Skip to content

Commit 100dfec

Browse files
rchincharchincha
authored
chore: fix dependabot alerts (#3213)
Signed-off-by: Ramkumar Chinchani <rchincha.dev@gmail.com>
1 parent 4d5712d commit 100dfec

7 files changed

Lines changed: 110 additions & 112 deletions

File tree

‎.github/workflows/codeql-analysis.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -53,7 +53,7 @@ jobs:
5353

5454
# Initializes the CodeQL tools for scanning.
5555
- name: Initialize CodeQL
56-
uses: github/codeql-action/init@v3.28.19
56+
uses: github/codeql-action/init@v3.29.0
5757
with:
5858
languages: ${{ matrix.language }}
5959
# If you wish to specify custom queries, you can do so here or in a config file.
@@ -64,7 +64,7 @@ jobs:
6464
# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
6565
# If this step fails, then you should remove it and run the build manually (see below)
6666
- name: Autobuild
67-
uses: github/codeql-action/autobuild@v3.28.19
67+
uses: github/codeql-action/autobuild@v3.29.0
6868

6969
# ℹ️ Command-line programs to run using the OS shell.
7070
# 📚 https://git.io/JvXDl
@@ -77,4 +77,4 @@ jobs:
7777
# make release
7878

7979
- name: Perform CodeQL Analysis
80-
uses: github/codeql-action/analyze@v3.28.19
80+
uses: github/codeql-action/analyze@v3.29.0

‎.github/workflows/publish.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -237,7 +237,7 @@ jobs:
237237
TRIVY_USERNAME: ${{ github.actor }}
238238
TRIVY_PASSWORD: ${{ secrets.GITHUB_TOKEN }}
239239
- name: Upload Trivy scan results to GitHub Security tab
240-
uses: github/codeql-action/upload-sarif@v3.28.19
240+
uses: github/codeql-action/upload-sarif@v3.29.0
241241
with:
242242
sarif_file: 'trivy-results.sarif'
243243

@@ -274,7 +274,7 @@ jobs:
274274
TRIVY_USERNAME: ${{ github.actor }}
275275
TRIVY_PASSWORD: ${{ secrets.GITHUB_TOKEN }}
276276
- name: Upload Trivy scan results to GitHub Security tab
277-
uses: github/codeql-action/upload-sarif@v3.28.19
277+
uses: github/codeql-action/upload-sarif@v3.29.0
278278
with:
279279
sarif_file: 'trivy-results.sarif'
280280

‎.github/workflows/scorecards.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -57,6 +57,6 @@ jobs:
5757

5858
# Upload the results to GitHub's code scanning dashboard.
5959
- name: "Upload to code-scanning"
60-
uses: github/codeql-action/upload-sarif@v3.28.19
60+
uses: github/codeql-action/upload-sarif@v3.29.0
6161
with:
6262
sarif_file: results.sarif

‎go.mod‎

Lines changed: 36 additions & 35 deletions
Original file line numberDiff line numberDiff line change
@@ -3,25 +3,25 @@ module zotregistry.dev/zot
33
go 1.24.2
44

55
require (
6-
github.com/99designs/gqlgen v0.17.74
6+
github.com/99designs/gqlgen v0.17.75
77
github.com/Masterminds/semver v1.5.0
8-
github.com/alicebob/miniredis/v2 v2.34.0
8+
github.com/alicebob/miniredis/v2 v2.35.0
99
github.com/aquasecurity/trivy v0.63.0
1010
github.com/aquasecurity/trivy-db v0.0.0-20250529093513-a12dfc204b6e
1111
github.com/aws/aws-sdk-go v1.55.7
12-
github.com/aws/aws-sdk-go-v2 v1.36.3
13-
github.com/aws/aws-sdk-go-v2/config v1.29.14
12+
github.com/aws/aws-sdk-go-v2 v1.36.4
13+
github.com/aws/aws-sdk-go-v2/config v1.29.16
1414
github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue v1.19.1
15-
github.com/aws/aws-sdk-go-v2/service/dynamodb v1.43.2
15+
github.com/aws/aws-sdk-go-v2/service/dynamodb v1.43.3
1616
github.com/aws/aws-sdk-go-v2/service/ecr v1.44.0
17-
github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.35.5
17+
github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.35.6
1818
github.com/aws/aws-secretsmanager-caching-go v1.2.0
1919
github.com/aws/smithy-go v1.22.3
2020
github.com/bmatcuk/doublestar/v4 v4.8.1
2121
github.com/briandowns/spinner v1.23.2
2222
github.com/chartmuseum/auth v0.5.0
2323
github.com/cloudevents/sdk-go/protocol/nats/v2 v2.15.2
24-
github.com/cloudevents/sdk-go/v2 v2.16.0
24+
github.com/cloudevents/sdk-go/v2 v2.16.1
2525
github.com/containers/image/v5 v5.35.0
2626
github.com/dchest/siphash v1.2.3
2727
github.com/didip/tollbooth/v7 v7.0.2
@@ -31,10 +31,10 @@ require (
3131
github.com/go-ldap/ldap/v3 v3.4.11
3232
github.com/go-redis/redismock/v9 v9.2.0
3333
github.com/go-redsync/redsync/v4 v4.13.0
34-
github.com/go-viper/mapstructure/v2 v2.2.1
34+
github.com/go-viper/mapstructure/v2 v2.3.0
3535
github.com/gofrs/uuid v4.4.0+incompatible
3636
github.com/golang-jwt/jwt/v5 v5.2.2
37-
github.com/google/go-containerregistry v0.20.5
37+
github.com/google/go-containerregistry v0.20.6
3838
github.com/google/go-github/v62 v62.0.0
3939
github.com/google/uuid v1.6.0
4040
github.com/gorilla/mux v1.8.2-0.20240619235004-db9d1d0073d2
@@ -70,8 +70,8 @@ require (
7070
github.com/stretchr/testify v1.10.0
7171
github.com/swaggo/http-swagger v1.3.4
7272
github.com/swaggo/swag v1.16.4
73-
github.com/vektah/gqlparser/v2 v2.5.27
74-
github.com/zitadel/oidc/v3 v3.38.1
73+
github.com/vektah/gqlparser/v2 v2.5.28
74+
github.com/zitadel/oidc/v3 v3.39.0
7575
go.etcd.io/bbolt v1.4.0
7676
golang.org/x/crypto v0.39.0
7777
golang.org/x/oauth2 v0.30.0
@@ -88,7 +88,7 @@ require (
8888
cloud.google.com/go v0.118.3 // indirect
8989
cloud.google.com/go/auth v0.15.0 // indirect
9090
cloud.google.com/go/auth/oauth2adapt v0.2.8 // indirect
91-
cloud.google.com/go/compute/metadata v0.6.0 // indirect
91+
cloud.google.com/go/compute/metadata v0.7.0 // indirect
9292
cloud.google.com/go/iam v1.4.1 // indirect
9393
cloud.google.com/go/monitoring v1.24.0 // indirect
9494
cloud.google.com/go/storage v1.50.0 // indirect
@@ -146,7 +146,6 @@ require (
146146
github.com/alibabacloud-go/tea-utils v1.4.5 // indirect
147147
github.com/alibabacloud-go/tea-utils/v2 v2.0.6 // indirect
148148
github.com/alibabacloud-go/tea-xml v1.1.3 // indirect
149-
github.com/alicebob/gopher-json v0.0.0-20230218143504-906a9b012302 // indirect
150149
github.com/aliyun/credentials-go v1.3.6 // indirect
151150
github.com/anchore/go-struct-converter v0.0.0-20230627203149-c72ef8859ca9 // indirect
152151
github.com/apparentlymart/go-cidr v1.1.0 // indirect
@@ -162,22 +161,22 @@ require (
162161
github.com/aquasecurity/trivy-checks v1.11.2-0.20250529074512-7afea1b738c4 // indirect
163162
github.com/aquasecurity/trivy-java-db v0.0.0-20240109071736-184bd7481d48 // indirect
164163
github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect
165-
github.com/aws/aws-sdk-go-v2/credentials v1.17.67 // indirect
166-
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.30 // indirect
167-
github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.34 // indirect
168-
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.34 // indirect
164+
github.com/aws/aws-sdk-go-v2/credentials v1.17.69 // indirect
165+
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.31 // indirect
166+
github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.35 // indirect
167+
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.35 // indirect
169168
github.com/aws/aws-sdk-go-v2/internal/ini v1.8.3 // indirect
170169
github.com/aws/aws-sdk-go-v2/service/dynamodbstreams v1.25.4 // indirect
171170
github.com/aws/aws-sdk-go-v2/service/ebs v1.25.3 // indirect
172171
github.com/aws/aws-sdk-go-v2/service/ec2 v1.218.0 // indirect
173172
github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.31.2 // indirect
174173
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.12.3 // indirect
175-
github.com/aws/aws-sdk-go-v2/service/internal/endpoint-discovery v1.10.15 // indirect
176-
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.12.15 // indirect
174+
github.com/aws/aws-sdk-go-v2/service/internal/endpoint-discovery v1.10.16 // indirect
175+
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.12.16 // indirect
177176
github.com/aws/aws-sdk-go-v2/service/s3 v1.79.3 // indirect
178-
github.com/aws/aws-sdk-go-v2/service/sso v1.25.3 // indirect
179-
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.30.1 // indirect
180-
github.com/aws/aws-sdk-go-v2/service/sts v1.33.19 // indirect
177+
github.com/aws/aws-sdk-go-v2/service/sso v1.25.4 // indirect
178+
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.30.2 // indirect
179+
github.com/aws/aws-sdk-go-v2/service/sts v1.33.21 // indirect
181180
github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.9.1 // indirect
182181
github.com/beorn7/perks v1.0.1 // indirect
183182
github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d // indirect
@@ -224,9 +223,9 @@ require (
224223
github.com/dimchansky/utfbom v1.1.1 // indirect
225224
github.com/distribution/reference v0.6.0 // indirect
226225
github.com/dlclark/regexp2 v1.11.2 // indirect
227-
github.com/docker/cli v28.1.1+incompatible // indirect
226+
github.com/docker/cli v28.2.2+incompatible // indirect
228227
github.com/docker/distribution v2.8.3+incompatible // indirect
229-
github.com/docker/docker v28.1.1+incompatible // indirect
228+
github.com/docker/docker v28.2.2+incompatible // indirect
230229
github.com/docker/docker-credential-helpers v0.9.3 // indirect
231230
github.com/docker/go-connections v0.5.0 // indirect
232231
github.com/docker/go-metrics v0.0.1 // indirect
@@ -253,7 +252,7 @@ require (
253252
github.com/go-jose/go-jose/v3 v3.0.4 // indirect
254253
github.com/go-jose/go-jose/v4 v4.0.5 // indirect
255254
github.com/go-json-experiment/json v0.0.0-20250223041408-d3c622f1b874 // indirect
256-
github.com/go-logr/logr v1.4.2 // indirect
255+
github.com/go-logr/logr v1.4.3 // indirect
257256
github.com/go-logr/stdr v1.2.2 // indirect
258257
github.com/go-openapi/analysis v0.23.0 // indirect
259258
github.com/go-openapi/errors v0.22.1 // indirect
@@ -448,7 +447,7 @@ require (
448447
github.com/transparency-dev/merkle v0.0.2 // indirect
449448
github.com/twitchtv/twirp v8.1.3+incompatible // indirect
450449
github.com/ulikunitz/xz v0.5.12 // indirect
451-
github.com/urfave/cli/v2 v2.27.6 // indirect
450+
github.com/urfave/cli/v2 v2.27.7 // indirect
452451
github.com/vbatts/tar-split v0.12.1 // indirect
453452
github.com/veraison/go-cose v1.3.0 // indirect
454453
github.com/vmihailenco/msgpack/v5 v5.4.1 // indirect
@@ -476,8 +475,8 @@ require (
476475
go.opentelemetry.io/contrib/detectors/gcp v1.34.0 // indirect
477476
go.opentelemetry.io/contrib/exporters/autoexport v0.57.0 // indirect
478477
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.60.0 // indirect
479-
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.60.0 // indirect
480-
go.opentelemetry.io/otel v1.35.0 // indirect
478+
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.61.0 // indirect
479+
go.opentelemetry.io/otel v1.36.0 // indirect
481480
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc v0.8.0 // indirect
482481
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp v0.8.0 // indirect
483482
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.32.0 // indirect
@@ -490,23 +489,23 @@ require (
490489
go.opentelemetry.io/otel/exporters/stdout/stdoutmetric v1.32.0 // indirect
491490
go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.32.0 // indirect
492491
go.opentelemetry.io/otel/log v0.8.0 // indirect
493-
go.opentelemetry.io/otel/metric v1.35.0 // indirect
494-
go.opentelemetry.io/otel/sdk v1.35.0 // indirect
492+
go.opentelemetry.io/otel/metric v1.36.0 // indirect
493+
go.opentelemetry.io/otel/sdk v1.36.0 // indirect
495494
go.opentelemetry.io/otel/sdk/log v0.8.0 // indirect
496-
go.opentelemetry.io/otel/sdk/metric v1.35.0 // indirect
497-
go.opentelemetry.io/otel/trace v1.35.0 // indirect
495+
go.opentelemetry.io/otel/sdk/metric v1.36.0 // indirect
496+
go.opentelemetry.io/otel/trace v1.36.0 // indirect
498497
go.opentelemetry.io/proto/otlp v1.5.0 // indirect
499498
go.uber.org/multierr v1.11.0 // indirect
500499
go.uber.org/zap v1.27.0 // indirect
501500
golang.org/x/exp v0.0.0-20250408133849-7e4ce0ab07d0 // indirect
502501
golang.org/x/mod v0.25.0 // indirect
503-
golang.org/x/net v0.40.0 // indirect
502+
golang.org/x/net v0.41.0 // indirect
504503
golang.org/x/sync v0.15.0 // indirect
505504
golang.org/x/sys v0.33.0 // indirect
506505
golang.org/x/term v0.32.0 // indirect
507506
golang.org/x/text v0.26.0 // indirect
508-
golang.org/x/time v0.11.0 // indirect
509-
golang.org/x/tools v0.33.0 // indirect
507+
golang.org/x/time v0.12.0 // indirect
508+
golang.org/x/tools v0.34.0 // indirect
510509
golang.org/x/xerrors v0.0.0-20240716161551-93cc26a95ae9 // indirect
511510
google.golang.org/api v0.228.0 // indirect
512511
google.golang.org/genproto v0.0.0-20250303144028-a0af3efb3deb // indirect
@@ -542,3 +541,5 @@ require (
542541
sigs.k8s.io/structured-merge-diff/v4 v4.6.0 // indirect
543542
sigs.k8s.io/yaml v1.4.0 // indirect
544543
)
544+
545+
replace github.com/docker/docker => github.com/docker/docker v28.1.1+incompatible

0 commit comments

Comments
 (0)