Skip to content

Commit ad55c48

Browse files
github-actions[bot]github-actions[bot]
authored
Merge pull request #3082 from conforma/renovate/main-go-github.com-sigstore-rekor-vulnerability
Update module github.com/sigstore/rekor to v1.5.0 [SECURITY] (main)
2 parents 76a7f29 + 5b73644 commit ad55c48

4 files changed

Lines changed: 81 additions & 23 deletions

File tree

‎acceptance/go.mod‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ require (
2323
github.com/pkg/errors v0.9.1
2424
github.com/secure-systems-lab/go-securesystemslib v0.9.1
2525
github.com/sigstore/cosign/v3 v3.0.4
26-
github.com/sigstore/rekor v1.4.3
26+
github.com/sigstore/rekor v1.5.0
2727
github.com/sigstore/sigstore v1.10.4
2828
github.com/stretchr/testify v1.11.1
2929
github.com/tektoncd/cli v0.37.1
@@ -98,7 +98,7 @@ require (
9898
github.com/fxamacker/cbor/v2 v2.9.0 // indirect
9999
github.com/gkampitakis/ciinfo v0.3.0 // indirect
100100
github.com/gkampitakis/go-diff v1.3.2 // indirect
101-
github.com/go-chi/chi/v5 v5.2.3 // indirect
101+
github.com/go-chi/chi/v5 v5.2.4 // indirect
102102
github.com/go-errors/errors v1.5.1 // indirect
103103
github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect
104104
github.com/go-jose/go-jose/v4 v4.1.3 // indirect
@@ -108,12 +108,12 @@ require (
108108
github.com/go-logr/stdr v1.2.2 // indirect
109109
github.com/go-ole/go-ole v1.3.0 // indirect
110110
github.com/go-openapi/analysis v0.24.1 // indirect
111-
github.com/go-openapi/errors v0.22.5 // indirect
111+
github.com/go-openapi/errors v0.22.6 // indirect
112112
github.com/go-openapi/jsonpointer v0.22.4 // indirect
113113
github.com/go-openapi/jsonreference v0.21.4 // indirect
114114
github.com/go-openapi/loads v0.23.2 // indirect
115115
github.com/go-openapi/runtime v0.29.2 // indirect
116-
github.com/go-openapi/spec v0.22.2 // indirect
116+
github.com/go-openapi/spec v0.22.3 // indirect
117117
github.com/go-openapi/swag v0.25.4 // indirect
118118
github.com/go-openapi/swag/cmdutils v0.25.4 // indirect
119119
github.com/go-openapi/swag/conv v0.25.4 // indirect
@@ -247,10 +247,10 @@ require (
247247
golang.org/x/text v0.32.0 // indirect
248248
golang.org/x/time v0.14.0 // indirect
249249
gomodules.xyz/jsonpatch/v2 v2.4.0 // indirect
250-
google.golang.org/api v0.258.0 // indirect
250+
google.golang.org/api v0.260.0 // indirect
251251
google.golang.org/genproto/googleapis/api v0.0.0-20251202230838-ff82c1b0f217 // indirect
252-
google.golang.org/genproto/googleapis/rpc v0.0.0-20251213004720-97cd9d5aeac2 // indirect
253-
google.golang.org/grpc v1.77.0 // indirect
252+
google.golang.org/genproto/googleapis/rpc v0.0.0-20251222181119-0a764e51fe1b // indirect
253+
google.golang.org/grpc v1.78.0 // indirect
254254
google.golang.org/protobuf v1.36.11 // indirect
255255
gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect
256256
gopkg.in/inf.v0 v0.9.1 // indirect

‎acceptance/go.sum‎

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -278,6 +278,8 @@ github.com/gliderlabs/ssh v0.3.8 h1:a4YXD1V7xMF9g5nTkdfnja3Sxy1PVDCj1Zg4Wb8vY6c=
278278
github.com/gliderlabs/ssh v0.3.8/go.mod h1:xYoytBv1sV0aL3CavoDuJIQNURXkkfPA/wxQ1pL1fAU=
279279
github.com/go-chi/chi/v5 v5.2.3 h1:WQIt9uxdsAbgIYgid+BpYc+liqQZGMHRaUwp0JUcvdE=
280280
github.com/go-chi/chi/v5 v5.2.3/go.mod h1:L2yAIGWB3H+phAw1NxKwWM+7eUH/lU8pOMm5hHcoops=
281+
github.com/go-chi/chi/v5 v5.2.4 h1:WtFKPHwlywe8Srng8j2BhOD9312j9cGUxG1SP4V2cR4=
282+
github.com/go-chi/chi/v5 v5.2.4/go.mod h1:X7Gx4mteadT3eDOMTsXzmI4/rwUpOwBHLpAfupzFJP0=
281283
github.com/go-errors/errors v1.5.1 h1:ZwEMSLRCapFLflTpT7NKaAc7ukJ8ZPEjzlxt8rPN8bk=
282284
github.com/go-errors/errors v1.5.1/go.mod h1:sIVyrIiJhuEF+Pj9Ebtd6P/rEYROXFi3BopGUQ5a5Og=
283285
github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 h1:+zs/tPmkDkHx3U66DAb0lQFJrpS6731Oaa12ikc+DiI=
@@ -317,6 +319,8 @@ github.com/go-openapi/analysis v0.24.1 h1:Xp+7Yn/KOnVWYG8d+hPksOYnCYImE3TieBa7rB
317319
github.com/go-openapi/analysis v0.24.1/go.mod h1:dU+qxX7QGU1rl7IYhBC8bIfmWQdX4Buoea4TGtxXY84=
318320
github.com/go-openapi/errors v0.22.5 h1:Yfv4O/PRYpNF3BNmVkEizcHb3uLVVsrDt3LNdgAKRY4=
319321
github.com/go-openapi/errors v0.22.5/go.mod h1:z9S8ASTUqx7+CP1Q8dD8ewGH/1JWFFLX/2PmAYNQLgk=
322+
github.com/go-openapi/errors v0.22.6 h1:eDxcf89O8odEnohIXwEjY1IB4ph5vmbUsBMsFNwXWPo=
323+
github.com/go-openapi/errors v0.22.6/go.mod h1:z9S8ASTUqx7+CP1Q8dD8ewGH/1JWFFLX/2PmAYNQLgk=
320324
github.com/go-openapi/jsonpointer v0.22.4 h1:dZtK82WlNpVLDW2jlA1YCiVJFVqkED1MegOUy9kR5T4=
321325
github.com/go-openapi/jsonpointer v0.22.4/go.mod h1:elX9+UgznpFhgBuaMQ7iu4lvvX1nvNsesQ3oxmYTw80=
322326
github.com/go-openapi/jsonreference v0.21.4 h1:24qaE2y9bx/q3uRK/qN+TDwbok1NhbSmGjjySRCHtC8=
@@ -327,6 +331,8 @@ github.com/go-openapi/runtime v0.29.2 h1:UmwSGWNmWQqKm1c2MGgXVpC2FTGwPDQeUsBMufc
327331
github.com/go-openapi/runtime v0.29.2/go.mod h1:biq5kJXRJKBJxTDJXAa00DOTa/anflQPhT0/wmjuy+0=
328332
github.com/go-openapi/spec v0.22.2 h1:KEU4Fb+Lp1qg0V4MxrSCPv403ZjBl8Lx1a83gIPU8Qc=
329333
github.com/go-openapi/spec v0.22.2/go.mod h1:iIImLODL2loCh3Vnox8TY2YWYJZjMAKYyLH2Mu8lOZs=
334+
github.com/go-openapi/spec v0.22.3 h1:qRSmj6Smz2rEBxMnLRBMeBWxbbOvuOoElvSvObIgwQc=
335+
github.com/go-openapi/spec v0.22.3/go.mod h1:iIImLODL2loCh3Vnox8TY2YWYJZjMAKYyLH2Mu8lOZs=
330336
github.com/go-openapi/strfmt v0.25.0 h1:7R0RX7mbKLa9EYCTHRcCuIPcaqlyQiWNPTXwClK0saQ=
331337
github.com/go-openapi/strfmt v0.25.0/go.mod h1:nNXct7OzbwrMY9+5tLX4I21pzcmE6ccMGXl3jFdPfn8=
332338
github.com/go-openapi/swag v0.25.4 h1:OyUPUFYDPDBMkqyxOTkqDYFnrhuhi9NR6QVUvIochMU=
@@ -769,6 +775,8 @@ github.com/sigstore/protobuf-specs v0.5.0 h1:F8YTI65xOHw70NrvPwJ5PhAzsvTnuJMGLkA
769775
github.com/sigstore/protobuf-specs v0.5.0/go.mod h1:+gXR+38nIa2oEupqDdzg4qSBT0Os+sP7oYv6alWewWc=
770776
github.com/sigstore/rekor v1.4.3 h1:2+aw4Gbgumv8vYM/QVg6b+hvr4x4Cukur8stJrVPKU0=
771777
github.com/sigstore/rekor v1.4.3/go.mod h1:o0zgY087Q21YwohVvGwV9vK1/tliat5mfnPiVI3i75o=
778+
github.com/sigstore/rekor v1.5.0 h1:rL7SghHd5HLCtsCrxw0yQg+NczGvM75EjSPPWuGjaiQ=
779+
github.com/sigstore/rekor v1.5.0/go.mod h1:D7JoVCUkxwQOpPDNYeu+CE8zeBC18Y5uDo6tF8s2rcQ=
772780
github.com/sigstore/rekor-tiles/v2 v2.0.1 h1:1Wfz15oSRNGF5Dzb0lWn5W8+lfO50ork4PGIfEKjZeo=
773781
github.com/sigstore/rekor-tiles/v2 v2.0.1/go.mod h1:Pjsbhzj5hc3MKY8FfVTYHBUHQEnP0ozC4huatu4x7OU=
774782
github.com/sigstore/sigstore v1.10.3 h1:s7fBYYOzW/2Vd0nND2ZdpWySb5vRF2u9eix/NZMHJm0=
@@ -1208,6 +1216,8 @@ google.golang.org/api v0.29.0/go.mod h1:Lcubydp8VUV7KeIHD9z2Bys/sm/vGKnG1UHuDBSr
12081216
google.golang.org/api v0.30.0/go.mod h1:QGmEvQ87FHZNiUVJkT14jQNYJ4ZJjdRF23ZXz5138Fc=
12091217
google.golang.org/api v0.258.0 h1:IKo1j5FBlN74fe5isA2PVozN3Y5pwNKriEgAXPOkDAc=
12101218
google.golang.org/api v0.258.0/go.mod h1:qhOMTQEZ6lUps63ZNq9jhODswwjkjYYguA7fA3TBFww=
1219+
google.golang.org/api v0.260.0 h1:XbNi5E6bOVEj/uLXQRlt6TKuEzMD7zvW/6tNwltE4P4=
1220+
google.golang.org/api v0.260.0/go.mod h1:Shj1j0Phr/9sloYrKomICzdYgsSDImpTxME8rGLaZ/o=
12111221
google.golang.org/appengine v1.1.0/go.mod h1:EbEs0AVv82hx2wNQdGPgUI5lhzA/G0D9YwlJXL52JkM=
12121222
google.golang.org/appengine v1.4.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4=
12131223
google.golang.org/appengine v1.5.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4=
@@ -1251,6 +1261,8 @@ google.golang.org/genproto/googleapis/api v0.0.0-20251202230838-ff82c1b0f217 h1:
12511261
google.golang.org/genproto/googleapis/api v0.0.0-20251202230838-ff82c1b0f217/go.mod h1:+rXWjjaukWZun3mLfjmVnQi18E1AsFbDN9QdJ5YXLto=
12521262
google.golang.org/genproto/googleapis/rpc v0.0.0-20251213004720-97cd9d5aeac2 h1:2I6GHUeJ/4shcDpoUlLs/2WPnhg7yJwvXtqcMJt9liA=
12531263
google.golang.org/genproto/googleapis/rpc v0.0.0-20251213004720-97cd9d5aeac2/go.mod h1:7i2o+ce6H/6BluujYR+kqX3GKH+dChPTQU19wjRPiGk=
1264+
google.golang.org/genproto/googleapis/rpc v0.0.0-20251222181119-0a764e51fe1b h1:Mv8VFug0MP9e5vUxfBcE3vUkV6CImK3cMNMIDFjmzxU=
1265+
google.golang.org/genproto/googleapis/rpc v0.0.0-20251222181119-0a764e51fe1b/go.mod h1:j9x/tPzZkyxcgEFkiKEEGxfvyumM01BEtsW8xzOahRQ=
12541266
google.golang.org/grpc v1.19.0/go.mod h1:mqu4LbDTu4XGKhr4mRzUsmM4RtVoemTSY81AxZiDr8c=
12551267
google.golang.org/grpc v1.20.1/go.mod h1:10oTOabMzJvdu6/UiuZezV6QK5dSlG84ov/aaiqXj38=
12561268
google.golang.org/grpc v1.21.1/go.mod h1:oYelfM1adQP15Ek0mdvEgi9Df8B9CZIaU1084ijfRaM=
@@ -1266,6 +1278,8 @@ google.golang.org/grpc v1.31.0/go.mod h1:N36X2cJ7JwdamYAgDz+s+rVMFjt3numwzf/HckM
12661278
google.golang.org/grpc v1.33.2/go.mod h1:JMHMWHQWaTccqQQlmk3MJZS+GWXOdAesneDmEnv2fbc=
12671279
google.golang.org/grpc v1.77.0 h1:wVVY6/8cGA6vvffn+wWK5ToddbgdU3d8MNENr4evgXM=
12681280
google.golang.org/grpc v1.77.0/go.mod h1:z0BY1iVj0q8E1uSQCjL9cppRj+gnZjzDnzV0dHhrNig=
1281+
google.golang.org/grpc v1.78.0 h1:K1XZG/yGDJnzMdd/uZHAkVqJE+xIDOcmdSFZkBUicNc=
1282+
google.golang.org/grpc v1.78.0/go.mod h1:I47qjTo4OKbMkjA/aOOwxDIiPSBofUtQUI5EfpWvW7U=
12691283
google.golang.org/protobuf v0.0.0-20200109180630-ec00e32a8dfd/go.mod h1:DFci5gLYBciE7Vtevhsrf46CRTquxDuWsQurQQe4oz8=
12701284
google.golang.org/protobuf v0.0.0-20200221191635-4d8936d0db64/go.mod h1:kwYJMbMJ01Woi6D6+Kah6886xMZcty6N08ah7+eCXa0=
12711285
google.golang.org/protobuf v0.0.0-20200228230310-ab0ca4ff8a60/go.mod h1:cfTl7dwQJ+fmap5saPgwCLgHXTUD7jkjRqWcaiX5VyM=

‎go.mod‎

Lines changed: 20 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -32,9 +32,9 @@ require (
3232
github.com/santhosh-tekuri/jsonschema/v5 v5.3.1
3333
github.com/secure-systems-lab/go-securesystemslib v0.10.0
3434
github.com/sigstore/cosign/v3 v3.0.4
35-
github.com/sigstore/rekor v1.4.3
35+
github.com/sigstore/rekor v1.5.0
3636
github.com/sigstore/sigstore v1.10.4
37-
github.com/sirupsen/logrus v1.9.4-0.20230606125235-dd1b4c2e81af
37+
github.com/sirupsen/logrus v1.9.4
3838
github.com/smarty/cproxy/v2 v2.1.1
3939
github.com/spdx/tools-golang v0.5.5
4040
github.com/spf13/afero v1.15.0
@@ -73,11 +73,11 @@ require (
7373
require (
7474
cel.dev/expr v0.25.1 // indirect
7575
cloud.google.com/go v0.121.6 // indirect
76-
cloud.google.com/go/auth v0.17.0 // indirect
76+
cloud.google.com/go/auth v0.18.0 // indirect
7777
cloud.google.com/go/auth/oauth2adapt v0.2.8 // indirect
7878
cloud.google.com/go/compute/metadata v0.9.0 // indirect
7979
cloud.google.com/go/iam v1.5.3 // indirect
80-
cloud.google.com/go/monitoring v1.24.2 // indirect
80+
cloud.google.com/go/monitoring v1.24.3 // indirect
8181
cloud.google.com/go/storage v1.57.1 // indirect
8282
contrib.go.opencensus.io/exporter/ocagent v0.7.1-0.20200907061046-05415f1de66d // indirect
8383
contrib.go.opencensus.io/exporter/prometheus v0.4.2 // indirect
@@ -155,6 +155,9 @@ require (
155155
github.com/chainguard-dev/git-urls v1.0.2 // indirect
156156
github.com/chrismellard/docker-credential-acr-env v0.0.0-20230304212654-82a0ddb27589 // indirect
157157
github.com/clbanning/mxj/v2 v2.7.0 // indirect
158+
github.com/clipperhouse/displaywidth v0.6.0 // indirect
159+
github.com/clipperhouse/stringish v0.1.1 // indirect
160+
github.com/clipperhouse/uax29/v2 v2.3.0 // indirect
158161
github.com/cloudflare/circl v1.6.1 // indirect
159162
github.com/cncf/xds/go v0.0.0-20251022180443-0feb69152e9f // indirect
160163
github.com/cockroachdb/apd/v3 v3.2.1 // indirect
@@ -198,7 +201,7 @@ require (
198201
github.com/gkampitakis/ciinfo v0.3.0 // indirect
199202
github.com/gkampitakis/go-diff v1.3.2 // indirect
200203
github.com/go-akka/configuration v0.0.0-20200606091224-a002c0330665 // indirect
201-
github.com/go-chi/chi/v5 v5.2.3 // indirect
204+
github.com/go-chi/chi/v5 v5.2.4 // indirect
202205
github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect
203206
github.com/go-git/go-billy/v5 v5.6.2 // indirect
204207
github.com/go-ini/ini v1.67.0 // indirect
@@ -208,11 +211,11 @@ require (
208211
github.com/go-logr/stdr v1.2.2 // indirect
209212
github.com/go-ole/go-ole v1.2.6 // indirect
210213
github.com/go-openapi/analysis v0.24.1 // indirect
211-
github.com/go-openapi/errors v0.22.5 // indirect
214+
github.com/go-openapi/errors v0.22.6 // indirect
212215
github.com/go-openapi/jsonpointer v0.22.4 // indirect
213216
github.com/go-openapi/jsonreference v0.21.4 // indirect
214217
github.com/go-openapi/loads v0.23.2 // indirect
215-
github.com/go-openapi/spec v0.22.2 // indirect
218+
github.com/go-openapi/spec v0.22.3 // indirect
216219
github.com/go-openapi/swag v0.25.4 // indirect
217220
github.com/go-openapi/swag/cmdutils v0.25.4 // indirect
218221
github.com/go-openapi/swag/conv v0.25.4 // indirect
@@ -243,8 +246,8 @@ require (
243246
github.com/google/go-querystring v1.2.0 // indirect
244247
github.com/google/s2a-go v0.1.9 // indirect
245248
github.com/google/uuid v1.6.0 // indirect
246-
github.com/googleapis/enterprise-certificate-proxy v0.3.7 // indirect
247-
github.com/googleapis/gax-go/v2 v2.15.0 // indirect
249+
github.com/googleapis/enterprise-certificate-proxy v0.3.9 // indirect
250+
github.com/googleapis/gax-go/v2 v2.16.0 // indirect
248251
github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3 // indirect
249252
github.com/hashicorp/aws-sdk-go-base/v2 v2.0.0-beta.65 // indirect
250253
github.com/hashicorp/errwrap v1.1.0 // indirect
@@ -283,7 +286,7 @@ require (
283286
github.com/magiconair/properties v1.8.10 // indirect
284287
github.com/maruel/natural v1.1.1 // indirect
285288
github.com/mattn/go-colorable v0.1.14 // indirect
286-
github.com/mattn/go-runewidth v0.0.16 // indirect
289+
github.com/mattn/go-runewidth v0.0.19 // indirect
287290
github.com/miekg/pkcs11 v1.1.1 // indirect
288291
github.com/mitchellh/go-homedir v1.1.0 // indirect
289292
github.com/moby/buildkit v0.26.3 // indirect
@@ -303,9 +306,10 @@ require (
303306
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
304307
github.com/nozzle/throttler v0.0.0-20180817012639-2ea982251481 // indirect
305308
github.com/oklog/ulid v1.3.1 // indirect
309+
github.com/olekukonko/cat v0.0.0-20250911104152-50322a0618f6 // indirect
306310
github.com/olekukonko/errors v1.1.0 // indirect
307-
github.com/olekukonko/ll v0.0.9 // indirect
308-
github.com/olekukonko/tablewriter v1.1.0 // indirect
311+
github.com/olekukonko/ll v0.1.3 // indirect
312+
github.com/olekukonko/tablewriter v1.1.2 // indirect
309313
github.com/opencontainers/go-digest v1.0.0 // indirect
310314
github.com/opencontainers/image-spec v1.1.1 // indirect
311315
github.com/owenrumney/go-sarif/v2 v2.3.3 // indirect
@@ -403,15 +407,15 @@ require (
403407
golang.org/x/time v0.14.0 // indirect
404408
golang.org/x/tools v0.40.0 // indirect
405409
gomodules.xyz/jsonpatch/v2 v2.4.0 // indirect
406-
google.golang.org/api v0.258.0 // indirect
407-
google.golang.org/genproto v0.0.0-20250922171735-9219d122eba9 // indirect
410+
google.golang.org/api v0.260.0 // indirect
411+
google.golang.org/genproto v0.0.0-20251202230838-ff82c1b0f217 // indirect
408412
google.golang.org/genproto/googleapis/api v0.0.0-20251202230838-ff82c1b0f217 // indirect
409413
google.golang.org/genproto/googleapis/rpc v0.0.0-20260203192932-546029d2fa20 // indirect
410414
google.golang.org/grpc v1.78.0 // indirect
411415
google.golang.org/protobuf v1.36.11 // indirect
412416
gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect
413417
gopkg.in/inf.v0 v0.9.1 // indirect
414-
gopkg.in/ini.v1 v1.67.0 // indirect
418+
gopkg.in/ini.v1 v1.67.1 // indirect
415419
gopkg.in/warnings.v0 v0.1.2 // indirect
416420
gopkg.in/yaml.v2 v2.4.0 // indirect
417421
k8s.io/utils v0.0.0-20251002143259-bc988d571ff4 // indirect
@@ -420,6 +424,6 @@ require (
420424
sigs.k8s.io/controller-runtime v0.19.0 // indirect
421425
sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 // indirect
422426
sigs.k8s.io/randfill v1.0.0 // indirect
423-
sigs.k8s.io/release-utils v0.12.2 // indirect
427+
sigs.k8s.io/release-utils v0.12.3 // indirect
424428
sigs.k8s.io/structured-merge-diff/v6 v6.3.0 // indirect
425429
)

0 commit comments

Comments
 (0)