@@ -2,14 +2,14 @@ module stackerbuild.io/stacker
22
33go 1.23.0
44
5- toolchain go1.23.7
5+ toolchain go1.24.1
66
77require (
88 github.com/anmitsu/go-shlex v0.0.0-20200514113438-38f4b401e2be
99 github.com/apex/log v1.9.0
1010 github.com/apparentlymart/go-shquot v0.0.1
1111 github.com/cheggaaa/pb/v3 v3.1.2
12- github.com/containers/image/v5 v5.24.2
12+ github.com/containers/image/v5 v5.34.3
1313 github.com/dustin/go-humanize v1.0.1
1414 github.com/justincormack/go-memfd v0.0.0-20170219213707-6e4af0518993
1515 github.com/klauspost/pgzip v1.2.6
@@ -31,35 +31,51 @@ require (
3131 github.com/urfave/cli/v2 v2.27.6
3232 github.com/vbatts/go-mtree v0.5.3
3333 golang.org/x/sys v0.31.0
34- golang.org/x/term v0.27 .0
34+ golang.org/x/term v0.28 .0
3535 gopkg.in/yaml.v2 v2.4.0
3636 sigs.k8s.io/bom v0.6.0
37- sigs.k8s.io/yaml v1.3 .0
37+ sigs.k8s.io/yaml v1.4 .0
3838 stackerbuild.io/stacker-bom v0.0.0-00010101000000-000000000000
3939)
4040
4141require (
4242 github.com/Masterminds/semver/v3 v3.2.1 // indirect
43+ github.com/containerd/cgroups/v3 v3.0.3 // indirect
44+ github.com/containerd/containerd/api v1.7.19 // indirect
45+ github.com/containerd/errdefs v0.3.0 // indirect
46+ github.com/containerd/errdefs/pkg v0.3.0 // indirect
47+ github.com/containerd/log v0.1.0 // indirect
48+ github.com/containerd/platforms v0.2.1 // indirect
49+ github.com/felixge/httpsnoop v1.0.4 // indirect
4350 github.com/freddierice/go-losetup v0.0.0-20220711213114-2a14873012db // indirect
51+ github.com/go-jose/go-jose/v4 v4.0.4 // indirect
4452 github.com/martinjungblut/go-cryptsetup v0.0.0-20220520180014-fd0874fd07a6 // indirect
53+ github.com/mattn/go-sqlite3 v1.14.24 // indirect
54+ github.com/moby/docker-image-spec v1.3.1 // indirect
55+ github.com/moby/sys/capability v0.4.0 // indirect
4556 github.com/moby/sys/user v0.3.0 // indirect
57+ github.com/moby/sys/userns v0.1.0 // indirect
58+ github.com/smallstep/pkcs7 v0.1.1 // indirect
4659 github.com/smarty/assertions v1.15.0 // indirect
60+ github.com/tchap/go-patricia/v2 v2.3.2 // indirect
61+ github.com/vbauerster/mpb/v8 v8.9.1 // indirect
62+ go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.54.0 // indirect
4763)
4864
4965require (
50- dario.cat/mergo v1.0.0 // indirect
51- github.com/AdaLogics/go-fuzz-headers v0.0.0-20230106234847-43070de90fa1 // indirect
52- github.com/AdamKorcz/go-118-fuzz-build v0.0.0-20221215162035-5330a85ea652 // indirect
66+ dario.cat/mergo v1.0.1 // indirect
67+ github.com/AdaLogics/go-fuzz-headers v0.0.0-20230811130428-ced1acdcaa24 // indirect
68+ github.com/AdamKorcz/go-118-fuzz-build v0.0.0-20230306123547-8075edf89bb0 // indirect
5369 github.com/BurntSushi/toml v1.4.0 // indirect
5470 github.com/CycloneDX/cyclonedx-go v0.7.2 // indirect
5571 github.com/DataDog/zstd v1.4.8 // indirect
5672 github.com/MakeNowJust/heredoc/v2 v2.0.1 // indirect
5773 github.com/Masterminds/goutils v1.1.1 // indirect
5874 github.com/Masterminds/semver v1.5.0 // indirect
5975 github.com/Masterminds/sprig/v3 v3.2.3 // indirect
60- github.com/Microsoft/go-winio v0.6.1 // indirect
61- github.com/Microsoft/hcsshim v0.10.0-rc.7 // indirect
62- github.com/ProtonMail/go-crypto v0.0.0-20230828082145-3c4c8a2d2371 // indirect
76+ github.com/Microsoft/go-winio v0.6.2 // indirect
77+ github.com/Microsoft/hcsshim v0.12.9 // indirect
78+ github.com/ProtonMail/go-crypto v1.1.3 // indirect
6379 github.com/VividCortex/ewma v1.2.0 // indirect
6480 github.com/acarl005/stripansi v0.0.0-20180116102854-5a71ef0e047d // indirect
6581 github.com/acobaugh/osrelease v0.1.0 // indirect
@@ -72,77 +88,75 @@ require (
7288 github.com/anchore/packageurl-go v0.1.1-0.20230104203445-02e0a6721501 // indirect
7389 github.com/anchore/stereoscope v0.0.0-20230925132944-bf05af58eb44 // indirect
7490 github.com/anchore/syft v0.90.0 // indirect
75- github.com/andybalholm/brotli v1.0.6 // indirect
91+ github.com/andybalholm/brotli v1.1.0 // indirect
7692 github.com/aquasecurity/go-pep440-version v0.0.0-20210121094942-22b2f8951d46 // indirect
7793 github.com/aquasecurity/go-version v0.0.0-20210121072130-637058cfe492 // indirect
78- github.com/asaskevich/govalidator v0.0.0-20210307081110-f21760c49a8d // indirect
94+ github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect
7995 github.com/becheran/wildmatch-go v1.0.0 // indirect
8096 github.com/blang/semver/v4 v4.0.0 // indirect
8197 github.com/bmatcuk/doublestar/v4 v4.6.0 // indirect
82- github.com/cloudflare/circl v1.3.3 // indirect
98+ github.com/cloudflare/circl v1.3.7 // indirect
8399 github.com/common-nighthawk/go-figure v0.0.0-20210622060536-734e95fb86be // indirect
84- github.com/containerd/cgroups v1.1.0 // indirect
85- github.com/containerd/containerd v1.7.0 // indirect
86- github.com/containerd/continuity v0.3.0 // indirect
100+ github.com/containerd/containerd v1.7.23 // indirect
101+ github.com/containerd/continuity v0.4.2 // indirect
87102 github.com/containerd/fifo v1.1.0 // indirect
88- github.com/containerd/stargz-snapshotter/estargz v0.14 .3 // indirect
89- github.com/containerd/ttrpc v1.2.1 // indirect
103+ github.com/containerd/stargz-snapshotter/estargz v0.16 .3 // indirect
104+ github.com/containerd/ttrpc v1.2.5 // indirect
90105 github.com/containerd/typeurl v1.0.2 // indirect
91- github.com/containerd/typeurl/v2 v2.1.0 // indirect
106+ github.com/containerd/typeurl/v2 v2.2.3 // indirect
92107 github.com/containers/libtrust v0.0.0-20230121012942-c1716e8a8d01 // indirect
93- github.com/containers/ocicrypt v1.1.7 // indirect
94- github.com/containers/storage v1.45.3 // indirect
108+ github.com/containers/ocicrypt v1.2.1 // indirect
109+ github.com/containers/storage v1.57.2 // indirect
95110 github.com/cpuguy83/go-md2man/v2 v2.0.5 // indirect
96- github.com/cyberphone/json-canonicalization v0.0.0-20220623050100-57a0ce2678a7 // indirect
97- github.com/cyphar/filepath-securejoin v0.3.5 // indirect
111+ github.com/cyberphone/json-canonicalization v0.0.0-20231217050601-ba74d44ecf5f // indirect
112+ github.com/cyphar/filepath-securejoin v0.3.6 // indirect
98113 github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
99114 github.com/deitch/magic v0.0.0-20230404182410-1ff89d7342da // indirect
100- github.com/distribution/reference v0.5 .0 // indirect
101- github.com/docker/cli v24.0.0 +incompatible// indirect
115+ github.com/distribution/reference v0.6 .0 // indirect
116+ github.com/docker/cli v27.5.1 +incompatible// indirect
102117 github.com/docker/distribution v2.8.3+incompatible // indirect
103- github.com/docker/docker v24.0.6 +incompatible// indirect
104- github.com/docker/docker-credential-helpers v0.7.0 // indirect
105- github.com/docker/go-connections v0.4 .0 // indirect
118+ github.com/docker/docker v27.5.1 +incompatible// indirect
119+ github.com/docker/docker-credential-helpers v0.8.2 // indirect
120+ github.com/docker/go-connections v0.5 .0 // indirect
106121 github.com/docker/go-events v0.0.0-20190806004212-e31b211e4f1c // indirect
107122 github.com/docker/go-units v0.5.0 // indirect
108123 github.com/dsnet/compress v0.0.2-0.20210315054119-f66993602bf5 // indirect
109124 github.com/edsrzf/mmap-go v1.1.0 // indirect
110125 github.com/emirpasic/gods v1.18.1 // indirect
111126 github.com/facebookincubator/nvdtools v0.1.5 // indirect
112- github.com/fatih/color v1.14.1 // indirect
127+ github.com/fatih/color v1.15.0 // indirect
113128 github.com/felixge/fgprof v0.9.3 // indirect
114129 github.com/fsnotify/fsnotify v1.7.0 // indirect
115130 github.com/gabriel-vasile/mimetype v1.4.2 // indirect
116- github.com/ghodss/yaml v1.0.0 // indirect
117131 github.com/github/go-spdx/v2 v2.2.0 // indirect
118132 github.com/glebarez/go-sqlite v1.22.0 // indirect
119133 github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect
120134 github.com/go-git/go-billy/v5 v5.5.0 // indirect
121135 github.com/go-git/go-git/v5 v5.11.0 // indirect
122- github.com/go-logr/logr v1.3.0 // indirect
136+ github.com/go-logr/logr v1.4.2 // indirect
123137 github.com/go-logr/stdr v1.2.2 // indirect
124- github.com/go-openapi/analysis v0.21.4 // indirect
125- github.com/go-openapi/errors v0.20.3 // indirect
126- github.com/go-openapi/jsonpointer v0.19.5 // indirect
127- github.com/go-openapi/jsonreference v0.20 .0 // indirect
128- github.com/go-openapi/loads v0.21.2 // indirect
129- github.com/go-openapi/runtime v0.24.1 // indirect
130- github.com/go-openapi/spec v0.20.7 // indirect
131- github.com/go-openapi/strfmt v0.21.3 // indirect
132- github.com/go-openapi/swag v0.22.3 // indirect
133- github.com/go-openapi/validate v0.22 .0 // indirect
138+ github.com/go-openapi/analysis v0.23.0 // indirect
139+ github.com/go-openapi/errors v0.22.0 // indirect
140+ github.com/go-openapi/jsonpointer v0.21.0 // indirect
141+ github.com/go-openapi/jsonreference v0.21 .0 // indirect
142+ github.com/go-openapi/loads v0.22.0 // indirect
143+ github.com/go-openapi/runtime v0.28.0 // indirect
144+ github.com/go-openapi/spec v0.21.0 // indirect
145+ github.com/go-openapi/strfmt v0.23.0 // indirect
146+ github.com/go-openapi/swag v0.23.0 // indirect
147+ github.com/go-openapi/validate v0.24 .0 // indirect
134148 github.com/go-restruct/restruct v1.2.0-alpha // indirect
135149 github.com/gogo/protobuf v1.3.2 // indirect
136150 github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
137- github.com/golang/protobuf v1.5.3 // indirect
151+ github.com/golang/protobuf v1.5.4 // indirect
138152 github.com/golang/snappy v0.0.4 // indirect
139153 github.com/google/go-cmp v0.6.0 // indirect
140- github.com/google/go-containerregistry v0.17.0 // indirect
154+ github.com/google/go-containerregistry v0.20.2 // indirect
141155 github.com/google/go-intervals v0.0.2 // indirect
142156 github.com/google/licensecheck v0.3.1 // indirect
143157 github.com/google/licenseclassifier/v2 v2.0.0 // indirect
144- github.com/google/pprof v0.0.0-20221118152302-e6195bd50e26 // indirect
145- github.com/google/uuid v1.5 .0 // indirect
158+ github.com/google/pprof v0.0.0-20240727154555-813a5fbdbec8 // indirect
159+ github.com/google/uuid v1.6 .0 // indirect
146160 github.com/gookit/color v1.5.4 // indirect
147161 github.com/gopherjs/gopherjs v1.17.2 // indirect
148162 github.com/gorilla/mux v1.8.1 // indirect
@@ -162,29 +176,28 @@ require (
162176 github.com/kastenhq/goversion v0.0.0-20230811215019-93b2f8823953 // indirect
163177 github.com/kevinburke/ssh_config v1.2.0 // indirect
164178 github.com/kjk/lzma v0.0.0-20161016003348-3fd93898850d // indirect
165- github.com/klauspost/compress v1.17.4 // indirect
179+ github.com/klauspost/compress v1.17.11 // indirect
166180 github.com/klauspost/cpuid/v2 v2.2.6 // indirect
167181 github.com/knqyf263/go-rpmdb v0.0.0-20230723082926-067d98befa60 // indirect
168- github.com/letsencrypt/boulder v0.0.0-20221109233200-85aa52084eaf // indirect
182+ github.com/letsencrypt/boulder v0.0.0-20240620165639-de9c06129bec // indirect
169183 github.com/magiconair/properties v1.8.7 // indirect
170184 github.com/mailru/easyjson v0.7.7 // indirect
171185 github.com/martencassel/go-apkutils v0.2.9 // indirect
172186 github.com/mattn/go-colorable v0.1.13 // indirect
173187 github.com/mattn/go-isatty v0.0.20 // indirect
174- github.com/mattn/go-runewidth v0.0.15 // indirect
175- github.com/mattn/go-shellwords v1.0.12 // indirect
188+ github.com/mattn/go-runewidth v0.0.16 // indirect
176189 github.com/mgutz/ansi v0.0.0-20200706080929-d51e80ef957d // indirect
177190 github.com/mholt/archiver/v3 v3.5.1 // indirect
178191 github.com/microsoft/go-rustaudit v0.0.0-20220730194248-4b17361d90a5 // indirect
179192 github.com/miekg/pkcs11 v1.1.1 // indirect
180- github.com/mistifyio/go-zfs/v3 v3.0.0 // indirect
193+ github.com/mistifyio/go-zfs/v3 v3.0.1 // indirect
181194 github.com/mitchellh/copystructure v1.2.0 // indirect
182195 github.com/mitchellh/go-homedir v1.1.0 // indirect
183196 github.com/mitchellh/hashstructure/v2 v2.0.2 // indirect
184197 github.com/mitchellh/mapstructure v1.5.0 // indirect
185198 github.com/mitchellh/reflectwalk v1.0.2 // indirect
186199 github.com/moby/locker v1.0.1 // indirect
187- github.com/moby/sys/mountinfo v0.7.1 // indirect
200+ github.com/moby/sys/mountinfo v0.7.2 // indirect
188201 github.com/moby/sys/sequential v0.5.0 // indirect
189202 github.com/moby/sys/signal v0.7.0 // indirect
190203 github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
@@ -195,19 +208,18 @@ require (
195208 github.com/olekukonko/tablewriter v0.0.5 // indirect
196209 github.com/opencontainers/runc v1.2.3 // indirect
197210 github.com/opencontainers/runtime-spec v1.2.0 // indirect
198- github.com/opencontainers/selinux v1.11.0 // indirect
211+ github.com/opencontainers/selinux v1.11.1 // indirect
199212 github.com/package-url/packageurl-go v0.1.2 // indirect
200213 github.com/pborman/indent v1.2.1 // indirect
201214 github.com/pelletier/go-toml v1.9.5 // indirect
202- github.com/pelletier/go-toml/v2 v2.1.1 // indirect
203- github.com/pierrec/lz4/v4 v4.1.18 // indirect
215+ github.com/pelletier/go-toml/v2 v2.2.2 // indirect
216+ github.com/pierrec/lz4/v4 v4.1.21 // indirect
204217 github.com/pjbgf/sha1cd v0.3.0 // indirect
205218 github.com/pkg/profile v1.7.0 // indirect
206219 github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
207- github.com/proglottis/gpgme v0.1.3 // indirect
208- github.com/prometheus/common v0.39.0 // indirect
220+ github.com/proglottis/gpgme v0.1.4 // indirect
209221 github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec // indirect
210- github.com/rivo/uniseg v0.4.4 // indirect
222+ github.com/rivo/uniseg v0.4.7 // indirect
211223 github.com/rootless-containers/proto/go-proto v0.0.0-20230421021042-4cd87ebadd67 // indirect
212224 github.com/rs/zerolog v1.29.1 // indirect
213225 github.com/russross/blackfriday/v2 v2.1.0 // indirect
@@ -217,34 +229,30 @@ require (
217229 github.com/saintfish/chardet v0.0.0-20230101081208-5e3ef4b5456d // indirect
218230 github.com/sassoftware/go-rpmutils v0.2.0 // indirect
219231 github.com/scylladb/go-set v1.0.3-0.20200225121959-cc7b2070d91e // indirect
220- github.com/secure-systems-lab/go-securesystemslib v0.6 .0 // indirect
232+ github.com/secure-systems-lab/go-securesystemslib v0.9 .0 // indirect
221233 github.com/sergi/go-diff v1.3.1 // indirect
222234 github.com/shibumi/go-pathspec v1.3.0 // indirect
223235 github.com/shopspring/decimal v1.2.0 // indirect
224- github.com/sigstore/fulcio v1.0.0 // indirect
225- github.com/sigstore/rekor v1.0.1 // indirect
226- github.com/sigstore/sigstore v1.6.5 // indirect
236+ github.com/sigstore/fulcio v1.6.4 // indirect
237+ github.com/sigstore/rekor v1.3.8 // indirect
238+ github.com/sigstore/sigstore v1.8.12 // indirect
227239 github.com/skeema/knownhosts v1.2.1 // indirect
228240 github.com/sourcegraph/conc v0.3.0 // indirect
229241 github.com/spdx/tools-golang v0.5.3 // indirect
230242 github.com/spf13/afero v1.11.0 // indirect
231- github.com/spf13/cast v1.6 .0 // indirect
232- github.com/spf13/cobra v1.8.0 // indirect
243+ github.com/spf13/cast v1.7 .0 // indirect
244+ github.com/spf13/cobra v1.8.1 // indirect
233245 github.com/spf13/pflag v1.0.5 // indirect
234- github.com/spf13/viper v1.18.1 // indirect
235- github.com/stefanberger/go-pkcs11uri v0.0.0-20201008174630-78d3cae3a980 // indirect
246+ github.com/spf13/viper v1.19.0 // indirect
247+ github.com/stefanberger/go-pkcs11uri v0.0.0-20230803200340-78284954bff6 // indirect
236248 github.com/subosito/gotenv v1.6.0 // indirect
237- github.com/sylabs/sif/v2 v2.11.5 // indirect
249+ github.com/sylabs/sif/v2 v2.20.2 // indirect
238250 github.com/sylabs/squashfs v0.6.1 // indirect
239- github.com/syndtr/gocapability v0.0.0-20200815063812-42c35b437635 // indirect
240- github.com/tchap/go-patricia v2.3.0+incompatible // indirect
241251 github.com/therootcompany/xz v1.0.1 // indirect
242- github.com/theupdateframework/go-tuf v0.5.2 // indirect
243252 github.com/titanous/rocacheck v0.0.0-20171023193734-afe73141d399 // indirect
244- github.com/ulikunitz/xz v0.5.11 // indirect
245- github.com/urfave/cli v1.22.14 // indirect
246- github.com/vbatts/tar-split v0.11.3 // indirect
247- github.com/vbauerster/mpb/v7 v7.5.3 // indirect
253+ github.com/ulikunitz/xz v0.5.12 // indirect
254+ github.com/urfave/cli v1.22.16 // indirect
255+ github.com/vbatts/tar-split v0.11.7 // indirect
248256 github.com/vifraa/gopom v1.0.0 // indirect
249257 github.com/wagoodman/go-partybus v0.0.0-20230516145632-8ccac152c651 // indirect
250258 github.com/wagoodman/go-progress v0.0.0-20230925121702-07e42b3cdba0 // indirect
@@ -253,29 +261,26 @@ require (
253261 github.com/xo/terminfo v0.0.0-20210125001918-ca9a967f8778 // indirect
254262 github.com/xrash/smetrics v0.0.0-20240521201337-686a1a2994c1 // indirect
255263 gitlab.alpinelinux.org/alpine/go v0.8.0 // indirect
256- go.etcd.io/bbolt v1.3.7 // indirect
257- go.mongodb.org/mongo-driver v1.11.4 // indirect
264+ go.mongodb.org/mongo-driver v1.14.0 // indirect
258265 go.mozilla.org/pkcs7 v0.0.0-20210826202110-33d05740a352 // indirect
259266 go.opencensus.io v0.24.0 // indirect
260- go.opentelemetry.io/otel v1.21 .0 // indirect
261- go.opentelemetry.io/otel/metric v1.21 .0 // indirect
262- go.opentelemetry.io/otel/trace v1.21 .0 // indirect
267+ go.opentelemetry.io/otel v1.31 .0 // indirect
268+ go.opentelemetry.io/otel/metric v1.31 .0 // indirect
269+ go.opentelemetry.io/otel/trace v1.31 .0 // indirect
263270 go.uber.org/multierr v1.11.0 // indirect
264- golang.org/x/crypto v0.31 .0 // indirect
265- golang.org/x/exp v0.0.0-20231206192017-f3f8817b8deb // indirect
266- golang.org/x/mod v0.17 .0 // indirect
267- golang.org/x/net v0.33 .0 // indirect
271+ golang.org/x/crypto v0.32 .0 // indirect
272+ golang.org/x/exp v0.0.0-20241217172543-b2144cdd0a67 // indirect
273+ golang.org/x/mod v0.22 .0 // indirect
274+ golang.org/x/net v0.34 .0 // indirect
268275 golang.org/x/sync v0.10.0 // indirect
269276 golang.org/x/text v0.21.0 // indirect
270- golang.org/x/tools v0.21.1-0.20240508182429-e35e4ccd0d2d // indirect
271277 golang.org/x/tools/go/vcs v0.1.0-deprecated // indirect
272- golang.org/x/xerrors v0.0.0-20231012003039-104605ab7028 // indirect
273- google.golang.org/genproto v0.0.0-20231211222908-989df2bf70f3 // indirect
274- google.golang.org/genproto/googleapis/rpc v0.0.0-20231212172506-995d672761c0 // indirect
275- google.golang.org/grpc v1.60.0 // indirect
276- google.golang.org/protobuf v1.36.1 // indirect
278+ golang.org/x/xerrors v0.0.0-20240716161551-93cc26a95ae9 // indirect
279+ google.golang.org/genproto v0.0.0-20241118233622-e639e219e697 // indirect
280+ google.golang.org/genproto/googleapis/rpc v0.0.0-20250102185135-69823020774d // indirect
281+ google.golang.org/grpc v1.69.4 // indirect
282+ google.golang.org/protobuf v1.36.2 // indirect
277283 gopkg.in/ini.v1 v1.67.0 // indirect
278- gopkg.in/square/go-jose.v2 v2.6.0 // indirect
279284 gopkg.in/warnings.v0 v0.1.2 // indirect
280285 gopkg.in/yaml.v3 v3.0.1 // indirect
281286 machinerun.io/atomfs v1.2.0
@@ -285,7 +290,7 @@ require (
285290 modernc.org/sqlite v1.28.0 // indirect
286291 pault.ag/go/debian v0.15.0 // indirect
287292 pault.ag/go/topsort v0.1.1 // indirect
288- sigs.k8s.io/release-utils v0.7.7 // indirect
293+ sigs.k8s.io/release-utils v0.8.4 // indirect
289294)
290295
291296replace (
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?v=4&size=40){kind=avatar}
0 commit comments