li>add MAINTAINERS.md by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/905">ko-build/ko#905</a></li> <li>fix: possible race condition when applying templates to flags/ldflags by <a href="https://github.com/caarlos0"><code>@​caarlos0</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/913">ko-build/ko#913</a></li> <li>update docs to reflect actual default base image by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/903">ko-build/ko#903</a></li> <li>remove repeated error message on failure by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/921">ko-build/ko#921</a></li> <li>website: update CNCF announcement by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/920">ko-build/ko#920</a></li> <li>fix KO_CONFIG_PATH pointing to a file by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/923">ko-build/ko#923</a></li> <li>upgrade to cosign v2.0.0-rc.0 by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/933">ko-build/ko#933</a></li> <li>Feature: Add ECR presubmit testing. by <a href="https://github.com/mattmoor"><code>@​mattmoor</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/934">ko-build/ko#934</a></li> <li>remove 'ko deps' by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/937">ko-build/ko#937</a></li> <li>feat: Add KO_GO_PATH env var by <a href="https://github.com/embano1"><code>@​embano1</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/930">ko-build/ko#930</a></li> <li>add ko.build/slack short link by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/945">ko-build/ko#945</a></li> <li>update link to ko goreleaser docs by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/936">ko-build/ko#936</a></li> <li>add ko community meeting details by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/938">ko-build/ko#938</a></li> <li>fix cosign by adding --yes by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/973">ko-build/ko#973</a></li> <li>fix: handle docker's unknown/unknown platform in index manifests by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/975">ko-build/ko#975</a></li> <li>fix file extension for cyclonedx by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/974">ko-build/ko#974</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/ianlewis"><code>@​ianlewis</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/836">ko-build/ko#836</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ko-build/ko/commit/e22e7a15ffb988adc14c3fc6a964f61ed711812f"><code>e22e7a1</code></a> bump ggcr dep to <a href="https://github.com/main"><code>@​main</code></a> (<a href="https://redirect.github.com/google/ko/issues/976">#976</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/8e075ae1f1822bb61a871f11197566b362c342f0"><code>8e075ae</code></a> fix file extension for cyclonedx (<a href="https://redirect.github.com/google/ko/issues/974">#974</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/11670b7498be63bc0e04e7ba36433fd22f9654ce"><code>11670b7</code></a> fix: handle docker's unknown/unknown platform in index manifests (<a href="https://redirect.github.com/google/ko/issues/975">#975</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/7ce947817e2f59942cb181aa833bfd13533bcc19"><code>7ce9478</code></a> fix cosign by adding --yes (<a href="https://redirect.github.com/google/ko/issues/973">#973</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/9302da78dc995b2b2dd70c044708c3c4c6a056b6"><code>9302da7</code></a> Bump k8s.io/apimachinery from 0.26.1 to 0.26.2 (<a href="https://redirect.github.com/google/ko/issues/972">#972</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/a1588838ba1698c3ca3f6785363a1a9f82ed4baa"><code>a158883</code></a> Bump sigstore/cosign-installer from 2.8.1 to 3.0.1 (<a href="https://redirect.github.com/google/ko/issues/971">#971</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/86b6c2854f8a7c321ce1b8ea121938ce9cc79475"><code>86b6c28</code></a> Bump actions/checkout from 2 to 3 (<a href="https://redirect.github.com/google/ko/issues/966">#966</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/0bd12fb106ed9d03994a6b8883f8a5d834a2aa15"><code>0bd12fb</code></a> Bump slsa-framework/slsa-github-generator from 1.2.1 to 1.5.0 (<a href="https://redirect.github.com/google/ko/issues/967">#967</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/d5125daacd07306d3814a6910cc54422824331e6"><code>d5125da</code></a> Bump github.com/sigstore/cosign/v2 from 2.0.0-rc.2 to 2.0.0 (<a href="https://redirect.github.com/google/ko/issues/965">#965</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/03f4aed68268fb320b32195c80292300056b264c"><code>03f4aed</code></a> add ko community meeting details (<a href="https://redirect.github.com/google/ko/issues/938">#938</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/ko/compare/v0.12.0...v0.13.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/ko&package-manager=go_modules&previous-version=0.12.0&new-version=0.13.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --------- Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2023-03-29 19:38:57 +02:00
github.com/go-test/deep v1.1.0 h1:WOcxcdHcvdgThNXjw0t76K42FXTU7HpNQWHpA2HHNlg=
chore: go mod tidy Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-09-13 19:03:05 +02:00
github.com/go-test/deep v1.1.0/go.mod h1:5C2ZWiW0ErCdrYzpqxLbTX7MG14M9iiw8DgHncVwcsE=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/gobuffalo/attrs v0.0.0-20190224210810-a9411de4debd/go.mod h1:4duuawTqi2wkkpB4ePgWMaai6/Kc6WEz83bhFwpHzj0=
github.com/gobuffalo/depgen v0.0.0-20190329151759-d478694a28d3/go.mod h1:3STtPUQYuzV0gBVOY3vy6CfMm/ljR4pABfrTeHNLHUY=
github.com/gobuffalo/depgen v0.1.0/go.mod h1:+ifsuy7fhi15RWncXQQKjWS9JPkdah5sZvtHc2RXGlg=
github.com/gobuffalo/envy v1.6.15/go.mod h1:n7DRkBerg/aorDM8kbduw5dN3oXGswK5liaSCx4T5NI=
github.com/gobuffalo/envy v1.7.0/go.mod h1:n7DRkBerg/aorDM8kbduw5dN3oXGswK5liaSCx4T5NI=
github.com/gobuffalo/flect v0.1.0/go.mod h1:d2ehjJqGOH/Kjqcoz+F7jHTBbmDb38yXA598Hb50EGs=
github.com/gobuffalo/flect v0.1.1/go.mod h1:8JCgGVbRjJhVgD6399mQr4fx5rRfGKVzFjbj6RE/9UI=
github.com/gobuffalo/flect v0.1.3/go.mod h1:8JCgGVbRjJhVgD6399mQr4fx5rRfGKVzFjbj6RE/9UI=
github.com/gobuffalo/genny v0.0.0-20190329151137-27723ad26ef9/go.mod h1:rWs4Z12d1Zbf19rlsn0nurr75KqhYp52EAGGxTbBhNk=
github.com/gobuffalo/genny v0.0.0-20190403191548-3ca520ef0d9e/go.mod h1:80lIj3kVJWwOrXWWMRzzdhW3DsrdjILVil/SFKBzF28=
github.com/gobuffalo/genny v0.1.0/go.mod h1:XidbUqzak3lHdS//TPu2OgiFB+51Ur5f7CSnXZ/JDvo=
github.com/gobuffalo/genny v0.1.1/go.mod h1:5TExbEyY48pfunL4QSXxlDOmdsD44RRq4mVZ0Ex28Xk=
github.com/gobuffalo/gitgen v0.0.0-20190315122116-cc086187d211/go.mod h1:vEHJk/E9DmhejeLeNt7UVvlSGv3ziL+djtTr3yyzcOw=
github.com/gobuffalo/gogen v0.0.0-20190315121717-8f38393713f5/go.mod h1:V9QVDIxsgKNZs6L2IYiGR8datgMhB577vzTDqypH360=
github.com/gobuffalo/gogen v0.1.0/go.mod h1:8NTelM5qd8RZ15VjQTFkAW6qOMx5wBbW4dSCS3BY8gg=
github.com/gobuffalo/gogen v0.1.1/go.mod h1:y8iBtmHmGc4qa3urIyo1shvOD8JftTtfcKi+71xfDNE=
github.com/gobuffalo/logger v0.0.0-20190315122211-86e12af44bc2/go.mod h1:QdxcLw541hSGtBnhUc4gaNIXRjiDppFGaDqzbrBd3v8=
github.com/gobuffalo/mapi v1.0.1/go.mod h1:4VAGh89y6rVOvm5A8fKFxYG+wIW6LO1FMTG9hnKStFc=
github.com/gobuffalo/mapi v1.0.2/go.mod h1:4VAGh89y6rVOvm5A8fKFxYG+wIW6LO1FMTG9hnKStFc=
github.com/gobuffalo/packd v0.0.0-20190315124812-a385830c7fc0/go.mod h1:M2Juc+hhDXf/PnmBANFCqx4DM3wRbgDvnVWeG2RIxq4=
github.com/gobuffalo/packd v0.1.0/go.mod h1:M2Juc+hhDXf/PnmBANFCqx4DM3wRbgDvnVWeG2RIxq4=
github.com/gobuffalo/packr/v2 v2.0.9/go.mod h1:emmyGweYTm6Kdper+iywB6YK5YzuKchGtJQZ0Odn4pQ=
github.com/gobuffalo/packr/v2 v2.2.0/go.mod h1:CaAwI0GPIAv+5wKLtv8Afwl+Cm78K/I/VCm/3ptBN+0=
github.com/gobuffalo/syncx v0.0.0-20190224160051-33c29581e754/go.mod h1:HhnNqWY95UYwwW3uSASeV7vtgYkT2t16hJgV3AEPUpw=
feat: Use tools.go paradigm for external dependencies (#1495) Co-authored-by: CrazyMax <crazy-max@users.noreply.github.com>
2020-05-10 21:34:55 +02:00
github.com/gobwas/glob v0.2.3 h1:A4xDbljILXROh+kObIiy5kIaPYD8e96x1tgBhUI5J+Y=
github.com/gobwas/glob v0.2.3/go.mod h1:d3Ez4x06l9bZtSvzIay5+Yzi0fmZzPgnTbPcKjJAkT8=
chore(deps): bump gocloud.dev from 0.22.0 to 0.23.0 (#2225) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.22.0 to 0.23.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.22.0...v0.23.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-17 14:03:45 +02:00
github.com/godbus/dbus/v5 v5.0.4/go.mod h1:xhWf0FNVPg57R7Z0UbKHbJfkEywrmjJnf7w5xrFpKfA=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/godbus/dbus/v5 v5.0.6/go.mod h1:xhWf0FNVPg57R7Z0UbKHbJfkEywrmjJnf7w5xrFpKfA=
github.com/gogo/protobuf v1.1.1/go.mod h1:r8qH/GZQm5c6nD/R0oafs1akxWv10x8SbQlK7atdtwQ=
refactor: improving minio and docker tests (#3642) using ory/dockertest to simplify integration tests Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-12-15 15:25:52 +02:00
github.com/gogo/protobuf v1.3.2 h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/gogo/protobuf v1.3.2/go.mod h1:P1XiOD3dCwIKUDQYPy72D8LYyHL2YPYrpS2s69NZV8Q=
chore(deps): bump gocloud.dev from 0.23.0 to 0.24.0 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2021-09-11 04:41:28 +02:00
github.com/golang-jwt/jwt/v4 v4.0.0/go.mod h1:/xlHOz8bRuivTWchD4jCa+NbatV+wEUSzwAxVc6locg=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/golang-jwt/jwt/v4 v4.2.0/go.mod h1:/xlHOz8bRuivTWchD4jCa+NbatV+wEUSzwAxVc6locg=
feat(deps): bump github.com/sigstore/rekor from 1.1.1 to 1.2.0 (#4044) Bumps [github.com/sigstore/rekor](https://github.com/sigstore/rekor) from 1.1.1 to 1.2.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/rekor/blob/main/CHANGELOG.md">github.com/sigstore/rekor's changelog</a>.</em></p> <blockquote> <h1>v1.2.0</h1> <h2>Functional Enhancements</h2> <ul> <li>add client method to generate TLE struct (<a href="https://redirect.github.com/sigstore/rekor/issues/1498">#1498</a>)</li> <li>add dsse type (<a href="https://redirect.github.com/sigstore/rekor/issues/1487">#1487</a>)</li> <li>support other KMS providers (AWS, Azure, Hashicorp) in addition to GCP (<a href="https://redirect.github.com/sigstore/rekor/issues/1488">#1488</a>)</li> <li>Add concurrency to backfill-redis (<a href="https://redirect.github.com/sigstore/rekor/issues/1504">#1504</a>)</li> <li>omit informational message if machine-parseable output has been requested (<a href="https://redirect.github.com/sigstore/rekor/issues/1486">#1486</a>)</li> <li>Publish stable checkpoint periodically to Redis (<a href="https://redirect.github.com/sigstore/rekor/issues/1461">#1461</a>)</li> <li>Add intoto v0.0.2 to backfill script (<a href="https://redirect.github.com/sigstore/rekor/issues/1500">#1500</a>)</li> <li>add new method to test insertability of proposed entries into log (<a href="https://redirect.github.com/sigstore/rekor/issues/1410">#1410</a>)</li> </ul> <h2>Quality Enhancements</h2> <ul> <li>use t.Skip() in fuzzers (<a href="https://redirect.github.com/sigstore/rekor/issues/1506">#1506</a>)</li> <li>improve fuzzing coverage (<a href="https://redirect.github.com/sigstore/rekor/issues/1499">#1499</a>)</li> <li>Remove watcher script (<a href="https://redirect.github.com/sigstore/rekor/issues/1484">#1484</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-frqx-jfcm-6jjr</li> <li>Remove requirement of PayloadHash for intoto 0.0.1 (<a href="https://redirect.github.com/sigstore/rekor/issues/1490">#1490</a>)</li> <li>fix lint errors, bump linter up to 1.52 (<a href="https://redirect.github.com/sigstore/rekor/issues/1485">#1485</a>)</li> <li>Remove dependencies from pkg/util (<a href="https://redirect.github.com/sigstore/rekor/issues/1469">#1469</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>Bob Callaway</li> <li>Carlos Tadeu Panato Junior</li> <li>Ceridwen Coghlan</li> <li>Cody Soyland</li> <li>Hayden B</li> <li>Miloslav Trmač</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/rekor/commit/20a995116b1548b79e62ba0ad9c29800387e8641"><code>20a9951</code></a> update for v1.2.0 (<a href="https://redirect.github.com/sigstore/rekor/issues/1507">#1507</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/140c5add105179e5ffd9e3e114fd1b6b93aebbd4"><code>140c5ad</code></a> Merge pull request from GHSA-frqx-jfcm-6jjr</li> <li><a href="https://github.com/sigstore/rekor/commit/85bb2bc7a35dcc94cd94e18984711806f437dcb6"><code>85bb2bc</code></a> use t.Skip() in fuzzers (<a href="https://redirect.github.com/sigstore/rekor/issues/1506">#1506</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/3adca0d2528699d2ff93bf78babef8b5cac46122"><code>3adca0d</code></a> Add concurrency to backfill-redis (<a href="https://redirect.github.com/sigstore/rekor/issues/1504">#1504</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/795a23619d5db1c9625a71f776474033c6712b56"><code>795a236</code></a> add client method to generate TLE struct (<a href="https://redirect.github.com/sigstore/rekor/issues/1498">#1498</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/161a796f91d7255443aa6ce98e7981e6926762f0"><code>161a796</code></a> build(deps): bump github/codeql-action from 2.3.3 to 2.3.4 (<a href="https://redirect.github.com/sigstore/rekor/issues/1505">#1505</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/35c4489abcff256298f1bc9f7caaf5a946750dac"><code>35c4489</code></a> add dsse type (<a href="https://redirect.github.com/sigstore/rekor/issues/1487">#1487</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/d318e2bf433d398d95923f3509557777a2fe5abb"><code>d318e2b</code></a> support other KMS providers (AWS, Azure, Hashicorp) in addition to GCP (<a href="https://redirect.github.com/sigstore/rekor/issues/1488">#1488</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/d508ebad91ef4e39d8e0dd3543cebe20321dc752"><code>d508eba</code></a> Remove requirement of PayloadHash for intoto 0.0.1 (<a href="https://redirect.github.com/sigstore/rekor/issues/1490">#1490</a>)</li> <li><a href="https://github.com/sigstore/rekor/commit/b387701f27aace3e3396ad4fdbb8d3ccc869fb5f"><code>b387701</code></a> Add intoto v0.0.2 to backfill script (<a href="https://redirect.github.com/sigstore/rekor/issues/1500">#1500</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/rekor/compare/v1.1.1...v1.2.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/rekor&package-manager=go_modules&previous-version=1.1.1&new-version=1.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-27 05:24:50 +02:00
github.com/golang-jwt/jwt/v4 v4.5.0 h1:7cYmW1XlMY7h7ii7UhUyChSgS5wUJEnm9uZVTGqOWzg=
github.com/golang-jwt/jwt/v4 v4.5.0/go.mod h1:m21LjoU+eqJr34lmDMbreY2eSTRJ1cv77w39/MY0Ch0=
feat(deps): bump gocloud.dev from 0.34.0 to 0.35.0 (#4467) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.34.0 to 0.35.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.35.0</h2> <p><strong>BREAKING CHANGES</strong></p> <p>This release updates the dependency on AWS/S3, which included some breaking changes; see <a href="https://redirect.github.com/google/go-cloud/pull/3342">google/go-cloud#3342</a> for details.</p> <p><strong>blob</strong></p> <ul> <li><em>gcsblob</em>: Fix unauthenticated requests.</li> </ul> <p><strong>runtimevar</strong></p> <ul> <li><em>constantvar</em>: Add support for reading the constant variable value from the environment.</li> </ul> <p><strong>docstore</strong></p> <ul> <li><em>gcpfilestore</em>: Add support for non-default databases.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/27e0bca95dae3165b94cab4f9b7e2e4b087c8aef"><code>27e0bca</code></a> all: prep for release (<a href="https://redirect.github.com/google/go-cloud/issues/3350">#3350</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/53ccd8db26a14fd2a40bfcb28af1a1ceba4663f4"><code>53ccd8d</code></a> all: update deps, including a breaking S3 change (<a href="https://redirect.github.com/google/go-cloud/issues/3342">#3342</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fa413a39cdf8ffe0890a1b0a4cf5e06e0c915592"><code>fa413a3</code></a> docstore/gcpfilestore: add support for non-default databases. (<a href="https://redirect.github.com/google/go-cloud/issues/3345">#3345</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/c04000b96462ad3ec62e633eafd759185991bb27"><code>c04000b</code></a> secrets/hashivault: Update go-jose per dependabot (<a href="https://redirect.github.com/google/go-cloud/issues/3346">#3346</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/6d5d2890816abc88cd11ef13d6cd6506eb5b5537"><code>6d5d289</code></a> pubsub/natspubsub: upgrade a dependency (<a href="https://redirect.github.com/google/go-cloud/issues/3336">#3336</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/375e097193225b4ef300a336e04ccad9ace50bc1"><code>375e097</code></a> pubsub/natspubsub: Update dependency (<a href="https://redirect.github.com/google/go-cloud/issues/3331">#3331</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/35ac324ff7fae5ddc0f9dc2ff234a7d6b4935a20"><code>35ac324</code></a> all: update dependencies (<a href="https://redirect.github.com/google/go-cloud/issues/3329">#3329</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/4a18be0f4a48c145da4a76499485a45478fd69aa"><code>4a18be0</code></a> secrets/awskms: update the example for the AWS ARN use case (<a href="https://redirect.github.com/google/go-cloud/issues/3320">#3320</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/486d484a8f73fd5bedc910d4fd89c52e11412e68"><code>486d484</code></a> kafkapubsub: rename dependency Shopify/sarama to IBM/sarama (<a href="https://redirect.github.com/google/go-cloud/issues/3319">#3319</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/db7e808e313228ed8607a94d6e5cd075d66f4e86"><code>db7e808</code></a> runtimevar/constantvar: Add support for reading the constantvar from an envir...</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.34.0...v0.35.0">compare view</a></li> </ul> </details> <br /> <details> <summary>Most Recent Ignore Conditions Applied to This Pull Request</summary> | Dependency Name | Ignore Conditions | | --- | --- | | gocloud.dev | [>= 0.25.a, < 0.26] | </details> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.34.0&new-version=0.35.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-11 12:55:26 +02:00
github.com/golang-jwt/jwt/v5 v5.1.0 h1:UGKbA/IPjtS6zLcdB7i5TyACMgSbOTiR8qzXgw8HWQU=
github.com/golang-jwt/jwt/v5 v5.1.0/go.mod h1:pqrtFR0X4osieyHYxtmOUWsAWrfe1Q5UVIyoH402zdk=
feat: add support for pushing artifacts to cloud storage provider( S3, Azure Blob, GCS) (#1036) * feat: adding support to push artifacts to AWS S3,Azure Blob and Google Cloud Storage readme for blob publisher test: add unit test for blob using testify and mockery test: add unit test for publish method fix: openbucket instance initialization remove unwanted packages: go mod tidy test: add missing unit test for publish method * doc: add missing comment for func * fix: add accidental delete file * fix : add missing Snapcrafts project * fix: unit test for Azure blob * fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue * fmt: fix linter reporeted issues fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue fmt: linter fix * test: fix typo in test error string * feat: add support to provider folder inside bucket, resolves discussed comments
2019-06-05 15:51:01 +02:00
github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b/go.mod h1:SBH7ygxi8pfUlaOkMMuAQtPIUF8ecWP5IEl/CR7VP2Q=
chore(deps): bump gocloud.dev from 0.18.0 to 0.19.0 (#1340) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.18.0 to 0.19.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.18.0...v0.19.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-02-17 14:56:49 +02:00
github.com/golang/groupcache v0.0.0-20190702054246-869f871628b6/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
github.com/golang/groupcache v0.0.0-20191227052852-215e87163ea7/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
github.com/golang/groupcache v0.0.0-20200121045136-8c9f03a8e57e/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
chore(deps): bump gocloud.dev from 0.22.0 to 0.23.0 (#2225) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.22.0 to 0.23.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.22.0...v0.23.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-17 14:03:45 +02:00
github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da h1:oI5xCqsCo564l8iNU+DwB5epxmsaqB+rhGL0m5jtYqE=
github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
feat: add support for pushing artifacts to cloud storage provider( S3, Azure Blob, GCS) (#1036) * feat: adding support to push artifacts to AWS S3,Azure Blob and Google Cloud Storage readme for blob publisher test: add unit test for blob using testify and mockery test: add unit test for publish method fix: openbucket instance initialization remove unwanted packages: go mod tidy test: add missing unit test for publish method * doc: add missing comment for func * fix: add accidental delete file * fix : add missing Snapcrafts project * fix: unit test for Azure blob * fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue * fmt: fix linter reporeted issues fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue fmt: linter fix * test: fix typo in test error string * feat: add support to provider folder inside bucket, resolves discussed comments
2019-06-05 15:51:01 +02:00
github.com/golang/mock v1.1.1/go.mod h1:oTYuIxOrZwtPieC+H1uAHpcLFnEyAGVDL/k47Jfbm0A=
github.com/golang/mock v1.2.0/go.mod h1:oTYuIxOrZwtPieC+H1uAHpcLFnEyAGVDL/k47Jfbm0A=
chore(deps): bump gocloud.dev from 0.18.0 to 0.19.0 (#1340) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.18.0 to 0.19.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.18.0...v0.19.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-02-17 14:56:49 +02:00
github.com/golang/mock v1.3.1/go.mod h1:sBzyDLLjw3U8JLTeZvSv8jJB+tU5PVekmnlKIyFUx0Y=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
github.com/golang/mock v1.4.0/go.mod h1:UOMv5ysSaYNkG+OFQykRIcU/QvvxJf3p21QfJ2Bt3cw=
github.com/golang/mock v1.4.1/go.mod h1:UOMv5ysSaYNkG+OFQykRIcU/QvvxJf3p21QfJ2Bt3cw=
github.com/golang/mock v1.4.3/go.mod h1:UOMv5ysSaYNkG+OFQykRIcU/QvvxJf3p21QfJ2Bt3cw=
chore(deps): bump gocloud.dev from 0.20.0 to 0.21.0 (#1941) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.20.0 to 0.21.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.20.0...v0.21.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-12 01:14:58 +02:00
github.com/golang/mock v1.4.4/go.mod h1:l3mdAwkq5BuhzHwde/uurv3sEJeZMXNpwsxVWU71h+4=
bump: nfpm
2018-10-31 04:26:58 +02:00
github.com/golang/protobuf v1.2.0/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
feat: add gitlab for releases (#1038) * outlines gitlab client integration * makes client parameter more explicit * adds gitlab url to config * changes releaseID to string to adapt to gitlab * updates to latest gitlab client lib 0.18 * fixes copy paster in gitlab upload func * fixes gitlab typo in config * adds gitlab token to env and context * release now uses the client factory method * skips brew pipe if it is not a github release * add github tokentype to publish tests * skips scoop pipe if it is not a github release * corrects brew skip msg * adds gitlab token to main test * adds gitlab to release docs * validates config and errors accordingly * adapt release pipe name to include gitlab * fixes gitlab client after testing * moves not-configured brew and scoop pipe checks as first check * adds more debug to gitlab client * adapts changelog generation for gitlab markdown * adds debug log for gitlab changelog * env needs to run before changelog pipe * moves gitlab default download url to default pipe * moves multiple releases check to from config to release pipe * release differs now for github and gitlab * adds debug gitlab release update msgs * moves env pipe as second after before because it determines the token type other pipes depend on * adaptes error check on gitlab release creation * Revert "adaptes error check on gitlab release creation" This reverts commit 032024571c76140f8e2207ee01cc08088f37594b. * simplifies gitlab client logic. removes comments * skips tls verification for gitlab client if specified in config * updates the docs * adds clarification that brew and scoop are not supported if it is a gitlab release * fixes copy paster in release.md * adds missing blob pipe in defaults and publish due to missing in merge * updates comment in gitlab client
2019-06-29 16:02:40 +02:00
github.com/golang/protobuf v1.3.1/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
fix: update go-gitlab refs https://github.com/goreleaser/goreleaser/pull/1215 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2019-10-30 23:01:53 +02:00
github.com/golang/protobuf v1.3.2/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
github.com/golang/protobuf v1.3.3/go.mod h1:vzj43D7+SQXF/4pzW/hwtAqwc6iTitCiVSaWz5lYuqw=
github.com/golang/protobuf v1.3.4/go.mod h1:vzj43D7+SQXF/4pzW/hwtAqwc6iTitCiVSaWz5lYuqw=
github.com/golang/protobuf v1.3.5/go.mod h1:6O5/vntMXwX2lRkT1hjjk0nAC1IDOTvTlVgjlRvqsdk=
github.com/golang/protobuf v1.4.0-rc.1/go.mod h1:ceaxUfeHdC40wWswd/P6IGgMaK3YpKi5j83Wpe3EHw8=
github.com/golang/protobuf v1.4.0-rc.1.0.20200221234624-67d41d38c208/go.mod h1:xKAWHe0F5eneWXFV3EuXVDTCmh+JuBKY0li0aMyXATA=
github.com/golang/protobuf v1.4.0-rc.2/go.mod h1:LlEzMj4AhA7rCAGe4KMBDvJI+AwstrUpVNzEA03Pprs=
github.com/golang/protobuf v1.4.0-rc.4.0.20200313231945-b860323f09d0/go.mod h1:WU3c8KckQ9AFe+yFwt9sWVRKCVIyN9cPHBJSNnbL67w=
github.com/golang/protobuf v1.4.0/go.mod h1:jodUvKwWbYaEsadDk5Fwe5c77LiNKVO9IDvqG2KuDX0=
github.com/golang/protobuf v1.4.1/go.mod h1:U8fpvMrcmy5pZrNK1lt4xCsGvpyWQ/VVv6QDs8UjoX8=
github.com/golang/protobuf v1.4.2/go.mod h1:oDoupMAO8OvCJWAcko0GGGIgR6R6ocIYbsSw735rRwI=
chore(deps): bump gocloud.dev from 0.20.0 to 0.21.0 (#1941) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.20.0 to 0.21.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.20.0...v0.21.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-12 01:14:58 +02:00
github.com/golang/protobuf v1.4.3/go.mod h1:oDoupMAO8OvCJWAcko0GGGIgR6R6ocIYbsSw735rRwI=
chore(deps): bump gocloud.dev from 0.22.0 to 0.23.0 (#2225) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.22.0 to 0.23.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.22.0...v0.23.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-17 14:03:45 +02:00
github.com/golang/protobuf v1.5.0/go.mod h1:FsONVRAS9T7sI+LIUmWTfcYkHO4aIWwzhcaSAoJOfIk=
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419) Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.1.1 to 2.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's releases</a>.</em></p> <blockquote> <h2>v2.2.1</h2> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's changelog</a>.</em></p> <blockquote> <h1>v2.2.1</h1> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign/commit/12cbf9ea177d22bbf5cf028bcb4712b5f174ebc6"><code>12cbf9e</code></a> add changelog for v2.2.1 release (<a href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/827f24e9d4a1f8e845cb1597d02053410f5bbe2a"><code>827f24e</code></a> feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8ac891ff0e29ddc67965423bee8f826219c6eb0f"><code>8ac891f</code></a> Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li><a href="https://github.com/sigstore/cosign/commit/8b366c497bd22b9be7742d057b8f59083dcadee0"><code>8b366c4</code></a> add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/23920de5623a505921ba4e62fa97e2553eff4699"><code>23920de</code></a> chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/e022e1c13240d1ae5b3c408bc53e389154331713"><code>e022e1c</code></a> chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/28c59c5eca6386924cc8f381afe94efe1e957679"><code>28c59c5</code></a> add missing groups key (<a href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8e5bdcc0ff39b8dc1b477251fef521601df76ec0"><code>8e5bdcc</code></a> chore(deps): bump github.com/google/certificate-transparency-go (<a href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/510cac4ef54274823599082e3a57a556ccd5c9e5"><code>510cac4</code></a> chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/063902b1d78fed7c12c9d9ce06248d36963e8169"><code>063902b</code></a> chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 18:39:49 +02:00
github.com/golang/protobuf v1.5.2/go.mod h1:XVQd3VNwM+JqD3oG2Ue2ip4fOMUkwXdXDdiuN0vRsmY=
feat(deps): bump github.com/xanzy/go-gitlab from 0.80.2 to 0.81.0 (#3855) [//]: # (dependabot-start) ⚠️ **Dependabot is rebasing this PR** ⚠️ Rebasing might not happen immediately, so don't worry if this takes some time. Note: if you make any changes to this PR yourself, they will take precedence over the rebase. --- [//]: # (dependabot-end) Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab) from 0.80.2 to 0.81.0. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/xanzy/go-gitlab/commit/7c78a6c1e0a16d61cfa8b76c6759d0f9f97d8844"><code>7c78a6c</code></a> Update dependencies</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/711e0b4cc5281875ca401e457d1d97f7eb6758cf"><code>711e0b4</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1663">#1663</a> from xanzy/feature/rate-limiter</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/40e5bfd65b5efc88548352bd14e8c55ff0c39756"><code>40e5bfd</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1665">#1665</a> from PatrickRice-KSC/add-omit-empty-to-project-options</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/77f5aac6fb877498bd26ca6b796a179b4182e5a8"><code>77f5aac</code></a> Fix lint errors</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/8f5194d5312e031fa2d32cf0aa912a4a8e09d19b"><code>8f5194d</code></a> Add omitempty and test</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/824308adfdf509c346a90db5471be1ac4ed087ba"><code>824308a</code></a> Prevent additional call to config the rate limiter</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/ae46dbc110aed4f44cc0e2d019e086b2178e894e"><code>ae46dbc</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1661">#1661</a> from KingCrunch/feature/add-missing-fields-to-project</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/1e983714503ffe138c6418a5153160cde113abac"><code>1e98371</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1662">#1662</a> from timofurrer/deploy-token</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/74e732fb037ea2480da4c502ec22de323e01a136"><code>74e732f</code></a> Tweak PR just a little…</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/507b9ece5e45a0d5bfee0653887733fd746a6f8c"><code>507b9ec</code></a> Expose Revoked and Expired field for Deploy Tokens</li> <li>Additional commits viewable in <a href="https://github.com/xanzy/go-gitlab/compare/v0.80.2...v0.81.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/xanzy/go-gitlab&package-manager=go_modules&previous-version=0.80.2&new-version=0.81.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-20 03:28:33 +02:00
github.com/golang/protobuf v1.5.3 h1:KhyjKVUg7Usr/dYsdSqoFveMYd5ko72D+zANwlG1mmg=
github.com/golang/protobuf v1.5.3/go.mod h1:XVQd3VNwM+JqD3oG2Ue2ip4fOMUkwXdXDdiuN0vRsmY=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/golang/snappy v0.0.1/go.mod h1:/XxbfmMg8lxefKM7IXC3fBNl/7bRcc72aCRzEWrmP2Q=
feat: add support for pushing artifacts to cloud storage provider( S3, Azure Blob, GCS) (#1036) * feat: adding support to push artifacts to AWS S3,Azure Blob and Google Cloud Storage readme for blob publisher test: add unit test for blob using testify and mockery test: add unit test for publish method fix: openbucket instance initialization remove unwanted packages: go mod tidy test: add missing unit test for publish method * doc: add missing comment for func * fix: add accidental delete file * fix : add missing Snapcrafts project * fix: unit test for Azure blob * fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue * fmt: fix linter reporeted issues fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue fmt: linter fix * test: fix typo in test error string * feat: add support to provider folder inside bucket, resolves discussed comments
2019-06-05 15:51:01 +02:00
github.com/google/btree v0.0.0-20180813153112-4030bb1f1f0c/go.mod h1:lNA+9X1NB3Zf8V7Ke586lFgjr2dZNuvo3lPJSGZ5JPQ=
chore(deps): bump gocloud.dev from 0.18.0 to 0.19.0 (#1340) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.18.0 to 0.19.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.18.0...v0.19.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-02-17 14:56:49 +02:00
github.com/google/btree v1.0.0/go.mod h1:lNA+9X1NB3Zf8V7Ke586lFgjr2dZNuvo3lPJSGZ5JPQ=
feat: add support for pushing artifacts to cloud storage provider( S3, Azure Blob, GCS) (#1036) * feat: adding support to push artifacts to AWS S3,Azure Blob and Google Cloud Storage readme for blob publisher test: add unit test for blob using testify and mockery test: add unit test for publish method fix: openbucket instance initialization remove unwanted packages: go mod tidy test: add missing unit test for publish method * doc: add missing comment for func * fix: add accidental delete file * fix : add missing Snapcrafts project * fix: unit test for Azure blob * fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue * fmt: fix linter reporeted issues fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue fmt: linter fix * test: fix typo in test error string * feat: add support to provider folder inside bucket, resolves discussed comments
2019-06-05 15:51:01 +02:00
github.com/google/go-cmp v0.2.0/go.mod h1:oXzfMopK8JAjlY9xF4vHSVASa0yLyX7SntLO5aqRK0M=
feat: add gitlab for releases (#1038) * outlines gitlab client integration * makes client parameter more explicit * adds gitlab url to config * changes releaseID to string to adapt to gitlab * updates to latest gitlab client lib 0.18 * fixes copy paster in gitlab upload func * fixes gitlab typo in config * adds gitlab token to env and context * release now uses the client factory method * skips brew pipe if it is not a github release * add github tokentype to publish tests * skips scoop pipe if it is not a github release * corrects brew skip msg * adds gitlab token to main test * adds gitlab to release docs * validates config and errors accordingly * adapt release pipe name to include gitlab * fixes gitlab client after testing * moves not-configured brew and scoop pipe checks as first check * adds more debug to gitlab client * adapts changelog generation for gitlab markdown * adds debug log for gitlab changelog * env needs to run before changelog pipe * moves gitlab default download url to default pipe * moves multiple releases check to from config to release pipe * release differs now for github and gitlab * adds debug gitlab release update msgs * moves env pipe as second after before because it determines the token type other pipes depend on * adaptes error check on gitlab release creation * Revert "adaptes error check on gitlab release creation" This reverts commit 032024571c76140f8e2207ee01cc08088f37594b. * simplifies gitlab client logic. removes comments * skips tls verification for gitlab client if specified in config * updates the docs * adds clarification that brew and scoop are not supported if it is a gitlab release * fixes copy paster in release.md * adds missing blob pipe in defaults and publish due to missing in merge * updates comment in gitlab client
2019-06-29 16:02:40 +02:00
github.com/google/go-cmp v0.3.0/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
feat: nfpm without rpmbuild (#1187) thanks @djgilcrease for all the hard work on nfpm and google/rpmpack. thanks to @jarondl who works on rpmpack as well. great work everyone! 🚀 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2019-10-11 14:00:19 +02:00
github.com/google/go-cmp v0.3.1/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
github.com/google/go-cmp v0.4.0/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
github.com/google/go-cmp v0.4.1/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
chore(deps): bump gocloud.dev from 0.20.0 to 0.21.0 (#1941) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.20.0 to 0.21.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.20.0...v0.21.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-12 01:14:58 +02:00
github.com/google/go-cmp v0.5.0/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
chore(deps): bump github.com/golangci/golangci-lint from 1.31.0 to 1.32.2 (#1882) * chore(deps): bump github.com/golangci/golangci-lint Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.31.0 to 1.32.2. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.31.0...v1.32.2) Signed-off-by: dependabot[bot] <support@github.com> * fix: lint issues Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * refactor: lint issues Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2020-11-10 16:15:03 +02:00
github.com/google/go-cmp v0.5.1/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
chore(deps): update nfpm (#1813) * chore(deps): update nfpm Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: lint Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2020-09-21 15:13:03 +02:00
github.com/google/go-cmp v0.5.2/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
chore(deps): bump gocloud.dev from 0.22.0 to 0.23.0 (#2225) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.22.0 to 0.23.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.22.0...v0.23.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-17 14:03:45 +02:00
github.com/google/go-cmp v0.5.3/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
chore(deps): bump gocloud.dev from 0.20.0 to 0.21.0 (#1941) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.20.0 to 0.21.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.20.0...v0.21.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-12 01:14:58 +02:00
github.com/google/go-cmp v0.5.4/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
chore(deps): bump gocloud.dev from 0.22.0 to 0.23.0 (#2225) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.22.0 to 0.23.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.22.0...v0.23.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-17 14:03:45 +02:00
github.com/google/go-cmp v0.5.5/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
feat: update go-github to v43 (#2948) Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
2022-03-02 14:17:08 +02:00
github.com/google/go-cmp v0.5.7/go.mod h1:n+brtR0CgQNWTVd5ZUFpTBC8YFBDLK/h/bpaJ8/DtOE=
feat(deps): bump github.com/google/go-github/v44 from 44.0.0 to 44.1.0 (#3111) Bumps [github.com/google/go-github/v44](https://github.com/google/go-github) from 44.0.0 to 44.1.0. - [Release notes](https://github.com/google/go-github/releases) - [Commits](https://github.com/google/go-github/compare/v44.0.0...v44.1.0) --- updated-dependencies: - dependency-name: github.com/google/go-github/v44 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-05-16 14:11:36 +02:00
github.com/google/go-cmp v0.5.8/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419) Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.1.1 to 2.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's releases</a>.</em></p> <blockquote> <h2>v2.2.1</h2> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's changelog</a>.</em></p> <blockquote> <h1>v2.2.1</h1> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign/commit/12cbf9ea177d22bbf5cf028bcb4712b5f174ebc6"><code>12cbf9e</code></a> add changelog for v2.2.1 release (<a href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/827f24e9d4a1f8e845cb1597d02053410f5bbe2a"><code>827f24e</code></a> feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8ac891ff0e29ddc67965423bee8f826219c6eb0f"><code>8ac891f</code></a> Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li><a href="https://github.com/sigstore/cosign/commit/8b366c497bd22b9be7742d057b8f59083dcadee0"><code>8b366c4</code></a> add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/23920de5623a505921ba4e62fa97e2553eff4699"><code>23920de</code></a> chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/e022e1c13240d1ae5b3c408bc53e389154331713"><code>e022e1c</code></a> chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/28c59c5eca6386924cc8f381afe94efe1e957679"><code>28c59c5</code></a> add missing groups key (<a href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8e5bdcc0ff39b8dc1b477251fef521601df76ec0"><code>8e5bdcc</code></a> chore(deps): bump github.com/google/certificate-transparency-go (<a href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/510cac4ef54274823599082e3a57a556ccd5c9e5"><code>510cac4</code></a> chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/063902b1d78fed7c12c9d9ce06248d36963e8169"><code>063902b</code></a> chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 18:39:49 +02:00
github.com/google/go-cmp v0.5.9/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
feat(deps): bump github.com/google/ko from 0.14.1 to 0.15.0 (#4373) Bumps [github.com/google/ko](https://github.com/google/ko) from 0.14.1 to 0.15.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/ko/releases">github.com/google/ko's releases</a>.</em></p> <blockquote> <h2>v0.15.0</h2> <h2>What's Changed</h2> <ul> <li>implement dumb cache for images by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1102">ko-build/ko#1102</a></li> <li>fixed typo in configuration.md by <a href="https://github.com/samlaf"><code>@​samlaf</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1105">ko-build/ko#1105</a></li> <li>pkg/commands: fix dropped errors by <a href="https://github.com/alrs"><code>@​alrs</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1109">ko-build/ko#1109</a></li> <li>ci: add govulncheck by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1110">ko-build/ko#1110</a></li> <li>chore: remove refs to deprecated io/ioutil by <a href="https://github.com/testwill"><code>@​testwill</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1092">ko-build/ko#1092</a></li> <li>Update install docs to install ko using Scoop by <a href="https://github.com/pgrunm"><code>@​pgrunm</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1118">ko-build/ko#1118</a></li> <li>include go build output in build error by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1127">ko-build/ko#1127</a></li> <li>Use go1.21, clean up ci and drop go1.19 by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1137">ko-build/ko#1137</a></li> <li>Update e2e.yaml by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1141">ko-build/ko#1141</a></li> <li>handle newfound lint errors by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1142">ko-build/ko#1142</a></li> <li>fix test broken by lint fix by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1143">ko-build/ko#1143</a></li> <li>Bump actions/checkout from 3.6.0 to 4.0.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1136">ko-build/ko#1136</a></li> <li>fix env var for go env by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1140">ko-build/ko#1140</a></li> <li>docs: add docs for TF and Lambda by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1139">ko-build/ko#1139</a></li> <li>docs: add Lambda and TF pages to sidebar by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1144">ko-build/ko#1144</a></li> <li>include example using go packages by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1145">ko-build/ko#1145</a></li> <li>fix the release workflow and install instructions by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1150">ko-build/ko#1150</a></li> <li>update missing places that was using go1.20 by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1163">ko-build/ko#1163</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/samlaf"><code>@​samlaf</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1105">ko-build/ko#1105</a></li> <li><a href="https://github.com/alrs"><code>@​alrs</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1109">ko-build/ko#1109</a></li> <li><a href="https://github.com/testwill"><code>@​testwill</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1092">ko-build/ko#1092</a></li> <li><a href="https://github.com/pgrunm"><code>@​pgrunm</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1118">ko-build/ko#1118</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/ko-build/ko/compare/v0.14.1...v0.15.0">https://github.com/ko-build/ko/compare/v0.14.1...v0.15.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ko-build/ko/commit/31035ad2026bfbafaa4f009baefe72463af1b3a7"><code>31035ad</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1164">#1164</a> from ko-build/dependabot/go_modules/golang.org/x/net...</li> <li><a href="https://github.com/ko-build/ko/commit/ba952fd091f9d27ee5c136e842b5e94dd715100c"><code>ba952fd</code></a> Bump golang.org/x/net from 0.16.0 to 0.17.0</li> <li><a href="https://github.com/ko-build/ko/commit/277f5d74353950c8663fc04b7546f66e57bd6aaf"><code>277f5d7</code></a> update missing places that was using go1.20 (<a href="https://redirect.github.com/google/ko/issues/1163">#1163</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/b8b3b21f8348d7cab863fe1b4eaa47dfc47632da"><code>b8b3b21</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1162">#1162</a> from ko-build/dependabot/go_modules/github.com/googl...</li> <li><a href="https://github.com/ko-build/ko/commit/4890ab2887b653d3c340de4d119bfd17b703f182"><code>4890ab2</code></a> Bump github.com/google/go-cmp from 0.5.9 to 0.6.0</li> <li><a href="https://github.com/ko-build/ko/commit/30b62aee3faf6866cee6513ea7eb13f5a27cd7ca"><code>30b62ae</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1161">#1161</a> from ko-build/dependabot/go_modules/github.com/spf13...</li> <li><a href="https://github.com/ko-build/ko/commit/449bcb61926cb3e3bcf191e8ca53fad5ab3a4e3c"><code>449bcb6</code></a> Bump github.com/spf13/viper from 1.16.0 to 1.17.0</li> <li><a href="https://github.com/ko-build/ko/commit/c543dd83cc75cd849fb95637ea29e3c7c66d6f87"><code>c543dd8</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1160">#1160</a> from ko-build/dependabot/go_modules/golang.org/x/too...</li> <li><a href="https://github.com/ko-build/ko/commit/c1ae5f5ce4fe058830f24827c853d4db39a95250"><code>c1ae5f5</code></a> Bump golang.org/x/tools from 0.13.0 to 0.14.0</li> <li><a href="https://github.com/ko-build/ko/commit/e50d2fd5ff0ec88ac837ffe6f6c2f122eb54b9f8"><code>e50d2fd</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1159">#1159</a> from ko-build/dependabot/go_modules/golang.org/x/syn...</li> <li>Additional commits viewable in <a href="https://github.com/google/ko/compare/v0.14.1...v0.15.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/ko&package-manager=go_modules&previous-version=0.14.1&new-version=0.15.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-17 17:47:47 +02:00
github.com/google/go-cmp v0.6.0 h1:ofyhxvXcZhMsU5ulbFiLKl/XBFqE1GSq7atu8tAmTRI=
github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
feat(deps): bump github.com/google/go-containerregistry from 0.16.1 to 0.17.0 (#4452) Bumps [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) from 0.16.1 to 0.17.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-containerregistry/releases">github.com/google/go-containerregistry's releases</a>.</em></p> <blockquote> <h2>v0.17.0</h2> <h2>What's Changed</h2> <ul> <li>:eagle: Validate index architectures match children :eagle: by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/google/go-containerregistry/pull/1776">google/go-containerregistry#1776</a></li> <li>Set Content-Length for blob uploads by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/google/go-containerregistry/pull/1781">google/go-containerregistry#1781</a></li> <li>Don't wrap DefaultKeychain with refreshes by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/google/go-containerregistry/pull/1791">google/go-containerregistry#1791</a></li> <li>Build releases with Go 1.21 by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/google/go-containerregistry/pull/1840">google/go-containerregistry#1840</a></li> <li>fix: mimic oci-layout in diskblobhandler by <a href="https://github.com/thesayyn"><code>@​thesayyn</code></a> in <a href="https://redirect.github.com/google/go-containerregistry/pull/1810">google/go-containerregistry#1810</a></li> <li>tag: add command explanation to the long help by <a href="https://github.com/abitrolly"><code>@​abitrolly</code></a> in <a href="https://redirect.github.com/google/go-containerregistry/pull/1843">google/go-containerregistry#1843</a></li> <li>feat: implement gc command by <a href="https://github.com/thesayyn"><code>@​thesayyn</code></a> in <a href="https://redirect.github.com/google/go-containerregistry/pull/1811">google/go-containerregistry#1811</a></li> <li>feat: allow port and disk path to be overriden by <a href="https://github.com/thesayyn"><code>@​thesayyn</code></a> in <a href="https://redirect.github.com/google/go-containerregistry/pull/1848">google/go-containerregistry#1848</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/google/go-containerregistry/compare/v0.16.1...v0.17.0">https://github.com/google/go-containerregistry/compare/v0.16.1...v0.17.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-containerregistry/commit/4fdaa32ee934cd178b6eb41b3096419a52ef426a"><code>4fdaa32</code></a> feat: allow port and disk path to be overriden (<a href="https://redirect.github.com/google/go-containerregistry/issues/1848">#1848</a>)</li> <li><a href="https://github.com/google/go-containerregistry/commit/ceb0580d9c4ade1f242d9b1d613011edf1015a22"><code>ceb0580</code></a> feat: implement gc command (<a href="https://redirect.github.com/google/go-containerregistry/issues/1811">#1811</a>)</li> <li><a href="https://github.com/google/go-containerregistry/commit/5a53a12f09d0868a601d5e67838d39fe95e6b441"><code>5a53a12</code></a> tag: add command explanation to the long help (<a href="https://redirect.github.com/google/go-containerregistry/issues/1843">#1843</a>)</li> <li><a href="https://github.com/google/go-containerregistry/commit/c722ce9e664b6da8dc8675f22459bdc3deb75e3d"><code>c722ce9</code></a> fix: mimic oci-layout (<a href="https://redirect.github.com/google/go-containerregistry/issues/1810">#1810</a>)</li> <li><a href="https://github.com/google/go-containerregistry/commit/b2485cb31cdf30220c29569aa80b07154db25f62"><code>b2485cb</code></a> Build releases with Go 1.21 (<a href="https://redirect.github.com/google/go-containerregistry/issues/1840">#1840</a>)</li> <li><a href="https://github.com/google/go-containerregistry/commit/dbcd01c402b2f05bcf6fb988014c5f37e9b13559"><code>dbcd01c</code></a> Don't wrap DefaultKeychain with refreshes (<a href="https://redirect.github.com/google/go-containerregistry/issues/1791">#1791</a>)</li> <li><a href="https://github.com/google/go-containerregistry/commit/a748190e18d49e759b7e28309f576dba82280d47"><code>a748190</code></a> Set Content-Length for blob uploads (<a href="https://redirect.github.com/google/go-containerregistry/issues/1781">#1781</a>)</li> <li><a href="https://github.com/google/go-containerregistry/commit/190ad0e4d556f199a07951d55124f8a394ebccd9"><code>190ad0e</code></a> Validate index architectures match children (<a href="https://redirect.github.com/google/go-containerregistry/issues/1776">#1776</a>)</li> <li>See full diff in <a href="https://github.com/google/go-containerregistry/compare/v0.16.1...v0.17.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/go-containerregistry&package-manager=go_modules&previous-version=0.16.1&new-version=0.17.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-30 15:05:03 +02:00
github.com/google/go-containerregistry v0.17.0 h1:5p+zYs/R4VGHkhyvgWurWrpJ2hW4Vv9fQI+GzdcwXLk=
github.com/google/go-containerregistry v0.17.0/go.mod h1:u0qB2l7mvtWVR5kNcbFIhFY1hLbf8eeGapA+vbFDCtQ=
feat(deps): update go-github to v57 Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-12-04 12:45:55 +02:00
github.com/google/go-github/v57 v57.0.0 h1:L+Y3UPTY8ALM8x+TV0lg+IEBI+upibemtBD8Q9u7zHs=
github.com/google/go-github/v57 v57.0.0/go.mod h1:s0omdnye0hvK/ecLvpsGfJMiRt85PimQh4oygmLIxHw=
feat(deps): upgrade go-github (#2581) Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
2021-10-14 14:32:52 +02:00
github.com/google/go-querystring v1.1.0 h1:AnCroh3fv4ZBgVIf1Iwtovgjaw/GiKJo8M8yD/fhyJ8=
github.com/google/go-querystring v1.1.0/go.mod h1:Kcdr2DB4koayq7X8pmAG4sNG59So17icRSOU623lUBU=
chore(deps): bump gocloud.dev from 0.23.0 to 0.24.0 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2021-09-11 04:41:28 +02:00
github.com/google/go-replayers/grpcreplay v1.1.0 h1:S5+I3zYyZ+GQz68OfbURDdt/+cSMqCK1wrvNx7WBzTE=
chore: go mod tidy Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-09-13 19:03:05 +02:00
github.com/google/go-replayers/grpcreplay v1.1.0/go.mod h1:qzAvJ8/wi57zq7gWqaE6AwLM6miiXUQwP1S+I9icmhk=
feat(deps): bump gocloud.dev from 0.29.0 to 0.30.0 (#4129) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.29.0 to 0.30.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.30.0</h2> <p><strong>blob</strong></p> <ul> <li><strong>all</strong>: Add <code>Upload</code> and <code>Download</code> methods that may be more efficient for some drivers.</li> <li><strong>s3blob</strong>: Add support for per-request <code>s3v2.Options</code>.</li> <li><strong>s3blob</strong>: Stop escaping second <code>/</code> in <code>//</code>; it's no longer necessary.</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>gcppubsub</strong>: Make it possible to configure <code>max_send_batch_size</code>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/d2d5bedb50683e2a6b893b75aafc193eca2715db"><code>d2d5bed</code></a> all: prep for release (<a href="https://redirect.github.com/google/go-cloud/issues/3263">#3263</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/c2e172b5a78def74973f7f3a8ece7c0bd6967432"><code>c2e172b</code></a> all: update dependencies (<a href="https://redirect.github.com/google/go-cloud/issues/3262">#3262</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/098177a48cae1bebfc90f88ed43d319444cab804"><code>098177a</code></a> blob/s3blob: fix the 'awssdk' argument examples</li> <li><a href="https://github.com/google/go-cloud/commit/2e4fad43f0b2606833b6a0de3e18628c70e11398"><code>2e4fad4</code></a> all: remove refs to deprecated xerrors</li> <li><a href="https://github.com/google/go-cloud/commit/1db413f1b3c4e344618b36401ba7e6dca3892929"><code>1db413f</code></a> pubsub/gcppubsub: make it possible to configure max_send_batch_size</li> <li><a href="https://github.com/google/go-cloud/commit/0c8428bf433136e7a4d96de0841f6373c6eacb53"><code>0c8428b</code></a> blob: Add Upload and Download methods that may be more efficient for some dri...</li> <li><a href="https://github.com/google/go-cloud/commit/54c71241a56f4c89eb64f587e5dc55667eaa40a3"><code>54c7124</code></a> all: cleanup duplicate import statements</li> <li><a href="https://github.com/google/go-cloud/commit/28b1328ae4fee939441faa5ee2e4eeba74c88ce7"><code>28b1328</code></a> all: minor code simplifications for returned boolean expressions</li> <li><a href="https://github.com/google/go-cloud/commit/2a407f5e6a71951384531445e25c58194f235062"><code>2a407f5</code></a> blob/gcsblob: Refresh goldens</li> <li><a href="https://github.com/google/go-cloud/commit/0cc16c8ae11e47028df24c4973debd6c56d29729"><code>0cc16c8</code></a> all: update goldens (<a href="https://redirect.github.com/google/go-cloud/issues/3252">#3252</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.29.0...v0.30.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.29.0&new-version=0.30.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-20 14:04:08 +02:00
github.com/google/go-replayers/httpreplay v1.2.0 h1:VM1wEyyjaoU53BwrOnaf9VhAyQQEEioJvFYxYcLRKzk=
chore: go mod tidy Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-09-13 19:03:05 +02:00
github.com/google/go-replayers/httpreplay v1.2.0/go.mod h1:WahEFFZZ7a1P4VM1qEeHy+tME4bwyqPcwWbNlUI1Mcg=
chore(deps): bump gocloud.dev from 0.20.0 to 0.21.0 (#1941) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.20.0 to 0.21.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.20.0...v0.21.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-12 01:14:58 +02:00
github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
feat(deps): bump github.com/google/ko from 0.15.0 to 0.15.1 (#4435) Bumps [github.com/google/ko](https://github.com/google/ko) from 0.15.0 to 0.15.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/ko/releases">github.com/google/ko's releases</a>.</em></p> <blockquote> <h2>v0.15.1</h2> <h2>What's Changed</h2> <ul> <li>Don't AppendDescriptor until we've written config by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1175">ko-build/ko#1175</a></li> <li>Add more locking around on-disk image cache by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1176">ko-build/ko#1176</a></li> <li>Fix &quot;AM&quot; Time Typo by <a href="https://github.com/StephenGrider"><code>@​StephenGrider</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1179">ko-build/ko#1179</a></li> <li>docs: add MacPorts install info by <a href="https://github.com/herbygillot"><code>@​herbygillot</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1180">ko-build/ko#1180</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/StephenGrider"><code>@​StephenGrider</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1179">ko-build/ko#1179</a></li> <li><a href="https://github.com/herbygillot"><code>@​herbygillot</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1180">ko-build/ko#1180</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/ko-build/ko/compare/v0.15.0...v0.15.1">https://github.com/ko-build/ko/compare/v0.15.0...v0.15.1</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ko-build/ko/commit/2e9e58b187e1092534fbfc9889a04725da4a403d"><code>2e9e58b</code></a> Bump k8s.io/apimachinery from 0.28.3 to 0.28.4</li> <li><a href="https://github.com/ko-build/ko/commit/84d3803370e7adf419c594cb210d1171307a4446"><code>84d3803</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1177">#1177</a> from ko-build/dependabot/go_modules/github.com/sigst...</li> <li><a href="https://github.com/ko-build/ko/commit/512ca9c0fbb7f766cf2dda1b8046adf146a70bd5"><code>512ca9c</code></a> Bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1</li> <li><a href="https://github.com/ko-build/ko/commit/4aceae1ddfa57badea67a533d6505ffa8226aff8"><code>4aceae1</code></a> update test</li> <li><a href="https://github.com/ko-build/ko/commit/a271b54fe5f4774a65741f945490c32fe160f0d1"><code>a271b54</code></a> Bump github.com/google/go-containerregistry from 0.15.2 to 0.16.1</li> <li><a href="https://github.com/ko-build/ko/commit/cfc13deeb6417d7e1582f0314a6009cc0c53f26f"><code>cfc13de</code></a> Bump golang.org/x/tools from 0.14.0 to 0.15.0</li> <li><a href="https://github.com/ko-build/ko/commit/59038b983fc131ebcd702dfb64ab9289e07d4e76"><code>59038b9</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1180">#1180</a> from herbygillot/patch-1</li> <li><a href="https://github.com/ko-build/ko/commit/63cd51141203d881f4f1cbf542bbcb2ab8ec9bea"><code>63cd511</code></a> docs: add MacPorts install info</li> <li><a href="https://github.com/ko-build/ko/commit/f1f5fb3afb7fe563ad71dfdc50887f156cfde703"><code>f1f5fb3</code></a> Update community.md (<a href="https://redirect.github.com/google/ko/issues/1179">#1179</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/c92ea35f27f271c1ca29ad67454e7ad083026b43"><code>c92ea35</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1178">#1178</a> from ko-build/dependabot/github_actions/sigstore/cos...</li> <li>Additional commits viewable in <a href="https://github.com/google/ko/compare/v0.15.0...v0.15.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/ko&package-manager=go_modules&previous-version=0.15.0&new-version=0.15.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) Dependabot will merge this PR once CI passes on it, as requested by @caarlos0. [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-23 22:38:08 +02:00
github.com/google/ko v0.15.1 h1:++5WJTTjSLyObGK6NYdnkHGw4XiUkFD2ldk2mbJ9vd8=
github.com/google/ko v0.15.1/go.mod h1:2hpqDZDqly3yVDZbBCohSnUrmwOXw7MBCqujBBu6rMU=
feat(deps): bump the gomod-deps group with 3 updates (#4200) Bumps the gomod-deps group with 3 updates: [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab), [gocloud.dev](https://github.com/google/go-cloud) and [go.uber.org/automaxprocs](https://github.com/uber-go/automaxprocs). Updates `github.com/xanzy/go-gitlab` from 0.86.0 to 0.88.0 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/xanzy/go-gitlab/commit/7e3c23c9c221c0a334e11356503a99d41f206651"><code>7e3c23c</code></a> Update pipeline tests</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/2ac3eea05ffd9c096624ce3f88bf88132940b025"><code>2ac3eea</code></a> Merge pull request <a href="https://redirect.github.com/xanzy/go-gitlab/issues/1758">#1758</a> from billiechar/billiechar-snippet-moves</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/ddb5ca097455e3087ade383fec32ab07d24cb2c0"><code>ddb5ca0</code></a> Update the PR to make the code consistent</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/a4d27d6848beb49923d87d6201330f869f230f8b"><code>a4d27d6</code></a> Merge pull request <a href="https://redirect.github.com/xanzy/go-gitlab/issues/1759">#1759</a> from PatrickRice-KSC/add-missing-housekeeping-setting</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/a42af8593e45e5a55a6008e482ecbc3dc6f5d06b"><code>a42af85</code></a> Change PipelineTestCases.SystemOutput to interface{}</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/89486a0530374b782bb0267664a5bd49394fbb31"><code>89486a0</code></a> Add missing housekeeping setting</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/852645c7728d7a4284053806b68682b2905c856a"><code>852645c</code></a> Update tests</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/f2c344ca14c5829c55154263b6504d57b26126c3"><code>f2c344c</code></a> Use separate options for each schedule</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/86dd6321cdc296bc3f9a065718e58ea33cb1e686"><code>86dd632</code></a> Add snippet repository storage move APIs</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/3c1f9bfa0d349acfb0aba8991a1abdf62495ee81"><code>3c1f9bf</code></a> Use io.ReadAll instead of ioutil.ReadAll</li> <li>Additional commits viewable in <a href="https://github.com/xanzy/go-gitlab/compare/v0.86.0...v0.88.0">compare view</a></li> </ul> </details> <br /> Updates `gocloud.dev` from 0.30.0 to 0.32.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.32.0</h2> <p>Redoing <code>v0.31.0</code> since I think I messed up the tags. Copying the release notes:</p> <p><strong>all</strong></p> <ul> <li>Update <code>go</code> version in <code>go.mod</code> to maintain cleaner <code>go.mod</code> and <code>go.sum</code> files.</li> </ul> <p><strong>blob</strong></p> <ul> <li><strong>all</strong>: Pass through reader/writer to <code>WriteTo</code>/<code>ReadFrom</code> if available (optimization).</li> <li><strong>all</strong>: Make <code>blob.Bucket</code> implement <code>io/fs.FS</code> and <code>io/fs.SubFS</code>.</li> <li><strong>gcsblob</strong>: Add support for forcing an unauthenticated client.</li> </ul> <p><strong>server</strong></p> <ul> <li>Make <code>requestlog</code> internal structs implement <code>http.Flusher</code>.</li> <li>Don't always read the full request in order to calculate the request size; use <code>Content-Length</code> when available.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/728b7c1395cb35d23e85ee0a8e957744e2560183"><code>728b7c1</code></a> all: prerelease take 2 (<a href="https://redirect.github.com/google/go-cloud/issues/3278">#3278</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/838a8fd9b6b7efc90b55cb5ed10e19463cbb1262"><code>838a8fd</code></a> all: prerelease (<a href="https://redirect.github.com/google/go-cloud/issues/3277">#3277</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0f33c81c8dbec9d5302d9615b95c5ba878e0ede9"><code>0f33c81</code></a> all: add dragonfly build to test suite (<a href="https://redirect.github.com/google/go-cloud/issues/3268">#3268</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/bfd1b284ad86ce55bd0a7bc3e1c27fc8814fb87a"><code>bfd1b28</code></a> all: update dependencies (<a href="https://redirect.github.com/google/go-cloud/issues/3276">#3276</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8d4590ac1e51bca704bc85422cb0a2f2d0b1b7ba"><code>8d4590a</code></a> server/requestlog: Don't consume entire body just to get a request size (<a href="https://redirect.github.com/google/go-cloud/issues/3274">#3274</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/a1d9f4295c59f30b30a085682b47e314c6960673"><code>a1d9f42</code></a> server/requestlog: make responseStats implement http.Flusher (<a href="https://redirect.github.com/google/go-cloud/issues/3275">#3275</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cab06ea136cfdd73f67300332994f81234469bc"><code>8cab06e</code></a> blob/gcsblob: add support for forcing an authenticated client (<a href="https://redirect.github.com/google/go-cloud/issues/3273">#3273</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0e5728dd337838e82e07e03dcef9f54dfc04cc52"><code>0e5728d</code></a> blob: make blob.Bucket implement io/fs.FS and io/fs.SubFS (<a href="https://redirect.github.com/google/go-cloud/issues/3272">#3272</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/a6551792237ccc995a6e95169210ac8e77dbcd94"><code>a655179</code></a> all: update go.mod files to go 1.19 (<a href="https://redirect.github.com/google/go-cloud/issues/3271">#3271</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8385fc39c70f6589823ca019e399f5514feb377d"><code>8385fc3</code></a> blob: pass through reader/writer to <code>WriteTo</code>/<code>ReadFrom</code> if available (<a href="https://redirect.github.com/google/go-cloud/issues/3267">#3267</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.30.0...v0.32.0">compare view</a></li> </ul> </details> <br /> Updates `go.uber.org/automaxprocs` from 1.5.2 to 1.5.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/uber-go/automaxprocs/releases">go.uber.org/automaxprocs's releases</a>.</em></p> <blockquote> <h2>v1.5.3</h2> <ul> <li>Fix mountinfo parsing when super options have fields with spaces.</li> <li>Fix division by zero while parsing cgroups.</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/uber-go/automaxprocs/blob/master/CHANGELOG.md">go.uber.org/automaxprocs's changelog</a>.</em></p> <blockquote> <h2>v1.5.3 (2023-07-19)</h2> <ul> <li>Fix mountinfo parsing when super options have fields with spaces.</li> <li>Fix division by zero while parsing cgroups.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/uber-go/automaxprocs/commit/e83e959d8845f659d02749ba5598fd62a7129e4e"><code>e83e959</code></a> Release v1.5.3 (<a href="https://redirect.github.com/uber-go/automaxprocs/issues/77">#77</a>)</li> <li><a href="https://github.com/uber-go/automaxprocs/commit/94404505e072633727945d6adc276be8759dadcf"><code>9440450</code></a> Update actions (<a href="https://redirect.github.com/uber-go/automaxprocs/issues/76">#76</a>)</li> <li><a href="https://github.com/uber-go/automaxprocs/commit/4b0a5c9c3c30af086d1251cecd4114b7d4b55a45"><code>4b0a5c9</code></a> set CI perms to readonly (<a href="https://redirect.github.com/uber-go/automaxprocs/issues/75">#75</a>)</li> <li><a href="https://github.com/uber-go/automaxprocs/commit/c64632e175f532a5fe994622797d70b06338337e"><code>c64632e</code></a> Drop Go 1.17 and Go 1.18 from CI (<a href="https://redirect.github.com/uber-go/automaxprocs/issues/74">#74</a>)</li> <li><a href="https://github.com/uber-go/automaxprocs/commit/60f22786b2d20055ca8d888ed455a25aed935bea"><code>60f2278</code></a> fix: mountinfo parsing (<a href="https://redirect.github.com/uber-go/automaxprocs/issues/73">#73</a>)</li> <li><a href="https://github.com/uber-go/automaxprocs/commit/d064ede19db88036b1a2fb6b41113717a84dfda2"><code>d064ede</code></a> Fix division by zero (<a href="https://redirect.github.com/uber-go/automaxprocs/issues/71">#71</a>)</li> <li>See full diff in <a href="https://github.com/uber-go/automaxprocs/compare/v1.5.2...v1.5.3">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-20 14:56:26 +02:00
github.com/google/martian v2.1.0+incompatible h1:/CP5g8u/VJHijgedC/Legn3BAbAaWPgecwXBIDzw5no=
feat: add support for pushing artifacts to cloud storage provider( S3, Azure Blob, GCS) (#1036) * feat: adding support to push artifacts to AWS S3,Azure Blob and Google Cloud Storage readme for blob publisher test: add unit test for blob using testify and mockery test: add unit test for publish method fix: openbucket instance initialization remove unwanted packages: go mod tidy test: add missing unit test for publish method * doc: add missing comment for func * fix: add accidental delete file * fix : add missing Snapcrafts project * fix: unit test for Azure blob * fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue * fmt: fix linter reporeted issues fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue fmt: linter fix * test: fix typo in test error string * feat: add support to provider folder inside bucket, resolves discussed comments
2019-06-05 15:51:01 +02:00
github.com/google/martian v2.1.0+incompatible/go.mod h1:9I4somxYTbIHy5NJKHRl3wXiIaQGbYVAs8BPL6v8lEs=
chore(deps): bump gocloud.dev from 0.20.0 to 0.21.0 (#1941) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.20.0 to 0.21.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.20.0...v0.21.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-12 01:14:58 +02:00
github.com/google/martian/v3 v3.0.0/go.mod h1:y5Zk1BBys9G+gd6Jrk0W3cC1+ELVxBWuIGO+w/tUAp0=
github.com/google/martian/v3 v3.1.0/go.mod h1:y5Zk1BBys9G+gd6Jrk0W3cC1+ELVxBWuIGO+w/tUAp0=
feat(deps): bump gocloud.dev from 0.24.0 to 0.26.0 (#3287) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.24.0 to 0.26.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.24.0...v0.26.0) --- updated-dependencies: - dependency-name: gocloud.dev dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-04 20:44:54 +02:00
github.com/google/martian/v3 v3.3.2 h1:IqNFLAmvJOgVlpdEBiQbDc2EwKW77amAycfTuWKdfvw=
chore: go mod tidy Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-09-13 19:03:05 +02:00
github.com/google/martian/v3 v3.3.2/go.mod h1:oBOf6HBosgwRXnUGWUB05QECsc6uvmMiJ3+6W4l/CUk=
feat: add support for pushing artifacts to cloud storage provider( S3, Azure Blob, GCS) (#1036) * feat: adding support to push artifacts to AWS S3,Azure Blob and Google Cloud Storage readme for blob publisher test: add unit test for blob using testify and mockery test: add unit test for publish method fix: openbucket instance initialization remove unwanted packages: go mod tidy test: add missing unit test for publish method * doc: add missing comment for func * fix: add accidental delete file * fix : add missing Snapcrafts project * fix: unit test for Azure blob * fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue * fmt: fix linter reporeted issues fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue fmt: linter fix * test: fix typo in test error string * feat: add support to provider folder inside bucket, resolves discussed comments
2019-06-05 15:51:01 +02:00
github.com/google/pprof v0.0.0-20181206194817-3ea8567a2e57/go.mod h1:zfwlbNMJ+OItoe0UupaVj+oy1omPYYDuagoSzA8v9mc=
chore(deps): bump gocloud.dev from 0.18.0 to 0.19.0 (#1340) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.18.0 to 0.19.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.18.0...v0.19.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-02-17 14:56:49 +02:00
github.com/google/pprof v0.0.0-20190515194954-54271f7e092f/go.mod h1:zfwlbNMJ+OItoe0UupaVj+oy1omPYYDuagoSzA8v9mc=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
github.com/google/pprof v0.0.0-20191218002539-d4f498aebedc/go.mod h1:ZgVRPoUq/hfqzAqh7sHMqb3I9Rq5C59dIz2SbBwJ4eM=
github.com/google/pprof v0.0.0-20200212024743-f11f1df84d12/go.mod h1:ZgVRPoUq/hfqzAqh7sHMqb3I9Rq5C59dIz2SbBwJ4eM=
github.com/google/pprof v0.0.0-20200229191704-1ebb73c60ed3/go.mod h1:ZgVRPoUq/hfqzAqh7sHMqb3I9Rq5C59dIz2SbBwJ4eM=
github.com/google/pprof v0.0.0-20200430221834-fc25d7d30c6d/go.mod h1:ZgVRPoUq/hfqzAqh7sHMqb3I9Rq5C59dIz2SbBwJ4eM=
chore(deps): bump gocloud.dev from 0.20.0 to 0.21.0 (#1941) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.20.0 to 0.21.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.20.0...v0.21.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-12 01:14:58 +02:00
github.com/google/pprof v0.0.0-20200708004538-1a94d8640e99/go.mod h1:ZgVRPoUq/hfqzAqh7sHMqb3I9Rq5C59dIz2SbBwJ4eM=
github.com/google/pprof v0.0.0-20201023163331-3e6fc7fc9c4c/go.mod h1:kpwsk12EmLew5upagYY7GY0pfYCcupk39gWOCRROcvE=
chore(deps): bump gocloud.dev from 0.22.0 to 0.23.0 (#2225) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.22.0 to 0.23.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.22.0...v0.23.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-17 14:03:45 +02:00
github.com/google/pprof v0.0.0-20201203190320-1bf35d6f28c2/go.mod h1:kpwsk12EmLew5upagYY7GY0pfYCcupk39gWOCRROcvE=
feat(deps): bump gocloud.dev from 0.27.0 to 0.28.0 (#3689) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.27.0 to 0.28.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.28.0</h2> <p><strong>BREAKING CHANGES</strong>:</p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK.</li> <li><strong>blob/azureblob</strong>: Updated to match recent breaking changes in the Azure packages (yes, again).</li> <li><strong>pubsub/awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>blob</strong></p> <ul> <li><strong>memblob</strong>: Fixed bug where use of <code>BeforeCopy</code> callback would drop the actual copying.</li> <li><strong>azureblob</strong>: Updated to match recent breaking changes in the Azure packages.</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>all</strong>: Simplified and improved batch sizing, should resolve issues with too-frequent polling in some situations.</li> <li><strong>azurepubsub</strong>: Made <code>ListenerTimeout</code> configurable.</li> <li><strong>gcppubsub</strong> and <strong>awssnssqs</strong>: Support lazy mode for <code>Nack</code> (where no explicit <code>Nack</code> is sent).</li> <li><strong>awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>secrets</strong></p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK. Use azidentity.NewDefaultAzureCredential.</li> </ul> <p><strong>sql</strong></p> <ul> <li><strong>gcp/cloudsql</strong>: Fixed IAM login.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/24166090495b8e084a23aa7d11fcc81ec33e4729"><code>2416609</code></a> all: prep for v0.28.0 (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3207">#3207</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/13f46eb8065d5ea62b757f5f0f11a56f48faf7cc"><code>13f46eb</code></a> pubsub: simplify and improve batch sizing, especially for low message rates</li> <li><a href="https://github.com/google/go-cloud/commit/8f2c2b9a392a8e4a3d7a4942f88f3df607f8f6d0"><code>8f2c2b9</code></a> pubsub/memsub: Add Options for batching (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3205">#3205</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fe0a3d75fe43c039258df25ebf102602526e3052"><code>fe0a3d7</code></a> pubsub/awssqs: Fix BeforeSend/As to enable changes to the sqs input message (...</li> <li><a href="https://github.com/google/go-cloud/commit/dfaf95af34dd9022a69a061028e0ceec98e9c670"><code>dfaf95a</code></a> secrets/azurekeyvault: Use azidentity.NewDefaultAzureCredential to support ot...</li> <li><a href="https://github.com/google/go-cloud/commit/1e26311532928f060c490a7fbf2be92b55ee12c4"><code>1e26311</code></a> blob: Remove some debug logging (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3197">#3197</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/43ed5a499864c08b7b6549ff7085f19634a1f02c"><code>43ed5a4</code></a> pubsub/gcppubsub: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3195">#3195</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/be80e70b3dcf7a6b86481881c7ac0b44a8095178"><code>be80e70</code></a> pubsub/awssnssqs: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3194">#3194</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/7d690993a53cf8cc2e7af07872876d58601f1261"><code>7d69099</code></a> blob/azblob: Update to latest, and restore As for dirlist (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3191">#3191</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/e942f3c339f0eb617ac4dbc7f37cc4e5920ee7cc"><code>e942f3c</code></a> blob/azblob: Restore As for List entry (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3188">#3188</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.27.0...v0.28.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.27.0&new-version=0.28.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-11 14:09:51 +02:00
github.com/google/pprof v0.0.0-20201218002935-b9804c9f04c2/go.mod h1:kpwsk12EmLew5upagYY7GY0pfYCcupk39gWOCRROcvE=
feat: Use tools.go paradigm for external dependencies (#1495) Co-authored-by: CrazyMax <crazy-max@users.noreply.github.com>
2020-05-10 21:34:55 +02:00
github.com/google/renameio v0.1.0/go.mod h1:KWCgfxg9yswjAJkECMjeO8J8rahYeXnNhOm40UhjYkI=
feat(nfpm): update + rpm prefixes support Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-07-14 03:55:47 +02:00
github.com/google/rpmpack v0.5.0 h1:L16KZ3QvkFGpYhmp23iQip+mx1X39foEsqszjMNBm8A=
github.com/google/rpmpack v0.5.0/go.mod h1:uqVAUVQLq8UY2hCDfmJ/+rtO3aw7qyhc90rCVEabEfI=
feat(deps): bump github.com/google/ko from 0.14.1 to 0.15.0 (#4373) Bumps [github.com/google/ko](https://github.com/google/ko) from 0.14.1 to 0.15.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/ko/releases">github.com/google/ko's releases</a>.</em></p> <blockquote> <h2>v0.15.0</h2> <h2>What's Changed</h2> <ul> <li>implement dumb cache for images by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1102">ko-build/ko#1102</a></li> <li>fixed typo in configuration.md by <a href="https://github.com/samlaf"><code>@​samlaf</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1105">ko-build/ko#1105</a></li> <li>pkg/commands: fix dropped errors by <a href="https://github.com/alrs"><code>@​alrs</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1109">ko-build/ko#1109</a></li> <li>ci: add govulncheck by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1110">ko-build/ko#1110</a></li> <li>chore: remove refs to deprecated io/ioutil by <a href="https://github.com/testwill"><code>@​testwill</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1092">ko-build/ko#1092</a></li> <li>Update install docs to install ko using Scoop by <a href="https://github.com/pgrunm"><code>@​pgrunm</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1118">ko-build/ko#1118</a></li> <li>include go build output in build error by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1127">ko-build/ko#1127</a></li> <li>Use go1.21, clean up ci and drop go1.19 by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1137">ko-build/ko#1137</a></li> <li>Update e2e.yaml by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1141">ko-build/ko#1141</a></li> <li>handle newfound lint errors by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1142">ko-build/ko#1142</a></li> <li>fix test broken by lint fix by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1143">ko-build/ko#1143</a></li> <li>Bump actions/checkout from 3.6.0 to 4.0.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1136">ko-build/ko#1136</a></li> <li>fix env var for go env by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1140">ko-build/ko#1140</a></li> <li>docs: add docs for TF and Lambda by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1139">ko-build/ko#1139</a></li> <li>docs: add Lambda and TF pages to sidebar by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1144">ko-build/ko#1144</a></li> <li>include example using go packages by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1145">ko-build/ko#1145</a></li> <li>fix the release workflow and install instructions by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1150">ko-build/ko#1150</a></li> <li>update missing places that was using go1.20 by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1163">ko-build/ko#1163</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/samlaf"><code>@​samlaf</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1105">ko-build/ko#1105</a></li> <li><a href="https://github.com/alrs"><code>@​alrs</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1109">ko-build/ko#1109</a></li> <li><a href="https://github.com/testwill"><code>@​testwill</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1092">ko-build/ko#1092</a></li> <li><a href="https://github.com/pgrunm"><code>@​pgrunm</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1118">ko-build/ko#1118</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/ko-build/ko/compare/v0.14.1...v0.15.0">https://github.com/ko-build/ko/compare/v0.14.1...v0.15.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ko-build/ko/commit/31035ad2026bfbafaa4f009baefe72463af1b3a7"><code>31035ad</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1164">#1164</a> from ko-build/dependabot/go_modules/golang.org/x/net...</li> <li><a href="https://github.com/ko-build/ko/commit/ba952fd091f9d27ee5c136e842b5e94dd715100c"><code>ba952fd</code></a> Bump golang.org/x/net from 0.16.0 to 0.17.0</li> <li><a href="https://github.com/ko-build/ko/commit/277f5d74353950c8663fc04b7546f66e57bd6aaf"><code>277f5d7</code></a> update missing places that was using go1.20 (<a href="https://redirect.github.com/google/ko/issues/1163">#1163</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/b8b3b21f8348d7cab863fe1b4eaa47dfc47632da"><code>b8b3b21</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1162">#1162</a> from ko-build/dependabot/go_modules/github.com/googl...</li> <li><a href="https://github.com/ko-build/ko/commit/4890ab2887b653d3c340de4d119bfd17b703f182"><code>4890ab2</code></a> Bump github.com/google/go-cmp from 0.5.9 to 0.6.0</li> <li><a href="https://github.com/ko-build/ko/commit/30b62aee3faf6866cee6513ea7eb13f5a27cd7ca"><code>30b62ae</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1161">#1161</a> from ko-build/dependabot/go_modules/github.com/spf13...</li> <li><a href="https://github.com/ko-build/ko/commit/449bcb61926cb3e3bcf191e8ca53fad5ab3a4e3c"><code>449bcb6</code></a> Bump github.com/spf13/viper from 1.16.0 to 1.17.0</li> <li><a href="https://github.com/ko-build/ko/commit/c543dd83cc75cd849fb95637ea29e3c7c66d6f87"><code>c543dd8</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1160">#1160</a> from ko-build/dependabot/go_modules/golang.org/x/too...</li> <li><a href="https://github.com/ko-build/ko/commit/c1ae5f5ce4fe058830f24827c853d4db39a95250"><code>c1ae5f5</code></a> Bump golang.org/x/tools from 0.13.0 to 0.14.0</li> <li><a href="https://github.com/ko-build/ko/commit/e50d2fd5ff0ec88ac837ffe6f6c2f122eb54b9f8"><code>e50d2fd</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1159">#1159</a> from ko-build/dependabot/go_modules/golang.org/x/syn...</li> <li>Additional commits viewable in <a href="https://github.com/google/ko/compare/v0.14.1...v0.15.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/ko&package-manager=go_modules&previous-version=0.14.1&new-version=0.15.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-17 17:47:47 +02:00
github.com/google/s2a-go v0.1.7 h1:60BLSyTrOV4/haCDW4zb1guZItoSq8foHCXrAnjBo/o=
github.com/google/s2a-go v0.1.7/go.mod h1:50CgR4k1jNlWBu4UfS4AcfhVe1r6pdZPygJ3R8F0Qdw=
feat(deps): bump github.com/google/ko from 0.12.0 to 0.13.0 (#3880) Bumps [github.com/google/ko](https://github.com/google/ko) from 0.12.0 to 0.13.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/ko/releases">github.com/google/ko's releases</a>.</em></p> <blockquote> <h2>v0.13.0</h2> <h2>What's Changed</h2> <ul> <li>SPDX: Fix package manager label by <a href="https://github.com/puerco"><code>@​puerco</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/801">ko-build/ko#801</a></li> <li>SPDX 2.3 support by <a href="https://github.com/puerco"><code>@​puerco</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/803">ko-build/ko#803</a></li> <li>ci: build and test using 1.18 and 1.19 (drop 1.17) by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/812">ko-build/ko#812</a></li> <li>removes repo move message by <a href="https://github.com/mchmarny"><code>@​mchmarny</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/814">ko-build/ko#814</a></li> <li>feat: write sbom result to disk by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/822">ko-build/ko#822</a></li> <li>feat: adding support for using multiple keychain for sending sbom results to a different repository by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/821">ko-build/ko#821</a></li> <li>Move docs to ko.build by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/749">ko-build/ko#749</a></li> <li>Update setup-ko version by <a href="https://github.com/ianlewis"><code>@​ianlewis</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/836">ko-build/ko#836</a></li> <li>Add -- usage in readme by <a href="https://github.com/jwcesign"><code>@​jwcesign</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/840">ko-build/ko#840</a></li> <li>add CONTRIBUTING, code of conduct, roadmap by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/837">ko-build/ko#837</a></li> <li>attempt to fix GH Pages publishing by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/843">ko-build/ko#843</a></li> <li>doc: fix link to Installation page in Getting Started by <a href="https://github.com/antoineco"><code>@​antoineco</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/846">ko-build/ko#846</a></li> <li>.ko.yaml: bump golang 1.18 -&gt; 1.19 by <a href="https://github.com/srenatus"><code>@​srenatus</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/848">ko-build/ko#848</a></li> <li>truncate -image-refs file by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/855">ko-build/ko#855</a></li> <li>update docs: fix broken links, align with README by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/854">ko-build/ko#854</a></li> <li>Handle KO_DOCKER_REPO=ko.local/repo and --bare correctly by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/820">ko-build/ko#820</a></li> <li>another docs update by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/856">ko-build/ko#856</a></li> <li>ko.build: support some common shortlinks by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/872">ko-build/ko#872</a></li> <li>install: fail with 404 instead of gzip error when url was wrong by <a href="https://github.com/grosser"><code>@​grosser</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/879">ko-build/ko#879</a></li> <li>feat: deduplicate tags by <a href="https://github.com/bluebrown"><code>@​bluebrown</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/884">ko-build/ko#884</a></li> <li>install mkdocs-redirect when publishing site by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/873">ko-build/ko#873</a></li> <li>nit: replace one-item slice with const by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/885">ko-build/ko#885</a></li> <li>Temp fix for SLSA generators by <a href="https://github.com/laurentsimon"><code>@​laurentsimon</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/886">ko-build/ko#886</a></li> <li>Fix verifier by <a href="https://github.com/laurentsimon"><code>@​laurentsimon</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/891">ko-build/ko#891</a></li> <li>Fix link in static-assets.md by <a href="https://github.com/yuryu"><code>@​yuryu</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/893">ko-build/ko#893</a></li> <li>add KO_DEFAULTBASEIMAGE usage to docs by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/895">ko-build/ko#895</a></li> <li>Publish an tagged image on release by <a href="https://github.com/vdemeester"><code>@​vdemeester</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/868">ko-build/ko#868</a></li> <li>Add option to configure default platforms by <a href="https://github.com/ReToCode"><code>@​ReToCode</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/897">ko-build/ko#897</a></li> <li>Fix broken SLSA link by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/899">ko-build/ko#899</a></li> <li>add MAINTAINERS.md by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/905">ko-build/ko#905</a></li> <li>fix: possible race condition when applying templates to flags/ldflags by <a href="https://github.com/caarlos0"><code>@​caarlos0</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/913">ko-build/ko#913</a></li> <li>update docs to reflect actual default base image by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/903">ko-build/ko#903</a></li> <li>remove repeated error message on failure by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/921">ko-build/ko#921</a></li> <li>website: update CNCF announcement by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/920">ko-build/ko#920</a></li> <li>fix KO_CONFIG_PATH pointing to a file by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/923">ko-build/ko#923</a></li> <li>upgrade to cosign v2.0.0-rc.0 by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/933">ko-build/ko#933</a></li> <li>Feature: Add ECR presubmit testing. by <a href="https://github.com/mattmoor"><code>@​mattmoor</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/934">ko-build/ko#934</a></li> <li>remove 'ko deps' by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/937">ko-build/ko#937</a></li> <li>feat: Add KO_GO_PATH env var by <a href="https://github.com/embano1"><code>@​embano1</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/930">ko-build/ko#930</a></li> <li>add ko.build/slack short link by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/945">ko-build/ko#945</a></li> <li>update link to ko goreleaser docs by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/936">ko-build/ko#936</a></li> <li>add ko community meeting details by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/938">ko-build/ko#938</a></li> <li>fix cosign by adding --yes by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/973">ko-build/ko#973</a></li> <li>fix: handle docker's unknown/unknown platform in index manifests by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/975">ko-build/ko#975</a></li> <li>fix file extension for cyclonedx by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/974">ko-build/ko#974</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/ianlewis"><code>@​ianlewis</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/836">ko-build/ko#836</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ko-build/ko/commit/e22e7a15ffb988adc14c3fc6a964f61ed711812f"><code>e22e7a1</code></a> bump ggcr dep to <a href="https://github.com/main"><code>@​main</code></a> (<a href="https://redirect.github.com/google/ko/issues/976">#976</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/8e075ae1f1822bb61a871f11197566b362c342f0"><code>8e075ae</code></a> fix file extension for cyclonedx (<a href="https://redirect.github.com/google/ko/issues/974">#974</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/11670b7498be63bc0e04e7ba36433fd22f9654ce"><code>11670b7</code></a> fix: handle docker's unknown/unknown platform in index manifests (<a href="https://redirect.github.com/google/ko/issues/975">#975</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/7ce947817e2f59942cb181aa833bfd13533bcc19"><code>7ce9478</code></a> fix cosign by adding --yes (<a href="https://redirect.github.com/google/ko/issues/973">#973</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/9302da78dc995b2b2dd70c044708c3c4c6a056b6"><code>9302da7</code></a> Bump k8s.io/apimachinery from 0.26.1 to 0.26.2 (<a href="https://redirect.github.com/google/ko/issues/972">#972</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/a1588838ba1698c3ca3f6785363a1a9f82ed4baa"><code>a158883</code></a> Bump sigstore/cosign-installer from 2.8.1 to 3.0.1 (<a href="https://redirect.github.com/google/ko/issues/971">#971</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/86b6c2854f8a7c321ce1b8ea121938ce9cc79475"><code>86b6c28</code></a> Bump actions/checkout from 2 to 3 (<a href="https://redirect.github.com/google/ko/issues/966">#966</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/0bd12fb106ed9d03994a6b8883f8a5d834a2aa15"><code>0bd12fb</code></a> Bump slsa-framework/slsa-github-generator from 1.2.1 to 1.5.0 (<a href="https://redirect.github.com/google/ko/issues/967">#967</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/d5125daacd07306d3814a6910cc54422824331e6"><code>d5125da</code></a> Bump github.com/sigstore/cosign/v2 from 2.0.0-rc.2 to 2.0.0 (<a href="https://redirect.github.com/google/ko/issues/965">#965</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/03f4aed68268fb320b32195c80292300056b264c"><code>03f4aed</code></a> add ko community meeting details (<a href="https://redirect.github.com/google/ko/issues/938">#938</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/ko/compare/v0.12.0...v0.13.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/ko&package-manager=go_modules&previous-version=0.12.0&new-version=0.13.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --------- Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2023-03-29 19:38:57 +02:00
github.com/google/safetext v0.0.0-20220905092116-b49f7bc46da2 h1:SJ+NtwL6QaZ21U+IrK7d0gGgpjGGvd2kz+FzTHVzdqI=
github.com/google/safetext v0.0.0-20220905092116-b49f7bc46da2/go.mod h1:Tv1PlzqC9t8wNnpPdctvtSUOPUUg4SHeE6vR1Ir2hmg=
refactor: improving minio and docker tests (#3642) using ory/dockertest to simplify integration tests Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-12-15 15:25:52 +02:00
github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 h1:El6M4kTTCOh6aBiKaUGG7oYTSPP8MxqL4YI3kZKwcP4=
github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510/go.mod h1:pupxD2MaaD3pAXIBCelhxNneeOaAeabZDe5s4K6zSpQ=
feat: go 1.13 (#1135) * feat: go 1.13 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: go.mod Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: update to go 1.13 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * bump: deps Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: deps Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: trying replace Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: go mod init Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: disable funlen lint Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2019-09-13 14:53:56 +02:00
github.com/google/subcommands v1.0.1/go.mod h1:ZjhPrFU+Olkh9WazFPsl27BQ4UPiG37m3yTrtFlrHVk=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/google/uuid v1.1.1/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
feat: update nfpm Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2020-11-10 23:30:20 +02:00
github.com/google/uuid v1.1.2/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
feat(deps): bump github.com/google/uuid from 1.4.0 to 1.5.0 (#4476) Bumps [github.com/google/uuid](https://github.com/google/uuid) from 1.4.0 to 1.5.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/uuid/releases">github.com/google/uuid's releases</a>.</em></p> <blockquote> <h2>v1.5.0</h2> <h2><a href="https://github.com/google/uuid/compare/v1.4.0...v1.5.0">1.5.0</a> (2023-12-12)</h2> <h3>Features</h3> <ul> <li>Validate UUID without creating new UUID (<a href="https://redirect.github.com/google/uuid/issues/141">#141</a>) (<a href="https://github.com/google/uuid/commit/9ee7366e66c9ad96bab89139418a713dc584ae29">9ee7366</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/google/uuid/blob/master/CHANGELOG.md">github.com/google/uuid's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/google/uuid/compare/v1.4.0...v1.5.0">1.5.0</a> (2023-12-12)</h2> <h3>Features</h3> <ul> <li>Validate UUID without creating new UUID (<a href="https://redirect.github.com/google/uuid/issues/141">#141</a>) (<a href="https://github.com/google/uuid/commit/9ee7366e66c9ad96bab89139418a713dc584ae29">9ee7366</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/uuid/commit/4d47f8eb066f43cfaedd728a543479d9c9dfa8f6"><code>4d47f8e</code></a> chore(master): release 1.5.0 (<a href="https://redirect.github.com/google/uuid/issues/145">#145</a>)</li> <li><a href="https://github.com/google/uuid/commit/9ee7366e66c9ad96bab89139418a713dc584ae29"><code>9ee7366</code></a> feat: Validate UUID without creating new UUID (<a href="https://redirect.github.com/google/uuid/issues/141">#141</a>)</li> <li><a href="https://github.com/google/uuid/commit/b35aa6a595277504b1ec94c520d4091ec050b9d5"><code>b35aa6a</code></a> add uuid version 6 and 7 (<a href="https://redirect.github.com/google/uuid/issues/139">#139</a>)</li> <li>See full diff in <a href="https://github.com/google/uuid/compare/v1.4.0...v1.5.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/uuid&package-manager=go_modules&previous-version=1.4.0&new-version=1.5.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-13 20:11:53 +02:00
github.com/google/uuid v1.5.0 h1:1p67kYwdtXjb0gL0BPiP1Av9wiZPo5A8z2cWkTZ+eyU=
github.com/google/uuid v1.5.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
chore(deps): bump gocloud.dev from 0.22.0 to 0.23.0 (#2225) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.22.0 to 0.23.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.22.0...v0.23.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-17 14:03:45 +02:00
github.com/google/wire v0.5.0 h1:I7ELFeVBr3yfPIcc8+MWvrjk+3VjbcSzoXm3JVa+jD8=
github.com/google/wire v0.5.0/go.mod h1:ngWDr9Qvq3yZA10YrxfyGELY/AFWGVpy9c1LTRi1EoU=
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419) Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.1.1 to 2.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's releases</a>.</em></p> <blockquote> <h2>v2.2.1</h2> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's changelog</a>.</em></p> <blockquote> <h1>v2.2.1</h1> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign/commit/12cbf9ea177d22bbf5cf028bcb4712b5f174ebc6"><code>12cbf9e</code></a> add changelog for v2.2.1 release (<a href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/827f24e9d4a1f8e845cb1597d02053410f5bbe2a"><code>827f24e</code></a> feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8ac891ff0e29ddc67965423bee8f826219c6eb0f"><code>8ac891f</code></a> Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li><a href="https://github.com/sigstore/cosign/commit/8b366c497bd22b9be7742d057b8f59083dcadee0"><code>8b366c4</code></a> add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/23920de5623a505921ba4e62fa97e2553eff4699"><code>23920de</code></a> chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/e022e1c13240d1ae5b3c408bc53e389154331713"><code>e022e1c</code></a> chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/28c59c5eca6386924cc8f381afe94efe1e957679"><code>28c59c5</code></a> add missing groups key (<a href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8e5bdcc0ff39b8dc1b477251fef521601df76ec0"><code>8e5bdcc</code></a> chore(deps): bump github.com/google/certificate-transparency-go (<a href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/510cac4ef54274823599082e3a57a556ccd5c9e5"><code>510cac4</code></a> chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/063902b1d78fed7c12c9d9ce06248d36963e8169"><code>063902b</code></a> chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 18:39:49 +02:00
github.com/googleapis/enterprise-certificate-proxy v0.3.2 h1:Vie5ybvEvT75RniqhfFxPRy3Bf7vr3h0cechB90XaQs=
github.com/googleapis/enterprise-certificate-proxy v0.3.2/go.mod h1:VLSiSSBs/ksPL8kq3OBOQ6WRI2QnaFynd1DCjZ62+V0=
feat: add gitlab for releases (#1038) * outlines gitlab client integration * makes client parameter more explicit * adds gitlab url to config * changes releaseID to string to adapt to gitlab * updates to latest gitlab client lib 0.18 * fixes copy paster in gitlab upload func * fixes gitlab typo in config * adds gitlab token to env and context * release now uses the client factory method * skips brew pipe if it is not a github release * add github tokentype to publish tests * skips scoop pipe if it is not a github release * corrects brew skip msg * adds gitlab token to main test * adds gitlab to release docs * validates config and errors accordingly * adapt release pipe name to include gitlab * fixes gitlab client after testing * moves not-configured brew and scoop pipe checks as first check * adds more debug to gitlab client * adapts changelog generation for gitlab markdown * adds debug log for gitlab changelog * env needs to run before changelog pipe * moves gitlab default download url to default pipe * moves multiple releases check to from config to release pipe * release differs now for github and gitlab * adds debug gitlab release update msgs * moves env pipe as second after before because it determines the token type other pipes depend on * adaptes error check on gitlab release creation * Revert "adaptes error check on gitlab release creation" This reverts commit 032024571c76140f8e2207ee01cc08088f37594b. * simplifies gitlab client logic. removes comments * skips tls verification for gitlab client if specified in config * updates the docs * adds clarification that brew and scoop are not supported if it is a gitlab release * fixes copy paster in release.md * adds missing blob pipe in defaults and publish due to missing in merge * updates comment in gitlab client
2019-06-29 16:02:40 +02:00
github.com/googleapis/gax-go/v2 v2.0.4/go.mod h1:0Wqv26UfaUD9n4G6kQubkQ+KchISgw+vpHVxEJEs9eg=
chore(deps): bump gocloud.dev from 0.18.0 to 0.19.0 (#1340) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.18.0 to 0.19.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.18.0...v0.19.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-02-17 14:56:49 +02:00
github.com/googleapis/gax-go/v2 v2.0.5/go.mod h1:DWXyrwAJ9X0FpwwEdw+IPEYBICEFu5mhpdKc/us6bOk=
feat(deps): bump the gomod-deps group with 3 updates (#4200) Bumps the gomod-deps group with 3 updates: [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab), [gocloud.dev](https://github.com/google/go-cloud) and [go.uber.org/automaxprocs](https://github.com/uber-go/automaxprocs). Updates `github.com/xanzy/go-gitlab` from 0.86.0 to 0.88.0 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/xanzy/go-gitlab/commit/7e3c23c9c221c0a334e11356503a99d41f206651"><code>7e3c23c</code></a> Update pipeline tests</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/2ac3eea05ffd9c096624ce3f88bf88132940b025"><code>2ac3eea</code></a> Merge pull request <a href="https://redirect.github.com/xanzy/go-gitlab/issues/1758">#1758</a> from billiechar/billiechar-snippet-moves</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/ddb5ca097455e3087ade383fec32ab07d24cb2c0"><code>ddb5ca0</code></a> Update the PR to make the code consistent</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/a4d27d6848beb49923d87d6201330f869f230f8b"><code>a4d27d6</code></a> Merge pull request <a href="https://redirect.github.com/xanzy/go-gitlab/issues/1759">#1759</a> from PatrickRice-KSC/add-missing-housekeeping-setting</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/a42af8593e45e5a55a6008e482ecbc3dc6f5d06b"><code>a42af85</code></a> Change PipelineTestCases.SystemOutput to interface{}</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/89486a0530374b782bb0267664a5bd49394fbb31"><code>89486a0</code></a> Add missing housekeeping setting</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/852645c7728d7a4284053806b68682b2905c856a"><code>852645c</code></a> Update tests</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/f2c344ca14c5829c55154263b6504d57b26126c3"><code>f2c344c</code></a> Use separate options for each schedule</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/86dd6321cdc296bc3f9a065718e58ea33cb1e686"><code>86dd632</code></a> Add snippet repository storage move APIs</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/3c1f9bfa0d349acfb0aba8991a1abdf62495ee81"><code>3c1f9bf</code></a> Use io.ReadAll instead of ioutil.ReadAll</li> <li>Additional commits viewable in <a href="https://github.com/xanzy/go-gitlab/compare/v0.86.0...v0.88.0">compare view</a></li> </ul> </details> <br /> Updates `gocloud.dev` from 0.30.0 to 0.32.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.32.0</h2> <p>Redoing <code>v0.31.0</code> since I think I messed up the tags. Copying the release notes:</p> <p><strong>all</strong></p> <ul> <li>Update <code>go</code> version in <code>go.mod</code> to maintain cleaner <code>go.mod</code> and <code>go.sum</code> files.</li> </ul> <p><strong>blob</strong></p> <ul> <li><strong>all</strong>: Pass through reader/writer to <code>WriteTo</code>/<code>ReadFrom</code> if available (optimization).</li> <li><strong>all</strong>: Make <code>blob.Bucket</code> implement <code>io/fs.FS</code> and <code>io/fs.SubFS</code>.</li> <li><strong>gcsblob</strong>: Add support for forcing an unauthenticated client.</li> </ul> <p><strong>server</strong></p> <ul> <li>Make <code>requestlog</code> internal structs implement <code>http.Flusher</code>.</li> <li>Don't always read the full request in order to calculate the request size; use <code>Content-Length</code> when available.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/728b7c1395cb35d23e85ee0a8e957744e2560183"><code>728b7c1</code></a> all: prerelease take 2 (<a href="https://redirect.github.com/google/go-cloud/issues/3278">#3278</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/838a8fd9b6b7efc90b55cb5ed10e19463cbb1262"><code>838a8fd</code></a> all: prerelease (<a href="https://redirect.github.com/google/go-cloud/issues/3277">#3277</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0f33c81c8dbec9d5302d9615b95c5ba878e0ede9"><code>0f33c81</code></a> all: add dragonfly build to test suite (<a href="https://redirect.github.com/google/go-cloud/issues/3268">#3268</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/bfd1b284ad86ce55bd0a7bc3e1c27fc8814fb87a"><code>bfd1b28</code></a> all: update dependencies (<a href="https://redirect.github.com/google/go-cloud/issues/3276">#3276</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8d4590ac1e51bca704bc85422cb0a2f2d0b1b7ba"><code>8d4590a</code></a> server/requestlog: Don't consume entire body just to get a request size (<a href="https://redirect.github.com/google/go-cloud/issues/3274">#3274</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/a1d9f4295c59f30b30a085682b47e314c6960673"><code>a1d9f42</code></a> server/requestlog: make responseStats implement http.Flusher (<a href="https://redirect.github.com/google/go-cloud/issues/3275">#3275</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cab06ea136cfdd73f67300332994f81234469bc"><code>8cab06e</code></a> blob/gcsblob: add support for forcing an authenticated client (<a href="https://redirect.github.com/google/go-cloud/issues/3273">#3273</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0e5728dd337838e82e07e03dcef9f54dfc04cc52"><code>0e5728d</code></a> blob: make blob.Bucket implement io/fs.FS and io/fs.SubFS (<a href="https://redirect.github.com/google/go-cloud/issues/3272">#3272</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/a6551792237ccc995a6e95169210ac8e77dbcd94"><code>a655179</code></a> all: update go.mod files to go 1.19 (<a href="https://redirect.github.com/google/go-cloud/issues/3271">#3271</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8385fc39c70f6589823ca019e399f5514feb377d"><code>8385fc3</code></a> blob: pass through reader/writer to <code>WriteTo</code>/<code>ReadFrom</code> if available (<a href="https://redirect.github.com/google/go-cloud/issues/3267">#3267</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.30.0...v0.32.0">compare view</a></li> </ul> </details> <br /> Updates `go.uber.org/automaxprocs` from 1.5.2 to 1.5.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/uber-go/automaxprocs/releases">go.uber.org/automaxprocs's releases</a>.</em></p> <blockquote> <h2>v1.5.3</h2> <ul> <li>Fix mountinfo parsing when super options have fields with spaces.</li> <li>Fix division by zero while parsing cgroups.</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/uber-go/automaxprocs/blob/master/CHANGELOG.md">go.uber.org/automaxprocs's changelog</a>.</em></p> <blockquote> <h2>v1.5.3 (2023-07-19)</h2> <ul> <li>Fix mountinfo parsing when super options have fields with spaces.</li> <li>Fix division by zero while parsing cgroups.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/uber-go/automaxprocs/commit/e83e959d8845f659d02749ba5598fd62a7129e4e"><code>e83e959</code></a> Release v1.5.3 (<a href="https://redirect.github.com/uber-go/automaxprocs/issues/77">#77</a>)</li> <li><a href="https://github.com/uber-go/automaxprocs/commit/94404505e072633727945d6adc276be8759dadcf"><code>9440450</code></a> Update actions (<a href="https://redirect.github.com/uber-go/automaxprocs/issues/76">#76</a>)</li> <li><a href="https://github.com/uber-go/automaxprocs/commit/4b0a5c9c3c30af086d1251cecd4114b7d4b55a45"><code>4b0a5c9</code></a> set CI perms to readonly (<a href="https://redirect.github.com/uber-go/automaxprocs/issues/75">#75</a>)</li> <li><a href="https://github.com/uber-go/automaxprocs/commit/c64632e175f532a5fe994622797d70b06338337e"><code>c64632e</code></a> Drop Go 1.17 and Go 1.18 from CI (<a href="https://redirect.github.com/uber-go/automaxprocs/issues/74">#74</a>)</li> <li><a href="https://github.com/uber-go/automaxprocs/commit/60f22786b2d20055ca8d888ed455a25aed935bea"><code>60f2278</code></a> fix: mountinfo parsing (<a href="https://redirect.github.com/uber-go/automaxprocs/issues/73">#73</a>)</li> <li><a href="https://github.com/uber-go/automaxprocs/commit/d064ede19db88036b1a2fb6b41113717a84dfda2"><code>d064ede</code></a> Fix division by zero (<a href="https://redirect.github.com/uber-go/automaxprocs/issues/71">#71</a>)</li> <li>See full diff in <a href="https://github.com/uber-go/automaxprocs/compare/v1.5.2...v1.5.3">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-20 14:56:26 +02:00
github.com/googleapis/gax-go/v2 v2.12.0 h1:A+gCJKdRfqXkr+BIRGtZLibNXf0m1f9E4HG56etFpas=
github.com/googleapis/gax-go/v2 v2.12.0/go.mod h1:y+aIqrI5eb1YGMVJfuV3185Ts/D7qKpsEkdD5+I6QGU=
feat(deps): bump gocloud.dev from 0.27.0 to 0.28.0 (#3689) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.27.0 to 0.28.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.28.0</h2> <p><strong>BREAKING CHANGES</strong>:</p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK.</li> <li><strong>blob/azureblob</strong>: Updated to match recent breaking changes in the Azure packages (yes, again).</li> <li><strong>pubsub/awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>blob</strong></p> <ul> <li><strong>memblob</strong>: Fixed bug where use of <code>BeforeCopy</code> callback would drop the actual copying.</li> <li><strong>azureblob</strong>: Updated to match recent breaking changes in the Azure packages.</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>all</strong>: Simplified and improved batch sizing, should resolve issues with too-frequent polling in some situations.</li> <li><strong>azurepubsub</strong>: Made <code>ListenerTimeout</code> configurable.</li> <li><strong>gcppubsub</strong> and <strong>awssnssqs</strong>: Support lazy mode for <code>Nack</code> (where no explicit <code>Nack</code> is sent).</li> <li><strong>awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>secrets</strong></p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK. Use azidentity.NewDefaultAzureCredential.</li> </ul> <p><strong>sql</strong></p> <ul> <li><strong>gcp/cloudsql</strong>: Fixed IAM login.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/24166090495b8e084a23aa7d11fcc81ec33e4729"><code>2416609</code></a> all: prep for v0.28.0 (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3207">#3207</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/13f46eb8065d5ea62b757f5f0f11a56f48faf7cc"><code>13f46eb</code></a> pubsub: simplify and improve batch sizing, especially for low message rates</li> <li><a href="https://github.com/google/go-cloud/commit/8f2c2b9a392a8e4a3d7a4942f88f3df607f8f6d0"><code>8f2c2b9</code></a> pubsub/memsub: Add Options for batching (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3205">#3205</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fe0a3d75fe43c039258df25ebf102602526e3052"><code>fe0a3d7</code></a> pubsub/awssqs: Fix BeforeSend/As to enable changes to the sqs input message (...</li> <li><a href="https://github.com/google/go-cloud/commit/dfaf95af34dd9022a69a061028e0ceec98e9c670"><code>dfaf95a</code></a> secrets/azurekeyvault: Use azidentity.NewDefaultAzureCredential to support ot...</li> <li><a href="https://github.com/google/go-cloud/commit/1e26311532928f060c490a7fbf2be92b55ee12c4"><code>1e26311</code></a> blob: Remove some debug logging (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3197">#3197</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/43ed5a499864c08b7b6549ff7085f19634a1f02c"><code>43ed5a4</code></a> pubsub/gcppubsub: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3195">#3195</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/be80e70b3dcf7a6b86481881c7ac0b44a8095178"><code>be80e70</code></a> pubsub/awssnssqs: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3194">#3194</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/7d690993a53cf8cc2e7af07872876d58601f1261"><code>7d69099</code></a> blob/azblob: Update to latest, and restore As for dirlist (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3191">#3191</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/e942f3c339f0eb617ac4dbc7f37cc4e5920ee7cc"><code>e942f3c</code></a> blob/azblob: Restore As for List entry (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3188">#3188</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.27.0...v0.28.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.27.0&new-version=0.28.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-11 14:09:51 +02:00
github.com/googleapis/google-cloud-go-testing v0.0.0-20200911160855-bcd43fbb19e8/go.mod h1:dvDLG8qkwmyD9a/MJJN3XJcT3xFxOKAvTZGvuZmac9g=
feat(deps): bump github.com/goreleaser/nfpm/v2 from 2.30.1 to 2.31.0 (#4144) latest and greatest
2023-06-26 18:20:47 +02:00
github.com/gopherjs/gopherjs v1.17.2 h1:fQnZVsXk8uxXIStYb0N4bGk7jeyTalG/wsZjQ25dO0g=
chore: go mod tidy Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-09-13 19:03:05 +02:00
github.com/gopherjs/gopherjs v1.17.2/go.mod h1:pRRIvn/QzFLrKfvEz3qUuEhtE/zLCWfreZ6J5gM2i+k=
feat(deps): bump github.com/goreleaser/nfpm/v2 from 2.30.1 to 2.31.0 (#4144) latest and greatest
2023-06-26 18:20:47 +02:00
github.com/goreleaser/chglog v0.5.0 h1:Sk6BMIpx8+vpAf8KyPit34OgWui8c7nKTMHhYx88jJ4=
github.com/goreleaser/chglog v0.5.0/go.mod h1:Ri46M3lrMuv76FHszs3vtABR8J8k1w9JHYAzxeeOl28=
feat(deps): bump github.com/goreleaser/fileglob from 1.2.0 to 1.3.0 (#2896) Bumps [github.com/goreleaser/fileglob](https://github.com/goreleaser/fileglob) from 1.2.0 to 1.3.0. - [Release notes](https://github.com/goreleaser/fileglob/releases) - [Changelog](https://github.com/goreleaser/fileglob/blob/main/.goreleaser.yml) - [Commits](https://github.com/goreleaser/fileglob/compare/v1.2.0...v1.3.0) --- updated-dependencies: - dependency-name: github.com/goreleaser/fileglob dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-02-12 04:17:13 +02:00
github.com/goreleaser/fileglob v1.3.0 h1:/X6J7U8lbDpQtBvGcwwPS6OpzkNVlVEsFUVRx9+k+7I=
github.com/goreleaser/fileglob v1.3.0/go.mod h1:Jx6BoXv3mbYkEzwm9THo7xbr5egkAraxkGorbJb4RxU=
fix(deps): bump github.com/goreleaser/nfpm/v2 from 2.35.1 to 2.35.2 (#4519) Bumps [github.com/goreleaser/nfpm/v2](https://github.com/goreleaser/nfpm) from 2.35.1 to 2.35.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/goreleaser/nfpm/releases">github.com/goreleaser/nfpm/v2's releases</a>.</em></p> <blockquote> <h2>v2.35.2</h2> <h2>Changelog</h2> <h3>Security updates</h3> <ul> <li>440588e9d22bbb413014921baea0b81be3048769: sec(deps): bump github.com/go-git/go-git/v5 from 5.7.0 to 5.11.0 (<a href="https://redirect.github.com/goreleaser/nfpm/issues/759">#759</a>) (<a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li> </ul> <h3>Bug fixes</h3> <ul> <li>beb0f7314e098689ee29cd957134107ad535f85e: fix: properly handle files owned by fs (<a href="https://redirect.github.com/goreleaser/nfpm/issues/760">#760</a>) (<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li> </ul> <h3>Build process updates</h3> <ul> <li>e15b21b0fba2f098ac7292a89126079ecf3e58fc: build: add packagers shell to flake.nix (<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li> <li>19f03e44c39065d55675c04c794c1668801e1f06: build: fix flake (<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li> <li>a117582d8c23e97635bf55502f9a7eef8c3e35ba: build: use nix flake (<a href="https://redirect.github.com/goreleaser/nfpm/issues/761">#761</a>) (<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li> </ul> <h3>Other work</h3> <ul> <li>37b28fd4a368a94e4e285bdabbd3c1641f28cff4: ci: release for ppc64le (<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li> <li>2b60d2191cef2110a15f62095eb7a909c78f7970: docs: update cmd docs (<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li> <li>c6f2eb7008f081ef5e1e448083dfbaeacd604c77: docs: validate jsonschema (<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/goreleaser/nfpm/compare/v2.35.1...v2.35.2">https://github.com/goreleaser/nfpm/compare/v2.35.1...v2.35.2</a></p> <h2>Helping out</h2> <p>This release is only possible thanks to <strong>all</strong> the support of <strong>awesome people</strong>!</p> <p>Want to be one of them? You can <a href="https://goreleaser.com/sponsors/">sponsor</a> or <a href="https://goreleaser.com/contributing">contribute with code</a>.</p> <h2>Where to go next?</h2> <ul> <li>nFPM is a satellite project from GoReleaser. <a href="https://goreleaser.com">Check it out</a>!</li> <li>Find examples and commented usage of all options in our <a href="https://nfpm.goreleaser.com/">website</a>.</li> <li>Reach out on <a href="https://discord.gg/RGEBtg8vQ6">Discord</a> and <a href="https://twitter.com/goreleaser">Twitter</a>!</li> </ul> <p><!-- raw HTML omitted --><!-- raw HTML omitted --><!-- raw HTML omitted --></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/goreleaser/nfpm/commit/19f03e44c39065d55675c04c794c1668801e1f06"><code>19f03e4</code></a> build: fix flake</li> <li><a href="https://github.com/goreleaser/nfpm/commit/beb0f7314e098689ee29cd957134107ad535f85e"><code>beb0f73</code></a> fix: properly handle files owned by fs (<a href="https://redirect.github.com/goreleaser/nfpm/issues/760">#760</a>)</li> <li><a href="https://github.com/goreleaser/nfpm/commit/37b28fd4a368a94e4e285bdabbd3c1641f28cff4"><code>37b28fd</code></a> ci: release for ppc64le</li> <li><a href="https://github.com/goreleaser/nfpm/commit/fcd64f5959e3da77ae68e10f89a66f0107c35aa2"><code>fcd64f5</code></a> chore(deps): bump anchore/sbom-action from 0.15.1 to 0.15.2 (<a href="https://redirect.github.com/goreleaser/nfpm/issues/762">#762</a>)</li> <li><a href="https://github.com/goreleaser/nfpm/commit/e15b21b0fba2f098ac7292a89126079ecf3e58fc"><code>e15b21b</code></a> build: add packagers shell to flake.nix</li> <li><a href="https://github.com/goreleaser/nfpm/commit/b744dfbd5bd0d5d660f252c79d5147e4d671a6ef"><code>b744dfb</code></a> chore: add .editorconfig</li> <li><a href="https://github.com/goreleaser/nfpm/commit/c6f2eb7008f081ef5e1e448083dfbaeacd604c77"><code>c6f2eb7</code></a> docs: validate jsonschema</li> <li><a href="https://github.com/goreleaser/nfpm/commit/a117582d8c23e97635bf55502f9a7eef8c3e35ba"><code>a117582</code></a> build: use nix flake (<a href="https://redirect.github.com/goreleaser/nfpm/issues/761">#761</a>)</li> <li><a href="https://github.com/goreleaser/nfpm/commit/440588e9d22bbb413014921baea0b81be3048769"><code>440588e</code></a> sec(deps): bump github.com/go-git/go-git/v5 from 5.7.0 to 5.11.0 (<a href="https://redirect.github.com/goreleaser/nfpm/issues/759">#759</a>)</li> <li><a href="https://github.com/goreleaser/nfpm/commit/2b60d2191cef2110a15f62095eb7a909c78f7970"><code>2b60d21</code></a> docs: update cmd docs</li> <li>See full diff in <a href="https://github.com/goreleaser/nfpm/compare/v2.35.1...v2.35.2">compare view</a></li> </ul> </details> <br /> <details> <summary>Most Recent Ignore Conditions Applied to This Pull Request</summary> | Dependency Name | Ignore Conditions | | --- | --- | | github.com/goreleaser/nfpm/v2 | [>= 2.24.a, < 2.25] | </details> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/goreleaser/nfpm/v2&package-manager=go_modules&previous-version=2.35.1&new-version=2.35.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-05 14:43:35 +02:00
github.com/goreleaser/nfpm/v2 v2.35.2 h1:/8dAMJ/eG9mFCgN5Q2L3gMheChXmxF9Ue5Nvd5NpnpA=
github.com/goreleaser/nfpm/v2 v2.35.2/go.mod h1:gORhkEMuO8zSHn0k4WCBAaXxRa+jOLDJv3QByQVWE1M=
feat: add ko support (#3653) continuing the PR by @developer-guy - [x] should be a publisher, as it does publish the images it builds every time - [x] `Default` method does not work - [x] the `fromConfig` thing should probably be on the defaults, too - [x] wire `--skip-ko` - [x] documentation - [x] more tests - [x] use same registry as docker tests does - [ ] see if we can make the log output match goreleaser's - [ ] ?? closes #2556 closes #3490 Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com> Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> Co-authored-by: actions-user <actions@github.com> Co-authored-by: Jason Hall <jason@chainguard.dev> Co-authored-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2023-01-17 03:34:49 +02:00
github.com/gorilla/mux v1.8.0 h1:i40aqfkR1h2SlN9hojwV5ZA91wcXFOvkdNIeFDP5koI=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/gorilla/mux v1.8.0/go.mod h1:DVbg23sWSpFRCP0SfiEN6jmj59UnW/n46BH5rLB71So=
chore(deps): bump github.com/golangci/golangci-lint from 1.27.0 to 1.28.0 (#1648) * chore(deps): bump github.com/golangci/golangci-lint Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.27.0 to 1.28.0. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.27.0...v1.28.0) Signed-off-by: dependabot[bot] <support@github.com> * fix: lint issues Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Radek Simko <radek.simko@gmail.com> Co-authored-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2020-07-06 22:30:00 +02:00
github.com/gorilla/websocket v1.4.2/go.mod h1:YR8l580nyteQvAITg2hZ9XVh4b55+EU/adAjf1fMHhE=
feat(deps): update discord webhook library (#3320) This commit will update the discord webhook library. I deprecated https://github.com/DisgoOrg/disgohook a while ago and saw it being used here. The module was moved into https://github.com/disgoorg/disgo/tree/development/webhook disgohook had a few bugs which are resolved in the new module and also the new module should be nicer to use in general!
2022-08-18 21:22:41 +02:00
github.com/gorilla/websocket v1.5.0/go.mod h1:YR8l580nyteQvAITg2hZ9XVh4b55+EU/adAjf1fMHhE=
feat(deps): bump github.com/disgoorg/disgo from 0.16.12 to 0.17.0 (#4434) Bumps [github.com/disgoorg/disgo](https://github.com/disgoorg/disgo) from 0.16.12 to 0.17.0. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/disgoorg/disgo/commit/c4ffb0537d5a1db28e68730eb4685434d4c9bbe6"><code>c4ffb05</code></a> fix checking timeouts when calculating permissions</li> <li><a href="https://github.com/disgoorg/disgo/commit/7e8c825d82051a11460aab8a80ea828fa46aa9aa"><code>7e8c825</code></a> Address Discord having shitty API design</li> <li><a href="https://github.com/disgoorg/disgo/commit/c9a23642bd7b45423361411c520ae5a8033d6306"><code>c9a2364</code></a> Add new expressions and events permissions (<a href="https://redirect.github.com/disgoorg/disgo/issues/292">#292</a>)</li> <li><a href="https://github.com/disgoorg/disgo/commit/f19739c45e4043e06728aa78557e128ee268f568"><code>f19739c</code></a> update dependencies</li> <li><a href="https://github.com/disgoorg/disgo/commit/0c2c0328fadb2426ff5b3349cc013bd9b1d7f18a"><code>0c2c032</code></a> migrate to slog &amp; go 1.21 (<a href="https://redirect.github.com/disgoorg/disgo/issues/294">#294</a>)</li> <li>See full diff in <a href="https://github.com/disgoorg/disgo/compare/v0.16.12...v0.17.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/disgoorg/disgo&package-manager=go_modules&previous-version=0.16.12&new-version=0.17.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-23 22:38:25 +02:00
github.com/gorilla/websocket v1.5.1 h1:gmztn0JnHVt9JZquRuzLw3g4wouNVzKL15iLr/zn/QY=
github.com/gorilla/websocket v1.5.1/go.mod h1:x3kM2JMyaluk02fnUJpQuwD2dCS5NDG2ZHL0uE0tcaY=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=
fix: only fail announcing phase in the end (#3666) This prevents one announce failure to skip all other announcers. The release will still report a failure in the end, but will not fail in the first failure. Also improved errors messages a little bit. closes #3663 Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-12-28 17:24:21 +02:00
github.com/hashicorp/errwrap v1.1.0 h1:OxrOeh75EUXMY8TBjag2fzXGZ40LB6IKw45YeGUDY2I=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/hashicorp/errwrap v1.1.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=
feat(deps): bump github.com/xanzy/go-gitlab from 0.65.0 to 0.68.0 (#3126) Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab) from 0.65.0 to 0.68.0. - [Release notes](https://github.com/xanzy/go-gitlab/releases) - [Changelog](https://github.com/xanzy/go-gitlab/blob/master/releases_test.go) - [Commits](https://github.com/xanzy/go-gitlab/compare/v0.65.0...v0.68.0) --- updated-dependencies: - dependency-name: github.com/xanzy/go-gitlab dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-02 14:02:24 +02:00
github.com/hashicorp/go-cleanhttp v0.5.2 h1:035FKYIWjmULyFRBKPs8TBQoi0x6d9G4xc9neXJWAZQ=
github.com/hashicorp/go-cleanhttp v0.5.2/go.mod h1:kO/YDlP8L1346E6Sodw+PrpBSV4/SoxCXGY6BqNFT48=
chore(deps): bump github.com/xanzy/go-gitlab from 0.28.0 to 0.29.0 (#1400) Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab) from 0.28.0 to 0.29.0. - [Release notes](https://github.com/xanzy/go-gitlab/releases) - [Changelog](https://github.com/xanzy/go-gitlab/blob/master/CHANGELOG.md) - [Commits](https://github.com/xanzy/go-gitlab/compare/v0.28.0...v0.29.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-03-24 14:44:58 +02:00
github.com/hashicorp/go-hclog v0.9.2/go.mod h1:5CU+agLiy3J7N7QjHK5d05KxGsuXiQLrjA0H7acj2lQ=
feat(deps): bump github.com/google/ko from 0.14.1 to 0.15.0 (#4373) Bumps [github.com/google/ko](https://github.com/google/ko) from 0.14.1 to 0.15.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/ko/releases">github.com/google/ko's releases</a>.</em></p> <blockquote> <h2>v0.15.0</h2> <h2>What's Changed</h2> <ul> <li>implement dumb cache for images by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1102">ko-build/ko#1102</a></li> <li>fixed typo in configuration.md by <a href="https://github.com/samlaf"><code>@​samlaf</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1105">ko-build/ko#1105</a></li> <li>pkg/commands: fix dropped errors by <a href="https://github.com/alrs"><code>@​alrs</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1109">ko-build/ko#1109</a></li> <li>ci: add govulncheck by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1110">ko-build/ko#1110</a></li> <li>chore: remove refs to deprecated io/ioutil by <a href="https://github.com/testwill"><code>@​testwill</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1092">ko-build/ko#1092</a></li> <li>Update install docs to install ko using Scoop by <a href="https://github.com/pgrunm"><code>@​pgrunm</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1118">ko-build/ko#1118</a></li> <li>include go build output in build error by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1127">ko-build/ko#1127</a></li> <li>Use go1.21, clean up ci and drop go1.19 by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1137">ko-build/ko#1137</a></li> <li>Update e2e.yaml by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1141">ko-build/ko#1141</a></li> <li>handle newfound lint errors by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1142">ko-build/ko#1142</a></li> <li>fix test broken by lint fix by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1143">ko-build/ko#1143</a></li> <li>Bump actions/checkout from 3.6.0 to 4.0.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1136">ko-build/ko#1136</a></li> <li>fix env var for go env by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1140">ko-build/ko#1140</a></li> <li>docs: add docs for TF and Lambda by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1139">ko-build/ko#1139</a></li> <li>docs: add Lambda and TF pages to sidebar by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1144">ko-build/ko#1144</a></li> <li>include example using go packages by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1145">ko-build/ko#1145</a></li> <li>fix the release workflow and install instructions by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1150">ko-build/ko#1150</a></li> <li>update missing places that was using go1.20 by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1163">ko-build/ko#1163</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/samlaf"><code>@​samlaf</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1105">ko-build/ko#1105</a></li> <li><a href="https://github.com/alrs"><code>@​alrs</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1109">ko-build/ko#1109</a></li> <li><a href="https://github.com/testwill"><code>@​testwill</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1092">ko-build/ko#1092</a></li> <li><a href="https://github.com/pgrunm"><code>@​pgrunm</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1118">ko-build/ko#1118</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/ko-build/ko/compare/v0.14.1...v0.15.0">https://github.com/ko-build/ko/compare/v0.14.1...v0.15.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ko-build/ko/commit/31035ad2026bfbafaa4f009baefe72463af1b3a7"><code>31035ad</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1164">#1164</a> from ko-build/dependabot/go_modules/golang.org/x/net...</li> <li><a href="https://github.com/ko-build/ko/commit/ba952fd091f9d27ee5c136e842b5e94dd715100c"><code>ba952fd</code></a> Bump golang.org/x/net from 0.16.0 to 0.17.0</li> <li><a href="https://github.com/ko-build/ko/commit/277f5d74353950c8663fc04b7546f66e57bd6aaf"><code>277f5d7</code></a> update missing places that was using go1.20 (<a href="https://redirect.github.com/google/ko/issues/1163">#1163</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/b8b3b21f8348d7cab863fe1b4eaa47dfc47632da"><code>b8b3b21</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1162">#1162</a> from ko-build/dependabot/go_modules/github.com/googl...</li> <li><a href="https://github.com/ko-build/ko/commit/4890ab2887b653d3c340de4d119bfd17b703f182"><code>4890ab2</code></a> Bump github.com/google/go-cmp from 0.5.9 to 0.6.0</li> <li><a href="https://github.com/ko-build/ko/commit/30b62aee3faf6866cee6513ea7eb13f5a27cd7ca"><code>30b62ae</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1161">#1161</a> from ko-build/dependabot/go_modules/github.com/spf13...</li> <li><a href="https://github.com/ko-build/ko/commit/449bcb61926cb3e3bcf191e8ca53fad5ab3a4e3c"><code>449bcb6</code></a> Bump github.com/spf13/viper from 1.16.0 to 1.17.0</li> <li><a href="https://github.com/ko-build/ko/commit/c543dd83cc75cd849fb95637ea29e3c7c66d6f87"><code>c543dd8</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1160">#1160</a> from ko-build/dependabot/go_modules/golang.org/x/too...</li> <li><a href="https://github.com/ko-build/ko/commit/c1ae5f5ce4fe058830f24827c853d4db39a95250"><code>c1ae5f5</code></a> Bump golang.org/x/tools from 0.13.0 to 0.14.0</li> <li><a href="https://github.com/ko-build/ko/commit/e50d2fd5ff0ec88ac837ffe6f6c2f122eb54b9f8"><code>e50d2fd</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1159">#1159</a> from ko-build/dependabot/go_modules/golang.org/x/syn...</li> <li>Additional commits viewable in <a href="https://github.com/google/ko/compare/v0.14.1...v0.15.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/ko&package-manager=go_modules&previous-version=0.14.1&new-version=0.15.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-17 17:47:47 +02:00
github.com/hashicorp/go-hclog v1.5.0 h1:bI2ocEMgcVlz55Oj1xZNBsVi900c7II+fWDyV9o+13c=
github.com/hashicorp/go-hclog v1.5.0/go.mod h1:W4Qnvbt70Wk/zYJryRzDRU/4r0kIg0PVHBcfoyhpF5M=
fix: only fail announcing phase in the end (#3666) This prevents one announce failure to skip all other announcers. The release will still report a failure in the end, but will not fail in the first failure. Also improved errors messages a little bit. closes #3663 Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-12-28 17:24:21 +02:00
github.com/hashicorp/go-multierror v1.1.1 h1:H5DkEtf6CXdFp0N0Em5UCwQpXMWke8IA0+lD48awMYo=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/hashicorp/go-multierror v1.1.1/go.mod h1:iw975J/qwKPdAO1clOe2L8331t/9/fmwbPZ6JB6eMoM=
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419) Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.1.1 to 2.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's releases</a>.</em></p> <blockquote> <h2>v2.2.1</h2> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's changelog</a>.</em></p> <blockquote> <h1>v2.2.1</h1> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign/commit/12cbf9ea177d22bbf5cf028bcb4712b5f174ebc6"><code>12cbf9e</code></a> add changelog for v2.2.1 release (<a href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/827f24e9d4a1f8e845cb1597d02053410f5bbe2a"><code>827f24e</code></a> feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8ac891ff0e29ddc67965423bee8f826219c6eb0f"><code>8ac891f</code></a> Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li><a href="https://github.com/sigstore/cosign/commit/8b366c497bd22b9be7742d057b8f59083dcadee0"><code>8b366c4</code></a> add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/23920de5623a505921ba4e62fa97e2553eff4699"><code>23920de</code></a> chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/e022e1c13240d1ae5b3c408bc53e389154331713"><code>e022e1c</code></a> chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/28c59c5eca6386924cc8f381afe94efe1e957679"><code>28c59c5</code></a> add missing groups key (<a href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8e5bdcc0ff39b8dc1b477251fef521601df76ec0"><code>8e5bdcc</code></a> chore(deps): bump github.com/google/certificate-transparency-go (<a href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/510cac4ef54274823599082e3a57a556ccd5c9e5"><code>510cac4</code></a> chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/063902b1d78fed7c12c9d9ce06248d36963e8169"><code>063902b</code></a> chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 18:39:49 +02:00
github.com/hashicorp/go-retryablehttp v0.7.4 h1:ZQgVdpTdAL7WpMIwLzCfbalOcSUdkDZnpUv3/+BxzFA=
github.com/hashicorp/go-retryablehttp v0.7.4/go.mod h1:Jy/gPYAdjqffZ/yFGCFV2doI5wjtH1ewM9u8iYVjtX8=
feat: add ko support (#3653) continuing the PR by @developer-guy - [x] should be a publisher, as it does publish the images it builds every time - [x] `Default` method does not work - [x] the `fromConfig` thing should probably be on the defaults, too - [x] wire `--skip-ko` - [x] documentation - [x] more tests - [x] use same registry as docker tests does - [ ] see if we can make the log output match goreleaser's - [ ] ?? closes #2556 closes #3490 Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com> Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> Co-authored-by: actions-user <actions@github.com> Co-authored-by: Jason Hall <jason@chainguard.dev> Co-authored-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2023-01-17 03:34:49 +02:00
github.com/hashicorp/go-version v1.6.0 h1:feTTfFNnjP967rlCxM/I9g701jU+RN74YKx2mOkIeek=
github.com/hashicorp/go-version v1.6.0/go.mod h1:fltr4n8CU8Ke44wwGCBoEymUuxUHl09ZGVZPK5anwXA=
feat: add support for pushing artifacts to cloud storage provider( S3, Azure Blob, GCS) (#1036) * feat: adding support to push artifacts to AWS S3,Azure Blob and Google Cloud Storage readme for blob publisher test: add unit test for blob using testify and mockery test: add unit test for publish method fix: openbucket instance initialization remove unwanted packages: go mod tidy test: add missing unit test for publish method * doc: add missing comment for func * fix: add accidental delete file * fix : add missing Snapcrafts project * fix: unit test for Azure blob * fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue * fmt: fix linter reporeted issues fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue fmt: linter fix * test: fix typo in test error string * feat: add support to provider folder inside bucket, resolves discussed comments
2019-06-05 15:51:01 +02:00
github.com/hashicorp/golang-lru v0.5.0/go.mod h1:/m3WP610KZHVQ1SGc6re/UDhFvYD7pJ4Ao+sR/qLZy8=
feat: add gitlab for releases (#1038) * outlines gitlab client integration * makes client parameter more explicit * adds gitlab url to config * changes releaseID to string to adapt to gitlab * updates to latest gitlab client lib 0.18 * fixes copy paster in gitlab upload func * fixes gitlab typo in config * adds gitlab token to env and context * release now uses the client factory method * skips brew pipe if it is not a github release * add github tokentype to publish tests * skips scoop pipe if it is not a github release * corrects brew skip msg * adds gitlab token to main test * adds gitlab to release docs * validates config and errors accordingly * adapt release pipe name to include gitlab * fixes gitlab client after testing * moves not-configured brew and scoop pipe checks as first check * adds more debug to gitlab client * adapts changelog generation for gitlab markdown * adds debug log for gitlab changelog * env needs to run before changelog pipe * moves gitlab default download url to default pipe * moves multiple releases check to from config to release pipe * release differs now for github and gitlab * adds debug gitlab release update msgs * moves env pipe as second after before because it determines the token type other pipes depend on * adaptes error check on gitlab release creation * Revert "adaptes error check on gitlab release creation" This reverts commit 032024571c76140f8e2207ee01cc08088f37594b. * simplifies gitlab client logic. removes comments * skips tls verification for gitlab client if specified in config * updates the docs * adds clarification that brew and scoop are not supported if it is a gitlab release * fixes copy paster in release.md * adds missing blob pipe in defaults and publish due to missing in merge * updates comment in gitlab client
2019-06-29 16:02:40 +02:00
github.com/hashicorp/golang-lru v0.5.1/go.mod h1:/m3WP610KZHVQ1SGc6re/UDhFvYD7pJ4Ao+sR/qLZy8=
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419) Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.1.1 to 2.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's releases</a>.</em></p> <blockquote> <h2>v2.2.1</h2> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's changelog</a>.</em></p> <blockquote> <h1>v2.2.1</h1> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign/commit/12cbf9ea177d22bbf5cf028bcb4712b5f174ebc6"><code>12cbf9e</code></a> add changelog for v2.2.1 release (<a href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/827f24e9d4a1f8e845cb1597d02053410f5bbe2a"><code>827f24e</code></a> feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8ac891ff0e29ddc67965423bee8f826219c6eb0f"><code>8ac891f</code></a> Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li><a href="https://github.com/sigstore/cosign/commit/8b366c497bd22b9be7742d057b8f59083dcadee0"><code>8b366c4</code></a> add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/23920de5623a505921ba4e62fa97e2553eff4699"><code>23920de</code></a> chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/e022e1c13240d1ae5b3c408bc53e389154331713"><code>e022e1c</code></a> chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/28c59c5eca6386924cc8f381afe94efe1e957679"><code>28c59c5</code></a> add missing groups key (<a href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8e5bdcc0ff39b8dc1b477251fef521601df76ec0"><code>8e5bdcc</code></a> chore(deps): bump github.com/google/certificate-transparency-go (<a href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/510cac4ef54274823599082e3a57a556ccd5c9e5"><code>510cac4</code></a> chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/063902b1d78fed7c12c9d9ce06248d36963e8169"><code>063902b</code></a> chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 18:39:49 +02:00
github.com/hashicorp/hcl v1.0.1-vault-5 h1:kI3hhbbyzr4dldA8UdTb7ZlVVlI2DACdCfz31RPDgJM=
github.com/hashicorp/hcl v1.0.1-vault-5/go.mod h1:XYhtn6ijBSAj6n4YqAaf7RBPS4I06AItNorpy+MoQNM=
feat(deps): bump github.com/goreleaser/nfpm/v2 from 2.30.1 to 2.31.0 (#4144) latest and greatest
2023-06-26 18:20:47 +02:00
github.com/huandu/xstrings v1.3.3 h1:/Gcsuc1x8JVbJ9/rlye4xZnVAbEkGauT8lbebqcQws4=
github.com/huandu/xstrings v1.3.3/go.mod h1:y5/lhBue+AyNmUVz9RLU9xbLR0o4KIIExikq4ovT0aE=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
github.com/ianlancetaylor/demangle v0.0.0-20181102032728-5e5cf60278f6/go.mod h1:aSSvb/t6k1mPoxDqO4vJh6VOCGPwU4O0C2/Eqndh1Sc=
chore(deps): bump gocloud.dev from 0.20.0 to 0.21.0 (#1941) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.20.0 to 0.21.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.20.0...v0.21.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-12 01:14:58 +02:00
github.com/ianlancetaylor/demangle v0.0.0-20200824232613-28f6c0f3b639/go.mod h1:aSSvb/t6k1mPoxDqO4vJh6VOCGPwU4O0C2/Eqndh1Sc=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/imdario/mergo v0.3.11/go.mod h1:jmQim1M+e3UYxmgPu/WyfjB3N3VflVyUjjjwH0dnCYA=
feat(deps): bump github.com/imdario/mergo from 0.3.15 to 0.3.16 (#4045) Bumps [github.com/imdario/mergo](https://github.com/imdario/mergo) from 0.3.15 to 0.3.16. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/imdario/mergo/releases">github.com/imdario/mergo's releases</a>.</em></p> <blockquote> <h2>Announcement: v1.0.0 will be released on June 18th</h2> <p><em>This release doesn't contain code changes.</em></p> <p>After 10 years, with many corner cases covered, very few issues pending (at least, comparing them with the usage of the library as part of Docker, Kubernetes, Datadog's agent, etc.), and a very stable API, I think it's time to release a 1.0.0 version.</p> <p>This version will be released under a vanity URL: dario.cat/mergo</p> <p>PS: although I'll make sure that github.com/imdario/mergo will be available, I'm going to also change my GitHub handle, so expect for a few minutes to not be able to pull from github.com/imdario as I fork it from the new handle to the old one.</p> <p>PS2: I'm creating a discussion for this release to make sure we can have a conversation around the topic, and anything else about Mergo that you care about.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/imdario/mergo/commit/14fe2b165b83359196f820886a2b24f2771729e9"><code>14fe2b1</code></a> fix: OpenSSF scorecard generation</li> <li><a href="https://github.com/imdario/mergo/commit/4cde94b0b56dabb656d2a925ebc9b57627205f3a"><code>4cde94b</code></a> fix: remove Travis link and fix tests actions</li> <li><a href="https://github.com/imdario/mergo/commit/df62a52b84056251a249831ef16151f42184b08b"><code>df62a52</code></a> chore: README and GitHub actions</li> <li>See full diff in <a href="https://github.com/imdario/mergo/compare/v0.3.15...v0.3.16">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/imdario/mergo&package-manager=go_modules&previous-version=0.3.15&new-version=0.3.16)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-29 15:01:51 +02:00
github.com/imdario/mergo v0.3.16 h1:wwQJbIsHYGMUyLSPrEq1CT16AhnhNJQ51+4fdHUnCl4=
github.com/imdario/mergo v0.3.16/go.mod h1:WBLT9ZmE3lPoWsEzCh9LPo3TiwVN+ZKEjmz+hD27ysY=
feat: refactor main.go to spf13/cobra (#1472) * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: revert Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: lint Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: move Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2020-04-28 02:42:44 +02:00
github.com/inconshreveable/mousetrap v1.0.0/go.mod h1:PxqpIevigyE2G7u3NXJIT2ANytuPF1OarO4DADm73n8=
feat(deps): bump github.com/google/go-containerregistry from 0.13.0 to 0.14.0 (#3878) Bumps [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) from 0.13.0 to 0.14.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-containerregistry/releases">github.com/google/go-containerregistry's releases</a>.</em></p> <blockquote> <h2>v0.14.0</h2> <h2>Changelog</h2> <ul> <li>9306ebad Allow crane edit to generate non-image artifacts (<a href="https://redirect.github.com/google/go-containerregistry/issues/1545">#1545</a>)</li> <li>de35f0f7 Allow setting Content-Type in crane edit manifest (<a href="https://redirect.github.com/google/go-containerregistry/issues/1551">#1551</a>)</li> <li>4b081f80 Avoid v1.Manifest in crane edit config (<a href="https://redirect.github.com/google/go-containerregistry/issues/1583">#1583</a>)</li> <li>1cfe1fc2 Bump aws-actions/configure-aws-credentials from 1.7.0 to 2.0.0 (<a href="https://redirect.github.com/google/go-containerregistry/issues/1593">#1593</a>)</li> <li>da1008fb Bump golangci/golangci-lint-action from 3.3.1 to 3.4.0 (<a href="https://redirect.github.com/google/go-containerregistry/issues/1548">#1548</a>)</li> <li>86be45fb Bump goreleaser/goreleaser-action from 4.1.0 to 4.1.1 (<a href="https://redirect.github.com/google/go-containerregistry/issues/1547">#1547</a>)</li> <li>62f183e5 Bump goreleaser/goreleaser-action from 4.1.1 to 4.2.0 (<a href="https://redirect.github.com/google/go-containerregistry/issues/1556">#1556</a>)</li> <li>1b8dc2ba Bump slsa-framework/slsa-github-generator from 1.2.2 to 1.5.0 (<a href="https://redirect.github.com/google/go-containerregistry/issues/1580">#1580</a>)</li> <li>11843ba2 Enforce proper sha256 usage (<a href="https://redirect.github.com/google/go-containerregistry/issues/1544">#1544</a>)</li> <li>2ceebaaf Implement crane index subcommand (<a href="https://redirect.github.com/google/go-containerregistry/issues/1561">#1561</a>)</li> <li>9f42e028 Set mediaType for empty.ImageIndex in RawManifest (<a href="https://redirect.github.com/google/go-containerregistry/issues/1562">#1562</a>)</li> <li>759b19f7 Support artifactType, for images whose config.mediaType is not a config (<a href="https://redirect.github.com/google/go-containerregistry/issues/1541">#1541</a>)</li> <li>b3c23b4c Support for OCI 1.1+ referrers via API (<a href="https://redirect.github.com/google/go-containerregistry/issues/1546">#1546</a>)</li> <li>061ee6bf Support for OCI 1.1+ referrers via fallback tag (<a href="https://redirect.github.com/google/go-containerregistry/issues/1543">#1543</a>)</li> <li>67703048 Update descriptor &quot;data&quot; field (when valid) during &quot;crane edit config&quot; (<a href="https://redirect.github.com/google/go-containerregistry/issues/1584">#1584</a>)</li> <li>76bac933 Update release.yml (<a href="https://redirect.github.com/google/go-containerregistry/issues/1540">#1540</a>)</li> <li>eb7d746c authn: also read mount secrets (<a href="https://redirect.github.com/google/go-containerregistry/issues/1560">#1560</a>)</li> <li>e94d4089 bump deps using ./hack/bump-deps.sh (<a href="https://redirect.github.com/google/go-containerregistry/issues/1592">#1592</a>)</li> <li>4e95ae2b crane: add --flatten for index append (<a href="https://redirect.github.com/google/go-containerregistry/issues/1566">#1566</a>)</li> <li>ff810c18 crane: add serve subcommand (<a href="https://redirect.github.com/google/go-containerregistry/issues/1586">#1586</a>)</li> <li>8ea5e0e8 crane: support --omit-digest-tags in crane ls (<a href="https://redirect.github.com/google/go-containerregistry/issues/1528">#1528</a>)</li> <li>824efc77 fix(mutate): also set timestamps only present in some formats (<a href="https://redirect.github.com/google/go-containerregistry/issues/1550">#1550</a>)</li> <li>e04520bc fix: Fix the crane release url and add more steps (<a href="https://redirect.github.com/google/go-containerregistry/issues/1532">#1532</a>)</li> <li>d8722327 hash: use generic instantiation (<a href="https://redirect.github.com/google/go-containerregistry/issues/1538">#1538</a>)</li> <li>57f010d2 replace manual slsa-verifier installation with action (<a href="https://redirect.github.com/google/go-containerregistry/issues/1585">#1585</a>)</li> <li>9cd098e3 skip tls verification if default transport is used with insecure option (<a href="https://redirect.github.com/google/go-containerregistry/issues/1559">#1559</a>)</li> <li>36249683 tarball: pass imageToTags (<a href="https://redirect.github.com/google/go-containerregistry/issues/1563">#1563</a>)</li> </ul> <h3>Container Images</h3> <p><a href="https://gcr.io/go-containerregistry/crane:v0.14.0">https://gcr.io/go-containerregistry/crane:v0.14.0</a> <a href="https://gcr.io/go-containerregistry/gcrane:v0.14.0">https://gcr.io/go-containerregistry/gcrane:v0.14.0</a></p> <p>For example:</p> <pre><code>docker pull gcr.io/go-containerregistry/crane:v0.14.0 docker pull gcr.io/go-containerregistry/gcrane:v0.14.0 </code></pre> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-containerregistry/commit/4b081f801f399fa293f23e42ba4c4ac6a6003f2c"><code>4b081f8</code></a> Avoid v1.Manifest in crane edit config (<a href="https://redirect.github.com/google/go-containerregistry/issues/1583">#1583</a>)</li> <li><a href="https://github.com/google/go-containerregistry/commit/1cfe1fc25f233b40aa5d3b0edd572ed5c3f854c9"><code>1cfe1fc</code></a> Bump aws-actions/configure-aws-credentials from 1.7.0 to 2.0.0 (<a href="https://redirect.github.com/google/go-containerregistry/issues/1593">#1593</a>)</li> <li><a href="https://github.com/google/go-containerregistry/commit/e94d40893b2d013992192f8a1a04fd1984fd24dc"><code>e94d408</code></a> bump deps using ./hack/bump-deps.sh (<a href="https://redirect.github.com/google/go-containerregistry/issues/1592">#1592</a>)</li> <li><a href="https://github.com/google/go-containerregistry/commit/ff810c186c772e1056aa4081278ee84ee3fb565b"><code>ff810c1</code></a> crane: add serve subcommand (<a href="https://redirect.github.com/google/go-containerregistry/issues/1586">#1586</a>)</li> <li><a href="https://github.com/google/go-containerregistry/commit/57f010d26af871587be87f5aed2550893d564a8c"><code>57f010d</code></a> replace manual slsa-verifier installation with action (<a href="https://redirect.github.com/google/go-containerregistry/issues/1585">#1585</a>)</li> <li><a href="https://github.com/google/go-containerregistry/commit/67703048992e9b025adf1a7b08f3bb195636be33"><code>6770304</code></a> Update descriptor &quot;data&quot; field (when valid) during &quot;crane edit config&quot; (<a href="https://redirect.github.com/google/go-containerregistry/issues/1584">#1584</a>)</li> <li><a href="https://github.com/google/go-containerregistry/commit/1b8dc2babc55fd72d274e8f470f00e9e5ba43f1b"><code>1b8dc2b</code></a> Bump slsa-framework/slsa-github-generator from 1.2.2 to 1.5.0 (<a href="https://redirect.github.com/google/go-containerregistry/issues/1580">#1580</a>)</li> <li><a href="https://github.com/google/go-containerregistry/commit/8ea5e0e8f045d827389d13bde5ae8269630e2e2e"><code>8ea5e0e</code></a> crane: support --omit-digest-tags in crane ls (<a href="https://redirect.github.com/google/go-containerregistry/issues/1528">#1528</a>)</li> <li><a href="https://github.com/google/go-containerregistry/commit/4e95ae2b72dd3b58fccb4ed579dbddf5c884822c"><code>4e95ae2</code></a> crane: add --flatten for index append (<a href="https://redirect.github.com/google/go-containerregistry/issues/1566">#1566</a>)</li> <li><a href="https://github.com/google/go-containerregistry/commit/4a0e0af4bf958c0bfb17bdfac71c38204b930623"><code>4a0e0af</code></a> docs: Update crane installation and verification instructions (<a href="https://redirect.github.com/google/go-containerregistry/issues/1567">#1567</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-containerregistry/compare/v0.13.0...v0.14.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/go-containerregistry&package-manager=go_modules&previous-version=0.13.0&new-version=0.14.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-20 14:58:29 +02:00
github.com/inconshreveable/mousetrap v1.1.0 h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8=
github.com/inconshreveable/mousetrap v1.1.0/go.mod h1:vpF70FUmC8bwa3OWnCshd2FqLfsEA9PFc4w1p2J65bw=
feat(deps): bump github.com/invopop/jsonschema from 0.11.0 to 0.12.0 (#4348) Bumps [github.com/invopop/jsonschema](https://github.com/invopop/jsonschema) from 0.11.0 to 0.12.0. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/invopop/jsonschema/commit/9b6bb6e8f15aa557c1df053de86d4e5043365ca9"><code>9b6bb6e</code></a> Merge pull request <a href="https://redirect.github.com/invopop/jsonschema/issues/108">#108</a> from invopop/schema-property-alias</li> <li><a href="https://github.com/invopop/jsonschema/commit/f45517cf07169cf4e35eae0a4e47ad8086098583"><code>f45517c</code></a> Typo</li> <li><a href="https://github.com/invopop/jsonschema/commit/ab81e2aa6405fefd82b6958075d64d2de1844bcd"><code>ab81e2a</code></a> Fixing linting</li> <li><a href="https://github.com/invopop/jsonschema/commit/933814a23a0b8401d90625df47f4be2a0c9a3039"><code>933814a</code></a> support for JSONSchemaAlias y JSONSchemaProperty methods</li> <li><a href="https://github.com/invopop/jsonschema/commit/0108689b9f4e04f64a5986ea21650f07673c21cf"><code>0108689</code></a> Support for JSONSchemaAlias method</li> <li><a href="https://github.com/invopop/jsonschema/commit/12cbc49539c8deac9baeae7811fdcab42fd5def0"><code>12cbc49</code></a> Updating test output with new number parsing</li> <li><a href="https://github.com/invopop/jsonschema/commit/cada51da5649ccf919c51225dd8e2260a388b883"><code>cada51d</code></a> Merge pull request <a href="https://redirect.github.com/invopop/jsonschema/issues/96">#96</a> from Hotdawg/regex_with_equals</li> <li><a href="https://github.com/invopop/jsonschema/commit/9d905a25553837495e11ecb6d61f5348110dc49f"><code>9d905a2</code></a> Limit split on genericKeywords</li> <li><a href="https://github.com/invopop/jsonschema/commit/080d97dda979ca9544cc362b9f1c7c02cfc03697"><code>080d97d</code></a> Merge branch 'invopop:main' into regex_with_equals</li> <li><a href="https://github.com/invopop/jsonschema/commit/8a098cbcb66558b5c55fccd24c7cc42825d906d6"><code>8a098cb</code></a> Fix linter issue</li> <li>See full diff in <a href="https://github.com/invopop/jsonschema/compare/v0.11.0...v0.12.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/invopop/jsonschema&package-manager=go_modules&previous-version=0.11.0&new-version=0.12.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-05 14:48:15 +02:00
github.com/invopop/jsonschema v0.12.0 h1:6ovsNSuvn9wEQVOyc72aycBMVQFKz7cPdMJn10CvzRI=
github.com/invopop/jsonschema v0.12.0/go.mod h1:ffZ5Km5SWWRAIN6wbDXItl95euhFz2uON45H2qjYt+0=
feat(deps): bump github.com/jarcoal/httpmock from 1.3.0 to 1.3.1 (#4253) Bumps [github.com/jarcoal/httpmock](https://github.com/jarcoal/httpmock) from 1.3.0 to 1.3.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/jarcoal/httpmock/releases">github.com/jarcoal/httpmock's releases</a>.</em></p> <blockquote> <h2>v1.3.1</h2> <p>Fix:</p> <ul> <li><a href="https://pkg.go.dev/github.com/jarcoal/httpmock#BodyContainsBytes">BodyContainsBytes</a> &amp; <a href="https://pkg.go.dev/github.com/jarcoal/httpmock#BodyContainsString">BodyContainsString</a> used with <a href="https://pkg.go.dev/github.com/jarcoal/httpmock#Matcher.And">And</a>/<a href="https://pkg.go.dev/github.com/jarcoal/httpmock#Matcher.Or">Or</a> by <a href="https://github.com/maxatome"><code>@​maxatome</code></a> in <a href="https://redirect.github.com/jarcoal/httpmock/issues/146">#146</a> thanks to <a href="https://github.com/Moon1706"><code>@​Moon1706</code></a> for the report → <a href="https://redirect.github.com/jarcoal/httpmock/issues/145">#145</a>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/jarcoal/httpmock/commit/8b32cd6f52e32195f15b55c5217c12c29d6004b5"><code>8b32cd6</code></a> fix: BodyContainsBytes &amp; BodyContainsString used with And/Or</li> <li><a href="https://github.com/jarcoal/httpmock/commit/497153dd46a496640fe99428b2c833ddab93f119"><code>497153d</code></a> ci: test against go 1.21 &amp; use golangci-lint 1.54.1</li> <li><a href="https://github.com/jarcoal/httpmock/commit/070d3c85e0739c5ef0230c40f7b48b16d24c44ff"><code>070d3c8</code></a> ci: switch to install-go v3.4</li> <li><a href="https://github.com/jarcoal/httpmock/commit/1ddb9fa5c42c84afdca30c98914b42fda3005a57"><code>1ddb9fa</code></a> refactor: make golangci-lint v1.52.2 happy</li> <li><a href="https://github.com/jarcoal/httpmock/commit/507a05e8629b1661bbf08df649775319a6bde5d4"><code>507a05e</code></a> ci: add workflow_dispatch as event trigger</li> <li>See full diff in <a href="https://github.com/jarcoal/httpmock/compare/v1.3.0...v1.3.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/jarcoal/httpmock&package-manager=go_modules&previous-version=1.3.0&new-version=1.3.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-17 13:33:17 +02:00
github.com/jarcoal/httpmock v1.3.1 h1:iUx3whfZWVf3jT01hQTO/Eo5sAYtB2/rqaUuOtpInww=
github.com/jarcoal/httpmock v1.3.1/go.mod h1:3yb8rc4BI7TCBhFY8ng0gjuLKJNquuDNiPaZjnENuYg=
chore(deps): bump github.com/goreleaser/nfpm from 1.4.1 to 1.5.0 (#1697) Bumps [github.com/goreleaser/nfpm](https://github.com/goreleaser/nfpm) from 1.4.1 to 1.5.0. - [Release notes](https://github.com/goreleaser/nfpm/releases) - [Changelog](https://github.com/goreleaser/nfpm/blob/master/.goreleaser.yml) - [Commits](https://github.com/goreleaser/nfpm/compare/v1.4.1...v1.5.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-07-22 14:01:49 +02:00
github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 h1:BQSFePA1RWJOlocH6Fxy8MmwDt+yVQYULKfN0RoTN8A=
github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99/go.mod h1:1lJo3i6rXxKeerYnT8Nvf0QmHCRC1n8sfWVwXF2Frvo=
feat: add ko support (#3653) continuing the PR by @developer-guy - [x] should be a publisher, as it does publish the images it builds every time - [x] `Default` method does not work - [x] the `fromConfig` thing should probably be on the defaults, too - [x] wire `--skip-ko` - [x] documentation - [x] more tests - [x] use same registry as docker tests does - [ ] see if we can make the log output match goreleaser's - [ ] ?? closes #2556 closes #3490 Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com> Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> Co-authored-by: actions-user <actions@github.com> Co-authored-by: Jason Hall <jason@chainguard.dev> Co-authored-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2023-01-17 03:34:49 +02:00
github.com/jessevdk/go-flags v1.4.0/go.mod h1:4FA24M0QyGHXBuZZK/XkWh8h0e1EYbRYJSGM75WSRxI=
chore(deps): bump gocloud.dev from 0.20.0 to 0.21.0 (#1941) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.20.0 to 0.21.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.20.0...v0.21.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-12 01:14:58 +02:00
github.com/jmespath/go-jmespath v0.4.0 h1:BEgLn5cpjn8UN1mAw4NjwDrS35OdebyEtFe+9YPoQUg=
github.com/jmespath/go-jmespath v0.4.0/go.mod h1:T8mJZnbsbmF+m6zOOFylbeCJqk5+pHWvzYPziyZiYoo=
github.com/jmespath/go-jmespath/internal/testify v1.5.1 h1:shLQSRRSCCPj3f2gpwzGwWFoC7ycTf1rcQZHOlsJ6N8=
github.com/jmespath/go-jmespath/internal/testify v1.5.1/go.mod h1:L3OGu8Wl2/fWfCI6z80xFu9LTZmf1ZRjMHUOPmWr69U=
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419) Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.1.1 to 2.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's releases</a>.</em></p> <blockquote> <h2>v2.2.1</h2> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's changelog</a>.</em></p> <blockquote> <h1>v2.2.1</h1> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign/commit/12cbf9ea177d22bbf5cf028bcb4712b5f174ebc6"><code>12cbf9e</code></a> add changelog for v2.2.1 release (<a href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/827f24e9d4a1f8e845cb1597d02053410f5bbe2a"><code>827f24e</code></a> feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8ac891ff0e29ddc67965423bee8f826219c6eb0f"><code>8ac891f</code></a> Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li><a href="https://github.com/sigstore/cosign/commit/8b366c497bd22b9be7742d057b8f59083dcadee0"><code>8b366c4</code></a> add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/23920de5623a505921ba4e62fa97e2553eff4699"><code>23920de</code></a> chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/e022e1c13240d1ae5b3c408bc53e389154331713"><code>e022e1c</code></a> chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/28c59c5eca6386924cc8f381afe94efe1e957679"><code>28c59c5</code></a> add missing groups key (<a href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8e5bdcc0ff39b8dc1b477251fef521601df76ec0"><code>8e5bdcc</code></a> chore(deps): bump github.com/google/certificate-transparency-go (<a href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/510cac4ef54274823599082e3a57a556ccd5c9e5"><code>510cac4</code></a> chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/063902b1d78fed7c12c9d9ce06248d36963e8169"><code>063902b</code></a> chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 18:39:49 +02:00
github.com/jmhodges/clock v1.2.0 h1:eq4kys+NI0PLngzaHEe7AmPT90XMGIEySD1JfV1PDIs=
github.com/jmhodges/clock v1.2.0/go.mod h1:qKjhA7x7u/lQpPB1XAqX1b1lCI/w3/fNuYpI/ZjLynI=
feat: add support for pushing artifacts to cloud storage provider( S3, Azure Blob, GCS) (#1036) * feat: adding support to push artifacts to AWS S3,Azure Blob and Google Cloud Storage readme for blob publisher test: add unit test for blob using testify and mockery test: add unit test for publish method fix: openbucket instance initialization remove unwanted packages: go mod tidy test: add missing unit test for publish method * doc: add missing comment for func * fix: add accidental delete file * fix : add missing Snapcrafts project * fix: unit test for Azure blob * fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue * fmt: fix linter reporeted issues fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue fmt: linter fix * test: fix typo in test error string * feat: add support to provider folder inside bucket, resolves discussed comments
2019-06-05 15:51:01 +02:00
github.com/joho/godotenv v1.3.0/go.mod h1:7hK45KPybAkOC6peb+G5yklZfMxEjkZhHbwpqxOKXbg=
feat: add ko support (#3653) continuing the PR by @developer-guy - [x] should be a publisher, as it does publish the images it builds every time - [x] `Default` method does not work - [x] the `fromConfig` thing should probably be on the defaults, too - [x] wire `--skip-ko` - [x] documentation - [x] more tests - [x] use same registry as docker tests does - [ ] see if we can make the log output match goreleaser's - [ ] ?? closes #2556 closes #3490 Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com> Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> Co-authored-by: actions-user <actions@github.com> Co-authored-by: Jason Hall <jason@chainguard.dev> Co-authored-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2023-01-17 03:34:49 +02:00
github.com/josharian/intern v1.0.0 h1:vlS4z54oSdjm0bgjRigI+G1HpF+tI+9rE5LLzOg8HmY=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/josharian/intern v1.0.0/go.mod h1:5DoeVV0s6jJacbCEi61lwdGj/aVlrQvzHFFd8Hwg//Y=
github.com/json-iterator/go v1.1.6/go.mod h1:+SdeFBvtyEkXs7REEP0seUULqWtbJapLOCVDaaPEHmU=
github.com/json-iterator/go v1.1.7/go.mod h1:KdQUCv79m/52Kvf8AW2vK1V8akMuk1QjK/uOdHXbAo4=
feat: add support for pushing artifacts to cloud storage provider( S3, Azure Blob, GCS) (#1036) * feat: adding support to push artifacts to AWS S3,Azure Blob and Google Cloud Storage readme for blob publisher test: add unit test for blob using testify and mockery test: add unit test for publish method fix: openbucket instance initialization remove unwanted packages: go mod tidy test: add missing unit test for publish method * doc: add missing comment for func * fix: add accidental delete file * fix : add missing Snapcrafts project * fix: unit test for Azure blob * fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue * fmt: fix linter reporeted issues fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue fmt: linter fix * test: fix typo in test error string * feat: add support to provider folder inside bucket, resolves discussed comments
2019-06-05 15:51:01 +02:00
github.com/jstemmer/go-junit-report v0.0.0-20190106144839-af01ea7f8024/go.mod h1:6v2b51hI/fHJwM22ozAgKL4VKDeJcHhJFhtBdhmNjmU=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
github.com/jstemmer/go-junit-report v0.9.1/go.mod h1:Brl9GWCQeLvo8nXZwPNNblvFj/XSXhF0NWZEnDohbsk=
feat(deps): update nfpm to v2.18.0 (#3311) Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-08-16 06:00:17 +02:00
github.com/jtolds/gls v4.20.0+incompatible h1:xdiiI2gbIgH/gLH7ADydsJ1uDOEzR8yvV7C0MuV77Wo=
chore: go mod tidy Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-09-13 19:03:05 +02:00
github.com/jtolds/gls v4.20.0+incompatible/go.mod h1:QJZ7F/aHp+rZTRtaJ1ow/lLfFfVYBRgL+9YlvaHOwJU=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/julienschmidt/httprouter v1.2.0/go.mod h1:SYymIcj16QtmaHHD7aYtjjsJG7VTCxuUUipMqKk8s4w=
github.com/karrick/godirwalk v1.8.0/go.mod h1:H5KPZjojv4lE+QYImBI8xVtrBRgYrIVsaRPx4tDPEn4=
github.com/karrick/godirwalk v1.10.3/go.mod h1:RoGL9dQei4vP9ilrpETWE8CLOZ1kiN0LhBygSwrAsHA=
feat(deps): bump github.com/goreleaser/nfpm/v2 from 2.30.1 to 2.31.0 (#4144) latest and greatest
2023-06-26 18:20:47 +02:00
github.com/kevinburke/ssh_config v1.2.0 h1:x584FjTGwHzMwvHx18PXxbBVzfnxogHaAReU4gf13a4=
github.com/kevinburke/ssh_config v1.2.0/go.mod h1:CT57kijsi8u/K/BOFA39wgDQJ9CxiF4nAY/ojJ6r6mM=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/kisielk/errcheck v1.5.0/go.mod h1:pFxgyoBC7bSaBwPgfKdkLd5X25qrDl4LWUI2bnpBCr8=
feat: refactor main.go to spf13/cobra (#1472) * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: revert Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: lint Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: move Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2020-04-28 02:42:44 +02:00
github.com/kisielk/gotool v1.0.0/go.mod h1:XhKaO+MFFWcvkIS/tQcRk01m1F5IRFswLeQ+oQHNcck=
feat: update deps Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
2021-12-21 05:03:48 +02:00
github.com/klauspost/compress v1.13.6/go.mod h1:/3/Vjq9QcHkK5uEr5lBEmyoZ1iFhe47etQ6QUkpK6sk=
feat(deps): bump github.com/goreleaser/nfpm/v2 from 2.34.0 to 2.35.0 (#4492) Bumps [github.com/goreleaser/nfpm/v2](https://github.com/goreleaser/nfpm) from 2.34.0 to 2.35.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/goreleaser/nfpm/releases">github.com/goreleaser/nfpm/v2's releases</a>.</em></p> <blockquote> <h2>v2.35.0</h2> <h2>Changelog</h2> <h3>New Features</h3> <ul> <li>9c4fc0e886dabcd359967cdeca9107973e93c4b9: feat: reproducible packages (<a href="https://redirect.github.com/goreleaser/nfpm/issues/748">#748</a>) (<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li> </ul> <h3>Bug fixes</h3> <ul> <li>3485ec3edaba34f90ab57c287ac71eaabfc816be: fix(deb): blank line in package description (<a href="https://redirect.github.com/goreleaser/nfpm/issues/742">#742</a>) (<a href="https://github.com/abemedia"><code>@​abemedia</code></a>)</li> <li>60cff806c953650d9bda31fda43452003552784b: fix: Ensure reproducable Deb package (<a href="https://redirect.github.com/goreleaser/nfpm/issues/747">#747</a>) (<a href="https://github.com/keliramu"><code>@​keliramu</code></a>)</li> <li>2c8f9e0d70ccc37e2eb6433daccc3ca2f67841a1: fix: config merge (<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li> <li>216b17ffff80a5faad835fc53cbe461322d4bf6a: fix: example should not have prefixed version (<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li> <li>cdd9a621e98bb5e1b41798b74b720a3273e743ab: fix: use parent owner/group on typedir (<a href="https://redirect.github.com/goreleaser/nfpm/issues/754">#754</a>) (<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li> </ul> <h3>Dependency updates</h3> <ul> <li>a8707cd42874f46a192ec2ef9918d3a75631afb6: feat(deps): bump github.com/klauspost/compress from 1.17.2 to 1.17.3 (<a href="https://redirect.github.com/goreleaser/nfpm/issues/737">#737</a>) (<a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li> <li>6f2eb59cd263e4a8516ca6addb40e4a5d87b1084: feat(deps): bump github.com/klauspost/compress from 1.17.3 to 1.17.4 (<a href="https://redirect.github.com/goreleaser/nfpm/issues/745">#745</a>) (<a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li> <li>6c241370ccdd5718730556f2b8c13e4733d0fda7: feat(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/goreleaser/nfpm/issues/732">#732</a>) (<a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li> <li>d56350e61f34f7a596d2383b365da633798aed97: feat(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 (<a href="https://redirect.github.com/goreleaser/nfpm/issues/756">#756</a>) (<a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li> </ul> <h3>Build process updates</h3> <ul> <li>560c42ca3c87a2938e3b9cc841ec6cde05c8984b: build: added shell.nix (<a href="https://redirect.github.com/goreleaser/nfpm/issues/743">#743</a>) (<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li> <li>29c85136454eabe774558c1b67e3ecf025269f55: build: setup nur and winget (<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li> </ul> <h3>Other work</h3> <ul> <li>c4f2da3568bdd0d2882a02a29b60101f944e0f33: docs: correct GOARCH docs (<a href="https://redirect.github.com/goreleaser/nfpm/issues/733">#733</a>) (<a href="https://github.com/cognifloyd"><code>@​cognifloyd</code></a>)</li> <li>aaaa3fbb8625a9fe03ba2cb5e2c0f050d2393e6b: docs: fix systemd note (<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li> <li>f0941db79b18d292a921e0ea778fcf5d1c282e0e: docs: update cmd docs (<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li> <li>7439013fb5dc9357e84aabb36823a21c1b97e8ba: docs: update cmd docs (<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/goreleaser/nfpm/compare/v2.34.0...v2.35.0">https://github.com/goreleaser/nfpm/compare/v2.34.0...v2.35.0</a></p> <h2>Helping out</h2> <p>This release is only possible thanks to <strong>all</strong> the support of <strong>awesome people</strong>!</p> <p>Want to be one of them? You can <a href="https://goreleaser.com/sponsors/">sponsor</a> or <a href="https://goreleaser.com/contributing">contribute with code</a>.</p> <h2>Where to go next?</h2> <ul> <li>nFPM is a satellite project from GoReleaser. <a href="https://goreleaser.com">Check it out</a>!</li> <li>Find examples and commented usage of all options in our <a href="https://nfpm.goreleaser.com/">website</a>.</li> <li>Reach out on <a href="https://discord.gg/RGEBtg8vQ6">Discord</a> and <a href="https://twitter.com/goreleaser">Twitter</a>!</li> </ul> <p><!-- raw HTML omitted --><!-- raw HTML omitted --><!-- raw HTML omitted --></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/goreleaser/nfpm/commit/29c85136454eabe774558c1b67e3ecf025269f55"><code>29c8513</code></a> build: setup nur and winget</li> <li><a href="https://github.com/goreleaser/nfpm/commit/cdd9a621e98bb5e1b41798b74b720a3273e743ab"><code>cdd9a62</code></a> fix: use parent owner/group on typedir (<a href="https://redirect.github.com/goreleaser/nfpm/issues/754">#754</a>)</li> <li><a href="https://github.com/goreleaser/nfpm/commit/d56350e61f34f7a596d2383b365da633798aed97"><code>d56350e</code></a> feat(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 (<a href="https://redirect.github.com/goreleaser/nfpm/issues/756">#756</a>)</li> <li><a href="https://github.com/goreleaser/nfpm/commit/99bf0d0cf933113d23f200f6d4201f3cf3d93f22"><code>99bf0d0</code></a> test: testifylint fixes (<a href="https://redirect.github.com/goreleaser/nfpm/issues/753">#753</a>)</li> <li><a href="https://github.com/goreleaser/nfpm/commit/8c91e5ebefb281051472fe33c1f68dc3e1587a41"><code>8c91e5e</code></a> chore(deps): bump github/codeql-action from 2 to 3 (<a href="https://redirect.github.com/goreleaser/nfpm/issues/752">#752</a>)</li> <li><a href="https://github.com/goreleaser/nfpm/commit/e43aa7f7d1ec6752af8af47987981cf882f22fa0"><code>e43aa7f</code></a> chore(deps): bump sigstore/cosign-installer from 3.2.0 to 3.3.0 (<a href="https://redirect.github.com/goreleaser/nfpm/issues/751">#751</a>)</li> <li><a href="https://github.com/goreleaser/nfpm/commit/2c8f9e0d70ccc37e2eb6433daccc3ca2f67841a1"><code>2c8f9e0</code></a> fix: config merge</li> <li><a href="https://github.com/goreleaser/nfpm/commit/7439013fb5dc9357e84aabb36823a21c1b97e8ba"><code>7439013</code></a> docs: update cmd docs</li> <li><a href="https://github.com/goreleaser/nfpm/commit/9c4fc0e886dabcd359967cdeca9107973e93c4b9"><code>9c4fc0e</code></a> feat: reproducible packages (<a href="https://redirect.github.com/goreleaser/nfpm/issues/748">#748</a>)</li> <li><a href="https://github.com/goreleaser/nfpm/commit/c3142513c990e867c93c1acad256c9960a059fa1"><code>c314251</code></a> chore(deps): bump actions/setup-go from 4 to 5 (<a href="https://redirect.github.com/goreleaser/nfpm/issues/749">#749</a>)</li> <li>Additional commits viewable in <a href="https://github.com/goreleaser/nfpm/compare/v2.34.0...v2.35.0">compare view</a></li> </ul> </details> <br /> <details> <summary>Most Recent Ignore Conditions Applied to This Pull Request</summary> | Dependency Name | Ignore Conditions | | --- | --- | | github.com/goreleaser/nfpm/v2 | [>= 2.24.a, < 2.25] | </details> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/goreleaser/nfpm/v2&package-manager=go_modules&previous-version=2.34.0&new-version=2.35.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-21 14:16:43 +02:00
github.com/klauspost/compress v1.17.4 h1:Ej5ixsIri7BrIjBkRZLTo6ghwrEtHFk7ijlczPW4fZ4=
github.com/klauspost/compress v1.17.4/go.mod h1:/dCuZOvVtNoHsyb+cuJD3itjs3NbnF6KH9zAO4BDxPM=
feat(deps): bump github.com/klauspost/pgzip from 1.2.5 to 1.2.6 (#3985)
2023-05-11 14:38:19 +02:00
github.com/klauspost/pgzip v1.2.6 h1:8RXeL5crjEUFnR2/Sn6GJNWtSQ3Dk8pq4CL3jvdDyjU=
github.com/klauspost/pgzip v1.2.6/go.mod h1:Ch1tH69qFZu15pkjo5kYi6mth2Zzwzt50oCQKQE9RUs=
feat: refactor main.go to spf13/cobra (#1472) * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: revert Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: lint Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: move Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2020-04-28 02:42:44 +02:00
github.com/konsorten/go-windows-terminal-sequences v1.0.1/go.mod h1:T0+1ngSBFLxvqU3pZ+m/2kptfBszLMUkC4ZK/EgS/cQ=
feat(deps): bump gocloud.dev from 0.24.0 to 0.26.0 (#3287) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.24.0 to 0.26.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.24.0...v0.26.0) --- updated-dependencies: - dependency-name: gocloud.dev dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-04 20:44:54 +02:00
github.com/konsorten/go-windows-terminal-sequences v1.0.2/go.mod h1:T0+1ngSBFLxvqU3pZ+m/2kptfBszLMUkC4ZK/EgS/cQ=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/kr/fs v0.1.0/go.mod h1:FFnZGqtBN9Gxj7eW1uZ42v5BccTP0vu6NEaFoC2HwRg=
github.com/kr/logfmt v0.0.0-20140226030751-b84e30acd515/go.mod h1:+0opPa2QZZtGFBFZlji/RkVcI2GknAs/DXo4wKdlNEc=
feat: add support for pushing artifacts to cloud storage provider( S3, Azure Blob, GCS) (#1036) * feat: adding support to push artifacts to AWS S3,Azure Blob and Google Cloud Storage readme for blob publisher test: add unit test for blob using testify and mockery test: add unit test for publish method fix: openbucket instance initialization remove unwanted packages: go mod tidy test: add missing unit test for publish method * doc: add missing comment for func * fix: add accidental delete file * fix : add missing Snapcrafts project * fix: unit test for Azure blob * fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue * fmt: fix linter reporeted issues fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue fmt: linter fix * test: fix typo in test error string * feat: add support to provider folder inside bucket, resolves discussed comments
2019-06-05 15:51:01 +02:00
github.com/kr/pretty v0.1.0/go.mod h1:dAy3ld7l9f0ibDNOQOHHMYYIIbhfbHSm3C4ZsoJORNo=
chore(deps): bump github.com/goreleaser/nfpm/v2 from 2.3.1 to 2.4.0 (#2170) Bumps [github.com/goreleaser/nfpm/v2](https://github.com/goreleaser/nfpm) from 2.3.1 to 2.4.0. - [Release notes](https://github.com/goreleaser/nfpm/releases) - [Changelog](https://github.com/goreleaser/nfpm/blob/master/.goreleaser.yml) - [Commits](https://github.com/goreleaser/nfpm/compare/v2.3.1...v2.4.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-04-16 14:50:21 +02:00
github.com/kr/pretty v0.2.1/go.mod h1:ipq/a2n7PKx3OHsz4KJII5eveXtPO4qwEXGdVfWzfnI=
feat(deps): bump gocloud.dev from 0.27.0 to 0.28.0 (#3689) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.27.0 to 0.28.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.28.0</h2> <p><strong>BREAKING CHANGES</strong>:</p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK.</li> <li><strong>blob/azureblob</strong>: Updated to match recent breaking changes in the Azure packages (yes, again).</li> <li><strong>pubsub/awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>blob</strong></p> <ul> <li><strong>memblob</strong>: Fixed bug where use of <code>BeforeCopy</code> callback would drop the actual copying.</li> <li><strong>azureblob</strong>: Updated to match recent breaking changes in the Azure packages.</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>all</strong>: Simplified and improved batch sizing, should resolve issues with too-frequent polling in some situations.</li> <li><strong>azurepubsub</strong>: Made <code>ListenerTimeout</code> configurable.</li> <li><strong>gcppubsub</strong> and <strong>awssnssqs</strong>: Support lazy mode for <code>Nack</code> (where no explicit <code>Nack</code> is sent).</li> <li><strong>awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>secrets</strong></p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK. Use azidentity.NewDefaultAzureCredential.</li> </ul> <p><strong>sql</strong></p> <ul> <li><strong>gcp/cloudsql</strong>: Fixed IAM login.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/24166090495b8e084a23aa7d11fcc81ec33e4729"><code>2416609</code></a> all: prep for v0.28.0 (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3207">#3207</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/13f46eb8065d5ea62b757f5f0f11a56f48faf7cc"><code>13f46eb</code></a> pubsub: simplify and improve batch sizing, especially for low message rates</li> <li><a href="https://github.com/google/go-cloud/commit/8f2c2b9a392a8e4a3d7a4942f88f3df607f8f6d0"><code>8f2c2b9</code></a> pubsub/memsub: Add Options for batching (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3205">#3205</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fe0a3d75fe43c039258df25ebf102602526e3052"><code>fe0a3d7</code></a> pubsub/awssqs: Fix BeforeSend/As to enable changes to the sqs input message (...</li> <li><a href="https://github.com/google/go-cloud/commit/dfaf95af34dd9022a69a061028e0ceec98e9c670"><code>dfaf95a</code></a> secrets/azurekeyvault: Use azidentity.NewDefaultAzureCredential to support ot...</li> <li><a href="https://github.com/google/go-cloud/commit/1e26311532928f060c490a7fbf2be92b55ee12c4"><code>1e26311</code></a> blob: Remove some debug logging (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3197">#3197</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/43ed5a499864c08b7b6549ff7085f19634a1f02c"><code>43ed5a4</code></a> pubsub/gcppubsub: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3195">#3195</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/be80e70b3dcf7a6b86481881c7ac0b44a8095178"><code>be80e70</code></a> pubsub/awssnssqs: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3194">#3194</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/7d690993a53cf8cc2e7af07872876d58601f1261"><code>7d69099</code></a> blob/azblob: Update to latest, and restore As for dirlist (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3191">#3191</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/e942f3c339f0eb617ac4dbc7f37cc4e5920ee7cc"><code>e942f3c</code></a> blob/azblob: Restore As for List entry (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3188">#3188</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.27.0...v0.28.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.27.0&new-version=0.28.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-11 14:09:51 +02:00
github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE=
chore: go mod tidy Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-09-13 19:03:05 +02:00
github.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk=
feat: add support for pushing artifacts to cloud storage provider( S3, Azure Blob, GCS) (#1036) * feat: adding support to push artifacts to AWS S3,Azure Blob and Google Cloud Storage readme for blob publisher test: add unit test for blob using testify and mockery test: add unit test for publish method fix: openbucket instance initialization remove unwanted packages: go mod tidy test: add missing unit test for publish method * doc: add missing comment for func * fix: add accidental delete file * fix : add missing Snapcrafts project * fix: unit test for Azure blob * fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue * fmt: fix linter reporeted issues fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue fmt: linter fix * test: fix typo in test error string * feat: add support to provider folder inside bucket, resolves discussed comments
2019-06-05 15:51:01 +02:00
github.com/kr/pty v1.1.1/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ=
github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI=
chore(deps): bump github.com/golangci/golangci-lint from 1.23.7 to 1.27.0 (#1563) * chore(deps): bump github.com/golangci/golangci-lint from 1.23.7 to 1.27.0 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: tests Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2020-05-26 05:48:10 +02:00
github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/kylelemons/godebug v1.1.0 h1:RPNrshWIDI6G2gRW9EHilWtl7Z6Sb1BR0xunSBf0SNc=
github.com/kylelemons/godebug v1.1.0/go.mod h1:9/0rRGxNHcop5bhtWyNeEfOS8JIWk580+fNqagV/RAw=
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419) Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.1.1 to 2.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's releases</a>.</em></p> <blockquote> <h2>v2.2.1</h2> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's changelog</a>.</em></p> <blockquote> <h1>v2.2.1</h1> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign/commit/12cbf9ea177d22bbf5cf028bcb4712b5f174ebc6"><code>12cbf9e</code></a> add changelog for v2.2.1 release (<a href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/827f24e9d4a1f8e845cb1597d02053410f5bbe2a"><code>827f24e</code></a> feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8ac891ff0e29ddc67965423bee8f826219c6eb0f"><code>8ac891f</code></a> Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li><a href="https://github.com/sigstore/cosign/commit/8b366c497bd22b9be7742d057b8f59083dcadee0"><code>8b366c4</code></a> add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/23920de5623a505921ba4e62fa97e2553eff4699"><code>23920de</code></a> chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/e022e1c13240d1ae5b3c408bc53e389154331713"><code>e022e1c</code></a> chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/28c59c5eca6386924cc8f381afe94efe1e957679"><code>28c59c5</code></a> add missing groups key (<a href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8e5bdcc0ff39b8dc1b477251fef521601df76ec0"><code>8e5bdcc</code></a> chore(deps): bump github.com/google/certificate-transparency-go (<a href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/510cac4ef54274823599082e3a57a556ccd5c9e5"><code>510cac4</code></a> chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/063902b1d78fed7c12c9d9ce06248d36963e8169"><code>063902b</code></a> chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 18:39:49 +02:00
github.com/letsencrypt/boulder v0.0.0-20231026200631-000cd05d5491 h1:WGrKdjHtWC67RX96eTkYD2f53NDHhrq/7robWTAfk4s=
github.com/letsencrypt/boulder v0.0.0-20231026200631-000cd05d5491/go.mod h1:o158RFmdEbYyIZmXAbrvmJWesbyxlLKee6X64VPVuOc=
feat(deps): bump gocloud.dev from 0.29.0 to 0.30.0 (#4129) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.29.0 to 0.30.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.30.0</h2> <p><strong>blob</strong></p> <ul> <li><strong>all</strong>: Add <code>Upload</code> and <code>Download</code> methods that may be more efficient for some drivers.</li> <li><strong>s3blob</strong>: Add support for per-request <code>s3v2.Options</code>.</li> <li><strong>s3blob</strong>: Stop escaping second <code>/</code> in <code>//</code>; it's no longer necessary.</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>gcppubsub</strong>: Make it possible to configure <code>max_send_batch_size</code>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/d2d5bedb50683e2a6b893b75aafc193eca2715db"><code>d2d5bed</code></a> all: prep for release (<a href="https://redirect.github.com/google/go-cloud/issues/3263">#3263</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/c2e172b5a78def74973f7f3a8ece7c0bd6967432"><code>c2e172b</code></a> all: update dependencies (<a href="https://redirect.github.com/google/go-cloud/issues/3262">#3262</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/098177a48cae1bebfc90f88ed43d319444cab804"><code>098177a</code></a> blob/s3blob: fix the 'awssdk' argument examples</li> <li><a href="https://github.com/google/go-cloud/commit/2e4fad43f0b2606833b6a0de3e18628c70e11398"><code>2e4fad4</code></a> all: remove refs to deprecated xerrors</li> <li><a href="https://github.com/google/go-cloud/commit/1db413f1b3c4e344618b36401ba7e6dca3892929"><code>1db413f</code></a> pubsub/gcppubsub: make it possible to configure max_send_batch_size</li> <li><a href="https://github.com/google/go-cloud/commit/0c8428bf433136e7a4d96de0841f6373c6eacb53"><code>0c8428b</code></a> blob: Add Upload and Download methods that may be more efficient for some dri...</li> <li><a href="https://github.com/google/go-cloud/commit/54c71241a56f4c89eb64f587e5dc55667eaa40a3"><code>54c7124</code></a> all: cleanup duplicate import statements</li> <li><a href="https://github.com/google/go-cloud/commit/28b1328ae4fee939441faa5ee2e4eeba74c88ce7"><code>28b1328</code></a> all: minor code simplifications for returned boolean expressions</li> <li><a href="https://github.com/google/go-cloud/commit/2a407f5e6a71951384531445e25c58194f235062"><code>2a407f5</code></a> blob/gcsblob: Refresh goldens</li> <li><a href="https://github.com/google/go-cloud/commit/0cc16c8ae11e47028df24c4973debd6c56d29729"><code>0cc16c8</code></a> all: update goldens (<a href="https://redirect.github.com/google/go-cloud/issues/3252">#3252</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.29.0...v0.30.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.29.0&new-version=0.30.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-20 14:04:08 +02:00
github.com/lib/pq v1.10.9 h1:YXG7RB+JIjhP29X+OtkiDnYaXQwpS4JEWq7dtCCRUEw=
chore: go mod tidy Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-09-13 19:03:05 +02:00
github.com/lib/pq v1.10.9/go.mod h1:AlVN5x4E4T544tWzH6hKfbfQvm3HdbOxrmggDNAPY9o=
feat: replacing the log library (#3139) * feat: replacing logs Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> * fix: tests et al Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> * feat: update termenv/lipgloss Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> * wip: output Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> * fix: pin dep Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> * fix: update Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> * fix: tests Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> * fix: tests Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> * fix: deps Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> * fix: dep Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-06-22 02:11:15 +02:00
github.com/lucasb-eyer/go-colorful v1.2.0 h1:1nnpGOrhyZZuNyfu1QjKiUICQ74+3FNCN69Aj6K7nkY=
github.com/lucasb-eyer/go-colorful v1.2.0/go.mod h1:R4dSotOR9KMtayYi1e77YzuveK+i7ruzyGqttikkLy0=
fix: force specific version of go-crypto (#3756) refs #3745 Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2023-02-05 17:09:06 +02:00
github.com/magiconair/properties v1.8.7 h1:IeQXZAiQcpL9mgcAe1Nu6cX9LLw6ExEHKjN0VQdvPDY=
github.com/magiconair/properties v1.8.7/go.mod h1:Dhd985XPs7jluiymwWYZ0G4Z61jb3vdS329zhj2hYo0=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/mailru/easyjson v0.0.0-20190614124828-94de47d64c63/go.mod h1:C1wdFJiN94OJF2b5HbByQZoLdCWB1Yqtg26g4irojpc=
github.com/mailru/easyjson v0.0.0-20190626092158-b2ccc519800e/go.mod h1:C1wdFJiN94OJF2b5HbByQZoLdCWB1Yqtg26g4irojpc=
github.com/mailru/easyjson v0.7.6/go.mod h1:xzfreul335JAWq5oZzymOObrkdz5UnU4kGfJJLY9Nlc=
feat: add ko support (#3653) continuing the PR by @developer-guy - [x] should be a publisher, as it does publish the images it builds every time - [x] `Default` method does not work - [x] the `fromConfig` thing should probably be on the defaults, too - [x] wire `--skip-ko` - [x] documentation - [x] more tests - [x] use same registry as docker tests does - [ ] see if we can make the log output match goreleaser's - [ ] ?? closes #2556 closes #3490 Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com> Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> Co-authored-by: actions-user <actions@github.com> Co-authored-by: Jason Hall <jason@chainguard.dev> Co-authored-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2023-01-17 03:34:49 +02:00
github.com/mailru/easyjson v0.7.7 h1:UGYAvKxe3sBsEDzO8ZeWOSlIQfWFlxbzLZe7hwFURr0=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/mailru/easyjson v0.7.7/go.mod h1:xzfreul335JAWq5oZzymOObrkdz5UnU4kGfJJLY9Nlc=
github.com/markbates/oncer v0.0.0-20181203154359-bf2de49a0be2/go.mod h1:Ld9puTsIW75CHf65OeIOkyKbteujpZVXDpWK6YGZbxE=
github.com/markbates/safe v1.0.1/go.mod h1:nAqgmRi7cY2nqMc92/bSEeQA+R4OheNU2T1kNSCBdG0=
feat: improve output (#3966) - log keys will be ordered as intended instead of sorted - paths always relative to cwd --------- Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-05-02 14:06:35 +02:00
github.com/matryer/is v1.4.0 h1:sosSmIWwkYITGrxZ25ULNDeKiMNzFSr4V/eqBQP0PeE=
feat(deps): bump github.com/goreleaser/fileglob from 1.2.0 to 1.3.0 (#2896) Bumps [github.com/goreleaser/fileglob](https://github.com/goreleaser/fileglob) from 1.2.0 to 1.3.0. - [Release notes](https://github.com/goreleaser/fileglob/releases) - [Changelog](https://github.com/goreleaser/fileglob/blob/main/.goreleaser.yml) - [Commits](https://github.com/goreleaser/fileglob/compare/v1.2.0...v1.3.0) --- updated-dependencies: - dependency-name: github.com/goreleaser/fileglob dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-02-12 04:17:13 +02:00
github.com/matryer/is v1.4.0/go.mod h1:8I/i5uYgLzgsgEloJE1U6xx5HkBQpAZvepWuujKwMRU=
feat: add ko support (#3653) continuing the PR by @developer-guy - [x] should be a publisher, as it does publish the images it builds every time - [x] `Default` method does not work - [x] the `fromConfig` thing should probably be on the defaults, too - [x] wire `--skip-ko` - [x] documentation - [x] more tests - [x] use same registry as docker tests does - [ ] see if we can make the log output match goreleaser's - [ ] ?? closes #2556 closes #3490 Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com> Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> Co-authored-by: actions-user <actions@github.com> Co-authored-by: Jason Hall <jason@chainguard.dev> Co-authored-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2023-01-17 03:34:49 +02:00
github.com/mattn/go-colorable v0.1.13 h1:fFA4WZxdEF4tXPZVKMLwD8oUnCTTo08duU7wxecdEvA=
chore: go mod tidy Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-09-13 19:03:05 +02:00
github.com/mattn/go-colorable v0.1.13/go.mod h1:7S9/ev0klgBDR4GtXTXX8a3vIGJpMovkB8vQcUbaXHg=
feat(deps): update nfpm fixes #2721 Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
2021-12-21 04:28:30 +02:00
github.com/mattn/go-isatty v0.0.14/go.mod h1:7GGIvUiUoEMVVmxf/4nioHXj79iQHKdU27kJ6hsGG94=
feat(deps): bump github.com/muesli/termenv from 0.15.1 to 0.15.2 (#4148) Bumps [github.com/muesli/termenv](https://github.com/muesli/termenv) from 0.15.1 to 0.15.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/muesli/termenv/releases">github.com/muesli/termenv's releases</a>.</em></p> <blockquote> <h2>v0.15.2</h2> <h2>What's Changed</h2> <ul> <li>build(deps): bump actions/setup-go from 3 to 4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/muesli/termenv/pull/126">muesli/termenv#126</a></li> <li>build(deps): bump github.com/mattn/go-isatty from 0.0.17 to 0.0.18 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/muesli/termenv/pull/128">muesli/termenv#128</a></li> <li>fix: Cloud Shell supports RGB colors by <a href="https://github.com/muesli"><code>@​muesli</code></a> in <a href="https://redirect.github.com/muesli/termenv/pull/127">muesli/termenv#127</a></li> <li>build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/muesli/termenv/pull/129">muesli/termenv#129</a></li> <li>fix: wezterm is truecolor by <a href="https://github.com/caarlos0"><code>@​caarlos0</code></a> in <a href="https://redirect.github.com/muesli/termenv/pull/139">muesli/termenv#139</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/muesli/termenv/compare/v0.15.1...v0.15.2">https://github.com/muesli/termenv/compare/v0.15.1...v0.15.2</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/muesli/termenv/commit/51d72d34e2b9778a31aa5dd79fbdd8cdac50b4d5"><code>51d72d3</code></a> fix: wezterm is truecolor (<a href="https://redirect.github.com/muesli/termenv/issues/139">#139</a>)</li> <li><a href="https://github.com/muesli/termenv/commit/b57cbb11093e11f08bdeb3d54234909b8fa079fe"><code>b57cbb1</code></a> fix: lint</li> <li><a href="https://github.com/muesli/termenv/commit/e02986697d716017087dc725465e3d8691d317e4"><code>e029866</code></a> build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0</li> <li><a href="https://github.com/muesli/termenv/commit/9b3e79975a48df063aa7a7c1ca0c20c3c868332c"><code>9b3e799</code></a> fix: Cloud Shell supports RGB colors</li> <li><a href="https://github.com/muesli/termenv/commit/73a40463ff25452432bd4e588150285c6aeca58e"><code>73a4046</code></a> build(deps): bump github.com/mattn/go-isatty from 0.0.17 to 0.0.18</li> <li><a href="https://github.com/muesli/termenv/commit/39f5d6e77915ccc34a9e752ad0b7a3443b393058"><code>39f5d6e</code></a> build(deps): bump actions/setup-go from 3 to 4</li> <li>See full diff in <a href="https://github.com/muesli/termenv/compare/v0.15.1...v0.15.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/muesli/termenv&package-manager=go_modules&previous-version=0.15.1&new-version=0.15.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-28 14:46:00 +02:00
github.com/mattn/go-isatty v0.0.18 h1:DOKFKCQ7FNG2L1rbrmstDN4QVRdS89Nkh85u68Uwp98=
github.com/mattn/go-isatty v0.0.18/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
feat: add mastodon (#3567) This PR adds [mastodon](https://joinmastodon.org/) as an announcement pipeline. 🥳 ![mastodon-announce](https://user-images.githubusercontent.com/42128690/202544345-d90d8f10-0818-4bc2-bc35-3dbcba4254b0.png) Resolves #3566 Signed-off-by: jolheiser <john.olheiser@gmail.com>
2022-11-18 01:40:00 +02:00
github.com/mattn/go-mastodon v0.0.6 h1:lqU1sOeeIapaDsDUL6udDZIzMb2Wqapo347VZlaOzf0=
github.com/mattn/go-mastodon v0.0.6/go.mod h1:cg7RFk2pcUfHZw/IvKe1FUzmlq5KnLFqs7eV2PHplV8=
fix: race condition on logs This brings an update on caarlos0/log, precisely due to https://github.com/caarlos0/log/commit/452cd19227f733ea694ccce724390ac992ecc207, which fixes the bug reported at #3363. Closes #3363
2022-09-12 04:06:01 +02:00
github.com/mattn/go-runewidth v0.0.12/go.mod h1:RAqKPSqVFrSLVXbA8x7dzmKdmGzieGRCM46jaSJTDAk=
feat(deps): bump github.com/charmbracelet/lipgloss from 0.8.0 to 0.9.0 (#4364) Bumps [github.com/charmbracelet/lipgloss](https://github.com/charmbracelet/lipgloss) from 0.8.0 to 0.9.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/charmbracelet/lipgloss/releases">github.com/charmbracelet/lipgloss's releases</a>.</em></p> <blockquote> <h2>v0.9.0</h2> <h1>My, how the tables have turned</h1> <p>Now you can draw <code>Table</code>s with Lip Gloss! 💅</p> <!-- raw HTML omitted --> <p>View <a href="https://github.com/charmbracelet/lipgloss/tree/master/examples/table/pokemon/main.go">the source code</a>.</p> <h2>Let's get started</h2> <pre lang="go"><code>import &quot;github.com/charmbracelet/lipgloss/table&quot; </code></pre> <p>Define some rows of data.</p> <pre lang="go"><code>rows := [][]string{ {&quot;Chinese&quot;, &quot;您好&quot;, &quot;你好&quot;}, {&quot;Japanese&quot;, &quot;こんにちは&quot;, &quot;やあ&quot;}, {&quot;Arabic&quot;, &quot;أهلين&quot;, &quot;أهلا&quot;}, {&quot;Russian&quot;, &quot;Здравствуйте&quot;, &quot;Привет&quot;}, {&quot;Spanish&quot;, &quot;Hola&quot;, &quot;¿Qué tal?&quot;}, } </code></pre> <p>Use the table package to style and render the table.</p> <pre lang="go"><code>t := table.New(). Border(lipgloss.NormalBorder()). BorderStyle(lipgloss.NewStyle().Foreground(lipgloss.Color(&quot;99&quot;))). StyleFunc(func(row, col int) lipgloss.Style { switch { case row == 0: return HeaderStyle case row%2 == 0: return EvenRowStyle default: return OddRowStyle } }). Headers(&quot;LANGUAGE&quot;, &quot;FORMAL&quot;, &quot;INFORMAL&quot;). Rows(rows...) <p>// You can also add tables row-by-row t.Row(&quot;English&quot;, &quot;You look absolutely fabulous.&quot;, &quot;How's it going?&quot;) </code></pre></p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/charmbracelet/lipgloss/commit/4476263d0598a0799b48f75d1bfb394b4dce79f4"><code>4476263</code></a> Feature: Tables (<a href="https://redirect.github.com/charmbracelet/lipgloss/issues/218">#218</a>)</li> <li><a href="https://github.com/charmbracelet/lipgloss/commit/408dcf3b9ec535cddf7d343bf5b1a3dd0eba4a00"><code>408dcf3</code></a> feat: add <code>Middle</code> borders (<a href="https://redirect.github.com/charmbracelet/lipgloss/issues/230">#230</a>)</li> <li><a href="https://github.com/charmbracelet/lipgloss/commit/93cd5e0d35ae7fed6884560097b304cec79f0fc1"><code>93cd5e0</code></a> feat: bump minimum go version to 1.18 (<a href="https://redirect.github.com/charmbracelet/lipgloss/issues/216">#216</a>)</li> <li><a href="https://github.com/charmbracelet/lipgloss/commit/b766f24d454396ae75c1b0e86310dffadf4ceb77"><code>b766f24</code></a> feat(deps): bump github.com/mattn/go-runewidth from 0.0.14 to 0.0.15 (<a href="https://redirect.github.com/charmbracelet/lipgloss/issues/215">#215</a>)</li> <li><a href="https://github.com/charmbracelet/lipgloss/commit/b0eb95dbc18f712ad939ab7193cb69951a95361f"><code>b0eb95d</code></a> fix(border): both GetHorizontalBorderSize and GetVerticalBorderSize (<a href="https://redirect.github.com/charmbracelet/lipgloss/issues/225">#225</a>)</li> <li><a href="https://github.com/charmbracelet/lipgloss/commit/2d2a577e2d32c9b23e64be859b8af98599bba243"><code>2d2a577</code></a> fix(border): GetBorderRightSize (<a href="https://redirect.github.com/charmbracelet/lipgloss/issues/224">#224</a>)</li> <li><a href="https://github.com/charmbracelet/lipgloss/commit/18166eaa8adf46a03c4b732ab1dec81fad1c691b"><code>18166ea</code></a> chore(deps): bump actions/checkout from 3 to 4 (<a href="https://redirect.github.com/charmbracelet/lipgloss/issues/222">#222</a>)</li> <li>See full diff in <a href="https://github.com/charmbracelet/lipgloss/compare/v0.8.0...v0.9.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/charmbracelet/lipgloss&package-manager=go_modules&previous-version=0.8.0&new-version=0.9.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-11 14:05:53 +02:00
github.com/mattn/go-runewidth v0.0.15 h1:UNAjwbU9l54TA3KzvqLGxwWjHmMgBUVhBiTjelZgg3U=
github.com/mattn/go-runewidth v0.0.15/go.mod h1:Jdepj2loyihRzMpdS35Xk/zdY8IAYHsh153qUoGf23w=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/matttproud/golang_protobuf_extensions v1.0.1/go.mod h1:D8He9yQNgCq6Z5Ld7szi9bcBfOoFv/3dc6xSMkL2PC0=
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419) Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.1.1 to 2.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's releases</a>.</em></p> <blockquote> <h2>v2.2.1</h2> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's changelog</a>.</em></p> <blockquote> <h1>v2.2.1</h1> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign/commit/12cbf9ea177d22bbf5cf028bcb4712b5f174ebc6"><code>12cbf9e</code></a> add changelog for v2.2.1 release (<a href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/827f24e9d4a1f8e845cb1597d02053410f5bbe2a"><code>827f24e</code></a> feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8ac891ff0e29ddc67965423bee8f826219c6eb0f"><code>8ac891f</code></a> Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li><a href="https://github.com/sigstore/cosign/commit/8b366c497bd22b9be7742d057b8f59083dcadee0"><code>8b366c4</code></a> add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/23920de5623a505921ba4e62fa97e2553eff4699"><code>23920de</code></a> chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/e022e1c13240d1ae5b3c408bc53e389154331713"><code>e022e1c</code></a> chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/28c59c5eca6386924cc8f381afe94efe1e957679"><code>28c59c5</code></a> add missing groups key (<a href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8e5bdcc0ff39b8dc1b477251fef521601df76ec0"><code>8e5bdcc</code></a> chore(deps): bump github.com/google/certificate-transparency-go (<a href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/510cac4ef54274823599082e3a57a556ccd5c9e5"><code>510cac4</code></a> chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/063902b1d78fed7c12c9d9ce06248d36963e8169"><code>063902b</code></a> chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 18:39:49 +02:00
github.com/matttproud/golang_protobuf_extensions/v2 v2.0.0 h1:jWpvCLoY8Z/e3VKvlsiIGKtc+UG6U5vzxaoagmhXfyg=
github.com/matttproud/golang_protobuf_extensions/v2 v2.0.0/go.mod h1:QUyp042oQthUoa9bqDv0ER0wrtXnBruoNd7aNjkbP+k=
chore(deps): bump github.com/jarcoal/httpmock from 1.2.0 to 1.3.0 (#3760) Bumps [github.com/jarcoal/httpmock](https://github.com/jarcoal/httpmock) from 1.2.0 to 1.3.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/jarcoal/httpmock/releases">github.com/jarcoal/httpmock's releases</a>.</em></p> <blockquote> <h2>v1.3.0</h2> <p>New features:</p> <ul> <li>new <a href="https://pkg.go.dev/github.com/jarcoal/httpmock#Matcher">matcher feature</a>, allowing to create a <a href="https://pkg.go.dev/github.com/jarcoal/httpmock#Responder">Responder</a> based on <a href="https://pkg.go.dev/net/http#Request">net/http.Request</a> content (header or body for example), so not only on method and URL as before. See the following new registering functions &amp; methods: <ul> <li><a href="https://pkg.go.dev/github.com/jarcoal/httpmock#RegisterMatcherResponder">RegisterMatcherResponder</a> &amp; <a href="https://pkg.go.dev/github.com/jarcoal/httpmock#MockTransport.RegisterMatcherResponder">MockTransport.RegisterMatcherResponder</a>,</li> <li><a href="https://pkg.go.dev/github.com/jarcoal/httpmock#RegisterRegexpMatcherResponder">RegisterRegexpMatcherResponder</a> &amp; <a href="https://pkg.go.dev/github.com/jarcoal/httpmock#MockTransport.RegisterRegexpMatcherResponder">MockTransport.RegisterRegexpMatcherResponder</a>,</li> <li><a href="https://pkg.go.dev/github.com/jarcoal/httpmock#RegisterMatcherResponderWithQuery">RegisterMatcherResponderWithQuery</a> &amp; <a href="https://pkg.go.dev/github.com/jarcoal/httpmock#MockTransport.RegisterMatcherResponderWithQuery">MockTransport.RegisterMatcherResponderWithQuery</a>;</li> </ul> </li> <li>add following <a href="https://pkg.go.dev/github.com/jarcoal/httpmock#Responder">Responder</a> methods, allowing to easily add some headers to the returned <a href="https://pkg.go.dev/net/http#Response">net/http.Response</a> without the need to craft a <a href="https://pkg.go.dev/github.com/jarcoal/httpmock#Responder">Responder</a> by hand: <ul> <li><a href="https://pkg.go.dev/github.com/jarcoal/httpmock#Responder.SetContentLength">SetContentLength</a>,</li> <li><a href="https://pkg.go.dev/github.com/jarcoal/httpmock#Responder.HeaderAdd">HeaderAdd</a>,</li> <li><a href="https://pkg.go.dev/github.com/jarcoal/httpmock#Responder.HeaderSet">HeaderSet</a>.</li> </ul> </li> </ul> <p>Miscellaneous:</p> <ul> <li>documentation now uses new go1.19 doc features;</li> <li>go minimal version required is now 1.13;</li> <li>CI tests using go1.20 &amp; golangci-lint v1.51.0.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/jarcoal/httpmock/commit/e977d517e968810981a6178211fd88ccf508857a"><code>e977d51</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/jarcoal/httpmock/issues/139">#139</a> from jarcoal/go120</li> <li><a href="https://github.com/jarcoal/httpmock/commit/df3afac771d156978fe08468e6d5470a86b7a75c"><code>df3afac</code></a> ci: test with go1.20</li> <li><a href="https://github.com/jarcoal/httpmock/commit/837f061d506d01fe5154306d55a0a7ce046523de"><code>837f061</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/jarcoal/httpmock/issues/138">#138</a> from jarcoal/headers</li> <li><a href="https://github.com/jarcoal/httpmock/commit/d4ab20c68d8b0c8ac08908ef5dc7bbc80d9b462f"><code>d4ab20c</code></a> feat: add Responder.{SetContentLength,HeaderAdd,HeaderSet} methods</li> <li><a href="https://github.com/jarcoal/httpmock/commit/db50b7669db74ba622c08cb8be04231521d194a9"><code>db50b76</code></a> perf(matchers): simplify http.NoBody case</li> <li><a href="https://github.com/jarcoal/httpmock/commit/b9e83a2877b27d4625b82d138c3ff57fb47f3757"><code>b9e83a2</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/jarcoal/httpmock/issues/136">#136</a> from jarcoal/matchers</li> <li><a href="https://github.com/jarcoal/httpmock/commit/f69cd5e7f9cf588f1052ed212557a6e381ffcfa7"><code>f69cd5e</code></a> feat: introduce new matchers feature</li> <li><a href="https://github.com/jarcoal/httpmock/commit/a55e9610f3ebbdd6e579dc9233d035e71042436f"><code>a55e961</code></a> refactor: go1.13 required now, so drop go1.9 to go1.12 support</li> <li><a href="https://github.com/jarcoal/httpmock/commit/f6c487638cbd1275690adef582e09253a3c559da"><code>f6c4876</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/jarcoal/httpmock/issues/134">#134</a> from jarcoal/go119</li> <li><a href="https://github.com/jarcoal/httpmock/commit/638f16c7002a28ec479fb817d266c96a50c2e17f"><code>638f16c</code></a> docs: uses new go1.19 doc features</li> <li>Additional commits viewable in <a href="https://github.com/jarcoal/httpmock/compare/v1.2.0...v1.3.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/jarcoal/httpmock&package-manager=go_modules&previous-version=1.2.0&new-version=1.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-07 14:45:00 +02:00
github.com/maxatome/go-testdeep v1.12.0 h1:Ql7Go8Tg0C1D/uMMX59LAoYK7LffeJQ6X2T04nTH68g=
chore: go mod tidy Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-09-13 19:03:05 +02:00
github.com/maxatome/go-testdeep v1.12.0/go.mod h1:lPZc/HAcJMP92l7yI6TRz1aZN5URwUBUAfUNvrclaNM=
feat(deps): bump github.com/goreleaser/nfpm/v2 from 2.30.1 to 2.31.0 (#4144) latest and greatest
2023-06-26 18:20:47 +02:00
github.com/mitchellh/copystructure v1.0.0/go.mod h1:SNtv71yrdKgLRyLFxmLdkAbkKEFWgYaq1OVrnRcwhnw=
feat: update nfpm (#2640) * feat: update nfpm * feat: update nfpm * feat: update nfpm * feat: update nfpm * fix: dir type * docs: dir * docs: typo * fix: race * fix: race cond
2021-11-14 03:23:11 +02:00
github.com/mitchellh/copystructure v1.2.0 h1:vpKXTN4ewci03Vljg/q9QvCGUDttBOGBIa15WveJJGw=
github.com/mitchellh/copystructure v1.2.0/go.mod h1:qLl+cE2AmVv+CoeAwDPye/v+N2HKCj9FbZEVFJRxO9s=
feat: add gitlab for releases (#1038) * outlines gitlab client integration * makes client parameter more explicit * adds gitlab url to config * changes releaseID to string to adapt to gitlab * updates to latest gitlab client lib 0.18 * fixes copy paster in gitlab upload func * fixes gitlab typo in config * adds gitlab token to env and context * release now uses the client factory method * skips brew pipe if it is not a github release * add github tokentype to publish tests * skips scoop pipe if it is not a github release * corrects brew skip msg * adds gitlab token to main test * adds gitlab to release docs * validates config and errors accordingly * adapt release pipe name to include gitlab * fixes gitlab client after testing * moves not-configured brew and scoop pipe checks as first check * adds more debug to gitlab client * adapts changelog generation for gitlab markdown * adds debug log for gitlab changelog * env needs to run before changelog pipe * moves gitlab default download url to default pipe * moves multiple releases check to from config to release pipe * release differs now for github and gitlab * adds debug gitlab release update msgs * moves env pipe as second after before because it determines the token type other pipes depend on * adaptes error check on gitlab release creation * Revert "adaptes error check on gitlab release creation" This reverts commit 032024571c76140f8e2207ee01cc08088f37594b. * simplifies gitlab client logic. removes comments * skips tls verification for gitlab client if specified in config * updates the docs * adds clarification that brew and scoop are not supported if it is a gitlab release * fixes copy paster in release.md * adds missing blob pipe in defaults and publish due to missing in merge * updates comment in gitlab client
2019-06-29 16:02:40 +02:00
github.com/mitchellh/go-homedir v1.1.0 h1:lukF9ziXFxDFPkA1vsr5zpc1XuPDn/wFntq5mG+4E0Y=
github.com/mitchellh/go-homedir v1.1.0/go.mod h1:SfyaCUpYCn1Vlf4IUYiD9fPX4A5wJrkLzIz1N1q0pr0=
feat: update nfpm Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2020-11-10 23:30:20 +02:00
github.com/mitchellh/mapstructure v1.3.3/go.mod h1:bFUtVrKA4DC2yAKiSyO/QUcy7e+RRV2QTWOzhPopBRo=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/mitchellh/mapstructure v1.4.1/go.mod h1:bFUtVrKA4DC2yAKiSyO/QUcy7e+RRV2QTWOzhPopBRo=
refactor: improving minio and docker tests (#3642) using ory/dockertest to simplify integration tests Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-12-15 15:25:52 +02:00
github.com/mitchellh/mapstructure v1.5.0 h1:jeMsZIYE/09sWLaz43PL7Gy6RuMjD2eJVyuac5Z2hdY=
github.com/mitchellh/mapstructure v1.5.0/go.mod h1:bFUtVrKA4DC2yAKiSyO/QUcy7e+RRV2QTWOzhPopBRo=
feat(deps): bump github.com/goreleaser/nfpm/v2 from 2.30.1 to 2.31.0 (#4144) latest and greatest
2023-06-26 18:20:47 +02:00
github.com/mitchellh/reflectwalk v1.0.0/go.mod h1:mSTlrgnPZtwu0c4WaC2kGObEpuNDbx0jmZXqmk4esnw=
feat: update nfpm (#2640) * feat: update nfpm * feat: update nfpm * feat: update nfpm * feat: update nfpm * fix: dir type * docs: dir * docs: typo * fix: race * fix: race cond
2021-11-14 03:23:11 +02:00
github.com/mitchellh/reflectwalk v1.0.2 h1:G2LzWKi524PWgd3mLHV8Y5k7s6XUvT0Gef6zxSIeXaQ=
github.com/mitchellh/reflectwalk v1.0.2/go.mod h1:mSTlrgnPZtwu0c4WaC2kGObEpuNDbx0jmZXqmk4esnw=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/moby/sys/mountinfo v0.5.0/go.mod h1:3bMD3Rg+zkqx8MRYPi7Pyb0Ie97QEBmdxbhnCLlSvSU=
feat(deps): bump github.com/google/ko from 0.14.1 to 0.15.0 (#4373) Bumps [github.com/google/ko](https://github.com/google/ko) from 0.14.1 to 0.15.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/ko/releases">github.com/google/ko's releases</a>.</em></p> <blockquote> <h2>v0.15.0</h2> <h2>What's Changed</h2> <ul> <li>implement dumb cache for images by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1102">ko-build/ko#1102</a></li> <li>fixed typo in configuration.md by <a href="https://github.com/samlaf"><code>@​samlaf</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1105">ko-build/ko#1105</a></li> <li>pkg/commands: fix dropped errors by <a href="https://github.com/alrs"><code>@​alrs</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1109">ko-build/ko#1109</a></li> <li>ci: add govulncheck by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1110">ko-build/ko#1110</a></li> <li>chore: remove refs to deprecated io/ioutil by <a href="https://github.com/testwill"><code>@​testwill</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1092">ko-build/ko#1092</a></li> <li>Update install docs to install ko using Scoop by <a href="https://github.com/pgrunm"><code>@​pgrunm</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1118">ko-build/ko#1118</a></li> <li>include go build output in build error by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1127">ko-build/ko#1127</a></li> <li>Use go1.21, clean up ci and drop go1.19 by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1137">ko-build/ko#1137</a></li> <li>Update e2e.yaml by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1141">ko-build/ko#1141</a></li> <li>handle newfound lint errors by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1142">ko-build/ko#1142</a></li> <li>fix test broken by lint fix by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1143">ko-build/ko#1143</a></li> <li>Bump actions/checkout from 3.6.0 to 4.0.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1136">ko-build/ko#1136</a></li> <li>fix env var for go env by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1140">ko-build/ko#1140</a></li> <li>docs: add docs for TF and Lambda by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1139">ko-build/ko#1139</a></li> <li>docs: add Lambda and TF pages to sidebar by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1144">ko-build/ko#1144</a></li> <li>include example using go packages by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1145">ko-build/ko#1145</a></li> <li>fix the release workflow and install instructions by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1150">ko-build/ko#1150</a></li> <li>update missing places that was using go1.20 by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1163">ko-build/ko#1163</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/samlaf"><code>@​samlaf</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1105">ko-build/ko#1105</a></li> <li><a href="https://github.com/alrs"><code>@​alrs</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1109">ko-build/ko#1109</a></li> <li><a href="https://github.com/testwill"><code>@​testwill</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1092">ko-build/ko#1092</a></li> <li><a href="https://github.com/pgrunm"><code>@​pgrunm</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1118">ko-build/ko#1118</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/ko-build/ko/compare/v0.14.1...v0.15.0">https://github.com/ko-build/ko/compare/v0.14.1...v0.15.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ko-build/ko/commit/31035ad2026bfbafaa4f009baefe72463af1b3a7"><code>31035ad</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1164">#1164</a> from ko-build/dependabot/go_modules/golang.org/x/net...</li> <li><a href="https://github.com/ko-build/ko/commit/ba952fd091f9d27ee5c136e842b5e94dd715100c"><code>ba952fd</code></a> Bump golang.org/x/net from 0.16.0 to 0.17.0</li> <li><a href="https://github.com/ko-build/ko/commit/277f5d74353950c8663fc04b7546f66e57bd6aaf"><code>277f5d7</code></a> update missing places that was using go1.20 (<a href="https://redirect.github.com/google/ko/issues/1163">#1163</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/b8b3b21f8348d7cab863fe1b4eaa47dfc47632da"><code>b8b3b21</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1162">#1162</a> from ko-build/dependabot/go_modules/github.com/googl...</li> <li><a href="https://github.com/ko-build/ko/commit/4890ab2887b653d3c340de4d119bfd17b703f182"><code>4890ab2</code></a> Bump github.com/google/go-cmp from 0.5.9 to 0.6.0</li> <li><a href="https://github.com/ko-build/ko/commit/30b62aee3faf6866cee6513ea7eb13f5a27cd7ca"><code>30b62ae</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1161">#1161</a> from ko-build/dependabot/go_modules/github.com/spf13...</li> <li><a href="https://github.com/ko-build/ko/commit/449bcb61926cb3e3bcf191e8ca53fad5ab3a4e3c"><code>449bcb6</code></a> Bump github.com/spf13/viper from 1.16.0 to 1.17.0</li> <li><a href="https://github.com/ko-build/ko/commit/c543dd83cc75cd849fb95637ea29e3c7c66d6f87"><code>c543dd8</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1160">#1160</a> from ko-build/dependabot/go_modules/golang.org/x/too...</li> <li><a href="https://github.com/ko-build/ko/commit/c1ae5f5ce4fe058830f24827c853d4db39a95250"><code>c1ae5f5</code></a> Bump golang.org/x/tools from 0.13.0 to 0.14.0</li> <li><a href="https://github.com/ko-build/ko/commit/e50d2fd5ff0ec88ac837ffe6f6c2f122eb54b9f8"><code>e50d2fd</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1159">#1159</a> from ko-build/dependabot/go_modules/golang.org/x/syn...</li> <li>Additional commits viewable in <a href="https://github.com/google/ko/compare/v0.14.1...v0.15.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/ko&package-manager=go_modules&previous-version=0.14.1&new-version=0.15.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-17 17:47:47 +02:00
github.com/moby/term v0.5.0 h1:xt8Q1nalod/v7BqbG21f8mQPqH+xAaC9C3N3wfWbVP0=
github.com/moby/term v0.5.0/go.mod h1:8FzsFHVUBGZdbDsJw/ot+X+d5HLUbvklYLJ9uGfcI3Y=
chore(deps): bump gocloud.dev from 0.20.0 to 0.21.0 (#1941) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.20.0 to 0.21.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.20.0...v0.21.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-12 01:14:58 +02:00
github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
chore(deps): bump gocloud.dev from 0.20.0 to 0.21.0 (#1941) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.20.0 to 0.21.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.20.0...v0.21.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-12 01:14:58 +02:00
github.com/modern-go/reflect2 v0.0.0-20180701023420-4b7aa43c6742/go.mod h1:bx2lNnkwVCuqBIxFjflWJWanXIb3RllmbCylyMrvgv0=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/modern-go/reflect2 v1.0.1/go.mod h1:bx2lNnkwVCuqBIxFjflWJWanXIb3RllmbCylyMrvgv0=
github.com/montanaflynn/stats v0.0.0-20171201202039-1bf9dbcd8cbe/go.mod h1:wL8QJuTMNUDYhXwkmfOly8iTdp5TEcJFWZD2D7SIkUc=
feat: add ko support (#3653) continuing the PR by @developer-guy - [x] should be a publisher, as it does publish the images it builds every time - [x] `Default` method does not work - [x] the `fromConfig` thing should probably be on the defaults, too - [x] wire `--skip-ko` - [x] documentation - [x] more tests - [x] use same registry as docker tests does - [ ] see if we can make the log output match goreleaser's - [ ] ?? closes #2556 closes #3490 Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com> Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> Co-authored-by: actions-user <actions@github.com> Co-authored-by: Jason Hall <jason@chainguard.dev> Co-authored-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2023-01-17 03:34:49 +02:00
github.com/morikuni/aec v1.0.0 h1:nP9CBfwrvYnBRgY6qfDQkygYDmYwOilePFkwzv4dU8A=
chore: go mod tidy Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-09-13 19:03:05 +02:00
github.com/morikuni/aec v1.0.0/go.mod h1:BbKIizmSmc5MMPqRYbxO4ZU0S0+P200+tUnFx7PXmsc=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/mrunalp/fileutils v0.5.0/go.mod h1:M1WthSahJixYnrXQl/DFQuteStB1weuxD2QJNHXfbSQ=
feat: upgrade nfpm to v2.12.0 (#2882) Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
2022-02-04 20:51:42 +02:00
github.com/muesli/mango v0.1.0 h1:DZQK45d2gGbql1arsYA4vfg4d7I9Hfx5rX/GCmzsAvI=
github.com/muesli/mango v0.1.0/go.mod h1:5XFpbC8jY5UUv89YQciiXNlbi+iJgt29VDC5xbzrLL4=
feat(deps): bump github.com/muesli/mango-cobra from 1.1.0 to 1.2.0 (#3181)
2022-06-22 13:46:38 +02:00
github.com/muesli/mango-cobra v1.2.0 h1:DQvjzAM0PMZr85Iv9LIMaYISpTOliMEg+uMFtNbYvWg=
github.com/muesli/mango-cobra v1.2.0/go.mod h1:vMJL54QytZAJhCT13LPVDfkvCUJ5/4jNUKF/8NC2UjA=
feat: upgrade nfpm to v2.12.0 (#2882) Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
2022-02-04 20:51:42 +02:00
github.com/muesli/mango-pflag v0.1.0 h1:UADqbYgpUyRoBja3g6LUL+3LErjpsOwaC9ywvBWe7Sg=
github.com/muesli/mango-pflag v0.1.0/go.mod h1:YEQomTxaCUp8PrbhFh10UfbhbQrM/xJ4i2PB8VTLLW0=
fix: race condition on logs This brings an update on caarlos0/log, precisely due to https://github.com/caarlos0/log/commit/452cd19227f733ea694ccce724390ac992ecc207, which fixes the bug reported at #3363. Closes #3363
2022-09-12 04:06:01 +02:00
github.com/muesli/reflow v0.3.0 h1:IFsN6K9NfGtjeggFP+68I4chLZV2yIKsXJFNZ+eWh6s=
github.com/muesli/reflow v0.3.0/go.mod h1:pbwTDkVPibjO2kyvBQRBxTWEEGDGq0FlB1BIKtnHY/8=
feat: manpages (#2837) * feat: manpages Signed-off-by: Carlos A Becker <caarlos0@gmail.com> * fix: section Signed-off-by: Carlos A Becker <caarlos0@gmail.com> * feat: use mango instead Signed-off-by: Carlos A Becker <caarlos0@gmail.com> * fix: improvements Signed-off-by: Carlos A Becker <caarlos0@gmail.com> * fix: unused Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
2022-01-18 15:17:52 +02:00
github.com/muesli/roff v0.1.0 h1:YD0lalCotmYuF5HhZliKWlIx7IEhiXeSfq7hNjFqGF8=
github.com/muesli/roff v0.1.0/go.mod h1:pjAHQM9hdUUwm/krAfrLGgJkXJ+YuhtsfZ42kieB2Ig=
feat(deps): bump github.com/muesli/termenv from 0.15.1 to 0.15.2 (#4148) Bumps [github.com/muesli/termenv](https://github.com/muesli/termenv) from 0.15.1 to 0.15.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/muesli/termenv/releases">github.com/muesli/termenv's releases</a>.</em></p> <blockquote> <h2>v0.15.2</h2> <h2>What's Changed</h2> <ul> <li>build(deps): bump actions/setup-go from 3 to 4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/muesli/termenv/pull/126">muesli/termenv#126</a></li> <li>build(deps): bump github.com/mattn/go-isatty from 0.0.17 to 0.0.18 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/muesli/termenv/pull/128">muesli/termenv#128</a></li> <li>fix: Cloud Shell supports RGB colors by <a href="https://github.com/muesli"><code>@​muesli</code></a> in <a href="https://redirect.github.com/muesli/termenv/pull/127">muesli/termenv#127</a></li> <li>build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/muesli/termenv/pull/129">muesli/termenv#129</a></li> <li>fix: wezterm is truecolor by <a href="https://github.com/caarlos0"><code>@​caarlos0</code></a> in <a href="https://redirect.github.com/muesli/termenv/pull/139">muesli/termenv#139</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/muesli/termenv/compare/v0.15.1...v0.15.2">https://github.com/muesli/termenv/compare/v0.15.1...v0.15.2</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/muesli/termenv/commit/51d72d34e2b9778a31aa5dd79fbdd8cdac50b4d5"><code>51d72d3</code></a> fix: wezterm is truecolor (<a href="https://redirect.github.com/muesli/termenv/issues/139">#139</a>)</li> <li><a href="https://github.com/muesli/termenv/commit/b57cbb11093e11f08bdeb3d54234909b8fa079fe"><code>b57cbb1</code></a> fix: lint</li> <li><a href="https://github.com/muesli/termenv/commit/e02986697d716017087dc725465e3d8691d317e4"><code>e029866</code></a> build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0</li> <li><a href="https://github.com/muesli/termenv/commit/9b3e79975a48df063aa7a7c1ca0c20c3c868332c"><code>9b3e799</code></a> fix: Cloud Shell supports RGB colors</li> <li><a href="https://github.com/muesli/termenv/commit/73a40463ff25452432bd4e588150285c6aeca58e"><code>73a4046</code></a> build(deps): bump github.com/mattn/go-isatty from 0.0.17 to 0.0.18</li> <li><a href="https://github.com/muesli/termenv/commit/39f5d6e77915ccc34a9e752ad0b7a3443b393058"><code>39f5d6e</code></a> build(deps): bump actions/setup-go from 3 to 4</li> <li>See full diff in <a href="https://github.com/muesli/termenv/compare/v0.15.1...v0.15.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/muesli/termenv&package-manager=go_modules&previous-version=0.15.1&new-version=0.15.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-28 14:46:00 +02:00
github.com/muesli/termenv v0.15.2 h1:GohcuySI0QmI3wN8Ok9PtKGkgkFIk7y6Vpb5PvrY+Wo=
github.com/muesli/termenv v0.15.2/go.mod h1:Epx+iuz8sNs7mNKhxzH4fWXGNpZwUaJKRS1noLXviQ8=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/mwitkow/go-conntrack v0.0.0-20161129095857-cc309e4a2223/go.mod h1:qRWi+5nqEBWmkhHvq77mSJWrCKwh8bxhgT7d/eI7P4U=
chore(deps): bump github.com/golangci/golangci-lint from 1.23.7 to 1.27.0 (#1563) * chore(deps): bump github.com/golangci/golangci-lint from 1.23.7 to 1.27.0 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: tests Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2020-05-26 05:48:10 +02:00
github.com/niemeyer/pretty v0.0.0-20200227124842-a10e7caefd8e/go.mod h1:zD1mROLANZcx1PVRCS0qkT7pwLkGfwJo4zjcN/Tysno=
feat: add ko support (#3653) continuing the PR by @developer-guy - [x] should be a publisher, as it does publish the images it builds every time - [x] `Default` method does not work - [x] the `fromConfig` thing should probably be on the defaults, too - [x] wire `--skip-ko` - [x] documentation - [x] more tests - [x] use same registry as docker tests does - [ ] see if we can make the log output match goreleaser's - [ ] ?? closes #2556 closes #3490 Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com> Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> Co-authored-by: actions-user <actions@github.com> Co-authored-by: Jason Hall <jason@chainguard.dev> Co-authored-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2023-01-17 03:34:49 +02:00
github.com/oklog/ulid v1.3.1 h1:EGfNDEx6MqHz8B3uNV6QAib1UR2Lm97sHi3ocA6ESJ4=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/oklog/ulid v1.3.1/go.mod h1:CirwcVhetQ6Lv90oh/F+FBtV6XMibvdAFo93nm5qn4U=
sec(deps): bump github.com/go-git/go-git/v5 from 5.7.0 to 5.11.0 (#4505) Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.7.0 to 5.11.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/go-git/go-git/releases">github.com/go-git/go-git/v5's releases</a>.</em></p> <blockquote> <h2>v5.11.0</h2> <h2>What's Changed</h2> <ul> <li>git: validate reference names (<a href="https://redirect.github.com/go-git/go-git/issues/929">#929</a>) by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/950">go-git/go-git#950</a></li> <li>git: stop iterating at oldest shallow when pulling. Fixes <a href="https://redirect.github.com/go-git/go-git/issues/305">#305</a> by <a href="https://github.com/dhoizner"><code>@​dhoizner</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/939">go-git/go-git#939</a></li> <li>plumbing: object, enable renames in getFileStatsFromFilePatches by <a href="https://github.com/djmoch"><code>@​djmoch</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/941">go-git/go-git#941</a></li> <li>storage: filesystem, Add option to set a specific FS for alternates by <a href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/953">go-git/go-git#953</a></li> <li>Align worktree validation with upstream and remove build warnings by <a href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/958">go-git/go-git#958</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/dhoizner"><code>@​dhoizner</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/939">go-git/go-git#939</a></li> <li><a href="https://github.com/djmoch"><code>@​djmoch</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/941">go-git/go-git#941</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/go-git/go-git/compare/v5.10.1...v5.11.0">https://github.com/go-git/go-git/compare/v5.10.1...v5.11.0</a></p> <h2>v5.10.1</h2> <h2>What's Changed</h2> <ul> <li>Worktree, ignore ModeSocket files by <a href="https://github.com/steiler"><code>@​steiler</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/930">go-git/go-git#930</a></li> <li>git: add tracer package by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/916">go-git/go-git#916</a></li> <li>remote: Flip clause for fast-forward only check by <a href="https://github.com/adityasaky"><code>@​adityasaky</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/875">go-git/go-git#875</a></li> <li>plumbing: transport/ssh, Fix nil pointer dereference caused when an unreachable proxy server is set. Fixes <a href="https://redirect.github.com/go-git/go-git/issues/900">#900</a> by <a href="https://github.com/anandf"><code>@​anandf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/901">go-git/go-git#901</a></li> <li>plumbing: uppload-server-info, implement upload-server-info by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/896">go-git/go-git#896</a></li> <li>plumbing: optimise memory consumption for filesystem storage by <a href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/799">go-git/go-git#799</a></li> <li>plumbing: format/packfile, Refactor patch delta by <a href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/908">go-git/go-git#908</a></li> <li>plumbing: fix empty uploadpack request error by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/932">go-git/go-git#932</a></li> <li>plumbing: transport/git, Improve tests error message by <a href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/752">go-git/go-git#752</a></li> <li>plumbing: format/pktline, Respect pktline error-line errors by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/936">go-git/go-git#936</a></li> <li>utils: remove ioutil.Pipe and use std library io.Pipe by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/922">go-git/go-git#922</a></li> <li>utils: move trace to utils by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/931">go-git/go-git#931</a></li> <li>cli: separate go module for cli by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/914">go-git/go-git#914</a></li> <li>build: bump github.com/google/go-cmp from 0.5.9 to 0.6.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/887">go-git/go-git#887</a></li> <li>build: bump actions/setup-go from 3 to 4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/891">go-git/go-git#891</a></li> <li>build: bump github.com/skeema/knownhosts from 1.2.0 to 1.2.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/888">go-git/go-git#888</a></li> <li>build: bump actions/checkout from 3 to 4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/890">go-git/go-git#890</a></li> <li>build: bump golang.org/x/sys from 0.13.0 to 0.14.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/907">go-git/go-git#907</a></li> <li>build: bump golang.org/x/text from 0.13.0 to 0.14.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/906">go-git/go-git#906</a></li> <li>build: bump golang.org/x/crypto from 0.14.0 to 0.15.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/917">go-git/go-git#917</a></li> <li>build: bump golang.org/x/net from 0.17.0 to 0.18.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/918">go-git/go-git#918</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/anandf"><code>@​anandf</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/901">go-git/go-git#901</a></li> <li><a href="https://github.com/steiler"><code>@​steiler</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/930">go-git/go-git#930</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/go-git/go-git/compare/v5.10.0...v5.10.1">https://github.com/go-git/go-git/compare/v5.10.0...v5.10.1</a></p> <h2>v5.10.0</h2> <h2>What's Changed</h2> <ul> <li>PlainInitOptions.Bare and allow using InitOptions with PlainInitWithOptions by <a href="https://github.com/ThinkChaos"><code>@​ThinkChaos</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/782">go-git/go-git#782</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/go-git/go-git/commit/5d08d3bd94c65a3b6c25c6fba6907d12b0dac4ca"><code>5d08d3b</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/958">#958</a> from pjbgf/workval</li> <li><a href="https://github.com/go-git/go-git/commit/5bd1d8f4abcfbf1345a1e5a5ec9a96121f3746dc"><code>5bd1d8f</code></a> build: Ensure checkout is the first operation</li> <li><a href="https://github.com/go-git/go-git/commit/b2c19824771bbcbb21abb51abb319c1a610aa6b3"><code>b2c1982</code></a> git: worktree, Align validation with upstream rules</li> <li><a href="https://github.com/go-git/go-git/commit/cec7da63ca0412fce55a0bf0715b7ba44a41eaa2"><code>cec7da6</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/953">#953</a> from pjbgf/alternates</li> <li><a href="https://github.com/go-git/go-git/commit/8b47ceb1aa854f3c3bfa1c347157a04324fcd51e"><code>8b47ceb</code></a> storage: filesystem, Add option to set a specific FS for alternates</li> <li><a href="https://github.com/go-git/go-git/commit/4f614891047bae5d0f7a253f014175505b9821d7"><code>4f61489</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/941">#941</a> from djmoch/filestats-rename</li> <li><a href="https://github.com/go-git/go-git/commit/ae552ce0bf32cddb689727c4c9fa6bf4d3bd6499"><code>ae552ce</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/939">#939</a> from dhoizner/fix-pull-after-shallow</li> <li><a href="https://github.com/go-git/go-git/commit/cc1895b905ebadb09504d88444ff05932fa6e928"><code>cc1895b</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/950">#950</a> from aymanbagabas/validate-ref</li> <li><a href="https://github.com/go-git/go-git/commit/de1d5a5978b9599ca3dacd58bbf699e4bb4cf6bd"><code>de1d5a5</code></a> git: validate reference names</li> <li><a href="https://github.com/go-git/go-git/commit/d87110b492c94d99ebdaea732b23a54b7efba94b"><code>d87110b</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/948">#948</a> from go-git/dependabot/go_modules/cli/go-git/github.c...</li> <li>Additional commits viewable in <a href="https://github.com/go-git/go-git/compare/v5.7.0...v5.11.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/go-git/go-git/v5&package-manager=go_modules&previous-version=5.7.0&new-version=5.11.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-28 14:46:28 +02:00
github.com/onsi/gomega v1.27.10 h1:naR28SdDFlqrG6kScpT8VWpu1xWY5nJRCF3XaYyBjhI=
github.com/onsi/gomega v1.27.10/go.mod h1:RsS8tutOdbdgzbPtzzATp12yT7kM5I5aElG3evPbQ0M=
refactor: improving minio and docker tests (#3642) using ory/dockertest to simplify integration tests Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-12-15 15:25:52 +02:00
github.com/opencontainers/go-digest v1.0.0 h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/opencontainers/go-digest v1.0.0/go.mod h1:0JzlMkj0TRzQZfJkVvzbP0HBR3IKzErnv2BNG4W4MAM=
feat(deps): bump github.com/google/ko from 0.14.1 to 0.15.0 (#4373) Bumps [github.com/google/ko](https://github.com/google/ko) from 0.14.1 to 0.15.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/ko/releases">github.com/google/ko's releases</a>.</em></p> <blockquote> <h2>v0.15.0</h2> <h2>What's Changed</h2> <ul> <li>implement dumb cache for images by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1102">ko-build/ko#1102</a></li> <li>fixed typo in configuration.md by <a href="https://github.com/samlaf"><code>@​samlaf</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1105">ko-build/ko#1105</a></li> <li>pkg/commands: fix dropped errors by <a href="https://github.com/alrs"><code>@​alrs</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1109">ko-build/ko#1109</a></li> <li>ci: add govulncheck by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1110">ko-build/ko#1110</a></li> <li>chore: remove refs to deprecated io/ioutil by <a href="https://github.com/testwill"><code>@​testwill</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1092">ko-build/ko#1092</a></li> <li>Update install docs to install ko using Scoop by <a href="https://github.com/pgrunm"><code>@​pgrunm</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1118">ko-build/ko#1118</a></li> <li>include go build output in build error by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1127">ko-build/ko#1127</a></li> <li>Use go1.21, clean up ci and drop go1.19 by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1137">ko-build/ko#1137</a></li> <li>Update e2e.yaml by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1141">ko-build/ko#1141</a></li> <li>handle newfound lint errors by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1142">ko-build/ko#1142</a></li> <li>fix test broken by lint fix by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1143">ko-build/ko#1143</a></li> <li>Bump actions/checkout from 3.6.0 to 4.0.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1136">ko-build/ko#1136</a></li> <li>fix env var for go env by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1140">ko-build/ko#1140</a></li> <li>docs: add docs for TF and Lambda by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1139">ko-build/ko#1139</a></li> <li>docs: add Lambda and TF pages to sidebar by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1144">ko-build/ko#1144</a></li> <li>include example using go packages by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1145">ko-build/ko#1145</a></li> <li>fix the release workflow and install instructions by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1150">ko-build/ko#1150</a></li> <li>update missing places that was using go1.20 by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1163">ko-build/ko#1163</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/samlaf"><code>@​samlaf</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1105">ko-build/ko#1105</a></li> <li><a href="https://github.com/alrs"><code>@​alrs</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1109">ko-build/ko#1109</a></li> <li><a href="https://github.com/testwill"><code>@​testwill</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1092">ko-build/ko#1092</a></li> <li><a href="https://github.com/pgrunm"><code>@​pgrunm</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1118">ko-build/ko#1118</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/ko-build/ko/compare/v0.14.1...v0.15.0">https://github.com/ko-build/ko/compare/v0.14.1...v0.15.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ko-build/ko/commit/31035ad2026bfbafaa4f009baefe72463af1b3a7"><code>31035ad</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1164">#1164</a> from ko-build/dependabot/go_modules/golang.org/x/net...</li> <li><a href="https://github.com/ko-build/ko/commit/ba952fd091f9d27ee5c136e842b5e94dd715100c"><code>ba952fd</code></a> Bump golang.org/x/net from 0.16.0 to 0.17.0</li> <li><a href="https://github.com/ko-build/ko/commit/277f5d74353950c8663fc04b7546f66e57bd6aaf"><code>277f5d7</code></a> update missing places that was using go1.20 (<a href="https://redirect.github.com/google/ko/issues/1163">#1163</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/b8b3b21f8348d7cab863fe1b4eaa47dfc47632da"><code>b8b3b21</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1162">#1162</a> from ko-build/dependabot/go_modules/github.com/googl...</li> <li><a href="https://github.com/ko-build/ko/commit/4890ab2887b653d3c340de4d119bfd17b703f182"><code>4890ab2</code></a> Bump github.com/google/go-cmp from 0.5.9 to 0.6.0</li> <li><a href="https://github.com/ko-build/ko/commit/30b62aee3faf6866cee6513ea7eb13f5a27cd7ca"><code>30b62ae</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1161">#1161</a> from ko-build/dependabot/go_modules/github.com/spf13...</li> <li><a href="https://github.com/ko-build/ko/commit/449bcb61926cb3e3bcf191e8ca53fad5ab3a4e3c"><code>449bcb6</code></a> Bump github.com/spf13/viper from 1.16.0 to 1.17.0</li> <li><a href="https://github.com/ko-build/ko/commit/c543dd83cc75cd849fb95637ea29e3c7c66d6f87"><code>c543dd8</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1160">#1160</a> from ko-build/dependabot/go_modules/golang.org/x/too...</li> <li><a href="https://github.com/ko-build/ko/commit/c1ae5f5ce4fe058830f24827c853d4db39a95250"><code>c1ae5f5</code></a> Bump golang.org/x/tools from 0.13.0 to 0.14.0</li> <li><a href="https://github.com/ko-build/ko/commit/e50d2fd5ff0ec88ac837ffe6f6c2f122eb54b9f8"><code>e50d2fd</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1159">#1159</a> from ko-build/dependabot/go_modules/golang.org/x/syn...</li> <li>Additional commits viewable in <a href="https://github.com/google/ko/compare/v0.14.1...v0.15.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/ko&package-manager=go_modules&previous-version=0.14.1&new-version=0.15.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-17 17:47:47 +02:00
github.com/opencontainers/image-spec v1.1.0-rc5 h1:Ygwkfw9bpDvs+c9E34SdgGOj41dX/cbdlwvlWt0pnFI=
github.com/opencontainers/image-spec v1.1.0-rc5/go.mod h1:X4pATf0uXsnn3g5aiGIsVnJBR4mxhKzfwmvK/B2NTm8=
feat(deps): bump github.com/opencontainers/runc from 1.1.2 to 1.1.5 (#3896) Bumps [github.com/opencontainers/runc](https://github.com/opencontainers/runc) from 1.1.2 to 1.1.5. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/opencontainers/runc/releases">github.com/opencontainers/runc's releases</a>.</em></p> <blockquote> <h2>runc 1.1.5 -- &quot;囚われた屈辱は　反撃の嚆矢だ&quot;</h2> <p>This is the fifth patch release in the 1.1.z series of runc, which fixes three CVEs found in runc.</p> <ul> <li> <p>CVE-2023-25809 is a vulnerability involving rootless containers where (under specific configurations), the container would have write access to the /sys/fs/cgroup/user.slice/... cgroup hierarchy. No other hierarchies on the host were affected. This vulnerability was discovered by Akihiro Suda. <a href="https://github.com/opencontainers/runc/security/advisories/GHSA-m8cg-xc2p-r3fc">https://github.com/opencontainers/runc/security/advisories/GHSA-m8cg-xc2p-r3fc</a></p> </li> <li> <p>CVE-2023-27561 was a regression which effectively re-introduced CVE-2019-19921. This bug was present from v1.0.0-rc95 to v1.1.4. This regression was discovered by <a href="https://github.com/Beuc"><code>@​Beuc</code></a>. <a href="https://github.com/advisories/GHSA-vpvm-3wq2-2wvm">https://github.com/advisories/GHSA-vpvm-3wq2-2wvm</a></p> </li> <li> <p>CVE-2023-28642 is a variant of CVE-2023-27561 and was fixed by the same patch. This variant of the above vulnerability was reported by Lei Wang. <a href="https://github.com/opencontainers/runc/security/advisories/GHSA-g2j6-57v7-gm8c">https://github.com/opencontainers/runc/security/advisories/GHSA-g2j6-57v7-gm8c</a></p> </li> </ul> <p>In addition, the following other fixes are included in this release:</p> <ul> <li>Fix the inability to use <code>/dev/null</code> when inside a container. (<a href="https://redirect.github.com/opencontainers/runc/issues/3620">#3620</a>)</li> <li>Fix changing the ownership of host's <code>/dev/null</code> caused by fd redirection (a regression in 1.1.1). (<a href="https://redirect.github.com/opencontainers/runc/issues/3674">#3674</a>, <a href="https://redirect.github.com/opencontainers/runc/issues/3731">#3731</a>)</li> <li>Fix rare runc exec/enter unshare error on older kernels, including CentOS &lt; 7.7. (<a href="https://redirect.github.com/opencontainers/runc/issues/3776">#3776</a>)</li> <li>nsexec: Check for errors in <code>write_log()</code>. (<a href="https://redirect.github.com/opencontainers/runc/issues/3721">#3721</a>)</li> </ul> <h3>Static Linking Notices</h3> <p>The <code>runc</code> binary distributed with this release are <em>statically linked</em> with the following <a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html">GNU LGPL-2.1</a> licensed libraries, with <code>runc</code> acting as a &quot;work that uses the Library&quot;:</p> <ul> <li><a href="https://github.com/seccomp/libseccomp">libseccomp</a></li> </ul> <p>The versions of these libraries were not modified from their upstream versions, but in order to comply with the LGPL-2.1 (§6(a)), we have attached the complete source code for those libraries which (when combined with the attached runc source code) may be used to exercise your rights under the LGPL-2.1.</p> <p>However we strongly suggest that you make use of your distribution's packages or download them from the authoritative upstream sources, especially since these libraries are related to the security of your containers.</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/opencontainers/runc/blob/v1.1.5/CHANGELOG.md">github.com/opencontainers/runc's changelog</a>.</em></p> <blockquote> <h2>[1.1.5] - 2023-03-29</h2> <blockquote> <p>囚われた屈辱は 反撃の嚆矢だ</p> </blockquote> <h3>Fixed</h3> <ul> <li>Prohibit container's <code>/proc</code> and <code>/sys</code> to be symlinks (CVE-2019-19921, CVE-2023-27561, CVE-2023-28642, <a href="https://redirect.github.com/opencontainers/runc/issues/3785">#3785</a>)</li> <li>rootless: rework /sys/fs/cgroup mounts to avoid exposing the host's cgroup hierarchy into the container. (CVE-2023-25809)</li> <li>Fix the inability to use <code>/dev/null</code> when inside a container. (<a href="https://redirect.github.com/opencontainers/runc/issues/3620">#3620</a>)</li> <li>Fix changing the ownership of host's <code>/dev/null</code> caused by fd redirection (a regression in 1.1.1). (<a href="https://redirect.github.com/opencontainers/runc/issues/3674">#3674</a>, <a href="https://redirect.github.com/opencontainers/runc/issues/3731">#3731</a>)</li> <li>Fix rare runc exec/enter unshare error on older kernels, inlcuding CentOS &lt; 7.7. (<a href="https://redirect.github.com/opencontainers/runc/issues/3776">#3776</a>)</li> <li>nsexec: Check for errors in <code>write_log()</code>. (<a href="https://redirect.github.com/opencontainers/runc/issues/3721">#3721</a>)</li> <li>Various CI fixes and updates. (<a href="https://redirect.github.com/opencontainers/runc/issues/3618">#3618</a>, <a href="https://redirect.github.com/opencontainers/runc/issues/3630">#3630</a>, <a href="https://redirect.github.com/opencontainers/runc/issues/3640">#3640</a>, <a href="https://redirect.github.com/opencontainers/runc/issues/3729">#3729</a>)</li> </ul> <h2>[1.1.4] - 2022-08-24</h2> <blockquote> <p>If you look for perfection, you'll never be content.</p> </blockquote> <h3>Fixed</h3> <ul> <li>Fix mounting via wrong proc fd. When the user and mount namespaces are used, and the bind mount is followed by the cgroup mount in the spec, the cgroup was mounted using the bind mount's mount fd. (<a href="https://redirect.github.com/opencontainers/runc/issues/3511">#3511</a>)</li> <li>Switch <code>kill()</code> in <code>libcontainer/nsenter</code> to <code>sane_kill()</code>. (<a href="https://redirect.github.com/opencontainers/runc/issues/3536">#3536</a>)</li> <li>Fix &quot;permission denied&quot; error from <code>runc run</code> on <code>noexec</code> fs. (<a href="https://redirect.github.com/opencontainers/runc/issues/3541">#3541</a>)</li> <li>Fix failed exec after <code>systemctl daemon-reload</code>. Due to a regression in v1.1.3, the <code>DeviceAllow=char-pts rwm</code> rule was no longer added and was causing an error <code>open /dev/pts/0: operation not permitted: unknown</code> when systemd was reloaded. (<a href="https://redirect.github.com/opencontainers/runc/issues/3554">#3554</a>)</li> <li>Various CI fixes. (<a href="https://redirect.github.com/opencontainers/runc/issues/3538">#3538</a>, <a href="https://redirect.github.com/opencontainers/runc/issues/3558">#3558</a>, <a href="https://redirect.github.com/opencontainers/runc/issues/3562">#3562</a>)</li> </ul> <h2>[1.1.3] - 2022-06-09</h2> <blockquote> <p>In the beginning there was nothing, which exploded.</p> </blockquote> <h3>Fixed</h3> <ul> <li>Our seccomp <code>-ENOSYS</code> stub now correctly handles multiplexed syscalls on s390 and s390x. This solves the issue where syscalls the host kernel did not support would return <code>-EPERM</code> despite the existence of the <code>-ENOSYS</code> stub code (this was due to how s390x does syscall multiplexing). (<a href="https://redirect.github.com/opencontainers/runc/issues/3478">#3478</a>)</li> <li>Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as intended; this fix does not affect runc binary itself but is important for libcontainer users such as Kubernetes. (<a href="https://redirect.github.com/opencontainers/runc/issues/3476">#3476</a>)</li> <li>Inability to compile with recent clang due to an issue with duplicate</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/opencontainers/runc/commit/f19387a6bec4944c770f7668ab51c4348d9c2f38"><code>f19387a</code></a> VERSION: release v1.1.5</li> <li><a href="https://github.com/opencontainers/runc/commit/58a9abee210c5a72ab10904f96e0026f684f24e3"><code>58a9abe</code></a> Merge pull request from GHSA-m8cg-xc2p-r3fc</li> <li><a href="https://github.com/opencontainers/runc/commit/27fb72c7ffdbd509b3c15b2bdb4df3d2192bfe7b"><code>27fb72c</code></a> merge branch 'pr-3776' into release-1.1</li> <li><a href="https://github.com/opencontainers/runc/commit/8ec02ea1b14edac85a6e9a2b622ae44e15e11ccd"><code>8ec02ea</code></a> nsexec: retry unshare on EINVAL</li> <li><a href="https://github.com/opencontainers/runc/commit/059d7730fc102052c90fea52c7b3c6f04fbbc487"><code>059d773</code></a> merge branch 'pr-3785' into release-1.1</li> <li><a href="https://github.com/opencontainers/runc/commit/0abab45c9b97c113ff2cdc16f3a7388444c3fbec"><code>0abab45</code></a> Prohibit /proc and /sys to be symlinks</li> <li><a href="https://github.com/opencontainers/runc/commit/0e6b818a2b0d24fdb6697614e5c5f115bbe8e3a5"><code>0e6b818</code></a> rootless: fix /sys/fs/cgroup mounts</li> <li><a href="https://github.com/opencontainers/runc/commit/c6781d100a73d2dcef84e9376d85fff02235a2ed"><code>c6781d1</code></a> Merge pull request <a href="https://redirect.github.com/opencontainers/runc/issues/3721">#3721</a> from kinvolk/rata/nsfixes-backport</li> <li><a href="https://github.com/opencontainers/runc/commit/f6e2cd3baf661e1f377088e13084ccb5aadf41e6"><code>f6e2cd3</code></a> nsexec: Check for errors in write_log()</li> <li><a href="https://github.com/opencontainers/runc/commit/3775df9fcb7828594114866e1df346f44d22ad16"><code>3775df9</code></a> Merge pull request <a href="https://redirect.github.com/opencontainers/runc/issues/3731">#3731</a> from kolyshkin/1.1-fix-dev-null</li> <li>Additional commits viewable in <a href="https://github.com/opencontainers/runc/compare/v1.1.2...v1.1.5">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/opencontainers/runc&package-manager=go_modules&previous-version=1.1.2&new-version=1.1.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-29 19:37:12 +02:00
github.com/opencontainers/runc v1.1.5 h1:L44KXEpKmfWDcS02aeGm8QNTFXTo2D+8MYGDIJ/GDEs=
github.com/opencontainers/runc v1.1.5/go.mod h1:1J5XiS+vdZ3wCyZybsuxXZWGrgSr8fFJHLXuG2PsnNg=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/opencontainers/runtime-spec v1.0.3-0.20210326190908-1c3f411f0417/go.mod h1:jwyrGlmzljRJv/Fgzds9SsS/C5hL+LL3ko9hs6T5lQ0=
github.com/opencontainers/selinux v1.10.0/go.mod h1:2i0OySw99QjzBBQByd1Gr9gSjvuho1lHsJxIJ3gGbJI=
feat(deps): bump github.com/ory/dockertest/v3 from 3.9.1 to 3.10.0 (#3947) Bumps [github.com/ory/dockertest/v3](https://github.com/ory/dockertest) from 3.9.1 to 3.10.0. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ory/dockertest/commit/0d540538ba862768f4cf01a550f3b0e5dfcf83e1"><code>0d54053</code></a> chore(deps): bump actions/stale from 4 to 8 (<a href="https://redirect.github.com/ory/dockertest/issues/430">#430</a>)</li> <li><a href="https://github.com/ory/dockertest/commit/355d9264da44939c85aacc49c990e7d5fab46a4b"><code>355d926</code></a> chore(deps): bump actions/setup-node from 2.pre.beta to 3.6.0 (<a href="https://redirect.github.com/ory/dockertest/issues/429">#429</a>)</li> <li><a href="https://github.com/ory/dockertest/commit/afee4d2c072fd28b9d5def5a9dd96f7cb789ac71"><code>afee4d2</code></a> Replace pkg/errors with native error wrapping (<a href="https://redirect.github.com/ory/dockertest/issues/433">#433</a>)</li> <li><a href="https://github.com/ory/dockertest/commit/5d9a022f39dec2056eed8b0ccca2961f5de5ed8a"><code>5d9a022</code></a> docs: fix typo in FakeGoogleCloudStorage example (<a href="https://redirect.github.com/ory/dockertest/issues/434">#434</a>)</li> <li><a href="https://github.com/ory/dockertest/commit/e733223e5349f34edddbebf4852aabae1964e476"><code>e733223</code></a> fix: use std context lib (<a href="https://redirect.github.com/ory/dockertest/issues/404">#404</a>)</li> <li><a href="https://github.com/ory/dockertest/commit/51627a024572d83a084aebe75e89823e84fc7e01"><code>51627a0</code></a> chore(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0 (<a href="https://redirect.github.com/ory/dockertest/issues/432">#432</a>)</li> <li><a href="https://github.com/ory/dockertest/commit/7b0c8dc1f6dcef51b5ee7c64a1bdd9dbe4b300b5"><code>7b0c8dc</code></a> chore: bump workflow actions; configure dependabot (<a href="https://redirect.github.com/ory/dockertest/issues/424">#424</a>)</li> <li><a href="https://github.com/ory/dockertest/commit/1b74b04e7dee8be3c18f5c204770d7771fc65215"><code>1b74b04</code></a> refactor: replace deprecated ioutil with io and os (<a href="https://redirect.github.com/ory/dockertest/issues/423">#423</a>)</li> <li><a href="https://github.com/ory/dockertest/commit/87ce1b953729aff6f379bb27d4df0a46521567ae"><code>87ce1b9</code></a> ci: ignore wrongly reported CVE (<a href="https://redirect.github.com/ory/dockertest/issues/425">#425</a>)</li> <li><a href="https://github.com/ory/dockertest/commit/7bcb18d4d98ba92ec04e5baa3911bc28f98c5691"><code>7bcb18d</code></a> fix: explicitly convert s.Rdev to uint64 (<a href="https://redirect.github.com/ory/dockertest/issues/420">#420</a>)</li> <li>Additional commits viewable in <a href="https://github.com/ory/dockertest/compare/v3.9.1...v3.10.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/ory/dockertest/v3&package-manager=go_modules&previous-version=3.9.1&new-version=3.10.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-23 19:09:35 +02:00
github.com/ory/dockertest/v3 v3.10.0 h1:4K3z2VMe8Woe++invjaTB7VRyQXQy5UY+loujO4aNE4=
github.com/ory/dockertest/v3 v3.10.0/go.mod h1:nr57ZbRWMqfsdGdFNLHz5jjNdDb7VVFnzAeW1n5N1Lg=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/pelletier/go-toml v1.7.0/go.mod h1:vwGMzjaWMwyfHwgIBhI2YUM4fB6nL6lVAvS1LBMMhTE=
feat: add ko support (#3653) continuing the PR by @developer-guy - [x] should be a publisher, as it does publish the images it builds every time - [x] `Default` method does not work - [x] the `fromConfig` thing should probably be on the defaults, too - [x] wire `--skip-ko` - [x] documentation - [x] more tests - [x] use same registry as docker tests does - [ ] see if we can make the log output match goreleaser's - [ ] ?? closes #2556 closes #3490 Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com> Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> Co-authored-by: actions-user <actions@github.com> Co-authored-by: Jason Hall <jason@chainguard.dev> Co-authored-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2023-01-17 03:34:49 +02:00
github.com/pelletier/go-toml v1.9.4/go.mod h1:u1nR/EPcESfeI/szUZKdtJ0xRNbUoANCkoOuaOx1Y+c=
github.com/pelletier/go-toml v1.9.5 h1:4yBQzkHv+7BHq2PQUZF3Mx0IYxG7LsP222s7Agd3ve8=
github.com/pelletier/go-toml v1.9.5/go.mod h1:u1nR/EPcESfeI/szUZKdtJ0xRNbUoANCkoOuaOx1Y+c=
feat(deps): bump github.com/google/ko from 0.14.1 to 0.15.0 (#4373) Bumps [github.com/google/ko](https://github.com/google/ko) from 0.14.1 to 0.15.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/ko/releases">github.com/google/ko's releases</a>.</em></p> <blockquote> <h2>v0.15.0</h2> <h2>What's Changed</h2> <ul> <li>implement dumb cache for images by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1102">ko-build/ko#1102</a></li> <li>fixed typo in configuration.md by <a href="https://github.com/samlaf"><code>@​samlaf</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1105">ko-build/ko#1105</a></li> <li>pkg/commands: fix dropped errors by <a href="https://github.com/alrs"><code>@​alrs</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1109">ko-build/ko#1109</a></li> <li>ci: add govulncheck by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1110">ko-build/ko#1110</a></li> <li>chore: remove refs to deprecated io/ioutil by <a href="https://github.com/testwill"><code>@​testwill</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1092">ko-build/ko#1092</a></li> <li>Update install docs to install ko using Scoop by <a href="https://github.com/pgrunm"><code>@​pgrunm</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1118">ko-build/ko#1118</a></li> <li>include go build output in build error by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1127">ko-build/ko#1127</a></li> <li>Use go1.21, clean up ci and drop go1.19 by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1137">ko-build/ko#1137</a></li> <li>Update e2e.yaml by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1141">ko-build/ko#1141</a></li> <li>handle newfound lint errors by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1142">ko-build/ko#1142</a></li> <li>fix test broken by lint fix by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1143">ko-build/ko#1143</a></li> <li>Bump actions/checkout from 3.6.0 to 4.0.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1136">ko-build/ko#1136</a></li> <li>fix env var for go env by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1140">ko-build/ko#1140</a></li> <li>docs: add docs for TF and Lambda by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1139">ko-build/ko#1139</a></li> <li>docs: add Lambda and TF pages to sidebar by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1144">ko-build/ko#1144</a></li> <li>include example using go packages by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1145">ko-build/ko#1145</a></li> <li>fix the release workflow and install instructions by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1150">ko-build/ko#1150</a></li> <li>update missing places that was using go1.20 by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1163">ko-build/ko#1163</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/samlaf"><code>@​samlaf</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1105">ko-build/ko#1105</a></li> <li><a href="https://github.com/alrs"><code>@​alrs</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1109">ko-build/ko#1109</a></li> <li><a href="https://github.com/testwill"><code>@​testwill</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1092">ko-build/ko#1092</a></li> <li><a href="https://github.com/pgrunm"><code>@​pgrunm</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1118">ko-build/ko#1118</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/ko-build/ko/compare/v0.14.1...v0.15.0">https://github.com/ko-build/ko/compare/v0.14.1...v0.15.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ko-build/ko/commit/31035ad2026bfbafaa4f009baefe72463af1b3a7"><code>31035ad</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1164">#1164</a> from ko-build/dependabot/go_modules/golang.org/x/net...</li> <li><a href="https://github.com/ko-build/ko/commit/ba952fd091f9d27ee5c136e842b5e94dd715100c"><code>ba952fd</code></a> Bump golang.org/x/net from 0.16.0 to 0.17.0</li> <li><a href="https://github.com/ko-build/ko/commit/277f5d74353950c8663fc04b7546f66e57bd6aaf"><code>277f5d7</code></a> update missing places that was using go1.20 (<a href="https://redirect.github.com/google/ko/issues/1163">#1163</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/b8b3b21f8348d7cab863fe1b4eaa47dfc47632da"><code>b8b3b21</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1162">#1162</a> from ko-build/dependabot/go_modules/github.com/googl...</li> <li><a href="https://github.com/ko-build/ko/commit/4890ab2887b653d3c340de4d119bfd17b703f182"><code>4890ab2</code></a> Bump github.com/google/go-cmp from 0.5.9 to 0.6.0</li> <li><a href="https://github.com/ko-build/ko/commit/30b62aee3faf6866cee6513ea7eb13f5a27cd7ca"><code>30b62ae</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1161">#1161</a> from ko-build/dependabot/go_modules/github.com/spf13...</li> <li><a href="https://github.com/ko-build/ko/commit/449bcb61926cb3e3bcf191e8ca53fad5ab3a4e3c"><code>449bcb6</code></a> Bump github.com/spf13/viper from 1.16.0 to 1.17.0</li> <li><a href="https://github.com/ko-build/ko/commit/c543dd83cc75cd849fb95637ea29e3c7c66d6f87"><code>c543dd8</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1160">#1160</a> from ko-build/dependabot/go_modules/golang.org/x/too...</li> <li><a href="https://github.com/ko-build/ko/commit/c1ae5f5ce4fe058830f24827c853d4db39a95250"><code>c1ae5f5</code></a> Bump golang.org/x/tools from 0.13.0 to 0.14.0</li> <li><a href="https://github.com/ko-build/ko/commit/e50d2fd5ff0ec88ac837ffe6f6c2f122eb54b9f8"><code>e50d2fd</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1159">#1159</a> from ko-build/dependabot/go_modules/golang.org/x/syn...</li> <li>Additional commits viewable in <a href="https://github.com/google/ko/compare/v0.14.1...v0.15.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/ko&package-manager=go_modules&previous-version=0.14.1&new-version=0.15.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-17 17:47:47 +02:00
github.com/pelletier/go-toml/v2 v2.1.0 h1:FnwAJ4oYMvbT/34k9zzHuZNrhlz48GB3/s6at6/MHO4=
github.com/pelletier/go-toml/v2 v2.1.0/go.mod h1:tJU2Z3ZkXwnxa4DPO899bsyIoywizdUvyaeZurnPPDc=
feat(deps): bump github.com/goreleaser/nfpm/v2 from 2.30.1 to 2.31.0 (#4144) latest and greatest
2023-06-26 18:20:47 +02:00
github.com/pjbgf/sha1cd v0.3.0 h1:4D5XXmUUBUl/xQ6IjCkEAbqXskkq/4O7LmGn0AqMDs4=
github.com/pjbgf/sha1cd v0.3.0/go.mod h1:nZ1rrWOcGJ5uZgEEVL1VUM9iRQiZvWdbZjkKyFzPPsI=
feat(deps): bump gocloud.dev from 0.27.0 to 0.28.0 (#3689) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.27.0 to 0.28.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.28.0</h2> <p><strong>BREAKING CHANGES</strong>:</p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK.</li> <li><strong>blob/azureblob</strong>: Updated to match recent breaking changes in the Azure packages (yes, again).</li> <li><strong>pubsub/awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>blob</strong></p> <ul> <li><strong>memblob</strong>: Fixed bug where use of <code>BeforeCopy</code> callback would drop the actual copying.</li> <li><strong>azureblob</strong>: Updated to match recent breaking changes in the Azure packages.</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>all</strong>: Simplified and improved batch sizing, should resolve issues with too-frequent polling in some situations.</li> <li><strong>azurepubsub</strong>: Made <code>ListenerTimeout</code> configurable.</li> <li><strong>gcppubsub</strong> and <strong>awssnssqs</strong>: Support lazy mode for <code>Nack</code> (where no explicit <code>Nack</code> is sent).</li> <li><strong>awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>secrets</strong></p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK. Use azidentity.NewDefaultAzureCredential.</li> </ul> <p><strong>sql</strong></p> <ul> <li><strong>gcp/cloudsql</strong>: Fixed IAM login.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/24166090495b8e084a23aa7d11fcc81ec33e4729"><code>2416609</code></a> all: prep for v0.28.0 (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3207">#3207</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/13f46eb8065d5ea62b757f5f0f11a56f48faf7cc"><code>13f46eb</code></a> pubsub: simplify and improve batch sizing, especially for low message rates</li> <li><a href="https://github.com/google/go-cloud/commit/8f2c2b9a392a8e4a3d7a4942f88f3df607f8f6d0"><code>8f2c2b9</code></a> pubsub/memsub: Add Options for batching (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3205">#3205</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fe0a3d75fe43c039258df25ebf102602526e3052"><code>fe0a3d7</code></a> pubsub/awssqs: Fix BeforeSend/As to enable changes to the sqs input message (...</li> <li><a href="https://github.com/google/go-cloud/commit/dfaf95af34dd9022a69a061028e0ceec98e9c670"><code>dfaf95a</code></a> secrets/azurekeyvault: Use azidentity.NewDefaultAzureCredential to support ot...</li> <li><a href="https://github.com/google/go-cloud/commit/1e26311532928f060c490a7fbf2be92b55ee12c4"><code>1e26311</code></a> blob: Remove some debug logging (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3197">#3197</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/43ed5a499864c08b7b6549ff7085f19634a1f02c"><code>43ed5a4</code></a> pubsub/gcppubsub: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3195">#3195</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/be80e70b3dcf7a6b86481881c7ac0b44a8095178"><code>be80e70</code></a> pubsub/awssnssqs: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3194">#3194</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/7d690993a53cf8cc2e7af07872876d58601f1261"><code>7d69099</code></a> blob/azblob: Update to latest, and restore As for dirlist (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3191">#3191</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/e942f3c339f0eb617ac4dbc7f37cc4e5920ee7cc"><code>e942f3c</code></a> blob/azblob: Restore As for List entry (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3188">#3188</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.27.0...v0.28.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.27.0&new-version=0.28.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-11 14:09:51 +02:00
github.com/pkg/browser v0.0.0-20210911075715-681adbf594b8 h1:KoWmjvw+nsYOo29YJK9vDA65RGE3NrOnUtO7a+RF9HU=
github.com/pkg/browser v0.0.0-20210911075715-681adbf594b8/go.mod h1:HKlIX3XHQyzLZPlr7++PzdhaXEj94dEiJgZDTsxEqUI=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/pkg/errors v0.8.0/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
feat: add support for pushing artifacts to cloud storage provider( S3, Azure Blob, GCS) (#1036) * feat: adding support to push artifacts to AWS S3,Azure Blob and Google Cloud Storage readme for blob publisher test: add unit test for blob using testify and mockery test: add unit test for publish method fix: openbucket instance initialization remove unwanted packages: go mod tidy test: add missing unit test for publish method * doc: add missing comment for func * fix: add accidental delete file * fix : add missing Snapcrafts project * fix: unit test for Azure blob * fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue * fmt: fix linter reporeted issues fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue fmt: linter fix * test: fix typo in test error string * feat: add support to provider folder inside bucket, resolves discussed comments
2019-06-05 15:51:01 +02:00
github.com/pkg/errors v0.8.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
chore(deps): bump all Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2020-01-26 16:49:18 +02:00
github.com/pkg/errors v0.9.1 h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4=
github.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
feat(deps): bump gocloud.dev from 0.27.0 to 0.28.0 (#3689) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.27.0 to 0.28.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.28.0</h2> <p><strong>BREAKING CHANGES</strong>:</p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK.</li> <li><strong>blob/azureblob</strong>: Updated to match recent breaking changes in the Azure packages (yes, again).</li> <li><strong>pubsub/awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>blob</strong></p> <ul> <li><strong>memblob</strong>: Fixed bug where use of <code>BeforeCopy</code> callback would drop the actual copying.</li> <li><strong>azureblob</strong>: Updated to match recent breaking changes in the Azure packages.</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>all</strong>: Simplified and improved batch sizing, should resolve issues with too-frequent polling in some situations.</li> <li><strong>azurepubsub</strong>: Made <code>ListenerTimeout</code> configurable.</li> <li><strong>gcppubsub</strong> and <strong>awssnssqs</strong>: Support lazy mode for <code>Nack</code> (where no explicit <code>Nack</code> is sent).</li> <li><strong>awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>secrets</strong></p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK. Use azidentity.NewDefaultAzureCredential.</li> </ul> <p><strong>sql</strong></p> <ul> <li><strong>gcp/cloudsql</strong>: Fixed IAM login.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/24166090495b8e084a23aa7d11fcc81ec33e4729"><code>2416609</code></a> all: prep for v0.28.0 (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3207">#3207</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/13f46eb8065d5ea62b757f5f0f11a56f48faf7cc"><code>13f46eb</code></a> pubsub: simplify and improve batch sizing, especially for low message rates</li> <li><a href="https://github.com/google/go-cloud/commit/8f2c2b9a392a8e4a3d7a4942f88f3df607f8f6d0"><code>8f2c2b9</code></a> pubsub/memsub: Add Options for batching (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3205">#3205</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fe0a3d75fe43c039258df25ebf102602526e3052"><code>fe0a3d7</code></a> pubsub/awssqs: Fix BeforeSend/As to enable changes to the sqs input message (...</li> <li><a href="https://github.com/google/go-cloud/commit/dfaf95af34dd9022a69a061028e0ceec98e9c670"><code>dfaf95a</code></a> secrets/azurekeyvault: Use azidentity.NewDefaultAzureCredential to support ot...</li> <li><a href="https://github.com/google/go-cloud/commit/1e26311532928f060c490a7fbf2be92b55ee12c4"><code>1e26311</code></a> blob: Remove some debug logging (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3197">#3197</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/43ed5a499864c08b7b6549ff7085f19634a1f02c"><code>43ed5a4</code></a> pubsub/gcppubsub: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3195">#3195</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/be80e70b3dcf7a6b86481881c7ac0b44a8095178"><code>be80e70</code></a> pubsub/awssnssqs: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3194">#3194</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/7d690993a53cf8cc2e7af07872876d58601f1261"><code>7d69099</code></a> blob/azblob: Update to latest, and restore As for dirlist (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3191">#3191</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/e942f3c339f0eb617ac4dbc7f37cc4e5920ee7cc"><code>e942f3c</code></a> blob/azblob: Restore As for List entry (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3188">#3188</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.27.0...v0.28.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.27.0&new-version=0.28.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-11 14:09:51 +02:00
github.com/pkg/sftp v1.13.1/go.mod h1:3HaPG6Dq1ILlpPZRO0HVMrsydcdLt6HRDccSgb87qRg=
chore: go modules
2018-10-29 02:54:15 +02:00
github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
feat(deps): bump github.com/google/ko from 0.14.1 to 0.15.0 (#4373) Bumps [github.com/google/ko](https://github.com/google/ko) from 0.14.1 to 0.15.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/ko/releases">github.com/google/ko's releases</a>.</em></p> <blockquote> <h2>v0.15.0</h2> <h2>What's Changed</h2> <ul> <li>implement dumb cache for images by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1102">ko-build/ko#1102</a></li> <li>fixed typo in configuration.md by <a href="https://github.com/samlaf"><code>@​samlaf</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1105">ko-build/ko#1105</a></li> <li>pkg/commands: fix dropped errors by <a href="https://github.com/alrs"><code>@​alrs</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1109">ko-build/ko#1109</a></li> <li>ci: add govulncheck by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1110">ko-build/ko#1110</a></li> <li>chore: remove refs to deprecated io/ioutil by <a href="https://github.com/testwill"><code>@​testwill</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1092">ko-build/ko#1092</a></li> <li>Update install docs to install ko using Scoop by <a href="https://github.com/pgrunm"><code>@​pgrunm</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1118">ko-build/ko#1118</a></li> <li>include go build output in build error by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1127">ko-build/ko#1127</a></li> <li>Use go1.21, clean up ci and drop go1.19 by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1137">ko-build/ko#1137</a></li> <li>Update e2e.yaml by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1141">ko-build/ko#1141</a></li> <li>handle newfound lint errors by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1142">ko-build/ko#1142</a></li> <li>fix test broken by lint fix by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1143">ko-build/ko#1143</a></li> <li>Bump actions/checkout from 3.6.0 to 4.0.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1136">ko-build/ko#1136</a></li> <li>fix env var for go env by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1140">ko-build/ko#1140</a></li> <li>docs: add docs for TF and Lambda by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1139">ko-build/ko#1139</a></li> <li>docs: add Lambda and TF pages to sidebar by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1144">ko-build/ko#1144</a></li> <li>include example using go packages by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1145">ko-build/ko#1145</a></li> <li>fix the release workflow and install instructions by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1150">ko-build/ko#1150</a></li> <li>update missing places that was using go1.20 by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1163">ko-build/ko#1163</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/samlaf"><code>@​samlaf</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1105">ko-build/ko#1105</a></li> <li><a href="https://github.com/alrs"><code>@​alrs</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1109">ko-build/ko#1109</a></li> <li><a href="https://github.com/testwill"><code>@​testwill</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1092">ko-build/ko#1092</a></li> <li><a href="https://github.com/pgrunm"><code>@​pgrunm</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1118">ko-build/ko#1118</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/ko-build/ko/compare/v0.14.1...v0.15.0">https://github.com/ko-build/ko/compare/v0.14.1...v0.15.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ko-build/ko/commit/31035ad2026bfbafaa4f009baefe72463af1b3a7"><code>31035ad</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1164">#1164</a> from ko-build/dependabot/go_modules/golang.org/x/net...</li> <li><a href="https://github.com/ko-build/ko/commit/ba952fd091f9d27ee5c136e842b5e94dd715100c"><code>ba952fd</code></a> Bump golang.org/x/net from 0.16.0 to 0.17.0</li> <li><a href="https://github.com/ko-build/ko/commit/277f5d74353950c8663fc04b7546f66e57bd6aaf"><code>277f5d7</code></a> update missing places that was using go1.20 (<a href="https://redirect.github.com/google/ko/issues/1163">#1163</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/b8b3b21f8348d7cab863fe1b4eaa47dfc47632da"><code>b8b3b21</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1162">#1162</a> from ko-build/dependabot/go_modules/github.com/googl...</li> <li><a href="https://github.com/ko-build/ko/commit/4890ab2887b653d3c340de4d119bfd17b703f182"><code>4890ab2</code></a> Bump github.com/google/go-cmp from 0.5.9 to 0.6.0</li> <li><a href="https://github.com/ko-build/ko/commit/30b62aee3faf6866cee6513ea7eb13f5a27cd7ca"><code>30b62ae</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1161">#1161</a> from ko-build/dependabot/go_modules/github.com/spf13...</li> <li><a href="https://github.com/ko-build/ko/commit/449bcb61926cb3e3bcf191e8ca53fad5ab3a4e3c"><code>449bcb6</code></a> Bump github.com/spf13/viper from 1.16.0 to 1.17.0</li> <li><a href="https://github.com/ko-build/ko/commit/c543dd83cc75cd849fb95637ea29e3c7c66d6f87"><code>c543dd8</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1160">#1160</a> from ko-build/dependabot/go_modules/golang.org/x/too...</li> <li><a href="https://github.com/ko-build/ko/commit/c1ae5f5ce4fe058830f24827c853d4db39a95250"><code>c1ae5f5</code></a> Bump golang.org/x/tools from 0.13.0 to 0.14.0</li> <li><a href="https://github.com/ko-build/ko/commit/e50d2fd5ff0ec88ac837ffe6f6c2f122eb54b9f8"><code>e50d2fd</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1159">#1159</a> from ko-build/dependabot/go_modules/golang.org/x/syn...</li> <li>Additional commits viewable in <a href="https://github.com/google/ko/compare/v0.14.1...v0.15.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/ko&package-manager=go_modules&previous-version=0.14.1&new-version=0.15.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-17 17:47:47 +02:00
github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 h1:Jamvg5psRIccs7FGNTlIRMkT8wgtp5eCXdBlqhYGL6U=
github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
feat(deps): bump github.com/disgoorg/disgo from 0.15.3 to 0.16.0 (#3905)
2023-04-04 13:25:49 +02:00
github.com/prashantv/gostub v1.1.0 h1:BTyx3RfQjRHnUWaGF9oQos79AlQ5k8WNktv7VGvVH4g=
chore: go mod tidy Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-09-13 19:03:05 +02:00
github.com/prashantv/gostub v1.1.0/go.mod h1:A5zLQHz7ieHGG7is6LLXLz7I8+3LZzsrV0P1IAHhP5U=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/prometheus/client_golang v0.9.1/go.mod h1:7SWBe2y4D6OKWSNQJUaRYU/AaXPKyh/dDVn+NZz0KFw=
github.com/prometheus/client_golang v1.0.0/go.mod h1:db9x61etRT2tGnBNRi70OPL5FsnadC4Ky3P0J6CfImo=
github.com/prometheus/client_golang v1.1.0/go.mod h1:I1FGZT9+L76gKKOs5djB6ezCbFQP1xR9D75/vuwEF3g=
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419) Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.1.1 to 2.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's releases</a>.</em></p> <blockquote> <h2>v2.2.1</h2> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's changelog</a>.</em></p> <blockquote> <h1>v2.2.1</h1> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign/commit/12cbf9ea177d22bbf5cf028bcb4712b5f174ebc6"><code>12cbf9e</code></a> add changelog for v2.2.1 release (<a href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/827f24e9d4a1f8e845cb1597d02053410f5bbe2a"><code>827f24e</code></a> feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8ac891ff0e29ddc67965423bee8f826219c6eb0f"><code>8ac891f</code></a> Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li><a href="https://github.com/sigstore/cosign/commit/8b366c497bd22b9be7742d057b8f59083dcadee0"><code>8b366c4</code></a> add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/23920de5623a505921ba4e62fa97e2553eff4699"><code>23920de</code></a> chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/e022e1c13240d1ae5b3c408bc53e389154331713"><code>e022e1c</code></a> chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/28c59c5eca6386924cc8f381afe94efe1e957679"><code>28c59c5</code></a> add missing groups key (<a href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8e5bdcc0ff39b8dc1b477251fef521601df76ec0"><code>8e5bdcc</code></a> chore(deps): bump github.com/google/certificate-transparency-go (<a href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/510cac4ef54274823599082e3a57a556ccd5c9e5"><code>510cac4</code></a> chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/063902b1d78fed7c12c9d9ce06248d36963e8169"><code>063902b</code></a> chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 18:39:49 +02:00
github.com/prometheus/client_golang v1.17.0 h1:rl2sfwZMtSthVU752MqfjQozy7blglC+1SOtjMAMh+Q=
github.com/prometheus/client_golang v1.17.0/go.mod h1:VeL+gMmOAxkS2IqfCq0ZmHSL+LjWfWDUmp1mBz9JgUY=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/prometheus/client_model v0.0.0-20180712105110-5c3871d89910/go.mod h1:MbSGuTsp3dbXC40dX6PRTWyKYBIrTGTE9sqQNg2J8bo=
github.com/prometheus/client_model v0.0.0-20190129233127-fd36f4220a90/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
github.com/prometheus/client_model v0.0.0-20190812154241-14fe0d1b01d4/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419) Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.1.1 to 2.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's releases</a>.</em></p> <blockquote> <h2>v2.2.1</h2> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's changelog</a>.</em></p> <blockquote> <h1>v2.2.1</h1> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign/commit/12cbf9ea177d22bbf5cf028bcb4712b5f174ebc6"><code>12cbf9e</code></a> add changelog for v2.2.1 release (<a href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/827f24e9d4a1f8e845cb1597d02053410f5bbe2a"><code>827f24e</code></a> feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8ac891ff0e29ddc67965423bee8f826219c6eb0f"><code>8ac891f</code></a> Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li><a href="https://github.com/sigstore/cosign/commit/8b366c497bd22b9be7742d057b8f59083dcadee0"><code>8b366c4</code></a> add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/23920de5623a505921ba4e62fa97e2553eff4699"><code>23920de</code></a> chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/e022e1c13240d1ae5b3c408bc53e389154331713"><code>e022e1c</code></a> chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/28c59c5eca6386924cc8f381afe94efe1e957679"><code>28c59c5</code></a> add missing groups key (<a href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8e5bdcc0ff39b8dc1b477251fef521601df76ec0"><code>8e5bdcc</code></a> chore(deps): bump github.com/google/certificate-transparency-go (<a href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/510cac4ef54274823599082e3a57a556ccd5c9e5"><code>510cac4</code></a> chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/063902b1d78fed7c12c9d9ce06248d36963e8169"><code>063902b</code></a> chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 18:39:49 +02:00
github.com/prometheus/client_model v0.5.0 h1:VQw1hfvPvk3Uv6Qf29VrPF32JB6rtbgI6cYPYQjL0Qw=
github.com/prometheus/client_model v0.5.0/go.mod h1:dTiFglRmd66nLR9Pv9f0mZi7B7fk5Pm3gvsjB5tr+kI=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/prometheus/common v0.4.1/go.mod h1:TNfzLD0ON7rHzMJeJkieUDPYmFC7Snx/y86RQel1bk4=
github.com/prometheus/common v0.6.0/go.mod h1:eBmuwkDJBwy6iBfxCBob6t6dR6ENT/y+J+Zk0j9GMYc=
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419) Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.1.1 to 2.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's releases</a>.</em></p> <blockquote> <h2>v2.2.1</h2> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's changelog</a>.</em></p> <blockquote> <h1>v2.2.1</h1> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign/commit/12cbf9ea177d22bbf5cf028bcb4712b5f174ebc6"><code>12cbf9e</code></a> add changelog for v2.2.1 release (<a href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/827f24e9d4a1f8e845cb1597d02053410f5bbe2a"><code>827f24e</code></a> feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8ac891ff0e29ddc67965423bee8f826219c6eb0f"><code>8ac891f</code></a> Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li><a href="https://github.com/sigstore/cosign/commit/8b366c497bd22b9be7742d057b8f59083dcadee0"><code>8b366c4</code></a> add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/23920de5623a505921ba4e62fa97e2553eff4699"><code>23920de</code></a> chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/e022e1c13240d1ae5b3c408bc53e389154331713"><code>e022e1c</code></a> chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/28c59c5eca6386924cc8f381afe94efe1e957679"><code>28c59c5</code></a> add missing groups key (<a href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8e5bdcc0ff39b8dc1b477251fef521601df76ec0"><code>8e5bdcc</code></a> chore(deps): bump github.com/google/certificate-transparency-go (<a href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/510cac4ef54274823599082e3a57a556ccd5c9e5"><code>510cac4</code></a> chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/063902b1d78fed7c12c9d9ce06248d36963e8169"><code>063902b</code></a> chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 18:39:49 +02:00
github.com/prometheus/common v0.45.0 h1:2BGz0eBc2hdMDLnO/8n0jeB3oPrt2D08CekT0lneoxM=
github.com/prometheus/common v0.45.0/go.mod h1:YJmSTw9BoKxJplESWWxlbyttQR4uaEcGyv9MZjVOJsY=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/prometheus/procfs v0.0.0-20181005140218-185b4288413d/go.mod h1:c3At6R/oaqEKCNdg8wHV1ftS6bRYblBhIjjI8uT2IGk=
github.com/prometheus/procfs v0.0.2/go.mod h1:TjEm7ze935MbeOT/UhFTIMYKhuLP4wbCsTZCD3I8kEA=
github.com/prometheus/procfs v0.0.3/go.mod h1:4A/X28fw3Fc593LaREMrKMqOKvUAntwMDaekg4FpcdQ=
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419) Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.1.1 to 2.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's releases</a>.</em></p> <blockquote> <h2>v2.2.1</h2> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's changelog</a>.</em></p> <blockquote> <h1>v2.2.1</h1> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign/commit/12cbf9ea177d22bbf5cf028bcb4712b5f174ebc6"><code>12cbf9e</code></a> add changelog for v2.2.1 release (<a href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/827f24e9d4a1f8e845cb1597d02053410f5bbe2a"><code>827f24e</code></a> feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8ac891ff0e29ddc67965423bee8f826219c6eb0f"><code>8ac891f</code></a> Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li><a href="https://github.com/sigstore/cosign/commit/8b366c497bd22b9be7742d057b8f59083dcadee0"><code>8b366c4</code></a> add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/23920de5623a505921ba4e62fa97e2553eff4699"><code>23920de</code></a> chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/e022e1c13240d1ae5b3c408bc53e389154331713"><code>e022e1c</code></a> chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/28c59c5eca6386924cc8f381afe94efe1e957679"><code>28c59c5</code></a> add missing groups key (<a href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8e5bdcc0ff39b8dc1b477251fef521601df76ec0"><code>8e5bdcc</code></a> chore(deps): bump github.com/google/certificate-transparency-go (<a href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/510cac4ef54274823599082e3a57a556ccd5c9e5"><code>510cac4</code></a> chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/063902b1d78fed7c12c9d9ce06248d36963e8169"><code>063902b</code></a> chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 18:39:49 +02:00
github.com/prometheus/procfs v0.12.0 h1:jluTpSng7V9hY0O2R9DzzJHYb2xULk9VTR1V1R/k6Bo=
github.com/prometheus/procfs v0.12.0/go.mod h1:pcuDEFsWDnvcgNzo4EEweacyhjeA9Zk3cnaOZAZEfOo=
feat: replacing the log library (#3139) * feat: replacing logs Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> * fix: tests et al Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> * feat: update termenv/lipgloss Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> * wip: output Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> * fix: pin dep Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> * fix: update Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> * fix: tests Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> * fix: tests Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> * fix: deps Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> * fix: dep Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-06-22 02:11:15 +02:00
github.com/rivo/uniseg v0.1.0/go.mod h1:J6wj4VEh+S6ZtnVlnTBMWIodfgj8LQOQFoIToxlJtxc=
github.com/rivo/uniseg v0.2.0/go.mod h1:J6wj4VEh+S6ZtnVlnTBMWIodfgj8LQOQFoIToxlJtxc=
fix: race condition on logs This brings an update on caarlos0/log, precisely due to https://github.com/caarlos0/log/commit/452cd19227f733ea694ccce724390ac992ecc207, which fixes the bug reported at #3363. Closes #3363
2022-09-12 04:06:01 +02:00
github.com/rivo/uniseg v0.4.2 h1:YwD0ulJSJytLpiaWua0sBDusfsCZohxjxzVTYjwxfV8=
github.com/rivo/uniseg v0.4.2/go.mod h1:FN3SvrM+Zdj16jyLfmOkMNblXMcoc8DfTHruCPUcx88=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/rogpeppe/go-internal v1.1.0/go.mod h1:M8bDsm7K2OlrFYOpmOWEs/qY81heoFRclV5y23lUDJ4=
github.com/rogpeppe/go-internal v1.2.2/go.mod h1:M8bDsm7K2OlrFYOpmOWEs/qY81heoFRclV5y23lUDJ4=
feat: Use tools.go paradigm for external dependencies (#1495) Co-authored-by: CrazyMax <crazy-max@users.noreply.github.com>
2020-05-10 21:34:55 +02:00
github.com/rogpeppe/go-internal v1.3.0/go.mod h1:M8bDsm7K2OlrFYOpmOWEs/qY81heoFRclV5y23lUDJ4=
sec(deps): bump github.com/go-git/go-git/v5 from 5.7.0 to 5.11.0 (#4505) Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.7.0 to 5.11.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/go-git/go-git/releases">github.com/go-git/go-git/v5's releases</a>.</em></p> <blockquote> <h2>v5.11.0</h2> <h2>What's Changed</h2> <ul> <li>git: validate reference names (<a href="https://redirect.github.com/go-git/go-git/issues/929">#929</a>) by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/950">go-git/go-git#950</a></li> <li>git: stop iterating at oldest shallow when pulling. Fixes <a href="https://redirect.github.com/go-git/go-git/issues/305">#305</a> by <a href="https://github.com/dhoizner"><code>@​dhoizner</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/939">go-git/go-git#939</a></li> <li>plumbing: object, enable renames in getFileStatsFromFilePatches by <a href="https://github.com/djmoch"><code>@​djmoch</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/941">go-git/go-git#941</a></li> <li>storage: filesystem, Add option to set a specific FS for alternates by <a href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/953">go-git/go-git#953</a></li> <li>Align worktree validation with upstream and remove build warnings by <a href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/958">go-git/go-git#958</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/dhoizner"><code>@​dhoizner</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/939">go-git/go-git#939</a></li> <li><a href="https://github.com/djmoch"><code>@​djmoch</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/941">go-git/go-git#941</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/go-git/go-git/compare/v5.10.1...v5.11.0">https://github.com/go-git/go-git/compare/v5.10.1...v5.11.0</a></p> <h2>v5.10.1</h2> <h2>What's Changed</h2> <ul> <li>Worktree, ignore ModeSocket files by <a href="https://github.com/steiler"><code>@​steiler</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/930">go-git/go-git#930</a></li> <li>git: add tracer package by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/916">go-git/go-git#916</a></li> <li>remote: Flip clause for fast-forward only check by <a href="https://github.com/adityasaky"><code>@​adityasaky</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/875">go-git/go-git#875</a></li> <li>plumbing: transport/ssh, Fix nil pointer dereference caused when an unreachable proxy server is set. Fixes <a href="https://redirect.github.com/go-git/go-git/issues/900">#900</a> by <a href="https://github.com/anandf"><code>@​anandf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/901">go-git/go-git#901</a></li> <li>plumbing: uppload-server-info, implement upload-server-info by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/896">go-git/go-git#896</a></li> <li>plumbing: optimise memory consumption for filesystem storage by <a href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/799">go-git/go-git#799</a></li> <li>plumbing: format/packfile, Refactor patch delta by <a href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/908">go-git/go-git#908</a></li> <li>plumbing: fix empty uploadpack request error by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/932">go-git/go-git#932</a></li> <li>plumbing: transport/git, Improve tests error message by <a href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/752">go-git/go-git#752</a></li> <li>plumbing: format/pktline, Respect pktline error-line errors by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/936">go-git/go-git#936</a></li> <li>utils: remove ioutil.Pipe and use std library io.Pipe by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/922">go-git/go-git#922</a></li> <li>utils: move trace to utils by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/931">go-git/go-git#931</a></li> <li>cli: separate go module for cli by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/914">go-git/go-git#914</a></li> <li>build: bump github.com/google/go-cmp from 0.5.9 to 0.6.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/887">go-git/go-git#887</a></li> <li>build: bump actions/setup-go from 3 to 4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/891">go-git/go-git#891</a></li> <li>build: bump github.com/skeema/knownhosts from 1.2.0 to 1.2.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/888">go-git/go-git#888</a></li> <li>build: bump actions/checkout from 3 to 4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/890">go-git/go-git#890</a></li> <li>build: bump golang.org/x/sys from 0.13.0 to 0.14.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/907">go-git/go-git#907</a></li> <li>build: bump golang.org/x/text from 0.13.0 to 0.14.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/906">go-git/go-git#906</a></li> <li>build: bump golang.org/x/crypto from 0.14.0 to 0.15.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/917">go-git/go-git#917</a></li> <li>build: bump golang.org/x/net from 0.17.0 to 0.18.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/918">go-git/go-git#918</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/anandf"><code>@​anandf</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/901">go-git/go-git#901</a></li> <li><a href="https://github.com/steiler"><code>@​steiler</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/930">go-git/go-git#930</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/go-git/go-git/compare/v5.10.0...v5.10.1">https://github.com/go-git/go-git/compare/v5.10.0...v5.10.1</a></p> <h2>v5.10.0</h2> <h2>What's Changed</h2> <ul> <li>PlainInitOptions.Bare and allow using InitOptions with PlainInitWithOptions by <a href="https://github.com/ThinkChaos"><code>@​ThinkChaos</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/782">go-git/go-git#782</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/go-git/go-git/commit/5d08d3bd94c65a3b6c25c6fba6907d12b0dac4ca"><code>5d08d3b</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/958">#958</a> from pjbgf/workval</li> <li><a href="https://github.com/go-git/go-git/commit/5bd1d8f4abcfbf1345a1e5a5ec9a96121f3746dc"><code>5bd1d8f</code></a> build: Ensure checkout is the first operation</li> <li><a href="https://github.com/go-git/go-git/commit/b2c19824771bbcbb21abb51abb319c1a610aa6b3"><code>b2c1982</code></a> git: worktree, Align validation with upstream rules</li> <li><a href="https://github.com/go-git/go-git/commit/cec7da63ca0412fce55a0bf0715b7ba44a41eaa2"><code>cec7da6</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/953">#953</a> from pjbgf/alternates</li> <li><a href="https://github.com/go-git/go-git/commit/8b47ceb1aa854f3c3bfa1c347157a04324fcd51e"><code>8b47ceb</code></a> storage: filesystem, Add option to set a specific FS for alternates</li> <li><a href="https://github.com/go-git/go-git/commit/4f614891047bae5d0f7a253f014175505b9821d7"><code>4f61489</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/941">#941</a> from djmoch/filestats-rename</li> <li><a href="https://github.com/go-git/go-git/commit/ae552ce0bf32cddb689727c4c9fa6bf4d3bd6499"><code>ae552ce</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/939">#939</a> from dhoizner/fix-pull-after-shallow</li> <li><a href="https://github.com/go-git/go-git/commit/cc1895b905ebadb09504d88444ff05932fa6e928"><code>cc1895b</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/950">#950</a> from aymanbagabas/validate-ref</li> <li><a href="https://github.com/go-git/go-git/commit/de1d5a5978b9599ca3dacd58bbf699e4bb4cf6bd"><code>de1d5a5</code></a> git: validate reference names</li> <li><a href="https://github.com/go-git/go-git/commit/d87110b492c94d99ebdaea732b23a54b7efba94b"><code>d87110b</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/948">#948</a> from go-git/dependabot/go_modules/cli/go-git/github.c...</li> <li>Additional commits viewable in <a href="https://github.com/go-git/go-git/compare/v5.7.0...v5.11.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/go-git/go-git/v5&package-manager=go_modules&previous-version=5.7.0&new-version=5.11.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-28 14:46:28 +02:00
github.com/rogpeppe/go-internal v1.11.0 h1:cWPaGQEPrBb5/AsnsZesgZZ9yb1OQ+GOISoDNXVBh4M=
github.com/rogpeppe/go-internal v1.11.0/go.mod h1:ddIwULY96R17DhadqLgMfk9H9tvdUzkipdSkR5nkCZA=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/russross/blackfriday/v2 v2.0.1/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=
feat: update nfpm (#2640) * feat: update nfpm * feat: update nfpm * feat: update nfpm * feat: update nfpm * fix: dir type * docs: dir * docs: typo * fix: race * fix: race cond
2021-11-14 03:23:11 +02:00
github.com/russross/blackfriday/v2 v2.1.0 h1:JIOH55/0cWyOuilr9/qlrm0BSXldqnqwMsf35Ld67mk=
github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=
feat(deps): bump github.com/google/ko from 0.14.1 to 0.15.0 (#4373) Bumps [github.com/google/ko](https://github.com/google/ko) from 0.14.1 to 0.15.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/ko/releases">github.com/google/ko's releases</a>.</em></p> <blockquote> <h2>v0.15.0</h2> <h2>What's Changed</h2> <ul> <li>implement dumb cache for images by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1102">ko-build/ko#1102</a></li> <li>fixed typo in configuration.md by <a href="https://github.com/samlaf"><code>@​samlaf</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1105">ko-build/ko#1105</a></li> <li>pkg/commands: fix dropped errors by <a href="https://github.com/alrs"><code>@​alrs</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1109">ko-build/ko#1109</a></li> <li>ci: add govulncheck by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1110">ko-build/ko#1110</a></li> <li>chore: remove refs to deprecated io/ioutil by <a href="https://github.com/testwill"><code>@​testwill</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1092">ko-build/ko#1092</a></li> <li>Update install docs to install ko using Scoop by <a href="https://github.com/pgrunm"><code>@​pgrunm</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1118">ko-build/ko#1118</a></li> <li>include go build output in build error by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1127">ko-build/ko#1127</a></li> <li>Use go1.21, clean up ci and drop go1.19 by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1137">ko-build/ko#1137</a></li> <li>Update e2e.yaml by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1141">ko-build/ko#1141</a></li> <li>handle newfound lint errors by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1142">ko-build/ko#1142</a></li> <li>fix test broken by lint fix by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1143">ko-build/ko#1143</a></li> <li>Bump actions/checkout from 3.6.0 to 4.0.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1136">ko-build/ko#1136</a></li> <li>fix env var for go env by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1140">ko-build/ko#1140</a></li> <li>docs: add docs for TF and Lambda by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1139">ko-build/ko#1139</a></li> <li>docs: add Lambda and TF pages to sidebar by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1144">ko-build/ko#1144</a></li> <li>include example using go packages by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1145">ko-build/ko#1145</a></li> <li>fix the release workflow and install instructions by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1150">ko-build/ko#1150</a></li> <li>update missing places that was using go1.20 by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1163">ko-build/ko#1163</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/samlaf"><code>@​samlaf</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1105">ko-build/ko#1105</a></li> <li><a href="https://github.com/alrs"><code>@​alrs</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1109">ko-build/ko#1109</a></li> <li><a href="https://github.com/testwill"><code>@​testwill</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1092">ko-build/ko#1092</a></li> <li><a href="https://github.com/pgrunm"><code>@​pgrunm</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1118">ko-build/ko#1118</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/ko-build/ko/compare/v0.14.1...v0.15.0">https://github.com/ko-build/ko/compare/v0.14.1...v0.15.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ko-build/ko/commit/31035ad2026bfbafaa4f009baefe72463af1b3a7"><code>31035ad</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1164">#1164</a> from ko-build/dependabot/go_modules/golang.org/x/net...</li> <li><a href="https://github.com/ko-build/ko/commit/ba952fd091f9d27ee5c136e842b5e94dd715100c"><code>ba952fd</code></a> Bump golang.org/x/net from 0.16.0 to 0.17.0</li> <li><a href="https://github.com/ko-build/ko/commit/277f5d74353950c8663fc04b7546f66e57bd6aaf"><code>277f5d7</code></a> update missing places that was using go1.20 (<a href="https://redirect.github.com/google/ko/issues/1163">#1163</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/b8b3b21f8348d7cab863fe1b4eaa47dfc47632da"><code>b8b3b21</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1162">#1162</a> from ko-build/dependabot/go_modules/github.com/googl...</li> <li><a href="https://github.com/ko-build/ko/commit/4890ab2887b653d3c340de4d119bfd17b703f182"><code>4890ab2</code></a> Bump github.com/google/go-cmp from 0.5.9 to 0.6.0</li> <li><a href="https://github.com/ko-build/ko/commit/30b62aee3faf6866cee6513ea7eb13f5a27cd7ca"><code>30b62ae</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1161">#1161</a> from ko-build/dependabot/go_modules/github.com/spf13...</li> <li><a href="https://github.com/ko-build/ko/commit/449bcb61926cb3e3bcf191e8ca53fad5ab3a4e3c"><code>449bcb6</code></a> Bump github.com/spf13/viper from 1.16.0 to 1.17.0</li> <li><a href="https://github.com/ko-build/ko/commit/c543dd83cc75cd849fb95637ea29e3c7c66d6f87"><code>c543dd8</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1160">#1160</a> from ko-build/dependabot/go_modules/golang.org/x/too...</li> <li><a href="https://github.com/ko-build/ko/commit/c1ae5f5ce4fe058830f24827c853d4db39a95250"><code>c1ae5f5</code></a> Bump golang.org/x/tools from 0.13.0 to 0.14.0</li> <li><a href="https://github.com/ko-build/ko/commit/e50d2fd5ff0ec88ac837ffe6f6c2f122eb54b9f8"><code>e50d2fd</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1159">#1159</a> from ko-build/dependabot/go_modules/golang.org/x/syn...</li> <li>Additional commits viewable in <a href="https://github.com/google/ko/compare/v0.14.1...v0.15.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/ko&package-manager=go_modules&previous-version=0.14.1&new-version=0.15.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-17 17:47:47 +02:00
github.com/sagikazarmark/locafero v0.3.0 h1:zT7VEGWC2DTflmccN/5T1etyKvxSxpHsjb9cJvm4SvQ=
github.com/sagikazarmark/locafero v0.3.0/go.mod h1:w+v7UsPNFwzF1cHuOajOOzoq4U7v/ig1mpRjqV+Bu1U=
github.com/sagikazarmark/slog-shim v0.1.0 h1:diDBnUNK9N/354PgrxMywXnAwEr1QZcOr6gto+ugjYE=
github.com/sagikazarmark/slog-shim v0.1.0/go.mod h1:SrcSrq8aKtyuqEI1uvTDTK1arOWRIczQRv+GVI1AkeQ=
feat(deps): bump github.com/opencontainers/runc from 1.1.2 to 1.1.5 (#3896) Bumps [github.com/opencontainers/runc](https://github.com/opencontainers/runc) from 1.1.2 to 1.1.5. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/opencontainers/runc/releases">github.com/opencontainers/runc's releases</a>.</em></p> <blockquote> <h2>runc 1.1.5 -- &quot;囚われた屈辱は　反撃の嚆矢だ&quot;</h2> <p>This is the fifth patch release in the 1.1.z series of runc, which fixes three CVEs found in runc.</p> <ul> <li> <p>CVE-2023-25809 is a vulnerability involving rootless containers where (under specific configurations), the container would have write access to the /sys/fs/cgroup/user.slice/... cgroup hierarchy. No other hierarchies on the host were affected. This vulnerability was discovered by Akihiro Suda. <a href="https://github.com/opencontainers/runc/security/advisories/GHSA-m8cg-xc2p-r3fc">https://github.com/opencontainers/runc/security/advisories/GHSA-m8cg-xc2p-r3fc</a></p> </li> <li> <p>CVE-2023-27561 was a regression which effectively re-introduced CVE-2019-19921. This bug was present from v1.0.0-rc95 to v1.1.4. This regression was discovered by <a href="https://github.com/Beuc"><code>@​Beuc</code></a>. <a href="https://github.com/advisories/GHSA-vpvm-3wq2-2wvm">https://github.com/advisories/GHSA-vpvm-3wq2-2wvm</a></p> </li> <li> <p>CVE-2023-28642 is a variant of CVE-2023-27561 and was fixed by the same patch. This variant of the above vulnerability was reported by Lei Wang. <a href="https://github.com/opencontainers/runc/security/advisories/GHSA-g2j6-57v7-gm8c">https://github.com/opencontainers/runc/security/advisories/GHSA-g2j6-57v7-gm8c</a></p> </li> </ul> <p>In addition, the following other fixes are included in this release:</p> <ul> <li>Fix the inability to use <code>/dev/null</code> when inside a container. (<a href="https://redirect.github.com/opencontainers/runc/issues/3620">#3620</a>)</li> <li>Fix changing the ownership of host's <code>/dev/null</code> caused by fd redirection (a regression in 1.1.1). (<a href="https://redirect.github.com/opencontainers/runc/issues/3674">#3674</a>, <a href="https://redirect.github.com/opencontainers/runc/issues/3731">#3731</a>)</li> <li>Fix rare runc exec/enter unshare error on older kernels, including CentOS &lt; 7.7. (<a href="https://redirect.github.com/opencontainers/runc/issues/3776">#3776</a>)</li> <li>nsexec: Check for errors in <code>write_log()</code>. (<a href="https://redirect.github.com/opencontainers/runc/issues/3721">#3721</a>)</li> </ul> <h3>Static Linking Notices</h3> <p>The <code>runc</code> binary distributed with this release are <em>statically linked</em> with the following <a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html">GNU LGPL-2.1</a> licensed libraries, with <code>runc</code> acting as a &quot;work that uses the Library&quot;:</p> <ul> <li><a href="https://github.com/seccomp/libseccomp">libseccomp</a></li> </ul> <p>The versions of these libraries were not modified from their upstream versions, but in order to comply with the LGPL-2.1 (§6(a)), we have attached the complete source code for those libraries which (when combined with the attached runc source code) may be used to exercise your rights under the LGPL-2.1.</p> <p>However we strongly suggest that you make use of your distribution's packages or download them from the authoritative upstream sources, especially since these libraries are related to the security of your containers.</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/opencontainers/runc/blob/v1.1.5/CHANGELOG.md">github.com/opencontainers/runc's changelog</a>.</em></p> <blockquote> <h2>[1.1.5] - 2023-03-29</h2> <blockquote> <p>囚われた屈辱は 反撃の嚆矢だ</p> </blockquote> <h3>Fixed</h3> <ul> <li>Prohibit container's <code>/proc</code> and <code>/sys</code> to be symlinks (CVE-2019-19921, CVE-2023-27561, CVE-2023-28642, <a href="https://redirect.github.com/opencontainers/runc/issues/3785">#3785</a>)</li> <li>rootless: rework /sys/fs/cgroup mounts to avoid exposing the host's cgroup hierarchy into the container. (CVE-2023-25809)</li> <li>Fix the inability to use <code>/dev/null</code> when inside a container. (<a href="https://redirect.github.com/opencontainers/runc/issues/3620">#3620</a>)</li> <li>Fix changing the ownership of host's <code>/dev/null</code> caused by fd redirection (a regression in 1.1.1). (<a href="https://redirect.github.com/opencontainers/runc/issues/3674">#3674</a>, <a href="https://redirect.github.com/opencontainers/runc/issues/3731">#3731</a>)</li> <li>Fix rare runc exec/enter unshare error on older kernels, inlcuding CentOS &lt; 7.7. (<a href="https://redirect.github.com/opencontainers/runc/issues/3776">#3776</a>)</li> <li>nsexec: Check for errors in <code>write_log()</code>. (<a href="https://redirect.github.com/opencontainers/runc/issues/3721">#3721</a>)</li> <li>Various CI fixes and updates. (<a href="https://redirect.github.com/opencontainers/runc/issues/3618">#3618</a>, <a href="https://redirect.github.com/opencontainers/runc/issues/3630">#3630</a>, <a href="https://redirect.github.com/opencontainers/runc/issues/3640">#3640</a>, <a href="https://redirect.github.com/opencontainers/runc/issues/3729">#3729</a>)</li> </ul> <h2>[1.1.4] - 2022-08-24</h2> <blockquote> <p>If you look for perfection, you'll never be content.</p> </blockquote> <h3>Fixed</h3> <ul> <li>Fix mounting via wrong proc fd. When the user and mount namespaces are used, and the bind mount is followed by the cgroup mount in the spec, the cgroup was mounted using the bind mount's mount fd. (<a href="https://redirect.github.com/opencontainers/runc/issues/3511">#3511</a>)</li> <li>Switch <code>kill()</code> in <code>libcontainer/nsenter</code> to <code>sane_kill()</code>. (<a href="https://redirect.github.com/opencontainers/runc/issues/3536">#3536</a>)</li> <li>Fix &quot;permission denied&quot; error from <code>runc run</code> on <code>noexec</code> fs. (<a href="https://redirect.github.com/opencontainers/runc/issues/3541">#3541</a>)</li> <li>Fix failed exec after <code>systemctl daemon-reload</code>. Due to a regression in v1.1.3, the <code>DeviceAllow=char-pts rwm</code> rule was no longer added and was causing an error <code>open /dev/pts/0: operation not permitted: unknown</code> when systemd was reloaded. (<a href="https://redirect.github.com/opencontainers/runc/issues/3554">#3554</a>)</li> <li>Various CI fixes. (<a href="https://redirect.github.com/opencontainers/runc/issues/3538">#3538</a>, <a href="https://redirect.github.com/opencontainers/runc/issues/3558">#3558</a>, <a href="https://redirect.github.com/opencontainers/runc/issues/3562">#3562</a>)</li> </ul> <h2>[1.1.3] - 2022-06-09</h2> <blockquote> <p>In the beginning there was nothing, which exploded.</p> </blockquote> <h3>Fixed</h3> <ul> <li>Our seccomp <code>-ENOSYS</code> stub now correctly handles multiplexed syscalls on s390 and s390x. This solves the issue where syscalls the host kernel did not support would return <code>-EPERM</code> despite the existence of the <code>-ENOSYS</code> stub code (this was due to how s390x does syscall multiplexing). (<a href="https://redirect.github.com/opencontainers/runc/issues/3478">#3478</a>)</li> <li>Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as intended; this fix does not affect runc binary itself but is important for libcontainer users such as Kubernetes. (<a href="https://redirect.github.com/opencontainers/runc/issues/3476">#3476</a>)</li> <li>Inability to compile with recent clang due to an issue with duplicate</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/opencontainers/runc/commit/f19387a6bec4944c770f7668ab51c4348d9c2f38"><code>f19387a</code></a> VERSION: release v1.1.5</li> <li><a href="https://github.com/opencontainers/runc/commit/58a9abee210c5a72ab10904f96e0026f684f24e3"><code>58a9abe</code></a> Merge pull request from GHSA-m8cg-xc2p-r3fc</li> <li><a href="https://github.com/opencontainers/runc/commit/27fb72c7ffdbd509b3c15b2bdb4df3d2192bfe7b"><code>27fb72c</code></a> merge branch 'pr-3776' into release-1.1</li> <li><a href="https://github.com/opencontainers/runc/commit/8ec02ea1b14edac85a6e9a2b622ae44e15e11ccd"><code>8ec02ea</code></a> nsexec: retry unshare on EINVAL</li> <li><a href="https://github.com/opencontainers/runc/commit/059d7730fc102052c90fea52c7b3c6f04fbbc487"><code>059d773</code></a> merge branch 'pr-3785' into release-1.1</li> <li><a href="https://github.com/opencontainers/runc/commit/0abab45c9b97c113ff2cdc16f3a7388444c3fbec"><code>0abab45</code></a> Prohibit /proc and /sys to be symlinks</li> <li><a href="https://github.com/opencontainers/runc/commit/0e6b818a2b0d24fdb6697614e5c5f115bbe8e3a5"><code>0e6b818</code></a> rootless: fix /sys/fs/cgroup mounts</li> <li><a href="https://github.com/opencontainers/runc/commit/c6781d100a73d2dcef84e9376d85fff02235a2ed"><code>c6781d1</code></a> Merge pull request <a href="https://redirect.github.com/opencontainers/runc/issues/3721">#3721</a> from kinvolk/rata/nsfixes-backport</li> <li><a href="https://github.com/opencontainers/runc/commit/f6e2cd3baf661e1f377088e13084ccb5aadf41e6"><code>f6e2cd3</code></a> nsexec: Check for errors in write_log()</li> <li><a href="https://github.com/opencontainers/runc/commit/3775df9fcb7828594114866e1df346f44d22ad16"><code>3775df9</code></a> Merge pull request <a href="https://redirect.github.com/opencontainers/runc/issues/3731">#3731</a> from kolyshkin/1.1-fix-dev-null</li> <li>Additional commits viewable in <a href="https://github.com/opencontainers/runc/compare/v1.1.2...v1.1.5">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/opencontainers/runc&package-manager=go_modules&previous-version=1.1.2&new-version=1.1.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-29 19:37:12 +02:00
github.com/seccomp/libseccomp-golang v0.9.2-0.20220502022130-f33da4d89646/go.mod h1:JA8cRccbGaA1s33RQf7Y1+q9gHmZX1yB/z9WDN1C6fg=
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419) Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.1.1 to 2.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's releases</a>.</em></p> <blockquote> <h2>v2.2.1</h2> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's changelog</a>.</em></p> <blockquote> <h1>v2.2.1</h1> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign/commit/12cbf9ea177d22bbf5cf028bcb4712b5f174ebc6"><code>12cbf9e</code></a> add changelog for v2.2.1 release (<a href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/827f24e9d4a1f8e845cb1597d02053410f5bbe2a"><code>827f24e</code></a> feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8ac891ff0e29ddc67965423bee8f826219c6eb0f"><code>8ac891f</code></a> Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li><a href="https://github.com/sigstore/cosign/commit/8b366c497bd22b9be7742d057b8f59083dcadee0"><code>8b366c4</code></a> add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/23920de5623a505921ba4e62fa97e2553eff4699"><code>23920de</code></a> chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/e022e1c13240d1ae5b3c408bc53e389154331713"><code>e022e1c</code></a> chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/28c59c5eca6386924cc8f381afe94efe1e957679"><code>28c59c5</code></a> add missing groups key (<a href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8e5bdcc0ff39b8dc1b477251fef521601df76ec0"><code>8e5bdcc</code></a> chore(deps): bump github.com/google/certificate-transparency-go (<a href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/510cac4ef54274823599082e3a57a556ccd5c9e5"><code>510cac4</code></a> chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/063902b1d78fed7c12c9d9ce06248d36963e8169"><code>063902b</code></a> chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 18:39:49 +02:00
github.com/secure-systems-lab/go-securesystemslib v0.7.0 h1:OwvJ5jQf9LnIAS83waAjPbcMsODrTQUpJ02eNLUoxBg=
github.com/secure-systems-lab/go-securesystemslib v0.7.0/go.mod h1:/2gYnlnHVQ6xeGtfIqFy7Do03K4cdCY0A/GlJLDKLHI=
chore(deps): bump github.com/goreleaser/nfpm/v2 from 2.3.1 to 2.4.0 (#2170) Bumps [github.com/goreleaser/nfpm/v2](https://github.com/goreleaser/nfpm) from 2.3.1 to 2.4.0. - [Release notes](https://github.com/goreleaser/nfpm/releases) - [Changelog](https://github.com/goreleaser/nfpm/blob/master/.goreleaser.yml) - [Commits](https://github.com/goreleaser/nfpm/compare/v2.3.1...v2.4.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-04-16 14:50:21 +02:00
github.com/sergi/go-diff v1.2.0 h1:XU+rvMAioB0UC3q1MFrIQy4Vo5/4VsRDQQXHsEya6xQ=
github.com/sergi/go-diff v1.2.0/go.mod h1:STckp+ISIX8hZLjrqAeVduY0gWCT9IjLuqbuNXdaHfM=
feat(deps): bump github.com/goreleaser/nfpm/v2 from 2.30.1 to 2.31.0 (#4144) latest and greatest
2023-06-26 18:20:47 +02:00
github.com/shopspring/decimal v1.2.0 h1:abSATXmQEYyShuxI4/vyW3tV1MrKAJzCZ/0zLUXYbsQ=
feat(deps): bump gocloud.dev from 0.24.0 to 0.26.0 (#3287) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.24.0 to 0.26.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.24.0...v0.26.0) --- updated-dependencies: - dependency-name: gocloud.dev dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-04 20:44:54 +02:00
github.com/shopspring/decimal v1.2.0/go.mod h1:DKyhrW/HYNuLGql+MJL6WCR6knT2jwCFRcu2hWCYk4o=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/shurcooL/sanitized_anchor_name v1.0.0/go.mod h1:1NzhyTcUVG4SuEtjjoZeVRXNmyL/1OwPU0+IJeTBvfc=
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419) Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.1.1 to 2.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's releases</a>.</em></p> <blockquote> <h2>v2.2.1</h2> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's changelog</a>.</em></p> <blockquote> <h1>v2.2.1</h1> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign/commit/12cbf9ea177d22bbf5cf028bcb4712b5f174ebc6"><code>12cbf9e</code></a> add changelog for v2.2.1 release (<a href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/827f24e9d4a1f8e845cb1597d02053410f5bbe2a"><code>827f24e</code></a> feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8ac891ff0e29ddc67965423bee8f826219c6eb0f"><code>8ac891f</code></a> Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li><a href="https://github.com/sigstore/cosign/commit/8b366c497bd22b9be7742d057b8f59083dcadee0"><code>8b366c4</code></a> add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/23920de5623a505921ba4e62fa97e2553eff4699"><code>23920de</code></a> chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/e022e1c13240d1ae5b3c408bc53e389154331713"><code>e022e1c</code></a> chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/28c59c5eca6386924cc8f381afe94efe1e957679"><code>28c59c5</code></a> add missing groups key (<a href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8e5bdcc0ff39b8dc1b477251fef521601df76ec0"><code>8e5bdcc</code></a> chore(deps): bump github.com/google/certificate-transparency-go (<a href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/510cac4ef54274823599082e3a57a556ccd5c9e5"><code>510cac4</code></a> chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/063902b1d78fed7c12c9d9ce06248d36963e8169"><code>063902b</code></a> chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 18:39:49 +02:00
github.com/sigstore/cosign/v2 v2.2.1 h1:HauwPOMYYaVdQsnvUbF0P+ZsVPrkTB0G7Eq65+z1bQc=
github.com/sigstore/cosign/v2 v2.2.1/go.mod h1:4l1hELKWoFYzZ/p7+umrK6dhdBoBW0JbQRCIjOZIM9g=
github.com/sigstore/rekor v1.3.3 h1:pLZ0UjutL7SUdeiysmJCabnRqvI7DsIxnJj8c/+e0Fk=
github.com/sigstore/rekor v1.3.3/go.mod h1:GO3udo2Xiu3/Uz4/U3vgjVq7w5Yq7eSpAFP1z7gE+yA=
github.com/sigstore/sigstore v1.7.5 h1:ij55dBhLwjICmLTBJZm7SqoQLdsu/oowDanACcJNs48=
github.com/sigstore/sigstore v1.7.5/go.mod h1:9OCmYWhzuq/G4e1cy9m297tuMRJ1LExyrXY3ZC3Zt/s=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/sirupsen/logrus v1.2.0/go.mod h1:LxeOpSwHxABJmUn/MG1IvRgCAasNZTLOkJPxbbu5VWo=
github.com/sirupsen/logrus v1.4.0/go.mod h1:LxeOpSwHxABJmUn/MG1IvRgCAasNZTLOkJPxbbu5VWo=
feat: update nfpm Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2020-11-10 23:30:20 +02:00
github.com/sirupsen/logrus v1.4.1/go.mod h1:ni0Sbl8bgC9z8RoU9G6nDWqqs/fq4eDPysMBDgk/93Q=
feat(deps): bump gocloud.dev from 0.24.0 to 0.26.0 (#3287) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.24.0 to 0.26.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.24.0...v0.26.0) --- updated-dependencies: - dependency-name: gocloud.dev dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-04 20:44:54 +02:00
github.com/sirupsen/logrus v1.4.2/go.mod h1:tLMulIdttU9McNUspp0xgXVQah82FyeX6MwdIuYE2rE=
feat: update nfpm (#2640) * feat: update nfpm * feat: update nfpm * feat: update nfpm * feat: update nfpm * fix: dir type * docs: dir * docs: typo * fix: race * fix: race cond
2021-11-14 03:23:11 +02:00
github.com/sirupsen/logrus v1.7.0/go.mod h1:yWOB1SBYBC5VeMP7gHvWumXLIWorT60ONWic61uBYv0=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/sirupsen/logrus v1.8.1/go.mod h1:yWOB1SBYBC5VeMP7gHvWumXLIWorT60ONWic61uBYv0=
feat(deps): bump github.com/google/ko from 0.14.1 to 0.15.0 (#4373) Bumps [github.com/google/ko](https://github.com/google/ko) from 0.14.1 to 0.15.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/ko/releases">github.com/google/ko's releases</a>.</em></p> <blockquote> <h2>v0.15.0</h2> <h2>What's Changed</h2> <ul> <li>implement dumb cache for images by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1102">ko-build/ko#1102</a></li> <li>fixed typo in configuration.md by <a href="https://github.com/samlaf"><code>@​samlaf</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1105">ko-build/ko#1105</a></li> <li>pkg/commands: fix dropped errors by <a href="https://github.com/alrs"><code>@​alrs</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1109">ko-build/ko#1109</a></li> <li>ci: add govulncheck by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1110">ko-build/ko#1110</a></li> <li>chore: remove refs to deprecated io/ioutil by <a href="https://github.com/testwill"><code>@​testwill</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1092">ko-build/ko#1092</a></li> <li>Update install docs to install ko using Scoop by <a href="https://github.com/pgrunm"><code>@​pgrunm</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1118">ko-build/ko#1118</a></li> <li>include go build output in build error by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1127">ko-build/ko#1127</a></li> <li>Use go1.21, clean up ci and drop go1.19 by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1137">ko-build/ko#1137</a></li> <li>Update e2e.yaml by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1141">ko-build/ko#1141</a></li> <li>handle newfound lint errors by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1142">ko-build/ko#1142</a></li> <li>fix test broken by lint fix by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1143">ko-build/ko#1143</a></li> <li>Bump actions/checkout from 3.6.0 to 4.0.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1136">ko-build/ko#1136</a></li> <li>fix env var for go env by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1140">ko-build/ko#1140</a></li> <li>docs: add docs for TF and Lambda by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1139">ko-build/ko#1139</a></li> <li>docs: add Lambda and TF pages to sidebar by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1144">ko-build/ko#1144</a></li> <li>include example using go packages by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1145">ko-build/ko#1145</a></li> <li>fix the release workflow and install instructions by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1150">ko-build/ko#1150</a></li> <li>update missing places that was using go1.20 by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1163">ko-build/ko#1163</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/samlaf"><code>@​samlaf</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1105">ko-build/ko#1105</a></li> <li><a href="https://github.com/alrs"><code>@​alrs</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1109">ko-build/ko#1109</a></li> <li><a href="https://github.com/testwill"><code>@​testwill</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1092">ko-build/ko#1092</a></li> <li><a href="https://github.com/pgrunm"><code>@​pgrunm</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1118">ko-build/ko#1118</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/ko-build/ko/compare/v0.14.1...v0.15.0">https://github.com/ko-build/ko/compare/v0.14.1...v0.15.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ko-build/ko/commit/31035ad2026bfbafaa4f009baefe72463af1b3a7"><code>31035ad</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1164">#1164</a> from ko-build/dependabot/go_modules/golang.org/x/net...</li> <li><a href="https://github.com/ko-build/ko/commit/ba952fd091f9d27ee5c136e842b5e94dd715100c"><code>ba952fd</code></a> Bump golang.org/x/net from 0.16.0 to 0.17.0</li> <li><a href="https://github.com/ko-build/ko/commit/277f5d74353950c8663fc04b7546f66e57bd6aaf"><code>277f5d7</code></a> update missing places that was using go1.20 (<a href="https://redirect.github.com/google/ko/issues/1163">#1163</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/b8b3b21f8348d7cab863fe1b4eaa47dfc47632da"><code>b8b3b21</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1162">#1162</a> from ko-build/dependabot/go_modules/github.com/googl...</li> <li><a href="https://github.com/ko-build/ko/commit/4890ab2887b653d3c340de4d119bfd17b703f182"><code>4890ab2</code></a> Bump github.com/google/go-cmp from 0.5.9 to 0.6.0</li> <li><a href="https://github.com/ko-build/ko/commit/30b62aee3faf6866cee6513ea7eb13f5a27cd7ca"><code>30b62ae</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1161">#1161</a> from ko-build/dependabot/go_modules/github.com/spf13...</li> <li><a href="https://github.com/ko-build/ko/commit/449bcb61926cb3e3bcf191e8ca53fad5ab3a4e3c"><code>449bcb6</code></a> Bump github.com/spf13/viper from 1.16.0 to 1.17.0</li> <li><a href="https://github.com/ko-build/ko/commit/c543dd83cc75cd849fb95637ea29e3c7c66d6f87"><code>c543dd8</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1160">#1160</a> from ko-build/dependabot/go_modules/golang.org/x/too...</li> <li><a href="https://github.com/ko-build/ko/commit/c1ae5f5ce4fe058830f24827c853d4db39a95250"><code>c1ae5f5</code></a> Bump golang.org/x/tools from 0.13.0 to 0.14.0</li> <li><a href="https://github.com/ko-build/ko/commit/e50d2fd5ff0ec88ac837ffe6f6c2f122eb54b9f8"><code>e50d2fd</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1159">#1159</a> from ko-build/dependabot/go_modules/golang.org/x/syn...</li> <li>Additional commits viewable in <a href="https://github.com/google/ko/compare/v0.14.1...v0.15.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/ko&package-manager=go_modules&previous-version=0.14.1&new-version=0.15.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-17 17:47:47 +02:00
github.com/sirupsen/logrus v1.9.3 h1:dueUQJ1C2q9oE3F7wvmSGAaVtTmUizReu6fjN8uqzbQ=
github.com/sirupsen/logrus v1.9.3/go.mod h1:naHLuLoDiP4jHNo9R0sCBMtWGeIprob74mVsIT4qYEQ=
sec(deps): bump github.com/go-git/go-git/v5 from 5.7.0 to 5.11.0 (#4505) Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.7.0 to 5.11.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/go-git/go-git/releases">github.com/go-git/go-git/v5's releases</a>.</em></p> <blockquote> <h2>v5.11.0</h2> <h2>What's Changed</h2> <ul> <li>git: validate reference names (<a href="https://redirect.github.com/go-git/go-git/issues/929">#929</a>) by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/950">go-git/go-git#950</a></li> <li>git: stop iterating at oldest shallow when pulling. Fixes <a href="https://redirect.github.com/go-git/go-git/issues/305">#305</a> by <a href="https://github.com/dhoizner"><code>@​dhoizner</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/939">go-git/go-git#939</a></li> <li>plumbing: object, enable renames in getFileStatsFromFilePatches by <a href="https://github.com/djmoch"><code>@​djmoch</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/941">go-git/go-git#941</a></li> <li>storage: filesystem, Add option to set a specific FS for alternates by <a href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/953">go-git/go-git#953</a></li> <li>Align worktree validation with upstream and remove build warnings by <a href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/958">go-git/go-git#958</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/dhoizner"><code>@​dhoizner</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/939">go-git/go-git#939</a></li> <li><a href="https://github.com/djmoch"><code>@​djmoch</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/941">go-git/go-git#941</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/go-git/go-git/compare/v5.10.1...v5.11.0">https://github.com/go-git/go-git/compare/v5.10.1...v5.11.0</a></p> <h2>v5.10.1</h2> <h2>What's Changed</h2> <ul> <li>Worktree, ignore ModeSocket files by <a href="https://github.com/steiler"><code>@​steiler</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/930">go-git/go-git#930</a></li> <li>git: add tracer package by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/916">go-git/go-git#916</a></li> <li>remote: Flip clause for fast-forward only check by <a href="https://github.com/adityasaky"><code>@​adityasaky</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/875">go-git/go-git#875</a></li> <li>plumbing: transport/ssh, Fix nil pointer dereference caused when an unreachable proxy server is set. Fixes <a href="https://redirect.github.com/go-git/go-git/issues/900">#900</a> by <a href="https://github.com/anandf"><code>@​anandf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/901">go-git/go-git#901</a></li> <li>plumbing: uppload-server-info, implement upload-server-info by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/896">go-git/go-git#896</a></li> <li>plumbing: optimise memory consumption for filesystem storage by <a href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/799">go-git/go-git#799</a></li> <li>plumbing: format/packfile, Refactor patch delta by <a href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/908">go-git/go-git#908</a></li> <li>plumbing: fix empty uploadpack request error by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/932">go-git/go-git#932</a></li> <li>plumbing: transport/git, Improve tests error message by <a href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/752">go-git/go-git#752</a></li> <li>plumbing: format/pktline, Respect pktline error-line errors by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/936">go-git/go-git#936</a></li> <li>utils: remove ioutil.Pipe and use std library io.Pipe by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/922">go-git/go-git#922</a></li> <li>utils: move trace to utils by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/931">go-git/go-git#931</a></li> <li>cli: separate go module for cli by <a href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/914">go-git/go-git#914</a></li> <li>build: bump github.com/google/go-cmp from 0.5.9 to 0.6.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/887">go-git/go-git#887</a></li> <li>build: bump actions/setup-go from 3 to 4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/891">go-git/go-git#891</a></li> <li>build: bump github.com/skeema/knownhosts from 1.2.0 to 1.2.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/888">go-git/go-git#888</a></li> <li>build: bump actions/checkout from 3 to 4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/890">go-git/go-git#890</a></li> <li>build: bump golang.org/x/sys from 0.13.0 to 0.14.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/907">go-git/go-git#907</a></li> <li>build: bump golang.org/x/text from 0.13.0 to 0.14.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/906">go-git/go-git#906</a></li> <li>build: bump golang.org/x/crypto from 0.14.0 to 0.15.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/917">go-git/go-git#917</a></li> <li>build: bump golang.org/x/net from 0.17.0 to 0.18.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/918">go-git/go-git#918</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/anandf"><code>@​anandf</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/901">go-git/go-git#901</a></li> <li><a href="https://github.com/steiler"><code>@​steiler</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/930">go-git/go-git#930</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/go-git/go-git/compare/v5.10.0...v5.10.1">https://github.com/go-git/go-git/compare/v5.10.0...v5.10.1</a></p> <h2>v5.10.0</h2> <h2>What's Changed</h2> <ul> <li>PlainInitOptions.Bare and allow using InitOptions with PlainInitWithOptions by <a href="https://github.com/ThinkChaos"><code>@​ThinkChaos</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/782">go-git/go-git#782</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/go-git/go-git/commit/5d08d3bd94c65a3b6c25c6fba6907d12b0dac4ca"><code>5d08d3b</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/958">#958</a> from pjbgf/workval</li> <li><a href="https://github.com/go-git/go-git/commit/5bd1d8f4abcfbf1345a1e5a5ec9a96121f3746dc"><code>5bd1d8f</code></a> build: Ensure checkout is the first operation</li> <li><a href="https://github.com/go-git/go-git/commit/b2c19824771bbcbb21abb51abb319c1a610aa6b3"><code>b2c1982</code></a> git: worktree, Align validation with upstream rules</li> <li><a href="https://github.com/go-git/go-git/commit/cec7da63ca0412fce55a0bf0715b7ba44a41eaa2"><code>cec7da6</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/953">#953</a> from pjbgf/alternates</li> <li><a href="https://github.com/go-git/go-git/commit/8b47ceb1aa854f3c3bfa1c347157a04324fcd51e"><code>8b47ceb</code></a> storage: filesystem, Add option to set a specific FS for alternates</li> <li><a href="https://github.com/go-git/go-git/commit/4f614891047bae5d0f7a253f014175505b9821d7"><code>4f61489</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/941">#941</a> from djmoch/filestats-rename</li> <li><a href="https://github.com/go-git/go-git/commit/ae552ce0bf32cddb689727c4c9fa6bf4d3bd6499"><code>ae552ce</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/939">#939</a> from dhoizner/fix-pull-after-shallow</li> <li><a href="https://github.com/go-git/go-git/commit/cc1895b905ebadb09504d88444ff05932fa6e928"><code>cc1895b</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/950">#950</a> from aymanbagabas/validate-ref</li> <li><a href="https://github.com/go-git/go-git/commit/de1d5a5978b9599ca3dacd58bbf699e4bb4cf6bd"><code>de1d5a5</code></a> git: validate reference names</li> <li><a href="https://github.com/go-git/go-git/commit/d87110b492c94d99ebdaea732b23a54b7efba94b"><code>d87110b</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/948">#948</a> from go-git/dependabot/go_modules/cli/go-git/github.c...</li> <li>Additional commits viewable in <a href="https://github.com/go-git/go-git/compare/v5.7.0...v5.11.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/go-git/go-git/v5&package-manager=go_modules&previous-version=5.7.0&new-version=5.11.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-28 14:46:28 +02:00
github.com/skeema/knownhosts v1.2.1 h1:SHWdIUa82uGZz+F+47k8SY4QhhI291cXCpopT1lK2AQ=
github.com/skeema/knownhosts v1.2.1/go.mod h1:xYbVRSPxqBZFrdmDyMmsOs+uX1UZC3nTN3ThzgDxUwo=
feat(deps): bump github.com/slack-go/slack from 0.12.2 to 0.12.3 (#4305) Bumps [github.com/slack-go/slack](https://github.com/slack-go/slack) from 0.12.2 to 0.12.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/slack-go/slack/releases">github.com/slack-go/slack's releases</a>.</em></p> <blockquote> <h2>v0.12.3</h2> <h2>What's Changed</h2> <h3>Bug fixes</h3> <ul> <li>Safer socketmode by <a href="https://github.com/iaburton"><code>@​iaburton</code></a> in <a href="https://redirect.github.com/slack-go/slack/pull/1150">slack-go/slack#1150</a></li> <li>add <code>omitempty</code> to ConfirmationBlockObject.Deny by <a href="https://github.com/kamil-gwozdz"><code>@​kamil-gwozdz</code></a> in <a href="https://redirect.github.com/slack-go/slack/pull/1224">slack-go/slack#1224</a></li> </ul> <h3>Security</h3> <ul> <li>Redact tokens in SendMessage debug log by <a href="https://github.com/daabr"><code>@​daabr</code></a> in <a href="https://redirect.github.com/slack-go/slack/pull/1215">slack-go/slack#1215</a></li> </ul> <h3>Enhancements / Improvements</h3> <ul> <li>socketmode example: use embedded api client in socketmode client by <a href="https://github.com/kittydoor"><code>@​kittydoor</code></a> in <a href="https://redirect.github.com/slack-go/slack/pull/1164">slack-go/slack#1164</a></li> <li>Sends an invitation to a Slack Connect channel by <a href="https://github.com/nopcoder"><code>@​nopcoder</code></a> in <a href="https://redirect.github.com/slack-go/slack/pull/1216">slack-go/slack#1216</a></li> <li>Add support for manifests and config tokens by <a href="https://github.com/stijndcl"><code>@​stijndcl</code></a> in <a href="https://redirect.github.com/slack-go/slack/pull/1220">slack-go/slack#1220</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/daabr"><code>@​daabr</code></a> made their first contribution in <a href="https://redirect.github.com/slack-go/slack/pull/1215">slack-go/slack#1215</a></li> <li><a href="https://github.com/kamil-gwozdz"><code>@​kamil-gwozdz</code></a> made their first contribution in <a href="https://redirect.github.com/slack-go/slack/pull/1224">slack-go/slack#1224</a></li> <li><a href="https://github.com/nopcoder"><code>@​nopcoder</code></a> made their first contribution in <a href="https://redirect.github.com/slack-go/slack/pull/1216">slack-go/slack#1216</a></li> <li><a href="https://github.com/stijndcl"><code>@​stijndcl</code></a> made their first contribution in <a href="https://redirect.github.com/slack-go/slack/pull/1220">slack-go/slack#1220</a></li> <li><a href="https://github.com/iaburton"><code>@​iaburton</code></a> made their first contribution in <a href="https://redirect.github.com/slack-go/slack/pull/1150">slack-go/slack#1150</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/slack-go/slack/compare/v0.12.2...v0.12.3">https://github.com/slack-go/slack/compare/v0.12.2...v0.12.3</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/slack-go/slack/commit/65cefedcde5e68471b9fd607dd4c0254d646d104"><code>65cefed</code></a> Merge pull request <a href="https://redirect.github.com/slack-go/slack/issues/1150">#1150</a> from iaburton/safer-socketmode</li> <li><a href="https://github.com/slack-go/slack/commit/c806c9c909edae85ef475cca258daaad9832bebe"><code>c806c9c</code></a> Merge pull request <a href="https://redirect.github.com/slack-go/slack/issues/1220">#1220</a> from stijndcl/manifests</li> <li><a href="https://github.com/slack-go/slack/commit/3dc3db8986522e1a4b87b9b5250098e90c0bbc05"><code>3dc3db8</code></a> Re-phrase example docs</li> <li><a href="https://github.com/slack-go/slack/commit/217f2de7e7a42428d7b3e7d03b2072fff65410fc"><code>217f2de</code></a> Add examples</li> <li><a href="https://github.com/slack-go/slack/commit/35d0f96c7cc1d69eaed205281f4061726a9abd2c"><code>35d0f96</code></a> Merge pull request <a href="https://redirect.github.com/slack-go/slack/issues/1216">#1216</a> from nopcoder/master</li> <li><a href="https://github.com/slack-go/slack/commit/49c50d064de24775599923fac410d41bcdc913ef"><code>49c50d0</code></a> Merge pull request <a href="https://redirect.github.com/slack-go/slack/issues/1224">#1224</a> from kamil-gwozdz/kamil-gwozdz-patch-1</li> <li><a href="https://github.com/slack-go/slack/commit/80f6b071300743f055198a971ca4d524fbf02c5e"><code>80f6b07</code></a> Merge pull request <a href="https://redirect.github.com/slack-go/slack/issues/1215">#1215</a> from daabr/master</li> <li><a href="https://github.com/slack-go/slack/commit/8f8f4e9daf1c2e1d617db445115c258fa22cc1ec"><code>8f8f4e9</code></a> add <code>omitempty</code> to ConfirmationBlockObject.Deny</li> <li><a href="https://github.com/slack-go/slack/commit/2f5b296c9073a41d25f19f7aae1836188e574f2d"><code>2f5b296</code></a> Small bugfix</li> <li><a href="https://github.com/slack-go/slack/commit/b9a30c0d15654169122b6fe1fe8a0f6f77e647a7"><code>b9a30c0</code></a> Pass config token as param</li> <li>Additional commits viewable in <a href="https://github.com/slack-go/slack/compare/v0.12.2...v0.12.3">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/slack-go/slack&package-manager=go_modules&previous-version=0.12.2&new-version=0.12.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-19 13:43:35 +02:00
github.com/slack-go/slack v0.12.3 h1:92/dfFU8Q5XP6Wp5rr5/T5JHLM5c5Smtn53fhToAP88=
github.com/slack-go/slack v0.12.3/go.mod h1:hlGi5oXA+Gt+yWTPP0plCdRKmjsDxecdHxYQdlMQKOw=
feat(deps): bump github.com/goreleaser/nfpm/v2 from 2.30.1 to 2.31.0 (#4144) latest and greatest
2023-06-26 18:20:47 +02:00
github.com/smartystreets/assertions v1.13.1 h1:Ef7KhSmjZcK6AVf9YbJdvPYG9avaF0ZxudX+ThRdWfU=
chore: go mod tidy Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-09-13 19:03:05 +02:00
github.com/smartystreets/assertions v1.13.1/go.mod h1:cXr/IwVfSo/RbCSPhoAPv73p3hlSdrBH/b3SdnW/LMY=
feat(deps): bump github.com/goreleaser/nfpm/v2 from 2.30.1 to 2.31.0 (#4144) latest and greatest
2023-06-26 18:20:47 +02:00
github.com/smartystreets/goconvey v1.8.0 h1:Oi49ha/2MURE0WexF052Z0m+BNSGirfjg5RL+JXWq3w=
chore: go mod tidy Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-09-13 19:03:05 +02:00
github.com/smartystreets/goconvey v1.8.0/go.mod h1:EdX8jtrTIj26jmjCOVNMVSIYAtgexqXKHOXW2Dx9JLg=
feat(deps): bump github.com/google/ko from 0.14.1 to 0.15.0 (#4373) Bumps [github.com/google/ko](https://github.com/google/ko) from 0.14.1 to 0.15.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/ko/releases">github.com/google/ko's releases</a>.</em></p> <blockquote> <h2>v0.15.0</h2> <h2>What's Changed</h2> <ul> <li>implement dumb cache for images by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1102">ko-build/ko#1102</a></li> <li>fixed typo in configuration.md by <a href="https://github.com/samlaf"><code>@​samlaf</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1105">ko-build/ko#1105</a></li> <li>pkg/commands: fix dropped errors by <a href="https://github.com/alrs"><code>@​alrs</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1109">ko-build/ko#1109</a></li> <li>ci: add govulncheck by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1110">ko-build/ko#1110</a></li> <li>chore: remove refs to deprecated io/ioutil by <a href="https://github.com/testwill"><code>@​testwill</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1092">ko-build/ko#1092</a></li> <li>Update install docs to install ko using Scoop by <a href="https://github.com/pgrunm"><code>@​pgrunm</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1118">ko-build/ko#1118</a></li> <li>include go build output in build error by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1127">ko-build/ko#1127</a></li> <li>Use go1.21, clean up ci and drop go1.19 by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1137">ko-build/ko#1137</a></li> <li>Update e2e.yaml by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1141">ko-build/ko#1141</a></li> <li>handle newfound lint errors by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1142">ko-build/ko#1142</a></li> <li>fix test broken by lint fix by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1143">ko-build/ko#1143</a></li> <li>Bump actions/checkout from 3.6.0 to 4.0.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1136">ko-build/ko#1136</a></li> <li>fix env var for go env by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1140">ko-build/ko#1140</a></li> <li>docs: add docs for TF and Lambda by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1139">ko-build/ko#1139</a></li> <li>docs: add Lambda and TF pages to sidebar by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1144">ko-build/ko#1144</a></li> <li>include example using go packages by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1145">ko-build/ko#1145</a></li> <li>fix the release workflow and install instructions by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1150">ko-build/ko#1150</a></li> <li>update missing places that was using go1.20 by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1163">ko-build/ko#1163</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/samlaf"><code>@​samlaf</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1105">ko-build/ko#1105</a></li> <li><a href="https://github.com/alrs"><code>@​alrs</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1109">ko-build/ko#1109</a></li> <li><a href="https://github.com/testwill"><code>@​testwill</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1092">ko-build/ko#1092</a></li> <li><a href="https://github.com/pgrunm"><code>@​pgrunm</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1118">ko-build/ko#1118</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/ko-build/ko/compare/v0.14.1...v0.15.0">https://github.com/ko-build/ko/compare/v0.14.1...v0.15.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ko-build/ko/commit/31035ad2026bfbafaa4f009baefe72463af1b3a7"><code>31035ad</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1164">#1164</a> from ko-build/dependabot/go_modules/golang.org/x/net...</li> <li><a href="https://github.com/ko-build/ko/commit/ba952fd091f9d27ee5c136e842b5e94dd715100c"><code>ba952fd</code></a> Bump golang.org/x/net from 0.16.0 to 0.17.0</li> <li><a href="https://github.com/ko-build/ko/commit/277f5d74353950c8663fc04b7546f66e57bd6aaf"><code>277f5d7</code></a> update missing places that was using go1.20 (<a href="https://redirect.github.com/google/ko/issues/1163">#1163</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/b8b3b21f8348d7cab863fe1b4eaa47dfc47632da"><code>b8b3b21</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1162">#1162</a> from ko-build/dependabot/go_modules/github.com/googl...</li> <li><a href="https://github.com/ko-build/ko/commit/4890ab2887b653d3c340de4d119bfd17b703f182"><code>4890ab2</code></a> Bump github.com/google/go-cmp from 0.5.9 to 0.6.0</li> <li><a href="https://github.com/ko-build/ko/commit/30b62aee3faf6866cee6513ea7eb13f5a27cd7ca"><code>30b62ae</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1161">#1161</a> from ko-build/dependabot/go_modules/github.com/spf13...</li> <li><a href="https://github.com/ko-build/ko/commit/449bcb61926cb3e3bcf191e8ca53fad5ab3a4e3c"><code>449bcb6</code></a> Bump github.com/spf13/viper from 1.16.0 to 1.17.0</li> <li><a href="https://github.com/ko-build/ko/commit/c543dd83cc75cd849fb95637ea29e3c7c66d6f87"><code>c543dd8</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1160">#1160</a> from ko-build/dependabot/go_modules/golang.org/x/too...</li> <li><a href="https://github.com/ko-build/ko/commit/c1ae5f5ce4fe058830f24827c853d4db39a95250"><code>c1ae5f5</code></a> Bump golang.org/x/tools from 0.13.0 to 0.14.0</li> <li><a href="https://github.com/ko-build/ko/commit/e50d2fd5ff0ec88ac837ffe6f6c2f122eb54b9f8"><code>e50d2fd</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1159">#1159</a> from ko-build/dependabot/go_modules/golang.org/x/syn...</li> <li>Additional commits viewable in <a href="https://github.com/google/ko/compare/v0.14.1...v0.15.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/ko&package-manager=go_modules&previous-version=0.14.1&new-version=0.15.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-17 17:47:47 +02:00
github.com/sourcegraph/conc v0.3.0 h1:OQTbbt6P72L20UqAkXXuLOj79LfEanQ+YQFNpLA9ySo=
github.com/sourcegraph/conc v0.3.0/go.mod h1:Sdozi7LEKbFPqYX2/J+iBAM6HpqSLTASQIKqDmF7Mt0=
github.com/spf13/afero v1.10.0 h1:EaGW2JJh15aKOejeuJ+wpFSHnbd7GE6Wvp3TsNhb6LY=
github.com/spf13/afero v1.10.0/go.mod h1:UBogFpq8E9Hx+xc5CNTTEpTnuHVmXDwZcZcE1eb/UhQ=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/spf13/cast v1.3.1/go.mod h1:Qx5cxh0v+4UWYiBimWS+eyWzqEqokIECu5etghLkUJE=
feat(deps): bump github.com/goreleaser/nfpm/v2 from 2.30.1 to 2.31.0 (#4144) latest and greatest
2023-06-26 18:20:47 +02:00
github.com/spf13/cast v1.5.1 h1:R+kOtfhWQE6TVQzY+4D7wJLBgkdVasCEFxSUBYBYIlA=
github.com/spf13/cast v1.5.1/go.mod h1:b9PdjNptOpzXr7Rq1q9gJML/2cdGQAo69NKzQ10KN48=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/spf13/cobra v0.0.3/go.mod h1:1l0Ry5zgKvJasoi3XT1TypsSe7PqH0Sj9dhYf7v3XqQ=
feat: add ko support (#3653) continuing the PR by @developer-guy - [x] should be a publisher, as it does publish the images it builds every time - [x] `Default` method does not work - [x] the `fromConfig` thing should probably be on the defaults, too - [x] wire `--skip-ko` - [x] documentation - [x] more tests - [x] use same registry as docker tests does - [ ] see if we can make the log output match goreleaser's - [ ] ?? closes #2556 closes #3490 Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com> Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> Co-authored-by: actions-user <actions@github.com> Co-authored-by: Jason Hall <jason@chainguard.dev> Co-authored-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2023-01-17 03:34:49 +02:00
github.com/spf13/cobra v1.4.0/go.mod h1:Wo4iy3BUC+X2Fybo0PDqwJIv3dNRiZLHQymsfxlB84g=
feat(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (#4410) Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.7.0 to 1.8.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spf13/cobra/releases">github.com/spf13/cobra's releases</a>.</em></p> <blockquote> <h2>v1.8.0</h2> <h2>✨ Features</h2> <ul> <li>Support usage as plugin for tools like kubectl by <a href="https://github.com/nirs"><code>@​nirs</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/2018">spf13/cobra#2018</a> - this means that programs that utilize a &quot;plugin-like&quot; structure have much better support and usage (like for completions, command paths, etc.)</li> <li>Move documentation sources to site/content by <a href="https://github.com/umarcor"><code>@​umarcor</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/1428">spf13/cobra#1428</a></li> <li>Add 'one required flag' group by <a href="https://github.com/marevers"><code>@​marevers</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/1952">spf13/cobra#1952</a> - this includes a new <code>MarkFlagsOneRequired</code> API for flags which can be used to mark a flag group as required and cause command failure if at least one is not used when invoked.</li> <li>Customizable error message prefix by <a href="https://github.com/5ouma"><code>@​5ouma</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/2023">spf13/cobra#2023</a> - This adds the <code>SetErrPrefix</code> and <code>ErrPrefix</code> APIs on the <code>Command</code> struct to allow for setting a custom prefix for errors</li> <li>feat: add getters for flag completions by <a href="https://github.com/avirtopeanu-ionos"><code>@​avirtopeanu-ionos</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/1943">spf13/cobra#1943</a></li> <li>Feature: allow running persistent run hooks of all parents by <a href="https://github.com/vkhoroz"><code>@​vkhoroz</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/2044">spf13/cobra#2044</a></li> <li>Improve API to get flag completion function by <a href="https://github.com/marckhouzam"><code>@​marckhouzam</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/2063">spf13/cobra#2063</a></li> </ul> <h2>🐛 Bug fixes</h2> <ul> <li>Fix typo in fish completions by <a href="https://github.com/twpayne"><code>@​twpayne</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/1945">spf13/cobra#1945</a></li> <li>Fix grammar: 'allows to' by <a href="https://github.com/supertassu"><code>@​supertassu</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/1978">spf13/cobra#1978</a></li> <li>powershell: escape variable with curly brackets by <a href="https://github.com/Luap99"><code>@​Luap99</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/1960">spf13/cobra#1960</a></li> <li>Don't complete --help flag when flag parsing disabled by <a href="https://github.com/marckhouzam"><code>@​marckhouzam</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/2061">spf13/cobra#2061</a></li> <li>Replace all non-alphanumerics in active help env var program prefix by <a href="https://github.com/scop"><code>@​scop</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/1940">spf13/cobra#1940</a></li> </ul> <h2>🔧 Maintenance</h2> <ul> <li>build(deps): bump golangci/golangci-lint-action from 3.4.0 to 3.5.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/1971">spf13/cobra#1971</a></li> <li>build(deps): bump golangci/golangci-lint-action from 3.5.0 to 3.6.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/1976">spf13/cobra#1976</a></li> <li>build(deps): bump golangci/golangci-lint-action from 3.6.0 to 3.7.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/2021">spf13/cobra#2021</a></li> <li>build(deps): bump actions/setup-go from 3 to 4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/1934">spf13/cobra#1934</a></li> <li>build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.2 to 2.0.3 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/2047">spf13/cobra#2047</a></li> <li>build(deps): bump actions/checkout from 3 to 4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/2028">spf13/cobra#2028</a></li> <li>command: temporarily disable G602 due to <a href="https://redirect.github.com/securego/gosec/issues/1005">securego/gosec#1005</a> by <a href="https://github.com/umarcor"><code>@​umarcor</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/2022">spf13/cobra#2022</a></li> </ul> <h2>🧪 Testing &amp; CI/CD</h2> <ul> <li>test: make fish_completions_test more robust by <a href="https://github.com/branchvincent"><code>@​branchvincent</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/1980">spf13/cobra#1980</a></li> <li>golangci: enable 'unused' and disable deprecated replaced by it by <a href="https://github.com/umarcor"><code>@​umarcor</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/1983">spf13/cobra#1983</a></li> <li>cleanup: minor corrections to unit tests by <a href="https://github.com/JunNishimura"><code>@​JunNishimura</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/2003">spf13/cobra#2003</a></li> <li>ci: test golang 1.21 by <a href="https://github.com/nunoadrego"><code>@​nunoadrego</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/2024">spf13/cobra#2024</a></li> <li>Fix linter errors by <a href="https://github.com/marckhouzam"><code>@​marckhouzam</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/2052">spf13/cobra#2052</a></li> <li>Add tests for flag completion registration by <a href="https://github.com/marckhouzam"><code>@​marckhouzam</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/2053">spf13/cobra#2053</a></li> </ul> <h2>✏️ Documentation</h2> <ul> <li>doc: fix typo, Deperecated -&gt; Deprecated by <a href="https://github.com/callthingsoff"><code>@​callthingsoff</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/2000">spf13/cobra#2000</a></li> <li>Add notes to doc about the execution condition of *PreRun and *PostRun functions by <a href="https://github.com/haoming29"><code>@​haoming29</code></a> in <a href="https://redirect.github.com/spf13/cobra/pull/2041">spf13/cobra#2041</a></li> </ul> <hr /> <p>Thank you everyone who contributed to this release and all your hard work! Cobra and this community would never be possible without all of you!!!! 🐍</p> <p><strong>Full Changelog</strong>: <a href="https://github.com/spf13/cobra/compare/v1.7.0...v1.8.0">https://github.com/spf13/cobra/compare/v1.7.0...v1.8.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/spf13/cobra/commit/a0a6ae020bb3899ff0276067863e50523f897370"><code>a0a6ae0</code></a> Improve API to get flag completion function (<a href="https://redirect.github.com/spf13/cobra/issues/2063">#2063</a>)</li> <li><a href="https://github.com/spf13/cobra/commit/890302a35f578311404a462b3cdd404f34db3720"><code>890302a</code></a> Support usage as plugin for tools like kubectl (<a href="https://redirect.github.com/spf13/cobra/issues/2018">#2018</a>)</li> <li><a href="https://github.com/spf13/cobra/commit/48cea5c87b5299b68c3f5b7f2c67ea948717276f"><code>48cea5c</code></a> build(deps): bump actions/checkout from 3 to 4 (<a href="https://redirect.github.com/spf13/cobra/issues/2028">#2028</a>)</li> <li><a href="https://github.com/spf13/cobra/commit/22953d88453ec9343b4a78b9d67400a3326f3138"><code>22953d8</code></a> Replace all non-alphanumerics in active help env var program prefix (<a href="https://redirect.github.com/spf13/cobra/issues/1940">#1940</a>)</li> <li><a href="https://github.com/spf13/cobra/commit/00b68a1c260eaf2b9bcb10a3178d36cec81548ca"><code>00b68a1</code></a> Add tests for flag completion registration (<a href="https://redirect.github.com/spf13/cobra/issues/2053">#2053</a>)</li> <li><a href="https://github.com/spf13/cobra/commit/b711e8760b73c6aa1b4aa1bef3a26da5926f175d"><code>b711e87</code></a> Don't complete --help flag when flag parsing disabled (<a href="https://redirect.github.com/spf13/cobra/issues/2061">#2061</a>)</li> <li><a href="https://github.com/spf13/cobra/commit/8b1eba47616566fc4d258a93da48d5d8741865f0"><code>8b1eba4</code></a> Fix linter errors (<a href="https://redirect.github.com/spf13/cobra/issues/2052">#2052</a>)</li> <li><a href="https://github.com/spf13/cobra/commit/4cafa37bc4bb85633b4245aa118280fe5a9edcd5"><code>4cafa37</code></a> Allow running persistent run hooks of all parents (<a href="https://redirect.github.com/spf13/cobra/issues/2044">#2044</a>)</li> <li><a href="https://github.com/spf13/cobra/commit/5c962a221e70fd6b12296e5d7075f28b422f98b2"><code>5c962a2</code></a> build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.2 to 2.0.3 (<a href="https://redirect.github.com/spf13/cobra/issues/2047">#2047</a>)</li> <li><a href="https://github.com/spf13/cobra/commit/efe8fa3e4453e41d6419b26c9769a51e42825632"><code>efe8fa3</code></a> build(deps): bump actions/setup-go from 3 to 4 (<a href="https://redirect.github.com/spf13/cobra/issues/1934">#1934</a>)</li> <li>Additional commits viewable in <a href="https://github.com/spf13/cobra/compare/v1.7.0...v1.8.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/spf13/cobra&package-manager=go_modules&previous-version=1.7.0&new-version=1.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) Dependabot will merge this PR once CI passes on it, as requested by @caarlos0. [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-06 17:44:28 +02:00
github.com/spf13/cobra v1.8.0 h1:7aJaZx1B85qltLMc546zn58BxxfZdR/W22ej9CFoEf0=
github.com/spf13/cobra v1.8.0/go.mod h1:WXLWApfZ71AjXPya3WOlMsY9yMs7YeiHhFVlvLyhcho=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/spf13/pflag v1.0.3/go.mod h1:DYY7MBk1bdzusC3SYhjObp+wFpr4gzcvqqNjLnInEg4=
feat: Use tools.go paradigm for external dependencies (#1495) Co-authored-by: CrazyMax <crazy-max@users.noreply.github.com>
2020-05-10 21:34:55 +02:00
github.com/spf13/pflag v1.0.5 h1:iy+VFUOCP1a+8yFto/drg2CJ5u0yRoB7fZw3DKv/JXA=
github.com/spf13/pflag v1.0.5/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
feat(deps): bump github.com/google/ko from 0.14.1 to 0.15.0 (#4373) Bumps [github.com/google/ko](https://github.com/google/ko) from 0.14.1 to 0.15.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/ko/releases">github.com/google/ko's releases</a>.</em></p> <blockquote> <h2>v0.15.0</h2> <h2>What's Changed</h2> <ul> <li>implement dumb cache for images by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1102">ko-build/ko#1102</a></li> <li>fixed typo in configuration.md by <a href="https://github.com/samlaf"><code>@​samlaf</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1105">ko-build/ko#1105</a></li> <li>pkg/commands: fix dropped errors by <a href="https://github.com/alrs"><code>@​alrs</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1109">ko-build/ko#1109</a></li> <li>ci: add govulncheck by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1110">ko-build/ko#1110</a></li> <li>chore: remove refs to deprecated io/ioutil by <a href="https://github.com/testwill"><code>@​testwill</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1092">ko-build/ko#1092</a></li> <li>Update install docs to install ko using Scoop by <a href="https://github.com/pgrunm"><code>@​pgrunm</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1118">ko-build/ko#1118</a></li> <li>include go build output in build error by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1127">ko-build/ko#1127</a></li> <li>Use go1.21, clean up ci and drop go1.19 by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1137">ko-build/ko#1137</a></li> <li>Update e2e.yaml by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1141">ko-build/ko#1141</a></li> <li>handle newfound lint errors by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1142">ko-build/ko#1142</a></li> <li>fix test broken by lint fix by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1143">ko-build/ko#1143</a></li> <li>Bump actions/checkout from 3.6.0 to 4.0.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1136">ko-build/ko#1136</a></li> <li>fix env var for go env by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1140">ko-build/ko#1140</a></li> <li>docs: add docs for TF and Lambda by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1139">ko-build/ko#1139</a></li> <li>docs: add Lambda and TF pages to sidebar by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1144">ko-build/ko#1144</a></li> <li>include example using go packages by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1145">ko-build/ko#1145</a></li> <li>fix the release workflow and install instructions by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1150">ko-build/ko#1150</a></li> <li>update missing places that was using go1.20 by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1163">ko-build/ko#1163</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/samlaf"><code>@​samlaf</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1105">ko-build/ko#1105</a></li> <li><a href="https://github.com/alrs"><code>@​alrs</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1109">ko-build/ko#1109</a></li> <li><a href="https://github.com/testwill"><code>@​testwill</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1092">ko-build/ko#1092</a></li> <li><a href="https://github.com/pgrunm"><code>@​pgrunm</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1118">ko-build/ko#1118</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/ko-build/ko/compare/v0.14.1...v0.15.0">https://github.com/ko-build/ko/compare/v0.14.1...v0.15.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ko-build/ko/commit/31035ad2026bfbafaa4f009baefe72463af1b3a7"><code>31035ad</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1164">#1164</a> from ko-build/dependabot/go_modules/golang.org/x/net...</li> <li><a href="https://github.com/ko-build/ko/commit/ba952fd091f9d27ee5c136e842b5e94dd715100c"><code>ba952fd</code></a> Bump golang.org/x/net from 0.16.0 to 0.17.0</li> <li><a href="https://github.com/ko-build/ko/commit/277f5d74353950c8663fc04b7546f66e57bd6aaf"><code>277f5d7</code></a> update missing places that was using go1.20 (<a href="https://redirect.github.com/google/ko/issues/1163">#1163</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/b8b3b21f8348d7cab863fe1b4eaa47dfc47632da"><code>b8b3b21</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1162">#1162</a> from ko-build/dependabot/go_modules/github.com/googl...</li> <li><a href="https://github.com/ko-build/ko/commit/4890ab2887b653d3c340de4d119bfd17b703f182"><code>4890ab2</code></a> Bump github.com/google/go-cmp from 0.5.9 to 0.6.0</li> <li><a href="https://github.com/ko-build/ko/commit/30b62aee3faf6866cee6513ea7eb13f5a27cd7ca"><code>30b62ae</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1161">#1161</a> from ko-build/dependabot/go_modules/github.com/spf13...</li> <li><a href="https://github.com/ko-build/ko/commit/449bcb61926cb3e3bcf191e8ca53fad5ab3a4e3c"><code>449bcb6</code></a> Bump github.com/spf13/viper from 1.16.0 to 1.17.0</li> <li><a href="https://github.com/ko-build/ko/commit/c543dd83cc75cd849fb95637ea29e3c7c66d6f87"><code>c543dd8</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1160">#1160</a> from ko-build/dependabot/go_modules/golang.org/x/too...</li> <li><a href="https://github.com/ko-build/ko/commit/c1ae5f5ce4fe058830f24827c853d4db39a95250"><code>c1ae5f5</code></a> Bump golang.org/x/tools from 0.13.0 to 0.14.0</li> <li><a href="https://github.com/ko-build/ko/commit/e50d2fd5ff0ec88ac837ffe6f6c2f122eb54b9f8"><code>e50d2fd</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1159">#1159</a> from ko-build/dependabot/go_modules/golang.org/x/syn...</li> <li>Additional commits viewable in <a href="https://github.com/google/ko/compare/v0.14.1...v0.15.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/ko&package-manager=go_modules&previous-version=0.14.1&new-version=0.15.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-17 17:47:47 +02:00
github.com/spf13/viper v1.17.0 h1:I5txKw7MJasPL/BrfkbA0Jyo/oELqVmux4pR/UxOMfI=
github.com/spf13/viper v1.17.0/go.mod h1:BmMMMLQXSbcHK6KAOiFLz0l5JHrU89OdIRHvsk0+yVI=
update retry package version (#972)
2019-03-03 18:16:01 +02:00
github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
feat: refactor main.go to spf13/cobra (#1472) * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: revert Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: lint Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: move Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2020-04-28 02:42:44 +02:00
github.com/stretchr/objx v0.1.1/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
feat(deps): bump github.com/stretchr/testify from 1.7.2 to 1.7.4 (#3171) Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.7.2 to 1.7.4. - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](https://github.com/stretchr/testify/compare/v1.7.2...v1.7.4) --- updated-dependencies: - dependency-name: github.com/stretchr/testify dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-21 14:00:48 +02:00
github.com/stretchr/objx v0.4.0/go.mod h1:YvHI0jy2hoMjB+UWwv71VJQ9isScKT/TqJzVSSt89Yw=
feat(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1 (#3493) Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.8.0 to 1.8.1. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/stretchr/testify/commit/b747d7c5f853d017ddbc5e623d026d7fc2770a58"><code>b747d7c</code></a> Bump github.com/stretchr/objx from 0.4.0 to 0.5.0 (<a href="https://github-redirect.dependabot.com/stretchr/testify/issues/1283">#1283</a>)</li> <li>See full diff in <a href="https://github.com/stretchr/testify/compare/v1.8.0...v1.8.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/stretchr/testify&package-manager=go_modules&previous-version=1.8.0&new-version=1.8.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-24 15:46:01 +02:00
github.com/stretchr/objx v0.5.0/go.mod h1:Yh+to48EsGEfYuaHDzXPcE3xhTkx73EhmCGUpEOglKo=
feat: add support for pushing artifacts to cloud storage provider( S3, Azure Blob, GCS) (#1036) * feat: adding support to push artifacts to AWS S3,Azure Blob and Google Cloud Storage readme for blob publisher test: add unit test for blob using testify and mockery test: add unit test for publish method fix: openbucket instance initialization remove unwanted packages: go mod tidy test: add missing unit test for publish method * doc: add missing comment for func * fix: add accidental delete file * fix : add missing Snapcrafts project * fix: unit test for Azure blob * fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue * fmt: fix linter reporeted issues fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue fmt: linter fix * test: fix typo in test error string * feat: add support to provider folder inside bucket, resolves discussed comments
2019-06-05 15:51:01 +02:00
github.com/stretchr/testify v1.2.2/go.mod h1:a8OnRcib4nhh0OaRAV+Yts87kKdq0PP7pXfy6kDkUVs=
update retry package version (#972)
2019-03-03 18:16:01 +02:00
github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI=
feat: go 1.13 (#1135) * feat: go 1.13 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: go.mod Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: update to go 1.13 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * bump: deps Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: deps Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: trying replace Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: go mod init Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: disable funlen lint Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2019-09-13 14:53:56 +02:00
github.com/stretchr/testify v1.4.0/go.mod h1:j7eGeouHqKxXV5pUuKE4zz7dFj8WfuZ+81PSLYec5m4=
chore(deps): bump github.com/stretchr/testify from 1.5.0 to 1.5.1 (#1355) Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.5.0 to 1.5.1. - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](https://github.com/stretchr/testify/compare/v1.5.0...v1.5.1) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-02-20 09:33:16 +02:00
github.com/stretchr/testify v1.5.1/go.mod h1:5W2xD1RspED5o8YsWQXVCued0rvSQ+mT+I5cxcmMvtA=
chore(deps): bump github.com/stretchr/testify from 1.6.0 to 1.6.1 (#1592) Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.6.0 to 1.6.1. - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](https://github.com/stretchr/testify/compare/v1.6.0...v1.6.1) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-08 14:52:43 +02:00
github.com/stretchr/testify v1.6.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
chore(deps): bump github.com/stretchr/testify from 1.6.1 to 1.7.0 (#2019) Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.6.1 to 1.7.0. - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](https://github.com/stretchr/testify/compare/v1.6.1...v1.7.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-01-14 13:32:46 +02:00
github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
feat(deps): bump github.com/stretchr/testify from 1.7.2 to 1.7.4 (#3171) Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.7.2 to 1.7.4. - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](https://github.com/stretchr/testify/compare/v1.7.2...v1.7.4) --- updated-dependencies: - dependency-name: github.com/stretchr/testify dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-21 14:00:48 +02:00
github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
feat(deps): bump github.com/stretchr/testify from 1.7.5 to 1.8.0 (#3217) Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.7.5 to 1.8.0. - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](https://github.com/stretchr/testify/compare/v1.7.5...v1.8.0) --- updated-dependencies: - dependency-name: github.com/stretchr/testify dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-30 14:44:51 +02:00
github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO+kdMU+MU=
feat(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1 (#3493) Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.8.0 to 1.8.1. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/stretchr/testify/commit/b747d7c5f853d017ddbc5e623d026d7fc2770a58"><code>b747d7c</code></a> Bump github.com/stretchr/objx from 0.4.0 to 0.5.0 (<a href="https://github-redirect.dependabot.com/stretchr/testify/issues/1283">#1283</a>)</li> <li>See full diff in <a href="https://github.com/stretchr/testify/compare/v1.8.0...v1.8.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/stretchr/testify&package-manager=go_modules&previous-version=1.8.0&new-version=1.8.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-24 15:46:01 +02:00
github.com/stretchr/testify v1.8.1/go.mod h1:w2LPCIKwWwSfY2zedu0+kehJoqGctiVI29o6fzry7u4=
feat(deps): bump github.com/atc0005/go-teams-notify/v2 from 2.7.0 to 2.7.1 (#4090) [//]: # (dependabot-start) ⚠️ **Dependabot is rebasing this PR** ⚠️ Rebasing might not happen immediately, so don't worry if this takes some time. Note: if you make any changes to this PR yourself, they will take precedence over the rebase. --- [//]: # (dependabot-end) Bumps [github.com/atc0005/go-teams-notify/v2](https://github.com/atc0005/go-teams-notify) from 2.7.0 to 2.7.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/atc0005/go-teams-notify/releases">github.com/atc0005/go-teams-notify/v2's releases</a>.</em></p> <blockquote> <h2>v2.7.1</h2> <h2>Changed</h2> <ul> <li>Dependencies <ul> <li><code>github.com/stretchr/testify</code> <ul> <li><code>v1.8.1</code> to <code>v1.8.2</code></li> </ul> </li> </ul> </li> <li>CI <ul> <li>(<a href="https://redirect.github.com/atc0005/go-teams-notify/issues/198">GH-198</a>) Add Go Module Validation, Dependency Updates jobs</li> <li>(<a href="https://redirect.github.com/atc0005/go-teams-notify/issues/200">GH-200</a>) Drop <code>Push Validation</code> workflow</li> <li>(<a href="https://redirect.github.com/atc0005/go-teams-notify/issues/201">GH-201</a>) Rework workflow scheduling</li> <li>(<a href="https://redirect.github.com/atc0005/go-teams-notify/issues/203">GH-203</a>) Remove <code>Push Validation</code> workflow status badge</li> <li>(<a href="https://redirect.github.com/atc0005/go-teams-notify/issues/207">GH-207</a>) Update vuln analysis GHAW to use on.push hook</li> </ul> </li> <li><code>Adaptive Card</code> format <ul> <li>(<a href="https://redirect.github.com/atc0005/go-teams-notify/issues/206">GH-206</a>) Update <code>AdaptiveCardMaxVersion</code> to 1.5</li> <li>(<a href="https://redirect.github.com/atc0005/go-teams-notify/issues/216">GH-216</a>) Refactor <code>TopLevelCard.Validate</code></li> </ul> </li> <li>Other <ul> <li>(<a href="https://redirect.github.com/atc0005/go-teams-notify/issues/212">GH-212</a>) Update <code>InList</code>, <code>InListIfFieldValNotEmpty</code> validators</li> </ul> </li> </ul> <h2>Fixed</h2> <ul> <li>(<a href="https://redirect.github.com/atc0005/go-teams-notify/issues/208">GH-208</a>) Validation of <code>(adaptivecard.Attachment).Content</code> is missing</li> </ul> <h2>References</h2> <ul> <li>See the <a href="https://github.com/atc0005/go-teams-notify/milestone/12?closed=1"><code>v2.7.1</code> milestone</a> for the issues associated with this release.</li> <li>See our <a href="https://github.com/atc0005/go-teams-notify/blob/master/CHANGELOG.md">CHANGELOG</a> for more information.</li> </ul> <h2>v2.7.1-rc.3</h2> <h2>WARNING</h2> <p>This is a release candidate (RC) release. Unless issues are discovered &amp; reported, this will become the next v2.7.1 stable release.</p> <p>Please test and provide feedback so that any blocking issues can be resolved before the v2.7.1 release.</p> <p>Thanks in advance!</p> <h2>Changed</h2> <ul> <li>Dependencies <ul> <li><code>github.com/stretchr/testify</code> <ul> <li><code>v1.8.1</code> to <code>v1.8.2</code></li> </ul> </li> </ul> </li> <li>CI <ul> <li>(<a href="https://redirect.github.com/atc0005/go-teams-notify/issues/198">GH-198</a>) Add Go Module Validation, Dependency Updates jobs</li> <li>(<a href="https://redirect.github.com/atc0005/go-teams-notify/issues/200">GH-200</a>) Drop <code>Push Validation</code> workflow</li> <li>(<a href="https://redirect.github.com/atc0005/go-teams-notify/issues/201">GH-201</a>) Rework workflow scheduling</li> <li>(<a href="https://redirect.github.com/atc0005/go-teams-notify/issues/203">GH-203</a>) Remove <code>Push Validation</code> workflow status badge</li> <li>(<a href="https://redirect.github.com/atc0005/go-teams-notify/issues/207">GH-207</a>) Update vuln analysis GHAW to use on.push hook</li> </ul> </li> <li><code>Adaptive Card</code> format <ul> <li>(<a href="https://redirect.github.com/atc0005/go-teams-notify/issues/206">GH-206</a>) Update <code>AdaptiveCardMaxVersion</code> to 1.5</li> <li>(<a href="https://redirect.github.com/atc0005/go-teams-notify/issues/216">GH-216</a>) Refactor <code>TopLevelCard.Validate</code></li> </ul> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/atc0005/go-teams-notify/blob/master/CHANGELOG.md">github.com/atc0005/go-teams-notify/v2's changelog</a>.</em></p> <blockquote> <h2>[v2.7.1] - 2023-06-09</h2> <h3>Changed</h3> <ul> <li>Dependencies <ul> <li><code>github.com/stretchr/testify</code> <ul> <li><code>v1.8.1</code> to <code>v1.8.2</code></li> </ul> </li> </ul> </li> <li>CI <ul> <li>(<a href="https://redirect.github.com/atc0005/go-teams-notify/issues/198">GH-198</a>) Add Go Module Validation, Dependency Updates jobs</li> <li>(<a href="https://redirect.github.com/atc0005/go-teams-notify/issues/200">GH-200</a>) Drop <code>Push Validation</code> workflow</li> <li>(<a href="https://redirect.github.com/atc0005/go-teams-notify/issues/201">GH-201</a>) Rework workflow scheduling</li> <li>(<a href="https://redirect.github.com/atc0005/go-teams-notify/issues/203">GH-203</a>) Remove <code>Push Validation</code> workflow status badge</li> <li>(<a href="https://redirect.github.com/atc0005/go-teams-notify/issues/207">GH-207</a>) Update vuln analysis GHAW to use on.push hook</li> </ul> </li> <li><code>Adaptive Card</code> format <ul> <li>(<a href="https://redirect.github.com/atc0005/go-teams-notify/issues/206">GH-206</a>) Update <code>AdaptiveCardMaxVersion</code> to 1.5</li> <li>(<a href="https://redirect.github.com/atc0005/go-teams-notify/issues/216">GH-216</a>) Refactor <code>TopLevelCard.Validate</code></li> </ul> </li> <li>Other <ul> <li>(<a href="https://redirect.github.com/atc0005/go-teams-notify/issues/212">GH-212</a>) Update <code>InList</code>, <code>InListIfFieldValNotEmpty</code> validators</li> </ul> </li> </ul> <h3>Fixed</h3> <ul> <li>(<a href="https://redirect.github.com/atc0005/go-teams-notify/issues/208">GH-208</a>) Validation of <code>(adaptivecard.Attachment).Content</code> is missing</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/atc0005/go-teams-notify/commit/ff587f738fc6bac1e144fd90a2d35af5fa7a9106"><code>ff587f7</code></a> Merge pull request <a href="https://redirect.github.com/atc0005/go-teams-notify/issues/223">#223</a> from atc0005/update-changelog-for-v2.7.1-release</li> <li><a href="https://github.com/atc0005/go-teams-notify/commit/9f9ca98acbbdf953ad302d8e019fb3a20c4563f3"><code>9f9ca98</code></a> Update CHANGELOG for v2.7.1 release</li> <li><a href="https://github.com/atc0005/go-teams-notify/commit/51498b8e23feb6d78d364f123585594e35ea9c11"><code>51498b8</code></a> Merge pull request <a href="https://redirect.github.com/atc0005/go-teams-notify/issues/219">#219</a> from atc0005/minor-changelog-format-tweaks</li> <li><a href="https://github.com/atc0005/go-teams-notify/commit/fc09c758b5d3c3a0bf73afd30e6d726ca1e78a86"><code>fc09c75</code></a> Minor CHANGELOG formatting tweaks</li> <li><a href="https://github.com/atc0005/go-teams-notify/commit/0af7ea6f64acc5a2983fe88e1e52747539d75576"><code>0af7ea6</code></a> Merge pull request <a href="https://redirect.github.com/atc0005/go-teams-notify/issues/217">#217</a> from atc0005/update-changelog-for-v2.7.1-release</li> <li><a href="https://github.com/atc0005/go-teams-notify/commit/3583e65222ef5e609b85fd7cc85227cfa4baca79"><code>3583e65</code></a> Update CHANGELOG for v2.7.1 release</li> <li><a href="https://github.com/atc0005/go-teams-notify/commit/f4e728a820df901c57ea444745a80f61a59da9a0"><code>f4e728a</code></a> Merge pull request <a href="https://redirect.github.com/atc0005/go-teams-notify/issues/216">#216</a> from atc0005/refactor-toplevelcard-validate</li> <li><a href="https://github.com/atc0005/go-teams-notify/commit/f413f376be0399e57ab6090777d6aabddb3bffd4"><code>f413f37</code></a> Refactor TopLevelCard.Validate</li> <li><a href="https://github.com/atc0005/go-teams-notify/commit/cc081820a7e925a990b70aead2e130c66640f4ab"><code>cc08182</code></a> Merge pull request <a href="https://redirect.github.com/atc0005/go-teams-notify/issues/213">#213</a> from atc0005/update-changelog-for-v2.7.1-release</li> <li><a href="https://github.com/atc0005/go-teams-notify/commit/4684ebf5e67df97f04b85d96e8ccd50860fb4652"><code>4684ebf</code></a> Update CHANGELOG for v2.7.1 release</li> <li>Additional commits viewable in <a href="https://github.com/atc0005/go-teams-notify/compare/v2.7.0...v2.7.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/atc0005/go-teams-notify/v2&package-manager=go_modules&previous-version=2.7.0&new-version=2.7.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-12 13:56:14 +02:00
github.com/stretchr/testify v1.8.2/go.mod h1:w2LPCIKwWwSfY2zedu0+kehJoqGctiVI29o6fzry7u4=
feat(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 (#4059) Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.8.3 to 1.8.4. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/stretchr/testify/commit/f97607b89807936ac4ff96748d766cf4b9711f78"><code>f97607b</code></a> Create GitHub release when new release tag is pushed (<a href="https://redirect.github.com/stretchr/testify/issues/1354">#1354</a>)</li> <li>See full diff in <a href="https://github.com/stretchr/testify/compare/v1.8.3...v1.8.4">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/stretchr/testify&package-manager=go_modules&previous-version=1.8.3&new-version=1.8.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-31 15:52:51 +02:00
github.com/stretchr/testify v1.8.4 h1:CcVxjf3Q8PM0mHUKJCdn+eZZtm5yQwehR5yeSVQQcUk=
github.com/stretchr/testify v1.8.4/go.mod h1:sz/lmYIOXD/1dqDmKjjqLyZ2RngseejIcXlSw2iwfAo=
feat(deps): bump github.com/google/ko from 0.14.1 to 0.15.0 (#4373) Bumps [github.com/google/ko](https://github.com/google/ko) from 0.14.1 to 0.15.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/ko/releases">github.com/google/ko's releases</a>.</em></p> <blockquote> <h2>v0.15.0</h2> <h2>What's Changed</h2> <ul> <li>implement dumb cache for images by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1102">ko-build/ko#1102</a></li> <li>fixed typo in configuration.md by <a href="https://github.com/samlaf"><code>@​samlaf</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1105">ko-build/ko#1105</a></li> <li>pkg/commands: fix dropped errors by <a href="https://github.com/alrs"><code>@​alrs</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1109">ko-build/ko#1109</a></li> <li>ci: add govulncheck by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1110">ko-build/ko#1110</a></li> <li>chore: remove refs to deprecated io/ioutil by <a href="https://github.com/testwill"><code>@​testwill</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1092">ko-build/ko#1092</a></li> <li>Update install docs to install ko using Scoop by <a href="https://github.com/pgrunm"><code>@​pgrunm</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1118">ko-build/ko#1118</a></li> <li>include go build output in build error by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1127">ko-build/ko#1127</a></li> <li>Use go1.21, clean up ci and drop go1.19 by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1137">ko-build/ko#1137</a></li> <li>Update e2e.yaml by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1141">ko-build/ko#1141</a></li> <li>handle newfound lint errors by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1142">ko-build/ko#1142</a></li> <li>fix test broken by lint fix by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1143">ko-build/ko#1143</a></li> <li>Bump actions/checkout from 3.6.0 to 4.0.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1136">ko-build/ko#1136</a></li> <li>fix env var for go env by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1140">ko-build/ko#1140</a></li> <li>docs: add docs for TF and Lambda by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1139">ko-build/ko#1139</a></li> <li>docs: add Lambda and TF pages to sidebar by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1144">ko-build/ko#1144</a></li> <li>include example using go packages by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1145">ko-build/ko#1145</a></li> <li>fix the release workflow and install instructions by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1150">ko-build/ko#1150</a></li> <li>update missing places that was using go1.20 by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1163">ko-build/ko#1163</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/samlaf"><code>@​samlaf</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1105">ko-build/ko#1105</a></li> <li><a href="https://github.com/alrs"><code>@​alrs</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1109">ko-build/ko#1109</a></li> <li><a href="https://github.com/testwill"><code>@​testwill</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1092">ko-build/ko#1092</a></li> <li><a href="https://github.com/pgrunm"><code>@​pgrunm</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1118">ko-build/ko#1118</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/ko-build/ko/compare/v0.14.1...v0.15.0">https://github.com/ko-build/ko/compare/v0.14.1...v0.15.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ko-build/ko/commit/31035ad2026bfbafaa4f009baefe72463af1b3a7"><code>31035ad</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1164">#1164</a> from ko-build/dependabot/go_modules/golang.org/x/net...</li> <li><a href="https://github.com/ko-build/ko/commit/ba952fd091f9d27ee5c136e842b5e94dd715100c"><code>ba952fd</code></a> Bump golang.org/x/net from 0.16.0 to 0.17.0</li> <li><a href="https://github.com/ko-build/ko/commit/277f5d74353950c8663fc04b7546f66e57bd6aaf"><code>277f5d7</code></a> update missing places that was using go1.20 (<a href="https://redirect.github.com/google/ko/issues/1163">#1163</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/b8b3b21f8348d7cab863fe1b4eaa47dfc47632da"><code>b8b3b21</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1162">#1162</a> from ko-build/dependabot/go_modules/github.com/googl...</li> <li><a href="https://github.com/ko-build/ko/commit/4890ab2887b653d3c340de4d119bfd17b703f182"><code>4890ab2</code></a> Bump github.com/google/go-cmp from 0.5.9 to 0.6.0</li> <li><a href="https://github.com/ko-build/ko/commit/30b62aee3faf6866cee6513ea7eb13f5a27cd7ca"><code>30b62ae</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1161">#1161</a> from ko-build/dependabot/go_modules/github.com/spf13...</li> <li><a href="https://github.com/ko-build/ko/commit/449bcb61926cb3e3bcf191e8ca53fad5ab3a4e3c"><code>449bcb6</code></a> Bump github.com/spf13/viper from 1.16.0 to 1.17.0</li> <li><a href="https://github.com/ko-build/ko/commit/c543dd83cc75cd849fb95637ea29e3c7c66d6f87"><code>c543dd8</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1160">#1160</a> from ko-build/dependabot/go_modules/golang.org/x/too...</li> <li><a href="https://github.com/ko-build/ko/commit/c1ae5f5ce4fe058830f24827c853d4db39a95250"><code>c1ae5f5</code></a> Bump golang.org/x/tools from 0.13.0 to 0.14.0</li> <li><a href="https://github.com/ko-build/ko/commit/e50d2fd5ff0ec88ac837ffe6f6c2f122eb54b9f8"><code>e50d2fd</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1159">#1159</a> from ko-build/dependabot/go_modules/golang.org/x/syn...</li> <li>Additional commits viewable in <a href="https://github.com/google/ko/compare/v0.14.1...v0.15.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/ko&package-manager=go_modules&previous-version=0.14.1&new-version=0.15.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-17 17:47:47 +02:00
github.com/subosito/gotenv v1.6.0 h1:9NlTDc1FTs4qu0DDq7AEtTPNw6SVm7uBMsUCUjABIf8=
github.com/subosito/gotenv v1.6.0/go.mod h1:Dk4QP5c2W3ibzajGcXpNraDfq2IrhjMIvMSWPKKo0FU=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/syndtr/gocapability v0.0.0-20200815063812-42c35b437635/go.mod h1:hkRG7XYTFWNJGYcbNJQlaLq0fg1yr4J4t/NcTQtrfww=
Add telegram announcer (#2563) * feat: add telegram announcer * chore: remove hooks and use the Send method of the bot API * chore: add docs and default config * chore: add docs and default config * chore: fix tabs * chore: add docs * chore: fix pr comments * chore: fix pr comments * chore: fix pr comments * chore: add missing links in docs
2021-10-07 15:01:31 +02:00
github.com/technoweenie/multipartstreamer v1.0.1 h1:XRztA5MXiR1TIRHxH2uNxXxaIkKQDeX7m2XsSOlQEnM=
github.com/technoweenie/multipartstreamer v1.0.1/go.mod h1:jNVxdtShOxzAsukZwTSw6MDx5eUJoiEBsSvzDU9uzog=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/tidwall/pretty v1.0.0/go.mod h1:XNkn88O1ChpSDQmQeStsy+sBenx6DDtFZJxhVysOjyk=
feat: add ko support (#3653) continuing the PR by @developer-guy - [x] should be a publisher, as it does publish the images it builds every time - [x] `Default` method does not work - [x] the `fromConfig` thing should probably be on the defaults, too - [x] wire `--skip-ko` - [x] documentation - [x] more tests - [x] use same registry as docker tests does - [ ] see if we can make the log output match goreleaser's - [ ] ?? closes #2556 closes #3490 Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com> Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> Co-authored-by: actions-user <actions@github.com> Co-authored-by: Jason Hall <jason@chainguard.dev> Co-authored-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2023-01-17 03:34:49 +02:00
github.com/titanous/rocacheck v0.0.0-20171023193734-afe73141d399 h1:e/5i7d4oYZ+C1wj2THlRK+oAhjeS/TRQwMfkIuet3w0=
github.com/titanous/rocacheck v0.0.0-20171023193734-afe73141d399/go.mod h1:LdwHTNJT99C5fTAzDz0ud328OgXz+gierycbcIx2fRs=
feat: add mastodon (#3567) This PR adds [mastodon](https://joinmastodon.org/) as an announcement pipeline. 🥳 ![mastodon-announce](https://user-images.githubusercontent.com/42128690/202544345-d90d8f10-0818-4bc2-bc35-3dbcba4254b0.png) Resolves #3566 Signed-off-by: jolheiser <john.olheiser@gmail.com>
2022-11-18 01:40:00 +02:00
github.com/tomnomnom/linkheader v0.0.0-20180905144013-02ca5825eb80 h1:nrZ3ySNYwJbSpD6ce9duiP+QkD3JuLCcWkdaehUS/3Y=
github.com/tomnomnom/linkheader v0.0.0-20180905144013-02ca5825eb80/go.mod h1:iFyPdL66DjUD96XmzVL3ZntbzcflLnznH0fr99w5VqE=
feat(deps): bump github.com/ulikunitz/xz from 0.5.10 to 0.5.11 (#3639) Bumps [github.com/ulikunitz/xz](https://github.com/ulikunitz/xz) from 0.5.10 to 0.5.11. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ulikunitz/xz/commit/9d122a61c181b044e6b8b9c09979dfe7c513e2db"><code>9d122a6</code></a> release version v0.5.11</li> <li><a href="https://github.com/ulikunitz/xz/commit/4ce6f08566c86bf66a9bc1c2f811336ae2e462c0"><code>4ce6f08</code></a> lzma: fix handling of small dictionary sizes</li> <li><a href="https://github.com/ulikunitz/xz/commit/0b7c695d23f84aa7e968bbcaa1980847683d909a"><code>0b7c695</code></a> xz: add reader benchmark</li> <li><a href="https://github.com/ulikunitz/xz/commit/553507794087117cd9bdc95c924c1c5611bd991a"><code>5535077</code></a> xz: add compression reate to Writer benchmark</li> <li><a href="https://github.com/ulikunitz/xz/commit/886dc9acde193dec013d4812372011c64f6efbc2"><code>886dc9a</code></a> xz: add benchmark for Writer</li> <li><a href="https://github.com/ulikunitz/xz/commit/ae233692d6d4a3ff2f8c3152de489a2897fdb30a"><code>ae23369</code></a> Create codeql-analysis.yml</li> <li><a href="https://github.com/ulikunitz/xz/commit/057ed3994928010b6b9c90dcd1281d628023fa22"><code>057ed39</code></a> Remove codeql workflows</li> <li><a href="https://github.com/ulikunitz/xz/commit/d2624c667fd52b03d5f2b1d996c68f6d81b50ae2"><code>d2624c6</code></a> Add example_test.go</li> <li><a href="https://github.com/ulikunitz/xz/commit/fdaf408660c3ee2ba62ce0b356b39fdf9f7942e4"><code>fdaf408</code></a> README.md: small improvement to the documeation section</li> <li><a href="https://github.com/ulikunitz/xz/commit/060c89d64f5e88a2e57650dbd1fc1135065c5767"><code>060c89d</code></a> README.md: add link to pkg.go.dev</li> <li>See full diff in <a href="https://github.com/ulikunitz/xz/compare/v0.5.10...v0.5.11">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/ulikunitz/xz&package-manager=go_modules&previous-version=0.5.10&new-version=0.5.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-13 14:44:34 +02:00
github.com/ulikunitz/xz v0.5.11 h1:kpFauv27b6ynzBNT/Xy+1k+fK4WswhN/6PN5WhFAGw8=
github.com/ulikunitz/xz v0.5.11/go.mod h1:nbz6k7qbPmH4IRqmfOplQw/tblSgqTqBwxkY0oWt/14=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/urfave/cli v1.22.1/go.mod h1:Gos4lmkARVdJ6EkW0WaNv/tZAAMe9V7XWyB60NtXRu0=
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419) Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.1.1 to 2.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's releases</a>.</em></p> <blockquote> <h2>v2.2.1</h2> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's changelog</a>.</em></p> <blockquote> <h1>v2.2.1</h1> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign/commit/12cbf9ea177d22bbf5cf028bcb4712b5f174ebc6"><code>12cbf9e</code></a> add changelog for v2.2.1 release (<a href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/827f24e9d4a1f8e845cb1597d02053410f5bbe2a"><code>827f24e</code></a> feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8ac891ff0e29ddc67965423bee8f826219c6eb0f"><code>8ac891f</code></a> Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li><a href="https://github.com/sigstore/cosign/commit/8b366c497bd22b9be7742d057b8f59083dcadee0"><code>8b366c4</code></a> add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/23920de5623a505921ba4e62fa97e2553eff4699"><code>23920de</code></a> chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/e022e1c13240d1ae5b3c408bc53e389154331713"><code>e022e1c</code></a> chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/28c59c5eca6386924cc8f381afe94efe1e957679"><code>28c59c5</code></a> add missing groups key (<a href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8e5bdcc0ff39b8dc1b477251fef521601df76ec0"><code>8e5bdcc</code></a> chore(deps): bump github.com/google/certificate-transparency-go (<a href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/510cac4ef54274823599082e3a57a556ccd5c9e5"><code>510cac4</code></a> chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/063902b1d78fed7c12c9d9ce06248d36963e8169"><code>063902b</code></a> chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 18:39:49 +02:00
github.com/vbatts/tar-split v0.11.5 h1:3bHCTIheBm1qFTcgh9oPu+nNBtX+XJIupG/vacinCts=
github.com/vbatts/tar-split v0.11.5/go.mod h1:yZbwRsSeGjusneWgA781EKej9HF8vme8okylkAeNKLk=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/vishvananda/netlink v1.1.0/go.mod h1:cTgwzPIzzgDAYoQrMm0EdrjRUBkTqKYppBueQtXaqoE=
github.com/vishvananda/netns v0.0.0-20191106174202-0a2b9b5464df/go.mod h1:JP3t17pCcGlemwknint6hfoeCVQrEMVwxRLRjXpq+BU=
feat: add fig autocomplete support (#3329) This PR releates to #3328 and fix the first part of the doings in the issue
2022-08-22 02:28:57 +02:00
github.com/withfig/autocomplete-tools/integrations/cobra v1.2.1 h1:+dBg5k7nuTE38VVdoroRsT0Z88fmvdYrI2EjzJst35I=
github.com/withfig/autocomplete-tools/integrations/cobra v1.2.1/go.mod h1:nmuySobZb4kFgFy6BptpXp/BBw+xFSyvVPP6auoJB4k=
feat(deps): bump github.com/invopop/jsonschema from 0.8.0 to 0.9.0 Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-09-22 04:17:31 +02:00
github.com/wk8/go-ordered-map/v2 v2.1.8 h1:5h/BUHu93oj4gIdvHHHGsScSTMijfx5PeYkE/fJgbpc=
github.com/wk8/go-ordered-map/v2 v2.1.8/go.mod h1:5nJHM5DyteebpVlHnWMV0rPz6Zp7+xBAnxjb1X5vnTw=
feat(deps): bump github.com/xanzy/go-gitlab from 0.95.1 to 0.95.2 (#4477) Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab) from 0.95.1 to 0.95.2. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/xanzy/go-gitlab/commit/e69c57e3177c974dc2396589ec7f9ff18a1ec68e"><code>e69c57e</code></a> Merge pull request <a href="https://redirect.github.com/xanzy/go-gitlab/issues/1854">#1854</a> from HebertCL/chore/fix_settings_update_typo</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/873225b89b2367af0e6cd68fb8b598d692fa0e78"><code>873225b</code></a> Small typo fix</li> <li>See full diff in <a href="https://github.com/xanzy/go-gitlab/compare/v0.95.1...v0.95.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/xanzy/go-gitlab&package-manager=go_modules&previous-version=0.95.1&new-version=0.95.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-13 13:59:22 +02:00
github.com/xanzy/go-gitlab v0.95.2 h1:4p0IirHqEp5f0baK/aQqr4TR57IsD+8e4fuyAA1yi88=
github.com/xanzy/go-gitlab v0.95.2/go.mod h1:ETg8tcj4OhrB84UEgeE8dSuV/0h4BBL1uOV/qK0vlyI=
feat(deps): bump github.com/goreleaser/nfpm/v2 from 2.30.1 to 2.31.0 (#4144) latest and greatest
2023-06-26 18:20:47 +02:00
github.com/xanzy/ssh-agent v0.3.3 h1:+/15pJfg/RsTxqYcX6fHqOXZwwMP+2VyYWJeWM2qQFM=
github.com/xanzy/ssh-agent v0.3.3/go.mod h1:6dzNDKs0J9rVPHPhaGCukekBHKqfl+L3KghI1Bc68Uw=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/xdg-go/pbkdf2 v1.0.0/go.mod h1:jrpuAogTd400dnrH08LKmI/xc1MbPOebTwRqcT5RDeI=
github.com/xdg-go/scram v1.0.2/go.mod h1:1WAq6h33pAW+iRreB34OORO2Nf7qel3VV3fjBj+hCSs=
feat(deps): bump gocloud.dev from 0.27.0 to 0.28.0 (#3689) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.27.0 to 0.28.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.28.0</h2> <p><strong>BREAKING CHANGES</strong>:</p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK.</li> <li><strong>blob/azureblob</strong>: Updated to match recent breaking changes in the Azure packages (yes, again).</li> <li><strong>pubsub/awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>blob</strong></p> <ul> <li><strong>memblob</strong>: Fixed bug where use of <code>BeforeCopy</code> callback would drop the actual copying.</li> <li><strong>azureblob</strong>: Updated to match recent breaking changes in the Azure packages.</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>all</strong>: Simplified and improved batch sizing, should resolve issues with too-frequent polling in some situations.</li> <li><strong>azurepubsub</strong>: Made <code>ListenerTimeout</code> configurable.</li> <li><strong>gcppubsub</strong> and <strong>awssnssqs</strong>: Support lazy mode for <code>Nack</code> (where no explicit <code>Nack</code> is sent).</li> <li><strong>awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>secrets</strong></p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK. Use azidentity.NewDefaultAzureCredential.</li> </ul> <p><strong>sql</strong></p> <ul> <li><strong>gcp/cloudsql</strong>: Fixed IAM login.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/24166090495b8e084a23aa7d11fcc81ec33e4729"><code>2416609</code></a> all: prep for v0.28.0 (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3207">#3207</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/13f46eb8065d5ea62b757f5f0f11a56f48faf7cc"><code>13f46eb</code></a> pubsub: simplify and improve batch sizing, especially for low message rates</li> <li><a href="https://github.com/google/go-cloud/commit/8f2c2b9a392a8e4a3d7a4942f88f3df607f8f6d0"><code>8f2c2b9</code></a> pubsub/memsub: Add Options for batching (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3205">#3205</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fe0a3d75fe43c039258df25ebf102602526e3052"><code>fe0a3d7</code></a> pubsub/awssqs: Fix BeforeSend/As to enable changes to the sqs input message (...</li> <li><a href="https://github.com/google/go-cloud/commit/dfaf95af34dd9022a69a061028e0ceec98e9c670"><code>dfaf95a</code></a> secrets/azurekeyvault: Use azidentity.NewDefaultAzureCredential to support ot...</li> <li><a href="https://github.com/google/go-cloud/commit/1e26311532928f060c490a7fbf2be92b55ee12c4"><code>1e26311</code></a> blob: Remove some debug logging (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3197">#3197</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/43ed5a499864c08b7b6549ff7085f19634a1f02c"><code>43ed5a4</code></a> pubsub/gcppubsub: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3195">#3195</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/be80e70b3dcf7a6b86481881c7ac0b44a8095178"><code>be80e70</code></a> pubsub/awssnssqs: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3194">#3194</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/7d690993a53cf8cc2e7af07872876d58601f1261"><code>7d69099</code></a> blob/azblob: Update to latest, and restore As for dirlist (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3191">#3191</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/e942f3c339f0eb617ac4dbc7f37cc4e5920ee7cc"><code>e942f3c</code></a> blob/azblob: Restore As for List entry (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3188">#3188</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.27.0...v0.28.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.27.0&new-version=0.28.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-11 14:09:51 +02:00
github.com/xdg-go/scram v1.1.1/go.mod h1:RaEWvsqvNKKvBPvcKeFjrG2cJqOkHTiyTpzz23ni57g=
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419) Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.1.1 to 2.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's releases</a>.</em></p> <blockquote> <h2>v2.2.1</h2> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's changelog</a>.</em></p> <blockquote> <h1>v2.2.1</h1> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign/commit/12cbf9ea177d22bbf5cf028bcb4712b5f174ebc6"><code>12cbf9e</code></a> add changelog for v2.2.1 release (<a href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/827f24e9d4a1f8e845cb1597d02053410f5bbe2a"><code>827f24e</code></a> feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8ac891ff0e29ddc67965423bee8f826219c6eb0f"><code>8ac891f</code></a> Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li><a href="https://github.com/sigstore/cosign/commit/8b366c497bd22b9be7742d057b8f59083dcadee0"><code>8b366c4</code></a> add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/23920de5623a505921ba4e62fa97e2553eff4699"><code>23920de</code></a> chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/e022e1c13240d1ae5b3c408bc53e389154331713"><code>e022e1c</code></a> chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/28c59c5eca6386924cc8f381afe94efe1e957679"><code>28c59c5</code></a> add missing groups key (<a href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8e5bdcc0ff39b8dc1b477251fef521601df76ec0"><code>8e5bdcc</code></a> chore(deps): bump github.com/google/certificate-transparency-go (<a href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/510cac4ef54274823599082e3a57a556ccd5c9e5"><code>510cac4</code></a> chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/063902b1d78fed7c12c9d9ce06248d36963e8169"><code>063902b</code></a> chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 18:39:49 +02:00
github.com/xdg-go/scram v1.1.2/go.mod h1:RT/sEzTbU5y00aCK8UOx6R7YryM0iF1N2MOmC3kKLN4=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/xdg-go/stringprep v1.0.2/go.mod h1:8F9zXuvzgwmyT5DUm4GUfZGDdT3W+LCvS6+da4O5kxM=
feat(deps): bump gocloud.dev from 0.27.0 to 0.28.0 (#3689) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.27.0 to 0.28.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.28.0</h2> <p><strong>BREAKING CHANGES</strong>:</p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK.</li> <li><strong>blob/azureblob</strong>: Updated to match recent breaking changes in the Azure packages (yes, again).</li> <li><strong>pubsub/awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>blob</strong></p> <ul> <li><strong>memblob</strong>: Fixed bug where use of <code>BeforeCopy</code> callback would drop the actual copying.</li> <li><strong>azureblob</strong>: Updated to match recent breaking changes in the Azure packages.</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>all</strong>: Simplified and improved batch sizing, should resolve issues with too-frequent polling in some situations.</li> <li><strong>azurepubsub</strong>: Made <code>ListenerTimeout</code> configurable.</li> <li><strong>gcppubsub</strong> and <strong>awssnssqs</strong>: Support lazy mode for <code>Nack</code> (where no explicit <code>Nack</code> is sent).</li> <li><strong>awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>secrets</strong></p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK. Use azidentity.NewDefaultAzureCredential.</li> </ul> <p><strong>sql</strong></p> <ul> <li><strong>gcp/cloudsql</strong>: Fixed IAM login.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/24166090495b8e084a23aa7d11fcc81ec33e4729"><code>2416609</code></a> all: prep for v0.28.0 (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3207">#3207</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/13f46eb8065d5ea62b757f5f0f11a56f48faf7cc"><code>13f46eb</code></a> pubsub: simplify and improve batch sizing, especially for low message rates</li> <li><a href="https://github.com/google/go-cloud/commit/8f2c2b9a392a8e4a3d7a4942f88f3df607f8f6d0"><code>8f2c2b9</code></a> pubsub/memsub: Add Options for batching (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3205">#3205</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fe0a3d75fe43c039258df25ebf102602526e3052"><code>fe0a3d7</code></a> pubsub/awssqs: Fix BeforeSend/As to enable changes to the sqs input message (...</li> <li><a href="https://github.com/google/go-cloud/commit/dfaf95af34dd9022a69a061028e0ceec98e9c670"><code>dfaf95a</code></a> secrets/azurekeyvault: Use azidentity.NewDefaultAzureCredential to support ot...</li> <li><a href="https://github.com/google/go-cloud/commit/1e26311532928f060c490a7fbf2be92b55ee12c4"><code>1e26311</code></a> blob: Remove some debug logging (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3197">#3197</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/43ed5a499864c08b7b6549ff7085f19634a1f02c"><code>43ed5a4</code></a> pubsub/gcppubsub: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3195">#3195</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/be80e70b3dcf7a6b86481881c7ac0b44a8095178"><code>be80e70</code></a> pubsub/awssnssqs: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3194">#3194</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/7d690993a53cf8cc2e7af07872876d58601f1261"><code>7d69099</code></a> blob/azblob: Update to latest, and restore As for dirlist (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3191">#3191</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/e942f3c339f0eb617ac4dbc7f37cc4e5920ee7cc"><code>e942f3c</code></a> blob/azblob: Restore As for List entry (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3188">#3188</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.27.0...v0.28.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.27.0&new-version=0.28.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-11 14:09:51 +02:00
github.com/xdg-go/stringprep v1.0.3/go.mod h1:W3f5j4i+9rC0kuIEJL0ky1VpHXQU3ocBgklLGvcBnW8=
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419) Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.1.1 to 2.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's releases</a>.</em></p> <blockquote> <h2>v2.2.1</h2> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's changelog</a>.</em></p> <blockquote> <h1>v2.2.1</h1> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign/commit/12cbf9ea177d22bbf5cf028bcb4712b5f174ebc6"><code>12cbf9e</code></a> add changelog for v2.2.1 release (<a href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/827f24e9d4a1f8e845cb1597d02053410f5bbe2a"><code>827f24e</code></a> feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8ac891ff0e29ddc67965423bee8f826219c6eb0f"><code>8ac891f</code></a> Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li><a href="https://github.com/sigstore/cosign/commit/8b366c497bd22b9be7742d057b8f59083dcadee0"><code>8b366c4</code></a> add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/23920de5623a505921ba4e62fa97e2553eff4699"><code>23920de</code></a> chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/e022e1c13240d1ae5b3c408bc53e389154331713"><code>e022e1c</code></a> chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/28c59c5eca6386924cc8f381afe94efe1e957679"><code>28c59c5</code></a> add missing groups key (<a href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8e5bdcc0ff39b8dc1b477251fef521601df76ec0"><code>8e5bdcc</code></a> chore(deps): bump github.com/google/certificate-transparency-go (<a href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/510cac4ef54274823599082e3a57a556ccd5c9e5"><code>510cac4</code></a> chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/063902b1d78fed7c12c9d9ce06248d36963e8169"><code>063902b</code></a> chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 18:39:49 +02:00
github.com/xdg-go/stringprep v1.0.4/go.mod h1:mPGuuIYwz7CmR2bT9j4GbQqutWS1zV24gijq1dTyGkM=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/xeipuuv/gojsonpointer v0.0.0-20180127040702-4e3ac2762d5f/go.mod h1:N2zxlSyiKSe5eX1tZViRH5QA0qijqEDrYZiPEAiq3wU=
feat: add ko support (#3653) continuing the PR by @developer-guy - [x] should be a publisher, as it does publish the images it builds every time - [x] `Default` method does not work - [x] the `fromConfig` thing should probably be on the defaults, too - [x] wire `--skip-ko` - [x] documentation - [x] more tests - [x] use same registry as docker tests does - [ ] see if we can make the log output match goreleaser's - [ ] ?? closes #2556 closes #3490 Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com> Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> Co-authored-by: actions-user <actions@github.com> Co-authored-by: Jason Hall <jason@chainguard.dev> Co-authored-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2023-01-17 03:34:49 +02:00
github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb h1:zGWFAtiMcyryUHoUjUJX0/lt1H2+i2Ka2n+D3DImSNo=
github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb/go.mod h1:N2zxlSyiKSe5eX1tZViRH5QA0qijqEDrYZiPEAiq3wU=
refactor: improving minio and docker tests (#3642) using ory/dockertest to simplify integration tests Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-12-15 15:25:52 +02:00
github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 h1:EzJWgHovont7NscjpAxXsDA8S8BMYve8Y5+7cuRE7R0=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415/go.mod h1:GwrjFmJcFw6At/Gs6z4yjiIwzuJ1/+UwLxMQDVQXShQ=
refactor: improving minio and docker tests (#3642) using ory/dockertest to simplify integration tests Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-12-15 15:25:52 +02:00
github.com/xeipuuv/gojsonschema v1.2.0 h1:LhYJRs+L4fBtjZUfuSZIKGeVu0QRy8e5Xi7D17UxZ74=
github.com/xeipuuv/gojsonschema v1.2.0/go.mod h1:anYRn/JVcOK2ZgGU+IjEV4nwlhoK5sQluxsYJ78Id3Y=
feat: nfpm without rpmbuild (#1187) thanks @djgilcrease for all the hard work on nfpm and google/rpmpack. thanks to @jarondl who works on rpmpack as well. great work everyone! 🚀 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2019-10-11 14:00:19 +02:00
github.com/xi2/xz v0.0.0-20171230120015-48954b6210f8 h1:nIPpBwaJSVYIxUFsDv3M8ofmx9yWTog9BfvIu0q41lo=
chore: go mod tidy Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-09-13 19:03:05 +02:00
github.com/xi2/xz v0.0.0-20171230120015-48954b6210f8/go.mod h1:HUYIGzjTL3rfEspMxjDjgmT5uz5wzYJKVo23qUhYTos=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
github.com/youmark/pkcs8 v0.0.0-20181117223130-1be2e3e5546d/go.mod h1:rHwXgn7JulP+udvsHwJoVG1YGAP6VLg4y9I5dyZdqmA=
chore(deps): bump github.com/golangci/golangci-lint from 1.23.7 to 1.27.0 (#1563) * chore(deps): bump github.com/golangci/golangci-lint from 1.23.7 to 1.27.0 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: tests Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2020-05-26 05:48:10 +02:00
github.com/yuin/goldmark v1.1.25/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
github.com/yuin/goldmark v1.1.27/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
chore(deps): bump github.com/golangci/golangci-lint (#1691) Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.28.3 to 1.29.0. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.28.3...v1.29.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-07-21 14:22:33 +02:00
github.com/yuin/goldmark v1.1.32/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
chore(deps): bump github.com/golangci/golangci-lint from 1.31.0 to 1.32.2 (#1882) * chore(deps): bump github.com/golangci/golangci-lint Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.31.0 to 1.32.2. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.31.0...v1.32.2) Signed-off-by: dependabot[bot] <support@github.com> * fix: lint issues Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * refactor: lint issues Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2020-11-10 16:15:03 +02:00
github.com/yuin/goldmark v1.2.1/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
feat(deps): bump gocloud.dev from 0.27.0 to 0.28.0 (#3689) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.27.0 to 0.28.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.28.0</h2> <p><strong>BREAKING CHANGES</strong>:</p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK.</li> <li><strong>blob/azureblob</strong>: Updated to match recent breaking changes in the Azure packages (yes, again).</li> <li><strong>pubsub/awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>blob</strong></p> <ul> <li><strong>memblob</strong>: Fixed bug where use of <code>BeforeCopy</code> callback would drop the actual copying.</li> <li><strong>azureblob</strong>: Updated to match recent breaking changes in the Azure packages.</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>all</strong>: Simplified and improved batch sizing, should resolve issues with too-frequent polling in some situations.</li> <li><strong>azurepubsub</strong>: Made <code>ListenerTimeout</code> configurable.</li> <li><strong>gcppubsub</strong> and <strong>awssnssqs</strong>: Support lazy mode for <code>Nack</code> (where no explicit <code>Nack</code> is sent).</li> <li><strong>awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>secrets</strong></p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK. Use azidentity.NewDefaultAzureCredential.</li> </ul> <p><strong>sql</strong></p> <ul> <li><strong>gcp/cloudsql</strong>: Fixed IAM login.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/24166090495b8e084a23aa7d11fcc81ec33e4729"><code>2416609</code></a> all: prep for v0.28.0 (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3207">#3207</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/13f46eb8065d5ea62b757f5f0f11a56f48faf7cc"><code>13f46eb</code></a> pubsub: simplify and improve batch sizing, especially for low message rates</li> <li><a href="https://github.com/google/go-cloud/commit/8f2c2b9a392a8e4a3d7a4942f88f3df607f8f6d0"><code>8f2c2b9</code></a> pubsub/memsub: Add Options for batching (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3205">#3205</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fe0a3d75fe43c039258df25ebf102602526e3052"><code>fe0a3d7</code></a> pubsub/awssqs: Fix BeforeSend/As to enable changes to the sqs input message (...</li> <li><a href="https://github.com/google/go-cloud/commit/dfaf95af34dd9022a69a061028e0ceec98e9c670"><code>dfaf95a</code></a> secrets/azurekeyvault: Use azidentity.NewDefaultAzureCredential to support ot...</li> <li><a href="https://github.com/google/go-cloud/commit/1e26311532928f060c490a7fbf2be92b55ee12c4"><code>1e26311</code></a> blob: Remove some debug logging (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3197">#3197</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/43ed5a499864c08b7b6549ff7085f19634a1f02c"><code>43ed5a4</code></a> pubsub/gcppubsub: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3195">#3195</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/be80e70b3dcf7a6b86481881c7ac0b44a8095178"><code>be80e70</code></a> pubsub/awssnssqs: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3194">#3194</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/7d690993a53cf8cc2e7af07872876d58601f1261"><code>7d69099</code></a> blob/azblob: Update to latest, and restore As for dirlist (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3191">#3191</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/e942f3c339f0eb617ac4dbc7f37cc4e5920ee7cc"><code>e942f3c</code></a> blob/azblob: Restore As for List entry (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3188">#3188</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.27.0...v0.28.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.27.0&new-version=0.28.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-11 14:09:51 +02:00
github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
feat(deps): update nfpm to v2.18.0 (#3311) Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-08-16 06:00:17 +02:00
gitlab.com/digitalxero/go-conventional-commit v1.0.7 h1:8/dO6WWG+98PMhlZowt/YjuiKhqhGlOCwlIV8SqqGh8=
gitlab.com/digitalxero/go-conventional-commit v1.0.7/go.mod h1:05Xc2BFsSyC5tKhK0y+P3bs0AwUtNuTp+mTpbCU/DZ0=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
go.mongodb.org/mongo-driver v1.7.3/go.mod h1:NqaYOwnXWr5Pm7AOpO5QFxKJ503nbMse/R79oO62zWg=
go.mongodb.org/mongo-driver v1.7.5/go.mod h1:VXEWRZ6URJIkUq2SCAyapmhH0ZLRBP+FT4xhp5Zvxng=
feat(deps): bump gocloud.dev from 0.27.0 to 0.28.0 (#3689) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.27.0 to 0.28.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.28.0</h2> <p><strong>BREAKING CHANGES</strong>:</p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK.</li> <li><strong>blob/azureblob</strong>: Updated to match recent breaking changes in the Azure packages (yes, again).</li> <li><strong>pubsub/awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>blob</strong></p> <ul> <li><strong>memblob</strong>: Fixed bug where use of <code>BeforeCopy</code> callback would drop the actual copying.</li> <li><strong>azureblob</strong>: Updated to match recent breaking changes in the Azure packages.</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>all</strong>: Simplified and improved batch sizing, should resolve issues with too-frequent polling in some situations.</li> <li><strong>azurepubsub</strong>: Made <code>ListenerTimeout</code> configurable.</li> <li><strong>gcppubsub</strong> and <strong>awssnssqs</strong>: Support lazy mode for <code>Nack</code> (where no explicit <code>Nack</code> is sent).</li> <li><strong>awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>secrets</strong></p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK. Use azidentity.NewDefaultAzureCredential.</li> </ul> <p><strong>sql</strong></p> <ul> <li><strong>gcp/cloudsql</strong>: Fixed IAM login.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/24166090495b8e084a23aa7d11fcc81ec33e4729"><code>2416609</code></a> all: prep for v0.28.0 (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3207">#3207</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/13f46eb8065d5ea62b757f5f0f11a56f48faf7cc"><code>13f46eb</code></a> pubsub: simplify and improve batch sizing, especially for low message rates</li> <li><a href="https://github.com/google/go-cloud/commit/8f2c2b9a392a8e4a3d7a4942f88f3df607f8f6d0"><code>8f2c2b9</code></a> pubsub/memsub: Add Options for batching (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3205">#3205</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fe0a3d75fe43c039258df25ebf102602526e3052"><code>fe0a3d7</code></a> pubsub/awssqs: Fix BeforeSend/As to enable changes to the sqs input message (...</li> <li><a href="https://github.com/google/go-cloud/commit/dfaf95af34dd9022a69a061028e0ceec98e9c670"><code>dfaf95a</code></a> secrets/azurekeyvault: Use azidentity.NewDefaultAzureCredential to support ot...</li> <li><a href="https://github.com/google/go-cloud/commit/1e26311532928f060c490a7fbf2be92b55ee12c4"><code>1e26311</code></a> blob: Remove some debug logging (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3197">#3197</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/43ed5a499864c08b7b6549ff7085f19634a1f02c"><code>43ed5a4</code></a> pubsub/gcppubsub: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3195">#3195</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/be80e70b3dcf7a6b86481881c7ac0b44a8095178"><code>be80e70</code></a> pubsub/awssnssqs: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3194">#3194</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/7d690993a53cf8cc2e7af07872876d58601f1261"><code>7d69099</code></a> blob/azblob: Update to latest, and restore As for dirlist (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3191">#3191</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/e942f3c339f0eb617ac4dbc7f37cc4e5920ee7cc"><code>e942f3c</code></a> blob/azblob: Restore As for List entry (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3188">#3188</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.27.0...v0.28.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.27.0&new-version=0.28.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-11 14:09:51 +02:00
go.mongodb.org/mongo-driver v1.10.0/go.mod h1:wsihk0Kdgv8Kqu1Anit4sfK+22vSFbUrAVEYRhCXrA8=
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419) Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.1.1 to 2.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's releases</a>.</em></p> <blockquote> <h2>v2.2.1</h2> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's changelog</a>.</em></p> <blockquote> <h1>v2.2.1</h1> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign/commit/12cbf9ea177d22bbf5cf028bcb4712b5f174ebc6"><code>12cbf9e</code></a> add changelog for v2.2.1 release (<a href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/827f24e9d4a1f8e845cb1597d02053410f5bbe2a"><code>827f24e</code></a> feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8ac891ff0e29ddc67965423bee8f826219c6eb0f"><code>8ac891f</code></a> Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li><a href="https://github.com/sigstore/cosign/commit/8b366c497bd22b9be7742d057b8f59083dcadee0"><code>8b366c4</code></a> add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/23920de5623a505921ba4e62fa97e2553eff4699"><code>23920de</code></a> chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/e022e1c13240d1ae5b3c408bc53e389154331713"><code>e022e1c</code></a> chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/28c59c5eca6386924cc8f381afe94efe1e957679"><code>28c59c5</code></a> add missing groups key (<a href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8e5bdcc0ff39b8dc1b477251fef521601df76ec0"><code>8e5bdcc</code></a> chore(deps): bump github.com/google/certificate-transparency-go (<a href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/510cac4ef54274823599082e3a57a556ccd5c9e5"><code>510cac4</code></a> chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/063902b1d78fed7c12c9d9ce06248d36963e8169"><code>063902b</code></a> chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 18:39:49 +02:00
go.mongodb.org/mongo-driver v1.12.1 h1:nLkghSU8fQNaK7oUmDhQFsnrtcoNy7Z6LVFKsEecqgE=
go.mongodb.org/mongo-driver v1.12.1/go.mod h1:/rGBTebI3XYboVmgz+Wv3Bcbl3aD0QF9zl6kDDw18rQ=
feat: add gitlab for releases (#1038) * outlines gitlab client integration * makes client parameter more explicit * adds gitlab url to config * changes releaseID to string to adapt to gitlab * updates to latest gitlab client lib 0.18 * fixes copy paster in gitlab upload func * fixes gitlab typo in config * adds gitlab token to env and context * release now uses the client factory method * skips brew pipe if it is not a github release * add github tokentype to publish tests * skips scoop pipe if it is not a github release * corrects brew skip msg * adds gitlab token to main test * adds gitlab to release docs * validates config and errors accordingly * adapt release pipe name to include gitlab * fixes gitlab client after testing * moves not-configured brew and scoop pipe checks as first check * adds more debug to gitlab client * adapts changelog generation for gitlab markdown * adds debug log for gitlab changelog * env needs to run before changelog pipe * moves gitlab default download url to default pipe * moves multiple releases check to from config to release pipe * release differs now for github and gitlab * adds debug gitlab release update msgs * moves env pipe as second after before because it determines the token type other pipes depend on * adaptes error check on gitlab release creation * Revert "adaptes error check on gitlab release creation" This reverts commit 032024571c76140f8e2207ee01cc08088f37594b. * simplifies gitlab client logic. removes comments * skips tls verification for gitlab client if specified in config * updates the docs * adds clarification that brew and scoop are not supported if it is a gitlab release * fixes copy paster in release.md * adds missing blob pipe in defaults and publish due to missing in merge * updates comment in gitlab client
2019-06-29 16:02:40 +02:00
go.opencensus.io v0.21.0/go.mod h1:mSImk1erAIZhrmZN+AvHh14ztQfjbGwt4TtuofqLduU=
feat: go 1.13 (#1135) * feat: go 1.13 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: go.mod Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: update to go 1.13 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * bump: deps Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: deps Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: trying replace Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: go mod init Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: disable funlen lint Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2019-09-13 14:53:56 +02:00
go.opencensus.io v0.22.0/go.mod h1:+kGneAE2xo2IficOXnaByMWTGM9T73dGwxeWcUqIpI8=
chore(deps): bump gocloud.dev from 0.18.0 to 0.19.0 (#1340) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.18.0 to 0.19.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.18.0...v0.19.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-02-17 14:56:49 +02:00
go.opencensus.io v0.22.2/go.mod h1:yxeiOL68Rb0Xd1ddK5vPZ/oVn4vY4Ynel7k9FzqtOIw=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
go.opencensus.io v0.22.3/go.mod h1:yxeiOL68Rb0Xd1ddK5vPZ/oVn4vY4Ynel7k9FzqtOIw=
chore(deps): bump gocloud.dev from 0.20.0 to 0.21.0 (#1941) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.20.0 to 0.21.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.20.0...v0.21.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-12 01:14:58 +02:00
go.opencensus.io v0.22.4/go.mod h1:yxeiOL68Rb0Xd1ddK5vPZ/oVn4vY4Ynel7k9FzqtOIw=
go.opencensus.io v0.22.5/go.mod h1:5pWMHQbX5EPX2/62yrJeAkowc+lfs/XD7Uxpq3pI6kk=
feat(deps): bump gocloud.dev from 0.27.0 to 0.28.0 (#3689) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.27.0 to 0.28.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.28.0</h2> <p><strong>BREAKING CHANGES</strong>:</p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK.</li> <li><strong>blob/azureblob</strong>: Updated to match recent breaking changes in the Azure packages (yes, again).</li> <li><strong>pubsub/awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>blob</strong></p> <ul> <li><strong>memblob</strong>: Fixed bug where use of <code>BeforeCopy</code> callback would drop the actual copying.</li> <li><strong>azureblob</strong>: Updated to match recent breaking changes in the Azure packages.</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>all</strong>: Simplified and improved batch sizing, should resolve issues with too-frequent polling in some situations.</li> <li><strong>azurepubsub</strong>: Made <code>ListenerTimeout</code> configurable.</li> <li><strong>gcppubsub</strong> and <strong>awssnssqs</strong>: Support lazy mode for <code>Nack</code> (where no explicit <code>Nack</code> is sent).</li> <li><strong>awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>secrets</strong></p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK. Use azidentity.NewDefaultAzureCredential.</li> </ul> <p><strong>sql</strong></p> <ul> <li><strong>gcp/cloudsql</strong>: Fixed IAM login.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/24166090495b8e084a23aa7d11fcc81ec33e4729"><code>2416609</code></a> all: prep for v0.28.0 (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3207">#3207</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/13f46eb8065d5ea62b757f5f0f11a56f48faf7cc"><code>13f46eb</code></a> pubsub: simplify and improve batch sizing, especially for low message rates</li> <li><a href="https://github.com/google/go-cloud/commit/8f2c2b9a392a8e4a3d7a4942f88f3df607f8f6d0"><code>8f2c2b9</code></a> pubsub/memsub: Add Options for batching (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3205">#3205</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fe0a3d75fe43c039258df25ebf102602526e3052"><code>fe0a3d7</code></a> pubsub/awssqs: Fix BeforeSend/As to enable changes to the sqs input message (...</li> <li><a href="https://github.com/google/go-cloud/commit/dfaf95af34dd9022a69a061028e0ceec98e9c670"><code>dfaf95a</code></a> secrets/azurekeyvault: Use azidentity.NewDefaultAzureCredential to support ot...</li> <li><a href="https://github.com/google/go-cloud/commit/1e26311532928f060c490a7fbf2be92b55ee12c4"><code>1e26311</code></a> blob: Remove some debug logging (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3197">#3197</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/43ed5a499864c08b7b6549ff7085f19634a1f02c"><code>43ed5a4</code></a> pubsub/gcppubsub: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3195">#3195</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/be80e70b3dcf7a6b86481881c7ac0b44a8095178"><code>be80e70</code></a> pubsub/awssnssqs: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3194">#3194</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/7d690993a53cf8cc2e7af07872876d58601f1261"><code>7d69099</code></a> blob/azblob: Update to latest, and restore As for dirlist (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3191">#3191</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/e942f3c339f0eb617ac4dbc7f37cc4e5920ee7cc"><code>e942f3c</code></a> blob/azblob: Restore As for List entry (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3188">#3188</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.27.0...v0.28.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.27.0&new-version=0.28.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-11 14:09:51 +02:00
go.opencensus.io v0.24.0 h1:y73uSU6J157QMP2kn2r30vwW1A2W2WFwSCGnAVxeaD0=
go.opencensus.io v0.24.0/go.mod h1:vNK8G9p7aAivkbmorf4v+7Hgx+Zs0yY+0fOtgBfjQKo=
feat(deps): bump the gomod-deps group with 3 updates (#4200) Bumps the gomod-deps group with 3 updates: [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab), [gocloud.dev](https://github.com/google/go-cloud) and [go.uber.org/automaxprocs](https://github.com/uber-go/automaxprocs). Updates `github.com/xanzy/go-gitlab` from 0.86.0 to 0.88.0 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/xanzy/go-gitlab/commit/7e3c23c9c221c0a334e11356503a99d41f206651"><code>7e3c23c</code></a> Update pipeline tests</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/2ac3eea05ffd9c096624ce3f88bf88132940b025"><code>2ac3eea</code></a> Merge pull request <a href="https://redirect.github.com/xanzy/go-gitlab/issues/1758">#1758</a> from billiechar/billiechar-snippet-moves</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/ddb5ca097455e3087ade383fec32ab07d24cb2c0"><code>ddb5ca0</code></a> Update the PR to make the code consistent</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/a4d27d6848beb49923d87d6201330f869f230f8b"><code>a4d27d6</code></a> Merge pull request <a href="https://redirect.github.com/xanzy/go-gitlab/issues/1759">#1759</a> from PatrickRice-KSC/add-missing-housekeeping-setting</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/a42af8593e45e5a55a6008e482ecbc3dc6f5d06b"><code>a42af85</code></a> Change PipelineTestCases.SystemOutput to interface{}</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/89486a0530374b782bb0267664a5bd49394fbb31"><code>89486a0</code></a> Add missing housekeeping setting</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/852645c7728d7a4284053806b68682b2905c856a"><code>852645c</code></a> Update tests</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/f2c344ca14c5829c55154263b6504d57b26126c3"><code>f2c344c</code></a> Use separate options for each schedule</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/86dd6321cdc296bc3f9a065718e58ea33cb1e686"><code>86dd632</code></a> Add snippet repository storage move APIs</li> <li><a href="https://github.com/xanzy/go-gitlab/commit/3c1f9bfa0d349acfb0aba8991a1abdf62495ee81"><code>3c1f9bf</code></a> Use io.ReadAll instead of ioutil.ReadAll</li> <li>Additional commits viewable in <a href="https://github.com/xanzy/go-gitlab/compare/v0.86.0...v0.88.0">compare view</a></li> </ul> </details> <br /> Updates `gocloud.dev` from 0.30.0 to 0.32.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.32.0</h2> <p>Redoing <code>v0.31.0</code> since I think I messed up the tags. Copying the release notes:</p> <p><strong>all</strong></p> <ul> <li>Update <code>go</code> version in <code>go.mod</code> to maintain cleaner <code>go.mod</code> and <code>go.sum</code> files.</li> </ul> <p><strong>blob</strong></p> <ul> <li><strong>all</strong>: Pass through reader/writer to <code>WriteTo</code>/<code>ReadFrom</code> if available (optimization).</li> <li><strong>all</strong>: Make <code>blob.Bucket</code> implement <code>io/fs.FS</code> and <code>io/fs.SubFS</code>.</li> <li><strong>gcsblob</strong>: Add support for forcing an unauthenticated client.</li> </ul> <p><strong>server</strong></p> <ul> <li>Make <code>requestlog</code> internal structs implement <code>http.Flusher</code>.</li> <li>Don't always read the full request in order to calculate the request size; use <code>Content-Length</code> when available.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/728b7c1395cb35d23e85ee0a8e957744e2560183"><code>728b7c1</code></a> all: prerelease take 2 (<a href="https://redirect.github.com/google/go-cloud/issues/3278">#3278</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/838a8fd9b6b7efc90b55cb5ed10e19463cbb1262"><code>838a8fd</code></a> all: prerelease (<a href="https://redirect.github.com/google/go-cloud/issues/3277">#3277</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0f33c81c8dbec9d5302d9615b95c5ba878e0ede9"><code>0f33c81</code></a> all: add dragonfly build to test suite (<a href="https://redirect.github.com/google/go-cloud/issues/3268">#3268</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/bfd1b284ad86ce55bd0a7bc3e1c27fc8814fb87a"><code>bfd1b28</code></a> all: update dependencies (<a href="https://redirect.github.com/google/go-cloud/issues/3276">#3276</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8d4590ac1e51bca704bc85422cb0a2f2d0b1b7ba"><code>8d4590a</code></a> server/requestlog: Don't consume entire body just to get a request size (<a href="https://redirect.github.com/google/go-cloud/issues/3274">#3274</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/a1d9f4295c59f30b30a085682b47e314c6960673"><code>a1d9f42</code></a> server/requestlog: make responseStats implement http.Flusher (<a href="https://redirect.github.com/google/go-cloud/issues/3275">#3275</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cab06ea136cfdd73f67300332994f81234469bc"><code>8cab06e</code></a> blob/gcsblob: add support for forcing an authenticated client (<a href="https://redirect.github.com/google/go-cloud/issues/3273">#3273</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0e5728dd337838e82e07e03dcef9f54dfc04cc52"><code>0e5728d</code></a> blob: make blob.Bucket implement io/fs.FS and io/fs.SubFS (<a href="https://redirect.github.com/google/go-cloud/issues/3272">#3272</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/a6551792237ccc995a6e95169210ac8e77dbcd94"><code>a655179</code></a> all: update go.mod files to go 1.19 (<a href="https://redirect.github.com/google/go-cloud/issues/3271">#3271</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8385fc39c70f6589823ca019e399f5514feb377d"><code>8385fc3</code></a> blob: pass through reader/writer to <code>WriteTo</code>/<code>ReadFrom</code> if available (<a href="https://redirect.github.com/google/go-cloud/issues/3267">#3267</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.30.0...v0.32.0">compare view</a></li> </ul> </details> <br /> Updates `go.uber.org/automaxprocs` from 1.5.2 to 1.5.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/uber-go/automaxprocs/releases">go.uber.org/automaxprocs's releases</a>.</em></p> <blockquote> <h2>v1.5.3</h2> <ul> <li>Fix mountinfo parsing when super options have fields with spaces.</li> <li>Fix division by zero while parsing cgroups.</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/uber-go/automaxprocs/blob/master/CHANGELOG.md">go.uber.org/automaxprocs's changelog</a>.</em></p> <blockquote> <h2>v1.5.3 (2023-07-19)</h2> <ul> <li>Fix mountinfo parsing when super options have fields with spaces.</li> <li>Fix division by zero while parsing cgroups.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/uber-go/automaxprocs/commit/e83e959d8845f659d02749ba5598fd62a7129e4e"><code>e83e959</code></a> Release v1.5.3 (<a href="https://redirect.github.com/uber-go/automaxprocs/issues/77">#77</a>)</li> <li><a href="https://github.com/uber-go/automaxprocs/commit/94404505e072633727945d6adc276be8759dadcf"><code>9440450</code></a> Update actions (<a href="https://redirect.github.com/uber-go/automaxprocs/issues/76">#76</a>)</li> <li><a href="https://github.com/uber-go/automaxprocs/commit/4b0a5c9c3c30af086d1251cecd4114b7d4b55a45"><code>4b0a5c9</code></a> set CI perms to readonly (<a href="https://redirect.github.com/uber-go/automaxprocs/issues/75">#75</a>)</li> <li><a href="https://github.com/uber-go/automaxprocs/commit/c64632e175f532a5fe994622797d70b06338337e"><code>c64632e</code></a> Drop Go 1.17 and Go 1.18 from CI (<a href="https://redirect.github.com/uber-go/automaxprocs/issues/74">#74</a>)</li> <li><a href="https://github.com/uber-go/automaxprocs/commit/60f22786b2d20055ca8d888ed455a25aed935bea"><code>60f2278</code></a> fix: mountinfo parsing (<a href="https://redirect.github.com/uber-go/automaxprocs/issues/73">#73</a>)</li> <li><a href="https://github.com/uber-go/automaxprocs/commit/d064ede19db88036b1a2fb6b41113717a84dfda2"><code>d064ede</code></a> Fix division by zero (<a href="https://redirect.github.com/uber-go/automaxprocs/issues/71">#71</a>)</li> <li>See full diff in <a href="https://github.com/uber-go/automaxprocs/compare/v1.5.2...v1.5.3">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-20 14:56:26 +02:00
go.uber.org/automaxprocs v1.5.3 h1:kWazyxZUrS3Gs4qUpbwo5kEIMGe/DAvi5Z4tl2NW4j8=
go.uber.org/automaxprocs v1.5.3/go.mod h1:eRbA25aqJrxAbsLO0xy5jVwPt7FQnRgjW+efnwa1WM0=
feat(deps): bump github.com/google/ko from 0.14.1 to 0.15.0 (#4373) Bumps [github.com/google/ko](https://github.com/google/ko) from 0.14.1 to 0.15.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/ko/releases">github.com/google/ko's releases</a>.</em></p> <blockquote> <h2>v0.15.0</h2> <h2>What's Changed</h2> <ul> <li>implement dumb cache for images by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1102">ko-build/ko#1102</a></li> <li>fixed typo in configuration.md by <a href="https://github.com/samlaf"><code>@​samlaf</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1105">ko-build/ko#1105</a></li> <li>pkg/commands: fix dropped errors by <a href="https://github.com/alrs"><code>@​alrs</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1109">ko-build/ko#1109</a></li> <li>ci: add govulncheck by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1110">ko-build/ko#1110</a></li> <li>chore: remove refs to deprecated io/ioutil by <a href="https://github.com/testwill"><code>@​testwill</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1092">ko-build/ko#1092</a></li> <li>Update install docs to install ko using Scoop by <a href="https://github.com/pgrunm"><code>@​pgrunm</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1118">ko-build/ko#1118</a></li> <li>include go build output in build error by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1127">ko-build/ko#1127</a></li> <li>Use go1.21, clean up ci and drop go1.19 by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1137">ko-build/ko#1137</a></li> <li>Update e2e.yaml by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1141">ko-build/ko#1141</a></li> <li>handle newfound lint errors by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1142">ko-build/ko#1142</a></li> <li>fix test broken by lint fix by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1143">ko-build/ko#1143</a></li> <li>Bump actions/checkout from 3.6.0 to 4.0.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1136">ko-build/ko#1136</a></li> <li>fix env var for go env by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1140">ko-build/ko#1140</a></li> <li>docs: add docs for TF and Lambda by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1139">ko-build/ko#1139</a></li> <li>docs: add Lambda and TF pages to sidebar by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1144">ko-build/ko#1144</a></li> <li>include example using go packages by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1145">ko-build/ko#1145</a></li> <li>fix the release workflow and install instructions by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1150">ko-build/ko#1150</a></li> <li>update missing places that was using go1.20 by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1163">ko-build/ko#1163</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/samlaf"><code>@​samlaf</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1105">ko-build/ko#1105</a></li> <li><a href="https://github.com/alrs"><code>@​alrs</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1109">ko-build/ko#1109</a></li> <li><a href="https://github.com/testwill"><code>@​testwill</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1092">ko-build/ko#1092</a></li> <li><a href="https://github.com/pgrunm"><code>@​pgrunm</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1118">ko-build/ko#1118</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/ko-build/ko/compare/v0.14.1...v0.15.0">https://github.com/ko-build/ko/compare/v0.14.1...v0.15.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ko-build/ko/commit/31035ad2026bfbafaa4f009baefe72463af1b3a7"><code>31035ad</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1164">#1164</a> from ko-build/dependabot/go_modules/golang.org/x/net...</li> <li><a href="https://github.com/ko-build/ko/commit/ba952fd091f9d27ee5c136e842b5e94dd715100c"><code>ba952fd</code></a> Bump golang.org/x/net from 0.16.0 to 0.17.0</li> <li><a href="https://github.com/ko-build/ko/commit/277f5d74353950c8663fc04b7546f66e57bd6aaf"><code>277f5d7</code></a> update missing places that was using go1.20 (<a href="https://redirect.github.com/google/ko/issues/1163">#1163</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/b8b3b21f8348d7cab863fe1b4eaa47dfc47632da"><code>b8b3b21</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1162">#1162</a> from ko-build/dependabot/go_modules/github.com/googl...</li> <li><a href="https://github.com/ko-build/ko/commit/4890ab2887b653d3c340de4d119bfd17b703f182"><code>4890ab2</code></a> Bump github.com/google/go-cmp from 0.5.9 to 0.6.0</li> <li><a href="https://github.com/ko-build/ko/commit/30b62aee3faf6866cee6513ea7eb13f5a27cd7ca"><code>30b62ae</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1161">#1161</a> from ko-build/dependabot/go_modules/github.com/spf13...</li> <li><a href="https://github.com/ko-build/ko/commit/449bcb61926cb3e3bcf191e8ca53fad5ab3a4e3c"><code>449bcb6</code></a> Bump github.com/spf13/viper from 1.16.0 to 1.17.0</li> <li><a href="https://github.com/ko-build/ko/commit/c543dd83cc75cd849fb95637ea29e3c7c66d6f87"><code>c543dd8</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1160">#1160</a> from ko-build/dependabot/go_modules/golang.org/x/too...</li> <li><a href="https://github.com/ko-build/ko/commit/c1ae5f5ce4fe058830f24827c853d4db39a95250"><code>c1ae5f5</code></a> Bump golang.org/x/tools from 0.13.0 to 0.14.0</li> <li><a href="https://github.com/ko-build/ko/commit/e50d2fd5ff0ec88ac837ffe6f6c2f122eb54b9f8"><code>e50d2fd</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1159">#1159</a> from ko-build/dependabot/go_modules/golang.org/x/syn...</li> <li>Additional commits viewable in <a href="https://github.com/google/ko/compare/v0.14.1...v0.15.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/ko&package-manager=go_modules&previous-version=0.14.1&new-version=0.15.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-17 17:47:47 +02:00
go.uber.org/multierr v1.11.0 h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0=
go.uber.org/multierr v1.11.0/go.mod h1:20+QtiLqy0Nd6FdQB9TLXag12DsQkrbs3htMFfDN80Y=
feat(deps): bump gocloud.dev from 0.34.0 to 0.35.0 (#4467) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.34.0 to 0.35.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.35.0</h2> <p><strong>BREAKING CHANGES</strong></p> <p>This release updates the dependency on AWS/S3, which included some breaking changes; see <a href="https://redirect.github.com/google/go-cloud/pull/3342">google/go-cloud#3342</a> for details.</p> <p><strong>blob</strong></p> <ul> <li><em>gcsblob</em>: Fix unauthenticated requests.</li> </ul> <p><strong>runtimevar</strong></p> <ul> <li><em>constantvar</em>: Add support for reading the constant variable value from the environment.</li> </ul> <p><strong>docstore</strong></p> <ul> <li><em>gcpfilestore</em>: Add support for non-default databases.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/27e0bca95dae3165b94cab4f9b7e2e4b087c8aef"><code>27e0bca</code></a> all: prep for release (<a href="https://redirect.github.com/google/go-cloud/issues/3350">#3350</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/53ccd8db26a14fd2a40bfcb28af1a1ceba4663f4"><code>53ccd8d</code></a> all: update deps, including a breaking S3 change (<a href="https://redirect.github.com/google/go-cloud/issues/3342">#3342</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fa413a39cdf8ffe0890a1b0a4cf5e06e0c915592"><code>fa413a3</code></a> docstore/gcpfilestore: add support for non-default databases. (<a href="https://redirect.github.com/google/go-cloud/issues/3345">#3345</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/c04000b96462ad3ec62e633eafd759185991bb27"><code>c04000b</code></a> secrets/hashivault: Update go-jose per dependabot (<a href="https://redirect.github.com/google/go-cloud/issues/3346">#3346</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/6d5d2890816abc88cd11ef13d6cd6506eb5b5537"><code>6d5d289</code></a> pubsub/natspubsub: upgrade a dependency (<a href="https://redirect.github.com/google/go-cloud/issues/3336">#3336</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/375e097193225b4ef300a336e04ccad9ace50bc1"><code>375e097</code></a> pubsub/natspubsub: Update dependency (<a href="https://redirect.github.com/google/go-cloud/issues/3331">#3331</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/35ac324ff7fae5ddc0f9dc2ff234a7d6b4935a20"><code>35ac324</code></a> all: update dependencies (<a href="https://redirect.github.com/google/go-cloud/issues/3329">#3329</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/4a18be0f4a48c145da4a76499485a45478fd69aa"><code>4a18be0</code></a> secrets/awskms: update the example for the AWS ARN use case (<a href="https://redirect.github.com/google/go-cloud/issues/3320">#3320</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/486d484a8f73fd5bedc910d4fd89c52e11412e68"><code>486d484</code></a> kafkapubsub: rename dependency Shopify/sarama to IBM/sarama (<a href="https://redirect.github.com/google/go-cloud/issues/3319">#3319</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/db7e808e313228ed8607a94d6e5cd075d66f4e86"><code>db7e808</code></a> runtimevar/constantvar: Add support for reading the constantvar from an envir...</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.34.0...v0.35.0">compare view</a></li> </ul> </details> <br /> <details> <summary>Most Recent Ignore Conditions Applied to This Pull Request</summary> | Dependency Name | Ignore Conditions | | --- | --- | | gocloud.dev | [>= 0.25.a, < 0.26] | </details> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.34.0&new-version=0.35.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-11 12:55:26 +02:00
gocloud.dev v0.35.0 h1:x/Gtt5OJdT4j+ir1AXAIXb7bBnFawXAAaJptCUGk3HU=
gocloud.dev v0.35.0/go.mod h1:wbyF+BhfdtLWyUtVEWRW13hFLb1vXnV2ovEhYGQe3ck=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
golang.org/x/crypto v0.0.0-20180904163835-0709b304e793/go.mod h1:6SG95UA2DQfeDnfUPMdvaQW0Q7yPrPDi9nlGo2tz2b4=
feat: update go-github (#1012)
2019-04-22 14:44:08 +02:00
golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
golang.org/x/crypto v0.0.0-20190422162423-af44ce270edf/go.mod h1:WFFai1msRO1wXaEeE5yQxYXgSfI8pQAWXbQop6sCtWE=
feat: Use tools.go paradigm for external dependencies (#1495) Co-authored-by: CrazyMax <crazy-max@users.noreply.github.com>
2020-05-10 21:34:55 +02:00
golang.org/x/crypto v0.0.0-20190510104115-cbcb75029529/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
feat: go 1.13 (#1135) * feat: go 1.13 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: go.mod Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: update to go 1.13 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * bump: deps Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: deps Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: trying replace Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: go mod init Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: disable funlen lint Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2019-09-13 14:53:56 +02:00
golang.org/x/crypto v0.0.0-20190605123033-f99c8df09eb5/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
feat: Use tools.go paradigm for external dependencies (#1495) Co-authored-by: CrazyMax <crazy-max@users.noreply.github.com>
2020-05-10 21:34:55 +02:00
golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
golang.org/x/crypto v0.0.0-20200302210943-78000ba7a073/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
chore(deps): bump github.com/golangci/golangci-lint (#1691) Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.28.3 to 1.29.0. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.28.3...v1.29.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-07-21 14:22:33 +02:00
golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
feat: update nfpm (#2640) * feat: update nfpm * feat: update nfpm * feat: update nfpm * feat: update nfpm * fix: dir type * docs: dir * docs: typo * fix: race * fix: race cond
2021-11-14 03:23:11 +02:00
golang.org/x/crypto v0.0.0-20210421170649-83a5a9bb288b/go.mod h1:T9bdIzuCu7OtxOm1hfPfRQxPLYneinmdGuTeoZ9dtd4=
feat(deps): bump code.gitea.io/sdk/gitea from 0.15.1 to 0.16.0 (#4313) [//]: # (dependabot-start) ⚠️ **Dependabot is rebasing this PR** ⚠️ Rebasing might not happen immediately, so don't worry if this takes some time. Note: if you make any changes to this PR yourself, they will take precedence over the rebase. --- [//]: # (dependabot-end) Bumps code.gitea.io/sdk/gitea from 0.15.1 to 0.16.0. [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=code.gitea.io/sdk/gitea&package-manager=go_modules&previous-version=0.15.1&new-version=0.16.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) Dependabot will merge this PR once it's up-to-date and CI passes on it, as requested by @caarlos0. [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-20 16:32:07 +02:00
golang.org/x/crypto v0.0.0-20210513164829-c07d793c2f9a/go.mod h1:P+XmwS30IXTQdn5tA2iutPOUgjI07+tq3H3K9MVA1s8=
feat(deps): bump gocloud.dev from 0.24.0 to 0.26.0 (#3287) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.24.0 to 0.26.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.24.0...v0.26.0) --- updated-dependencies: - dependency-name: gocloud.dev dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-04 20:44:54 +02:00
golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
feat(deps): bump gocloud.dev from 0.27.0 to 0.28.0 (#3689) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.27.0 to 0.28.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.28.0</h2> <p><strong>BREAKING CHANGES</strong>:</p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK.</li> <li><strong>blob/azureblob</strong>: Updated to match recent breaking changes in the Azure packages (yes, again).</li> <li><strong>pubsub/awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>blob</strong></p> <ul> <li><strong>memblob</strong>: Fixed bug where use of <code>BeforeCopy</code> callback would drop the actual copying.</li> <li><strong>azureblob</strong>: Updated to match recent breaking changes in the Azure packages.</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>all</strong>: Simplified and improved batch sizing, should resolve issues with too-frequent polling in some situations.</li> <li><strong>azurepubsub</strong>: Made <code>ListenerTimeout</code> configurable.</li> <li><strong>gcppubsub</strong> and <strong>awssnssqs</strong>: Support lazy mode for <code>Nack</code> (where no explicit <code>Nack</code> is sent).</li> <li><strong>awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>secrets</strong></p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK. Use azidentity.NewDefaultAzureCredential.</li> </ul> <p><strong>sql</strong></p> <ul> <li><strong>gcp/cloudsql</strong>: Fixed IAM login.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/24166090495b8e084a23aa7d11fcc81ec33e4729"><code>2416609</code></a> all: prep for v0.28.0 (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3207">#3207</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/13f46eb8065d5ea62b757f5f0f11a56f48faf7cc"><code>13f46eb</code></a> pubsub: simplify and improve batch sizing, especially for low message rates</li> <li><a href="https://github.com/google/go-cloud/commit/8f2c2b9a392a8e4a3d7a4942f88f3df607f8f6d0"><code>8f2c2b9</code></a> pubsub/memsub: Add Options for batching (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3205">#3205</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fe0a3d75fe43c039258df25ebf102602526e3052"><code>fe0a3d7</code></a> pubsub/awssqs: Fix BeforeSend/As to enable changes to the sqs input message (...</li> <li><a href="https://github.com/google/go-cloud/commit/dfaf95af34dd9022a69a061028e0ceec98e9c670"><code>dfaf95a</code></a> secrets/azurekeyvault: Use azidentity.NewDefaultAzureCredential to support ot...</li> <li><a href="https://github.com/google/go-cloud/commit/1e26311532928f060c490a7fbf2be92b55ee12c4"><code>1e26311</code></a> blob: Remove some debug logging (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3197">#3197</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/43ed5a499864c08b7b6549ff7085f19634a1f02c"><code>43ed5a4</code></a> pubsub/gcppubsub: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3195">#3195</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/be80e70b3dcf7a6b86481881c7ac0b44a8095178"><code>be80e70</code></a> pubsub/awssnssqs: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3194">#3194</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/7d690993a53cf8cc2e7af07872876d58601f1261"><code>7d69099</code></a> blob/azblob: Update to latest, and restore As for dirlist (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3191">#3191</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/e942f3c339f0eb617ac4dbc7f37cc4e5920ee7cc"><code>e942f3c</code></a> blob/azblob: Restore As for List entry (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3188">#3188</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.27.0...v0.28.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.27.0&new-version=0.28.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-11 14:09:51 +02:00
golang.org/x/crypto v0.0.0-20220622213112-05595931fe9d/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
golang.org/x/crypto v0.0.0-20220722155217-630584e8d5aa/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
feat(deps): bump github.com/goreleaser/nfpm/v2 from 2.30.1 to 2.31.0 (#4144) latest and greatest
2023-06-26 18:20:47 +02:00
golang.org/x/crypto v0.3.0/go.mod h1:hebNnKkNXi2UzZN1eVRvBB7co0a+JxK6XbPiWVs/3J4=
golang.org/x/crypto v0.3.1-0.20221117191849-2c476679df9a/go.mod h1:hebNnKkNXi2UzZN1eVRvBB7co0a+JxK6XbPiWVs/3J4=
feat(deps): bump gocloud.dev from 0.28.0 to 0.29.0 (#3837) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.28.0 to 0.29.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.29.0</h2> <p><strong>BREAKING CHANGES</strong></p> <ul> <li>Updated to latest <code>azureblob</code>, which had some non-backward-compatible changes (again).</li> </ul> <p><strong>all</strong></p> <ul> <li>Defaulting to <code>go</code> version <code>1.2</code>.</li> <li><strong>aws</strong>: Added support for custom endpoints for AWS SDK v2.</li> <li><strong>gcp</strong>: Updated imports for <code>credentialspb</code>.</li> </ul> <p><strong>blob</strong></p> <ul> <li><strong>azureblob</strong>: Updated to latest (breaking change).</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>kafkapub</strong>: Fixed nil Options pointer dereference.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/62397121ec57013e925de45ec6fb7a7bacbf5799"><code>6239712</code></a> all: prep for release (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3236">#3236</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/973ec8737135d7bf2e2c21975ed871526e38ef8a"><code>973ec87</code></a> all: prep for release (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3235">#3235</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/3348a6a4a0ccbcc4cc179866ea682d54ba3e0276"><code>3348a6a</code></a> aws: fix typo on awssdk=v2 docstring</li> <li><a href="https://github.com/google/go-cloud/commit/ec0a2bbc3f48f58b707fcad9e1926044efb242cb"><code>ec0a2bb</code></a> pubsub/rabbitpubsub: give rabbitmq more time to come up (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3233">#3233</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/082a4958948e4a36875570f6ee931ebfe950e29c"><code>082a495</code></a> docstore/gcpfirestore: update proto import (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3229">#3229</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/53ba9013f0a1240e7266b64a1c8f37ac891a84f8"><code>53ba901</code></a> pubsub/gcppubsub: update proto import (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3230">#3230</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b3612581b153f8ecbf63590c9087e746b5df9f8e"><code>b361258</code></a> runtimevar/gcpsecretmanager: update proto import (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3231">#3231</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/e5235d85eb9a1674f26984a068fcd91f445ef620"><code>e5235d8</code></a> blob/gcsblob: update proto import (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3228">#3228</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/7cd8b2b9f63cb8b15c114ea64fbef28aed00f0cc"><code>7cd8b2b</code></a> secrets/gcpkms: update proto import (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3227">#3227</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cddf16323d2af04a4bdd9b58fb85d9b28a1abee"><code>8cddf16</code></a> all: update deps BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3225">#3225</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.28.0...v0.29.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.28.0&new-version=0.29.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-06 18:07:00 +02:00
golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
feat(deps): bump gocloud.dev from 0.29.0 to 0.30.0 (#4129) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.29.0 to 0.30.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.30.0</h2> <p><strong>blob</strong></p> <ul> <li><strong>all</strong>: Add <code>Upload</code> and <code>Download</code> methods that may be more efficient for some drivers.</li> <li><strong>s3blob</strong>: Add support for per-request <code>s3v2.Options</code>.</li> <li><strong>s3blob</strong>: Stop escaping second <code>/</code> in <code>//</code>; it's no longer necessary.</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>gcppubsub</strong>: Make it possible to configure <code>max_send_batch_size</code>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/d2d5bedb50683e2a6b893b75aafc193eca2715db"><code>d2d5bed</code></a> all: prep for release (<a href="https://redirect.github.com/google/go-cloud/issues/3263">#3263</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/c2e172b5a78def74973f7f3a8ece7c0bd6967432"><code>c2e172b</code></a> all: update dependencies (<a href="https://redirect.github.com/google/go-cloud/issues/3262">#3262</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/098177a48cae1bebfc90f88ed43d319444cab804"><code>098177a</code></a> blob/s3blob: fix the 'awssdk' argument examples</li> <li><a href="https://github.com/google/go-cloud/commit/2e4fad43f0b2606833b6a0de3e18628c70e11398"><code>2e4fad4</code></a> all: remove refs to deprecated xerrors</li> <li><a href="https://github.com/google/go-cloud/commit/1db413f1b3c4e344618b36401ba7e6dca3892929"><code>1db413f</code></a> pubsub/gcppubsub: make it possible to configure max_send_batch_size</li> <li><a href="https://github.com/google/go-cloud/commit/0c8428bf433136e7a4d96de0841f6373c6eacb53"><code>0c8428b</code></a> blob: Add Upload and Download methods that may be more efficient for some dri...</li> <li><a href="https://github.com/google/go-cloud/commit/54c71241a56f4c89eb64f587e5dc55667eaa40a3"><code>54c7124</code></a> all: cleanup duplicate import statements</li> <li><a href="https://github.com/google/go-cloud/commit/28b1328ae4fee939441faa5ee2e4eeba74c88ce7"><code>28b1328</code></a> all: minor code simplifications for returned boolean expressions</li> <li><a href="https://github.com/google/go-cloud/commit/2a407f5e6a71951384531445e25c58194f235062"><code>2a407f5</code></a> blob/gcsblob: Refresh goldens</li> <li><a href="https://github.com/google/go-cloud/commit/0cc16c8ae11e47028df24c4973debd6c56d29729"><code>0cc16c8</code></a> all: update goldens (<a href="https://redirect.github.com/google/go-cloud/issues/3252">#3252</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.29.0...v0.30.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.29.0&new-version=0.30.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-20 14:04:08 +02:00
golang.org/x/crypto v0.7.0/go.mod h1:pYwdfH91IfpZVANVyUOhSIPZaFoJGxTFbZhFTx+dXZU=
feat(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#4485)
2023-12-20 04:27:05 +02:00
golang.org/x/crypto v0.17.0 h1:r8bRNjWL3GshPW3gkd+RpvzWrZAwPS49OmTGZ/uhM4k=
golang.org/x/crypto v0.17.0/go.mod h1:gCAAfMLgwOJRpTjQ2zCCt2OcSfYMTeZVSRtQlPC7Nq4=
feat: add support for pushing artifacts to cloud storage provider( S3, Azure Blob, GCS) (#1036) * feat: adding support to push artifacts to AWS S3,Azure Blob and Google Cloud Storage readme for blob publisher test: add unit test for blob using testify and mockery test: add unit test for publish method fix: openbucket instance initialization remove unwanted packages: go mod tidy test: add missing unit test for publish method * doc: add missing comment for func * fix: add accidental delete file * fix : add missing Snapcrafts project * fix: unit test for Azure blob * fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue * fmt: fix linter reporeted issues fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue fmt: linter fix * test: fix typo in test error string * feat: add support to provider folder inside bucket, resolves discussed comments
2019-06-05 15:51:01 +02:00
golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
golang.org/x/exp v0.0.0-20190306152737-a1d7652674e8/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
chore(deps): bump gocloud.dev from 0.18.0 to 0.19.0 (#1340) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.18.0 to 0.19.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.18.0...v0.19.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-02-17 14:56:49 +02:00
golang.org/x/exp v0.0.0-20190510132918-efd6b22b2522/go.mod h1:ZjyILWgesfNpC6sMxTJOJm9Kp84zZh5NQWvqDGG3Qr8=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
golang.org/x/exp v0.0.0-20190829153037-c13cbed26979/go.mod h1:86+5VVa7VpoJ4kLfm080zCjGlMRFzhUhsZKEZO7MGek=
golang.org/x/exp v0.0.0-20191030013958-a1ab85dbe136/go.mod h1:JXzH8nQsPlswgeRAPE3MuO9GYsAcnJvJ4vnMwN/5qkY=
golang.org/x/exp v0.0.0-20191129062945-2f5052295587/go.mod h1:2RIsYlXP63K8oxa1u096TMicItID8zy7Y6sNkU49FU4=
golang.org/x/exp v0.0.0-20191227195350-da58074b4299/go.mod h1:2RIsYlXP63K8oxa1u096TMicItID8zy7Y6sNkU49FU4=
golang.org/x/exp v0.0.0-20200119233911-0405dc783f0a/go.mod h1:2RIsYlXP63K8oxa1u096TMicItID8zy7Y6sNkU49FU4=
golang.org/x/exp v0.0.0-20200207192155-f17229e696bd/go.mod h1:J/WKrq2StrnmMY6+EHIKF9dgMWnmCNThgcyBT1FY9mM=
golang.org/x/exp v0.0.0-20200224162631-6cc2880d07d6/go.mod h1:3jZMyOhIsHpP37uCMkUooju7aAi5cS1Q23tOzKc+0MU=
feat(deps): bump github.com/goreleaser/nfpm/v2 from 2.34.0 to 2.35.0 (#4492) Bumps [github.com/goreleaser/nfpm/v2](https://github.com/goreleaser/nfpm) from 2.34.0 to 2.35.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/goreleaser/nfpm/releases">github.com/goreleaser/nfpm/v2's releases</a>.</em></p> <blockquote> <h2>v2.35.0</h2> <h2>Changelog</h2> <h3>New Features</h3> <ul> <li>9c4fc0e886dabcd359967cdeca9107973e93c4b9: feat: reproducible packages (<a href="https://redirect.github.com/goreleaser/nfpm/issues/748">#748</a>) (<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li> </ul> <h3>Bug fixes</h3> <ul> <li>3485ec3edaba34f90ab57c287ac71eaabfc816be: fix(deb): blank line in package description (<a href="https://redirect.github.com/goreleaser/nfpm/issues/742">#742</a>) (<a href="https://github.com/abemedia"><code>@​abemedia</code></a>)</li> <li>60cff806c953650d9bda31fda43452003552784b: fix: Ensure reproducable Deb package (<a href="https://redirect.github.com/goreleaser/nfpm/issues/747">#747</a>) (<a href="https://github.com/keliramu"><code>@​keliramu</code></a>)</li> <li>2c8f9e0d70ccc37e2eb6433daccc3ca2f67841a1: fix: config merge (<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li> <li>216b17ffff80a5faad835fc53cbe461322d4bf6a: fix: example should not have prefixed version (<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li> <li>cdd9a621e98bb5e1b41798b74b720a3273e743ab: fix: use parent owner/group on typedir (<a href="https://redirect.github.com/goreleaser/nfpm/issues/754">#754</a>) (<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li> </ul> <h3>Dependency updates</h3> <ul> <li>a8707cd42874f46a192ec2ef9918d3a75631afb6: feat(deps): bump github.com/klauspost/compress from 1.17.2 to 1.17.3 (<a href="https://redirect.github.com/goreleaser/nfpm/issues/737">#737</a>) (<a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li> <li>6f2eb59cd263e4a8516ca6addb40e4a5d87b1084: feat(deps): bump github.com/klauspost/compress from 1.17.3 to 1.17.4 (<a href="https://redirect.github.com/goreleaser/nfpm/issues/745">#745</a>) (<a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li> <li>6c241370ccdd5718730556f2b8c13e4733d0fda7: feat(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/goreleaser/nfpm/issues/732">#732</a>) (<a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li> <li>d56350e61f34f7a596d2383b365da633798aed97: feat(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 (<a href="https://redirect.github.com/goreleaser/nfpm/issues/756">#756</a>) (<a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li> </ul> <h3>Build process updates</h3> <ul> <li>560c42ca3c87a2938e3b9cc841ec6cde05c8984b: build: added shell.nix (<a href="https://redirect.github.com/goreleaser/nfpm/issues/743">#743</a>) (<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li> <li>29c85136454eabe774558c1b67e3ecf025269f55: build: setup nur and winget (<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li> </ul> <h3>Other work</h3> <ul> <li>c4f2da3568bdd0d2882a02a29b60101f944e0f33: docs: correct GOARCH docs (<a href="https://redirect.github.com/goreleaser/nfpm/issues/733">#733</a>) (<a href="https://github.com/cognifloyd"><code>@​cognifloyd</code></a>)</li> <li>aaaa3fbb8625a9fe03ba2cb5e2c0f050d2393e6b: docs: fix systemd note (<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li> <li>f0941db79b18d292a921e0ea778fcf5d1c282e0e: docs: update cmd docs (<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li> <li>7439013fb5dc9357e84aabb36823a21c1b97e8ba: docs: update cmd docs (<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/goreleaser/nfpm/compare/v2.34.0...v2.35.0">https://github.com/goreleaser/nfpm/compare/v2.34.0...v2.35.0</a></p> <h2>Helping out</h2> <p>This release is only possible thanks to <strong>all</strong> the support of <strong>awesome people</strong>!</p> <p>Want to be one of them? You can <a href="https://goreleaser.com/sponsors/">sponsor</a> or <a href="https://goreleaser.com/contributing">contribute with code</a>.</p> <h2>Where to go next?</h2> <ul> <li>nFPM is a satellite project from GoReleaser. <a href="https://goreleaser.com">Check it out</a>!</li> <li>Find examples and commented usage of all options in our <a href="https://nfpm.goreleaser.com/">website</a>.</li> <li>Reach out on <a href="https://discord.gg/RGEBtg8vQ6">Discord</a> and <a href="https://twitter.com/goreleaser">Twitter</a>!</li> </ul> <p><!-- raw HTML omitted --><!-- raw HTML omitted --><!-- raw HTML omitted --></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/goreleaser/nfpm/commit/29c85136454eabe774558c1b67e3ecf025269f55"><code>29c8513</code></a> build: setup nur and winget</li> <li><a href="https://github.com/goreleaser/nfpm/commit/cdd9a621e98bb5e1b41798b74b720a3273e743ab"><code>cdd9a62</code></a> fix: use parent owner/group on typedir (<a href="https://redirect.github.com/goreleaser/nfpm/issues/754">#754</a>)</li> <li><a href="https://github.com/goreleaser/nfpm/commit/d56350e61f34f7a596d2383b365da633798aed97"><code>d56350e</code></a> feat(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 (<a href="https://redirect.github.com/goreleaser/nfpm/issues/756">#756</a>)</li> <li><a href="https://github.com/goreleaser/nfpm/commit/99bf0d0cf933113d23f200f6d4201f3cf3d93f22"><code>99bf0d0</code></a> test: testifylint fixes (<a href="https://redirect.github.com/goreleaser/nfpm/issues/753">#753</a>)</li> <li><a href="https://github.com/goreleaser/nfpm/commit/8c91e5ebefb281051472fe33c1f68dc3e1587a41"><code>8c91e5e</code></a> chore(deps): bump github/codeql-action from 2 to 3 (<a href="https://redirect.github.com/goreleaser/nfpm/issues/752">#752</a>)</li> <li><a href="https://github.com/goreleaser/nfpm/commit/e43aa7f7d1ec6752af8af47987981cf882f22fa0"><code>e43aa7f</code></a> chore(deps): bump sigstore/cosign-installer from 3.2.0 to 3.3.0 (<a href="https://redirect.github.com/goreleaser/nfpm/issues/751">#751</a>)</li> <li><a href="https://github.com/goreleaser/nfpm/commit/2c8f9e0d70ccc37e2eb6433daccc3ca2f67841a1"><code>2c8f9e0</code></a> fix: config merge</li> <li><a href="https://github.com/goreleaser/nfpm/commit/7439013fb5dc9357e84aabb36823a21c1b97e8ba"><code>7439013</code></a> docs: update cmd docs</li> <li><a href="https://github.com/goreleaser/nfpm/commit/9c4fc0e886dabcd359967cdeca9107973e93c4b9"><code>9c4fc0e</code></a> feat: reproducible packages (<a href="https://redirect.github.com/goreleaser/nfpm/issues/748">#748</a>)</li> <li><a href="https://github.com/goreleaser/nfpm/commit/c3142513c990e867c93c1acad256c9960a059fa1"><code>c314251</code></a> chore(deps): bump actions/setup-go from 4 to 5 (<a href="https://redirect.github.com/goreleaser/nfpm/issues/749">#749</a>)</li> <li>Additional commits viewable in <a href="https://github.com/goreleaser/nfpm/compare/v2.34.0...v2.35.0">compare view</a></li> </ul> </details> <br /> <details> <summary>Most Recent Ignore Conditions Applied to This Pull Request</summary> | Dependency Name | Ignore Conditions | | --- | --- | | github.com/goreleaser/nfpm/v2 | [>= 2.24.a, < 2.25] | </details> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/goreleaser/nfpm/v2&package-manager=go_modules&previous-version=2.34.0&new-version=2.35.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-21 14:16:43 +02:00
golang.org/x/exp v0.0.0-20231206192017-f3f8817b8deb h1:c0vyKkb6yr3KR7jEfJaOSv4lG7xPkbN6r52aJz1d8a8=
golang.org/x/exp v0.0.0-20231206192017-f3f8817b8deb/go.mod h1:iRJReGqOEeBhDZGkGbynYwcHlctCvnjTYIamk7uXpHI=
chore(deps): bump gocloud.dev from 0.18.0 to 0.19.0 (#1340) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.18.0 to 0.19.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.18.0...v0.19.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-02-17 14:56:49 +02:00
golang.org/x/image v0.0.0-20190227222117-0694c2d4d067/go.mod h1:kZ7UVZpmo3dzQBMxlp+ypCbDeSB+sBbTgSJuh5dn5js=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
golang.org/x/image v0.0.0-20190802002840-cff245a6509b/go.mod h1:FeLwcggjj3mMvU+oOTbSwawSJRM1uh48EjtB4UJZlP0=
feat: add support for pushing artifacts to cloud storage provider( S3, Azure Blob, GCS) (#1036) * feat: adding support to push artifacts to AWS S3,Azure Blob and Google Cloud Storage readme for blob publisher test: add unit test for blob using testify and mockery test: add unit test for publish method fix: openbucket instance initialization remove unwanted packages: go mod tidy test: add missing unit test for publish method * doc: add missing comment for func * fix: add accidental delete file * fix : add missing Snapcrafts project * fix: unit test for Azure blob * fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue * fmt: fix linter reporeted issues fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue fmt: linter fix * test: fix typo in test error string * feat: add support to provider folder inside bucket, resolves discussed comments
2019-06-05 15:51:01 +02:00
golang.org/x/lint v0.0.0-20181026193005-c67002cb31c3/go.mod h1:UVdnD1Gm6xHRNCYTkRU2/jEulfH38KcIWyp/GAMgvoE=
golang.org/x/lint v0.0.0-20190227174305-5b3e6a55c961/go.mod h1:wehouNa3lNwaWXcvxsM5YxQ5yQlVC4a0KAMCusXpPoU=
golang.org/x/lint v0.0.0-20190301231843-5614ed5bae6f/go.mod h1:UVdnD1Gm6xHRNCYTkRU2/jEulfH38KcIWyp/GAMgvoE=
feat: add gitlab for releases (#1038) * outlines gitlab client integration * makes client parameter more explicit * adds gitlab url to config * changes releaseID to string to adapt to gitlab * updates to latest gitlab client lib 0.18 * fixes copy paster in gitlab upload func * fixes gitlab typo in config * adds gitlab token to env and context * release now uses the client factory method * skips brew pipe if it is not a github release * add github tokentype to publish tests * skips scoop pipe if it is not a github release * corrects brew skip msg * adds gitlab token to main test * adds gitlab to release docs * validates config and errors accordingly * adapt release pipe name to include gitlab * fixes gitlab client after testing * moves not-configured brew and scoop pipe checks as first check * adds more debug to gitlab client * adapts changelog generation for gitlab markdown * adds debug log for gitlab changelog * env needs to run before changelog pipe * moves gitlab default download url to default pipe * moves multiple releases check to from config to release pipe * release differs now for github and gitlab * adds debug gitlab release update msgs * moves env pipe as second after before because it determines the token type other pipes depend on * adaptes error check on gitlab release creation * Revert "adaptes error check on gitlab release creation" This reverts commit 032024571c76140f8e2207ee01cc08088f37594b. * simplifies gitlab client logic. removes comments * skips tls verification for gitlab client if specified in config * updates the docs * adds clarification that brew and scoop are not supported if it is a gitlab release * fixes copy paster in release.md * adds missing blob pipe in defaults and publish due to missing in merge * updates comment in gitlab client
2019-06-29 16:02:40 +02:00
golang.org/x/lint v0.0.0-20190313153728-d0100b6bd8b3/go.mod h1:6SW0HCj/g11FgYtHlgUYUwCkIfeOF89ocIRzGO/8vkc=
feat: go 1.13 (#1135) * feat: go 1.13 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: go.mod Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: update to go 1.13 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * bump: deps Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: deps Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: trying replace Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: go mod init Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: disable funlen lint Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2019-09-13 14:53:56 +02:00
golang.org/x/lint v0.0.0-20190409202823-959b441ac422/go.mod h1:6SW0HCj/g11FgYtHlgUYUwCkIfeOF89ocIRzGO/8vkc=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
golang.org/x/lint v0.0.0-20190909230951-414d861bb4ac/go.mod h1:6SW0HCj/g11FgYtHlgUYUwCkIfeOF89ocIRzGO/8vkc=
golang.org/x/lint v0.0.0-20190930215403-16217165b5de/go.mod h1:6SW0HCj/g11FgYtHlgUYUwCkIfeOF89ocIRzGO/8vkc=
golang.org/x/lint v0.0.0-20191125180803-fdd1cda4f05f/go.mod h1:5qLYkcX4OjUUV8bRuDixDT3tpyyb+LUpUlRWLxfhWrs=
golang.org/x/lint v0.0.0-20200130185559-910be7a94367/go.mod h1:3xt1FjdF8hUf6vQPIChWIBhFzV8gjjsPE/fR3IyQdNY=
golang.org/x/lint v0.0.0-20200302205851-738671d3881b/go.mod h1:3xt1FjdF8hUf6vQPIChWIBhFzV8gjjsPE/fR3IyQdNY=
chore(deps): bump gocloud.dev from 0.22.0 to 0.23.0 (#2225) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.22.0 to 0.23.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.22.0...v0.23.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-17 14:03:45 +02:00
golang.org/x/lint v0.0.0-20201208152925-83fdc39ff7b5/go.mod h1:3xt1FjdF8hUf6vQPIChWIBhFzV8gjjsPE/fR3IyQdNY=
chore(deps): bump gocloud.dev from 0.18.0 to 0.19.0 (#1340) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.18.0 to 0.19.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.18.0...v0.19.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-02-17 14:56:49 +02:00
golang.org/x/mobile v0.0.0-20190312151609-d3739f865fa6/go.mod h1:z+o9i4GpDbdi3rU15maQ/Ox0txvL9dWGYEHz965HBQE=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
golang.org/x/mobile v0.0.0-20190719004257-d2bd2a29d028/go.mod h1:E/iHnbuqvinMTCcRqshq8CkpyQDoeVncDDYHnLhea+o=
feat: Use tools.go paradigm for external dependencies (#1495) Co-authored-by: CrazyMax <crazy-max@users.noreply.github.com>
2020-05-10 21:34:55 +02:00
golang.org/x/mod v0.0.0-20190513183733-4bf6d317e70e/go.mod h1:mXi4GBBbnImb6dmsKGUJ2LatrhH/nqhxcFungHvyanc=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
golang.org/x/mod v0.1.0/go.mod h1:0QHyrYULN0/3qlju5TqG8bIK38QM8yzMo5ekMj3DlcY=
golang.org/x/mod v0.1.1-0.20191105210325-c90efee705ee/go.mod h1:QqPTAvyqsEbceGzBzNggFXnrqF1CaUcvgkdR5Ot7KZg=
golang.org/x/mod v0.1.1-0.20191107180719-034126e5016b/go.mod h1:QqPTAvyqsEbceGzBzNggFXnrqF1CaUcvgkdR5Ot7KZg=
chore(deps): bump github.com/golangci/golangci-lint from 1.23.7 to 1.27.0 (#1563) * chore(deps): bump github.com/golangci/golangci-lint from 1.23.7 to 1.27.0 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: tests Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2020-05-26 05:48:10 +02:00
golang.org/x/mod v0.2.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
golang.org/x/mod v0.3.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
chore(deps): bump gocloud.dev from 0.20.0 to 0.21.0 (#1941) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.20.0 to 0.21.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.20.0...v0.21.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-12 01:14:58 +02:00
golang.org/x/mod v0.4.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
chore(deps): bump gocloud.dev from 0.22.0 to 0.23.0 (#2225) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.22.0 to 0.23.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.22.0...v0.23.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-17 14:03:45 +02:00
golang.org/x/mod v0.4.1/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
feat(deps): bump gocloud.dev from 0.29.0 to 0.30.0 (#4129) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.29.0 to 0.30.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.30.0</h2> <p><strong>blob</strong></p> <ul> <li><strong>all</strong>: Add <code>Upload</code> and <code>Download</code> methods that may be more efficient for some drivers.</li> <li><strong>s3blob</strong>: Add support for per-request <code>s3v2.Options</code>.</li> <li><strong>s3blob</strong>: Stop escaping second <code>/</code> in <code>//</code>; it's no longer necessary.</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>gcppubsub</strong>: Make it possible to configure <code>max_send_batch_size</code>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/d2d5bedb50683e2a6b893b75aafc193eca2715db"><code>d2d5bed</code></a> all: prep for release (<a href="https://redirect.github.com/google/go-cloud/issues/3263">#3263</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/c2e172b5a78def74973f7f3a8ece7c0bd6967432"><code>c2e172b</code></a> all: update dependencies (<a href="https://redirect.github.com/google/go-cloud/issues/3262">#3262</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/098177a48cae1bebfc90f88ed43d319444cab804"><code>098177a</code></a> blob/s3blob: fix the 'awssdk' argument examples</li> <li><a href="https://github.com/google/go-cloud/commit/2e4fad43f0b2606833b6a0de3e18628c70e11398"><code>2e4fad4</code></a> all: remove refs to deprecated xerrors</li> <li><a href="https://github.com/google/go-cloud/commit/1db413f1b3c4e344618b36401ba7e6dca3892929"><code>1db413f</code></a> pubsub/gcppubsub: make it possible to configure max_send_batch_size</li> <li><a href="https://github.com/google/go-cloud/commit/0c8428bf433136e7a4d96de0841f6373c6eacb53"><code>0c8428b</code></a> blob: Add Upload and Download methods that may be more efficient for some dri...</li> <li><a href="https://github.com/google/go-cloud/commit/54c71241a56f4c89eb64f587e5dc55667eaa40a3"><code>54c7124</code></a> all: cleanup duplicate import statements</li> <li><a href="https://github.com/google/go-cloud/commit/28b1328ae4fee939441faa5ee2e4eeba74c88ce7"><code>28b1328</code></a> all: minor code simplifications for returned boolean expressions</li> <li><a href="https://github.com/google/go-cloud/commit/2a407f5e6a71951384531445e25c58194f235062"><code>2a407f5</code></a> blob/gcsblob: Refresh goldens</li> <li><a href="https://github.com/google/go-cloud/commit/0cc16c8ae11e47028df24c4973debd6c56d29729"><code>0cc16c8</code></a> all: update goldens (<a href="https://redirect.github.com/google/go-cloud/issues/3252">#3252</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.29.0...v0.30.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.29.0&new-version=0.30.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-20 14:04:08 +02:00
golang.org/x/mod v0.8.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
feat(deps): bump golang.org/x/tools from 0.14.0 to 0.15.0 (#4417) Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.14.0 to 0.15.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/golang/tools/releases">golang.org/x/tools's releases</a>.</em></p> <blockquote> <h2>gopls/v0.14.1</h2> <p>This release contains just two changes:</p> <ul> <li>A workaround for a regression affecting some users of <code>GOPACKAGESDRIVER</code>: <a href="https://redirect.github.com/golang/go/issues/63751">golang/go#63751</a>, for example those using gopls with an older version of <a href="https://bazel.build/">Bazel</a>. When the <a href="https://pkg.go.dev/golang.org/x/tools/go/packages"><code>go/packages</code></a> driver is missing compiler or architecture information, gopls now assumes a default value rather than failing to load package information.</li> <li>A fix for a minor bug in the <a href="https://github.com/golang/tools/releases/tag/gopls%2Fv0.14.0">new</a> &quot;remove unused parameter&quot; refactoring: <a href="https://redirect.github.com/golang/go/issues/63755">golang/go#63755</a>. Notably, this bug was discovered via an automated report from someone who had opted in to <a href="https://telemetry.go.dev/privacy">Go telemetry</a>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/golang/tools/commit/729e159c03f809dea9d75605900b19a66793d955"><code>729e159</code></a> go.mod: update golang.org/x dependencies</li> <li><a href="https://github.com/golang/tools/commit/38ed81a6b5538535b3f83203cf3bf0c6289e2291"><code>38ed81a</code></a> gopls/internal/regtest/marker: porting extract tests</li> <li><a href="https://github.com/golang/tools/commit/bbf8380961d57b5bb9347781a1718de28a09f6ae"><code>bbf8380</code></a> gopls/internal/regtest/marker: use golden diffs for suggested fixes</li> <li><a href="https://github.com/golang/tools/commit/51df92b224f5bbb7d2cabb52c0c77410b2d590e7"><code>51df92b</code></a> go/ssa: two minor cleanups</li> <li><a href="https://github.com/golang/tools/commit/e7fb31ad45aafe6733523da75a71131305a27ad9"><code>e7fb31a</code></a> internal/cmd/deadcode: rename -format to -f</li> <li><a href="https://github.com/golang/tools/commit/c538b4e9949aa032ec14c82465b7d70fa34a97fd"><code>c538b4e</code></a> internal/cmd/deadcode: add -whylive=function flag</li> <li><a href="https://github.com/golang/tools/commit/b753e58b842175872367e87e377c4669b5037a0c"><code>b753e58</code></a> internal/lsp/helper: fix misspelled &quot;Code generated&quot; comment</li> <li><a href="https://github.com/golang/tools/commit/2638d6633698ef021f5b0802ae79c64eeddd8bf7"><code>2638d66</code></a> internal/cmd/deadcode: omit package/func keywords in default output</li> <li><a href="https://github.com/golang/tools/commit/118c362a56589bbbb0a0950d2d5e8850d5366609"><code>118c362</code></a> gopls/internal/lsp/source: fix signatureHelp with pointer receivers</li> <li><a href="https://github.com/golang/tools/commit/4124316da0c55abb58bd81da62d6424cc92f7e59"><code>4124316</code></a> gopls/internal/lsp/cache: remove baseCtx from the View</li> <li>Additional commits viewable in <a href="https://github.com/golang/tools/compare/v0.14.0...v0.15.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/tools&package-manager=go_modules&previous-version=0.14.0&new-version=0.15.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 17:18:36 +02:00
golang.org/x/mod v0.14.0 h1:dGoOF9QVLYng8IHTm7BAyWqCqSheQ5pYWGhzW00YJr0=
golang.org/x/mod v0.14.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c=
bump: nfpm
2018-10-31 04:26:58 +02:00
golang.org/x/net v0.0.0-20180724234803-3673e40ba225/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
feat: add support for pushing artifacts to cloud storage provider( S3, Azure Blob, GCS) (#1036) * feat: adding support to push artifacts to AWS S3,Azure Blob and Google Cloud Storage readme for blob publisher test: add unit test for blob using testify and mockery test: add unit test for publish method fix: openbucket instance initialization remove unwanted packages: go mod tidy test: add missing unit test for publish method * doc: add missing comment for func * fix: add accidental delete file * fix : add missing Snapcrafts project * fix: unit test for Azure blob * fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue * fmt: fix linter reporeted issues fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue fmt: linter fix * test: fix typo in test error string * feat: add support to provider folder inside bucket, resolves discussed comments
2019-06-05 15:51:01 +02:00
golang.org/x/net v0.0.0-20180826012351-8a410e7b638d/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
golang.org/x/net v0.0.0-20181114220301-adae6a3d119a/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
feat: add support for pushing artifacts to cloud storage provider( S3, Azure Blob, GCS) (#1036) * feat: adding support to push artifacts to AWS S3,Azure Blob and Google Cloud Storage readme for blob publisher test: add unit test for blob using testify and mockery test: add unit test for publish method fix: openbucket instance initialization remove unwanted packages: go mod tidy test: add missing unit test for publish method * doc: add missing comment for func * fix: add accidental delete file * fix : add missing Snapcrafts project * fix: unit test for Azure blob * fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue * fmt: fix linter reporeted issues fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue fmt: linter fix * test: fix typo in test error string * feat: add support to provider folder inside bucket, resolves discussed comments
2019-06-05 15:51:01 +02:00
golang.org/x/net v0.0.0-20190108225652-1e06a53dbb7e/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
golang.org/x/net v0.0.0-20190213061140-3a22650c66bd/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
feat: update go-github (#1012)
2019-04-22 14:44:08 +02:00
golang.org/x/net v0.0.0-20190311183353-d8887717615a/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
feat: add gitlab for releases (#1038) * outlines gitlab client integration * makes client parameter more explicit * adds gitlab url to config * changes releaseID to string to adapt to gitlab * updates to latest gitlab client lib 0.18 * fixes copy paster in gitlab upload func * fixes gitlab typo in config * adds gitlab token to env and context * release now uses the client factory method * skips brew pipe if it is not a github release * add github tokentype to publish tests * skips scoop pipe if it is not a github release * corrects brew skip msg * adds gitlab token to main test * adds gitlab to release docs * validates config and errors accordingly * adapt release pipe name to include gitlab * fixes gitlab client after testing * moves not-configured brew and scoop pipe checks as first check * adds more debug to gitlab client * adapts changelog generation for gitlab markdown * adds debug log for gitlab changelog * env needs to run before changelog pipe * moves gitlab default download url to default pipe * moves multiple releases check to from config to release pipe * release differs now for github and gitlab * adds debug gitlab release update msgs * moves env pipe as second after before because it determines the token type other pipes depend on * adaptes error check on gitlab release creation * Revert "adaptes error check on gitlab release creation" This reverts commit 032024571c76140f8e2207ee01cc08088f37594b. * simplifies gitlab client logic. removes comments * skips tls verification for gitlab client if specified in config * updates the docs * adds clarification that brew and scoop are not supported if it is a gitlab release * fixes copy paster in release.md * adds missing blob pipe in defaults and publish due to missing in merge * updates comment in gitlab client
2019-06-29 16:02:40 +02:00
golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
feat: go 1.13 (#1135) * feat: go 1.13 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: go.mod Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: update to go 1.13 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * bump: deps Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: deps Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: trying replace Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: go mod init Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: disable funlen lint Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2019-09-13 14:53:56 +02:00
golang.org/x/net v0.0.0-20190501004415-9ce7a6920f09/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
golang.org/x/net v0.0.0-20190503192946-f4e77d36d62c/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
golang.org/x/net v0.0.0-20190603091049-60506f45cf65/go.mod h1:HSz+uSET+XFnRR8LxR5pz3Of3rY3CfYBVs4xY44aLks=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
golang.org/x/net v0.0.0-20190613194153-d28f0bde5980/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
fix: blob provider authentication issues for default aws mechanism (#1061) * fix: blob provider authentication issues for default aws mechanism * remove commented code * docs: update the authentication doc * fix: linter issues
2019-06-28 13:51:19 +02:00
golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
chore(deps): bump gocloud.dev from 0.20.0 to 0.21.0 (#1941) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.20.0 to 0.21.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.20.0...v0.21.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-12 01:14:58 +02:00
golang.org/x/net v0.0.0-20190628185345-da137c7871d7/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
golang.org/x/net v0.0.0-20190724013045-ca1201d0de80/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
golang.org/x/net v0.0.0-20191209160850-c0dbc17a3553/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
golang.org/x/net v0.0.0-20200114155413-6afb5195e5aa/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
golang.org/x/net v0.0.0-20200202094626-16171245cfb2/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
golang.org/x/net v0.0.0-20200222125558-5a598a2470a0/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
chore(deps): bump github.com/golangci/golangci-lint from 1.23.7 to 1.27.0 (#1563) * chore(deps): bump github.com/golangci/golangci-lint from 1.23.7 to 1.27.0 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: tests Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2020-05-26 05:48:10 +02:00
golang.org/x/net v0.0.0-20200226121028-0de0cce0169b/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
golang.org/x/net v0.0.0-20200301022130-244492dfa37a/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
golang.org/x/net v0.0.0-20200324143707-d3edc9973b7e/go.mod h1:qpuaurCH72eLCgpAm/N6yyVIVM9cpaDIP3A8BGJEC5A=
golang.org/x/net v0.0.0-20200501053045-e0ff5e5a1de5/go.mod h1:qpuaurCH72eLCgpAm/N6yyVIVM9cpaDIP3A8BGJEC5A=
golang.org/x/net v0.0.0-20200506145744-7e3656a0809f/go.mod h1:qpuaurCH72eLCgpAm/N6yyVIVM9cpaDIP3A8BGJEC5A=
golang.org/x/net v0.0.0-20200513185701-a91f0712d120/go.mod h1:qpuaurCH72eLCgpAm/N6yyVIVM9cpaDIP3A8BGJEC5A=
golang.org/x/net v0.0.0-20200520182314-0ba52f642ac2/go.mod h1:qpuaurCH72eLCgpAm/N6yyVIVM9cpaDIP3A8BGJEC5A=
chore(deps): bump github.com/golangci/golangci-lint (#1691) Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.28.3 to 1.29.0. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.28.3...v1.29.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-07-21 14:22:33 +02:00
golang.org/x/net v0.0.0-20200625001655-4c5254603344/go.mod h1:/O7V0waA8r7cgGh81Ro3o1hOxt32SMVPicZroKQ2sZA=
chore(deps): bump gocloud.dev from 0.20.0 to 0.21.0 (#1941) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.20.0 to 0.21.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.20.0...v0.21.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-12 01:14:58 +02:00
golang.org/x/net v0.0.0-20200707034311-ab3426394381/go.mod h1:/O7V0waA8r7cgGh81Ro3o1hOxt32SMVPicZroKQ2sZA=
chore(deps): bump github.com/golangci/golangci-lint from 1.31.0 to 1.32.2 (#1882) * chore(deps): bump github.com/golangci/golangci-lint Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.31.0 to 1.32.2. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.31.0...v1.32.2) Signed-off-by: dependabot[bot] <support@github.com> * fix: lint issues Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * refactor: lint issues Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2020-11-10 16:15:03 +02:00
golang.org/x/net v0.0.0-20200822124328-c89045814202/go.mod h1:/O7V0waA8r7cgGh81Ro3o1hOxt32SMVPicZroKQ2sZA=
chore(deps): bump gocloud.dev from 0.20.0 to 0.21.0 (#1941) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.20.0 to 0.21.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.20.0...v0.21.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-12 01:14:58 +02:00
golang.org/x/net v0.0.0-20201021035429-f5854403a974/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
feat: update nfpm Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2020-11-10 23:30:20 +02:00
golang.org/x/net v0.0.0-20201031054903-ff519b6c9102/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
chore(deps): bump gocloud.dev from 0.20.0 to 0.21.0 (#1941) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.20.0 to 0.21.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.20.0...v0.21.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-12 01:14:58 +02:00
golang.org/x/net v0.0.0-20201110031124-69a78807bb2b/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
chore(deps): bump gocloud.dev from 0.22.0 to 0.23.0 (#2225) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.22.0 to 0.23.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.22.0...v0.23.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-17 14:03:45 +02:00
golang.org/x/net v0.0.0-20201209123823-ac852fbbde11/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
golang.org/x/net v0.0.0-20201224014010-6772e930b67b/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
chore(deps): bump github.com/goreleaser/nfpm/v2 from 2.3.1 to 2.4.0 (#2170) Bumps [github.com/goreleaser/nfpm/v2](https://github.com/goreleaser/nfpm) from 2.3.1 to 2.4.0. - [Release notes](https://github.com/goreleaser/nfpm/releases) - [Changelog](https://github.com/goreleaser/nfpm/blob/master/.goreleaser.yml) - [Commits](https://github.com/goreleaser/nfpm/compare/v2.3.1...v2.4.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-04-16 14:50:21 +02:00
golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
golang.org/x/net v0.0.0-20210421230115-4e50805a0758/go.mod h1:72T/g9IO56b78aLF+1Kcs5dz7/ng1VjMUvfKvpfy+jM=
feat(deps): bump gocloud.dev from 0.24.0 to 0.26.0 (#3287) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.24.0 to 0.26.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.24.0...v0.26.0) --- updated-dependencies: - dependency-name: gocloud.dev dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-04 20:44:54 +02:00
golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
feat(deps): bump gocloud.dev from 0.27.0 to 0.28.0 (#3689) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.27.0 to 0.28.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.28.0</h2> <p><strong>BREAKING CHANGES</strong>:</p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK.</li> <li><strong>blob/azureblob</strong>: Updated to match recent breaking changes in the Azure packages (yes, again).</li> <li><strong>pubsub/awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>blob</strong></p> <ul> <li><strong>memblob</strong>: Fixed bug where use of <code>BeforeCopy</code> callback would drop the actual copying.</li> <li><strong>azureblob</strong>: Updated to match recent breaking changes in the Azure packages.</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>all</strong>: Simplified and improved batch sizing, should resolve issues with too-frequent polling in some situations.</li> <li><strong>azurepubsub</strong>: Made <code>ListenerTimeout</code> configurable.</li> <li><strong>gcppubsub</strong> and <strong>awssnssqs</strong>: Support lazy mode for <code>Nack</code> (where no explicit <code>Nack</code> is sent).</li> <li><strong>awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>secrets</strong></p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK. Use azidentity.NewDefaultAzureCredential.</li> </ul> <p><strong>sql</strong></p> <ul> <li><strong>gcp/cloudsql</strong>: Fixed IAM login.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/24166090495b8e084a23aa7d11fcc81ec33e4729"><code>2416609</code></a> all: prep for v0.28.0 (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3207">#3207</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/13f46eb8065d5ea62b757f5f0f11a56f48faf7cc"><code>13f46eb</code></a> pubsub: simplify and improve batch sizing, especially for low message rates</li> <li><a href="https://github.com/google/go-cloud/commit/8f2c2b9a392a8e4a3d7a4942f88f3df607f8f6d0"><code>8f2c2b9</code></a> pubsub/memsub: Add Options for batching (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3205">#3205</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fe0a3d75fe43c039258df25ebf102602526e3052"><code>fe0a3d7</code></a> pubsub/awssqs: Fix BeforeSend/As to enable changes to the sqs input message (...</li> <li><a href="https://github.com/google/go-cloud/commit/dfaf95af34dd9022a69a061028e0ceec98e9c670"><code>dfaf95a</code></a> secrets/azurekeyvault: Use azidentity.NewDefaultAzureCredential to support ot...</li> <li><a href="https://github.com/google/go-cloud/commit/1e26311532928f060c490a7fbf2be92b55ee12c4"><code>1e26311</code></a> blob: Remove some debug logging (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3197">#3197</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/43ed5a499864c08b7b6549ff7085f19634a1f02c"><code>43ed5a4</code></a> pubsub/gcppubsub: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3195">#3195</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/be80e70b3dcf7a6b86481881c7ac0b44a8095178"><code>be80e70</code></a> pubsub/awssnssqs: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3194">#3194</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/7d690993a53cf8cc2e7af07872876d58601f1261"><code>7d69099</code></a> blob/azblob: Update to latest, and restore As for dirlist (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3191">#3191</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/e942f3c339f0eb617ac4dbc7f37cc4e5920ee7cc"><code>e942f3c</code></a> blob/azblob: Restore As for List entry (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3188">#3188</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.27.0...v0.28.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.27.0&new-version=0.28.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-11 14:09:51 +02:00
golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
golang.org/x/net v0.2.0/go.mod h1:KqCZLdyyvdV855qA2rE3GC2aiw5xGR5TEjj8smXukLY=
feat(deps): bump gocloud.dev from 0.28.0 to 0.29.0 (#3837) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.28.0 to 0.29.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.29.0</h2> <p><strong>BREAKING CHANGES</strong></p> <ul> <li>Updated to latest <code>azureblob</code>, which had some non-backward-compatible changes (again).</li> </ul> <p><strong>all</strong></p> <ul> <li>Defaulting to <code>go</code> version <code>1.2</code>.</li> <li><strong>aws</strong>: Added support for custom endpoints for AWS SDK v2.</li> <li><strong>gcp</strong>: Updated imports for <code>credentialspb</code>.</li> </ul> <p><strong>blob</strong></p> <ul> <li><strong>azureblob</strong>: Updated to latest (breaking change).</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>kafkapub</strong>: Fixed nil Options pointer dereference.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/62397121ec57013e925de45ec6fb7a7bacbf5799"><code>6239712</code></a> all: prep for release (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3236">#3236</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/973ec8737135d7bf2e2c21975ed871526e38ef8a"><code>973ec87</code></a> all: prep for release (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3235">#3235</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/3348a6a4a0ccbcc4cc179866ea682d54ba3e0276"><code>3348a6a</code></a> aws: fix typo on awssdk=v2 docstring</li> <li><a href="https://github.com/google/go-cloud/commit/ec0a2bbc3f48f58b707fcad9e1926044efb242cb"><code>ec0a2bb</code></a> pubsub/rabbitpubsub: give rabbitmq more time to come up (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3233">#3233</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/082a4958948e4a36875570f6ee931ebfe950e29c"><code>082a495</code></a> docstore/gcpfirestore: update proto import (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3229">#3229</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/53ba9013f0a1240e7266b64a1c8f37ac891a84f8"><code>53ba901</code></a> pubsub/gcppubsub: update proto import (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3230">#3230</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b3612581b153f8ecbf63590c9087e746b5df9f8e"><code>b361258</code></a> runtimevar/gcpsecretmanager: update proto import (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3231">#3231</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/e5235d85eb9a1674f26984a068fcd91f445ef620"><code>e5235d8</code></a> blob/gcsblob: update proto import (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3228">#3228</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/7cd8b2b9f63cb8b15c114ea64fbef28aed00f0cc"><code>7cd8b2b</code></a> secrets/gcpkms: update proto import (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3227">#3227</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cddf16323d2af04a4bdd9b58fb85d9b28a1abee"><code>8cddf16</code></a> all: update deps BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3225">#3225</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.28.0...v0.29.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.28.0&new-version=0.29.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-06 18:07:00 +02:00
golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
feat(deps): bump gocloud.dev from 0.29.0 to 0.30.0 (#4129) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.29.0 to 0.30.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.30.0</h2> <p><strong>blob</strong></p> <ul> <li><strong>all</strong>: Add <code>Upload</code> and <code>Download</code> methods that may be more efficient for some drivers.</li> <li><strong>s3blob</strong>: Add support for per-request <code>s3v2.Options</code>.</li> <li><strong>s3blob</strong>: Stop escaping second <code>/</code> in <code>//</code>; it's no longer necessary.</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>gcppubsub</strong>: Make it possible to configure <code>max_send_batch_size</code>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/d2d5bedb50683e2a6b893b75aafc193eca2715db"><code>d2d5bed</code></a> all: prep for release (<a href="https://redirect.github.com/google/go-cloud/issues/3263">#3263</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/c2e172b5a78def74973f7f3a8ece7c0bd6967432"><code>c2e172b</code></a> all: update dependencies (<a href="https://redirect.github.com/google/go-cloud/issues/3262">#3262</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/098177a48cae1bebfc90f88ed43d319444cab804"><code>098177a</code></a> blob/s3blob: fix the 'awssdk' argument examples</li> <li><a href="https://github.com/google/go-cloud/commit/2e4fad43f0b2606833b6a0de3e18628c70e11398"><code>2e4fad4</code></a> all: remove refs to deprecated xerrors</li> <li><a href="https://github.com/google/go-cloud/commit/1db413f1b3c4e344618b36401ba7e6dca3892929"><code>1db413f</code></a> pubsub/gcppubsub: make it possible to configure max_send_batch_size</li> <li><a href="https://github.com/google/go-cloud/commit/0c8428bf433136e7a4d96de0841f6373c6eacb53"><code>0c8428b</code></a> blob: Add Upload and Download methods that may be more efficient for some dri...</li> <li><a href="https://github.com/google/go-cloud/commit/54c71241a56f4c89eb64f587e5dc55667eaa40a3"><code>54c7124</code></a> all: cleanup duplicate import statements</li> <li><a href="https://github.com/google/go-cloud/commit/28b1328ae4fee939441faa5ee2e4eeba74c88ce7"><code>28b1328</code></a> all: minor code simplifications for returned boolean expressions</li> <li><a href="https://github.com/google/go-cloud/commit/2a407f5e6a71951384531445e25c58194f235062"><code>2a407f5</code></a> blob/gcsblob: Refresh goldens</li> <li><a href="https://github.com/google/go-cloud/commit/0cc16c8ae11e47028df24c4973debd6c56d29729"><code>0cc16c8</code></a> all: update goldens (<a href="https://redirect.github.com/google/go-cloud/issues/3252">#3252</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.29.0...v0.30.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.29.0&new-version=0.30.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-20 14:04:08 +02:00
golang.org/x/net v0.8.0/go.mod h1:QVkue5JL9kW//ek3r6jTKnTFis1tRmNAW2P1shuFdJc=
fix(deps): bump code.gitea.io/sdk/gitea from 0.17.0 to 0.17.1 (#4512) Bumps code.gitea.io/sdk/gitea from 0.17.0 to 0.17.1. [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=code.gitea.io/sdk/gitea&package-manager=go_modules&previous-version=0.17.0&new-version=0.17.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-06 14:10:04 +02:00
golang.org/x/net v0.10.0/go.mod h1:0qNGK6F8kojg2nk9dLZ2mShWaEBan6FAoqfSigmmuDg=
feat(deps): bump golang.org/x/oauth2 from 0.14.0 to 0.15.0 (#4445) Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from 0.14.0 to 0.15.0. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/golang/oauth2/commit/6e9ec9323da7adcd2cc6e62e4deb9fae4c309a1a"><code>6e9ec93</code></a> go.mod: update golang.org/x dependencies</li> <li>See full diff in <a href="https://github.com/golang/oauth2/compare/v0.14.0...v0.15.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/oauth2&package-manager=go_modules&previous-version=0.14.0&new-version=0.15.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-28 14:22:27 +02:00
golang.org/x/net v0.19.0 h1:zTwKpTd2XuCqf8huc7Fo2iSy+4RHPd10s4KzeTnVr1c=
golang.org/x/net v0.19.0/go.mod h1:CfAk/cbD4CthTvqiEl8NpboMuiuOYsAr/7NOjZJtv1U=
feat: update go-github (#1012)
2019-04-22 14:44:08 +02:00
golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
feat: add support for pushing artifacts to cloud storage provider( S3, Azure Blob, GCS) (#1036) * feat: adding support to push artifacts to AWS S3,Azure Blob and Google Cloud Storage readme for blob publisher test: add unit test for blob using testify and mockery test: add unit test for publish method fix: openbucket instance initialization remove unwanted packages: go mod tidy test: add missing unit test for publish method * doc: add missing comment for func * fix: add accidental delete file * fix : add missing Snapcrafts project * fix: unit test for Azure blob * fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue * fmt: fix linter reporeted issues fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue fmt: linter fix * test: fix typo in test error string * feat: add support to provider folder inside bucket, resolves discussed comments
2019-06-05 15:51:01 +02:00
golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
feat: go 1.13 (#1135) * feat: go 1.13 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: go.mod Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: update to go 1.13 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * bump: deps Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: deps Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: trying replace Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: go mod init Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: disable funlen lint Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2019-09-13 14:53:56 +02:00
golang.org/x/oauth2 v0.0.0-20190604053449-0f29369cfe45/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
golang.org/x/oauth2 v0.0.0-20191202225959-858c2ad4c8b6/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
chore(deps): bump all Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2020-01-26 16:49:18 +02:00
golang.org/x/oauth2 v0.0.0-20200107190931-bf48bf16ab8d/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
chore(deps): bump gocloud.dev from 0.20.0 to 0.21.0 (#1941) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.20.0 to 0.21.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.20.0...v0.21.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-12 01:14:58 +02:00
golang.org/x/oauth2 v0.0.0-20200902213428-5d25da1a8d43/go.mod h1:KelEdhl1UZF7XfJ4dDtk6s++YSgaE7mD/BuKKDLBl4A=
golang.org/x/oauth2 v0.0.0-20201109201403-9fd604954f58/go.mod h1:KelEdhl1UZF7XfJ4dDtk6s++YSgaE7mD/BuKKDLBl4A=
chore(deps): bump gocloud.dev from 0.22.0 to 0.23.0 (#2225) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.22.0 to 0.23.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.22.0...v0.23.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-17 14:03:45 +02:00
golang.org/x/oauth2 v0.0.0-20201208152858-08078c50e5b5/go.mod h1:KelEdhl1UZF7XfJ4dDtk6s++YSgaE7mD/BuKKDLBl4A=
golang.org/x/oauth2 v0.0.0-20210218202405-ba52d332ba99/go.mod h1:KelEdhl1UZF7XfJ4dDtk6s++YSgaE7mD/BuKKDLBl4A=
feat(deps): bump golang.org/x/oauth2 from 0.14.0 to 0.15.0 (#4445) Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from 0.14.0 to 0.15.0. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/golang/oauth2/commit/6e9ec9323da7adcd2cc6e62e4deb9fae4c309a1a"><code>6e9ec93</code></a> go.mod: update golang.org/x dependencies</li> <li>See full diff in <a href="https://github.com/golang/oauth2/compare/v0.14.0...v0.15.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/oauth2&package-manager=go_modules&previous-version=0.14.0&new-version=0.15.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-28 14:22:27 +02:00
golang.org/x/oauth2 v0.15.0 h1:s8pnnxNVzjWyrvYdFUQq5llS1PX2zhPXmccZv99h7uQ=
golang.org/x/oauth2 v0.15.0/go.mod h1:q48ptWNTY5XWf+JNten23lcvHpLJ0ZSxF5ttTHKVCAM=
chore: go modules
2018-10-29 02:54:15 +02:00
golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
feat: add support for pushing artifacts to cloud storage provider( S3, Azure Blob, GCS) (#1036) * feat: adding support to push artifacts to AWS S3,Azure Blob and Google Cloud Storage readme for blob publisher test: add unit test for blob using testify and mockery test: add unit test for publish method fix: openbucket instance initialization remove unwanted packages: go mod tidy test: add missing unit test for publish method * doc: add missing comment for func * fix: add accidental delete file * fix : add missing Snapcrafts project * fix: unit test for Azure blob * fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue * fmt: fix linter reporeted issues fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue fmt: linter fix * test: fix typo in test error string * feat: add support to provider folder inside bucket, resolves discussed comments
2019-06-05 15:51:01 +02:00
golang.org/x/sync v0.0.0-20181108010431-42b317875d0f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
golang.org/x/sync v0.0.0-20181221193216-37e7f081c4d4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
feat: update go-github (#1012)
2019-04-22 14:44:08 +02:00
golang.org/x/sync v0.0.0-20190227155943-e225da77a7e6/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
golang.org/x/sync v0.0.0-20190412183630-56d357773e84/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
fix: blob provider authentication issues for default aws mechanism (#1061) * fix: blob provider authentication issues for default aws mechanism * remove commented code * docs: update the authentication doc * fix: linter issues
2019-06-28 13:51:19 +02:00
golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
chore(deps): bump all (#1174) * chore(deps): bump Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * chore(deps): bump semver Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * chore(deps): bump cors Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2019-10-06 17:39:53 +02:00
golang.org/x/sync v0.0.0-20190911185100-cd5d95a43a6e/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
golang.org/x/sync v0.0.0-20200317015054-43a5402ce75a/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
chore(deps): bump github.com/golangci/golangci-lint (#1691) Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.28.3 to 1.29.0. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.28.3...v1.29.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-07-21 14:22:33 +02:00
golang.org/x/sync v0.0.0-20200625203802-6e8e738ad208/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
chore(deps): bump gocloud.dev from 0.20.0 to 0.21.0 (#1941) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.20.0 to 0.21.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.20.0...v0.21.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-12 01:14:58 +02:00
golang.org/x/sync v0.0.0-20201020160332-67f06af15bc9/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
chore(deps): bump gocloud.dev from 0.22.0 to 0.23.0 (#2225) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.22.0 to 0.23.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.22.0...v0.23.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-17 14:03:45 +02:00
golang.org/x/sync v0.0.0-20201207232520-09787c993a3a/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
golang.org/x/sync v0.0.0-20210220032951-036812b2e83c/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
feat(deps): bump gocloud.dev from 0.27.0 to 0.28.0 (#3689) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.27.0 to 0.28.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.28.0</h2> <p><strong>BREAKING CHANGES</strong>:</p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK.</li> <li><strong>blob/azureblob</strong>: Updated to match recent breaking changes in the Azure packages (yes, again).</li> <li><strong>pubsub/awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>blob</strong></p> <ul> <li><strong>memblob</strong>: Fixed bug where use of <code>BeforeCopy</code> callback would drop the actual copying.</li> <li><strong>azureblob</strong>: Updated to match recent breaking changes in the Azure packages.</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>all</strong>: Simplified and improved batch sizing, should resolve issues with too-frequent polling in some situations.</li> <li><strong>azurepubsub</strong>: Made <code>ListenerTimeout</code> configurable.</li> <li><strong>gcppubsub</strong> and <strong>awssnssqs</strong>: Support lazy mode for <code>Nack</code> (where no explicit <code>Nack</code> is sent).</li> <li><strong>awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>secrets</strong></p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK. Use azidentity.NewDefaultAzureCredential.</li> </ul> <p><strong>sql</strong></p> <ul> <li><strong>gcp/cloudsql</strong>: Fixed IAM login.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/24166090495b8e084a23aa7d11fcc81ec33e4729"><code>2416609</code></a> all: prep for v0.28.0 (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3207">#3207</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/13f46eb8065d5ea62b757f5f0f11a56f48faf7cc"><code>13f46eb</code></a> pubsub: simplify and improve batch sizing, especially for low message rates</li> <li><a href="https://github.com/google/go-cloud/commit/8f2c2b9a392a8e4a3d7a4942f88f3df607f8f6d0"><code>8f2c2b9</code></a> pubsub/memsub: Add Options for batching (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3205">#3205</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fe0a3d75fe43c039258df25ebf102602526e3052"><code>fe0a3d7</code></a> pubsub/awssqs: Fix BeforeSend/As to enable changes to the sqs input message (...</li> <li><a href="https://github.com/google/go-cloud/commit/dfaf95af34dd9022a69a061028e0ceec98e9c670"><code>dfaf95a</code></a> secrets/azurekeyvault: Use azidentity.NewDefaultAzureCredential to support ot...</li> <li><a href="https://github.com/google/go-cloud/commit/1e26311532928f060c490a7fbf2be92b55ee12c4"><code>1e26311</code></a> blob: Remove some debug logging (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3197">#3197</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/43ed5a499864c08b7b6549ff7085f19634a1f02c"><code>43ed5a4</code></a> pubsub/gcppubsub: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3195">#3195</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/be80e70b3dcf7a6b86481881c7ac0b44a8095178"><code>be80e70</code></a> pubsub/awssnssqs: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3194">#3194</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/7d690993a53cf8cc2e7af07872876d58601f1261"><code>7d69099</code></a> blob/azblob: Update to latest, and restore As for dirlist (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3191">#3191</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/e942f3c339f0eb617ac4dbc7f37cc4e5920ee7cc"><code>e942f3c</code></a> blob/azblob: Restore As for List entry (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3188">#3188</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.27.0...v0.28.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.27.0&new-version=0.28.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-11 14:09:51 +02:00
golang.org/x/sync v0.1.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
fix(deps): bump golang.org/x/sync from 0.5.0 to 0.6.0 (#4518) Bumps [golang.org/x/sync](https://github.com/golang/sync) from 0.5.0 to 0.6.0. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/golang/sync/commit/59c1ca1e4661ed4452be4069ceea3c233f4deec1"><code>59c1ca1</code></a> errgroup: add reference to sync.WaitGroup</li> <li>See full diff in <a href="https://github.com/golang/sync/compare/v0.5.0...v0.6.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/sync&package-manager=go_modules&previous-version=0.5.0&new-version=0.6.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-06 17:35:37 +02:00
golang.org/x/sync v0.6.0 h1:5BMeUDZ7vkXGfEr1x9B4bRcTH4lpkTkpdh0T/J+qjbQ=
golang.org/x/sync v0.6.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
feat: add support for pushing artifacts to cloud storage provider( S3, Azure Blob, GCS) (#1036) * feat: adding support to push artifacts to AWS S3,Azure Blob and Google Cloud Storage readme for blob publisher test: add unit test for blob using testify and mockery test: add unit test for publish method fix: openbucket instance initialization remove unwanted packages: go mod tidy test: add missing unit test for publish method * doc: add missing comment for func * fix: add accidental delete file * fix : add missing Snapcrafts project * fix: unit test for Azure blob * fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue * fmt: fix linter reporeted issues fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue fmt: linter fix * test: fix typo in test error string * feat: add support to provider folder inside bucket, resolves discussed comments
2019-06-05 15:51:01 +02:00
golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
feat: refactor main.go to spf13/cobra (#1472) * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: revert Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: refactor cli Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: lint Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: move Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2020-04-28 02:42:44 +02:00
golang.org/x/sys v0.0.0-20180905080454-ebe1bf3edb33/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
golang.org/x/sys v0.0.0-20181116152217-5ac8a444bdc5/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
feat: update go-github (#1012)
2019-04-22 14:44:08 +02:00
golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
chore(deps): bump gocloud.dev from 0.18.0 to 0.19.0 (#1340) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.18.0 to 0.19.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.18.0...v0.19.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-02-17 14:56:49 +02:00
golang.org/x/sys v0.0.0-20190312061237-fead79001313/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
feat(deps): bump gocloud.dev from 0.24.0 to 0.26.0 (#3287) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.24.0 to 0.26.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.24.0...v0.26.0) --- updated-dependencies: - dependency-name: gocloud.dev dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-04 20:44:54 +02:00
golang.org/x/sys v0.0.0-20190403152447-81d4e9dc473e/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
feat: add gitlab for releases (#1038) * outlines gitlab client integration * makes client parameter more explicit * adds gitlab url to config * changes releaseID to string to adapt to gitlab * updates to latest gitlab client lib 0.18 * fixes copy paster in gitlab upload func * fixes gitlab typo in config * adds gitlab token to env and context * release now uses the client factory method * skips brew pipe if it is not a github release * add github tokentype to publish tests * skips scoop pipe if it is not a github release * corrects brew skip msg * adds gitlab token to main test * adds gitlab to release docs * validates config and errors accordingly * adapt release pipe name to include gitlab * fixes gitlab client after testing * moves not-configured brew and scoop pipe checks as first check * adds more debug to gitlab client * adapts changelog generation for gitlab markdown * adds debug log for gitlab changelog * env needs to run before changelog pipe * moves gitlab default download url to default pipe * moves multiple releases check to from config to release pipe * release differs now for github and gitlab * adds debug gitlab release update msgs * moves env pipe as second after before because it determines the token type other pipes depend on * adaptes error check on gitlab release creation * Revert "adaptes error check on gitlab release creation" This reverts commit 032024571c76140f8e2207ee01cc08088f37594b. * simplifies gitlab client logic. removes comments * skips tls verification for gitlab client if specified in config * updates the docs * adds clarification that brew and scoop are not supported if it is a gitlab release * fixes copy paster in release.md * adds missing blob pipe in defaults and publish due to missing in merge * updates comment in gitlab client
2019-06-29 16:02:40 +02:00
golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
golang.org/x/sys v0.0.0-20190419153524-e8e3143a4f4a/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
feat(deps): bump gocloud.dev from 0.24.0 to 0.26.0 (#3287) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.24.0 to 0.26.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.24.0...v0.26.0) --- updated-dependencies: - dependency-name: gocloud.dev dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-04 20:44:54 +02:00
golang.org/x/sys v0.0.0-20190422165155-953cdadca894/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
feat: go 1.13 (#1135) * feat: go 1.13 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: go.mod Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: update to go 1.13 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * bump: deps Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: deps Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: trying replace Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: go mod init Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: disable funlen lint Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2019-09-13 14:53:56 +02:00
golang.org/x/sys v0.0.0-20190502145724-3ef323f4f1fd/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
golang.org/x/sys v0.0.0-20190507160741-ecd444e8653b/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
golang.org/x/sys v0.0.0-20190531175056-4c3a928424d2/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
feat: go 1.13 (#1135) * feat: go 1.13 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: go.mod Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: update to go 1.13 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * bump: deps Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: deps Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: trying replace Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: go mod init Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: disable funlen lint Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2019-09-13 14:53:56 +02:00
golang.org/x/sys v0.0.0-20190606165138-5da285871e9c/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
golang.org/x/sys v0.0.0-20190606203320-7fc4e5ec1444/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
chore(deps): bump gocloud.dev from 0.18.0 to 0.19.0 (#1340) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.18.0 to 0.19.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.18.0...v0.19.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-02-17 14:56:49 +02:00
golang.org/x/sys v0.0.0-20190624142023-c5567b49c5d0/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
golang.org/x/sys v0.0.0-20190726091711-fc99dfbffb4e/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
golang.org/x/sys v0.0.0-20190801041406-cbf593c0f2f3/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
golang.org/x/sys v0.0.0-20191001151750-bb3f8db39f24/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
feat: update nfpm (#2640) * feat: update nfpm * feat: update nfpm * feat: update nfpm * feat: update nfpm * fix: dir type * docs: dir * docs: typo * fix: race * fix: race cond
2021-11-14 03:23:11 +02:00
golang.org/x/sys v0.0.0-20191026070338-33540a1f6037/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
golang.org/x/sys v0.0.0-20191115151921-52ab43148777/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
golang.org/x/sys v0.0.0-20191204072324-ce4227a45e2e/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
golang.org/x/sys v0.0.0-20191228213918-04cbcbbfeed8/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
golang.org/x/sys v0.0.0-20200113162924-86b910548bc1/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
golang.org/x/sys v0.0.0-20200122134326-e047566fdf82/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
golang.org/x/sys v0.0.0-20200202164722-d101bd2416d5/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
golang.org/x/sys v0.0.0-20200212091648-12a6c2dcc1e4/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
golang.org/x/sys v0.0.0-20200223170610-d5e6a3e2c0ae/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
golang.org/x/sys v0.0.0-20200302150141-5c8b2ff67527/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
golang.org/x/sys v0.0.0-20200323222414-85ca7c5b95cd/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
golang.org/x/sys v0.0.0-20200331124033-c3d80250170d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
golang.org/x/sys v0.0.0-20200501052902-10377860bb8e/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
golang.org/x/sys v0.0.0-20200511232937-7e40ca221e25/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
golang.org/x/sys v0.0.0-20200515095857-1151b9dac4a9/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
golang.org/x/sys v0.0.0-20200523222454-059865788121/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
chore(deps): bump gocloud.dev from 0.20.0 to 0.21.0 (#1941) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.20.0 to 0.21.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.20.0...v0.21.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-12 01:14:58 +02:00
golang.org/x/sys v0.0.0-20200803210538-64077c9b5642/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
golang.org/x/sys v0.0.0-20200905004654-be1d3432aa8f/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
feat: update nfpm Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2020-11-10 23:30:20 +02:00
golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
chore(deps): bump nfpm (#1946) * chore(deps): bump nfpm Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * chore(deps): bump nfpm Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2020-12-13 12:13:09 +02:00
golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
chore(deps): bump gocloud.dev from 0.20.0 to 0.21.0 (#1941) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.20.0 to 0.21.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.20.0...v0.21.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-12 01:14:58 +02:00
golang.org/x/sys v0.0.0-20201201145000-ef89a241ccb3/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
chore(deps): bump gocloud.dev from 0.22.0 to 0.23.0 (#2225) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.22.0 to 0.23.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.22.0...v0.23.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-17 14:03:45 +02:00
golang.org/x/sys v0.0.0-20210104204734-6f8348627aad/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
golang.org/x/sys v0.0.0-20210119212857-b64e53b001e4/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
chore(deps): bump gocloud.dev from 0.23.0 to 0.24.0 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2021-09-11 04:41:28 +02:00
golang.org/x/sys v0.0.0-20210124154548-22da62e12c0c/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
feat(deps): bump gocloud.dev from 0.27.0 to 0.28.0 (#3689) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.27.0 to 0.28.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.28.0</h2> <p><strong>BREAKING CHANGES</strong>:</p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK.</li> <li><strong>blob/azureblob</strong>: Updated to match recent breaking changes in the Azure packages (yes, again).</li> <li><strong>pubsub/awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>blob</strong></p> <ul> <li><strong>memblob</strong>: Fixed bug where use of <code>BeforeCopy</code> callback would drop the actual copying.</li> <li><strong>azureblob</strong>: Updated to match recent breaking changes in the Azure packages.</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>all</strong>: Simplified and improved batch sizing, should resolve issues with too-frequent polling in some situations.</li> <li><strong>azurepubsub</strong>: Made <code>ListenerTimeout</code> configurable.</li> <li><strong>gcppubsub</strong> and <strong>awssnssqs</strong>: Support lazy mode for <code>Nack</code> (where no explicit <code>Nack</code> is sent).</li> <li><strong>awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>secrets</strong></p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK. Use azidentity.NewDefaultAzureCredential.</li> </ul> <p><strong>sql</strong></p> <ul> <li><strong>gcp/cloudsql</strong>: Fixed IAM login.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/24166090495b8e084a23aa7d11fcc81ec33e4729"><code>2416609</code></a> all: prep for v0.28.0 (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3207">#3207</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/13f46eb8065d5ea62b757f5f0f11a56f48faf7cc"><code>13f46eb</code></a> pubsub: simplify and improve batch sizing, especially for low message rates</li> <li><a href="https://github.com/google/go-cloud/commit/8f2c2b9a392a8e4a3d7a4942f88f3df607f8f6d0"><code>8f2c2b9</code></a> pubsub/memsub: Add Options for batching (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3205">#3205</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fe0a3d75fe43c039258df25ebf102602526e3052"><code>fe0a3d7</code></a> pubsub/awssqs: Fix BeforeSend/As to enable changes to the sqs input message (...</li> <li><a href="https://github.com/google/go-cloud/commit/dfaf95af34dd9022a69a061028e0ceec98e9c670"><code>dfaf95a</code></a> secrets/azurekeyvault: Use azidentity.NewDefaultAzureCredential to support ot...</li> <li><a href="https://github.com/google/go-cloud/commit/1e26311532928f060c490a7fbf2be92b55ee12c4"><code>1e26311</code></a> blob: Remove some debug logging (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3197">#3197</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/43ed5a499864c08b7b6549ff7085f19634a1f02c"><code>43ed5a4</code></a> pubsub/gcppubsub: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3195">#3195</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/be80e70b3dcf7a6b86481881c7ac0b44a8095178"><code>be80e70</code></a> pubsub/awssnssqs: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3194">#3194</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/7d690993a53cf8cc2e7af07872876d58601f1261"><code>7d69099</code></a> blob/azblob: Update to latest, and restore As for dirlist (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3191">#3191</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/e942f3c339f0eb617ac4dbc7f37cc4e5920ee7cc"><code>e942f3c</code></a> blob/azblob: Restore As for List entry (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3188">#3188</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.27.0...v0.28.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.27.0&new-version=0.28.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-11 14:09:51 +02:00
golang.org/x/sys v0.0.0-20210225134936-a50acf3fe073/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
golang.org/x/sys v0.0.0-20210420072515-93ed5bcd2bfe/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
chore(deps): bump gocloud.dev from 0.22.0 to 0.23.0 (#2225) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.22.0 to 0.23.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.22.0...v0.23.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-17 14:03:45 +02:00
golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
golang.org/x/sys v0.0.0-20210423185535-09eb48e85fd7/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
chore(deps): bump gocloud.dev from 0.23.0 to 0.24.0 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2021-09-11 04:41:28 +02:00
golang.org/x/sys v0.0.0-20210615035016-665e8c7367d1/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
feat(deps): bump gocloud.dev from 0.27.0 to 0.28.0 (#3689) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.27.0 to 0.28.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.28.0</h2> <p><strong>BREAKING CHANGES</strong>:</p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK.</li> <li><strong>blob/azureblob</strong>: Updated to match recent breaking changes in the Azure packages (yes, again).</li> <li><strong>pubsub/awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>blob</strong></p> <ul> <li><strong>memblob</strong>: Fixed bug where use of <code>BeforeCopy</code> callback would drop the actual copying.</li> <li><strong>azureblob</strong>: Updated to match recent breaking changes in the Azure packages.</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>all</strong>: Simplified and improved batch sizing, should resolve issues with too-frequent polling in some situations.</li> <li><strong>azurepubsub</strong>: Made <code>ListenerTimeout</code> configurable.</li> <li><strong>gcppubsub</strong> and <strong>awssnssqs</strong>: Support lazy mode for <code>Nack</code> (where no explicit <code>Nack</code> is sent).</li> <li><strong>awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>secrets</strong></p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK. Use azidentity.NewDefaultAzureCredential.</li> </ul> <p><strong>sql</strong></p> <ul> <li><strong>gcp/cloudsql</strong>: Fixed IAM login.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/24166090495b8e084a23aa7d11fcc81ec33e4729"><code>2416609</code></a> all: prep for v0.28.0 (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3207">#3207</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/13f46eb8065d5ea62b757f5f0f11a56f48faf7cc"><code>13f46eb</code></a> pubsub: simplify and improve batch sizing, especially for low message rates</li> <li><a href="https://github.com/google/go-cloud/commit/8f2c2b9a392a8e4a3d7a4942f88f3df607f8f6d0"><code>8f2c2b9</code></a> pubsub/memsub: Add Options for batching (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3205">#3205</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fe0a3d75fe43c039258df25ebf102602526e3052"><code>fe0a3d7</code></a> pubsub/awssqs: Fix BeforeSend/As to enable changes to the sqs input message (...</li> <li><a href="https://github.com/google/go-cloud/commit/dfaf95af34dd9022a69a061028e0ceec98e9c670"><code>dfaf95a</code></a> secrets/azurekeyvault: Use azidentity.NewDefaultAzureCredential to support ot...</li> <li><a href="https://github.com/google/go-cloud/commit/1e26311532928f060c490a7fbf2be92b55ee12c4"><code>1e26311</code></a> blob: Remove some debug logging (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3197">#3197</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/43ed5a499864c08b7b6549ff7085f19634a1f02c"><code>43ed5a4</code></a> pubsub/gcppubsub: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3195">#3195</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/be80e70b3dcf7a6b86481881c7ac0b44a8095178"><code>be80e70</code></a> pubsub/awssnssqs: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3194">#3194</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/7d690993a53cf8cc2e7af07872876d58601f1261"><code>7d69099</code></a> blob/azblob: Update to latest, and restore As for dirlist (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3191">#3191</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/e942f3c339f0eb617ac4dbc7f37cc4e5920ee7cc"><code>e942f3c</code></a> blob/azblob: Restore As for List entry (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3188">#3188</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.27.0...v0.28.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.27.0&new-version=0.28.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-11 14:09:51 +02:00
golang.org/x/sys v0.0.0-20210616045830-e2b7044e8c71/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
chore(deps): bump gocloud.dev from 0.23.0 to 0.24.0 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2021-09-11 04:41:28 +02:00
golang.org/x/sys v0.0.0-20210616094352-59db8d763f22/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
golang.org/x/sys v0.0.0-20210630005230-0f9fa26af87c/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
golang.org/x/sys v0.0.0-20210906170528-6f6e22806c34/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
golang.org/x/sys v0.0.0-20211025201205-69cdffdb9359/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
feat(deps): bump gocloud.dev from 0.24.0 to 0.26.0 (#3287) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.24.0 to 0.26.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.24.0...v0.26.0) --- updated-dependencies: - dependency-name: gocloud.dev dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-04 20:44:54 +02:00
golang.org/x/sys v0.0.0-20211116061358-0a5406a5449c/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
feat(deps): bump github.com/xanzy/go-gitlab from 0.70.0 to 0.71.0 (#3298) Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab) from 0.70.0 to 0.71.0. - [Release notes](https://github.com/xanzy/go-gitlab/releases) - [Changelog](https://github.com/xanzy/go-gitlab/blob/master/releases_test.go) - [Commits](https://github.com/xanzy/go-gitlab/compare/v0.70.0...v0.71.0) --- updated-dependencies: - dependency-name: github.com/xanzy/go-gitlab dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-10 15:16:07 +02:00
golang.org/x/sys v0.0.0-20220520151302-bc2c85ada10a/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
feat: add ko support (#3653) continuing the PR by @developer-guy - [x] should be a publisher, as it does publish the images it builds every time - [x] `Default` method does not work - [x] the `fromConfig` thing should probably be on the defaults, too - [x] wire `--skip-ko` - [x] documentation - [x] more tests - [x] use same registry as docker tests does - [ ] see if we can make the log output match goreleaser's - [ ] ?? closes #2556 closes #3490 Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com> Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> Co-authored-by: actions-user <actions@github.com> Co-authored-by: Jason Hall <jason@chainguard.dev> Co-authored-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2023-01-17 03:34:49 +02:00
golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
feat(deps): bump gocloud.dev from 0.27.0 to 0.28.0 (#3689) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.27.0 to 0.28.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.28.0</h2> <p><strong>BREAKING CHANGES</strong>:</p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK.</li> <li><strong>blob/azureblob</strong>: Updated to match recent breaking changes in the Azure packages (yes, again).</li> <li><strong>pubsub/awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>blob</strong></p> <ul> <li><strong>memblob</strong>: Fixed bug where use of <code>BeforeCopy</code> callback would drop the actual copying.</li> <li><strong>azureblob</strong>: Updated to match recent breaking changes in the Azure packages.</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>all</strong>: Simplified and improved batch sizing, should resolve issues with too-frequent polling in some situations.</li> <li><strong>azurepubsub</strong>: Made <code>ListenerTimeout</code> configurable.</li> <li><strong>gcppubsub</strong> and <strong>awssnssqs</strong>: Support lazy mode for <code>Nack</code> (where no explicit <code>Nack</code> is sent).</li> <li><strong>awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>secrets</strong></p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK. Use azidentity.NewDefaultAzureCredential.</li> </ul> <p><strong>sql</strong></p> <ul> <li><strong>gcp/cloudsql</strong>: Fixed IAM login.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/24166090495b8e084a23aa7d11fcc81ec33e4729"><code>2416609</code></a> all: prep for v0.28.0 (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3207">#3207</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/13f46eb8065d5ea62b757f5f0f11a56f48faf7cc"><code>13f46eb</code></a> pubsub: simplify and improve batch sizing, especially for low message rates</li> <li><a href="https://github.com/google/go-cloud/commit/8f2c2b9a392a8e4a3d7a4942f88f3df607f8f6d0"><code>8f2c2b9</code></a> pubsub/memsub: Add Options for batching (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3205">#3205</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fe0a3d75fe43c039258df25ebf102602526e3052"><code>fe0a3d7</code></a> pubsub/awssqs: Fix BeforeSend/As to enable changes to the sqs input message (...</li> <li><a href="https://github.com/google/go-cloud/commit/dfaf95af34dd9022a69a061028e0ceec98e9c670"><code>dfaf95a</code></a> secrets/azurekeyvault: Use azidentity.NewDefaultAzureCredential to support ot...</li> <li><a href="https://github.com/google/go-cloud/commit/1e26311532928f060c490a7fbf2be92b55ee12c4"><code>1e26311</code></a> blob: Remove some debug logging (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3197">#3197</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/43ed5a499864c08b7b6549ff7085f19634a1f02c"><code>43ed5a4</code></a> pubsub/gcppubsub: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3195">#3195</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/be80e70b3dcf7a6b86481881c7ac0b44a8095178"><code>be80e70</code></a> pubsub/awssnssqs: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3194">#3194</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/7d690993a53cf8cc2e7af07872876d58601f1261"><code>7d69099</code></a> blob/azblob: Update to latest, and restore As for dirlist (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3191">#3191</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/e942f3c339f0eb617ac4dbc7f37cc4e5920ee7cc"><code>e942f3c</code></a> blob/azblob: Restore As for List entry (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3188">#3188</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.27.0...v0.28.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.27.0&new-version=0.28.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-11 14:09:51 +02:00
golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
golang.org/x/sys v0.2.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
golang.org/x/sys v0.3.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
feat(deps): bump gocloud.dev from 0.28.0 to 0.29.0 (#3837) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.28.0 to 0.29.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.29.0</h2> <p><strong>BREAKING CHANGES</strong></p> <ul> <li>Updated to latest <code>azureblob</code>, which had some non-backward-compatible changes (again).</li> </ul> <p><strong>all</strong></p> <ul> <li>Defaulting to <code>go</code> version <code>1.2</code>.</li> <li><strong>aws</strong>: Added support for custom endpoints for AWS SDK v2.</li> <li><strong>gcp</strong>: Updated imports for <code>credentialspb</code>.</li> </ul> <p><strong>blob</strong></p> <ul> <li><strong>azureblob</strong>: Updated to latest (breaking change).</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>kafkapub</strong>: Fixed nil Options pointer dereference.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/62397121ec57013e925de45ec6fb7a7bacbf5799"><code>6239712</code></a> all: prep for release (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3236">#3236</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/973ec8737135d7bf2e2c21975ed871526e38ef8a"><code>973ec87</code></a> all: prep for release (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3235">#3235</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/3348a6a4a0ccbcc4cc179866ea682d54ba3e0276"><code>3348a6a</code></a> aws: fix typo on awssdk=v2 docstring</li> <li><a href="https://github.com/google/go-cloud/commit/ec0a2bbc3f48f58b707fcad9e1926044efb242cb"><code>ec0a2bb</code></a> pubsub/rabbitpubsub: give rabbitmq more time to come up (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3233">#3233</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/082a4958948e4a36875570f6ee931ebfe950e29c"><code>082a495</code></a> docstore/gcpfirestore: update proto import (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3229">#3229</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/53ba9013f0a1240e7266b64a1c8f37ac891a84f8"><code>53ba901</code></a> pubsub/gcppubsub: update proto import (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3230">#3230</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b3612581b153f8ecbf63590c9087e746b5df9f8e"><code>b361258</code></a> runtimevar/gcpsecretmanager: update proto import (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3231">#3231</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/e5235d85eb9a1674f26984a068fcd91f445ef620"><code>e5235d8</code></a> blob/gcsblob: update proto import (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3228">#3228</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/7cd8b2b9f63cb8b15c114ea64fbef28aed00f0cc"><code>7cd8b2b</code></a> secrets/gcpkms: update proto import (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3227">#3227</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cddf16323d2af04a4bdd9b58fb85d9b28a1abee"><code>8cddf16</code></a> all: update deps BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3225">#3225</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.28.0...v0.29.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.28.0&new-version=0.29.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-06 18:07:00 +02:00
golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
feat(deps): bump gocloud.dev from 0.29.0 to 0.30.0 (#4129) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.29.0 to 0.30.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.30.0</h2> <p><strong>blob</strong></p> <ul> <li><strong>all</strong>: Add <code>Upload</code> and <code>Download</code> methods that may be more efficient for some drivers.</li> <li><strong>s3blob</strong>: Add support for per-request <code>s3v2.Options</code>.</li> <li><strong>s3blob</strong>: Stop escaping second <code>/</code> in <code>//</code>; it's no longer necessary.</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>gcppubsub</strong>: Make it possible to configure <code>max_send_batch_size</code>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/d2d5bedb50683e2a6b893b75aafc193eca2715db"><code>d2d5bed</code></a> all: prep for release (<a href="https://redirect.github.com/google/go-cloud/issues/3263">#3263</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/c2e172b5a78def74973f7f3a8ece7c0bd6967432"><code>c2e172b</code></a> all: update dependencies (<a href="https://redirect.github.com/google/go-cloud/issues/3262">#3262</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/098177a48cae1bebfc90f88ed43d319444cab804"><code>098177a</code></a> blob/s3blob: fix the 'awssdk' argument examples</li> <li><a href="https://github.com/google/go-cloud/commit/2e4fad43f0b2606833b6a0de3e18628c70e11398"><code>2e4fad4</code></a> all: remove refs to deprecated xerrors</li> <li><a href="https://github.com/google/go-cloud/commit/1db413f1b3c4e344618b36401ba7e6dca3892929"><code>1db413f</code></a> pubsub/gcppubsub: make it possible to configure max_send_batch_size</li> <li><a href="https://github.com/google/go-cloud/commit/0c8428bf433136e7a4d96de0841f6373c6eacb53"><code>0c8428b</code></a> blob: Add Upload and Download methods that may be more efficient for some dri...</li> <li><a href="https://github.com/google/go-cloud/commit/54c71241a56f4c89eb64f587e5dc55667eaa40a3"><code>54c7124</code></a> all: cleanup duplicate import statements</li> <li><a href="https://github.com/google/go-cloud/commit/28b1328ae4fee939441faa5ee2e4eeba74c88ce7"><code>28b1328</code></a> all: minor code simplifications for returned boolean expressions</li> <li><a href="https://github.com/google/go-cloud/commit/2a407f5e6a71951384531445e25c58194f235062"><code>2a407f5</code></a> blob/gcsblob: Refresh goldens</li> <li><a href="https://github.com/google/go-cloud/commit/0cc16c8ae11e47028df24c4973debd6c56d29729"><code>0cc16c8</code></a> all: update goldens (<a href="https://redirect.github.com/google/go-cloud/issues/3252">#3252</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.29.0...v0.30.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.29.0&new-version=0.30.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-20 14:04:08 +02:00
golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
fix(deps): bump code.gitea.io/sdk/gitea from 0.17.0 to 0.17.1 (#4512) Bumps code.gitea.io/sdk/gitea from 0.17.0 to 0.17.1. [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=code.gitea.io/sdk/gitea&package-manager=go_modules&previous-version=0.17.0&new-version=0.17.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-06 14:10:04 +02:00
golang.org/x/sys v0.8.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
feat(deps): bump golang.org/x/oauth2 from 0.14.0 to 0.15.0 (#4445) Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from 0.14.0 to 0.15.0. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/golang/oauth2/commit/6e9ec9323da7adcd2cc6e62e4deb9fae4c309a1a"><code>6e9ec93</code></a> go.mod: update golang.org/x dependencies</li> <li>See full diff in <a href="https://github.com/golang/oauth2/compare/v0.14.0...v0.15.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/oauth2&package-manager=go_modules&previous-version=0.14.0&new-version=0.15.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-28 14:22:27 +02:00
golang.org/x/sys v0.15.0 h1:h48lPFYpsTvQJZF4EKyI4aLHaev3CxivZmv7yZig9pc=
golang.org/x/sys v0.15.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
chore(deps): bump nfpm (#1946) * chore(deps): bump nfpm Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * chore(deps): bump nfpm Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2020-12-13 12:13:09 +02:00
golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
feat(deps): bump github.com/xanzy/go-gitlab from 0.65.0 to 0.68.0 (#3126) Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab) from 0.65.0 to 0.68.0. - [Release notes](https://github.com/xanzy/go-gitlab/releases) - [Changelog](https://github.com/xanzy/go-gitlab/blob/master/releases_test.go) - [Commits](https://github.com/xanzy/go-gitlab/compare/v0.65.0...v0.68.0) --- updated-dependencies: - dependency-name: github.com/xanzy/go-gitlab dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-02 14:02:24 +02:00
golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
feat(deps): bump gocloud.dev from 0.27.0 to 0.28.0 (#3689) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.27.0 to 0.28.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.28.0</h2> <p><strong>BREAKING CHANGES</strong>:</p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK.</li> <li><strong>blob/azureblob</strong>: Updated to match recent breaking changes in the Azure packages (yes, again).</li> <li><strong>pubsub/awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>blob</strong></p> <ul> <li><strong>memblob</strong>: Fixed bug where use of <code>BeforeCopy</code> callback would drop the actual copying.</li> <li><strong>azureblob</strong>: Updated to match recent breaking changes in the Azure packages.</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>all</strong>: Simplified and improved batch sizing, should resolve issues with too-frequent polling in some situations.</li> <li><strong>azurepubsub</strong>: Made <code>ListenerTimeout</code> configurable.</li> <li><strong>gcppubsub</strong> and <strong>awssnssqs</strong>: Support lazy mode for <code>Nack</code> (where no explicit <code>Nack</code> is sent).</li> <li><strong>awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>secrets</strong></p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK. Use azidentity.NewDefaultAzureCredential.</li> </ul> <p><strong>sql</strong></p> <ul> <li><strong>gcp/cloudsql</strong>: Fixed IAM login.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/24166090495b8e084a23aa7d11fcc81ec33e4729"><code>2416609</code></a> all: prep for v0.28.0 (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3207">#3207</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/13f46eb8065d5ea62b757f5f0f11a56f48faf7cc"><code>13f46eb</code></a> pubsub: simplify and improve batch sizing, especially for low message rates</li> <li><a href="https://github.com/google/go-cloud/commit/8f2c2b9a392a8e4a3d7a4942f88f3df607f8f6d0"><code>8f2c2b9</code></a> pubsub/memsub: Add Options for batching (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3205">#3205</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fe0a3d75fe43c039258df25ebf102602526e3052"><code>fe0a3d7</code></a> pubsub/awssqs: Fix BeforeSend/As to enable changes to the sqs input message (...</li> <li><a href="https://github.com/google/go-cloud/commit/dfaf95af34dd9022a69a061028e0ceec98e9c670"><code>dfaf95a</code></a> secrets/azurekeyvault: Use azidentity.NewDefaultAzureCredential to support ot...</li> <li><a href="https://github.com/google/go-cloud/commit/1e26311532928f060c490a7fbf2be92b55ee12c4"><code>1e26311</code></a> blob: Remove some debug logging (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3197">#3197</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/43ed5a499864c08b7b6549ff7085f19634a1f02c"><code>43ed5a4</code></a> pubsub/gcppubsub: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3195">#3195</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/be80e70b3dcf7a6b86481881c7ac0b44a8095178"><code>be80e70</code></a> pubsub/awssnssqs: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3194">#3194</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/7d690993a53cf8cc2e7af07872876d58601f1261"><code>7d69099</code></a> blob/azblob: Update to latest, and restore As for dirlist (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3191">#3191</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/e942f3c339f0eb617ac4dbc7f37cc4e5920ee7cc"><code>e942f3c</code></a> blob/azblob: Restore As for List entry (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3188">#3188</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.27.0...v0.28.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.27.0&new-version=0.28.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-11 14:09:51 +02:00
golang.org/x/term v0.2.0/go.mod h1:TVmDHMZPmdnySmBfhjOoOdhjzdE1h4u1VwSiw2l1Nuc=
feat(deps): bump gocloud.dev from 0.28.0 to 0.29.0 (#3837) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.28.0 to 0.29.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.29.0</h2> <p><strong>BREAKING CHANGES</strong></p> <ul> <li>Updated to latest <code>azureblob</code>, which had some non-backward-compatible changes (again).</li> </ul> <p><strong>all</strong></p> <ul> <li>Defaulting to <code>go</code> version <code>1.2</code>.</li> <li><strong>aws</strong>: Added support for custom endpoints for AWS SDK v2.</li> <li><strong>gcp</strong>: Updated imports for <code>credentialspb</code>.</li> </ul> <p><strong>blob</strong></p> <ul> <li><strong>azureblob</strong>: Updated to latest (breaking change).</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>kafkapub</strong>: Fixed nil Options pointer dereference.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/62397121ec57013e925de45ec6fb7a7bacbf5799"><code>6239712</code></a> all: prep for release (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3236">#3236</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/973ec8737135d7bf2e2c21975ed871526e38ef8a"><code>973ec87</code></a> all: prep for release (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3235">#3235</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/3348a6a4a0ccbcc4cc179866ea682d54ba3e0276"><code>3348a6a</code></a> aws: fix typo on awssdk=v2 docstring</li> <li><a href="https://github.com/google/go-cloud/commit/ec0a2bbc3f48f58b707fcad9e1926044efb242cb"><code>ec0a2bb</code></a> pubsub/rabbitpubsub: give rabbitmq more time to come up (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3233">#3233</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/082a4958948e4a36875570f6ee931ebfe950e29c"><code>082a495</code></a> docstore/gcpfirestore: update proto import (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3229">#3229</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/53ba9013f0a1240e7266b64a1c8f37ac891a84f8"><code>53ba901</code></a> pubsub/gcppubsub: update proto import (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3230">#3230</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b3612581b153f8ecbf63590c9087e746b5df9f8e"><code>b361258</code></a> runtimevar/gcpsecretmanager: update proto import (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3231">#3231</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/e5235d85eb9a1674f26984a068fcd91f445ef620"><code>e5235d8</code></a> blob/gcsblob: update proto import (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3228">#3228</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/7cd8b2b9f63cb8b15c114ea64fbef28aed00f0cc"><code>7cd8b2b</code></a> secrets/gcpkms: update proto import (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3227">#3227</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cddf16323d2af04a4bdd9b58fb85d9b28a1abee"><code>8cddf16</code></a> all: update deps BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3225">#3225</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.28.0...v0.29.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.28.0&new-version=0.29.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-06 18:07:00 +02:00
golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
feat(deps): bump gocloud.dev from 0.29.0 to 0.30.0 (#4129) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.29.0 to 0.30.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.30.0</h2> <p><strong>blob</strong></p> <ul> <li><strong>all</strong>: Add <code>Upload</code> and <code>Download</code> methods that may be more efficient for some drivers.</li> <li><strong>s3blob</strong>: Add support for per-request <code>s3v2.Options</code>.</li> <li><strong>s3blob</strong>: Stop escaping second <code>/</code> in <code>//</code>; it's no longer necessary.</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>gcppubsub</strong>: Make it possible to configure <code>max_send_batch_size</code>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/d2d5bedb50683e2a6b893b75aafc193eca2715db"><code>d2d5bed</code></a> all: prep for release (<a href="https://redirect.github.com/google/go-cloud/issues/3263">#3263</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/c2e172b5a78def74973f7f3a8ece7c0bd6967432"><code>c2e172b</code></a> all: update dependencies (<a href="https://redirect.github.com/google/go-cloud/issues/3262">#3262</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/098177a48cae1bebfc90f88ed43d319444cab804"><code>098177a</code></a> blob/s3blob: fix the 'awssdk' argument examples</li> <li><a href="https://github.com/google/go-cloud/commit/2e4fad43f0b2606833b6a0de3e18628c70e11398"><code>2e4fad4</code></a> all: remove refs to deprecated xerrors</li> <li><a href="https://github.com/google/go-cloud/commit/1db413f1b3c4e344618b36401ba7e6dca3892929"><code>1db413f</code></a> pubsub/gcppubsub: make it possible to configure max_send_batch_size</li> <li><a href="https://github.com/google/go-cloud/commit/0c8428bf433136e7a4d96de0841f6373c6eacb53"><code>0c8428b</code></a> blob: Add Upload and Download methods that may be more efficient for some dri...</li> <li><a href="https://github.com/google/go-cloud/commit/54c71241a56f4c89eb64f587e5dc55667eaa40a3"><code>54c7124</code></a> all: cleanup duplicate import statements</li> <li><a href="https://github.com/google/go-cloud/commit/28b1328ae4fee939441faa5ee2e4eeba74c88ce7"><code>28b1328</code></a> all: minor code simplifications for returned boolean expressions</li> <li><a href="https://github.com/google/go-cloud/commit/2a407f5e6a71951384531445e25c58194f235062"><code>2a407f5</code></a> blob/gcsblob: Refresh goldens</li> <li><a href="https://github.com/google/go-cloud/commit/0cc16c8ae11e47028df24c4973debd6c56d29729"><code>0cc16c8</code></a> all: update goldens (<a href="https://redirect.github.com/google/go-cloud/issues/3252">#3252</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.29.0...v0.30.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.29.0&new-version=0.30.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-20 14:04:08 +02:00
golang.org/x/term v0.6.0/go.mod h1:m6U89DPEgQRMq3DNkDClhWw02AUbt2daBVO4cn4Hv9U=
fix(deps): bump code.gitea.io/sdk/gitea from 0.17.0 to 0.17.1 (#4512) Bumps code.gitea.io/sdk/gitea from 0.17.0 to 0.17.1. [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=code.gitea.io/sdk/gitea&package-manager=go_modules&previous-version=0.17.0&new-version=0.17.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-06 14:10:04 +02:00
golang.org/x/term v0.8.0/go.mod h1:xPskH00ivmX89bAKVGSKKtLOWNx2+17Eiy94tnKShWo=
feat(deps): bump golang.org/x/oauth2 from 0.14.0 to 0.15.0 (#4445) Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from 0.14.0 to 0.15.0. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/golang/oauth2/commit/6e9ec9323da7adcd2cc6e62e4deb9fae4c309a1a"><code>6e9ec93</code></a> go.mod: update golang.org/x dependencies</li> <li>See full diff in <a href="https://github.com/golang/oauth2/compare/v0.14.0...v0.15.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/oauth2&package-manager=go_modules&previous-version=0.14.0&new-version=0.15.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-28 14:22:27 +02:00
golang.org/x/term v0.15.0 h1:y/Oo/a/q3IXu26lQgl04j/gjuBDOBlx7X6Om1j2CPW4=
golang.org/x/term v0.15.0/go.mod h1:BDl952bC7+uMoWR75FIrCDx79TPU9oHkTZ9yRbYOrX0=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
golang.org/x/text v0.0.0-20170915032832-14c0d48ead0c/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
bump: nfpm
2018-10-31 04:26:58 +02:00
golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
feat: add support for pushing artifacts to cloud storage provider( S3, Azure Blob, GCS) (#1036) * feat: adding support to push artifacts to AWS S3,Azure Blob and Google Cloud Storage readme for blob publisher test: add unit test for blob using testify and mockery test: add unit test for publish method fix: openbucket instance initialization remove unwanted packages: go mod tidy test: add missing unit test for publish method * doc: add missing comment for func * fix: add accidental delete file * fix : add missing Snapcrafts project * fix: unit test for Azure blob * fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue * fmt: fix linter reporeted issues fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue fmt: linter fix * test: fix typo in test error string * feat: add support to provider folder inside bucket, resolves discussed comments
2019-06-05 15:51:01 +02:00
golang.org/x/text v0.3.1-0.20180807135948-17ff2d5776d2/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
fix: blob provider authentication issues for default aws mechanism (#1061) * fix: blob provider authentication issues for default aws mechanism * remove commented code * docs: update the authentication doc * fix: linter issues
2019-06-28 13:51:19 +02:00
golang.org/x/text v0.3.2/go.mod h1:bEr9sfX3Q8Zfm5fL9x+3itogRgK3+ptLWKqgva+5dAk=
chore(deps): bump github.com/goreleaser/nfpm from 1.4.1 to 1.5.0 (#1697) Bumps [github.com/goreleaser/nfpm](https://github.com/goreleaser/nfpm) from 1.4.1 to 1.5.0. - [Release notes](https://github.com/goreleaser/nfpm/releases) - [Changelog](https://github.com/goreleaser/nfpm/blob/master/.goreleaser.yml) - [Commits](https://github.com/goreleaser/nfpm/compare/v1.4.1...v1.5.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-07-22 14:01:49 +02:00
golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
feat: update nfpm Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2020-11-10 23:30:20 +02:00
golang.org/x/text v0.3.4/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
chore(deps): bump gocloud.dev from 0.22.0 to 0.23.0 (#2225) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.22.0 to 0.23.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.22.0...v0.23.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-17 14:03:45 +02:00
golang.org/x/text v0.3.5/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
chore(deps): bump github.com/goreleaser/nfpm/v2 from 2.3.1 to 2.4.0 (#2170) Bumps [github.com/goreleaser/nfpm/v2](https://github.com/goreleaser/nfpm) from 2.3.1 to 2.4.0. - [Release notes](https://github.com/goreleaser/nfpm/releases) - [Changelog](https://github.com/goreleaser/nfpm/blob/master/.goreleaser.yml) - [Commits](https://github.com/goreleaser/nfpm/compare/v2.3.1...v2.4.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-04-16 14:50:21 +02:00
golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
chore(deps): bump gocloud.dev from 0.23.0 to 0.24.0 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2021-09-11 04:41:28 +02:00
golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419) Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.1.1 to 2.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's releases</a>.</em></p> <blockquote> <h2>v2.2.1</h2> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's changelog</a>.</em></p> <blockquote> <h1>v2.2.1</h1> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign/commit/12cbf9ea177d22bbf5cf028bcb4712b5f174ebc6"><code>12cbf9e</code></a> add changelog for v2.2.1 release (<a href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/827f24e9d4a1f8e845cb1597d02053410f5bbe2a"><code>827f24e</code></a> feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8ac891ff0e29ddc67965423bee8f826219c6eb0f"><code>8ac891f</code></a> Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li><a href="https://github.com/sigstore/cosign/commit/8b366c497bd22b9be7742d057b8f59083dcadee0"><code>8b366c4</code></a> add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/23920de5623a505921ba4e62fa97e2553eff4699"><code>23920de</code></a> chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/e022e1c13240d1ae5b3c408bc53e389154331713"><code>e022e1c</code></a> chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/28c59c5eca6386924cc8f381afe94efe1e957679"><code>28c59c5</code></a> add missing groups key (<a href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8e5bdcc0ff39b8dc1b477251fef521601df76ec0"><code>8e5bdcc</code></a> chore(deps): bump github.com/google/certificate-transparency-go (<a href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/510cac4ef54274823599082e3a57a556ccd5c9e5"><code>510cac4</code></a> chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/063902b1d78fed7c12c9d9ce06248d36963e8169"><code>063902b</code></a> chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 18:39:49 +02:00
golang.org/x/text v0.3.8/go.mod h1:E6s5w1FMmriuDzIBO73fBruAKo1PCIq6d2Q6DHfQ8WQ=
feat(deps): bump gocloud.dev from 0.27.0 to 0.28.0 (#3689) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.27.0 to 0.28.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.28.0</h2> <p><strong>BREAKING CHANGES</strong>:</p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK.</li> <li><strong>blob/azureblob</strong>: Updated to match recent breaking changes in the Azure packages (yes, again).</li> <li><strong>pubsub/awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>blob</strong></p> <ul> <li><strong>memblob</strong>: Fixed bug where use of <code>BeforeCopy</code> callback would drop the actual copying.</li> <li><strong>azureblob</strong>: Updated to match recent breaking changes in the Azure packages.</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>all</strong>: Simplified and improved batch sizing, should resolve issues with too-frequent polling in some situations.</li> <li><strong>azurepubsub</strong>: Made <code>ListenerTimeout</code> configurable.</li> <li><strong>gcppubsub</strong> and <strong>awssnssqs</strong>: Support lazy mode for <code>Nack</code> (where no explicit <code>Nack</code> is sent).</li> <li><strong>awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>secrets</strong></p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK. Use azidentity.NewDefaultAzureCredential.</li> </ul> <p><strong>sql</strong></p> <ul> <li><strong>gcp/cloudsql</strong>: Fixed IAM login.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/24166090495b8e084a23aa7d11fcc81ec33e4729"><code>2416609</code></a> all: prep for v0.28.0 (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3207">#3207</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/13f46eb8065d5ea62b757f5f0f11a56f48faf7cc"><code>13f46eb</code></a> pubsub: simplify and improve batch sizing, especially for low message rates</li> <li><a href="https://github.com/google/go-cloud/commit/8f2c2b9a392a8e4a3d7a4942f88f3df607f8f6d0"><code>8f2c2b9</code></a> pubsub/memsub: Add Options for batching (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3205">#3205</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fe0a3d75fe43c039258df25ebf102602526e3052"><code>fe0a3d7</code></a> pubsub/awssqs: Fix BeforeSend/As to enable changes to the sqs input message (...</li> <li><a href="https://github.com/google/go-cloud/commit/dfaf95af34dd9022a69a061028e0ceec98e9c670"><code>dfaf95a</code></a> secrets/azurekeyvault: Use azidentity.NewDefaultAzureCredential to support ot...</li> <li><a href="https://github.com/google/go-cloud/commit/1e26311532928f060c490a7fbf2be92b55ee12c4"><code>1e26311</code></a> blob: Remove some debug logging (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3197">#3197</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/43ed5a499864c08b7b6549ff7085f19634a1f02c"><code>43ed5a4</code></a> pubsub/gcppubsub: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3195">#3195</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/be80e70b3dcf7a6b86481881c7ac0b44a8095178"><code>be80e70</code></a> pubsub/awssnssqs: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3194">#3194</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/7d690993a53cf8cc2e7af07872876d58601f1261"><code>7d69099</code></a> blob/azblob: Update to latest, and restore As for dirlist (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3191">#3191</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/e942f3c339f0eb617ac4dbc7f37cc4e5920ee7cc"><code>e942f3c</code></a> blob/azblob: Restore As for List entry (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3188">#3188</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.27.0...v0.28.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.27.0&new-version=0.28.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-11 14:09:51 +02:00
golang.org/x/text v0.4.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
feat(deps): bump gocloud.dev from 0.28.0 to 0.29.0 (#3837) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.28.0 to 0.29.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.29.0</h2> <p><strong>BREAKING CHANGES</strong></p> <ul> <li>Updated to latest <code>azureblob</code>, which had some non-backward-compatible changes (again).</li> </ul> <p><strong>all</strong></p> <ul> <li>Defaulting to <code>go</code> version <code>1.2</code>.</li> <li><strong>aws</strong>: Added support for custom endpoints for AWS SDK v2.</li> <li><strong>gcp</strong>: Updated imports for <code>credentialspb</code>.</li> </ul> <p><strong>blob</strong></p> <ul> <li><strong>azureblob</strong>: Updated to latest (breaking change).</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>kafkapub</strong>: Fixed nil Options pointer dereference.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/62397121ec57013e925de45ec6fb7a7bacbf5799"><code>6239712</code></a> all: prep for release (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3236">#3236</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/973ec8737135d7bf2e2c21975ed871526e38ef8a"><code>973ec87</code></a> all: prep for release (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3235">#3235</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/3348a6a4a0ccbcc4cc179866ea682d54ba3e0276"><code>3348a6a</code></a> aws: fix typo on awssdk=v2 docstring</li> <li><a href="https://github.com/google/go-cloud/commit/ec0a2bbc3f48f58b707fcad9e1926044efb242cb"><code>ec0a2bb</code></a> pubsub/rabbitpubsub: give rabbitmq more time to come up (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3233">#3233</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/082a4958948e4a36875570f6ee931ebfe950e29c"><code>082a495</code></a> docstore/gcpfirestore: update proto import (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3229">#3229</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/53ba9013f0a1240e7266b64a1c8f37ac891a84f8"><code>53ba901</code></a> pubsub/gcppubsub: update proto import (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3230">#3230</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b3612581b153f8ecbf63590c9087e746b5df9f8e"><code>b361258</code></a> runtimevar/gcpsecretmanager: update proto import (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3231">#3231</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/e5235d85eb9a1674f26984a068fcd91f445ef620"><code>e5235d8</code></a> blob/gcsblob: update proto import (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3228">#3228</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/7cd8b2b9f63cb8b15c114ea64fbef28aed00f0cc"><code>7cd8b2b</code></a> secrets/gcpkms: update proto import (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3227">#3227</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cddf16323d2af04a4bdd9b58fb85d9b28a1abee"><code>8cddf16</code></a> all: update deps BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3225">#3225</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.28.0...v0.29.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.28.0&new-version=0.29.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-06 18:07:00 +02:00
golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
feat(deps): bump gocloud.dev from 0.29.0 to 0.30.0 (#4129) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.29.0 to 0.30.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.30.0</h2> <p><strong>blob</strong></p> <ul> <li><strong>all</strong>: Add <code>Upload</code> and <code>Download</code> methods that may be more efficient for some drivers.</li> <li><strong>s3blob</strong>: Add support for per-request <code>s3v2.Options</code>.</li> <li><strong>s3blob</strong>: Stop escaping second <code>/</code> in <code>//</code>; it's no longer necessary.</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>gcppubsub</strong>: Make it possible to configure <code>max_send_batch_size</code>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/d2d5bedb50683e2a6b893b75aafc193eca2715db"><code>d2d5bed</code></a> all: prep for release (<a href="https://redirect.github.com/google/go-cloud/issues/3263">#3263</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/c2e172b5a78def74973f7f3a8ece7c0bd6967432"><code>c2e172b</code></a> all: update dependencies (<a href="https://redirect.github.com/google/go-cloud/issues/3262">#3262</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/098177a48cae1bebfc90f88ed43d319444cab804"><code>098177a</code></a> blob/s3blob: fix the 'awssdk' argument examples</li> <li><a href="https://github.com/google/go-cloud/commit/2e4fad43f0b2606833b6a0de3e18628c70e11398"><code>2e4fad4</code></a> all: remove refs to deprecated xerrors</li> <li><a href="https://github.com/google/go-cloud/commit/1db413f1b3c4e344618b36401ba7e6dca3892929"><code>1db413f</code></a> pubsub/gcppubsub: make it possible to configure max_send_batch_size</li> <li><a href="https://github.com/google/go-cloud/commit/0c8428bf433136e7a4d96de0841f6373c6eacb53"><code>0c8428b</code></a> blob: Add Upload and Download methods that may be more efficient for some dri...</li> <li><a href="https://github.com/google/go-cloud/commit/54c71241a56f4c89eb64f587e5dc55667eaa40a3"><code>54c7124</code></a> all: cleanup duplicate import statements</li> <li><a href="https://github.com/google/go-cloud/commit/28b1328ae4fee939441faa5ee2e4eeba74c88ce7"><code>28b1328</code></a> all: minor code simplifications for returned boolean expressions</li> <li><a href="https://github.com/google/go-cloud/commit/2a407f5e6a71951384531445e25c58194f235062"><code>2a407f5</code></a> blob/gcsblob: Refresh goldens</li> <li><a href="https://github.com/google/go-cloud/commit/0cc16c8ae11e47028df24c4973debd6c56d29729"><code>0cc16c8</code></a> all: update goldens (<a href="https://redirect.github.com/google/go-cloud/issues/3252">#3252</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.29.0...v0.30.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.29.0&new-version=0.30.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-20 14:04:08 +02:00
golang.org/x/text v0.8.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8=
fix(deps): bump code.gitea.io/sdk/gitea from 0.17.0 to 0.17.1 (#4512) Bumps code.gitea.io/sdk/gitea from 0.17.0 to 0.17.1. [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=code.gitea.io/sdk/gitea&package-manager=go_modules&previous-version=0.17.0&new-version=0.17.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-06 14:10:04 +02:00
golang.org/x/text v0.9.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8=
feat(deps): bump golang.org/x/text from 0.13.0 to 0.14.0 (#4409) Bumps [golang.org/x/text](https://github.com/golang/text) from 0.13.0 to 0.14.0. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/golang/text/commit/6c97a165dd661335ff7bce6104a008558123c353"><code>6c97a16</code></a> all: update go directive to 1.18</li> <li>See full diff in <a href="https://github.com/golang/text/compare/v0.13.0...v0.14.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/text&package-manager=go_modules&previous-version=0.13.0&new-version=0.14.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) Dependabot will merge this PR once CI passes on it, as requested by @caarlos0. [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-06 17:44:16 +02:00
golang.org/x/text v0.14.0 h1:ScX5w1eTa3QqT8oi6+ziP7dTV1S2+ALU0bI+0zXKWiQ=
golang.org/x/text v0.14.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU=
feat: add support for pushing artifacts to cloud storage provider( S3, Azure Blob, GCS) (#1036) * feat: adding support to push artifacts to AWS S3,Azure Blob and Google Cloud Storage readme for blob publisher test: add unit test for blob using testify and mockery test: add unit test for publish method fix: openbucket instance initialization remove unwanted packages: go mod tidy test: add missing unit test for publish method * doc: add missing comment for func * fix: add accidental delete file * fix : add missing Snapcrafts project * fix: unit test for Azure blob * fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue * fmt: fix linter reporeted issues fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue fmt: linter fix * test: fix typo in test error string * feat: add support to provider folder inside bucket, resolves discussed comments
2019-06-05 15:51:01 +02:00
golang.org/x/time v0.0.0-20181108054448-85acf8d2951c/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
chore(deps): bump gocloud.dev from 0.18.0 to 0.19.0 (#1340) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.18.0 to 0.19.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.18.0...v0.19.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-02-17 14:56:49 +02:00
golang.org/x/time v0.0.0-20190308202827-9d24e82272b4/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
chore(deps): bump github.com/xanzy/go-gitlab from 0.28.0 to 0.29.0 (#1400) Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab) from 0.28.0 to 0.29.0. - [Release notes](https://github.com/xanzy/go-gitlab/releases) - [Changelog](https://github.com/xanzy/go-gitlab/blob/master/CHANGELOG.md) - [Commits](https://github.com/xanzy/go-gitlab/compare/v0.28.0...v0.29.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-03-24 14:44:58 +02:00
golang.org/x/time v0.0.0-20191024005414-555d28b269f0/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
feat(deps): bump gocloud.dev from 0.34.0 to 0.35.0 (#4467) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.34.0 to 0.35.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.35.0</h2> <p><strong>BREAKING CHANGES</strong></p> <p>This release updates the dependency on AWS/S3, which included some breaking changes; see <a href="https://redirect.github.com/google/go-cloud/pull/3342">google/go-cloud#3342</a> for details.</p> <p><strong>blob</strong></p> <ul> <li><em>gcsblob</em>: Fix unauthenticated requests.</li> </ul> <p><strong>runtimevar</strong></p> <ul> <li><em>constantvar</em>: Add support for reading the constant variable value from the environment.</li> </ul> <p><strong>docstore</strong></p> <ul> <li><em>gcpfilestore</em>: Add support for non-default databases.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/27e0bca95dae3165b94cab4f9b7e2e4b087c8aef"><code>27e0bca</code></a> all: prep for release (<a href="https://redirect.github.com/google/go-cloud/issues/3350">#3350</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/53ccd8db26a14fd2a40bfcb28af1a1ceba4663f4"><code>53ccd8d</code></a> all: update deps, including a breaking S3 change (<a href="https://redirect.github.com/google/go-cloud/issues/3342">#3342</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fa413a39cdf8ffe0890a1b0a4cf5e06e0c915592"><code>fa413a3</code></a> docstore/gcpfilestore: add support for non-default databases. (<a href="https://redirect.github.com/google/go-cloud/issues/3345">#3345</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/c04000b96462ad3ec62e633eafd759185991bb27"><code>c04000b</code></a> secrets/hashivault: Update go-jose per dependabot (<a href="https://redirect.github.com/google/go-cloud/issues/3346">#3346</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/6d5d2890816abc88cd11ef13d6cd6506eb5b5537"><code>6d5d289</code></a> pubsub/natspubsub: upgrade a dependency (<a href="https://redirect.github.com/google/go-cloud/issues/3336">#3336</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/375e097193225b4ef300a336e04ccad9ace50bc1"><code>375e097</code></a> pubsub/natspubsub: Update dependency (<a href="https://redirect.github.com/google/go-cloud/issues/3331">#3331</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/35ac324ff7fae5ddc0f9dc2ff234a7d6b4935a20"><code>35ac324</code></a> all: update dependencies (<a href="https://redirect.github.com/google/go-cloud/issues/3329">#3329</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/4a18be0f4a48c145da4a76499485a45478fd69aa"><code>4a18be0</code></a> secrets/awskms: update the example for the AWS ARN use case (<a href="https://redirect.github.com/google/go-cloud/issues/3320">#3320</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/486d484a8f73fd5bedc910d4fd89c52e11412e68"><code>486d484</code></a> kafkapubsub: rename dependency Shopify/sarama to IBM/sarama (<a href="https://redirect.github.com/google/go-cloud/issues/3319">#3319</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/db7e808e313228ed8607a94d6e5cd075d66f4e86"><code>db7e808</code></a> runtimevar/constantvar: Add support for reading the constantvar from an envir...</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.34.0...v0.35.0">compare view</a></li> </ul> </details> <br /> <details> <summary>Most Recent Ignore Conditions Applied to This Pull Request</summary> | Dependency Name | Ignore Conditions | | --- | --- | | gocloud.dev | [>= 0.25.a, < 0.26] | </details> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.34.0&new-version=0.35.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-11 12:55:26 +02:00
golang.org/x/time v0.4.0 h1:Z81tqI5ddIoXDPvVQ7/7CC9TnLM7ubaFG2qXYd5BbYY=
golang.org/x/time v0.4.0/go.mod h1:3BpzKBy/shNhVucY/MWOyx10tF3SFh9QdLuxbVysPQM=
fix: blob provider authentication issues for default aws mechanism (#1061) * fix: blob provider authentication issues for default aws mechanism * remove commented code * docs: update the authentication doc * fix: linter issues
2019-06-28 13:51:19 +02:00
golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
feat: add support for pushing artifacts to cloud storage provider( S3, Azure Blob, GCS) (#1036) * feat: adding support to push artifacts to AWS S3,Azure Blob and Google Cloud Storage readme for blob publisher test: add unit test for blob using testify and mockery test: add unit test for publish method fix: openbucket instance initialization remove unwanted packages: go mod tidy test: add missing unit test for publish method * doc: add missing comment for func * fix: add accidental delete file * fix : add missing Snapcrafts project * fix: unit test for Azure blob * fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue * fmt: fix linter reporeted issues fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue fmt: linter fix * test: fix typo in test error string * feat: add support to provider folder inside bucket, resolves discussed comments
2019-06-05 15:51:01 +02:00
golang.org/x/tools v0.0.0-20190114222345-bf090417da8b/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
golang.org/x/tools v0.0.0-20190226205152-f727befe758c/go.mod h1:9Yl7xja0Znq3iFh3HoIrodX9oNMXvdceNzlUR8zjMvY=
feat: add gitlab for releases (#1038) * outlines gitlab client integration * makes client parameter more explicit * adds gitlab url to config * changes releaseID to string to adapt to gitlab * updates to latest gitlab client lib 0.18 * fixes copy paster in gitlab upload func * fixes gitlab typo in config * adds gitlab token to env and context * release now uses the client factory method * skips brew pipe if it is not a github release * add github tokentype to publish tests * skips scoop pipe if it is not a github release * corrects brew skip msg * adds gitlab token to main test * adds gitlab to release docs * validates config and errors accordingly * adapt release pipe name to include gitlab * fixes gitlab client after testing * moves not-configured brew and scoop pipe checks as first check * adds more debug to gitlab client * adapts changelog generation for gitlab markdown * adds debug log for gitlab changelog * env needs to run before changelog pipe * moves gitlab default download url to default pipe * moves multiple releases check to from config to release pipe * release differs now for github and gitlab * adds debug gitlab release update msgs * moves env pipe as second after before because it determines the token type other pipes depend on * adaptes error check on gitlab release creation * Revert "adaptes error check on gitlab release creation" This reverts commit 032024571c76140f8e2207ee01cc08088f37594b. * simplifies gitlab client logic. removes comments * skips tls verification for gitlab client if specified in config * updates the docs * adds clarification that brew and scoop are not supported if it is a gitlab release * fixes copy paster in release.md * adds missing blob pipe in defaults and publish due to missing in merge * updates comment in gitlab client
2019-06-29 16:02:40 +02:00
golang.org/x/tools v0.0.0-20190311212946-11955173bddd/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs=
chore(deps): bump gocloud.dev from 0.18.0 to 0.19.0 (#1340) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.18.0 to 0.19.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.18.0...v0.19.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-02-17 14:56:49 +02:00
golang.org/x/tools v0.0.0-20190312151545-0bb0c0a6e846/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs=
feat: add support for pushing artifacts to cloud storage provider( S3, Azure Blob, GCS) (#1036) * feat: adding support to push artifacts to AWS S3,Azure Blob and Google Cloud Storage readme for blob publisher test: add unit test for blob using testify and mockery test: add unit test for publish method fix: openbucket instance initialization remove unwanted packages: go mod tidy test: add missing unit test for publish method * doc: add missing comment for func * fix: add accidental delete file * fix : add missing Snapcrafts project * fix: unit test for Azure blob * fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue * fmt: fix linter reporeted issues fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue fmt: linter fix * test: fix typo in test error string * feat: add support to provider folder inside bucket, resolves discussed comments
2019-06-05 15:51:01 +02:00
golang.org/x/tools v0.0.0-20190312170243-e65039ee4138/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
golang.org/x/tools v0.0.0-20190329151228-23e29df326fe/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs=
golang.org/x/tools v0.0.0-20190416151739-9c9e1878f421/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs=
golang.org/x/tools v0.0.0-20190420181800-aa740d480789/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs=
feat: add gitlab for releases (#1038) * outlines gitlab client integration * makes client parameter more explicit * adds gitlab url to config * changes releaseID to string to adapt to gitlab * updates to latest gitlab client lib 0.18 * fixes copy paster in gitlab upload func * fixes gitlab typo in config * adds gitlab token to env and context * release now uses the client factory method * skips brew pipe if it is not a github release * add github tokentype to publish tests * skips scoop pipe if it is not a github release * corrects brew skip msg * adds gitlab token to main test * adds gitlab to release docs * validates config and errors accordingly * adapt release pipe name to include gitlab * fixes gitlab client after testing * moves not-configured brew and scoop pipe checks as first check * adds more debug to gitlab client * adapts changelog generation for gitlab markdown * adds debug log for gitlab changelog * env needs to run before changelog pipe * moves gitlab default download url to default pipe * moves multiple releases check to from config to release pipe * release differs now for github and gitlab * adds debug gitlab release update msgs * moves env pipe as second after before because it determines the token type other pipes depend on * adaptes error check on gitlab release creation * Revert "adaptes error check on gitlab release creation" This reverts commit 032024571c76140f8e2207ee01cc08088f37594b. * simplifies gitlab client logic. removes comments * skips tls verification for gitlab client if specified in config * updates the docs * adds clarification that brew and scoop are not supported if it is a gitlab release * fixes copy paster in release.md * adds missing blob pipe in defaults and publish due to missing in merge * updates comment in gitlab client
2019-06-29 16:02:40 +02:00
golang.org/x/tools v0.0.0-20190422233926-fe54fb35175b/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs=
chore(deps): bump gocloud.dev from 0.18.0 to 0.19.0 (#1340) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.18.0 to 0.19.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.18.0...v0.19.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-02-17 14:56:49 +02:00
golang.org/x/tools v0.0.0-20190425150028-36563e24a262/go.mod h1:RgjU9mgBXZiqYHBnxXauZ1Gv1EHHAz9KjViQ78xBX0Q=
feat: go 1.13 (#1135) * feat: go 1.13 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: go.mod Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: update to go 1.13 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * bump: deps Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: deps Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: trying replace Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: go mod init Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: disable funlen lint Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2019-09-13 14:53:56 +02:00
golang.org/x/tools v0.0.0-20190506145303-2d16b83fe98c/go.mod h1:RgjU9mgBXZiqYHBnxXauZ1Gv1EHHAz9KjViQ78xBX0Q=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
golang.org/x/tools v0.0.0-20190524140312-2c0ae7006135/go.mod h1:RgjU9mgBXZiqYHBnxXauZ1Gv1EHHAz9KjViQ78xBX0Q=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
golang.org/x/tools v0.0.0-20190531172133-b3315ee88b7d/go.mod h1:/rFqwRUd4F7ZHNgwSSTFct+R/Kf4OFW1sUzUTQQTgfc=
feat: go 1.13 (#1135) * feat: go 1.13 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: go.mod Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: update to go 1.13 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * bump: deps Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: deps Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: trying replace Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: go mod init Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: disable funlen lint Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2019-09-13 14:53:56 +02:00
golang.org/x/tools v0.0.0-20190606124116-d0a3d012864b/go.mod h1:/rFqwRUd4F7ZHNgwSSTFct+R/Kf4OFW1sUzUTQQTgfc=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
golang.org/x/tools v0.0.0-20190621195816-6e04913cbbac/go.mod h1:/rFqwRUd4F7ZHNgwSSTFct+R/Kf4OFW1sUzUTQQTgfc=
chore(deps): bump gocloud.dev from 0.18.0 to 0.19.0 (#1340) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.18.0 to 0.19.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.18.0...v0.19.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-02-17 14:56:49 +02:00
golang.org/x/tools v0.0.0-20190628153133-6cdbf07be9d0/go.mod h1:/rFqwRUd4F7ZHNgwSSTFct+R/Kf4OFW1sUzUTQQTgfc=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
golang.org/x/tools v0.0.0-20190816200558-6889da9d5479/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
golang.org/x/tools v0.0.0-20190911174233-4f2ddba30aff/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
golang.org/x/tools v0.0.0-20191012152004-8de300cfc20a/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
golang.org/x/tools v0.0.0-20191113191852-77e3bb0ad9e7/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
golang.org/x/tools v0.0.0-20191115202509-3a792d9c32b2/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
chore(deps): bump github.com/golangci/golangci-lint from 1.23.7 to 1.27.0 (#1563) * chore(deps): bump github.com/golangci/golangci-lint from 1.23.7 to 1.27.0 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: tests Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2020-05-26 05:48:10 +02:00
golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
golang.org/x/tools v0.0.0-20191125144606-a911d9008d1f/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
chore(deps): bump github.com/golangci/golangci-lint from 1.23.7 to 1.27.0 (#1563) * chore(deps): bump github.com/golangci/golangci-lint from 1.23.7 to 1.27.0 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: tests Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2020-05-26 05:48:10 +02:00
golang.org/x/tools v0.0.0-20191130070609-6e064ea0cf2d/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
golang.org/x/tools v0.0.0-20191216173652-a0e659d51361/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28=
golang.org/x/tools v0.0.0-20191227053925-7b8e75db28f4/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28=
golang.org/x/tools v0.0.0-20200117161641-43d50277825c/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28=
golang.org/x/tools v0.0.0-20200122220014-bf1340f18c4a/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28=
golang.org/x/tools v0.0.0-20200130002326-2f3ba24bd6e7/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28=
golang.org/x/tools v0.0.0-20200204074204-1cc6d1ef6c74/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28=
golang.org/x/tools v0.0.0-20200207183749-b753a1ba74fa/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28=
golang.org/x/tools v0.0.0-20200212150539-ea181f53ac56/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28=
golang.org/x/tools v0.0.0-20200224181240-023911ca70b2/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28=
golang.org/x/tools v0.0.0-20200227222343-706bc42d1f0d/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28=
golang.org/x/tools v0.0.0-20200304193943-95d2e580d8eb/go.mod h1:o4KQGtdN14AW+yjsvvwRTJJuXz8XRtIHtEnmAXLyFUw=
golang.org/x/tools v0.0.0-20200312045724-11d5b4c81c7d/go.mod h1:o4KQGtdN14AW+yjsvvwRTJJuXz8XRtIHtEnmAXLyFUw=
golang.org/x/tools v0.0.0-20200331025713-a30bf2db82d4/go.mod h1:Sl4aGygMT6LrqrWclx+PTx3U+LnKx/seiNR+3G19Ar8=
golang.org/x/tools v0.0.0-20200501065659-ab2804fb9c9d/go.mod h1:EkVYQZoAsY45+roYkvgYkIh4xh/qjgUK9TdY2XT94GE=
golang.org/x/tools v0.0.0-20200512131952-2bc93b1c0c88/go.mod h1:EkVYQZoAsY45+roYkvgYkIh4xh/qjgUK9TdY2XT94GE=
golang.org/x/tools v0.0.0-20200515010526-7d3b6ebf133d/go.mod h1:EkVYQZoAsY45+roYkvgYkIh4xh/qjgUK9TdY2XT94GE=
chore(deps): bump gocloud.dev from 0.20.0 to 0.21.0 (#1941) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.20.0 to 0.21.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.20.0...v0.21.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-12 01:14:58 +02:00
golang.org/x/tools v0.0.0-20200618134242-20370b0cb4b2/go.mod h1:EkVYQZoAsY45+roYkvgYkIh4xh/qjgUK9TdY2XT94GE=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
golang.org/x/tools v0.0.0-20200619180055-7c47624df98f/go.mod h1:EkVYQZoAsY45+roYkvgYkIh4xh/qjgUK9TdY2XT94GE=
chore(deps): bump gocloud.dev from 0.20.0 to 0.21.0 (#1941) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.20.0 to 0.21.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.20.0...v0.21.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-12 01:14:58 +02:00
golang.org/x/tools v0.0.0-20200729194436-6467de6f59a7/go.mod h1:njjCfa9FT2d7l9Bc6FUM5FLjQPp3cFF28FI3qnDFljA=
golang.org/x/tools v0.0.0-20200804011535-6c149bb5ef0d/go.mod h1:njjCfa9FT2d7l9Bc6FUM5FLjQPp3cFF28FI3qnDFljA=
golang.org/x/tools v0.0.0-20200825202427-b303f430e36d/go.mod h1:njjCfa9FT2d7l9Bc6FUM5FLjQPp3cFF28FI3qnDFljA=
golang.org/x/tools v0.0.0-20200904185747-39188db58858/go.mod h1:Cj7w3i3Rnn0Xh82ur9kSqwfTHTeVxaDqrfMjpcNT6bE=
golang.org/x/tools v0.0.0-20201110124207-079ba7bd75cd/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA=
golang.org/x/tools v0.0.0-20201201161351-ac6f37ff4c2a/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA=
chore(deps): bump gocloud.dev from 0.22.0 to 0.23.0 (#2225) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.22.0 to 0.23.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.22.0...v0.23.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-17 14:03:45 +02:00
golang.org/x/tools v0.0.0-20201208233053-a543418bbed2/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA=
golang.org/x/tools v0.0.0-20210105154028-b0ab187a4818/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
golang.org/x/tools v0.0.0-20210106214847-113979e3529a/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA=
feat(deps): bump gocloud.dev from 0.27.0 to 0.28.0 (#3689) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.27.0 to 0.28.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.28.0</h2> <p><strong>BREAKING CHANGES</strong>:</p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK.</li> <li><strong>blob/azureblob</strong>: Updated to match recent breaking changes in the Azure packages (yes, again).</li> <li><strong>pubsub/awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>blob</strong></p> <ul> <li><strong>memblob</strong>: Fixed bug where use of <code>BeforeCopy</code> callback would drop the actual copying.</li> <li><strong>azureblob</strong>: Updated to match recent breaking changes in the Azure packages.</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>all</strong>: Simplified and improved batch sizing, should resolve issues with too-frequent polling in some situations.</li> <li><strong>azurepubsub</strong>: Made <code>ListenerTimeout</code> configurable.</li> <li><strong>gcppubsub</strong> and <strong>awssnssqs</strong>: Support lazy mode for <code>Nack</code> (where no explicit <code>Nack</code> is sent).</li> <li><strong>awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>secrets</strong></p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK. Use azidentity.NewDefaultAzureCredential.</li> </ul> <p><strong>sql</strong></p> <ul> <li><strong>gcp/cloudsql</strong>: Fixed IAM login.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/24166090495b8e084a23aa7d11fcc81ec33e4729"><code>2416609</code></a> all: prep for v0.28.0 (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3207">#3207</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/13f46eb8065d5ea62b757f5f0f11a56f48faf7cc"><code>13f46eb</code></a> pubsub: simplify and improve batch sizing, especially for low message rates</li> <li><a href="https://github.com/google/go-cloud/commit/8f2c2b9a392a8e4a3d7a4942f88f3df607f8f6d0"><code>8f2c2b9</code></a> pubsub/memsub: Add Options for batching (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3205">#3205</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fe0a3d75fe43c039258df25ebf102602526e3052"><code>fe0a3d7</code></a> pubsub/awssqs: Fix BeforeSend/As to enable changes to the sqs input message (...</li> <li><a href="https://github.com/google/go-cloud/commit/dfaf95af34dd9022a69a061028e0ceec98e9c670"><code>dfaf95a</code></a> secrets/azurekeyvault: Use azidentity.NewDefaultAzureCredential to support ot...</li> <li><a href="https://github.com/google/go-cloud/commit/1e26311532928f060c490a7fbf2be92b55ee12c4"><code>1e26311</code></a> blob: Remove some debug logging (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3197">#3197</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/43ed5a499864c08b7b6549ff7085f19634a1f02c"><code>43ed5a4</code></a> pubsub/gcppubsub: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3195">#3195</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/be80e70b3dcf7a6b86481881c7ac0b44a8095178"><code>be80e70</code></a> pubsub/awssnssqs: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3194">#3194</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/7d690993a53cf8cc2e7af07872876d58601f1261"><code>7d69099</code></a> blob/azblob: Update to latest, and restore As for dirlist (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3191">#3191</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/e942f3c339f0eb617ac4dbc7f37cc4e5920ee7cc"><code>e942f3c</code></a> blob/azblob: Restore As for List entry (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3188">#3188</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.27.0...v0.28.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.27.0&new-version=0.28.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-11 14:09:51 +02:00
golang.org/x/tools v0.0.0-20210108195828-e2f9c7f1fc8e/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA=
chore(deps): bump gocloud.dev from 0.22.0 to 0.23.0 (#2225) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.22.0 to 0.23.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.22.0...v0.23.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-17 14:03:45 +02:00
golang.org/x/tools v0.1.0/go.mod h1:xkSsbof2nBLbhDlRMhhhyNLN/zl3eTqcnHD5viDpcZ0=
feat(deps): bump gocloud.dev from 0.27.0 to 0.28.0 (#3689) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.27.0 to 0.28.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.28.0</h2> <p><strong>BREAKING CHANGES</strong>:</p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK.</li> <li><strong>blob/azureblob</strong>: Updated to match recent breaking changes in the Azure packages (yes, again).</li> <li><strong>pubsub/awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>blob</strong></p> <ul> <li><strong>memblob</strong>: Fixed bug where use of <code>BeforeCopy</code> callback would drop the actual copying.</li> <li><strong>azureblob</strong>: Updated to match recent breaking changes in the Azure packages.</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>all</strong>: Simplified and improved batch sizing, should resolve issues with too-frequent polling in some situations.</li> <li><strong>azurepubsub</strong>: Made <code>ListenerTimeout</code> configurable.</li> <li><strong>gcppubsub</strong> and <strong>awssnssqs</strong>: Support lazy mode for <code>Nack</code> (where no explicit <code>Nack</code> is sent).</li> <li><strong>awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>secrets</strong></p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK. Use azidentity.NewDefaultAzureCredential.</li> </ul> <p><strong>sql</strong></p> <ul> <li><strong>gcp/cloudsql</strong>: Fixed IAM login.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/24166090495b8e084a23aa7d11fcc81ec33e4729"><code>2416609</code></a> all: prep for v0.28.0 (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3207">#3207</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/13f46eb8065d5ea62b757f5f0f11a56f48faf7cc"><code>13f46eb</code></a> pubsub: simplify and improve batch sizing, especially for low message rates</li> <li><a href="https://github.com/google/go-cloud/commit/8f2c2b9a392a8e4a3d7a4942f88f3df607f8f6d0"><code>8f2c2b9</code></a> pubsub/memsub: Add Options for batching (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3205">#3205</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fe0a3d75fe43c039258df25ebf102602526e3052"><code>fe0a3d7</code></a> pubsub/awssqs: Fix BeforeSend/As to enable changes to the sqs input message (...</li> <li><a href="https://github.com/google/go-cloud/commit/dfaf95af34dd9022a69a061028e0ceec98e9c670"><code>dfaf95a</code></a> secrets/azurekeyvault: Use azidentity.NewDefaultAzureCredential to support ot...</li> <li><a href="https://github.com/google/go-cloud/commit/1e26311532928f060c490a7fbf2be92b55ee12c4"><code>1e26311</code></a> blob: Remove some debug logging (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3197">#3197</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/43ed5a499864c08b7b6549ff7085f19634a1f02c"><code>43ed5a4</code></a> pubsub/gcppubsub: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3195">#3195</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/be80e70b3dcf7a6b86481881c7ac0b44a8095178"><code>be80e70</code></a> pubsub/awssnssqs: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3194">#3194</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/7d690993a53cf8cc2e7af07872876d58601f1261"><code>7d69099</code></a> blob/azblob: Update to latest, and restore As for dirlist (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3191">#3191</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/e942f3c339f0eb617ac4dbc7f37cc4e5920ee7cc"><code>e942f3c</code></a> blob/azblob: Restore As for List entry (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3188">#3188</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.27.0...v0.28.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.27.0&new-version=0.28.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-11 14:09:51 +02:00
golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
feat(deps): bump gocloud.dev from 0.29.0 to 0.30.0 (#4129) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.29.0 to 0.30.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.30.0</h2> <p><strong>blob</strong></p> <ul> <li><strong>all</strong>: Add <code>Upload</code> and <code>Download</code> methods that may be more efficient for some drivers.</li> <li><strong>s3blob</strong>: Add support for per-request <code>s3v2.Options</code>.</li> <li><strong>s3blob</strong>: Stop escaping second <code>/</code> in <code>//</code>; it's no longer necessary.</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>gcppubsub</strong>: Make it possible to configure <code>max_send_batch_size</code>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/d2d5bedb50683e2a6b893b75aafc193eca2715db"><code>d2d5bed</code></a> all: prep for release (<a href="https://redirect.github.com/google/go-cloud/issues/3263">#3263</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/c2e172b5a78def74973f7f3a8ece7c0bd6967432"><code>c2e172b</code></a> all: update dependencies (<a href="https://redirect.github.com/google/go-cloud/issues/3262">#3262</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/098177a48cae1bebfc90f88ed43d319444cab804"><code>098177a</code></a> blob/s3blob: fix the 'awssdk' argument examples</li> <li><a href="https://github.com/google/go-cloud/commit/2e4fad43f0b2606833b6a0de3e18628c70e11398"><code>2e4fad4</code></a> all: remove refs to deprecated xerrors</li> <li><a href="https://github.com/google/go-cloud/commit/1db413f1b3c4e344618b36401ba7e6dca3892929"><code>1db413f</code></a> pubsub/gcppubsub: make it possible to configure max_send_batch_size</li> <li><a href="https://github.com/google/go-cloud/commit/0c8428bf433136e7a4d96de0841f6373c6eacb53"><code>0c8428b</code></a> blob: Add Upload and Download methods that may be more efficient for some dri...</li> <li><a href="https://github.com/google/go-cloud/commit/54c71241a56f4c89eb64f587e5dc55667eaa40a3"><code>54c7124</code></a> all: cleanup duplicate import statements</li> <li><a href="https://github.com/google/go-cloud/commit/28b1328ae4fee939441faa5ee2e4eeba74c88ce7"><code>28b1328</code></a> all: minor code simplifications for returned boolean expressions</li> <li><a href="https://github.com/google/go-cloud/commit/2a407f5e6a71951384531445e25c58194f235062"><code>2a407f5</code></a> blob/gcsblob: Refresh goldens</li> <li><a href="https://github.com/google/go-cloud/commit/0cc16c8ae11e47028df24c4973debd6c56d29729"><code>0cc16c8</code></a> all: update goldens (<a href="https://redirect.github.com/google/go-cloud/issues/3252">#3252</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.29.0...v0.30.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.29.0&new-version=0.30.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-20 14:04:08 +02:00
golang.org/x/tools v0.6.0/go.mod h1:Xwgl3UAJ/d3gWutnCtw505GrjyAbvKui8lOU390QaIU=
feat(deps): bump golang.org/x/tools from 0.16.0 to 0.16.1 (#4478) Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.16.0 to 0.16.1. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/golang/tools/commit/2acb2e697b49f179be93652febb89d384f0f09c9"><code>2acb2e6</code></a> gopls/internal/test/marker: minor clean up of marker test doc</li> <li><a href="https://github.com/golang/tools/commit/28b92af2866ab2bc225795ba13f5a1ae765ffec5"><code>28b92af</code></a> internal/typeparams: eliminate remainining compatibility shims</li> <li><a href="https://github.com/golang/tools/commit/ee35f8ea92b83ca45ebd96714001e9312bfc96a0"><code>ee35f8e</code></a> gopls/internal/lsp/source: hovering over broken packages is not an error</li> <li><a href="https://github.com/golang/tools/commit/67611a11a1be5466d372eba4e925d97290929ef4"><code>67611a1</code></a> internal/typeparams: eliminate type aliases</li> <li><a href="https://github.com/golang/tools/commit/23c86e8ed69114240a9c50fbacdbbeadb4b63385"><code>23c86e8</code></a> internal/typeparams: delete const Enabled=true and simplify</li> <li><a href="https://github.com/golang/tools/commit/e46688f41326d03a6df28607f1b4d170e31b16ad"><code>e46688f</code></a> gopls/internal/analysis/fillstruct: don't panic with invalid fields</li> <li><a href="https://github.com/golang/tools/commit/8bd7553f7c595ecbf244343302e1bfe890f1f947"><code>8bd7553</code></a> gopls/internal/util/goversion: warn about EOL for Go 1.18</li> <li><a href="https://github.com/golang/tools/commit/bc9cd159c589d9f78867aaeb5c70867c58e24e61"><code>bc9cd15</code></a> gopls/internal/settings: remove MemoryMode option</li> <li><a href="https://github.com/golang/tools/commit/bbc30f1f81aa4a8e2b390bdcc5ebb019e90d658e"><code>bbc30f1</code></a> gopls/protocol: Allow AnnotatedTextEdits</li> <li><a href="https://github.com/golang/tools/commit/f40889dc8bf08e65329aa3f302ba7af3024d712d"><code>f40889d</code></a> gopls/internal/analysis/stubmethods: fix OOB panic in fromValueSpec</li> <li>Additional commits viewable in <a href="https://github.com/golang/tools/compare/v0.16.0...v0.16.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/tools&package-manager=go_modules&previous-version=0.16.0&new-version=0.16.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-13 20:11:38 +02:00
golang.org/x/tools v0.16.1 h1:TLyB3WofjdOEepBHAU20JdNC1Zbg87elYofWYAY5oZA=
golang.org/x/tools v0.16.1/go.mod h1:kYVVN6I1mBNoB1OX+noeBjbRk4IUEPa7JJ+TJMEooJ0=
feat: go 1.13 (#1135) * feat: go 1.13 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: go.mod Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: update to go 1.13 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * bump: deps Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: deps Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: trying replace Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: go mod init Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: disable funlen lint Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2019-09-13 14:53:56 +02:00
golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
feat: Use tools.go paradigm for external dependencies (#1495) Co-authored-by: CrazyMax <crazy-max@users.noreply.github.com>
2020-05-10 21:34:55 +02:00
golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
chore(deps): bump github.com/golangci/golangci-lint from 1.23.7 to 1.27.0 (#1563) * chore(deps): bump github.com/golangci/golangci-lint from 1.23.7 to 1.27.0 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: tests Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2020-05-26 05:48:10 +02:00
golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
chore(deps): update nfpm (#1813) * chore(deps): update nfpm Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: lint Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2020-09-21 15:13:03 +02:00
golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419) Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.1.1 to 2.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's releases</a>.</em></p> <blockquote> <h2>v2.2.1</h2> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's changelog</a>.</em></p> <blockquote> <h1>v2.2.1</h1> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign/commit/12cbf9ea177d22bbf5cf028bcb4712b5f174ebc6"><code>12cbf9e</code></a> add changelog for v2.2.1 release (<a href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/827f24e9d4a1f8e845cb1597d02053410f5bbe2a"><code>827f24e</code></a> feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8ac891ff0e29ddc67965423bee8f826219c6eb0f"><code>8ac891f</code></a> Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li><a href="https://github.com/sigstore/cosign/commit/8b366c497bd22b9be7742d057b8f59083dcadee0"><code>8b366c4</code></a> add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/23920de5623a505921ba4e62fa97e2553eff4699"><code>23920de</code></a> chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/e022e1c13240d1ae5b3c408bc53e389154331713"><code>e022e1c</code></a> chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/28c59c5eca6386924cc8f381afe94efe1e957679"><code>28c59c5</code></a> add missing groups key (<a href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8e5bdcc0ff39b8dc1b477251fef521601df76ec0"><code>8e5bdcc</code></a> chore(deps): bump github.com/google/certificate-transparency-go (<a href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/510cac4ef54274823599082e3a57a556ccd5c9e5"><code>510cac4</code></a> chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/063902b1d78fed7c12c9d9ce06248d36963e8169"><code>063902b</code></a> chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 18:39:49 +02:00
golang.org/x/xerrors v0.0.0-20231012003039-104605ab7028 h1:+cNy6SZtPcJQH3LJVLOSmiC7MMxXNOb3PU/VUEz+EhU=
golang.org/x/xerrors v0.0.0-20231012003039-104605ab7028/go.mod h1:NDW/Ps6MPRej6fsCIbMTohpP40sJ/P/vI1MoTEGwX90=
feat: go 1.13 (#1135) * feat: go 1.13 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: go.mod Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: update to go 1.13 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * bump: deps Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: deps Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: trying replace Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: go mod init Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: disable funlen lint Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2019-09-13 14:53:56 +02:00
google.golang.org/api v0.4.0/go.mod h1:8k5glujaEP+g9n7WNsDg8QP6cUVNI86fCNMcbazEtwE=
chore(deps): bump gocloud.dev from 0.18.0 to 0.19.0 (#1340) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.18.0 to 0.19.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.18.0...v0.19.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-02-17 14:56:49 +02:00
google.golang.org/api v0.7.0/go.mod h1:WtwebWUNSVBH/HAw79HIFXZNqEvBhG+Ra+ax0hx3E3M=
google.golang.org/api v0.8.0/go.mod h1:o4eAsZoiT+ibD93RtjEohWalFOjRDx6CVaqeizhEnKg=
google.golang.org/api v0.9.0/go.mod h1:o4eAsZoiT+ibD93RtjEohWalFOjRDx6CVaqeizhEnKg=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
google.golang.org/api v0.13.0/go.mod h1:iLdEw5Ide6rF15KTC1Kkl0iskquN2gFfn9o9XIsbkAI=
google.golang.org/api v0.14.0/go.mod h1:iLdEw5Ide6rF15KTC1Kkl0iskquN2gFfn9o9XIsbkAI=
google.golang.org/api v0.15.0/go.mod h1:iLdEw5Ide6rF15KTC1Kkl0iskquN2gFfn9o9XIsbkAI=
google.golang.org/api v0.17.0/go.mod h1:BwFmGc8tA3vsd7r/7kR8DY7iEEGSU04BFxCo5jP/sfE=
google.golang.org/api v0.18.0/go.mod h1:BwFmGc8tA3vsd7r/7kR8DY7iEEGSU04BFxCo5jP/sfE=
google.golang.org/api v0.19.0/go.mod h1:BwFmGc8tA3vsd7r/7kR8DY7iEEGSU04BFxCo5jP/sfE=
google.golang.org/api v0.20.0/go.mod h1:BwFmGc8tA3vsd7r/7kR8DY7iEEGSU04BFxCo5jP/sfE=
google.golang.org/api v0.22.0/go.mod h1:BwFmGc8tA3vsd7r/7kR8DY7iEEGSU04BFxCo5jP/sfE=
google.golang.org/api v0.24.0/go.mod h1:lIXQywCXRcnZPGlsd8NbLnOjtAoL6em04bJ9+z0MncE=
chore(deps): bump gocloud.dev from 0.20.0 to 0.21.0 (#1941) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.20.0 to 0.21.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.20.0...v0.21.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-12 01:14:58 +02:00
google.golang.org/api v0.28.0/go.mod h1:lIXQywCXRcnZPGlsd8NbLnOjtAoL6em04bJ9+z0MncE=
google.golang.org/api v0.29.0/go.mod h1:Lcubydp8VUV7KeIHD9z2Bys/sm/vGKnG1UHuDBSrHWM=
google.golang.org/api v0.30.0/go.mod h1:QGmEvQ87FHZNiUVJkT14jQNYJ4ZJjdRF23ZXz5138Fc=
google.golang.org/api v0.35.0/go.mod h1:/XrVsuzM0rZmrsbjJutiuftIzeuTQcEeaYcSk/mQ1dg=
google.golang.org/api v0.36.0/go.mod h1:+z5ficQTmoYpPn8LCUNVpK5I7hwkpjbcgqA7I34qYtE=
chore(deps): bump gocloud.dev from 0.22.0 to 0.23.0 (#2225) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.22.0 to 0.23.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.22.0...v0.23.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-17 14:03:45 +02:00
google.golang.org/api v0.40.0/go.mod h1:fYKFpnQN0DsDSKRVRcQSDQNtqWPfM9i+zNPxepjRCQ8=
feat(deps): bump gocloud.dev from 0.34.0 to 0.35.0 (#4467) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.34.0 to 0.35.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.35.0</h2> <p><strong>BREAKING CHANGES</strong></p> <p>This release updates the dependency on AWS/S3, which included some breaking changes; see <a href="https://redirect.github.com/google/go-cloud/pull/3342">google/go-cloud#3342</a> for details.</p> <p><strong>blob</strong></p> <ul> <li><em>gcsblob</em>: Fix unauthenticated requests.</li> </ul> <p><strong>runtimevar</strong></p> <ul> <li><em>constantvar</em>: Add support for reading the constant variable value from the environment.</li> </ul> <p><strong>docstore</strong></p> <ul> <li><em>gcpfilestore</em>: Add support for non-default databases.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/27e0bca95dae3165b94cab4f9b7e2e4b087c8aef"><code>27e0bca</code></a> all: prep for release (<a href="https://redirect.github.com/google/go-cloud/issues/3350">#3350</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/53ccd8db26a14fd2a40bfcb28af1a1ceba4663f4"><code>53ccd8d</code></a> all: update deps, including a breaking S3 change (<a href="https://redirect.github.com/google/go-cloud/issues/3342">#3342</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fa413a39cdf8ffe0890a1b0a4cf5e06e0c915592"><code>fa413a3</code></a> docstore/gcpfilestore: add support for non-default databases. (<a href="https://redirect.github.com/google/go-cloud/issues/3345">#3345</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/c04000b96462ad3ec62e633eafd759185991bb27"><code>c04000b</code></a> secrets/hashivault: Update go-jose per dependabot (<a href="https://redirect.github.com/google/go-cloud/issues/3346">#3346</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/6d5d2890816abc88cd11ef13d6cd6506eb5b5537"><code>6d5d289</code></a> pubsub/natspubsub: upgrade a dependency (<a href="https://redirect.github.com/google/go-cloud/issues/3336">#3336</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/375e097193225b4ef300a336e04ccad9ace50bc1"><code>375e097</code></a> pubsub/natspubsub: Update dependency (<a href="https://redirect.github.com/google/go-cloud/issues/3331">#3331</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/35ac324ff7fae5ddc0f9dc2ff234a7d6b4935a20"><code>35ac324</code></a> all: update dependencies (<a href="https://redirect.github.com/google/go-cloud/issues/3329">#3329</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/4a18be0f4a48c145da4a76499485a45478fd69aa"><code>4a18be0</code></a> secrets/awskms: update the example for the AWS ARN use case (<a href="https://redirect.github.com/google/go-cloud/issues/3320">#3320</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/486d484a8f73fd5bedc910d4fd89c52e11412e68"><code>486d484</code></a> kafkapubsub: rename dependency Shopify/sarama to IBM/sarama (<a href="https://redirect.github.com/google/go-cloud/issues/3319">#3319</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/db7e808e313228ed8607a94d6e5cd075d66f4e86"><code>db7e808</code></a> runtimevar/constantvar: Add support for reading the constantvar from an envir...</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.34.0...v0.35.0">compare view</a></li> </ul> </details> <br /> <details> <summary>Most Recent Ignore Conditions Applied to This Pull Request</summary> | Dependency Name | Ignore Conditions | | --- | --- | | gocloud.dev | [>= 0.25.a, < 0.26] | </details> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.34.0&new-version=0.35.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-11 12:55:26 +02:00
google.golang.org/api v0.151.0 h1:FhfXLO/NFdJIzQtCqjpysWwqKk8AzGWBUhMIx67cVDU=
google.golang.org/api v0.151.0/go.mod h1:ccy+MJ6nrYFgE3WgRx/AMXOxOmU8Q4hSa+jjibzhxcg=
feat: update go-github (#1012)
2019-04-22 14:44:08 +02:00
google.golang.org/appengine v1.1.0/go.mod h1:EbEs0AVv82hx2wNQdGPgUI5lhzA/G0D9YwlJXL52JkM=
feat: add support for pushing artifacts to cloud storage provider( S3, Azure Blob, GCS) (#1036) * feat: adding support to push artifacts to AWS S3,Azure Blob and Google Cloud Storage readme for blob publisher test: add unit test for blob using testify and mockery test: add unit test for publish method fix: openbucket instance initialization remove unwanted packages: go mod tidy test: add missing unit test for publish method * doc: add missing comment for func * fix: add accidental delete file * fix : add missing Snapcrafts project * fix: unit test for Azure blob * fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue * fmt: fix linter reporeted issues fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue fmt: linter fix * test: fix typo in test error string * feat: add support to provider folder inside bucket, resolves discussed comments
2019-06-05 15:51:01 +02:00
google.golang.org/appengine v1.4.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4=
feat: go 1.13 (#1135) * feat: go 1.13 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: go.mod Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: update to go 1.13 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * bump: deps Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: deps Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: trying replace Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: go mod init Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: disable funlen lint Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2019-09-13 14:53:56 +02:00
google.golang.org/appengine v1.5.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4=
google.golang.org/appengine v1.6.1/go.mod h1:i06prIuMbXzDqacNJfV5OdTW448YApPu5ww/cMBSeb0=
fix: update go-gitlab refs https://github.com/goreleaser/goreleaser/pull/1215 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2019-10-30 23:01:53 +02:00
google.golang.org/appengine v1.6.5/go.mod h1:8WjMMxjGQR8xUklV/ARdw2HLXBOI7O7uCIDZVag1xfc=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
google.golang.org/appengine v1.6.6/go.mod h1:8WjMMxjGQR8xUklV/ARdw2HLXBOI7O7uCIDZVag1xfc=
chore(deps): bump gocloud.dev from 0.20.0 to 0.21.0 (#1941) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.20.0 to 0.21.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.20.0...v0.21.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-12 01:14:58 +02:00
google.golang.org/appengine v1.6.7/go.mod h1:8WjMMxjGQR8xUklV/ARdw2HLXBOI7O7uCIDZVag1xfc=
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419) Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.1.1 to 2.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's releases</a>.</em></p> <blockquote> <h2>v2.2.1</h2> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's changelog</a>.</em></p> <blockquote> <h1>v2.2.1</h1> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign/commit/12cbf9ea177d22bbf5cf028bcb4712b5f174ebc6"><code>12cbf9e</code></a> add changelog for v2.2.1 release (<a href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/827f24e9d4a1f8e845cb1597d02053410f5bbe2a"><code>827f24e</code></a> feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8ac891ff0e29ddc67965423bee8f826219c6eb0f"><code>8ac891f</code></a> Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li><a href="https://github.com/sigstore/cosign/commit/8b366c497bd22b9be7742d057b8f59083dcadee0"><code>8b366c4</code></a> add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/23920de5623a505921ba4e62fa97e2553eff4699"><code>23920de</code></a> chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/e022e1c13240d1ae5b3c408bc53e389154331713"><code>e022e1c</code></a> chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/28c59c5eca6386924cc8f381afe94efe1e957679"><code>28c59c5</code></a> add missing groups key (<a href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8e5bdcc0ff39b8dc1b477251fef521601df76ec0"><code>8e5bdcc</code></a> chore(deps): bump github.com/google/certificate-transparency-go (<a href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/510cac4ef54274823599082e3a57a556ccd5c9e5"><code>510cac4</code></a> chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/063902b1d78fed7c12c9d9ce06248d36963e8169"><code>063902b</code></a> chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 18:39:49 +02:00
google.golang.org/appengine v1.6.8 h1:IhEN5q69dyKagZPYMSdIjS2HqprW324FRQZJcGqPAsM=
google.golang.org/appengine v1.6.8/go.mod h1:1jJ3jBArFh5pcgW8gCtRJnepW8FzD1V44FJffLiz/Ds=
feat: add support for pushing artifacts to cloud storage provider( S3, Azure Blob, GCS) (#1036) * feat: adding support to push artifacts to AWS S3,Azure Blob and Google Cloud Storage readme for blob publisher test: add unit test for blob using testify and mockery test: add unit test for publish method fix: openbucket instance initialization remove unwanted packages: go mod tidy test: add missing unit test for publish method * doc: add missing comment for func * fix: add accidental delete file * fix : add missing Snapcrafts project * fix: unit test for Azure blob * fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue * fmt: fix linter reporeted issues fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue fmt: linter fix * test: fix typo in test error string * feat: add support to provider folder inside bucket, resolves discussed comments
2019-06-05 15:51:01 +02:00
google.golang.org/genproto v0.0.0-20180817151627-c66870c02cf8/go.mod h1:JiN7NxoALGmiZfu7CAH4rXhgtRTLTxftemlI0sWmxmc=
google.golang.org/genproto v0.0.0-20190307195333-5fe7a883aa19/go.mod h1:VzzqZJRnGkLBvHegQrXjBqPurQTc5/KpmUdxsrq26oE=
feat: go 1.13 (#1135) * feat: go 1.13 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: go.mod Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: update to go 1.13 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * bump: deps Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: deps Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: trying replace Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: go mod init Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: disable funlen lint Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2019-09-13 14:53:56 +02:00
google.golang.org/genproto v0.0.0-20190418145605-e7d98fc518a7/go.mod h1:VzzqZJRnGkLBvHegQrXjBqPurQTc5/KpmUdxsrq26oE=
google.golang.org/genproto v0.0.0-20190425155659-357c62f0e4bb/go.mod h1:VzzqZJRnGkLBvHegQrXjBqPurQTc5/KpmUdxsrq26oE=
google.golang.org/genproto v0.0.0-20190502173448-54afdca5d873/go.mod h1:VzzqZJRnGkLBvHegQrXjBqPurQTc5/KpmUdxsrq26oE=
chore(deps): bump gocloud.dev from 0.18.0 to 0.19.0 (#1340) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.18.0 to 0.19.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.18.0...v0.19.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-02-17 14:56:49 +02:00
google.golang.org/genproto v0.0.0-20190801165951-fa694d86fc64/go.mod h1:DMBHOl98Agz4BDEuKkezgsaosCRResVns1a3J2ZsMNc=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
google.golang.org/genproto v0.0.0-20190819201941-24fa4b261c55/go.mod h1:DMBHOl98Agz4BDEuKkezgsaosCRResVns1a3J2ZsMNc=
google.golang.org/genproto v0.0.0-20190911173649-1774047e7e51/go.mod h1:IbNlFCBrqXvoKpeg0TB2l7cyZUmoaFKYIwrEpbDKLA8=
google.golang.org/genproto v0.0.0-20191108220845-16a3f7862a1a/go.mod h1:n3cpQtvxv34hfy77yVDNjmbRyujviMdxYliBSkLhpCc=
google.golang.org/genproto v0.0.0-20191115194625-c23dd37a84c9/go.mod h1:n3cpQtvxv34hfy77yVDNjmbRyujviMdxYliBSkLhpCc=
google.golang.org/genproto v0.0.0-20191216164720-4f79533eabd1/go.mod h1:n3cpQtvxv34hfy77yVDNjmbRyujviMdxYliBSkLhpCc=
google.golang.org/genproto v0.0.0-20191230161307-f3c370f40bfb/go.mod h1:n3cpQtvxv34hfy77yVDNjmbRyujviMdxYliBSkLhpCc=
google.golang.org/genproto v0.0.0-20200115191322-ca5a22157cba/go.mod h1:n3cpQtvxv34hfy77yVDNjmbRyujviMdxYliBSkLhpCc=
google.golang.org/genproto v0.0.0-20200122232147-0452cf42e150/go.mod h1:n3cpQtvxv34hfy77yVDNjmbRyujviMdxYliBSkLhpCc=
google.golang.org/genproto v0.0.0-20200204135345-fa8e72b47b90/go.mod h1:GmwEX6Z4W5gMy59cAlVYjN9JhxgbQH6Gn+gFDQe2lzA=
google.golang.org/genproto v0.0.0-20200212174721-66ed5ce911ce/go.mod h1:55QSHmfGQM9UVYDPBsyGGes0y52j32PQ3BqQfXhyH3c=
google.golang.org/genproto v0.0.0-20200224152610-e50cd9704f63/go.mod h1:55QSHmfGQM9UVYDPBsyGGes0y52j32PQ3BqQfXhyH3c=
google.golang.org/genproto v0.0.0-20200228133532-8c2c7df3a383/go.mod h1:55QSHmfGQM9UVYDPBsyGGes0y52j32PQ3BqQfXhyH3c=
google.golang.org/genproto v0.0.0-20200305110556-506484158171/go.mod h1:55QSHmfGQM9UVYDPBsyGGes0y52j32PQ3BqQfXhyH3c=
google.golang.org/genproto v0.0.0-20200312145019-da6875a35672/go.mod h1:55QSHmfGQM9UVYDPBsyGGes0y52j32PQ3BqQfXhyH3c=
google.golang.org/genproto v0.0.0-20200331122359-1ee6d9798940/go.mod h1:55QSHmfGQM9UVYDPBsyGGes0y52j32PQ3BqQfXhyH3c=
google.golang.org/genproto v0.0.0-20200430143042-b979b6f78d84/go.mod h1:55QSHmfGQM9UVYDPBsyGGes0y52j32PQ3BqQfXhyH3c=
google.golang.org/genproto v0.0.0-20200511104702-f5ebc3bea380/go.mod h1:55QSHmfGQM9UVYDPBsyGGes0y52j32PQ3BqQfXhyH3c=
google.golang.org/genproto v0.0.0-20200515170657-fc4c6c6a6587/go.mod h1:YsZOwe1myG/8QRHRsmBRE1LrgQY60beZKjly0O1fX9U=
google.golang.org/genproto v0.0.0-20200526211855-cb27e3aa2013/go.mod h1:NbSheEEYHJ7i3ixzK3sjbqSGDJWnxyFXZblF3eUsNvo=
chore(deps): bump gocloud.dev from 0.20.0 to 0.21.0 (#1941) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.20.0 to 0.21.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.20.0...v0.21.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-12 01:14:58 +02:00
google.golang.org/genproto v0.0.0-20200618031413-b414f8b61790/go.mod h1:jDfRM7FcilCzHH/e9qn6dsT145K34l5v+OpcnNgKAAA=
google.golang.org/genproto v0.0.0-20200729003335-053ba62fc06f/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no=
google.golang.org/genproto v0.0.0-20200804131852-c06518451d9c/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no=
google.golang.org/genproto v0.0.0-20200825200019-8632dd797987/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no=
google.golang.org/genproto v0.0.0-20200904004341-0bd0a958aa1d/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no=
google.golang.org/genproto v0.0.0-20201109203340-2640f1f9cdfb/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no=
google.golang.org/genproto v0.0.0-20201201144952-b05cb90ed32e/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no=
chore(deps): bump gocloud.dev from 0.22.0 to 0.23.0 (#2225) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.22.0 to 0.23.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.22.0...v0.23.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-17 14:03:45 +02:00
google.golang.org/genproto v0.0.0-20201210142538-e3217bee35cc/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no=
google.golang.org/genproto v0.0.0-20201214200347-8c77b98c765d/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no=
feat(deps): bump gocloud.dev from 0.27.0 to 0.28.0 (#3689) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.27.0 to 0.28.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.28.0</h2> <p><strong>BREAKING CHANGES</strong>:</p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK.</li> <li><strong>blob/azureblob</strong>: Updated to match recent breaking changes in the Azure packages (yes, again).</li> <li><strong>pubsub/awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>blob</strong></p> <ul> <li><strong>memblob</strong>: Fixed bug where use of <code>BeforeCopy</code> callback would drop the actual copying.</li> <li><strong>azureblob</strong>: Updated to match recent breaking changes in the Azure packages.</li> </ul> <p><strong>pubsub</strong></p> <ul> <li><strong>all</strong>: Simplified and improved batch sizing, should resolve issues with too-frequent polling in some situations.</li> <li><strong>azurepubsub</strong>: Made <code>ListenerTimeout</code> configurable.</li> <li><strong>gcppubsub</strong> and <strong>awssnssqs</strong>: Support lazy mode for <code>Nack</code> (where no explicit <code>Nack</code> is sent).</li> <li><strong>awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that it can be modified.</li> </ul> <p><strong>secrets</strong></p> <ul> <li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK. Use azidentity.NewDefaultAzureCredential.</li> </ul> <p><strong>sql</strong></p> <ul> <li><strong>gcp/cloudsql</strong>: Fixed IAM login.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/24166090495b8e084a23aa7d11fcc81ec33e4729"><code>2416609</code></a> all: prep for v0.28.0 (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3207">#3207</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/13f46eb8065d5ea62b757f5f0f11a56f48faf7cc"><code>13f46eb</code></a> pubsub: simplify and improve batch sizing, especially for low message rates</li> <li><a href="https://github.com/google/go-cloud/commit/8f2c2b9a392a8e4a3d7a4942f88f3df607f8f6d0"><code>8f2c2b9</code></a> pubsub/memsub: Add Options for batching (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3205">#3205</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fe0a3d75fe43c039258df25ebf102602526e3052"><code>fe0a3d7</code></a> pubsub/awssqs: Fix BeforeSend/As to enable changes to the sqs input message (...</li> <li><a href="https://github.com/google/go-cloud/commit/dfaf95af34dd9022a69a061028e0ceec98e9c670"><code>dfaf95a</code></a> secrets/azurekeyvault: Use azidentity.NewDefaultAzureCredential to support ot...</li> <li><a href="https://github.com/google/go-cloud/commit/1e26311532928f060c490a7fbf2be92b55ee12c4"><code>1e26311</code></a> blob: Remove some debug logging (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3197">#3197</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/43ed5a499864c08b7b6549ff7085f19634a1f02c"><code>43ed5a4</code></a> pubsub/gcppubsub: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3195">#3195</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/be80e70b3dcf7a6b86481881c7ac0b44a8095178"><code>be80e70</code></a> pubsub/awssnssqs: Support lazy mode for Nacks (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3194">#3194</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/7d690993a53cf8cc2e7af07872876d58601f1261"><code>7d69099</code></a> blob/azblob: Update to latest, and restore As for dirlist (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3191">#3191</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/e942f3c339f0eb617ac4dbc7f37cc4e5920ee7cc"><code>e942f3c</code></a> blob/azblob: Restore As for List entry (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3188">#3188</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.27.0...v0.28.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.27.0&new-version=0.28.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-11 14:09:51 +02:00
google.golang.org/genproto v0.0.0-20210108203827-ffc7fda8c3d7/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no=
google.golang.org/genproto v0.0.0-20210226172003-ab064af71705/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no=
feat(deps): bump gocloud.dev from 0.34.0 to 0.35.0 (#4467) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.34.0 to 0.35.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.35.0</h2> <p><strong>BREAKING CHANGES</strong></p> <p>This release updates the dependency on AWS/S3, which included some breaking changes; see <a href="https://redirect.github.com/google/go-cloud/pull/3342">google/go-cloud#3342</a> for details.</p> <p><strong>blob</strong></p> <ul> <li><em>gcsblob</em>: Fix unauthenticated requests.</li> </ul> <p><strong>runtimevar</strong></p> <ul> <li><em>constantvar</em>: Add support for reading the constant variable value from the environment.</li> </ul> <p><strong>docstore</strong></p> <ul> <li><em>gcpfilestore</em>: Add support for non-default databases.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/27e0bca95dae3165b94cab4f9b7e2e4b087c8aef"><code>27e0bca</code></a> all: prep for release (<a href="https://redirect.github.com/google/go-cloud/issues/3350">#3350</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/53ccd8db26a14fd2a40bfcb28af1a1ceba4663f4"><code>53ccd8d</code></a> all: update deps, including a breaking S3 change (<a href="https://redirect.github.com/google/go-cloud/issues/3342">#3342</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/fa413a39cdf8ffe0890a1b0a4cf5e06e0c915592"><code>fa413a3</code></a> docstore/gcpfilestore: add support for non-default databases. (<a href="https://redirect.github.com/google/go-cloud/issues/3345">#3345</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/c04000b96462ad3ec62e633eafd759185991bb27"><code>c04000b</code></a> secrets/hashivault: Update go-jose per dependabot (<a href="https://redirect.github.com/google/go-cloud/issues/3346">#3346</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/6d5d2890816abc88cd11ef13d6cd6506eb5b5537"><code>6d5d289</code></a> pubsub/natspubsub: upgrade a dependency (<a href="https://redirect.github.com/google/go-cloud/issues/3336">#3336</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/375e097193225b4ef300a336e04ccad9ace50bc1"><code>375e097</code></a> pubsub/natspubsub: Update dependency (<a href="https://redirect.github.com/google/go-cloud/issues/3331">#3331</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/35ac324ff7fae5ddc0f9dc2ff234a7d6b4935a20"><code>35ac324</code></a> all: update dependencies (<a href="https://redirect.github.com/google/go-cloud/issues/3329">#3329</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/4a18be0f4a48c145da4a76499485a45478fd69aa"><code>4a18be0</code></a> secrets/awskms: update the example for the AWS ARN use case (<a href="https://redirect.github.com/google/go-cloud/issues/3320">#3320</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/486d484a8f73fd5bedc910d4fd89c52e11412e68"><code>486d484</code></a> kafkapubsub: rename dependency Shopify/sarama to IBM/sarama (<a href="https://redirect.github.com/google/go-cloud/issues/3319">#3319</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/db7e808e313228ed8607a94d6e5cd075d66f4e86"><code>db7e808</code></a> runtimevar/constantvar: Add support for reading the constantvar from an envir...</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.34.0...v0.35.0">compare view</a></li> </ul> </details> <br /> <details> <summary>Most Recent Ignore Conditions Applied to This Pull Request</summary> | Dependency Name | Ignore Conditions | | --- | --- | | gocloud.dev | [>= 0.25.a, < 0.26] | </details> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.34.0&new-version=0.35.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-11 12:55:26 +02:00
google.golang.org/genproto v0.0.0-20231120223509-83a465c0220f h1:Vn+VyHU5guc9KjB5KrjI2q0wCOWEOIh0OEsleqakHJg=
google.golang.org/genproto v0.0.0-20231120223509-83a465c0220f/go.mod h1:nWSwAFPb+qfNJXsoeO3Io7zf4tMSfN8EA8RlDA04GhY=
google.golang.org/genproto/googleapis/api v0.0.0-20231120223509-83a465c0220f h1:2yNACc1O40tTnrsbk9Cv6oxiW8pxI/pXj0wRtdlYmgY=
google.golang.org/genproto/googleapis/api v0.0.0-20231120223509-83a465c0220f/go.mod h1:Uy9bTZJqmfrw2rIBxgGLnamc78euZULUBrLZ9XTITKI=
google.golang.org/genproto/googleapis/rpc v0.0.0-20231120223509-83a465c0220f h1:ultW7fxlIvee4HYrtnaRPon9HpEgFk5zYpmfMgtKB5I=
google.golang.org/genproto/googleapis/rpc v0.0.0-20231120223509-83a465c0220f/go.mod h1:L9KNLi232K1/xB6f7AlSX692koaRnKaWSR0stBki0Yc=
feat: add support for pushing artifacts to cloud storage provider( S3, Azure Blob, GCS) (#1036) * feat: adding support to push artifacts to AWS S3,Azure Blob and Google Cloud Storage readme for blob publisher test: add unit test for blob using testify and mockery test: add unit test for publish method fix: openbucket instance initialization remove unwanted packages: go mod tidy test: add missing unit test for publish method * doc: add missing comment for func * fix: add accidental delete file * fix : add missing Snapcrafts project * fix: unit test for Azure blob * fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue * fmt: fix linter reporeted issues fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue fmt: linter fix * test: fix typo in test error string * feat: add support to provider folder inside bucket, resolves discussed comments
2019-06-05 15:51:01 +02:00
google.golang.org/grpc v1.19.0/go.mod h1:mqu4LbDTu4XGKhr4mRzUsmM4RtVoemTSY81AxZiDr8c=
feat: add gitlab for releases (#1038) * outlines gitlab client integration * makes client parameter more explicit * adds gitlab url to config * changes releaseID to string to adapt to gitlab * updates to latest gitlab client lib 0.18 * fixes copy paster in gitlab upload func * fixes gitlab typo in config * adds gitlab token to env and context * release now uses the client factory method * skips brew pipe if it is not a github release * add github tokentype to publish tests * skips scoop pipe if it is not a github release * corrects brew skip msg * adds gitlab token to main test * adds gitlab to release docs * validates config and errors accordingly * adapt release pipe name to include gitlab * fixes gitlab client after testing * moves not-configured brew and scoop pipe checks as first check * adds more debug to gitlab client * adapts changelog generation for gitlab markdown * adds debug log for gitlab changelog * env needs to run before changelog pipe * moves gitlab default download url to default pipe * moves multiple releases check to from config to release pipe * release differs now for github and gitlab * adds debug gitlab release update msgs * moves env pipe as second after before because it determines the token type other pipes depend on * adaptes error check on gitlab release creation * Revert "adaptes error check on gitlab release creation" This reverts commit 032024571c76140f8e2207ee01cc08088f37594b. * simplifies gitlab client logic. removes comments * skips tls verification for gitlab client if specified in config * updates the docs * adds clarification that brew and scoop are not supported if it is a gitlab release * fixes copy paster in release.md * adds missing blob pipe in defaults and publish due to missing in merge * updates comment in gitlab client
2019-06-29 16:02:40 +02:00
google.golang.org/grpc v1.20.1/go.mod h1:10oTOabMzJvdu6/UiuZezV6QK5dSlG84ov/aaiqXj38=
feat: go 1.13 (#1135) * feat: go 1.13 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: go.mod Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: update to go 1.13 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * bump: deps Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: deps Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: trying replace Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: go mod init Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: disable funlen lint Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2019-09-13 14:53:56 +02:00
google.golang.org/grpc v1.21.1/go.mod h1:oYelfM1adQP15Ek0mdvEgi9Df8B9CZIaU1084ijfRaM=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
google.golang.org/grpc v1.23.0/go.mod h1:Y5yQAOtifL1yxbo5wqy6BxZv8vAUGQwXBOALyacEbxg=
google.golang.org/grpc v1.25.1/go.mod h1:c3i+UQWmh7LiEpx4sFZnkU36qjEYZ0imhYfXVyQciAY=
google.golang.org/grpc v1.26.0/go.mod h1:qbnxyOmOxrQa7FizSgH+ReBfzJrCY1pSN7KXBS8abTk=
google.golang.org/grpc v1.27.0/go.mod h1:qbnxyOmOxrQa7FizSgH+ReBfzJrCY1pSN7KXBS8abTk=
google.golang.org/grpc v1.27.1/go.mod h1:qbnxyOmOxrQa7FizSgH+ReBfzJrCY1pSN7KXBS8abTk=
google.golang.org/grpc v1.28.0/go.mod h1:rpkK4SK4GF4Ach/+MFLZUBavHOvF2JJB5uozKKal+60=
google.golang.org/grpc v1.29.1/go.mod h1:itym6AZVZYACWQqET3MqgPpjcuV5QH3BxFS3IjizoKk=
chore(deps): bump gocloud.dev from 0.20.0 to 0.21.0 (#1941) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.20.0 to 0.21.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.20.0...v0.21.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-12 01:14:58 +02:00
google.golang.org/grpc v1.30.0/go.mod h1:N36X2cJ7JwdamYAgDz+s+rVMFjt3numwzf/HckM8pak=
google.golang.org/grpc v1.31.0/go.mod h1:N36X2cJ7JwdamYAgDz+s+rVMFjt3numwzf/HckM8pak=
google.golang.org/grpc v1.31.1/go.mod h1:N36X2cJ7JwdamYAgDz+s+rVMFjt3numwzf/HckM8pak=
google.golang.org/grpc v1.33.2/go.mod h1:JMHMWHQWaTccqQQlmk3MJZS+GWXOdAesneDmEnv2fbc=
google.golang.org/grpc v1.34.0/go.mod h1:WotjhfgOW/POjDeRt8vscBtXq+2VjORFy659qA51WJ8=
chore(deps): bump gocloud.dev from 0.22.0 to 0.23.0 (#2225) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.22.0 to 0.23.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.22.0...v0.23.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-17 14:03:45 +02:00
google.golang.org/grpc v1.35.0/go.mod h1:qjiiYl8FncCW8feJPdyg3v6XW24KsRHe+dy9BAGRRjU=
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419) Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.1.1 to 2.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's releases</a>.</em></p> <blockquote> <h2>v2.2.1</h2> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's changelog</a>.</em></p> <blockquote> <h1>v2.2.1</h1> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign/commit/12cbf9ea177d22bbf5cf028bcb4712b5f174ebc6"><code>12cbf9e</code></a> add changelog for v2.2.1 release (<a href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/827f24e9d4a1f8e845cb1597d02053410f5bbe2a"><code>827f24e</code></a> feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8ac891ff0e29ddc67965423bee8f826219c6eb0f"><code>8ac891f</code></a> Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li><a href="https://github.com/sigstore/cosign/commit/8b366c497bd22b9be7742d057b8f59083dcadee0"><code>8b366c4</code></a> add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/23920de5623a505921ba4e62fa97e2553eff4699"><code>23920de</code></a> chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/e022e1c13240d1ae5b3c408bc53e389154331713"><code>e022e1c</code></a> chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/28c59c5eca6386924cc8f381afe94efe1e957679"><code>28c59c5</code></a> add missing groups key (<a href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8e5bdcc0ff39b8dc1b477251fef521601df76ec0"><code>8e5bdcc</code></a> chore(deps): bump github.com/google/certificate-transparency-go (<a href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/510cac4ef54274823599082e3a57a556ccd5c9e5"><code>510cac4</code></a> chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/063902b1d78fed7c12c9d9ce06248d36963e8169"><code>063902b</code></a> chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 18:39:49 +02:00
google.golang.org/grpc v1.59.0 h1:Z5Iec2pjwb+LEOqzpB2MR12/eKFhDPhuqW91O+4bwUk=
google.golang.org/grpc v1.59.0/go.mod h1:aUPDwccQo6OTjy7Hct4AfBPD1GptF4fyUjIkQ9YtF98=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
google.golang.org/protobuf v0.0.0-20200109180630-ec00e32a8dfd/go.mod h1:DFci5gLYBciE7Vtevhsrf46CRTquxDuWsQurQQe4oz8=
google.golang.org/protobuf v0.0.0-20200221191635-4d8936d0db64/go.mod h1:kwYJMbMJ01Woi6D6+Kah6886xMZcty6N08ah7+eCXa0=
google.golang.org/protobuf v0.0.0-20200228230310-ab0ca4ff8a60/go.mod h1:cfTl7dwQJ+fmap5saPgwCLgHXTUD7jkjRqWcaiX5VyM=
google.golang.org/protobuf v1.20.1-0.20200309200217-e05f789c0967/go.mod h1:A+miEFZTKqfCUM6K7xSMQL9OKL/b6hQv+e19PK+JZNE=
google.golang.org/protobuf v1.21.0/go.mod h1:47Nbq4nVaFHyn7ilMalzfO3qCViNmqZ2kzikPIcrTAo=
google.golang.org/protobuf v1.22.0/go.mod h1:EGpADcykh3NcUnDUJcl1+ZksZNG86OlYog2l/sGQquU=
google.golang.org/protobuf v1.23.0/go.mod h1:EGpADcykh3NcUnDUJcl1+ZksZNG86OlYog2l/sGQquU=
google.golang.org/protobuf v1.23.1-0.20200526195155-81db48ad09cc/go.mod h1:EGpADcykh3NcUnDUJcl1+ZksZNG86OlYog2l/sGQquU=
google.golang.org/protobuf v1.24.0/go.mod h1:r/3tXBNzIEhYS9I1OUVjXDlt8tc493IdKGjtUeSXeh4=
chore(deps): bump gocloud.dev from 0.20.0 to 0.21.0 (#1941) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.20.0 to 0.21.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.20.0...v0.21.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-12 01:14:58 +02:00
google.golang.org/protobuf v1.25.0/go.mod h1:9JNX74DMeImyA3h4bdi1ymwjUzf21/xIlbajtzgsN7c=
chore(deps): bump gocloud.dev from 0.22.0 to 0.23.0 (#2225) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.22.0 to 0.23.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.22.0...v0.23.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-17 14:03:45 +02:00
google.golang.org/protobuf v1.26.0-rc.1/go.mod h1:jlhhOSvTdKEhbULTjvd4ARK9grFBp09yW+WbY/TyQbw=
google.golang.org/protobuf v1.26.0/go.mod h1:9q0QmTI4eRPtz6boOQmLYwt+qCgq0jsYwAQnmE0givc=
chore(deps): bump gocloud.dev from 0.23.0 to 0.24.0 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2021-09-11 04:41:28 +02:00
google.golang.org/protobuf v1.27.1/go.mod h1:9q0QmTI4eRPtz6boOQmLYwt+qCgq0jsYwAQnmE0givc=
feat(deps): bump the gomod-deps group with 3 updates (#4165) Bumps the gomod-deps group with 3 updates: [golang.org/x/crypto](https://github.com/golang/crypto), [golang.org/x/oauth2](https://github.com/golang/oauth2) and [golang.org/x/tools](https://github.com/golang/tools). Updates `golang.org/x/crypto` from 0.10.0 to 0.11.0 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/golang/crypto/commit/e98487292dcad4efaa6033b245ee014f90d177a2"><code>e984872</code></a> go.mod: update golang.org/x dependencies</li> <li><a href="https://github.com/golang/crypto/commit/183630ada7e00d6d4743f43479b7d4ea51de715e"><code>183630a</code></a> x509roots: generate a stable sort, for real this time</li> <li><a href="https://github.com/golang/crypto/commit/a9e447dde7f8f364232efb5072e3ff89b24308da"><code>a9e447d</code></a> x509roots/fallback: add //go:build go1.20 to bundle.go</li> <li><a href="https://github.com/golang/crypto/commit/64c3993f5c824fe7febbf8561179da523a4e98ea"><code>64c3993</code></a> ssh: add hmac-sha2-512</li> <li><a href="https://github.com/golang/crypto/commit/5fe8145acacf736d52576b87b17c416731e0c4a8"><code>5fe8145</code></a> x509roots: remove list hash and generation date, change ordering</li> <li><a href="https://github.com/golang/crypto/commit/043e94c17aa993f4d1026a2f692b8980e7740df2"><code>043e94c</code></a> x509roots: fix generate script argument checking</li> <li><a href="https://github.com/golang/crypto/commit/0d502d7cd64920c6d2cce3950ead89a5c4eb5e69"><code>0d502d7</code></a> x509roots: use &quot;generate&quot; build tag</li> <li><a href="https://github.com/golang/crypto/commit/0ff60057bbafb685e9f9a97af5261f484f8283d1"><code>0ff6005</code></a> ssh/test: set a timeout and WaitDelay on sshd subcommands</li> <li>See full diff in <a href="https://github.com/golang/crypto/compare/v0.10.0...v0.11.0">compare view</a></li> </ul> </details> <br /> Updates `golang.org/x/oauth2` from 0.9.0 to 0.10.0 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/golang/oauth2/commit/ec5679f607c139709bdc4c2608494d56b95611fe"><code>ec5679f</code></a> go.mod: update golang.org/x dependencies</li> <li><a href="https://github.com/golang/oauth2/commit/989acb1bfed17be45134185bd228d89675a68f19"><code>989acb1</code></a> all: update dependencies to their latest versions</li> <li>See full diff in <a href="https://github.com/golang/oauth2/compare/v0.9.0...v0.10.0">compare view</a></li> </ul> </details> <br /> Updates `golang.org/x/tools` from 0.10.0 to 0.11.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/golang/tools/releases">golang.org/x/tools's releases</a>.</em></p> <blockquote> <h2>gopls/v0.11.0</h2> <p>This is a small release containing new integrations of vulnerability analysis.</p> <p>Vulnerability analysis for go.mod files can be enabled by configuring the <a href="https://github.com/golang/tools/blob/master/gopls/doc/settings.md#vulncheck-enum"><code>&quot;vulncheck&quot;</code></a> setting to <code>&quot;Imports&quot;</code>. For more information on vulnerability management, see the <a href="https://go.dev/blog/vuln">Vulnerability Management for Go</a> blog post.</p> <h2>Support changes</h2> <p>This release removes support for the <code>&quot;experimentalUseInvalidMetadata&quot;</code> setting, as described in the <a href="https://github.com/golang/tools/releases/tag/gopls%2Fv0.10.0">v0.10.0</a> release. Other settings slated for deprecation in that release remain temporarily supported, but will be removed in v0.12.0.</p> <h2>New Features</h2> <h3>Analyzing dependencies for vulnerabilities</h3> <p>This release offers two different options for detecting vulnerabilities in dependencies. Both are backed by the Go vulnerability database (<a href="https://vuln.go.dev">https://vuln.go.dev</a>) and complement each other.</p> <ul> <li>Imports-based scanning, enabled by the <a href="https://github.com/golang/tools/blob/master/gopls/doc/settings.md#vulncheck-enum"><code>&quot;vulncheck&quot;: &quot;Imports&quot;</code></a> setting, reports vulnerabilities by scanning the set of packages imported in the workspace. This is fast, but may report more false positives.</li> <li>Integration of the <a href="https://pkg.go.dev/golang.org/x/vuln/cmd/govulncheck">golang.org/x/vuln/cmd/govulncheck</a> command-line tool performs a more precise analysis based on-call graph reachability, with fewer false positives. Because it is slower to compute, it must be manually triggered by using &quot;Run govulncheck to verify&quot; code actions or the <a href="https://github.com/golang/tools/blob/master/gopls/doc/settings.md#run-govulncheck"><code>&quot;codelenses.run_govulncheck&quot;</code></a> code lens on <code>go.mod</code> files.</li> </ul> <p><a href="https://user-images.githubusercontent.com/4999471/206977512-a821107d-9ffb-4456-9b27-6a6a4f900ba6.mp4">https://user-images.githubusercontent.com/4999471/206977512-a821107d-9ffb-4456-9b27-6a6a4f900ba6.mp4</a></p> <!-- raw HTML omitted --> <h3>Additional checks for the <code>loopclosure</code> analyzer</h3> <p>The <a href="https://github.com/golang/tools/blob/master/gopls/doc/analyzers.md#loopclosure"><code>loopclosure</code></a> analyzer, which reports problematic references from a nested function to a variable of an enclosing loop, has been improved to catch more cases. In particular, it now reports when subtests <a href="https://pkg.go.dev/testing#T.Parallel">run in parallel</a> with the loop, a mistake that often results in all but the final test case being skipped.</p> <p><img src="https://user-images.githubusercontent.com/57144380/206764370-7fc3c464-af04-4e4e-bb10-a6a0a89a99e3.png" alt="image" /></p> <h2>Configuration changes</h2> <ul> <li>The <a href="https://github.com/golang/tools/blob/master/gopls/doc/settings.md#vulncheck-enum"><code>&quot;vulncheck&quot;</code></a> setting controls vulnerability analysis based on the Go vulnerability database. If set to <code>&quot;Imports&quot;</code>, gopls will compute diagnostics related to vulnerabilities in dependencies, and will present them in go.mod files.</li> <li>The <a href="https://github.com/golang/tools/blob/master/gopls/doc/settings.md#run-govulncheck"><code>&quot;codelenses.run_govulncheck&quot;</code></a> setting controls the presence of code lenses that run the <a href="https://pkg.go.dev/golang.org/x/vuln/cmd/govulncheck">govulncheck</a> command, which takes longer but produces more accurate vulnerability reporting based on call-graph reachability.</li> </ul> <h2>Bug fixes</h2> <p>This version of gopls includes fixes to several bugs, notably:</p> <ul> <li><code>golang/go#57053</code></li> <li><code>golang/go#55837</code><a href="https://redirect.github.com/golang/go/issues/56450">golang/go#56450</a>).</li> <li><code>golang/go#54816</code></li> </ul> <p>A full list of all issues fixed can be found in the <a href="https://github.com/golang/go/milestone/293?closed=1">gopls/v0.11.0</a> milestone. To report a new problem, please file a new issue at <a href="https://go.dev/issues/new">https://go.dev/issues/new</a>.</p> <h2>Thank you to our contributors</h2> <p><a href="https://github.com/Arsen6331"><code>@​Arsen6331</code></a>, <a href="https://github.com/SN9NV"><code>@​SN9NV</code></a>, <a href="https://github.com/adonovan"><code>@​adonovan</code></a>, <a href="https://github.com/bcmills"><code>@​bcmills</code></a>, <a href="https://github.com/dle8"><code>@​dle8</code></a>, <a href="https://github.com/findleyr"><code>@​findleyr</code></a>, <a href="https://github.com/hyangah"><code>@​hyangah</code></a>, <a href="https://github.com/pjweinbgo"><code>@​pjweinbgo</code></a>, <a href="https://github.com/suzmue"><code>@​suzmue</code></a></p> <h2>gopls/v0.10.1</h2> <p>This release contains a fix for <a href="https://redirect.github.com/golang/go/issues/56505">golang/go#56505</a>: a new crash during method completion on variables of type <code>*error</code>.</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/golang/tools/commit/675bf3c243d60cbba429fad9924e520e8a86074f"><code>675bf3c</code></a> go.mod: update golang.org/x dependencies</li> <li><a href="https://github.com/golang/tools/commit/ad52c1ca35fb661c53eedbdee5f3b0e3c33e54e1"><code>ad52c1c</code></a> go/ssa/interp: support conversions to slices of named bytes</li> <li><a href="https://github.com/golang/tools/commit/14ec3c023fa0003b489ce1abe0484924ea5276f8"><code>14ec3c0</code></a> gopls/doc/contributing.md: document error handling strategies</li> <li><a href="https://github.com/golang/tools/commit/c4953641676aa4639fcbd2ca825c43cedeaa9e8c"><code>c495364</code></a> go/packages/gopackages: document -mode flag</li> <li><a href="https://github.com/golang/tools/commit/87ad891fe35467be3d692a3f37fef9fb5cb08dcd"><code>87ad891</code></a> gopls/internal/lsp/source/typerefs: move test into _test.go</li> <li><a href="https://github.com/golang/tools/commit/27fd94e099b2bbd4c660f0b140af121af9a943c8"><code>27fd94e</code></a> internal/fastwalk: doc formatting fixes (including godoc links)</li> <li><a href="https://github.com/golang/tools/commit/d362be0cdb73ca5215ecaaf1514120c6b8b955e9"><code>d362be0</code></a> gopls/internal/lsp/filecache: reduce GC frequency</li> <li><a href="https://github.com/golang/tools/commit/969078be460fb5efe195a1d4c69e3701298e9a21"><code>969078b</code></a> Revert &quot;go/analysis: add Sizes that matches gc size computations&quot;</li> <li><a href="https://github.com/golang/tools/commit/5aa6acb96f843a0257c5c1c0e52753bcd18b77b3"><code>5aa6acb</code></a> go/analysis: add Sizes that matches gc size computations</li> <li><a href="https://github.com/golang/tools/commit/5a89a3bf267ef12790327b8692c88654845bc78d"><code>5a89a3b</code></a> go/vcs: delete</li> <li>Additional commits viewable in <a href="https://github.com/golang/tools/compare/v0.10.0...v0.11.0">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-12 14:53:29 +02:00
google.golang.org/protobuf v1.31.0 h1:g0LDEJHgrBl9N9r17Ru3sqWhkIx2NB67okBHPwC7hs8=
google.golang.org/protobuf v1.31.0/go.mod h1:HV8QOd/L58Z+nl8r43ehVNZIU/HEI6OcFqwMG9pJV4I=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
gopkg.in/alecthomas/kingpin.v2 v2.2.6/go.mod h1:FMv+mEhP44yOT+4EoQTLFTRgOQ1FBLkstjWtayDeSgw=
feat: add SMTP support to the announces (#2485) Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com> Co-authored-with: Erkan Zileli <erkan.zileli@trendyol.com> Co-authored-with: Furkan Turkal <furkan.turkal@trendyol.com>
2021-09-15 20:38:58 +02:00
gopkg.in/alexcesaro/quotedprintable.v3 v3.0.0-20150716171945-2caba252f4dc h1:2gGKlE2+asNV9m7xrywl36YYNnBG5ZQ0r/BOOxqPpmk=
gopkg.in/alexcesaro/quotedprintable.v3 v3.0.0-20150716171945-2caba252f4dc/go.mod h1:m7x9LTH6d71AHyAX77c9yqWCCa3UKHcVEj9y7hAtKDk=
chore: go modules
2018-10-29 02:54:15 +02:00
gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
feat: add support for pushing artifacts to cloud storage provider( S3, Azure Blob, GCS) (#1036) * feat: adding support to push artifacts to AWS S3,Azure Blob and Google Cloud Storage readme for blob publisher test: add unit test for blob using testify and mockery test: add unit test for publish method fix: openbucket instance initialization remove unwanted packages: go mod tidy test: add missing unit test for publish method * doc: add missing comment for func * fix: add accidental delete file * fix : add missing Snapcrafts project * fix: unit test for Azure blob * fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue * fmt: fix linter reporeted issues fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue fmt: linter fix * test: fix typo in test error string * feat: add support to provider folder inside bucket, resolves discussed comments
2019-06-05 15:51:01 +02:00
gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
feat: nfpm without rpmbuild (#1187) thanks @djgilcrease for all the hard work on nfpm and google/rpmpack. thanks to @jarondl who works on rpmpack as well. great work everyone! 🚀 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2019-10-11 14:00:19 +02:00
gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
chore(deps): bump github.com/golangci/golangci-lint from 1.23.7 to 1.27.0 (#1563) * chore(deps): bump github.com/golangci/golangci-lint from 1.23.7 to 1.27.0 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: tests Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2020-05-26 05:48:10 +02:00
gopkg.in/check.v1 v1.0.0-20200227125254-8fa46927fb4f/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
feat(deps): bump github.com/google/ko from 0.12.0 to 0.13.0 (#3880) Bumps [github.com/google/ko](https://github.com/google/ko) from 0.12.0 to 0.13.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/ko/releases">github.com/google/ko's releases</a>.</em></p> <blockquote> <h2>v0.13.0</h2> <h2>What's Changed</h2> <ul> <li>SPDX: Fix package manager label by <a href="https://github.com/puerco"><code>@​puerco</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/801">ko-build/ko#801</a></li> <li>SPDX 2.3 support by <a href="https://github.com/puerco"><code>@​puerco</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/803">ko-build/ko#803</a></li> <li>ci: build and test using 1.18 and 1.19 (drop 1.17) by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/812">ko-build/ko#812</a></li> <li>removes repo move message by <a href="https://github.com/mchmarny"><code>@​mchmarny</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/814">ko-build/ko#814</a></li> <li>feat: write sbom result to disk by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/822">ko-build/ko#822</a></li> <li>feat: adding support for using multiple keychain for sending sbom results to a different repository by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/821">ko-build/ko#821</a></li> <li>Move docs to ko.build by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/749">ko-build/ko#749</a></li> <li>Update setup-ko version by <a href="https://github.com/ianlewis"><code>@​ianlewis</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/836">ko-build/ko#836</a></li> <li>Add -- usage in readme by <a href="https://github.com/jwcesign"><code>@​jwcesign</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/840">ko-build/ko#840</a></li> <li>add CONTRIBUTING, code of conduct, roadmap by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/837">ko-build/ko#837</a></li> <li>attempt to fix GH Pages publishing by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/843">ko-build/ko#843</a></li> <li>doc: fix link to Installation page in Getting Started by <a href="https://github.com/antoineco"><code>@​antoineco</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/846">ko-build/ko#846</a></li> <li>.ko.yaml: bump golang 1.18 -&gt; 1.19 by <a href="https://github.com/srenatus"><code>@​srenatus</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/848">ko-build/ko#848</a></li> <li>truncate -image-refs file by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/855">ko-build/ko#855</a></li> <li>update docs: fix broken links, align with README by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/854">ko-build/ko#854</a></li> <li>Handle KO_DOCKER_REPO=ko.local/repo and --bare correctly by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/820">ko-build/ko#820</a></li> <li>another docs update by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/856">ko-build/ko#856</a></li> <li>ko.build: support some common shortlinks by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/872">ko-build/ko#872</a></li> <li>install: fail with 404 instead of gzip error when url was wrong by <a href="https://github.com/grosser"><code>@​grosser</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/879">ko-build/ko#879</a></li> <li>feat: deduplicate tags by <a href="https://github.com/bluebrown"><code>@​bluebrown</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/884">ko-build/ko#884</a></li> <li>install mkdocs-redirect when publishing site by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/873">ko-build/ko#873</a></li> <li>nit: replace one-item slice with const by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/885">ko-build/ko#885</a></li> <li>Temp fix for SLSA generators by <a href="https://github.com/laurentsimon"><code>@​laurentsimon</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/886">ko-build/ko#886</a></li> <li>Fix verifier by <a href="https://github.com/laurentsimon"><code>@​laurentsimon</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/891">ko-build/ko#891</a></li> <li>Fix link in static-assets.md by <a href="https://github.com/yuryu"><code>@​yuryu</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/893">ko-build/ko#893</a></li> <li>add KO_DEFAULTBASEIMAGE usage to docs by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/895">ko-build/ko#895</a></li> <li>Publish an tagged image on release by <a href="https://github.com/vdemeester"><code>@​vdemeester</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/868">ko-build/ko#868</a></li> <li>Add option to configure default platforms by <a href="https://github.com/ReToCode"><code>@​ReToCode</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/897">ko-build/ko#897</a></li> <li>Fix broken SLSA link by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/899">ko-build/ko#899</a></li> <li>add MAINTAINERS.md by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/905">ko-build/ko#905</a></li> <li>fix: possible race condition when applying templates to flags/ldflags by <a href="https://github.com/caarlos0"><code>@​caarlos0</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/913">ko-build/ko#913</a></li> <li>update docs to reflect actual default base image by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/903">ko-build/ko#903</a></li> <li>remove repeated error message on failure by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/921">ko-build/ko#921</a></li> <li>website: update CNCF announcement by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/920">ko-build/ko#920</a></li> <li>fix KO_CONFIG_PATH pointing to a file by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/923">ko-build/ko#923</a></li> <li>upgrade to cosign v2.0.0-rc.0 by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/933">ko-build/ko#933</a></li> <li>Feature: Add ECR presubmit testing. by <a href="https://github.com/mattmoor"><code>@​mattmoor</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/934">ko-build/ko#934</a></li> <li>remove 'ko deps' by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/937">ko-build/ko#937</a></li> <li>feat: Add KO_GO_PATH env var by <a href="https://github.com/embano1"><code>@​embano1</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/930">ko-build/ko#930</a></li> <li>add ko.build/slack short link by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/945">ko-build/ko#945</a></li> <li>update link to ko goreleaser docs by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/936">ko-build/ko#936</a></li> <li>add ko community meeting details by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/938">ko-build/ko#938</a></li> <li>fix cosign by adding --yes by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/973">ko-build/ko#973</a></li> <li>fix: handle docker's unknown/unknown platform in index manifests by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/975">ko-build/ko#975</a></li> <li>fix file extension for cyclonedx by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/974">ko-build/ko#974</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/ianlewis"><code>@​ianlewis</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/836">ko-build/ko#836</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ko-build/ko/commit/e22e7a15ffb988adc14c3fc6a964f61ed711812f"><code>e22e7a1</code></a> bump ggcr dep to <a href="https://github.com/main"><code>@​main</code></a> (<a href="https://redirect.github.com/google/ko/issues/976">#976</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/8e075ae1f1822bb61a871f11197566b362c342f0"><code>8e075ae</code></a> fix file extension for cyclonedx (<a href="https://redirect.github.com/google/ko/issues/974">#974</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/11670b7498be63bc0e04e7ba36433fd22f9654ce"><code>11670b7</code></a> fix: handle docker's unknown/unknown platform in index manifests (<a href="https://redirect.github.com/google/ko/issues/975">#975</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/7ce947817e2f59942cb181aa833bfd13533bcc19"><code>7ce9478</code></a> fix cosign by adding --yes (<a href="https://redirect.github.com/google/ko/issues/973">#973</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/9302da78dc995b2b2dd70c044708c3c4c6a056b6"><code>9302da7</code></a> Bump k8s.io/apimachinery from 0.26.1 to 0.26.2 (<a href="https://redirect.github.com/google/ko/issues/972">#972</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/a1588838ba1698c3ca3f6785363a1a9f82ed4baa"><code>a158883</code></a> Bump sigstore/cosign-installer from 2.8.1 to 3.0.1 (<a href="https://redirect.github.com/google/ko/issues/971">#971</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/86b6c2854f8a7c321ce1b8ea121938ce9cc79475"><code>86b6c28</code></a> Bump actions/checkout from 2 to 3 (<a href="https://redirect.github.com/google/ko/issues/966">#966</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/0bd12fb106ed9d03994a6b8883f8a5d834a2aa15"><code>0bd12fb</code></a> Bump slsa-framework/slsa-github-generator from 1.2.1 to 1.5.0 (<a href="https://redirect.github.com/google/ko/issues/967">#967</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/d5125daacd07306d3814a6910cc54422824331e6"><code>d5125da</code></a> Bump github.com/sigstore/cosign/v2 from 2.0.0-rc.2 to 2.0.0 (<a href="https://redirect.github.com/google/ko/issues/965">#965</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/03f4aed68268fb320b32195c80292300056b264c"><code>03f4aed</code></a> add ko community meeting details (<a href="https://redirect.github.com/google/ko/issues/938">#938</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/ko/compare/v0.12.0...v0.13.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/ko&package-manager=go_modules&previous-version=0.12.0&new-version=0.13.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --------- Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2023-03-29 19:38:57 +02:00
gopkg.in/check.v1 v1.0.0-20200902074654-038fdea0a05b/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
chore(deps): bump github.com/goreleaser/nfpm/v2 from 2.3.1 to 2.4.0 (#2170) Bumps [github.com/goreleaser/nfpm/v2](https://github.com/goreleaser/nfpm) from 2.3.1 to 2.4.0. - [Release notes](https://github.com/goreleaser/nfpm/releases) - [Changelog](https://github.com/goreleaser/nfpm/blob/master/.goreleaser.yml) - [Commits](https://github.com/goreleaser/nfpm/compare/v2.3.1...v2.4.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-04-16 14:50:21 +02:00
gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk=
gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c/go.mod h1:JHkPIbrfpd72SG/EVd6muEfDQjcINNoR0C8j2r3qZ4Q=
feat: Use tools.go paradigm for external dependencies (#1495) Co-authored-by: CrazyMax <crazy-max@users.noreply.github.com>
2020-05-10 21:34:55 +02:00
gopkg.in/errgo.v2 v2.1.0/go.mod h1:hNsd1EY+bozCKY1Ytp96fpM3vjJbqLJn88ws8XvfDNI=
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419) Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.1.1 to 2.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's releases</a>.</em></p> <blockquote> <h2>v2.2.1</h2> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's changelog</a>.</em></p> <blockquote> <h1>v2.2.1</h1> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign/commit/12cbf9ea177d22bbf5cf028bcb4712b5f174ebc6"><code>12cbf9e</code></a> add changelog for v2.2.1 release (<a href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/827f24e9d4a1f8e845cb1597d02053410f5bbe2a"><code>827f24e</code></a> feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8ac891ff0e29ddc67965423bee8f826219c6eb0f"><code>8ac891f</code></a> Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li><a href="https://github.com/sigstore/cosign/commit/8b366c497bd22b9be7742d057b8f59083dcadee0"><code>8b366c4</code></a> add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/23920de5623a505921ba4e62fa97e2553eff4699"><code>23920de</code></a> chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/e022e1c13240d1ae5b3c408bc53e389154331713"><code>e022e1c</code></a> chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/28c59c5eca6386924cc8f381afe94efe1e957679"><code>28c59c5</code></a> add missing groups key (<a href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8e5bdcc0ff39b8dc1b477251fef521601df76ec0"><code>8e5bdcc</code></a> chore(deps): bump github.com/google/certificate-transparency-go (<a href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/510cac4ef54274823599082e3a57a556ccd5c9e5"><code>510cac4</code></a> chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/063902b1d78fed7c12c9d9ce06248d36963e8169"><code>063902b</code></a> chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 18:39:49 +02:00
gopkg.in/go-jose/go-jose.v2 v2.6.1 h1:qEzJlIDmG9q5VO0M/o8tGS65QMHMS1w01TQJB1VPJ4U=
gopkg.in/go-jose/go-jose.v2 v2.6.1/go.mod h1:zzZDPkNNw/c9IE7Z9jr11mBZQhKQTMzoEEIoEdZlFBI=
feat: add ko support (#3653) continuing the PR by @developer-guy - [x] should be a publisher, as it does publish the images it builds every time - [x] `Default` method does not work - [x] the `fromConfig` thing should probably be on the defaults, too - [x] wire `--skip-ko` - [x] documentation - [x] more tests - [x] use same registry as docker tests does - [ ] see if we can make the log output match goreleaser's - [ ] ?? closes #2556 closes #3490 Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com> Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> Co-authored-by: actions-user <actions@github.com> Co-authored-by: Jason Hall <jason@chainguard.dev> Co-authored-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2023-01-17 03:34:49 +02:00
gopkg.in/ini.v1 v1.67.0 h1:Dgnx+6+nfE+IfzjUEISNeydPJh9AXNNsWbGP9KzCsOA=
gopkg.in/ini.v1 v1.67.0/go.mod h1:pNLf8WUiyNEtQjuu5G5vTm06TEv9tsIgeAvK8hOrP4k=
feat: add SMTP support to the announces (#2485) Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com> Co-authored-with: Erkan Zileli <erkan.zileli@trendyol.com> Co-authored-with: Furkan Turkal <furkan.turkal@trendyol.com>
2021-09-15 20:38:58 +02:00
gopkg.in/mail.v2 v2.3.1 h1:WYFn/oANrAGP2C0dcV6/pbkPzv8yGzqTjPmTeO7qoXk=
gopkg.in/mail.v2 v2.3.1/go.mod h1:htwXN1Qh09vZJ1NVKxQqHPBaCBbzKhp5GzuJEA4VJWw=
chore(deps): bump github.com/goreleaser/nfpm from 1.4.1 to 1.5.0 (#1697) Bumps [github.com/goreleaser/nfpm](https://github.com/goreleaser/nfpm) from 1.4.1 to 1.5.0. - [Release notes](https://github.com/goreleaser/nfpm/releases) - [Changelog](https://github.com/goreleaser/nfpm/blob/master/.goreleaser.yml) - [Commits](https://github.com/goreleaser/nfpm/compare/v1.4.1...v1.5.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-07-22 14:01:49 +02:00
gopkg.in/warnings.v0 v0.1.2 h1:wFXVbFY8DY5/xOe1ECiWdKCzZlxgshcYVNkBHstARME=
gopkg.in/warnings.v0 v0.1.2/go.mod h1:jksf8JmL6Qr/oQM2OXTHunEvvTAsrWBLb6OOjuVWRNI=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
gopkg.in/yaml.v2 v2.2.1/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
feat: gitea release support (#1114) * adds gitea release support * closes #1106
2019-08-26 09:31:38 +02:00
gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
feat: Use tools.go paradigm for external dependencies (#1495) Co-authored-by: CrazyMax <crazy-max@users.noreply.github.com>
2020-05-10 21:34:55 +02:00
gopkg.in/yaml.v2 v2.2.4/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
chore(deps): bump all Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2020-01-26 16:49:18 +02:00
gopkg.in/yaml.v2 v2.2.8/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
chore(deps): bump gopkg.in/yaml.v2 from 2.2.8 to 2.3.0 (#1513) Bumps [gopkg.in/yaml.v2](https://github.com/go-yaml/yaml) from 2.2.8 to 2.3.0. - [Release notes](https://github.com/go-yaml/yaml/releases) - [Commits](https://github.com/go-yaml/yaml/compare/v2.2.8...v2.3.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-05-13 10:58:23 +02:00
gopkg.in/yaml.v2 v2.3.0/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
chore(deps): bump gopkg.in/yaml.v2 from 2.3.0 to 2.4.0 (#1920) Bumps [gopkg.in/yaml.v2](https://github.com/go-yaml/yaml) from 2.3.0 to 2.4.0. - [Release notes](https://github.com/go-yaml/yaml/releases) - [Commits](https://github.com/go-yaml/yaml/compare/v2.3.0...v2.4.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-11-26 14:51:27 +02:00
gopkg.in/yaml.v2 v2.4.0 h1:D8xgwECY7CYvx+Y2n4sBz93Jn9JRvxdiyyo8CTfuKaY=
gopkg.in/yaml.v2 v2.4.0/go.mod h1:RDklbk79AGWmwhnvt/jBztapEOGDOx6ZbXqjP6csGnQ=
chore(deps): bump github.com/stretchr/testify from 1.5.1 to 1.6.0 (#1580) Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.5.1 to 1.6.0. - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](https://github.com/stretchr/testify/compare/v1.5.1...v1.6.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-01 16:07:35 +02:00
gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
gopkg.in/yaml.v3 v3.0.0-20200605160147-a5ece683394c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
gopkg.in/yaml.v3 v3.0.0-20200615113413-eeeca48fe776/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
chore(deps): bump github.com/goreleaser/nfpm/v2 from 2.3.1 to 2.4.0 (#2170) Bumps [github.com/goreleaser/nfpm/v2](https://github.com/goreleaser/nfpm) from 2.3.1 to 2.4.0. - [Release notes](https://github.com/goreleaser/nfpm/releases) - [Changelog](https://github.com/goreleaser/nfpm/blob/master/.goreleaser.yml) - [Commits](https://github.com/goreleaser/nfpm/compare/v2.3.1...v2.4.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-04-16 14:50:21 +02:00
gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
feat(deps): bump gopkg.in/yaml.v3 from 3.0.0 to 3.0.1 (#3135) Bumps [gopkg.in/yaml.v3](https://github.com/go-yaml/yaml) from 3.0.0 to 3.0.1. - [Release notes](https://github.com/go-yaml/yaml/releases) - [Commits](https://github.com/go-yaml/yaml/compare/v3.0.0...v3.0.1) --- updated-dependencies: - dependency-name: gopkg.in/yaml.v3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-02 14:01:47 +02:00
gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
feat(deps): bump github.com/ory/dockertest/v3 from 3.9.1 to 3.10.0 (#3947) Bumps [github.com/ory/dockertest/v3](https://github.com/ory/dockertest) from 3.9.1 to 3.10.0. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ory/dockertest/commit/0d540538ba862768f4cf01a550f3b0e5dfcf83e1"><code>0d54053</code></a> chore(deps): bump actions/stale from 4 to 8 (<a href="https://redirect.github.com/ory/dockertest/issues/430">#430</a>)</li> <li><a href="https://github.com/ory/dockertest/commit/355d9264da44939c85aacc49c990e7d5fab46a4b"><code>355d926</code></a> chore(deps): bump actions/setup-node from 2.pre.beta to 3.6.0 (<a href="https://redirect.github.com/ory/dockertest/issues/429">#429</a>)</li> <li><a href="https://github.com/ory/dockertest/commit/afee4d2c072fd28b9d5def5a9dd96f7cb789ac71"><code>afee4d2</code></a> Replace pkg/errors with native error wrapping (<a href="https://redirect.github.com/ory/dockertest/issues/433">#433</a>)</li> <li><a href="https://github.com/ory/dockertest/commit/5d9a022f39dec2056eed8b0ccca2961f5de5ed8a"><code>5d9a022</code></a> docs: fix typo in FakeGoogleCloudStorage example (<a href="https://redirect.github.com/ory/dockertest/issues/434">#434</a>)</li> <li><a href="https://github.com/ory/dockertest/commit/e733223e5349f34edddbebf4852aabae1964e476"><code>e733223</code></a> fix: use std context lib (<a href="https://redirect.github.com/ory/dockertest/issues/404">#404</a>)</li> <li><a href="https://github.com/ory/dockertest/commit/51627a024572d83a084aebe75e89823e84fc7e01"><code>51627a0</code></a> chore(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0 (<a href="https://redirect.github.com/ory/dockertest/issues/432">#432</a>)</li> <li><a href="https://github.com/ory/dockertest/commit/7b0c8dc1f6dcef51b5ee7c64a1bdd9dbe4b300b5"><code>7b0c8dc</code></a> chore: bump workflow actions; configure dependabot (<a href="https://redirect.github.com/ory/dockertest/issues/424">#424</a>)</li> <li><a href="https://github.com/ory/dockertest/commit/1b74b04e7dee8be3c18f5c204770d7771fc65215"><code>1b74b04</code></a> refactor: replace deprecated ioutil with io and os (<a href="https://redirect.github.com/ory/dockertest/issues/423">#423</a>)</li> <li><a href="https://github.com/ory/dockertest/commit/87ce1b953729aff6f379bb27d4df0a46521567ae"><code>87ce1b9</code></a> ci: ignore wrongly reported CVE (<a href="https://redirect.github.com/ory/dockertest/issues/425">#425</a>)</li> <li><a href="https://github.com/ory/dockertest/commit/7bcb18d4d98ba92ec04e5baa3911bc28f98c5691"><code>7bcb18d</code></a> fix: explicitly convert s.Rdev to uint64 (<a href="https://redirect.github.com/ory/dockertest/issues/420">#420</a>)</li> <li>Additional commits viewable in <a href="https://github.com/ory/dockertest/compare/v3.9.1...v3.10.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/ory/dockertest/v3&package-manager=go_modules&previous-version=3.9.1&new-version=3.10.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-23 19:09:35 +02:00
gotest.tools/v3 v3.3.0 h1:MfDY1b1/0xN1CyMlQDac0ziEy9zJQd9CXBRRDHw2jJo=
chore: go mod tidy Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-09-13 19:03:05 +02:00
gotest.tools/v3 v3.3.0/go.mod h1:Mcr9QNxkg0uMvy/YElmo4SpXgJKWgQvYrT7Kw5RzJ1A=
feat: add support for pushing artifacts to cloud storage provider( S3, Azure Blob, GCS) (#1036) * feat: adding support to push artifacts to AWS S3,Azure Blob and Google Cloud Storage readme for blob publisher test: add unit test for blob using testify and mockery test: add unit test for publish method fix: openbucket instance initialization remove unwanted packages: go mod tidy test: add missing unit test for publish method * doc: add missing comment for func * fix: add accidental delete file * fix : add missing Snapcrafts project * fix: unit test for Azure blob * fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue * fmt: fix linter reporeted issues fmt: rewrite if-else-if-else chain to switch statement and fix golangci-lint reporeted issue fmt: linter fix * test: fix typo in test error string * feat: add support to provider folder inside bucket, resolves discussed comments
2019-06-05 15:51:01 +02:00
honnef.co/go/tools v0.0.0-20190102054323-c2f93a96b099/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
honnef.co/go/tools v0.0.0-20190106161140-3f1c8253044a/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
feat: go 1.13 (#1135) * feat: go 1.13 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: go.mod Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * feat: update to go 1.13 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * bump: deps Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: deps Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: trying replace Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: go mod init Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: disable funlen lint Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2019-09-13 14:53:56 +02:00
honnef.co/go/tools v0.0.0-20190418001031-e561f6794a2a/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
honnef.co/go/tools v0.0.0-20190523083050-ea95bdfd59fc/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
honnef.co/go/tools v0.0.1-2019.2.3/go.mod h1:a3bituU0lyd329TUQxRnasdCoJDkEUEAqEt0JzvZhAg=
chore(deps): bump github.com/golangci/golangci-lint from 1.23.7 to 1.27.0 (#1563) * chore(deps): bump github.com/golangci/golangci-lint from 1.23.7 to 1.27.0 Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * fix: tests Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
2020-05-26 05:48:10 +02:00
honnef.co/go/tools v0.0.1-2020.1.3/go.mod h1:X/FiERA/W4tHapMX5mGpAtMSVEeEUOyHaw9vFzvIQ3k=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
honnef.co/go/tools v0.0.1-2020.1.4/go.mod h1:X/FiERA/W4tHapMX5mGpAtMSVEeEUOyHaw9vFzvIQ3k=
chore(deps): bump gocloud.dev from 0.18.0 to 0.19.0 (#1340) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.18.0 to 0.19.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.18.0...v0.19.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-02-17 14:56:49 +02:00
rsc.io/binaryregexp v0.2.0/go.mod h1:qTv7/COck+e2FymRvadv62gMdZztPaShugOCi3I+8D8=
chore(deps): bump gocloud.dev from 0.19.0 to 0.20.0 (#1599) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](https://github.com/google/go-cloud/compare/v0.19.0...v0.20.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-10 15:48:02 +02:00
rsc.io/quote/v3 v3.1.0/go.mod h1:yEA65RcK8LyAZtP9Kv3t0HmxON59tX3rD+tICJqUlj0=
rsc.io/sampler v1.3.0/go.mod h1:T1hPZKmBbMNahiBKFy5HrXp6adAjACjK9JXDnKaTXpA=
feat(deps): bump github.com/google/ko from 0.13.0 to 0.14.1 (#4132) Bumps [github.com/google/ko](https://github.com/google/ko) from 0.13.0 to 0.14.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/ko/releases">github.com/google/ko's releases</a>.</em></p> <blockquote> <h2>v0.14.1</h2> <h2>What's Changed</h2> <ul> <li>fix: Use attestation-name output by <a href="https://github.com/ianlewis"><code>@​ianlewis</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/980">ko-build/ko#980</a></li> <li>Upgrade to go120 by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/984">ko-build/ko#984</a></li> <li>fix release workflow by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/977">ko-build/ko#977</a></li> <li>fix deprecated attestation name by <a href="https://github.com/developer-guy"><code>@​developer-guy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/983">ko-build/ko#983</a></li> <li>refactor release job by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/986">ko-build/ko#986</a></li> <li>use git hash instead of git tag by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/988">ko-build/ko#988</a></li> <li>Correct a typo in resolver.go by <a href="https://github.com/felixonmars"><code>@​felixonmars</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/989">ko-build/ko#989</a></li> <li>feat: add riscv64 to goreleaser goarch by <a href="https://github.com/ernado"><code>@​ernado</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/990">ko-build/ko#990</a></li> <li>try to fix codeql workflow by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/994">ko-build/ko#994</a></li> <li>Push images faster by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1005">ko-build/ko#1005</a></li> <li>Don't publish tags twice by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1010">ko-build/ko#1010</a></li> <li>Add context to many gobuild errors by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1016">ko-build/ko#1016</a></li> <li>Fix --local with KO_DOCKER_REPO by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1017">ko-build/ko#1017</a></li> <li>Fix: Incorporate platform architecture by <a href="https://github.com/mattmoor"><code>@​mattmoor</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1029">ko-build/ko#1029</a></li> <li>Update community.md by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1035">ko-build/ko#1035</a></li> <li>mention ko tekton task by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1039">ko-build/ko#1039</a></li> <li>Update community.md by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1037">ko-build/ko#1037</a></li> <li>Fix kind image loading for MacOS by <a href="https://github.com/aidy"><code>@​aidy</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1026">ko-build/ko#1026</a></li> <li>Revert &quot;Fix kind image loading for MacOS&quot; by <a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1054">ko-build/ko#1054</a></li> <li>update boilerplate file to be KO Build Authors by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1056">ko-build/ko#1056</a></li> <li>Pin setup-ko to previous release by <a href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a> in <a href="https://redirect.github.com/ko-build/ko/pull/1082">ko-build/ko#1082</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/felixonmars"><code>@​felixonmars</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/989">ko-build/ko#989</a></li> <li><a href="https://github.com/ernado"><code>@​ernado</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/990">ko-build/ko#990</a></li> <li><a href="https://github.com/aidy"><code>@​aidy</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1026">ko-build/ko#1026</a></li> <li><a href="https://github.com/luhring"><code>@​luhring</code></a> made their first contribution in <a href="https://redirect.github.com/ko-build/ko/pull/1073">ko-build/ko#1073</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/ko-build/ko/compare/v0.13.0...v0.14.1">https://github.com/ko-build/ko/compare/v0.13.0...v0.14.1</a></p> <h2>v0.14.0</h2> <p>No release notes provided.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ko-build/ko/commit/200db7243f02b5c0303e21d8ab8e3b4ad3a229d0"><code>200db72</code></a> Pin setup-ko to previous release (<a href="https://redirect.github.com/google/ko/issues/1082">#1082</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/4366ded82cdda05ef85bc5483d19daa241d08f38"><code>4366ded</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1079">#1079</a> from ko-build/dependabot/github_actions/slsa-framewo...</li> <li><a href="https://github.com/ko-build/ko/commit/adbea950c10e2c69c7bf0589a6bf0b4e7ceafbfa"><code>adbea95</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1078">#1078</a> from ko-build/dependabot/github_actions/goreleaser/g...</li> <li><a href="https://github.com/ko-build/ko/commit/6175237fe6539a48206da87c239ad98b4f7d7312"><code>6175237</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1077">#1077</a> from ko-build/dependabot/go_modules/github.com/spf13...</li> <li><a href="https://github.com/ko-build/ko/commit/5e5fe2e703c1f0c9186975b06090ae563283f48d"><code>5e5fe2e</code></a> Merge pull request <a href="https://redirect.github.com/google/ko/issues/1076">#1076</a> from ko-build/dependabot/github_actions/aws-actions/...</li> <li><a href="https://github.com/ko-build/ko/commit/dc9b3eebef9818e2efab17cec8dd3eebff72e074"><code>dc9b3ee</code></a> Bump github.com/spf13/viper from 1.15.0 to 1.16.0</li> <li><a href="https://github.com/ko-build/ko/commit/ed445128e25c7bd0b6643b58ac44383a583d84f5"><code>ed44512</code></a> Bump golang.org/x/tools from 0.9.3 to 0.10.0 (<a href="https://redirect.github.com/google/ko/issues/1080">#1080</a>)</li> <li><a href="https://github.com/ko-build/ko/commit/fcd95ec958cad910b4746245662506b1f974f40e"><code>fcd95ec</code></a> Bump slsa-framework/slsa-github-generator from 1.6.0 to 1.7.0</li> <li><a href="https://github.com/ko-build/ko/commit/974f09cdeacd7042c3db573366768ecbb32246a5"><code>974f09c</code></a> Bump goreleaser/goreleaser-action from 4.2.0 to 4.3.0</li> <li><a href="https://github.com/ko-build/ko/commit/893f6e877f7c352261c13e078bb8fc9709bb285c"><code>893f6e8</code></a> Bump aws-actions/configure-aws-credentials from 2.1.0 to 2.2.0</li> <li>Additional commits viewable in <a href="https://github.com/google/ko/compare/v0.13.0...v0.14.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/ko&package-manager=go_modules&previous-version=0.13.0&new-version=0.14.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-26 18:56:50 +02:00
sigs.k8s.io/kind v0.20.0 h1:f0sc3v9mQbGnjBUaqSFST1dwIuiikKVGgoTwpoP33a8=
sigs.k8s.io/kind v0.20.0/go.mod h1:aBlbxg08cauDgZ612shr017/rZwqd7AS563FvpWKPVs=
feat(deps): bump gocloud.dev from 0.26.0 to 0.27.0 (#3430) Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.26.0 to 0.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/go-cloud/releases">gocloud.dev's releases</a>.</em></p> <blockquote> <h2>v0.27.0</h2> <p><strong>ANNOUNCEMENT</strong>: In the next release we plan to switch over from using OpenCensus to using OpenTelemetry; see <a href="https://github-redirect.dependabot.com/google/go-cloud/issues/2877">#2877</a> for discussion. Please comment on that issue if this is a concern for you.</p> <p><strong>BREAKING CHANGES</strong>: <strong>blob/azureblob, pubsub/azuresb</strong>: Switched over to using the new Azure beta release. Constructors and <code>As</code> types have changed.</p> <p><strong>pubsub</strong>: <strong>all</strong>: Added support for overriding batching for AWS, GCP, Azure.</p> <p><strong>blob</strong>: <strong>fileblob</strong>: Fixed file permissions on temporary files.</p> <p><strong>runtimevar</strong>: <strong>etcdvar</strong>: Brought back this package now that the upstream issues have been resolved.</p> <p><strong>secrets</strong>: <strong>awskms</strong>: Added support for EncryptionContext parameters.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/go-cloud/commit/3c635fdcb2e648272296b12a4b23d593a965609e"><code>3c635fd</code></a> all: prep for v0.27.0 release</li> <li><a href="https://github.com/google/go-cloud/commit/132c6952d06448b5325f6b856d742a2e535eaf65"><code>132c695</code></a> internal: remove unused package for tracing (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3167">#3167</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/b078f175bb3d0de54df4b2ff1497ce19f9583fce"><code>b078f17</code></a> Add a custom createTemp function that uses consistent file permissions. (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3166">#3166</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2c69298b18a5e169e9b6b4f4fb338487006b5f47"><code>2c69298</code></a> pubsub/kafka: Allow overriding batching options for Topic (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3163">#3163</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/2ae6e177616a04b94100982ad9f1197af3c41d71"><code>2ae6e17</code></a> blob/azureblob: add storage_account query parameter (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3159">#3159</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/58fd16630bd7ce978bf53ec5a3974cac4299e105"><code>58fd166</code></a> blob/azureblob: Use azidentity.NewDefaultAzureCredential the default/fallback...</li> <li><a href="https://github.com/google/go-cloud/commit/bb5165b76b81ce64c0e769965c0eb293ccd938ac"><code>bb5165b</code></a> pubsub: Add support for overriding batching for AWS, GCP, Azure drivers (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3158">#3158</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/0c45fa60411312d52335c521a8a8411a15e1ce71"><code>0c45fa6</code></a> blob/azureblob: Update to new azblob package BREAKING_CHANGE_OK (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3156">#3156</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/cf4fa6ff18f951d45ec6f1997a3b70695f3a0b17"><code>cf4fa6f</code></a> runtimevar/etcdvar: Bring back runtimevar/etcdvar (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3157">#3157</a>)</li> <li><a href="https://github.com/google/go-cloud/commit/8cd52867f0776832bdc91cc2f1151920351380b2"><code>8cd5286</code></a> all: update deps and regenerate goldens (<a href="https://github-redirect.dependabot.com/google/go-cloud/issues/3153">#3153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/go-cloud/compare/v0.26.0...v0.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.26.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 14:49:30 +02:00
sigs.k8s.io/yaml v1.3.0/go.mod h1:GeOyir5tyXNByN85N/dRIT9es5UQNerPYEKK56eTBm8=
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419) Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.1.1 to 2.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's releases</a>.</em></p> <blockquote> <h2>v2.2.1</h2> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's changelog</a>.</em></p> <blockquote> <h1>v2.2.1</h1> <p><strong>Note: This release comes with a fix for CVE-2023-46737 described in this <a href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github Security Advisory</a>. Please upgrade to this release ASAP</strong></p> <h2>Enhancements</h2> <ul> <li>feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li>add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li>Support ReplaceOp in Signatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li> <li>feat: added ability to get image digest back via triangulate (<a href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li> <li>feat: add <code>--only</code> flag in <code>cosign copy</code> to copy sign, att &amp; sbom (<a href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li> <li>feat: add support attaching a Rekor bundle to a container (<a href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li> <li>feat: add support outputting rekor response on signing (<a href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li> <li>feat: improve dockerfile verify subcommand (<a href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li> <li>Add guard flag for experimental OCI 1.1 verify. (<a href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li> <li>Deprecate SBOM attachments (<a href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li> <li>feat: dedent line in cosign copy doc (<a href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li> <li>feat: add platform flag to cosign copy command (<a href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li> <li>Add SLSA 1.0 attestation support to cosign. Closes <a href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a> (<a href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li> <li>attest: pass OCI remote opts to att resolver. (<a href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li>fix: allow cosign download sbom when image is absent (<a href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li> <li>ci: add a OCI registry test for referrers support (<a href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li> <li>Fix ReplaceSignatures (<a href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li> <li>Stop using deprecated in_toto.ProvenanceStatement (<a href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li> <li>Fixes <a href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>, disable SCT checking for a cosign verification when usin… (<a href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li> <li>fix: update error in <code>SignedEntity</code> to be more descriptive (<a href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li> <li>Fail timestamp verification if no root is provided (<a href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li> </ul> <h2>Documentation</h2> <ul> <li>Add some docs about verifying in an air-gapped environment (<a href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li> <li>Update CONTRIBUTING.md (<a href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li> <li>docs: improves the Contribution guidelines (<a href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li> <li>Remove security policy (<a href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li> </ul> <h2>Others</h2> <ul> <li>Set go to min 1.21 and update dependencies (<a href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li> <li>Update contact for code of conduct (<a href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li> <li>Update .ko.yaml (<a href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li> </ul> <h2>Contributors</h2> <ul> <li>AdamKorcz</li> <li>Andres Galante</li> <li>Appu</li> <li>Billy Lynch</li> <li>Bob Callaway</li> <li>Caleb Woodbine</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign/commit/12cbf9ea177d22bbf5cf028bcb4712b5f174ebc6"><code>12cbf9e</code></a> add changelog for v2.2.1 release (<a href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/827f24e9d4a1f8e845cb1597d02053410f5bbe2a"><code>827f24e</code></a> feat: Support basic auth and bearer auth login to registry (<a href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8ac891ff0e29ddc67965423bee8f826219c6eb0f"><code>8ac891f</code></a> Merge pull request from GHSA-vfp6-jrw2-99g9</li> <li><a href="https://github.com/sigstore/cosign/commit/8b366c497bd22b9be7742d057b8f59083dcadee0"><code>8b366c4</code></a> add support for ignoring certificates with pkcs11 (<a href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/23920de5623a505921ba4e62fa97e2553eff4699"><code>23920de</code></a> chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/e022e1c13240d1ae5b3c408bc53e389154331713"><code>e022e1c</code></a> chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/28c59c5eca6386924cc8f381afe94efe1e957679"><code>28c59c5</code></a> add missing groups key (<a href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/8e5bdcc0ff39b8dc1b477251fef521601df76ec0"><code>8e5bdcc</code></a> chore(deps): bump github.com/google/certificate-transparency-go (<a href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/510cac4ef54274823599082e3a57a556ccd5c9e5"><code>510cac4</code></a> chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li> <li><a href="https://github.com/sigstore/cosign/commit/063902b1d78fed7c12c9d9ce06248d36963e8169"><code>063902b</code></a> chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0 (<a href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/goreleaser/goreleaser/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 18:39:49 +02:00
sigs.k8s.io/yaml v1.4.0 h1:Mk1wCc2gy/F0THH0TAp1QYyJNzRm2KCLy3o5ASXVI5E=
sigs.k8s.io/yaml v1.4.0/go.mod h1:Ejl7/uTz7PSA4eKMyQCUTnhZYNmLIl+5c2lQPGR2BPY=
Reference in New Issue Copy Permalink