Skip to content

Commit 7a1f250

Browse files
author
Ramkumar Chinchani
committed
chore: fix dependabot alerts
project-zot#2651 project-zot#2652 project-zot#2653 project-zot#2654 project-zot#2655 project-zot#2656 project-zot#2657 project-zot#2658 project-zot#2659 project-zot#2660 Signed-off-by: Ramkumar Chinchani <[email protected]>
1 parent d730811 commit 7a1f250

File tree

7 files changed

+4058
-654
lines changed

7 files changed

+4058
-654
lines changed

‎.github/workflows/codeql-analysis.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -53,7 +53,7 @@ jobs:
5353

5454
# Initializes the CodeQL tools for scanning.
5555
- name: Initialize CodeQL
56-
uses: github/codeql-action/[email protected].6
56+
uses: github/codeql-action/[email protected].7
5757
with:
5858
languages: ${{ matrix.language }}
5959
# If you wish to specify custom queries, you can do so here or in a config file.
@@ -64,7 +64,7 @@ jobs:
6464
# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
6565
# If this step fails, then you should remove it and run the build manually (see below)
6666
- name: Autobuild
67-
uses: github/codeql-action/[email protected].6
67+
uses: github/codeql-action/[email protected].7
6868

6969
# ℹ️ Command-line programs to run using the OS shell.
7070
# 📚 https://git.io/JvXDl
@@ -77,4 +77,4 @@ jobs:
7777
# make release
7878

7979
- name: Perform CodeQL Analysis
80-
uses: github/codeql-action/[email protected].6
80+
uses: github/codeql-action/[email protected].7

‎.github/workflows/publish.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -237,7 +237,7 @@ jobs:
237237
TRIVY_USERNAME: ${{ github.actor }}
238238
TRIVY_PASSWORD: ${{ secrets.GITHUB_TOKEN }}
239239
- name: Upload Trivy scan results to GitHub Security tab
240-
uses: github/codeql-action/[email protected].6
240+
uses: github/codeql-action/[email protected].7
241241
with:
242242
sarif_file: 'trivy-results.sarif'
243243

@@ -274,7 +274,7 @@ jobs:
274274
TRIVY_USERNAME: ${{ github.actor }}
275275
TRIVY_PASSWORD: ${{ secrets.GITHUB_TOKEN }}
276276
- name: Upload Trivy scan results to GitHub Security tab
277-
uses: github/codeql-action/[email protected].6
277+
uses: github/codeql-action/[email protected].7
278278
with:
279279
sarif_file: 'trivy-results.sarif'
280280

‎.github/workflows/scorecards.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -57,6 +57,6 @@ jobs:
5757

5858
# Upload the results to GitHub's code scanning dashboard.
5959
- name: "Upload to code-scanning"
60-
uses: github/codeql-action/[email protected].6
60+
uses: github/codeql-action/[email protected].7
6161
with:
6262
sarif_file: results.sarif

‎go.mod‎

Lines changed: 27 additions & 22 deletions
Original file line numberDiff line numberDiff line change
@@ -1,15 +1,17 @@
11
module zotregistry.dev/zot
22

3-
go 1.22.5
3+
go 1.23
4+
5+
toolchain go1.23.1
46

57
require (
6-
github.com/99designs/gqlgen v0.17.49
8+
github.com/99designs/gqlgen v0.17.51
79
github.com/Masterminds/semver v1.5.0
810
github.com/aquasecurity/trivy v0.53.0
911
github.com/aquasecurity/trivy-db v0.0.0-20231005141211-4fc651f7ac8d
1012
github.com/aws/aws-sdk-go v1.55.5
1113
github.com/aws/aws-sdk-go-v2 v1.30.5
12-
github.com/aws/aws-sdk-go-v2/config v1.27.28
14+
github.com/aws/aws-sdk-go-v2/config v1.27.33
1315
github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue v1.15.3
1416
github.com/aws/aws-sdk-go-v2/service/dynamodb v1.34.9
1517
github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.32.8
@@ -32,14 +34,14 @@ require (
3234
github.com/google/uuid v1.6.0
3335
github.com/gorilla/mux v1.8.2-0.20240619235004-db9d1d0073d2
3436
github.com/gorilla/securecookie v1.1.2
35-
github.com/gorilla/sessions v1.3.0
37+
github.com/gorilla/sessions v1.4.0
3638
github.com/hashicorp/golang-lru/v2 v2.0.7
3739
github.com/json-iterator/go v1.1.12
38-
github.com/migueleliasweb/go-github-mock v1.0.0
40+
github.com/migueleliasweb/go-github-mock v1.0.1
3941
github.com/mitchellh/mapstructure v1.5.0
4042
github.com/nmcclain/ldap v0.0.0-20210720162743-7f8d1e44eeba
4143
github.com/notaryproject/notation-core-go v1.1.0
42-
github.com/notaryproject/notation-go v1.1.1
44+
github.com/notaryproject/notation-go v1.2.1
4345
github.com/olekukonko/tablewriter v0.0.5
4446
github.com/opencontainers/distribution-spec/specs-go v0.0.0-20240201174943-0f98d91a0afe
4547
github.com/opencontainers/go-digest v1.0.0
@@ -58,15 +60,15 @@ require (
5860
github.com/swaggo/http-swagger v1.3.4
5961
github.com/swaggo/swag v1.16.3
6062
github.com/vektah/gqlparser/v2 v2.5.16
61-
github.com/zitadel/oidc/v3 v3.27.0
62-
go.etcd.io/bbolt v1.3.10
63+
github.com/zitadel/oidc/v3 v3.29.1
64+
go.etcd.io/bbolt v1.3.11
6365
golang.org/x/crypto v0.27.0
6466
golang.org/x/exp v0.0.0-20240719175910-8a7402abbf56
65-
golang.org/x/oauth2 v0.22.0
67+
golang.org/x/oauth2 v0.23.0
6668
google.golang.org/protobuf v1.34.2
6769
gopkg.in/resty.v1 v1.12.0
6870
gopkg.in/yaml.v3 v3.0.1
69-
modernc.org/sqlite v1.33.0
71+
modernc.org/sqlite v1.33.1
7072
oras.land/oras-go/v2 v2.5.0
7173
)
7274

@@ -144,8 +146,8 @@ require (
144146
github.com/aquasecurity/trivy-checks v0.13.0 // indirect
145147
github.com/aquasecurity/trivy-java-db v0.0.0-20240109071736-184bd7481d48 // indirect
146148
github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect
147-
github.com/aws/aws-sdk-go-v2/credentials v1.17.28 // indirect
148-
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.12 // indirect
149+
github.com/aws/aws-sdk-go-v2/credentials v1.17.32 // indirect
150+
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.13 // indirect
149151
github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.17 // indirect
150152
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.17 // indirect
151153
github.com/aws/aws-sdk-go-v2/internal/ini v1.8.1 // indirect
@@ -156,11 +158,11 @@ require (
156158
github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.25.3 // indirect
157159
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.11.4 // indirect
158160
github.com/aws/aws-sdk-go-v2/service/internal/endpoint-discovery v1.9.18 // indirect
159-
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.11.18 // indirect
161+
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.11.19 // indirect
160162
github.com/aws/aws-sdk-go-v2/service/s3 v1.58.2 // indirect
161-
github.com/aws/aws-sdk-go-v2/service/sso v1.22.5 // indirect
162-
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.26.5 // indirect
163-
github.com/aws/aws-sdk-go-v2/service/sts v1.30.4 // indirect
163+
github.com/aws/aws-sdk-go-v2/service/sso v1.22.7 // indirect
164+
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.26.7 // indirect
165+
github.com/aws/aws-sdk-go-v2/service/sts v1.30.7 // indirect
164166
github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.0.0-20240730143543-a8d7d3c42ca1 // indirect
165167
github.com/beorn7/perks v1.0.1 // indirect
166168
github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d // indirect
@@ -221,6 +223,7 @@ require (
221223
github.com/exponent-io/jsonpath v0.0.0-20210407135951-1de76d718b3f // indirect
222224
github.com/fatih/color v1.17.0 // indirect
223225
github.com/felixge/httpsnoop v1.0.4 // indirect
226+
github.com/fxamacker/cbor/v2 v2.7.0 // indirect
224227
github.com/go-asn1-ber/asn1-ber v1.5.7 // indirect
225228
github.com/go-chi/chi v4.1.2+incompatible // indirect
226229
github.com/go-errors/errors v1.5.1 // indirect
@@ -259,7 +262,7 @@ require (
259262
github.com/google/gnostic-models v0.6.9-0.20230804172637-c7be7c783f49 // indirect
260263
github.com/google/go-cmp v0.6.0 // indirect
261264
github.com/google/go-github/v55 v55.0.0 // indirect
262-
github.com/google/go-github/v61 v61.0.0 // indirect
265+
github.com/google/go-github/v64 v64.0.0 // indirect
263266
github.com/google/go-querystring v1.1.0 // indirect
264267
github.com/google/gofuzz v1.2.0 // indirect
265268
github.com/google/licenseclassifier/v2 v2.0.0 // indirect
@@ -423,9 +426,11 @@ require (
423426
github.com/transparency-dev/merkle v0.0.2 // indirect
424427
github.com/twitchtv/twirp v8.1.3+incompatible // indirect
425428
github.com/ulikunitz/xz v0.5.12 // indirect
426-
github.com/urfave/cli/v2 v2.27.3 // indirect
429+
github.com/urfave/cli/v2 v2.27.4 // indirect
427430
github.com/vbatts/tar-split v0.11.5 // indirect
428431
github.com/vbauerster/mpb/v8 v8.7.5 // indirect
432+
github.com/veraison/go-cose v1.2.1 // indirect
433+
github.com/x448/float16 v0.8.4 // indirect
429434
github.com/xanzy/go-gitlab v0.107.0 // indirect
430435
github.com/xanzy/ssh-agent v0.3.3 // indirect
431436
github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb // indirect
@@ -446,7 +451,7 @@ require (
446451
go.opentelemetry.io/contrib/exporters/autoexport v0.53.0 // indirect
447452
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.53.0 // indirect
448453
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.53.0 // indirect
449-
go.opentelemetry.io/otel v1.28.0 // indirect
454+
go.opentelemetry.io/otel v1.29.0 // indirect
450455
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp v0.4.0 // indirect
451456
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.28.0 // indirect
452457
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.28.0 // indirect
@@ -458,18 +463,18 @@ require (
458463
go.opentelemetry.io/otel/exporters/stdout/stdoutmetric v1.28.0 // indirect
459464
go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.28.0 // indirect
460465
go.opentelemetry.io/otel/log v0.4.0 // indirect
461-
go.opentelemetry.io/otel/metric v1.28.0 // indirect
466+
go.opentelemetry.io/otel/metric v1.29.0 // indirect
462467
go.opentelemetry.io/otel/sdk v1.28.0 // indirect
463468
go.opentelemetry.io/otel/sdk/log v0.4.0 // indirect
464469
go.opentelemetry.io/otel/sdk/metric v1.28.0 // indirect
465-
go.opentelemetry.io/otel/trace v1.28.0 // indirect
470+
go.opentelemetry.io/otel/trace v1.29.0 // indirect
466471
go.opentelemetry.io/proto/otlp v1.3.1 // indirect
467472
go.starlark.net v0.0.0-20240725214946-42030a7cedce // indirect
468473
go.step.sm/crypto v0.51.1 // indirect
469474
go.uber.org/multierr v1.11.0 // indirect
470475
go.uber.org/zap v1.27.0 // indirect
471476
golang.org/x/mod v0.20.0 // indirect
472-
golang.org/x/net v0.28.0 // indirect
477+
golang.org/x/net v0.29.0 // indirect
473478
golang.org/x/sync v0.8.0 // indirect
474479
golang.org/x/sys v0.25.0 // indirect
475480
golang.org/x/term v0.24.0 // indirect

0 commit comments

Comments
 (0)