Skip to content

Commit 58c9c9c

Browse files
rchincharchincha
authored
chore: fix dependabot alerts (#2645)
#2632 #2633 #2636 #2637 #2638 #2639 #2640 #2642 #2643 #2644 Signed-off-by: Ramkumar Chinchani <[email protected]>
1 parent 9c01204 commit 58c9c9c

File tree

6 files changed

+64
-71
lines changed

6 files changed

+64
-71
lines changed

‎.github/workflows/codeql-analysis.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -53,7 +53,7 @@ jobs:
5353

5454
# Initializes the CodeQL tools for scanning.
5555
- name: Initialize CodeQL
56-
uses: github/codeql-action/[email protected].3
56+
uses: github/codeql-action/[email protected].6
5757
with:
5858
languages: ${{ matrix.language }}
5959
# If you wish to specify custom queries, you can do so here or in a config file.
@@ -64,7 +64,7 @@ jobs:
6464
# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
6565
# If this step fails, then you should remove it and run the build manually (see below)
6666
- name: Autobuild
67-
uses: github/codeql-action/[email protected].3
67+
uses: github/codeql-action/[email protected].6
6868

6969
# ℹ️ Command-line programs to run using the OS shell.
7070
# 📚 https://git.io/JvXDl
@@ -77,4 +77,4 @@ jobs:
7777
# make release
7878

7979
- name: Perform CodeQL Analysis
80-
uses: github/codeql-action/[email protected].3
80+
uses: github/codeql-action/[email protected].6

‎.github/workflows/publish.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -237,7 +237,7 @@ jobs:
237237
TRIVY_USERNAME: ${{ github.actor }}
238238
TRIVY_PASSWORD: ${{ secrets.GITHUB_TOKEN }}
239239
- name: Upload Trivy scan results to GitHub Security tab
240-
uses: github/codeql-action/[email protected].3
240+
uses: github/codeql-action/[email protected].6
241241
with:
242242
sarif_file: 'trivy-results.sarif'
243243

@@ -274,7 +274,7 @@ jobs:
274274
TRIVY_USERNAME: ${{ github.actor }}
275275
TRIVY_PASSWORD: ${{ secrets.GITHUB_TOKEN }}
276276
- name: Upload Trivy scan results to GitHub Security tab
277-
uses: github/codeql-action/[email protected].3
277+
uses: github/codeql-action/[email protected].6
278278
with:
279279
sarif_file: 'trivy-results.sarif'
280280

‎.github/workflows/scorecards.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -57,6 +57,6 @@ jobs:
5757

5858
# Upload the results to GitHub's code scanning dashboard.
5959
- name: "Upload to code-scanning"
60-
uses: github/codeql-action/[email protected].3
60+
uses: github/codeql-action/[email protected].6
6161
with:
6262
sarif_file: results.sarif

‎THIRD-PARTY-LICENSES.md‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ github.com/agext/levenshtein|https://github.com/agext/levenshtein/blob/v1.2.3/LI
99
github.com/aliyun/credentials-go|https://github.com/aliyun/credentials-go/blob/v1.3.6/LICENSE|Apache-2.0
1010
github.com/cloudflare/circl|https://github.com/cloudflare/circl/blob/v1.3.9/LICENSE|BSD-3-Clause
1111
github.com/containerd/containerd/api|https://github.com/containerd/containerd/blob/api/v1.7.19/api/LICENSE|Apache-2.0
12-
github.com/containers/image/v5|https://github.com/containers/image/blob/v5.32.1/LICENSE|Apache-2.0
12+
github.com/containers/image/v5|https://github.com/containers/image/blob/v5.32.2/LICENSE|Apache-2.0
1313
github.com/dgryski/go-rendezvous|https://github.com/dgryski/go-rendezvous/blob/9f7001d12a5f/LICENSE|MIT
1414
github.com/docker/go-connections|https://github.com/docker/go-connections/blob/v0.5.0/LICENSE|Apache-2.0
1515
github.com/google/wire|https://github.com/google/wire/blob/v0.6.0/LICENSE|Apache-2.0
@@ -21,7 +21,7 @@ github.com/transparency-dev/merkle|https://github.com/transparency-dev/merkle/bl
2121
github.com/zitadel/oidc/v3|https://github.com/zitadel/oidc/blob/v3.27.0/LICENSE|Apache-2.0
2222
go.opencensus.io|https://github.com/census-instrumentation/opencensus-go/blob/v0.24.0/LICENSE|Apache-2.0
2323
go.opentelemetry.io/otel/sdk|https://github.com/open-telemetry/opentelemetry-go/blob/sdk/v1.28.0/sdk/LICENSE|Apache-2.0
24-
golang.org/x/text|https://cs.opensource.google/go/x/text/+/v0.17.0:LICENSE|BSD-3-Clause
24+
golang.org/x/text|https://cs.opensource.google/go/x/text/+/v0.18.0:LICENSE|BSD-3-Clause
2525
k8s.io/apimachinery|https://github.com/kubernetes/apimachinery/blob/v0.30.3/LICENSE|Apache-2.0
2626
k8s.io/apiserver|https://github.com/kubernetes/apiserver/blob/v0.30.3/LICENSE|Apache-2.0
2727
k8s.io/api|https://github.com/kubernetes/api/blob/v0.30.3/LICENSE|Apache-2.0

‎go.mod‎

Lines changed: 18 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -8,18 +8,18 @@ require (
88
github.com/aquasecurity/trivy v0.53.0
99
github.com/aquasecurity/trivy-db v0.0.0-20231005141211-4fc651f7ac8d
1010
github.com/aws/aws-sdk-go v1.55.5
11-
github.com/aws/aws-sdk-go-v2 v1.30.4
11+
github.com/aws/aws-sdk-go-v2 v1.30.5
1212
github.com/aws/aws-sdk-go-v2/config v1.27.28
13-
github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue v1.14.11
14-
github.com/aws/aws-sdk-go-v2/service/dynamodb v1.34.5
15-
github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.32.5
13+
github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue v1.15.2
14+
github.com/aws/aws-sdk-go-v2/service/dynamodb v1.34.8
15+
github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.32.8
1616
github.com/aws/aws-secretsmanager-caching-go v1.2.0
1717
github.com/aws/smithy-go v1.20.4
1818
github.com/bmatcuk/doublestar/v4 v4.6.1
1919
github.com/briandowns/spinner v1.23.1
2020
github.com/chartmuseum/auth v0.5.0
21-
github.com/containers/common v0.60.1
22-
github.com/containers/image/v5 v5.32.1
21+
github.com/containers/common v0.60.2
22+
github.com/containers/image/v5 v5.32.2
2323
github.com/dchest/siphash v1.2.3
2424
github.com/didip/tollbooth/v7 v7.0.2
2525
github.com/distribution/distribution/v3 v3.0.0-beta.1.0.20240729175644-f0bd0f689923
@@ -38,15 +38,15 @@ require (
3838
github.com/migueleliasweb/go-github-mock v1.0.0
3939
github.com/mitchellh/mapstructure v1.5.0
4040
github.com/nmcclain/ldap v0.0.0-20210720162743-7f8d1e44eeba
41-
github.com/notaryproject/notation-core-go v1.0.3
41+
github.com/notaryproject/notation-core-go v1.1.0
4242
github.com/notaryproject/notation-go v1.1.1
4343
github.com/olekukonko/tablewriter v0.0.5
4444
github.com/opencontainers/distribution-spec/specs-go v0.0.0-20240201174943-0f98d91a0afe
4545
github.com/opencontainers/go-digest v1.0.0
4646
github.com/opencontainers/image-spec v1.1.0
4747
github.com/phayes/freeport v0.0.0-20220201140144-74d24b5ae9f5
4848
github.com/project-zot/mockoidc v0.0.0-20240610203808-d69d9e02020a
49-
github.com/prometheus/client_golang v1.20.1
49+
github.com/prometheus/client_golang v1.20.3
5050
github.com/prometheus/client_model v0.6.1
5151
github.com/rs/zerolog v1.33.0
5252
github.com/sigstore/cosign/v2 v2.4.0
@@ -60,13 +60,13 @@ require (
6060
github.com/vektah/gqlparser/v2 v2.5.16
6161
github.com/zitadel/oidc/v3 v3.27.0
6262
go.etcd.io/bbolt v1.3.10
63-
golang.org/x/crypto v0.26.0
63+
golang.org/x/crypto v0.27.0
6464
golang.org/x/exp v0.0.0-20240719175910-8a7402abbf56
6565
golang.org/x/oauth2 v0.22.0
6666
google.golang.org/protobuf v1.34.2
6767
gopkg.in/resty.v1 v1.12.0
6868
gopkg.in/yaml.v3 v3.0.1
69-
modernc.org/sqlite v1.32.0
69+
modernc.org/sqlite v1.33.0
7070
oras.land/oras-go/v2 v2.5.0
7171
)
7272

@@ -146,16 +146,16 @@ require (
146146
github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect
147147
github.com/aws/aws-sdk-go-v2/credentials v1.17.28 // indirect
148148
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.12 // indirect
149-
github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.16 // indirect
150-
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.16 // indirect
149+
github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.17 // indirect
150+
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.17 // indirect
151151
github.com/aws/aws-sdk-go-v2/internal/ini v1.8.1 // indirect
152-
github.com/aws/aws-sdk-go-v2/service/dynamodbstreams v1.22.4 // indirect
152+
github.com/aws/aws-sdk-go-v2/service/dynamodbstreams v1.22.7 // indirect
153153
github.com/aws/aws-sdk-go-v2/service/ebs v1.25.3 // indirect
154154
github.com/aws/aws-sdk-go-v2/service/ec2 v1.173.0 // indirect
155155
github.com/aws/aws-sdk-go-v2/service/ecr v1.31.0 // indirect
156156
github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.25.3 // indirect
157157
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.11.4 // indirect
158-
github.com/aws/aws-sdk-go-v2/service/internal/endpoint-discovery v1.9.17 // indirect
158+
github.com/aws/aws-sdk-go-v2/service/internal/endpoint-discovery v1.9.18 // indirect
159159
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.11.18 // indirect
160160
github.com/aws/aws-sdk-go-v2/service/s3 v1.58.2 // indirect
161161
github.com/aws/aws-sdk-go-v2/service/sso v1.22.5 // indirect
@@ -352,6 +352,7 @@ require (
352352
github.com/ncruces/go-strftime v0.1.9 // indirect
353353
github.com/nmcclain/asn1-ber v0.0.0-20170104154839-2661553a0484 // indirect
354354
github.com/notaryproject/notation-plugin-framework-go v1.0.0 // indirect
355+
github.com/notaryproject/tspclient-go v0.2.0 // indirect
355356
github.com/nozzle/throttler v0.0.0-20180817012639-2ea982251481 // indirect
356357
github.com/oklog/ulid v1.3.1 // indirect
357358
github.com/oleiade/reflections v1.0.1 // indirect
@@ -470,9 +471,9 @@ require (
470471
golang.org/x/mod v0.20.0 // indirect
471472
golang.org/x/net v0.28.0 // indirect
472473
golang.org/x/sync v0.8.0 // indirect
473-
golang.org/x/sys v0.24.0 // indirect
474-
golang.org/x/term v0.23.0 // indirect
475-
golang.org/x/text v0.17.0 // indirect
474+
golang.org/x/sys v0.25.0 // indirect
475+
golang.org/x/term v0.24.0 // indirect
476+
golang.org/x/text v0.18.0 // indirect
476477
golang.org/x/time v0.5.0 // indirect
477478
golang.org/x/tools v0.24.0 // indirect
478479
golang.org/x/xerrors v0.0.0-20240716161551-93cc26a95ae9 // indirect

0 commit comments

Comments
 (0)