Bump the go-modules group across 1 directory with 60 updates

[dependabot]

Bumps the go-modules group with 13 updates in the / directory:

Package	From	To
github.com/BurntSushi/toml	1.4.0	1.5.0
github.com/onsi/gomega	1.36.0	1.37.0
github.com/paketo-buildpacks/libnodejs	0.3.0	0.4.0
github.com/paketo-buildpacks/occam	0.23.0	0.25.0
github.com/paketo-buildpacks/packit/v2	2.16.0	2.18.0
github.com/DataDog/zstd	1.5.6	1.5.7
github.com/Microsoft/hcsshim	0.12.5	0.12.9
github.com/cpuguy83/dockercfg	0.3.1	0.3.2
github.com/docker/docker-credential-helpers	0.8.2	0.9.3
github.com/moby/sys/user	0.3.0	0.4.0
github.com/moby/term	0.5.0	0.5.2
github.com/spf13/cast	1.7.0	1.7.1
github.com/tklauser/go-sysconf	0.3.14	0.3.15

Updates github.com/BurntSushi/toml from 1.4.0 to 1.5.0

Release notes

Sourced from github.com/BurntSushi/toml's releases.

v1.5.0

Mostly some small bugfixes, with a few small new features:

• Add Position.Col, to mark the column an error occurred (#410)

• Print more detailed errors in the tomlv CLI.

• Ensure ParseError.Message is always set (#411)

• Allow custom string types as map keys (#414)

• Mark meta keys as decoded when using Unmarshaler interface (#426)

• Fix encoding when nested inline table ends with map (#438)

• Fix encoding of several layers of embedded structs (#430)

• Fix ErrorWithPosition panic when there is no newline in the TOML document (#433)

Commits

• d97def5 Update toml-test
• d10101f Correct encoding of comma when nested inline table ends with map
• 75a4f17 Correct encoding of several layers of embedded structs
• 702f5a6 Minor staticcheck fixes
• 6f7689d Mark meta keys as decoded when using Unmarshaler interface (#426)
• 8323983 Remove exception for fuzzer
• 4664468 Fix ErrorWithPosition panic when less than two lines
• 211c915 Fix typos in comments, tests, error message (#432)
• c141a29 Test with Go 1.24 in CI
• 2918ee7 Fix metadata: do not reuse result of append (#418)
• Additional commits viewable in compare view

Updates github.com/onsi/gomega from 1.36.0 to 1.37.0

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.37.0

1.37.0

Features

• add To/ToNot/NotTo aliases for AsyncAssertion [5666f98]

v1.36.3

1.36.3

Maintenance

• bump all the things [adb8b49]
• chore: replace interface{} with any [7613216]
• Bump google.golang.org/protobuf from 1.36.1 to 1.36.5 (#822) [9fe5259]
• remove spurious "toolchain" from go.mod (#819) [a0e85b9]
• Bump golang.org/x/net from 0.33.0 to 0.35.0 (#823) [604a8b1]
• Bump activesupport from 6.0.6.1 to 6.1.7.5 in /docs (#772) [36fbc84]
• Bump github-pages from 231 to 232 in /docs (#778) [ced70d7]
• Bump rexml from 3.2.6 to 3.3.9 in /docs (#788) [c8b4a07]
• Bump github.com/onsi/ginkgo/v2 from 2.22.1 to 2.22.2 (#812) [06431b9]
• Bump webrick from 1.8.1 to 1.9.1 in /docs (#800) [b55a92d]
• Fix typos (#813) [a1d518b]

v1.36.2

Maintenance

• Bump nokogiri from 1.16.3 to 1.16.5 in /docs by @​dependabot in onsi/gomega#757
• Bump github.com/onsi/ginkgo/v2 from 2.20.1 to 2.22.1 by @​dependabot in onsi/gomega#808
• Bump golang.org/x/net from 0.30.0 to 0.33.0 by @​dependabot in onsi/gomega#807
• Bump google.golang.org/protobuf from 1.35.1 to 1.36.1 by @​dependabot in onsi/gomega#810

v1.36.1

1.36.1

Fixes

• Fix onsi/gomega#803 [1c6c112]
• resolves onsi/gomega#696: make HaveField great on pointer receivers given only a non-addressable value [4feb9d7]

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.37.0

Features

• add To/ToNot/NotTo aliases for AsyncAssertion [5666f98]

1.36.3

Maintenance

• bump all the things [adb8b49]
• chore: replace interface{} with any [7613216]
• Bump google.golang.org/protobuf from 1.36.1 to 1.36.5 (#822) [9fe5259]
• remove spurious "toolchain" from go.mod (#819) [a0e85b9]
• Bump golang.org/x/net from 0.33.0 to 0.35.0 (#823) [604a8b1]
• Bump activesupport from 6.0.6.1 to 6.1.7.5 in /docs (#772) [36fbc84]
• Bump github-pages from 231 to 232 in /docs (#778) [ced70d7]
• Bump rexml from 3.2.6 to 3.3.9 in /docs (#788) [c8b4a07]
• Bump github.com/onsi/ginkgo/v2 from 2.22.1 to 2.22.2 (#812) [06431b9]
• Bump webrick from 1.8.1 to 1.9.1 in /docs (#800) [b55a92d]
• Fix typos (#813) [a1d518b]

1.36.2

Maintenance

• Bump google.golang.org/protobuf from 1.35.1 to 1.36.1 (#810) [9a7609d]
• Bump golang.org/x/net from 0.30.0 to 0.33.0 (#807) [b6cb028]
• Bump github.com/onsi/ginkgo/v2 from 2.20.1 to 2.22.1 (#808) [5756529]
• Bump nokogiri from 1.16.3 to 1.16.5 in /docs (#757) [dabc12e]

1.36.1

Fixes

• Fix onsi/gomega#803 [1c6c112]
• resolves onsi/gomega#696: make HaveField great on pointer receivers given only a non-addressable value [4feb9d7]

Commits

• 272fca3 v1.37.0
• 5666f98 add To/ToNot/NotTo aliases for AsyncAssertion
• 2251143 v1.36.3
• adb8b49 bump all the things
• 7613216 chore: replace interface{} with any
• 9fe5259 Bump google.golang.org/protobuf from 1.36.1 to 1.36.5 (#822)
• a0e85b9 remove spurious "toolchain" from go.mod (#819)
• 604a8b1 Bump golang.org/x/net from 0.33.0 to 0.35.0 (#823)
• 36fbc84 Bump activesupport from 6.0.6.1 to 6.1.7.5 in /docs (#772)
• ced70d7 Bump github-pages from 231 to 232 in /docs (#778)
• Additional commits viewable in compare view

Updates github.com/paketo-buildpacks/libnodejs from 0.3.0 to 0.4.0

Release notes

Sourced from github.com/paketo-buildpacks/libnodejs's releases.

v0.4.0

What's Changed

• Introduce BP_VERIFY_LAUNCHPOINT to enable generated files

Full Changelog: paketo-buildpacks/libnodejs@v0.3.0...v0.4.0

Commits

• 05a709e Introduce BP_VERIFY_LAUNCHPOINT to enable generated files (#37)
• See full diff in compare view

Updates github.com/paketo-buildpacks/occam from 0.23.0 to 0.25.0

Release notes

Sourced from github.com/paketo-buildpacks/occam's releases.

v0.25.0

What's Changed

• Adding support for packaging multi-arch extension based on the OS architecture by @​pacostas in paketo-buildpacks/occam#373

Full Changelog: paketo-buildpacks/occam@v0.24.0...v0.25.0

v0.24.0

What's Changed

• Updates github-config by @​paketo-bot in paketo-buildpacks/occam#368
• Updates go mod version to 1.24.1 by @​paketo-bot in paketo-buildpacks/occam#369
• Bump github.com/onsi/gomega from 1.36.0 to 1.36.3 by @​dependabot in paketo-buildpacks/occam#370
• Set PACK_VOLUME_KEY when performing pack build by @​robdimsdale in paketo-buildpacks/occam#371

Full Changelog: paketo-buildpacks/occam@v0.23.0...v0.24.0

Commits

• 5d4a320 Adding support for packaging multi-arch extension based on the OS architectur...
• 2330b88 Set PACK_VOLUME_KEY when performing pack build
• 62e0cec Bump github.com/onsi/gomega from 1.36.0 to 1.36.3
• 2afed4d Updates go mod version to 1.24.1
• 27eb12e Updating github-config
• See full diff in compare view

Updates github.com/paketo-buildpacks/packit/v2 from 2.16.0 to 2.18.0

Release notes

Sourced from github.com/paketo-buildpacks/packit/v2's releases.

v2.18.0

What's Changed

• Bump golang.org/x/net from 0.37.0 to 0.38.0 by @​dependabot in paketo-buildpacks/packit#645
• Bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9 by @​dependabot in paketo-buildpacks/packit#646
• Use upstream syft by @​modulo11 in paketo-buildpacks/packit#639
• Bump github.com/anchore/stereoscope from 0.0.0-20230412183729-8602f1afc574 to 0.1.3 by @​dependabot in paketo-buildpacks/packit#644

Full Changelog: paketo-buildpacks/packit@v2.17.0...v2.18.0

v2.17.0

What's Changed

• Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7 by @​dependabot in paketo-buildpacks/packit#615
• Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 by @​dependabot in paketo-buildpacks/packit#617
• Updates github-config by @​paketo-bot in paketo-buildpacks/packit#619
• feat: Add support for targets in cargo for extension by @​pacostas in paketo-buildpacks/packit#623
• Enable architecture specific dependencies by @​c0d1ngm0nk3y in paketo-buildpacks/packit#622
• Updates github-config by @​paketo-bot in paketo-buildpacks/packit#624
• Updates go mod version to 1.24.1 by @​paketo-bot in paketo-buildpacks/packit#625
• Bump golang.org/x/net from 0.31.0 to 0.36.0 by @​dependabot in paketo-buildpacks/packit#626
• Bump github.com/Masterminds/semver/v3 from 3.2.1 to 3.3.1 by @​dependabot in paketo-buildpacks/packit#614
• Bump github.com/docker/docker from 23.0.5+incompatible to 25.0.6+incompatible by @​dependabot in paketo-buildpacks/packit#630
• Bump github.com/cloudflare/circl from 1.1.0 to 1.3.7 by @​dependabot in paketo-buildpacks/packit#631
• Bump github.com/go-git/go-git/v5 from 5.6.1 to 5.13.0 by @​dependabot in paketo-buildpacks/packit#628
• Bump github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible by @​dependabot in paketo-buildpacks/packit#633
• Bump google.golang.org/grpc from 1.54.0 to 1.56.3 by @​dependabot in paketo-buildpacks/packit#632
• Bump github.com/containerd/containerd from 1.7.0 to 1.7.27 by @​dependabot in paketo-buildpacks/packit#627
• Bump github.com/BurntSushi/toml from 1.4.0 to 1.5.0 by @​dependabot in paketo-buildpacks/packit#635
• Bump github.com/onsi/gomega from 1.34.1 to 1.36.3 by @​dependabot in paketo-buildpacks/packit#637
• Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8 by @​dependabot in paketo-buildpacks/packit#638
• Bump github.com/onsi/gomega from 1.36.3 to 1.37.0 by @​dependabot in paketo-buildpacks/packit#642

Full Changelog: paketo-buildpacks/packit@v2.16.0...v2.17.0

Commits

• aa5bc77 Bump github.com/anchore/stereoscope
• f3fa74a Use upstream syft (#639)
• 7e884aa Bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9
• f3ac27a Bump golang.org/x/net from 0.37.0 to 0.38.0
• d54905c Bump github.com/onsi/gomega from 1.36.3 to 1.37.0
• 9f6c6ec Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
• 98c0b23 Bump github.com/onsi/gomega from 1.34.1 to 1.36.3
• 1916e76 Bump github.com/BurntSushi/toml from 1.4.0 to 1.5.0
• 89b9189 Bump github.com/containerd/containerd from 1.7.0 to 1.7.27
• a19d2e2 Bump google.golang.org/grpc from 1.54.0 to 1.56.3
• Additional commits viewable in compare view

Updates dario.cat/mergo from 1.0.0 to 1.0.1

Release notes

Sourced from dario.cat/mergo's releases.

v1.0.1

What's Changed

• fixes issue #187 by @​vsemichev in darccio/mergo#253
• fix: WithoutDereference should respect non-nil struct pointers by @​joshkaplinsky in darccio/mergo#251

New Contributors

• @​vsemichev made their first contribution in darccio/mergo#253
• @​joshkaplinsky made their first contribution in darccio/mergo#251

Full Changelog: darccio/mergo@v1.0.0...v1.0.1

Commits

• 59ea6a9 Merge pull request #251 from joshkaplinsky/joshkaplinsky/without-dereference-...
• 96f24af Merge pull request #253 from vsemichev/master
• 2f1a615 fixes issue #187. adds test to verify the fix.
• 4da170b fixes issue #187. attempt #3
• a13a117 fixes issue #187. attempt #2
• 6b830ff fixes issue #187
• f33862a WithoutDereference should respect structs
• cde9f0e Merge pull request #246 from darccio/darccio/v1-frozen
• f1e2fe5 chore: frozen v1
• 7f7b4af Update FUNDING.yml
• Additional commits viewable in compare view

Updates github.com/Azure/go-ansiterm from 0.0.0-20210617225240-d185dfc1b5a1 to 0.0.0-20230124172434-306776ec8161

Commits

• See full diff in compare view

Updates github.com/DataDog/zstd from 1.5.6 to 1.5.7

Release notes

Sourced from github.com/DataDog/zstd's releases.

zstd 1.5.7

What's Changed

• Wrap errors from the reader by @​haamed in DataDog/zstd#134
• README typo by @​trim21 in DataDog/zstd#142
• Remove intermediate source buffer for Writer by @​knusbaum in DataDog/zstd#144
• Add Ctx.DecompressInto() by @​EdwardX29 in DataDog/zstd#151
• Update vendored zstd to 1.5.7 by @​Viq111 in DataDog/zstd#152

Full Changelog: DataDog/zstd@v1.5.6...v1.5.7

Commits

• 06fc470 Merge pull request #152 from DataDog/viq111/1.5.7
• 394e07b Update Readme for 1.5.7
• bb6b640 Update vendored zstd to 1.5.7
• 815075c Merge pull request #151 from EdwardX29/ctx-decompress-into
• 9fc0c52 add Ctx.DecompressInto for decompression of payloads with known sizes
• 091c219 zstd_stream.go: remove intermediate source buffer for Writer. (#144)
• 4d75e29 zstd_stream.go: remove intermediate source buffer for Writer.
• 01236a1 Merge pull request #134 from haamed/wrap-zstd-stream-errs
• 89cb070 Merge pull request #142 from trim21/patch-1
• e7d5859 Update README.md
• Additional commits viewable in compare view

Updates github.com/Masterminds/semver/v3 from 3.2.1 to 3.3.1

Release notes

Sourced from github.com/Masterminds/semver/v3's releases.

v3.3.1

What's Changed

• Fix for allowing some version that were invalid by @​mattfarina in Masterminds/semver#253

Full Changelog: Masterminds/semver@v3.3.0...v3.3.1

v3.3.0

What's Changed

• Fix: bad package in README by @​sdelicata in Masterminds/semver#226
• Updating the GitHub Actions and versions of Go used by @​mattfarina in Masterminds/semver#229
• Fix spelling in README by @​robinschneider in Masterminds/semver#222
• Adding go build cache to fuzz output by @​mattfarina in Masterminds/semver#232
• Add caching to fuzz testing by @​mattfarina in Masterminds/semver#234
• updating github actions by @​mattfarina in Masterminds/semver#235
• feat: nil version equality by @​KnutZuidema in Masterminds/semver#213
• add >= and <= by @​grosser in Masterminds/semver#238
• doc: hyphen range constraint without whitespace by @​johnnychen94 in Masterminds/semver#216
• Removing reference to vert by @​mattfarina in Masterminds/semver#245
• simplify StrictNewVersion by @​grosser in Masterminds/semver#241
• Updating the testing version of Go used by @​mattfarina in Masterminds/semver#246
• bumping min version in go.mod based on what's tested by @​mattfarina in Masterminds/semver#248
• Updating changelog for 3.3.0 by @​mattfarina in Masterminds/semver#249

New Contributors

• @​sdelicata made their first contribution in Masterminds/semver#226
• @​robinschneider made their first contribution in Masterminds/semver#222
• @​KnutZuidema made their first contribution in Masterminds/semver#213
• @​grosser made their first contribution in Masterminds/semver#238
• @​johnnychen94 made their first contribution in Masterminds/semver#216

Full Changelog: Masterminds/semver@v3.2.1...v3.3.0

Changelog

Sourced from github.com/Masterminds/semver/v3's changelog.

Changelog

3.3.0 (2024-08-27)

Added

• #238: Add LessThanEqual and GreaterThanEqual functions (thanks @​grosser)
• #213: nil version equality checking (thanks @​KnutZuidema)

Changed

• #241: Simplify StrictNewVersion parsing (thanks @​grosser)
• Testing support up through Go 1.23
• Minimum version set to 1.21 as this is what's tested now
• Fuzz testing now supports caching

Commits

• 1558ca3 Merge pull request #253 from mattfarina/fix-bad-versions
• 252dd61 Fix for allowing some version that were invalid
• e6e3d4d Merge pull request #249 from mattfarina/update-changelog-3.3.0
• e80c4ea Updating changelog for 3.3.0
• 80427ad Merge pull request #248 from mattfarina/bump-min-version
• b610837 bumping min version in go.mod based on what's tested
• a4cccd8 Merge pull request #246 from mattfarina/bump-go-1.23
• 7c178cf Updating the testing version of Go used
• 29f94c1 Merge pull request #241 from grosser/grosser/validate
• 2cf1b16 Merge pull request #245 from mattfarina/remove-vert
• Additional commits viewable in compare view

Updates github.com/Masterminds/sprig/v3 from 3.2.3 to 3.3.0

Release notes

Sourced from github.com/Masterminds/sprig/v3's releases.

v3.3.0

What's Changed

• Updating the Go versions used in testing by @​mattfarina in Masterminds/sprig#405
• Change intial to initial. by @​chrishalbert in Masterminds/sprig#391
• Updating dependencies by @​mattfarina in Masterminds/sprig#404
• correct value by @​jheyduk in Masterminds/sprig#376
• Updating location of mergo by @​mattfarina in Masterminds/sprig#406
• feature: added sha512sum function by @​itzik-elayev in Masterminds/sprig#400
• docs: Add missing link to url functions by @​carlpett in Masterminds/sprig#375
• Update doc.go by @​chey in Masterminds/sprig#369
• Update mathf.md by @​zzhu41 in Masterminds/sprig#290
• Removing duplicate documentation by @​mattfarina in Masterminds/sprig#407
• Updating the changelog for the 3.3.0 release by @​mattfarina in Masterminds/sprig#408

New Contributors

• @​chrishalbert made their first contribution in Masterminds/sprig#391
• @​jheyduk made their first contribution in Masterminds/sprig#376
• @​itzik-elayev made their first contribution in Masterminds/sprig#400
• @​carlpett made their first contribution in Masterminds/sprig#375
• @​chey made their first contribution in Masterminds/sprig#369
• @​zzhu41 made their first contribution in Masterminds/sprig#290

Full Changelog: Masterminds/sprig@v3.2.3...v3.3.0

Changelog

Sourced from github.com/Masterminds/sprig/v3's changelog.

Release 3.3.0 (2024-08-29)

Added

• #400: added sha512sum function (thanks @​itzik-elayev)

Changed

• #407: Removed duplicate documentation (functions were documentated in 2 places)
• #290: Corrected copy/paster oops in math documentation (thanks @​zzhu41)
• #369: Corrected template reference in docs (thanks @​chey)
• #375: Added link to URL documenation (thanks @​carlpett)
• #406: Updated the mergo dependency which had a breaking change (which was accounted for)
• #376: Fixed documentation error (thanks @​jheyduk)
• #404: Updated dependency tree
• #391: Fixed misspelling (thanks @​chrishalbert)
• #405: Updated Go versions used in testing

Commits

• e708470 Merge pull request #408 from mattfarina/update-changelog-3.3
• 8fc4354 Updating the changelog for the 3.3.0 release
• cb81a32 Merge pull request #407 from mattfarina/remove-dup-math-functions
• 2637693 Removing duplicate documentation
• 06b9a87 Merge pull request #290 from zzhu41/patch-1
• e663ec6 Merge pull request #369 from chey/patch-1
• bb2f73f Merge pull request #375 from carlpett/patch-1
• f07659e Merge pull request #400 from itzik-elayev/master
• 98b35c1 Add closing bracket
• 7a88928 Merge pull request #406 from mattfarina/update-mergo
• Additional commits viewable in compare view

Updates github.com/Microsoft/hcsshim from 0.12.5 to 0.12.9

Release notes

Sourced from github.com/Microsoft/hcsshim's releases.

v0.12.9

What's Changed

• [release/0.12] Update go to 1.22 + switch to using containerd/errdefs/pkg/errgrpc for grpc translation by @​kiashok in microsoft/hcsshim#2301

Full Changelog: microsoft/hcsshim@v0.12.8...v0.12.9

v0.12.8

What's Changed

• Fixing typo by @​ritikaguptams in microsoft/hcsshim#2289
• [release/0.12] Update containerd to v1.7.23 by @​dmcgowan in microsoft/hcsshim#2295

Full Changelog: microsoft/hcsshim@v0.12.7...v0.12.8

v0.12.7

What's Changed

• [release/0.12] Update pkg versions in go.mod by @​kiashok in microsoft/hcsshim#2275
• [release/0.12] Update runc version to 1.1.14 by @​kiashok in microsoft/hcsshim#2271

Full Changelog: microsoft/hcsshim@v0.12.6...v0.12.7

v0.12.6

What's Changed

• [release/0.12] Backport commits from hcsshim/main to update module versions by @​kiashok in microsoft/hcsshim#2237

Full Changelog: microsoft/hcsshim@v0.12.5...v0.12.6

Commits

• 7392335 Switch to using containerd/errdefs/pkg/errgrpc for grpc translation
• 79d3f32 Update go to 1.22
• 05636b9 Update JOB_OBJECT_ALL_ACCESS and OpenJobObject (#2095)
• 1550628 mobve SILOOBJECT_BASIC_INFORMATION to winapi
• bf52d58 fix SILOOBJECT_BASIC_INFORMATION alignment
• 8d48d87 Update containerd to v1.7.23 (#2295)
• 4ad298f Fixing typo (#2289)
• 86b5333 Bump golangci/golangci-lint-action from 4 to 6
• 5ae96f3 Update runc to v1.1.14
• 8f3fccd Update pkg versions
• Additional commits viewable in compare view

Updates github.com/ProtonMail/go-crypto from 1.1.3 to 1.1.6

Release notes

Sourced from github.com/ProtonMail/go-crypto's releases.

Release v1.1.6

What's Changed

• Fix PublicKey.KeyIdString to return a valid key id by @​lubux in ProtonMail/go-crypto#269
• Allow Key Flags override @​davrux in ProtonMail/go-crypto#272
• Only check that message signatures are newer than the key by @​twiss in ProtonMail/go-crypto#275
• openpgp/clearsign: just use rand.Reader in tests by @​mdosch in ProtonMail/go-crypto#276
• Make Issuer Key ID signature subpacket non-critical by @​caarlos0 in ProtonMail/go-crypto#266
• v2 API: Improve error messages for encryption key selection by @​lubux in ProtonMail/go-crypto#271

Full Changelog: ProtonMail/go-crypto@v1.1.5...v1.1.6

Release v1.1.6-proton

What's Changed

This release is v1.1.6 with support for the following non-standardized features:

• Presistent symmetric keys draft-ietf-openpgp-persistent-symmetric-keys-00
• Automatic forwarding draft-wussler-openpgp-forwarding-00
• Post-quantum algorithms draft-ietf-openpgp-pqc

Release v1.1.5

What's Changed

• Check binding signature details against primary key by @​twiss in ProtonMail/go-crypto#264

Full Changelog: ProtonMail/go-crypto@v1.1.4...v1.1.5

Release v1.1.5-proton

What's Changed

This release is v1.1.5 with support for the following non-standardized features:

• Presistent symmetric keys draft-ietf-openpgp-persistent-symmetric-keys-00
• Automatic forwarding draft-wussler-openpgp-forwarding-00
• Post-quantum algorithms draft-ietf-openpgp-pqc

Release v1.1.4

What's Changed

• Emit armor headers in sorted order by @​andrewgdotcom in ProtonMail/go-crypto#255
• Reduce memory usage when AEAD en/decrypting large messages by @​twiss in ProtonMail/go-crypto#259
• Update artifact actions to v4 by @​twiss in ProtonMail/go-crypto#260

Full Changelog: ProtonMail/go-crypto@v1.1.3...v1.1.4

Release v1.1.4-proton

What's Changed

This release is v1.1.4 with support for the following non-standardized features:

... (truncated)

Commits

• e52eada Merge pull request #271 from ProtonMail/feat/improve-errors-key-selection
• 4bf9d90 feat(v2): Improve error message for encryption key selection
• d47bb38 Merge pull request #266 from caarlos0/issuer-key-id
• 756ebbd Make Issuer Key ID signature subpacket non-critical
• 44ef98c Merge pull request #276 from mdosch/fix-random-source-is-broken
• b105e24 Merge branch 'main' into fix-random-source-is-broken
• 89b0776 Only check that message signatures are newer than the key
• 2b2dbe9 openpgp/clearsign: just use rand.Reader in tests
• 2732e09 Merge pull request #275 from ProtonMail/only-check-msg-sig-newer-than-key
• 8e272e7 Only check that message signatures are newer than the key
• Additional commits viewable in compare view

Updates github.com/anchore/go-logger from 0.0.0-20230120230012-47be9bb822a2 to 0.0.0-20230725134548-c21dafa1ec5a

Commits

• See full diff in compare view

Updates github.com/anchore/packageurl-go from 0.1.1-0.20230104203445-02e0a6721501 to 0.1.1-0.20250220190351-d62adb6e1115

Commits

• See full diff in compare view

Updates github.com/anchore/syft from 0.80.0 to 1.19.0

Release notes

Sourced from github.com/anchore/syft's releases.

v1.19.0

Added Features

• add license parsing from vendor dirs [#3522 @​dschmidt]
• Support cataloging NuGet packages [#373 #3484 @​Kemosabert]

Bug Fixes

• Syft generates invalid PURLs when name contains : [#3577 #3596 @​spiffcs @​jkugler]
• warn instead of error if zero package catalogers are select - user might still run file metadata cataloger, for example [#3128 #3468 @​tomersein]
• sbom report: missing licenses [#3527 #3549 @​kzantow]

Additional Changes

• bump stereoscope to v0.0.13 [#3601 @​spiffcs]

(Full Changelog)

v1.18.1

Bug Fixes

• Runtime Error with Syft on Singularity .sif file (panic: index out of range) [#3390]
• SPDX expressions are lost from CycloneDX if they contain extra parenthesis [#3441 #3517 @​willmurphyscode]

Additional Changes

• migrate syft to use anchore fork of archiver without replace [#3516 @​spiffcs]

(Full Changelog)

v1.18.0

Added Features

• convert spdx absolute to relative [#3509 @​spiffcs]
• Add relationships fo...

  Description has been truncated

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.