@@ -12,14 +12,14 @@ require (
1212 github.com/in-toto/in-toto-golang v0.9.0
1313 github.com/landlock-lsm/go-landlock v0.0.0-20250303204525-1544bccde3a3
1414 github.com/sigstore/cosign/v3 v3.0.2
15- github.com/sigstore/fulcio v1.7 .1
15+ github.com/sigstore/fulcio v1.8 .1
1616 github.com/stretchr/testify v1.11.1
1717)
1818
1919require (
2020 cel.dev/expr v0.24.0 // indirect
2121 cloud.google.com/go v0.121.6 // indirect
22- cloud.google.com/go/auth v0.16.5 // indirect
22+ cloud.google.com/go/auth v0.17.0 // indirect
2323 cloud.google.com/go/auth/oauth2adapt v0.2.8 // indirect
2424 cloud.google.com/go/compute/metadata v0.9.0 // indirect
2525 cloud.google.com/go/iam v1.5.2 // indirect
@@ -93,26 +93,26 @@ require (
9393 github.com/aquasecurity/go-pep440-version v0.0.1 // indirect
9494 github.com/aquasecurity/go-version v0.0.1 // indirect
9595 github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect
96- github.com/aws/aws-sdk-go-v2 v1.39.0 // indirect
96+ github.com/aws/aws-sdk-go-v2 v1.39.4 // indirect
9797 github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.1 // indirect
98- github.com/aws/aws-sdk-go-v2/config v1.31.8 // indirect
99- github.com/aws/aws-sdk-go-v2/credentials v1.18.12 // indirect
100- github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.7 // indirect
101- github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.7 // indirect
102- github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.7 // indirect
103- github.com/aws/aws-sdk-go-v2/internal/ini v1.8.3 // indirect
98+ github.com/aws/aws-sdk-go-v2/config v1.31.15 // indirect
99+ github.com/aws/aws-sdk-go-v2/credentials v1.18.19 // indirect
100+ github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.11 // indirect
101+ github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.11 // indirect
102+ github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.11 // indirect
103+ github.com/aws/aws-sdk-go-v2/internal/ini v1.8.4 // indirect
104104 github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.7 // indirect
105105 github.com/aws/aws-sdk-go-v2/service/ecr v1.45.1 // indirect
106106 github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.33.2 // indirect
107- github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.1 // indirect
107+ github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.2 // indirect
108108 github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.8.7 // indirect
109- github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.7 // indirect
109+ github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.11 // indirect
110110 github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.7 // indirect
111111 github.com/aws/aws-sdk-go-v2/service/s3 v1.88.1 // indirect
112- github.com/aws/aws-sdk-go-v2/service/sso v1.29.3 // indirect
113- github.com/aws/aws-sdk-go-v2/service/ssooidc v1.34.4 // indirect
114- github.com/aws/aws-sdk-go-v2/service/sts v1.38.4 // indirect
115- github.com/aws/smithy-go v1.23.0 // indirect
112+ github.com/aws/aws-sdk-go-v2/service/sso v1.29.8 // indirect
113+ github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.3 // indirect
114+ github.com/aws/aws-sdk-go-v2/service/sts v1.38.9 // indirect
115+ github.com/aws/smithy-go v1.23.1 // indirect
116116 github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.10.1 // indirect
117117 github.com/aymanbagabas/go-osc52/v2 v2.0.1 // indirect
118118 github.com/becheran/wildmatch-go v1.0.0 // indirect
@@ -156,7 +156,7 @@ require (
156156 github.com/containerd/stargz-snapshotter/estargz v0.16.3 // indirect
157157 github.com/containerd/ttrpc v1.2.7 // indirect
158158 github.com/containerd/typeurl/v2 v2.2.3 // indirect
159- github.com/coreos/go-oidc/v3 v3.14.1 // indirect
159+ github.com/coreos/go-oidc/v3 v3.16.0 // indirect
160160 github.com/cyberphone/json-canonicalization v0.0.0-20241213102144-19d51d7fe467 // indirect
161161 github.com/cyphar/filepath-securejoin v0.4.1 // indirect
162162 github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
@@ -336,7 +336,7 @@ require (
336336 github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
337337 github.com/prometheus/client_golang v1.23.2 // indirect
338338 github.com/prometheus/client_model v0.6.2 // indirect
339- github.com/prometheus/common v0.66.1 // indirect
339+ github.com/prometheus/common v0.67.2 // indirect
340340 github.com/prometheus/procfs v0.17.0 // indirect
341341 github.com/protocolbuffers/txtpbfmt v0.0.0-20250627152318-f293424e46b5 // indirect
342342 github.com/rcrowley/go-metrics v0.0.0-20250401214520-65e299d6c5c9 // indirect
@@ -428,26 +428,26 @@ require (
428428 go.opentelemetry.io/proto/otlp v1.7.1 // indirect
429429 go.uber.org/multierr v1.11.0 // indirect
430430 go.uber.org/zap v1.27.0 // indirect
431- go.yaml.in/yaml/v2 v2.4.2 // indirect
431+ go.yaml.in/yaml/v2 v2.4.3 // indirect
432432 go.yaml.in/yaml/v3 v3.0.4 // indirect
433433 go4.org v0.0.0-20230225012048-214862532bf5 // indirect
434434 golang.org/x/crypto v0.43.0 // indirect
435435 golang.org/x/exp v0.0.0-20250620022241-b7579e27df2b // indirect
436436 golang.org/x/mod v0.29.0 // indirect
437437 golang.org/x/net v0.46.0 // indirect
438- golang.org/x/oauth2 v0.31 .0 // indirect
438+ golang.org/x/oauth2 v0.32 .0 // indirect
439439 golang.org/x/sync v0.17.0 // indirect
440440 golang.org/x/sys v0.37.0 // indirect
441441 golang.org/x/term v0.36.0 // indirect
442442 golang.org/x/text v0.30.0 // indirect
443- golang.org/x/time v0.13 .0 // indirect
443+ golang.org/x/time v0.14 .0 // indirect
444444 golang.org/x/tools v0.38.0 // indirect
445445 golang.org/x/xerrors v0.0.0-20240903120638-7835f813f4da // indirect
446- google.golang.org/api v0.251 .0 // indirect
446+ google.golang.org/api v0.254 .0 // indirect
447447 google.golang.org/genproto v0.0.0-20250922171735-9219d122eba9 // indirect
448448 google.golang.org/genproto/googleapis/api v0.0.0-20250929231259-57b25ae835d4 // indirect
449- google.golang.org/genproto/googleapis/rpc v0.0.0-20250929231259-57b25ae835d4 // indirect
450- google.golang.org/grpc v1.75.1 // indirect
449+ google.golang.org/genproto/googleapis/rpc v0.0.0-20251022142026-3a174f9686a8 // indirect
450+ google.golang.org/grpc v1.76.0 // indirect
451451 google.golang.org/protobuf v1.36.10 // indirect
452452 gopkg.in/evanphx/json-patch.v4 v4.12.0 // indirect
453453 gopkg.in/inf.v0 v0.9.1 // indirect
0 commit comments