@@ -6,7 +6,7 @@ require (
66 github.com/ProtonMail/go-crypto v0.0.0-20230923063757-afb1ddc0824c
77 github.com/djherbis/times v1.5.0
88 github.com/ghodss/yaml v1.0.0
9- github.com/go-openapi/runtime v0.29.2
9+ github.com/go-openapi/runtime v0.29.4
1010 github.com/google/go-containerregistry v0.20.7
1111 github.com/in-toto/in-toto-golang v0.9.0
1212 github.com/jinzhu/copier v0.3.2
@@ -16,11 +16,11 @@ require (
1616 github.com/open-policy-agent/gatekeeper/v3 v3.14.0
1717 github.com/pkg/errors v0.9.1
1818 github.com/r3labs/diff v1.1.0
19- github.com/secure-systems-lab/go-securesystemslib v0.10 .0
19+ github.com/secure-systems-lab/go-securesystemslib v0.11 .0
2020 github.com/sigstore/cosign/v3 v3.0.4
2121 github.com/sigstore/fulcio v1.8.5
22- github.com/sigstore/rekor v1.5.0
23- github.com/sigstore/sigstore v1.10.4
22+ github.com/sigstore/rekor v1.5.2
23+ github.com/sigstore/sigstore v1.10.6
2424 github.com/sirupsen/logrus v1.9.4
2525 github.com/spf13/afero v1.15.0
2626 github.com/spf13/cobra v1.10.2
@@ -40,7 +40,7 @@ require (
4040)
4141
4242require (
43- cloud.google.com/go/auth v0.18 .0 // indirect
43+ cloud.google.com/go/auth v0.19 .0 // indirect
4444 cloud.google.com/go/auth/oauth2adapt v0.2.8 // indirect
4545 cloud.google.com/go/compute/metadata v0.9.0 // indirect
4646 cuelabs.dev/go/oci/ociregistry v0.0.0-20250722084951-074d06050084 // indirect
@@ -72,22 +72,22 @@ require (
7272 github.com/alibabacloud-go/tea-xml v1.1.3 // indirect
7373 github.com/aliyun/credentials-go v1.3.2 // indirect
7474 github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect
75- github.com/aws/aws-sdk-go-v2 v1.41.0 // indirect
76- github.com/aws/aws-sdk-go-v2/config v1.32.5 // indirect
77- github.com/aws/aws-sdk-go-v2/credentials v1.19.5 // indirect
78- github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.16 // indirect
79- github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.16 // indirect
80- github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.16 // indirect
81- github.com/aws/aws-sdk-go-v2/internal/ini v1.8.4 // indirect
75+ github.com/aws/aws-sdk-go-v2 v1.41.6 // indirect
76+ github.com/aws/aws-sdk-go-v2/config v1.32.14 // indirect
77+ github.com/aws/aws-sdk-go-v2/credentials v1.19.14 // indirect
78+ github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.21 // indirect
79+ github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.22 // indirect
80+ github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.22 // indirect
81+ github.com/aws/aws-sdk-go-v2/internal/ini v1.8.6 // indirect
8282 github.com/aws/aws-sdk-go-v2/service/ecr v1.51.2 // indirect
8383 github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.38.2 // indirect
84- github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.4 // indirect
85- github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.16 // indirect
86- github.com/aws/aws-sdk-go-v2/service/signin v1.0.4 // indirect
87- github.com/aws/aws-sdk-go-v2/service/sso v1.30.7 // indirect
88- github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.12 // indirect
89- github.com/aws/aws-sdk-go-v2/service/sts v1.41.5 // indirect
90- github.com/aws/smithy-go v1.24 .0 // indirect
84+ github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.7 // indirect
85+ github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.21 // indirect
86+ github.com/aws/aws-sdk-go-v2/service/signin v1.0.9 // indirect
87+ github.com/aws/aws-sdk-go-v2/service/sso v1.30.15 // indirect
88+ github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.19 // indirect
89+ github.com/aws/aws-sdk-go-v2/service/sts v1.41.10 // indirect
90+ github.com/aws/smithy-go v1.25 .0 // indirect
9191 github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.11.0 // indirect
9292 github.com/beorn7/perks v1.0.1 // indirect
9393 github.com/blang/semver v3.5.1+incompatible // indirect
@@ -124,35 +124,35 @@ require (
124124 github.com/felixge/httpsnoop v1.0.4 // indirect
125125 github.com/fsnotify/fsnotify v1.9.0 // indirect
126126 github.com/fxamacker/cbor/v2 v2.9.0 // indirect
127- github.com/go-chi/chi/v5 v5.2.4 // indirect
127+ github.com/go-chi/chi/v5 v5.2.5 // indirect
128128 github.com/go-errors/errors v1.4.2 // indirect
129129 github.com/go-ini/ini v1.67.0 // indirect
130130 github.com/go-jose/go-jose/v4 v4.1.4 // indirect
131131 github.com/go-logr/logr v1.4.3 // indirect
132132 github.com/go-logr/stdr v1.2.2 // indirect
133133 github.com/go-logr/zapr v1.3.0 // indirect
134- github.com/go-openapi/analysis v0.24.1 // indirect
135- github.com/go-openapi/errors v0.22.6 // indirect
136- github.com/go-openapi/jsonpointer v0.22.4 // indirect
137- github.com/go-openapi/jsonreference v0.21.4 // indirect
138- github.com/go-openapi/loads v0.23.2 // indirect
139- github.com/go-openapi/spec v0.22.3 // indirect
140- github.com/go-openapi/strfmt v0.25.0 // indirect
141- github.com/go-openapi/swag v0.25.4 // indirect
142- github.com/go-openapi/swag/cmdutils v0.25.4 // indirect
143- github.com/go-openapi/swag/conv v0.25.4 // indirect
144- github.com/go-openapi/swag/fileutils v0.25.4 // indirect
145- github.com/go-openapi/swag/jsonname v0.25.4 // indirect
146- github.com/go-openapi/swag/jsonutils v0.25.4 // indirect
147- github.com/go-openapi/swag/loading v0.25.4 // indirect
148- github.com/go-openapi/swag/mangling v0.25.4 // indirect
149- github.com/go-openapi/swag/netutils v0.25.4 // indirect
150- github.com/go-openapi/swag/stringutils v0.25.4 // indirect
151- github.com/go-openapi/swag/typeutils v0.25.4 // indirect
152- github.com/go-openapi/swag/yamlutils v0.25.4 // indirect
153- github.com/go-openapi/validate v0.25.1 // indirect
134+ github.com/go-openapi/analysis v0.25.0 // indirect
135+ github.com/go-openapi/errors v0.22.7 // indirect
136+ github.com/go-openapi/jsonpointer v0.22.5 // indirect
137+ github.com/go-openapi/jsonreference v0.21.5 // indirect
138+ github.com/go-openapi/loads v0.23.3 // indirect
139+ github.com/go-openapi/spec v0.22.4 // indirect
140+ github.com/go-openapi/strfmt v0.26.2 // indirect
141+ github.com/go-openapi/swag v0.26.0 // indirect
142+ github.com/go-openapi/swag/cmdutils v0.26.0 // indirect
143+ github.com/go-openapi/swag/conv v0.26.0 // indirect
144+ github.com/go-openapi/swag/fileutils v0.26.0 // indirect
145+ github.com/go-openapi/swag/jsonname v0.26.0 // indirect
146+ github.com/go-openapi/swag/jsonutils v0.26.0 // indirect
147+ github.com/go-openapi/swag/loading v0.26.0 // indirect
148+ github.com/go-openapi/swag/mangling v0.26.0 // indirect
149+ github.com/go-openapi/swag/netutils v0.26.0 // indirect
150+ github.com/go-openapi/swag/stringutils v0.26.0 // indirect
151+ github.com/go-openapi/swag/typeutils v0.26.0 // indirect
152+ github.com/go-openapi/swag/yamlutils v0.26.0 // indirect
153+ github.com/go-openapi/validate v0.25.2 // indirect
154154 github.com/go-piv/piv-go/v2 v2.4.0 // indirect
155- github.com/go-viper/mapstructure/v2 v2.4 .0 // indirect
155+ github.com/go-viper/mapstructure/v2 v2.5 .0 // indirect
156156 github.com/gobwas/glob v0.2.3 // indirect
157157 github.com/goccy/go-json v0.10.5 // indirect
158158 github.com/gogo/protobuf v1.3.2 // indirect
@@ -166,8 +166,8 @@ require (
166166 github.com/google/go-querystring v1.2.0 // indirect
167167 github.com/google/s2a-go v0.1.9 // indirect
168168 github.com/google/uuid v1.6.0 // indirect
169- github.com/googleapis/enterprise-certificate-proxy v0.3.9 // indirect
170- github.com/googleapis/gax-go/v2 v2.16 .0 // indirect
169+ github.com/googleapis/enterprise-certificate-proxy v0.3.14 // indirect
170+ github.com/googleapis/gax-go/v2 v2.22 .0 // indirect
171171 github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674 // indirect
172172 github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 // indirect
173173 github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.4 // indirect
@@ -187,7 +187,7 @@ require (
187187 github.com/lestrrat-go/jwx/v3 v3.0.12 // indirect
188188 github.com/lestrrat-go/option v1.0.1 // indirect
189189 github.com/lestrrat-go/option/v2 v2.0.0 // indirect
190- github.com/letsencrypt/boulder v0.20251110 .0 // indirect
190+ github.com/letsencrypt/boulder v0.20260223 .0 // indirect
191191 github.com/liggitt/tabwriter v0.0.0-20181228230101-89fcab3d43de // indirect
192192 github.com/miekg/pkcs11 v1.1.1 // indirect
193193 github.com/mitchellh/go-homedir v1.1.0 // indirect
@@ -202,7 +202,7 @@ require (
202202 github.com/mxk/go-flowrate v0.0.0-20140419014527-cca7078d478f // indirect
203203 github.com/nozzle/throttler v0.0.0-20180817012639-2ea982251481 // indirect
204204 github.com/nxadm/tail v1.4.11 // indirect
205- github.com/oklog/ulid v1.3 .1// indirect
205+ github.com/oklog/ulid/v2 v2.1 .1// indirect
206206 github.com/oleiade/reflections v1.1.0 // indirect
207207 github.com/open-policy-agent/opa v1.12.1 // indirect
208208 github.com/opencontainers/go-digest v1.0.0 // indirect
@@ -224,7 +224,7 @@ require (
224224 github.com/sassoftware/relic v7.2.1+incompatible // indirect
225225 github.com/segmentio/asm v1.2.1 // indirect
226226 github.com/shibumi/go-pathspec v1.3.0 // indirect
227- github.com/sigstore/protobuf-specs v0.5.0 // indirect
227+ github.com/sigstore/protobuf-specs v0.5.1 // indirect
228228 github.com/sigstore/rekor-tiles/v2 v2.0.1 // indirect
229229 github.com/sigstore/sigstore-go v1.1.4 // indirect
230230 github.com/sigstore/timestamp-authority/v2 v2.0.4 // indirect
@@ -251,43 +251,42 @@ require (
251251 github.com/xlab/treeprint v1.2.0 // indirect
252252 github.com/yashtewari/glob-intersection v0.2.0 // indirect
253253 gitlab.com/gitlab-org/api/client-go v1.11.0 // indirect
254- go.mongodb.org/mongo-driver v1.17.7 // indirect
255254 go.opentelemetry.io/auto/sdk v1.2.1 // indirect
256255 go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0 // indirect
257- go.opentelemetry.io/otel v1.41 .0 // indirect
258- go.opentelemetry.io/otel/metric v1.41 .0 // indirect
259- go.opentelemetry.io/otel/sdk v1.40 .0 // indirect
260- go.opentelemetry.io/otel/trace v1.41 .0 // indirect
256+ go.opentelemetry.io/otel v1.43 .0 // indirect
257+ go.opentelemetry.io/otel/metric v1.43 .0 // indirect
258+ go.opentelemetry.io/otel/sdk v1.43 .0 // indirect
259+ go.opentelemetry.io/otel/trace v1.43 .0 // indirect
261260 go.uber.org/multierr v1.11.0 // indirect
262- go.uber.org/zap v1.27.1 // indirect
261+ go.uber.org/zap v1.28.0 // indirect
263262 go.yaml.in/yaml/v2 v2.4.3 // indirect
264263 go.yaml.in/yaml/v3 v3.0.4 // indirect
265264 golang.org/x/crypto v0.52.0 // indirect
266265 golang.org/x/mod v0.35.0 // indirect
267266 golang.org/x/net v0.55.0 // indirect
268- golang.org/x/oauth2 v0.34 .0 // indirect
267+ golang.org/x/oauth2 v0.36 .0 // indirect
269268 golang.org/x/sys v0.45.0 // indirect
270269 golang.org/x/term v0.43.0 // indirect
271270 golang.org/x/text v0.37.0 // indirect
272- golang.org/x/time v0.14 .0 // indirect
273- google.golang.org/api v0.260 .0 // indirect
274- google.golang.org/genproto/googleapis/api v0.0.0-20251222181119-0a764e51fe1b // indirect
275- google.golang.org/genproto/googleapis/rpc v0.0.0-20251222181119-0a764e51fe1b // indirect
276- google.golang.org/grpc v1.79.3 // indirect
271+ golang.org/x/time v0.15 .0 // indirect
272+ google.golang.org/api v0.274 .0 // indirect
273+ google.golang.org/genproto/googleapis/api v0.0.0-20260401024825-9d38bb4040a9 // indirect
274+ google.golang.org/genproto/googleapis/rpc v0.0.0-20260401024825-9d38bb4040a9 // indirect
275+ google.golang.org/grpc v1.80.0 // indirect
277276 google.golang.org/protobuf v1.36.11 // indirect
278277 gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect
279278 gopkg.in/inf.v0 v0.9.1 // indirect
280- gopkg.in/ini.v1 v1.67.1 // indirect
279+ gopkg.in/ini.v1 v1.67.2 // indirect
281280 gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7 // indirect
282281 gopkg.in/yaml.v3 v3.0.1 // indirect
283282 k8s.io/apiextensions-apiserver v0.27.4 // indirect
284283 k8s.io/component-base v0.34.3 // indirect
285284 k8s.io/component-helpers v0.34.3 // indirect
286- k8s.io/klog/v2 v2.130.1 // indirect
285+ k8s.io/klog/v2 v2.140.0 // indirect
287286 k8s.io/utils v0.0.0-20251002143259-bc988d571ff4 // indirect
288287 sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 // indirect
289288 sigs.k8s.io/randfill v1.0.0 // indirect
290- sigs.k8s.io/release-utils v0.12.3 // indirect
289+ sigs.k8s.io/release-utils v0.12.4 // indirect
291290 sigs.k8s.io/structured-merge-diff/v6 v6.3.0 // indirect
292291 sigs.k8s.io/yaml v1.6.0 // indirect
293292)
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?v=4&size=40){kind=avatar}
0 commit comments