@@ -9,15 +9,15 @@ require (
9
9
github.com/apex/log v1.9.0
10
10
github.com/apparentlymart/go-shquot v0.0.1
11
11
github.com/cheggaaa/pb/v3 v3.1.2
12
- github.com/containers/image/v5 v5.24.2
12
+ github.com/containers/image/v5 v5.29.3
13
13
github.com/dustin/go-humanize v1.0.1
14
14
github.com/justincormack/go-memfd v0.0.0-20170219213707-6e4af0518993
15
15
github.com/klauspost/pgzip v1.2.6
16
16
github.com/lxc/go-lxc v0.0.0-20230926171149-ccae595aa49e
17
17
github.com/lxc/incus v0.3.1-0.20231215145534-1719ffcbab9d
18
18
github.com/minio/sha256-simd v1.0.1
19
19
github.com/mitchellh/hashstructure v1.1.0
20
- github.com/moby/buildkit v0.11.4
20
+ github.com/moby/buildkit v0.12.5
21
21
github.com/opencontainers/go-digest v1.0.0
22
22
github.com/opencontainers/image-spec v1.1.0
23
23
github.com/opencontainers/umoci v0.4.8-0.20220412065115-12453f247749
@@ -40,15 +40,24 @@ require (
40
40
41
41
require (
42
42
github.com/Masterminds/semver/v3 v3.2.1 // indirect
43
+ github.com/containerd/cgroups/v3 v3.0.2 // indirect
44
+ github.com/containerd/log v0.1.0 // indirect
45
+ github.com/felixge/httpsnoop v1.0.3 // indirect
43
46
github.com/freddierice/go-losetup v0.0.0-20220711213114-2a14873012db // indirect
47
+ github.com/go-jose/go-jose/v3 v3.0.1 // indirect
44
48
github.com/martinjungblut/go-cryptsetup v0.0.0-20220520180014-fd0874fd07a6 // indirect
49
+ github.com/mattn/go-sqlite3 v1.14.18 // indirect
45
50
github.com/moby/sys/user v0.3.0 // indirect
51
+ github.com/tchap/go-patricia/v2 v2.3.1 // indirect
52
+ github.com/vbauerster/mpb/v8 v8.6.2 // indirect
53
+ go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.45.0 // indirect
54
+ gopkg.in/go-jose/go-jose.v2 v2.6.1 // indirect
46
55
)
47
56
48
57
require (
49
58
dario.cat/mergo v1.0.0 // indirect
50
- github.com/AdaLogics/go-fuzz-headers v0.0.0-20230106234847-43070de90fa1 // indirect
51
- github.com/AdamKorcz/go-118-fuzz-build v0.0.0-20221215162035-5330a85ea652 // indirect
59
+ github.com/AdaLogics/go-fuzz-headers v0.0.0-20230811130428-ced1acdcaa24 // indirect
60
+ github.com/AdamKorcz/go-118-fuzz-build v0.0.0-20230306123547-8075edf89bb0 // indirect
52
61
github.com/BurntSushi/toml v1.4.0 // indirect
53
62
github.com/CycloneDX/cyclonedx-go v0.7.2 // indirect
54
63
github.com/DataDog/zstd v1.4.8 // indirect
@@ -57,8 +66,8 @@ require (
57
66
github.com/Masterminds/semver v1.5.0 // indirect
58
67
github.com/Masterminds/sprig/v3 v3.2.3 // indirect
59
68
github.com/Microsoft/go-winio v0.6.1 // indirect
60
- github.com/Microsoft/hcsshim v0.10 .0-rc.7 // indirect
61
- github.com/ProtonMail/go-crypto v0.0.0-20230828082145-3c4c8a2d2371 // indirect
69
+ github.com/Microsoft/hcsshim v0.12 .0-rc.1 // indirect
70
+ github.com/ProtonMail/go-crypto v1.1.3 // indirect
62
71
github.com/VividCortex/ewma v1.2.0 // indirect
63
72
github.com/acarl005/stripansi v0.0.0-20180116102854-5a71ef0e047d // indirect
64
73
github.com/acobaugh/osrelease v0.1.0 // indirect
@@ -69,67 +78,64 @@ require (
69
78
github.com/anchore/go-macholibre v0.0.0-20220308212642-53e6d0aaf6fb // indirect
70
79
github.com/anchore/go-struct-converter v0.0.0-20221118182256-c68fdcfa2092 // indirect
71
80
github.com/anchore/packageurl-go v0.1.1-0.20230104203445-02e0a6721501 // indirect
72
- github.com/anchore/stereoscope v0.0.0-20230925132944-bf05af58eb44 // indirect
81
+ github.com/anchore/stereoscope v0.0.1 // indirect
73
82
github.com/anchore/syft v0.90.0 // indirect
74
83
github.com/andybalholm/brotli v1.0.6 // indirect
75
84
github.com/aquasecurity/go-pep440-version v0.0.0-20210121094942-22b2f8951d46 // indirect
76
85
github.com/aquasecurity/go-version v0.0.0-20210121072130-637058cfe492 // indirect
77
- github.com/asaskevich/govalidator v0.0.0-20210307081110-f21760c49a8d // indirect
86
+ github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect
78
87
github.com/becheran/wildmatch-go v1.0.0 // indirect
79
88
github.com/blang/semver/v4 v4.0.0 // indirect
80
89
github.com/bmatcuk/doublestar/v4 v4.6.0 // indirect
81
- github.com/cloudflare/circl v1.3.3 // indirect
90
+ github.com/cloudflare/circl v1.3.7 // indirect
82
91
github.com/common-nighthawk/go-figure v0.0.0-20210622060536-734e95fb86be // indirect
83
- github.com/containerd/cgroups v1.1.0 // indirect
84
- github.com/containerd/containerd v1.7.0 // indirect
85
- github.com/containerd/continuity v0.3.0 // indirect
92
+ github.com/containerd/containerd v1.7.11 // indirect
93
+ github.com/containerd/continuity v0.4.2 // indirect
86
94
github.com/containerd/fifo v1.1.0 // indirect
87
- github.com/containerd/stargz-snapshotter/estargz v0.14.3 // indirect
88
- github.com/containerd/ttrpc v1.2.1 // indirect
89
- github.com/containerd/typeurl v1.0.2 // indirect
90
- github.com/containerd/typeurl/v2 v2.1.0 // indirect
95
+ github.com/containerd/stargz-snapshotter/estargz v0.15.1 // indirect
96
+ github.com/containerd/ttrpc v1.2.2 // indirect
97
+ github.com/containerd/typeurl/v2 v2.1.1 // indirect
91
98
github.com/containers/libtrust v0.0.0-20230121012942-c1716e8a8d01 // indirect
92
- github.com/containers/ocicrypt v1.1.7 // indirect
93
- github.com/containers/storage v1.45.3 // indirect
99
+ github.com/containers/ocicrypt v1.1.9 // indirect
100
+ github.com/containers/storage v1.51.0 // indirect
94
101
github.com/cpuguy83/go-md2man/v2 v2.0.5 // indirect
95
- github.com/cyberphone/json-canonicalization v0.0.0-20220623050100-57a0ce2678a7 // indirect
102
+ github.com/cyberphone/json-canonicalization v0.0.0-20231011164504-785e29786b46 // indirect
96
103
github.com/cyphar/filepath-securejoin v0.3.5 // indirect
97
104
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
98
105
github.com/deitch/magic v0.0.0-20230404182410-1ff89d7342da // indirect
99
106
github.com/distribution/reference v0.5.0 // indirect
100
- github.com/docker/cli v24.0.0 +incompatible // indirect
107
+ github.com/docker/cli v24.0.7 +incompatible // indirect
101
108
github.com/docker/distribution v2.8.3+incompatible // indirect
102
- github.com/docker/docker v24.0.6 +incompatible // indirect
103
- github.com/docker/docker-credential-helpers v0.7 .0 // indirect
109
+ github.com/docker/docker v24.0.7 +incompatible // indirect
110
+ github.com/docker/docker-credential-helpers v0.8 .0 // indirect
104
111
github.com/docker/go-connections v0.4.0 // indirect
105
112
github.com/docker/go-events v0.0.0-20190806004212-e31b211e4f1c // indirect
106
113
github.com/docker/go-units v0.5.0 // indirect
107
114
github.com/dsnet/compress v0.0.2-0.20210315054119-f66993602bf5 // indirect
108
115
github.com/edsrzf/mmap-go v1.1.0 // indirect
109
116
github.com/emirpasic/gods v1.18.1 // indirect
110
117
github.com/facebookincubator/nvdtools v0.1.5 // indirect
111
- github.com/fatih/color v1.14.1 // indirect
118
+ github.com/fatih/color v1.15.0 // indirect
112
119
github.com/felixge/fgprof v0.9.3 // indirect
113
120
github.com/fsnotify/fsnotify v1.7.0 // indirect
114
121
github.com/gabriel-vasile/mimetype v1.4.2 // indirect
115
- github.com/ghodss/yaml v1.0.0 // indirect
116
122
github.com/github/go-spdx/v2 v2.2.0 // indirect
117
123
github.com/glebarez/go-sqlite v1.22.0 // indirect
118
124
github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect
119
- github.com/go-git/go-billy/v5 v5.5 .0 // indirect
120
- github.com/go-git/go-git/v5 v5.11 .0 // indirect
125
+ github.com/go-git/go-billy/v5 v5.6 .0 // indirect
126
+ github.com/go-git/go-git/v5 v5.13 .0 // indirect
121
127
github.com/go-logr/logr v1.3.0 // indirect
122
128
github.com/go-logr/stdr v1.2.2 // indirect
123
129
github.com/go-openapi/analysis v0.21.4 // indirect
124
- github.com/go-openapi/errors v0.20.3 // indirect
125
- github.com/go-openapi/jsonpointer v0.19.5 // indirect
126
- github.com/go-openapi/jsonreference v0.20.0 // indirect
130
+ github.com/go-openapi/errors v0.20.4 // indirect
131
+ github.com/go-openapi/jsonpointer v0.19.6 // indirect
132
+ github.com/go-openapi/jsonreference v0.20.2 // indirect
127
133
github.com/go-openapi/loads v0.21.2 // indirect
128
- github.com/go-openapi/runtime v0.24.1 // indirect
129
- github.com/go-openapi/spec v0.20.7 // indirect
130
- github.com/go-openapi/strfmt v0.21.3 // indirect
131
- github.com/go-openapi/swag v0.22.3 // indirect
132
- github.com/go-openapi/validate v0.22.0 // indirect
134
+ github.com/go-openapi/runtime v0.26.0 // indirect
135
+ github.com/go-openapi/spec v0.20.9 // indirect
136
+ github.com/go-openapi/strfmt v0.21.7 // indirect
137
+ github.com/go-openapi/swag v0.22.4 // indirect
138
+ github.com/go-openapi/validate v0.22.1 // indirect
133
139
github.com/go-restruct/restruct v1.2.0-alpha // indirect
134
140
github.com/gogo/protobuf v1.3.2 // indirect
135
141
github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
@@ -164,7 +170,7 @@ require (
164
170
github.com/klauspost/compress v1.17.4 // indirect
165
171
github.com/klauspost/cpuid/v2 v2.2.6 // indirect
166
172
github.com/knqyf263/go-rpmdb v0.0.0-20230723082926-067d98befa60 // indirect
167
- github.com/letsencrypt/boulder v0.0.0-20221109233200-85aa52084eaf // indirect
173
+ github.com/letsencrypt/boulder v0.0.0-20230213213521-fdfea0d469b6 // indirect
168
174
github.com/magiconair/properties v1.8.7 // indirect
169
175
github.com/mailru/easyjson v0.7.7 // indirect
170
176
github.com/martencassel/go-apkutils v0.2.9 // indirect
@@ -176,7 +182,7 @@ require (
176
182
github.com/mholt/archiver/v3 v3.5.1 // indirect
177
183
github.com/microsoft/go-rustaudit v0.0.0-20220730194248-4b17361d90a5 // indirect
178
184
github.com/miekg/pkcs11 v1.1.1 // indirect
179
- github.com/mistifyio/go-zfs/v3 v3.0.0 // indirect
185
+ github.com/mistifyio/go-zfs/v3 v3.0.1 // indirect
180
186
github.com/mitchellh/copystructure v1.2.0 // indirect
181
187
github.com/mitchellh/go-homedir v1.1.0 // indirect
182
188
github.com/mitchellh/hashstructure/v2 v2.0.2 // indirect
@@ -204,7 +210,6 @@ require (
204
210
github.com/pkg/profile v1.7.0 // indirect
205
211
github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
206
212
github.com/proglottis/gpgme v0.1.3 // indirect
207
- github.com/prometheus/common v0.39.0 // indirect
208
213
github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec // indirect
209
214
github.com/rivo/uniseg v0.4.4 // indirect
210
215
github.com/rootless-containers/proto/go-proto v0.0.0-20230421021042-4cd87ebadd67 // indirect
@@ -216,14 +221,14 @@ require (
216
221
github.com/saintfish/chardet v0.0.0-20230101081208-5e3ef4b5456d // indirect
217
222
github.com/sassoftware/go-rpmutils v0.2.0 // indirect
218
223
github.com/scylladb/go-set v1.0.3-0.20200225121959-cc7b2070d91e // indirect
219
- github.com/secure-systems-lab/go-securesystemslib v0.6 .0 // indirect
220
- github.com/sergi/go-diff v1.3.1 // indirect
224
+ github.com/secure-systems-lab/go-securesystemslib v0.7 .0 // indirect
225
+ github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 // indirect
221
226
github.com/shibumi/go-pathspec v1.3.0 // indirect
222
227
github.com/shopspring/decimal v1.2.0 // indirect
223
- github.com/sigstore/fulcio v1.0.0 // indirect
224
- github.com/sigstore/rekor v1.0.1 // indirect
225
- github.com/sigstore/sigstore v1.6 .5 // indirect
226
- github.com/skeema/knownhosts v1.2.1 // indirect
228
+ github.com/sigstore/fulcio v1.4.3 // indirect
229
+ github.com/sigstore/rekor v1.2.2 // indirect
230
+ github.com/sigstore/sigstore v1.7 .5 // indirect
231
+ github.com/skeema/knownhosts v1.3.0 // indirect
227
232
github.com/smartystreets/assertions v1.2.0 // indirect
228
233
github.com/sourcegraph/conc v0.3.0 // indirect
229
234
github.com/spdx/tools-golang v0.5.3 // indirect
@@ -234,17 +239,14 @@ require (
234
239
github.com/spf13/viper v1.18.1 // indirect
235
240
github.com/stefanberger/go-pkcs11uri v0.0.0-20201008174630-78d3cae3a980 // indirect
236
241
github.com/subosito/gotenv v1.6.0 // indirect
237
- github.com/sylabs/sif/v2 v2.11.5 // indirect
242
+ github.com/sylabs/sif/v2 v2.15.0 // indirect
238
243
github.com/sylabs/squashfs v0.6.1 // indirect
239
244
github.com/syndtr/gocapability v0.0.0-20200815063812-42c35b437635 // indirect
240
- github.com/tchap/go-patricia v2.3.0+incompatible // indirect
241
245
github.com/therootcompany/xz v1.0.1 // indirect
242
- github.com/theupdateframework/go-tuf v0.5.2 // indirect
243
246
github.com/titanous/rocacheck v0.0.0-20171023193734-afe73141d399 // indirect
244
247
github.com/ulikunitz/xz v0.5.11 // indirect
245
248
github.com/urfave/cli v1.22.14 // indirect
246
- github.com/vbatts/tar-split v0.11.3 // indirect
247
- github.com/vbauerster/mpb/v7 v7.5.3 // indirect
249
+ github.com/vbatts/tar-split v0.11.5 // indirect
248
250
github.com/vifraa/gopom v1.0.0 // indirect
249
251
github.com/wagoodman/go-partybus v0.0.0-20230516145632-8ccac152c651 // indirect
250
252
github.com/wagoodman/go-progress v0.0.0-20230925121702-07e42b3cdba0 // indirect
@@ -253,7 +255,6 @@ require (
253
255
github.com/xo/terminfo v0.0.0-20210125001918-ca9a967f8778 // indirect
254
256
github.com/xrash/smetrics v0.0.0-20240521201337-686a1a2994c1 // indirect
255
257
gitlab.alpinelinux.org/alpine/go v0.8.0 // indirect
256
- go.etcd.io/bbolt v1.3.7 // indirect
257
258
go.mongodb.org/mongo-driver v1.11.4 // indirect
258
259
go.mozilla.org/pkcs7 v0.0.0-20210826202110-33d05740a352 // indirect
259
260
go.opencensus.io v0.24.0 // indirect
@@ -262,20 +263,19 @@ require (
262
263
go.opentelemetry.io/otel/trace v1.21.0 // indirect
263
264
go.uber.org/multierr v1.11.0 // indirect
264
265
golang.org/x/crypto v0.31.0 // indirect
265
- golang.org/x/exp v0.0.0-20231206192017-f3f8817b8deb // indirect
266
- golang.org/x/mod v0.17 .0 // indirect
266
+ golang.org/x/exp v0.0.0-20240719175910-8a7402abbf56 // indirect
267
+ golang.org/x/mod v0.19 .0 // indirect
267
268
golang.org/x/net v0.33.0 // indirect
268
269
golang.org/x/sync v0.10.0 // indirect
269
270
golang.org/x/text v0.21.0 // indirect
270
- golang.org/x/tools v0.21.1-0.20240508182429-e35e4ccd0d2d // indirect
271
+ golang.org/x/tools v0.23.0 // indirect
271
272
golang.org/x/tools/go/vcs v0.1.0-deprecated // indirect
272
273
golang.org/x/xerrors v0.0.0-20231012003039-104605ab7028 // indirect
273
274
google.golang.org/genproto v0.0.0-20231211222908-989df2bf70f3 // indirect
274
275
google.golang.org/genproto/googleapis/rpc v0.0.0-20231212172506-995d672761c0 // indirect
275
276
google.golang.org/grpc v1.60.0 // indirect
276
277
google.golang.org/protobuf v1.36.1 // indirect
277
278
gopkg.in/ini.v1 v1.67.0 // indirect
278
- gopkg.in/square/go-jose.v2 v2.6.0 // indirect
279
279
gopkg.in/warnings.v0 v0.1.2 // indirect
280
280
gopkg.in/yaml.v3 v3.0.1 // indirect
281
281
machinerun.io/atomfs v1.2.0
0 commit comments