Skip to content

Commit b170227

Browse files
fix(deps): update osv-scanner minor (#2763)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | Type | Update | Pending | |---|---|---|---|---|---|---| | [deps.dev/api/v3](https://redirect.github.com/google/deps.dev) | `v3.0.0-20260225225317-765e10b45d5b` → `v3.0.0-20260422013440-90c27f84dd6f` | ![age](https://developer.mend.io/api/mc/badges/age/go/deps.dev%2fapi%2fv3/v3.0.0-20260422013440-90c27f84dd6f?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/deps.dev%2fapi%2fv3/v3.0.0-20260225225317-765e10b45d5b/v3.0.0-20260422013440-90c27f84dd6f?slim=true) | require | patch | | | [deps.dev/api/v3alpha](https://redirect.github.com/google/deps.dev) | `765e10b` → `90c27f8` | ![age](https://developer.mend.io/api/mc/badges/age/go/deps.dev%2fapi%2fv3alpha/v0.0.0-20260422013440-90c27f84dd6f?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/deps.dev%2fapi%2fv3alpha/v0.0.0-20260225225317-765e10b45d5b/v0.0.0-20260422013440-90c27f84dd6f?slim=true) | require | digest | | | [github.com/ianlancetaylor/demangle](https://redirect.github.com/ianlancetaylor/demangle) | `96ee002` → `1ff4bf4` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fianlancetaylor%2fdemangle/v0.0.0-20260505044615-1ff4bf46051f?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fianlancetaylor%2fdemangle/v0.0.0-20251118225945-96ee0021ea0f/v0.0.0-20260505044615-1ff4bf46051f?slim=true) | require | digest | | | [github.com/jedib0t/go-pretty/v6](https://redirect.github.com/jedib0t/go-pretty) | `v6.7.9` → `v6.7.10` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fjedib0t%2fgo-pretty%2fv6/v6.7.10?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fjedib0t%2fgo-pretty%2fv6/v6.7.9/v6.7.10?slim=true) | require | patch | | | [github.com/modelcontextprotocol/go-sdk](https://redirect.github.com/modelcontextprotocol/go-sdk) | `v1.5.0` → `v1.6.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fmodelcontextprotocol%2fgo-sdk/v1.6.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fmodelcontextprotocol%2fgo-sdk/v1.5.0/v1.6.0?slim=true) | require | minor | | | [github.com/package-url/packageurl-go](https://redirect.github.com/package-url/packageurl-go) | `v0.1.5` → `v0.1.6` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fpackage-url%2fpackageurl-go/v0.1.6?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fpackage-url%2fpackageurl-go/v0.1.5/v0.1.6?slim=true) | require | patch | | | [google.golang.org/grpc](https://redirect.github.com/grpc/grpc-go) | `v1.80.0` → `v1.81.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/google.golang.org%2fgrpc/v1.81.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/google.golang.org%2fgrpc/v1.80.0/v1.81.0?slim=true) | require | minor | `v1.81.1` | --- ### Release Notes <details> <summary>jedib0t/go-pretty (github.com/jedib0t/go-pretty/v6)</summary> ### [`v6.7.10`](https://redirect.github.com/jedib0t/go-pretty/releases/tag/v6.7.10) [Compare Source](https://redirect.github.com/jedib0t/go-pretty/compare/v6.7.9...v6.7.10) #### What's Changed - Fix panic on text align with unicode by [@&#8203;edznux-dd](https://redirect.github.com/edznux-dd) in [#&#8203;404](https://redirect.github.com/jedib0t/go-pretty/pull/404) #### New Contributors - [@&#8203;edznux-dd](https://redirect.github.com/edznux-dd) made their first contribution in [#&#8203;404](https://redirect.github.com/jedib0t/go-pretty/pull/404) **Full Changelog**: <jedib0t/go-pretty@v6.7.9...v6.7.10> </details> <details> <summary>modelcontextprotocol/go-sdk (github.com/modelcontextprotocol/go-sdk)</summary> ### [`v1.6.0`](https://redirect.github.com/modelcontextprotocol/go-sdk/compare/v1.5.0...v1.6.0) [Compare Source](https://redirect.github.com/modelcontextprotocol/go-sdk/compare/v1.5.0...v1.6.0) </details> <details> <summary>package-url/packageurl-go (github.com/package-url/packageurl-go)</summary> ### [`v0.1.6`](https://redirect.github.com/package-url/packageurl-go/compare/v0.1.5...v0.1.6) [Compare Source](https://redirect.github.com/package-url/packageurl-go/compare/v0.1.5...v0.1.6) </details> <details> <summary>grpc/grpc-go (google.golang.org/grpc)</summary> ### [`v1.81.0`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.81.0): Release 1.81.0 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.80.0...v1.81.0) ### Behavior Changes - balancer/rls: Switch gauge metrics to asynchronous emission (once per collection cycle) to reduce telemetry noise and align with other gRPC language implementations. ([#&#8203;8808](https://redirect.github.com/grpc/grpc-go/issues/8808)) ### Dependencies - Minimum supported Go version is now 1.25. ([#&#8203;8969](https://redirect.github.com/grpc/grpc-go/issues/8969)) ### Bug Fixes - xds: Use the leaf cluster's security config for the TLS handshake instead of the aggregate cluster's config. ([#&#8203;8956](https://redirect.github.com/grpc/grpc-go/issues/8956)) - transport: Send a `RST_STREAM` when receiving an `END_STREAM` when the stream is not already half-closed. ([#&#8203;8832](https://redirect.github.com/grpc/grpc-go/issues/8832)) - xds: Fix ADS resource name validation to prevent a panic. ([#&#8203;8970](https://redirect.github.com/grpc/grpc-go/issues/8970)) ### New Features - grpc/stats: Add support for custom labels in per-call metrics ([gRFC A108](https://redirect.github.com/grpc/proposal/blob/master/A108-otel-custom-per-call-label.md)). ([#&#8203;9008](https://redirect.github.com/grpc/grpc-go/issues/9008)) - xds: Add support for Server Name Indication (SNI) and SAN validation ([gRFC A101](https://redirect.github.com/grpc/proposal/blob/master/A101-SNI-setting-and-SNI-SAN-validation.md)). Disabled by default. To enable, set `GRPC_EXPERIMENTAL_XDS_SNI=true` environment variable. ([#&#8203;9016](https://redirect.github.com/grpc/grpc-go/issues/9016)) - xds: Add support to control which fields get propagated from ORCA backend metric reports to LRS load reports ([gRFC A85](https://redirect.github.com/grpc/proposal/blob/master/A85-lrs-custom-metrics-changes.md)). Disabled by default. To enable, set `GRPC_EXPERIMENTAL_XDS_ORCA_LRS_PROPAGATION=true`. ([#&#8203;9005](https://redirect.github.com/grpc/grpc-go/issues/9005)) - xds: Add metrics to track xDS client connectivity and cached resource state ([gRFC A78](https://redirect.github.com/grpc/proposal/blob/master/A78-grpc-metrics-wrr-pf-xds.md)). ([#&#8203;8807](https://redirect.github.com/grpc/grpc-go/issues/8807)) - stats/otel: Enhance `grpc.subchannel.disconnections` metric by adding disconnection reason to the `grpc.disconnect_error` label ([gRFC A94](https://redirect.github.com/grpc/proposal/blob/master/A94-subchannel-otel-metrics.md)). This provides granular insights into why subchannels are closing. ([#&#8203;8973](https://redirect.github.com/grpc/grpc-go/issues/8973)) - mem: Add `mem.Buffer.Slice()` API to slice the buffer like a slice. ([#&#8203;8977](https://redirect.github.com/grpc/grpc-go/issues/8977)) - Special Thanks: [@&#8203;ash2k](https://redirect.github.com/ash2k) ### Performance Improvements - alts: Pool read buffers to lower memory utilization when sockets are unreadable. ([#&#8203;8964](https://redirect.github.com/grpc/grpc-go/issues/8964)) - transport: Pool HTTP/2 framer read buffers to reduce idle memory consumption. Currently limited to Linux for ALTS and non-encrypted transports (TCP, Unix). To disable, set `GRPC_GO_EXPERIMENTAL_HTTP_FRAMER_READ_BUFFER_POOLING=false` and report any issues. ([#&#8203;9032](https://redirect.github.com/grpc/grpc-go/issues/9032)) </details> --- ### Configuration 📅 **Schedule**: (in timezone Australia/Sydney) - Branch creation - "before 6am on monday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/google/osv-scanner). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTkuMiIsInVwZGF0ZWRJblZlciI6IjQzLjE3OS4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=--> --------- Co-authored-by: Rex P <rexpan@google.com>
1 parent 9648d34 commit b170227

2 files changed

Lines changed: 43 additions & 43 deletions

File tree

go.mod

Lines changed: 13 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -5,22 +5,22 @@ go 1.26.2
55
require (
66
charm.land/glamour/v2 v2.0.0
77
charm.land/lipgloss/v2 v2.0.3
8-
deps.dev/api/v3 v3.0.0-20260225225317-765e10b45d5b
9-
deps.dev/api/v3alpha v0.0.0-20260225225317-765e10b45d5b
8+
deps.dev/api/v3 v3.0.0-20260422013440-90c27f84dd6f
9+
deps.dev/api/v3alpha v0.0.0-20260422013440-90c27f84dd6f
1010
github.com/BurntSushi/toml v1.6.0
1111
github.com/CycloneDX/cyclonedx-go v0.10.0
1212
github.com/gkampitakis/go-snaps v0.5.21
1313
github.com/go-git/go-git/v5 v5.18.0
1414
github.com/gobwas/glob v0.2.3
1515
github.com/google/go-cmp v0.7.0
1616
github.com/google/osv-scalibr v0.4.6-0.20260512154636-025a69d53ec5
17-
github.com/ianlancetaylor/demangle v0.0.0-20251118225945-96ee0021ea0f
18-
github.com/jedib0t/go-pretty/v6 v6.7.9
19-
github.com/modelcontextprotocol/go-sdk v1.5.0
17+
github.com/ianlancetaylor/demangle v0.0.0-20260505044615-1ff4bf46051f
18+
github.com/jedib0t/go-pretty/v6 v6.7.10
19+
github.com/modelcontextprotocol/go-sdk v1.6.0
2020
github.com/opencontainers/go-digest v1.0.0
2121
github.com/ossf/osv-schema/bindings/go v0.0.0-20260304051245-ec3272c283e4
2222
github.com/owenrumney/go-sarif/v3 v3.3.0
23-
github.com/package-url/packageurl-go v0.1.5
23+
github.com/package-url/packageurl-go v0.1.6
2424
github.com/pandatix/go-cvss v0.6.2
2525
github.com/tidwall/gjson v1.18.0
2626
github.com/tidwall/pretty v1.2.1
@@ -30,7 +30,7 @@ require (
3030
golang.org/x/sync v0.20.0
3131
golang.org/x/term v0.42.0
3232
golang.org/x/vuln v1.1.4
33-
google.golang.org/grpc v1.80.0
33+
google.golang.org/grpc v1.81.0
3434
google.golang.org/protobuf v1.36.11
3535
gopkg.in/dnaeon/go-vcr.v4 v4.0.6
3636
osv.dev/bindings/go v0.0.0-20260306051416-1f963c5a9f4f
@@ -125,7 +125,7 @@ require (
125125
github.com/gogo/protobuf v1.3.2 // indirect
126126
github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 // indirect
127127
github.com/google/go-containerregistry v0.20.7 // indirect
128-
github.com/google/jsonschema-go v0.4.2 // indirect
128+
github.com/google/jsonschema-go v0.4.3 // indirect
129129
github.com/google/uuid v1.6.0 // indirect
130130
github.com/gorilla/css v1.0.1 // indirect
131131
github.com/icholy/digest v1.1.0 // indirect
@@ -206,9 +206,9 @@ require (
206206
go.opencensus.io v0.24.0 // indirect
207207
go.opentelemetry.io/auto/sdk v1.2.1 // indirect
208208
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0 // indirect
209-
go.opentelemetry.io/otel v1.39.0 // indirect
210-
go.opentelemetry.io/otel/metric v1.39.0 // indirect
211-
go.opentelemetry.io/otel/trace v1.39.0 // indirect
209+
go.opentelemetry.io/otel v1.43.0 // indirect
210+
go.opentelemetry.io/otel/metric v1.43.0 // indirect
211+
go.opentelemetry.io/otel/trace v1.43.0 // indirect
212212
go.uber.org/atomic v1.7.0 // indirect
213213
go.uber.org/multierr v1.11.0 // indirect
214214
go.uber.org/zap v1.17.0 // indirect
@@ -218,15 +218,15 @@ require (
218218
golang.org/x/exp v0.0.0-20250911091902-df9299821621 // indirect
219219
golang.org/x/mod v0.33.0 // indirect
220220
golang.org/x/net v0.51.0 // indirect
221-
golang.org/x/oauth2 v0.35.0 // indirect
221+
golang.org/x/oauth2 v0.36.0 // indirect
222222
golang.org/x/sys v0.43.0 // indirect
223223
golang.org/x/telemetry v0.0.0-20260209163413-e7419c687ee4 // indirect
224224
golang.org/x/text v0.34.0 // indirect
225225
golang.org/x/tools v0.42.0 // indirect
226226
golang.org/x/xerrors v0.0.0-20240903120638-7835f813f4da // indirect
227227
google.golang.org/genproto v0.0.0-20250707201910-8d1bb00bc6a7 // indirect
228228
google.golang.org/genproto/googleapis/api v0.0.0-20260226221140-a57be14db171 // indirect
229-
google.golang.org/genproto/googleapis/rpc v0.0.0-20260217215200-42d3e9bedb6d // indirect
229+
google.golang.org/genproto/googleapis/rpc v0.0.0-20260226221140-a57be14db171 // indirect
230230
gopkg.in/ini.v1 v1.67.1 // indirect
231231
gopkg.in/warnings.v0 v0.1.2 // indirect
232232
gopkg.in/yaml.v3 v3.0.1 // indirect

go.sum

Lines changed: 30 additions & 30 deletions
Original file line numberDiff line numberDiff line change
@@ -11,10 +11,10 @@ cyphar.com/go-pathrs v0.2.1 h1:9nx1vOgwVvX1mNBWDu93+vaceedpbsDqo+XuBGL40b8=
1111
cyphar.com/go-pathrs v0.2.1/go.mod h1:y8f1EMG7r+hCuFf/rXsKqMJrJAUoADZGNh5/vZPKcGc=
1212
dario.cat/mergo v1.0.2 h1:85+piFYR1tMbRrLcDwR18y4UKJ3aH1Tbzi24VRW1TK8=
1313
dario.cat/mergo v1.0.2/go.mod h1:E/hbnu0NxMFBjpMIE34DRGLWqDy0g5FuKDhCb31ngxA=
14-
deps.dev/api/v3 v3.0.0-20260225225317-765e10b45d5b h1:NfcHjM/zoNS7fQsEkpms4iDeDeDN0epSc85v9E8URHA=
15-
deps.dev/api/v3 v3.0.0-20260225225317-765e10b45d5b/go.mod h1:+gN+ydvfcDk/mTxWon7Ze4X8gYN/HZxUdt54XWgWcRQ=
16-
deps.dev/api/v3alpha v0.0.0-20260225225317-765e10b45d5b h1:rLNtxOQmnJ4tBpU1RdZAAF8I5S/VLBEnjxE8qINO9RM=
17-
deps.dev/api/v3alpha v0.0.0-20260225225317-765e10b45d5b/go.mod h1:gZ4p6jKUfgFWBPgK32TByXK59A+sDp9plnb7sz7VmxQ=
14+
deps.dev/api/v3 v3.0.0-20260422013440-90c27f84dd6f h1:bkdwfmqQpnBWIaJnQzrBz2PJqulYfZ1y0r2GYBy2q7g=
15+
deps.dev/api/v3 v3.0.0-20260422013440-90c27f84dd6f/go.mod h1:0hHra9TKQ6NiQ521weKybVVWKbsQqCAiYLYnVsj2mrg=
16+
deps.dev/api/v3alpha v0.0.0-20260422013440-90c27f84dd6f h1:vWUbOQPEXTa7X1jG96z0rVo+PeaQh7fRdhrd8jPruN8=
17+
deps.dev/api/v3alpha v0.0.0-20260422013440-90c27f84dd6f/go.mod h1:NHzNeKCx55mrWIvk1rr2XbM45IVwgPvkGysdr6XAgJk=
1818
deps.dev/util/maven v0.0.0-20260225225317-765e10b45d5b h1:sfRt80paU8Awo8LlaULg1EovlaVqIi4uO12NaEQhISk=
1919
deps.dev/util/maven v0.0.0-20260225225317-765e10b45d5b/go.mod h1:eGrXziwI7scSGrwIj+5EBHtTeSxAZD/yi8Hb3nFXesA=
2020
deps.dev/util/pypi v0.0.0-20250903005441-604c45d5b44b h1:67FfxwUt82PEMle2FKlW4DZvzcfSODDoTnSGOT1bYtY=
@@ -271,8 +271,8 @@ github.com/google/go-containerregistry v0.20.7 h1:24VGNpS0IwrOZ2ms2P1QE3Xa5X9p4p
271271
github.com/google/go-containerregistry v0.20.7/go.mod h1:Lx5LCZQjLH1QBaMPeGwsME9biPeo1lPx6lbGj/UmzgM=
272272
github.com/google/go-cpy v0.0.0-20211218193943-a9c933c06932 h1:5/4TSDzpDnHQ8rKEEQBjRlYx77mHOvXu08oGchxej7o=
273273
github.com/google/go-cpy v0.0.0-20211218193943-a9c933c06932/go.mod h1:cC6EdPbj/17GFCPDK39NRarlMI+kt+O60S12cNB5J9Y=
274-
github.com/google/jsonschema-go v0.4.2 h1:tmrUohrwoLZZS/P3x7ex0WAVknEkBZM46iALbcqoRA8=
275-
github.com/google/jsonschema-go v0.4.2/go.mod h1:r5quNTdLOYEz95Ru18zA0ydNbBuYoo9tgaYcxEYhJVE=
274+
github.com/google/jsonschema-go v0.4.3 h1:/DBOLZTfDow7pe2GmaJNhltueGTtDKICi8V8p+DQPd0=
275+
github.com/google/jsonschema-go v0.4.3/go.mod h1:r5quNTdLOYEz95Ru18zA0ydNbBuYoo9tgaYcxEYhJVE=
276276
github.com/google/osv-scalibr v0.4.6-0.20260512154636-025a69d53ec5 h1:saUfhzEWSGec6fmOXEORKnRpiw4h/SuJ9u/y8YgddUo=
277277
github.com/google/osv-scalibr v0.4.6-0.20260512154636-025a69d53ec5/go.mod h1:IYS9akeCLN2b0PjclYosQ7Gn68LXt6rLjRnh9WsJFpE=
278278
github.com/google/pprof v0.0.0-20250820193118-f64d9cf942d6 h1:EEHtgt9IwisQ2AZ4pIsMjahcegHh6rmhqxzIRQIyepY=
@@ -286,14 +286,14 @@ github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.2 h1:8Tjv8EJ+pM1xP8mK6egEbD1OgnV
286286
github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.2/go.mod h1:pkJQ2tZHJ0aFOVEEot6oZmaVEZcRme73eIFmhiVuRWs=
287287
github.com/hexops/gotextdiff v1.0.3 h1:gitA9+qJrrTCsiCl7+kh75nPqQt1cx4ZkudSTLoUqJM=
288288
github.com/hexops/gotextdiff v1.0.3/go.mod h1:pSWU5MAI3yDq+fZBTazCSJysOMbxWL1BSow5/V2vxeg=
289-
github.com/ianlancetaylor/demangle v0.0.0-20251118225945-96ee0021ea0f h1:Fnl4pzx8SR7k7JuzyW8lEtSFH6EQ8xgcypgIn8pcGIE=
290-
github.com/ianlancetaylor/demangle v0.0.0-20251118225945-96ee0021ea0f/go.mod h1:gx7rwoVhcfuVKG5uya9Hs3Sxj7EIvldVofAWIUtGouw=
289+
github.com/ianlancetaylor/demangle v0.0.0-20260505044615-1ff4bf46051f h1:NW3E2QSchEk63/fjeEvWOa2cE02FSv9ox//VE/N4c8g=
290+
github.com/ianlancetaylor/demangle v0.0.0-20260505044615-1ff4bf46051f/go.mod h1:gx7rwoVhcfuVKG5uya9Hs3Sxj7EIvldVofAWIUtGouw=
291291
github.com/icholy/digest v1.1.0 h1:HfGg9Irj7i+IX1o1QAmPfIBNu/Q5A5Tu3n/MED9k9H4=
292292
github.com/icholy/digest v1.1.0/go.mod h1:QNrsSGQ5v7v9cReDI0+eyjsXGUoRSUZQHeQ5C4XLa0Y=
293293
github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 h1:BQSFePA1RWJOlocH6Fxy8MmwDt+yVQYULKfN0RoTN8A=
294294
github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99/go.mod h1:1lJo3i6rXxKeerYnT8Nvf0QmHCRC1n8sfWVwXF2Frvo=
295-
github.com/jedib0t/go-pretty/v6 v6.7.9 h1:frarzQWmkZd97syT81+TH8INKPpzoxQnk+Mk5EIHSrM=
296-
github.com/jedib0t/go-pretty/v6 v6.7.9/go.mod h1:YwC5CE4fJ1HFUDeivSV1r//AmANFHyqczZk+U6BDALU=
295+
github.com/jedib0t/go-pretty/v6 v6.7.10 h1:B/2qW2Bkv2L6n14PP8o1kx75kWzHOQ3YTluWzg9icac=
296+
github.com/jedib0t/go-pretty/v6 v6.7.10/go.mod h1:YwC5CE4fJ1HFUDeivSV1r//AmANFHyqczZk+U6BDALU=
297297
github.com/jessevdk/go-flags v1.4.0/go.mod h1:4FA24M0QyGHXBuZZK/XkWh8h0e1EYbRYJSGM75WSRxI=
298298
github.com/kevinburke/ssh_config v1.2.0 h1:x584FjTGwHzMwvHx18PXxbBVzfnxogHaAReU4gf13a4=
299299
github.com/kevinburke/ssh_config v1.2.0/go.mod h1:CT57kijsi8u/K/BOFA39wgDQJ9CxiF4nAY/ojJ6r6mM=
@@ -355,8 +355,8 @@ github.com/moby/sys/userns v0.1.0 h1:tVLXkFOxVu9A64/yh59slHVv9ahO9UIev4JZusOLG/g
355355
github.com/moby/sys/userns v0.1.0/go.mod h1:IHUYgu/kao6N8YZlp9Cf444ySSvCmDlmzUcYfDHOl28=
356356
github.com/moby/term v0.0.0-20221205130635-1aeaba878587 h1:HfkjXDfhgVaN5rmueG8cL8KKeFNecRCXFhaJ2qZ5SKA=
357357
github.com/moby/term v0.0.0-20221205130635-1aeaba878587/go.mod h1:8FzsFHVUBGZdbDsJw/ot+X+d5HLUbvklYLJ9uGfcI3Y=
358-
github.com/modelcontextprotocol/go-sdk v1.5.0 h1:CHU0FIX9kpueNkxuYtfYQn1Z0slhFzBZuq+x6IiblIU=
359-
github.com/modelcontextprotocol/go-sdk v1.5.0/go.mod h1:gggDIhoemhWs3BGkGwd1umzEXCEMMvAnhTrnbXJKKKA=
358+
github.com/modelcontextprotocol/go-sdk v1.6.0 h1:PPLS3kn7WtOEnR+Af4X5H96SG0qSab8R/ZQT/HkhPkY=
359+
github.com/modelcontextprotocol/go-sdk v1.6.0/go.mod h1:kzm3kzFL1/+AziGOE0nUs3gvPoNxMCvkxokMkuFapXQ=
360360
github.com/mohae/deepcopy v0.0.0-20170929034955-c48cc78d4826 h1:RWengNIwukTxcDr9M+97sNutRR1RKhG96O6jWumTTnw=
361361
github.com/mohae/deepcopy v0.0.0-20170929034955-c48cc78d4826/go.mod h1:TaXosZuwdSHYgviHp1DAtfrULt5eUgsSMsZf+YrPgl8=
362362
github.com/morikuni/aec v1.0.0 h1:nP9CBfwrvYnBRgY6qfDQkygYDmYwOilePFkwzv4dU8A=
@@ -385,8 +385,8 @@ github.com/ossf/osv-schema/bindings/go v0.0.0-20260304051245-ec3272c283e4 h1:4zC
385385
github.com/ossf/osv-schema/bindings/go v0.0.0-20260304051245-ec3272c283e4/go.mod h1:NJzqZPEfOy3B1dWe9pKRtmxJ/UF1++6apnQLjz3du8E=
386386
github.com/owenrumney/go-sarif/v3 v3.3.0 h1:p5oSxEV0uPWBRpAspTmwWr4t1YZyKUpdoFzSB7WE90A=
387387
github.com/owenrumney/go-sarif/v3 v3.3.0/go.mod h1:72MaugkExDexbSauRuPq6BvUAAqAX0TwoNYMIQyZCMw=
388-
github.com/package-url/packageurl-go v0.1.5 h1:O4efRXja2XQ5CtiiYiCZ22k/m7i5ugLiAghgcC+eDgk=
389-
github.com/package-url/packageurl-go v0.1.5/go.mod h1:nKAWB8E6uk1MHqiS/lQb9pYBGH2+mdJ2PJc2s50dQY0=
388+
github.com/package-url/packageurl-go v0.1.6 h1:YO3p6u1XmCUliivUg/qWphaY8vI6hxSnnPv7Bfg3m5M=
389+
github.com/package-url/packageurl-go v0.1.6/go.mod h1:nKAWB8E6uk1MHqiS/lQb9pYBGH2+mdJ2PJc2s50dQY0=
390390
github.com/pandatix/go-cvss v0.6.2 h1:TFiHlzUkT67s6UkelHmK6s1INKVUG7nlKYiWWDTITGI=
391391
github.com/pandatix/go-cvss v0.6.2/go.mod h1:jDXYlQBZrc8nvrMUVVvTG8PhmuShOnKrxP53nOFkt8Q=
392392
github.com/pierrec/lz4/v4 v4.1.17 h1:kV4Ip+/hUBC+8T6+2EgburRtkE9ef4nbY3f4dFhGjMc=
@@ -520,20 +520,20 @@ go.opentelemetry.io/auto/sdk v1.2.1 h1:jXsnJ4Lmnqd11kwkBV2LgLoFMZKizbCi5fNZ/ipaZ
520520
go.opentelemetry.io/auto/sdk v1.2.1/go.mod h1:KRTj+aOaElaLi+wW1kO/DZRXwkF4C5xPbEe3ZiIhN7Y=
521521
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0 h1:RbKq8BG0FI8OiXhBfcRtqqHcZcka+gU3cskNuf05R18=
522522
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0/go.mod h1:h06DGIukJOevXaj/xrNjhi/2098RZzcLTbc0jDAUbsg=
523-
go.opentelemetry.io/otel v1.39.0 h1:8yPrr/S0ND9QEfTfdP9V+SiwT4E0G7Y5MO7p85nis48=
524-
go.opentelemetry.io/otel v1.39.0/go.mod h1:kLlFTywNWrFyEdH0oj2xK0bFYZtHRYUdv1NklR/tgc8=
523+
go.opentelemetry.io/otel v1.43.0 h1:mYIM03dnh5zfN7HautFE4ieIig9amkNANT+xcVxAj9I=
524+
go.opentelemetry.io/otel v1.43.0/go.mod h1:JuG+u74mvjvcm8vj8pI5XiHy1zDeoCS2LB1spIq7Ay0=
525525
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.38.0 h1:GqRJVj7UmLjCVyVJ3ZFLdPRmhDUp2zFmQe3RHIOsw24=
526526
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.38.0/go.mod h1:ri3aaHSmCTVYu2AWv44YMauwAQc0aqI9gHKIcSbI1pU=
527527
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.38.0 h1:aTL7F04bJHUlztTsNGJ2l+6he8c+y/b//eR0jjjemT4=
528528
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.38.0/go.mod h1:kldtb7jDTeol0l3ewcmd8SDvx3EmIE7lyvqbasU3QC4=
529-
go.opentelemetry.io/otel/metric v1.39.0 h1:d1UzonvEZriVfpNKEVmHXbdf909uGTOQjA0HF0Ls5Q0=
530-
go.opentelemetry.io/otel/metric v1.39.0/go.mod h1:jrZSWL33sD7bBxg1xjrqyDjnuzTUB0x1nBERXd7Ftcs=
531-
go.opentelemetry.io/otel/sdk v1.39.0 h1:nMLYcjVsvdui1B/4FRkwjzoRVsMK8uL/cj0OyhKzt18=
532-
go.opentelemetry.io/otel/sdk v1.39.0/go.mod h1:vDojkC4/jsTJsE+kh+LXYQlbL8CgrEcwmt1ENZszdJE=
533-
go.opentelemetry.io/otel/sdk/metric v1.39.0 h1:cXMVVFVgsIf2YL6QkRF4Urbr/aMInf+2WKg+sEJTtB8=
534-
go.opentelemetry.io/otel/sdk/metric v1.39.0/go.mod h1:xq9HEVH7qeX69/JnwEfp6fVq5wosJsY1mt4lLfYdVew=
535-
go.opentelemetry.io/otel/trace v1.39.0 h1:2d2vfpEDmCJ5zVYz7ijaJdOF59xLomrvj7bjt6/qCJI=
536-
go.opentelemetry.io/otel/trace v1.39.0/go.mod h1:88w4/PnZSazkGzz/w84VHpQafiU4EtqqlVdxWy+rNOA=
529+
go.opentelemetry.io/otel/metric v1.43.0 h1:d7638QeInOnuwOONPp4JAOGfbCEpYb+K6DVWvdxGzgM=
530+
go.opentelemetry.io/otel/metric v1.43.0/go.mod h1:RDnPtIxvqlgO8GRW18W6Z/4P462ldprJtfxHxyKd2PY=
531+
go.opentelemetry.io/otel/sdk v1.43.0 h1:pi5mE86i5rTeLXqoF/hhiBtUNcrAGHLKQdhg4h4V9Dg=
532+
go.opentelemetry.io/otel/sdk v1.43.0/go.mod h1:P+IkVU3iWukmiit/Yf9AWvpyRDlUeBaRg6Y+C58QHzg=
533+
go.opentelemetry.io/otel/sdk/metric v1.43.0 h1:S88dyqXjJkuBNLeMcVPRFXpRw2fuwdvfCGLEo89fDkw=
534+
go.opentelemetry.io/otel/sdk/metric v1.43.0/go.mod h1:C/RJtwSEJ5hzTiUz5pXF1kILHStzb9zFlIEe85bhj6A=
535+
go.opentelemetry.io/otel/trace v1.43.0 h1:BkNrHpup+4k4w+ZZ86CZoHHEkohws8AY+WTX09nk+3A=
536+
go.opentelemetry.io/otel/trace v1.43.0/go.mod h1:/QJhyVBUUswCphDVxq+8mld+AvhXZLhe+8WVFxiFff0=
537537
go.opentelemetry.io/proto/otlp v1.7.1 h1:gTOMpGDb0WTBOP8JaO72iL3auEZhVmAQg4ipjOVAtj4=
538538
go.opentelemetry.io/proto/otlp v1.7.1/go.mod h1:b2rVh6rfI/s2pHWNlB7ILJcRALpcNDzKhACevjI+ZnE=
539539
go.uber.org/atomic v1.7.0 h1:ADUqmZGgLDDfbSL9ZmPxKTybcoEYHgpYfELNoN+7hsw=
@@ -584,8 +584,8 @@ golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug
584584
golang.org/x/net v0.51.0 h1:94R/GTO7mt3/4wIKpcR5gkGmRLOuE/2hNGeWq/GBIFo=
585585
golang.org/x/net v0.51.0/go.mod h1:aamm+2QF5ogm02fjy5Bb7CQ0WMt1/WVM7FtyaTLlA9Y=
586586
golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
587-
golang.org/x/oauth2 v0.35.0 h1:Mv2mzuHuZuY2+bkyWXIHMfhNdJAdwW3FuWeCPYN5GVQ=
588-
golang.org/x/oauth2 v0.35.0/go.mod h1:lzm5WQJQwKZ3nwavOZ3IS5Aulzxi68dUSgRHujetwEA=
587+
golang.org/x/oauth2 v0.36.0 h1:peZ/1z27fi9hUOFCAZaHyrpWG5lwe0RJEEEeH0ThlIs=
588+
golang.org/x/oauth2 v0.36.0/go.mod h1:YDBUJMTkDnJS+A4BP4eZBjCqtokkg1hODuPjwiGPO7Q=
589589
golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
590590
golang.org/x/sync v0.0.0-20181108010431-42b317875d0f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
591591
golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
@@ -664,15 +664,15 @@ google.golang.org/genproto v0.0.0-20250707201910-8d1bb00bc6a7 h1:FGOcxvKlJgRBVbX
664664
google.golang.org/genproto v0.0.0-20250707201910-8d1bb00bc6a7/go.mod h1:249YoW4b1INqFTEop2T4aJgiO7UBYJrpejsaLvjWfI8=
665665
google.golang.org/genproto/googleapis/api v0.0.0-20260226221140-a57be14db171 h1:tu/dtnW1o3wfaxCOjSLn5IRX4YDcJrtlpzYkhHhGaC4=
666666
google.golang.org/genproto/googleapis/api v0.0.0-20260226221140-a57be14db171/go.mod h1:M5krXqk4GhBKvB596udGL3UyjL4I1+cTbK0orROM9ng=
667-
google.golang.org/genproto/googleapis/rpc v0.0.0-20260217215200-42d3e9bedb6d h1:t/LOSXPJ9R0B6fnZNyALBRfZBH0Uy0gT+uR+SJ6syqQ=
668-
google.golang.org/genproto/googleapis/rpc v0.0.0-20260217215200-42d3e9bedb6d/go.mod h1:4Hqkh8ycfw05ld/3BWL7rJOSfebL2Q+DVDeRgYgxUU8=
667+
google.golang.org/genproto/googleapis/rpc v0.0.0-20260226221140-a57be14db171 h1:ggcbiqK8WWh6l1dnltU4BgWGIGo+EVYxCaAPih/zQXQ=
668+
google.golang.org/genproto/googleapis/rpc v0.0.0-20260226221140-a57be14db171/go.mod h1:4Hqkh8ycfw05ld/3BWL7rJOSfebL2Q+DVDeRgYgxUU8=
669669
google.golang.org/grpc v1.19.0/go.mod h1:mqu4LbDTu4XGKhr4mRzUsmM4RtVoemTSY81AxZiDr8c=
670670
google.golang.org/grpc v1.23.0/go.mod h1:Y5yQAOtifL1yxbo5wqy6BxZv8vAUGQwXBOALyacEbxg=
671671
google.golang.org/grpc v1.25.1/go.mod h1:c3i+UQWmh7LiEpx4sFZnkU36qjEYZ0imhYfXVyQciAY=
672672
google.golang.org/grpc v1.27.0/go.mod h1:qbnxyOmOxrQa7FizSgH+ReBfzJrCY1pSN7KXBS8abTk=
673673
google.golang.org/grpc v1.33.2/go.mod h1:JMHMWHQWaTccqQQlmk3MJZS+GWXOdAesneDmEnv2fbc=
674-
google.golang.org/grpc v1.80.0 h1:Xr6m2WmWZLETvUNvIUmeD5OAagMw3FiKmMlTdViWsHM=
675-
google.golang.org/grpc v1.80.0/go.mod h1:ho/dLnxwi3EDJA4Zghp7k2Ec1+c2jqup0bFkw07bwF4=
674+
google.golang.org/grpc v1.81.0 h1:W3G9N3KQf3BU+YuCtGKJk0CmxQNbAISICD/9AORxLIw=
675+
google.golang.org/grpc v1.81.0/go.mod h1:xGH9GfzOyMTGIOXBJmXt+BX/V0kcdQbdcuwQ/zNw42I=
676676
google.golang.org/protobuf v0.0.0-20200109180630-ec00e32a8dfd/go.mod h1:DFci5gLYBciE7Vtevhsrf46CRTquxDuWsQurQQe4oz8=
677677
google.golang.org/protobuf v0.0.0-20200221191635-4d8936d0db64/go.mod h1:kwYJMbMJ01Woi6D6+Kah6886xMZcty6N08ah7+eCXa0=
678678
google.golang.org/protobuf v0.0.0-20200228230310-ab0ca4ff8a60/go.mod h1:cfTl7dwQJ+fmap5saPgwCLgHXTUD7jkjRqWcaiX5VyM=

0 commit comments

Comments
 (0)