11module github.com/conforma/cli
22
3- go 1.25.8
3+ go 1.26
44
55require (
66 cuelang.org/go v0.16.0
@@ -16,7 +16,7 @@ require (
1616 github.com/go-logr/logr v1.4.3
1717 github.com/go-openapi/strfmt v0.26.1
1818 github.com/google/go-cmp v0.7.0
19- github.com/google/go-containerregistry v0.21.5
19+ github.com/google/go-containerregistry v0.21.6
2020 github.com/google/safearchive v0.0.0-20241025131057-f7ce9d7b6f9c
2121 github.com/hako/durafmt v0.0.0-20210608085754-5c1018a4e16b
2222 github.com/in-toto/in-toto-golang v0.10.0
@@ -33,7 +33,7 @@ require (
3333 github.com/secure-systems-lab/go-securesystemslib v0.10.0
3434 github.com/sigstore/cosign/v3 v3.0.4
3535 github.com/sigstore/rekor v1.5.0
36- github.com/sigstore/sigstore v1.10.5
36+ github.com/sigstore/sigstore v1.10.6
3737 github.com/sirupsen/logrus v1.9.4
3838 github.com/smarty/cproxy/v2 v2.1.1
3939 github.com/spdx/tools-golang v0.5.7
@@ -43,16 +43,16 @@ require (
4343 github.com/spf13/viper v1.21.0
4444 github.com/stretchr/testify v1.11.1
4545 github.com/stuart-warren/yamlfmt v0.2.0
46- github.com/tektoncd/pipeline v1.12.0
46+ github.com/tektoncd/pipeline v1.13.1
4747 github.com/testcontainers/testcontainers-go v0.34.1-0.20241204123437-72be13940122 // using unreleased version that contains the fix in https://github.com/testcontainers/testcontainers-go/pull/2899
4848 github.com/testcontainers/testcontainers-go/modules/registry v0.34.0
4949 golang.org/x/benchmarks v0.0.0-20241115175113-a2b48b605b42
5050 golang.org/x/exp v0.0.0-20260410095643-746e56fc9e2f
51- golang.org/x/net v0.53 .0 // indirect
51+ golang.org/x/net v0.54 .0 // indirect
5252 golang.org/x/sync v0.20.0
53- k8s.io/apiextensions-apiserver v0.35.4
54- k8s.io/apimachinery v0.35.4
55- k8s.io/client-go v0.35.4
53+ k8s.io/apiextensions-apiserver v0.35.5
54+ k8s.io/apimachinery v0.35.5
55+ k8s.io/client-go v0.35.5
5656 k8s.io/klog/v2 v2.130.1
5757 k8s.io/kube-openapi v0.0.0-20250910181357-589584f1c912
5858 oras.land/oras-go/v2 v2.6.0
@@ -65,9 +65,9 @@ replace github.com/google/go-containerregistry => github.com/conforma/go-contain
6565require (
6666 github.com/go-openapi/runtime v0.29.2
6767 github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2
68- golang.org/x/text v0.36 .0
68+ golang.org/x/text v0.37 .0
6969 gopkg.in/yaml.v3 v3.0.1
70- k8s.io/api v0.35.4
70+ k8s.io/api v0.35.5
7171)
7272
7373require (
@@ -155,7 +155,7 @@ require (
155155 github.com/clipperhouse/stringish v0.1.1 // indirect
156156 github.com/clipperhouse/uax29/v2 v2.3.0 // indirect
157157 github.com/cloudflare/circl v1.6.3 // indirect
158- github.com/cncf/xds/go v0.0.0-20251210132809-ee656c7534f5 // indirect
158+ github.com/cncf/xds/go v0.0.0-20260202195803-dba9d589def2 // indirect
159159 github.com/cockroachdb/apd/v3 v3.2.1 // indirect
160160 github.com/common-nighthawk/go-figure v0.0.0-20210622060536-734e95fb86be // indirect
161161 github.com/containerd/containerd/v2 v2.2.2 // indirect
@@ -178,7 +178,7 @@ require (
178178 github.com/digitorus/timestamp v0.0.0-20231217203849-220c5c2851b7 // indirect
179179 github.com/dimchansky/utfbom v1.1.1 // indirect
180180 github.com/distribution/reference v0.6.0 // indirect
181- github.com/docker/cli v29.4.0 +incompatible // indirect
181+ github.com/docker/cli v29.4.3 +incompatible // indirect
182182 github.com/docker/distribution v2.8.3+incompatible // indirect
183183 github.com/docker/docker-credential-helpers v0.9.5 // indirect
184184 github.com/docker/go-connections v0.5.0 // indirect
@@ -187,8 +187,8 @@ require (
187187 github.com/emicklei/go-restful/v3 v3.13.0 // indirect
188188 github.com/emicklei/proto v1.14.3 // indirect
189189 github.com/emirpasic/gods v1.18.1 // indirect
190- github.com/envoyproxy/go-control-plane/envoy v1.36 .0 // indirect
191- github.com/envoyproxy/protoc-gen-validate v1.3.0 // indirect
190+ github.com/envoyproxy/go-control-plane/envoy v1.37 .0 // indirect
191+ github.com/envoyproxy/protoc-gen-validate v1.3.3 // indirect
192192 github.com/evanphx/json-patch/v5 v5.9.11 // indirect
193193 github.com/fatih/color v1.18.0 // indirect
194194 github.com/felixge/httpsnoop v1.0.4 // indirect
@@ -230,7 +230,7 @@ require (
230230 github.com/golang-jwt/jwt/v4 v4.5.2 // indirect
231231 github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 // indirect
232232 github.com/golang/snappy v0.0.4 // indirect
233- github.com/google/cel-go v0.28.0 // indirect
233+ github.com/google/cel-go v0.28.1 // indirect
234234 github.com/google/certificate-transparency-go v1.3.2 // indirect
235235 github.com/google/flatbuffers v25.2.10+incompatible // indirect
236236 github.com/google/gnostic-models v0.7.0 // indirect
@@ -260,7 +260,7 @@ require (
260260 github.com/json-iterator/go v1.1.12 // indirect
261261 github.com/jstemmer/go-junit-report v1.0.0 // indirect
262262 github.com/kevinburke/ssh_config v1.2.0 // indirect
263- github.com/klauspost/compress v1.18.5 // indirect
263+ github.com/klauspost/compress v1.18.6 // indirect
264264 github.com/klauspost/cpuid/v2 v2.3.0 // indirect
265265 github.com/kr/pretty v0.3.1 // indirect
266266 github.com/kr/text v0.2.0 // indirect
@@ -370,40 +370,40 @@ require (
370370 github.com/zclconf/go-cty v1.16.2 // indirect
371371 gitlab.com/gitlab-org/api/client-go v1.11.0 // indirect
372372 go.opentelemetry.io/auto/sdk v1.2.1 // indirect
373- go.opentelemetry.io/contrib/detectors/gcp v1.39 .0 // indirect
373+ go.opentelemetry.io/contrib/detectors/gcp v1.42 .0 // indirect
374374 go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.63.0 // indirect
375375 go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.67.0 // indirect
376- go.opentelemetry.io/otel v1.43 .0 // indirect
376+ go.opentelemetry.io/otel v1.44 .0 // indirect
377377 go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.42.0 // indirect
378378 go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.43.0 // indirect
379379 go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.43.0 // indirect
380380 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.42.0 // indirect
381381 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.43.0 // indirect
382382 go.opentelemetry.io/otel/exporters/prometheus v0.64.0 // indirect
383383 go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.42.0 // indirect
384- go.opentelemetry.io/otel/metric v1.43 .0 // indirect
384+ go.opentelemetry.io/otel/metric v1.44 .0 // indirect
385385 go.opentelemetry.io/otel/sdk v1.43.0 // indirect
386386 go.opentelemetry.io/otel/sdk/metric v1.43.0 // indirect
387- go.opentelemetry.io/otel/trace v1.43 .0 // indirect
387+ go.opentelemetry.io/otel/trace v1.44 .0 // indirect
388388 go.opentelemetry.io/proto/otlp v1.10.0 // indirect
389389 go.uber.org/automaxprocs v1.6.0 // indirect
390390 go.uber.org/multierr v1.11.0 // indirect
391391 go.uber.org/zap v1.28.0 // indirect
392392 go.yaml.in/yaml/v2 v2.4.3 // indirect
393393 go.yaml.in/yaml/v3 v3.0.4 // indirect
394- golang.org/x/crypto v0.50 .0 // indirect
395- golang.org/x/mod v0.35 .0 // indirect
394+ golang.org/x/crypto v0.52 .0 // indirect
395+ golang.org/x/mod v0.36 .0 // indirect
396396 golang.org/x/oauth2 v0.36.0 // indirect
397- golang.org/x/sys v0.43 .0 // indirect
398- golang.org/x/term v0.42 .0 // indirect
397+ golang.org/x/sys v0.45 .0 // indirect
398+ golang.org/x/term v0.43 .0 // indirect
399399 golang.org/x/time v0.15.0 // indirect
400- golang.org/x/tools v0.44 .0 // indirect
400+ golang.org/x/tools v0.45 .0 // indirect
401401 gomodules.xyz/jsonpatch/v2 v2.5.0 // indirect
402402 google.golang.org/api v0.271.0 // indirect
403403 google.golang.org/genproto v0.0.0-20260128011058-8636f8732409 // indirect
404404 google.golang.org/genproto/googleapis/api v0.0.0-20260401024825-9d38bb4040a9 // indirect
405405 google.golang.org/genproto/googleapis/rpc v0.0.0-20260401024825-9d38bb4040a9 // indirect
406- google.golang.org/grpc v1.80.0 // indirect
406+ google.golang.org/grpc v1.81.1 // indirect
407407 google.golang.org/protobuf v1.36.11 // indirect
408408 gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect
409409 gopkg.in/inf.v0 v0.9.1 // indirect
0 commit comments