@@ -19,9 +19,9 @@ require (
1919 cloud.google.com/go/auth v0.20.0 // indirect
2020 cloud.google.com/go/auth/oauth2adapt v0.2.8 // indirect
2121 cloud.google.com/go/compute/metadata v0.9.0 // indirect
22- cloud.google.com/go/iam v1.7 .0 // indirect
23- cloud.google.com/go/monitoring v1.24.3 // indirect
24- cloud.google.com/go/storage v1.62.0 // indirect
22+ cloud.google.com/go/iam v1.11 .0 // indirect
23+ cloud.google.com/go/monitoring v1.25.0 // indirect
24+ cloud.google.com/go/storage v1.62.2 // indirect
2525 cyphar.com/go-pathrs v0.2.1 // indirect
2626 dario.cat/mergo v1.0.2 // indirect
2727 deps.dev/api/v3 v3.0.0-20251219105704-58e32bc05c71 // indirect
@@ -112,7 +112,6 @@ require (
112112 github.com/containerd/fifo v1.1.0 // indirect
113113 github.com/containerd/log v0.1.0 // indirect
114114 github.com/containerd/platforms v1.0.0-rc.2 // indirect
115- github.com/containerd/stargz-snapshotter/estargz v0.18.2 // indirect
116115 github.com/containerd/ttrpc v1.2.7 // indirect
117116 github.com/containerd/typeurl/v2 v2.2.3 // indirect
118117 github.com/coreos/go-oidc/v3 v3.18.0 // indirect
@@ -126,10 +125,10 @@ require (
126125 github.com/diskfs/go-diskfs v1.7.0 // indirect
127126 github.com/distribution/reference v0.6.0 // indirect
128127 github.com/djherbis/times v1.6.0 // indirect
129- github.com/docker/cli v29.4.0 +incompatible // indirect
128+ github.com/docker/cli v29.4.3 +incompatible // indirect
130129 github.com/docker/docker v28.5.2+incompatible // indirect
131130 github.com/docker/docker-credential-helpers v0.9.5 // indirect
132- github.com/docker/go-connections v0.6 .0 // indirect
131+ github.com/docker/go-connections v0.7 .0 // indirect
133132 github.com/docker/go-events v0.0.0-20250114142523-c867878c5e32 // indirect
134133 github.com/docker/go-units v0.5.0 // indirect
135134 github.com/dsoprea/go-exfat v0.0.0-20190906070738-5e932fbdb589 // indirect
@@ -146,7 +145,7 @@ require (
146145 github.com/felixge/httpsnoop v1.0.4 // indirect
147146 github.com/fsnotify/fsnotify v1.10.1 // indirect
148147 github.com/fxamacker/cbor/v2 v2.9.0 // indirect
149- github.com/go-chi/chi/v5 v5.2.5 // indirect
148+ github.com/go-chi/chi/v5 v5.3.0 // indirect
150149 github.com/go-errors/errors v1.0.2 // indirect
151150 github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect
152151 github.com/go-git/go-billy/v5 v5.9.0 // indirect
@@ -155,14 +154,15 @@ require (
155154 github.com/go-logr/logr v1.4.3 // indirect
156155 github.com/go-logr/stdr v1.2.2 // indirect
157156 github.com/go-ole/go-ole v1.3.0 // indirect
158- github.com/go-openapi/analysis v0.25.0 // indirect
157+ github.com/go-openapi/analysis v0.25.2 // indirect
159158 github.com/go-openapi/errors v0.22.7 // indirect
160- github.com/go-openapi/jsonpointer v0.22.5 // indirect
161- github.com/go-openapi/jsonreference v0.21.5 // indirect
159+ github.com/go-openapi/jsonpointer v0.23.1 // indirect
160+ github.com/go-openapi/jsonreference v0.21.6 // indirect
162161 github.com/go-openapi/loads v0.23.3 // indirect
163- github.com/go-openapi/runtime v0.29.4 // indirect
164- github.com/go-openapi/spec v0.22.4 // indirect
165- github.com/go-openapi/strfmt v0.26.2 // indirect
162+ github.com/go-openapi/runtime v0.32.3 // indirect
163+ github.com/go-openapi/runtime/server-middleware v0.30.0 // indirect
164+ github.com/go-openapi/spec v0.22.5 // indirect
165+ github.com/go-openapi/strfmt v0.26.3 // indirect
166166 github.com/go-openapi/swag v0.26.0 // indirect
167167 github.com/go-openapi/swag/cmdutils v0.26.0 // indirect
168168 github.com/go-openapi/swag/conv v0.26.0 // indirect
@@ -175,7 +175,7 @@ require (
175175 github.com/go-openapi/swag/stringutils v0.26.0 // indirect
176176 github.com/go-openapi/swag/typeutils v0.26.0 // indirect
177177 github.com/go-openapi/swag/yamlutils v0.26.0 // indirect
178- github.com/go-openapi/validate v0.25.2 // indirect
178+ github.com/go-openapi/validate v0.25.3 // indirect
179179 github.com/go-piv/piv-go/v2 v2.6.0 // indirect
180180 github.com/go-restruct/restruct v1.2.0-alpha // indirect
181181 github.com/go-viper/mapstructure/v2 v2.5.0 // indirect
@@ -187,7 +187,7 @@ require (
187187 github.com/golang/snappy v0.0.4 // indirect
188188 github.com/google/certificate-transparency-go v1.3.3 // indirect
189189 github.com/google/gnostic-models v0.7.0 // indirect
190- github.com/google/go-containerregistry v0.21.5 // indirect
190+ github.com/google/go-containerregistry v0.21.6 // indirect
191191 github.com/google/go-github/v73 v73.0.0 // indirect
192192 github.com/google/go-github/v75 v75.0.0 // indirect
193193 github.com/google/go-github/v82 v82.0.0 // indirect
@@ -205,17 +205,17 @@ require (
205205 github.com/hashicorp/go-retryablehttp v0.7.8 // indirect
206206 github.com/hmarr/codeowners v1.2.1 // indirect
207207 github.com/ianlancetaylor/demangle v0.0.0-20251118225945-96ee0021ea0f // indirect
208- github.com/in-toto/attestation v1.1.2 // indirect
208+ github.com/in-toto/attestation v1.2.0 // indirect
209209 github.com/in-toto/in-toto-golang v0.11.0 // indirect
210210 github.com/inconshreveable/mousetrap v1.1.0 // indirect
211211 github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect
212212 github.com/jedib0t/go-pretty/v6 v6.7.8 // indirect
213213 github.com/jedisct1/go-minisign v0.0.0-20230811132847-661be99b8267 // indirect
214214 github.com/json-iterator/go v1.1.12 // indirect
215215 github.com/kevinburke/ssh_config v1.2.0 // indirect
216- github.com/klauspost/compress v1.18.5 // indirect
216+ github.com/klauspost/compress v1.18.6 // indirect
217217 github.com/klauspost/cpuid/v2 v2.3.0 // indirect
218- github.com/letsencrypt/boulder v0.20260223 .0 // indirect
218+ github.com/letsencrypt/boulder v0.20260309 .0 // indirect
219219 github.com/lunixbochs/struc v0.0.0-20200707160740-784aaebc1d40 // indirect
220220 github.com/masahiro331/go-ext4-filesystem v0.0.0-20240620024024-ca14e6327bbd // indirect
221221 github.com/mattn/go-colorable v0.1.14 // indirect
@@ -282,10 +282,10 @@ require (
282282 github.com/sigstore/fulcio v1.8.6 // indirect
283283 github.com/sigstore/protobuf-specs v0.5.1 // indirect
284284 github.com/sigstore/rekor v1.5.2 // indirect
285- github.com/sigstore/rekor-tiles/v2 v2.0.1 // indirect
286- github.com/sigstore/sigstore v1.10.6 // indirect
287- github.com/sigstore/sigstore-go v1.1.4 // indirect
288- github.com/sigstore/timestamp-authority/v2 v2.0.6 // indirect
285+ github.com/sigstore/rekor-tiles/v2 v2.2.2-0.20260601073857-5d098a2b6443 // indirect
286+ github.com/sigstore/sigstore v1.10.8 // indirect
287+ github.com/sigstore/sigstore-go v1.2.0 // indirect
288+ github.com/sigstore/timestamp-authority/v2 v2.1.2 // indirect
289289 github.com/sirupsen/logrus v1.9.4 // indirect
290290 github.com/skeema/knownhosts v1.3.1 // indirect
291291 github.com/sourcegraph/conc v0.3.1-0.20240121214520-5f936abd7ae8 // indirect
@@ -300,7 +300,7 @@ require (
300300 github.com/syndtr/goleveldb v1.0.1-0.20220721030215-126854af5e6d // indirect
301301 github.com/thales-e-security/pool v0.0.2 // indirect
302302 github.com/theupdateframework/go-tuf v0.7.0 // indirect
303- github.com/theupdateframework/go-tuf/v2 v2.4.1 // indirect
303+ github.com/theupdateframework/go-tuf/v2 v2.4.2-0.20260407074541-7e8f69f906ef // indirect
304304 github.com/thoas/go-funk v0.9.3 // indirect
305305 github.com/tidwall/gjson v1.18.0 // indirect
306306 github.com/tidwall/jsonc v0.3.2 // indirect
@@ -312,16 +312,16 @@ require (
312312 github.com/tklauser/go-sysconf v0.3.15 // indirect
313313 github.com/tklauser/numcpus v0.10.0 // indirect
314314 github.com/tonistiigi/go-csvvalue v0.0.0-20240814133006-030d3b2625d0 // indirect
315- github.com/transparency-dev/formats v0.0.0-20251017110053-404c0d5b696c // indirect
315+ github.com/transparency-dev/formats v0.1.1 // indirect
316316 github.com/transparency-dev/merkle v0.0.2 // indirect
317317 github.com/ulikunitz/xz v0.5.15 // indirect
318- github.com/vbatts/tar-split v0.12.2 // indirect
319318 github.com/x448/float16 v0.8.4 // indirect
320319 github.com/xanzy/ssh-agent v0.3.3 // indirect
321320 github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb // indirect
322321 github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 // indirect
323322 github.com/xeipuuv/gojsonschema v1.2.0 // indirect
324323 github.com/xhit/go-str2duration/v2 v2.1.0 // indirect
324+ github.com/youmark/pkcs8 v0.0.0-20240726163527-a2c0da244d78 // indirect
325325 github.com/yusufpapurcu/wmi v1.2.4 // indirect
326326 gitlab.com/gitlab-org/api/client-go v1.41.0 // indirect
327327 go.etcd.io/bbolt v1.4.3 // indirect
@@ -330,11 +330,11 @@ require (
330330 go.opentelemetry.io/contrib/detectors/gcp v1.42.0 // indirect
331331 go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.67.0 // indirect
332332 go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.67.0 // indirect
333- go.opentelemetry.io/otel v1.43 .0 // indirect
334- go.opentelemetry.io/otel/metric v1.43 .0 // indirect
335- go.opentelemetry.io/otel/sdk v1.43 .0 // indirect
336- go.opentelemetry.io/otel/sdk/metric v1.43 .0 // indirect
337- go.opentelemetry.io/otel/trace v1.43 .0 // indirect
333+ go.opentelemetry.io/otel v1.44 .0 // indirect
334+ go.opentelemetry.io/otel/metric v1.44 .0 // indirect
335+ go.opentelemetry.io/otel/sdk v1.44 .0 // indirect
336+ go.opentelemetry.io/otel/sdk/metric v1.44 .0 // indirect
337+ go.opentelemetry.io/otel/trace v1.44 .0 // indirect
338338 go.uber.org/multierr v1.11.0 // indirect
339339 go.uber.org/zap v1.28.0 // indirect
340340 go.yaml.in/yaml/v2 v2.4.4 // indirect
@@ -356,8 +356,8 @@ require (
356356 golang.org/x/xerrors v0.0.0-20240903120638-7835f813f4da // indirect
357357 google.golang.org/api v0.280.0 // indirect
358358 google.golang.org/genproto v0.0.0-20260319201613-d00831a3d3e7 // indirect
359- google.golang.org/genproto/googleapis/api v0.0.0-20260414002931-afd174a4e478 // indirect
360- google.golang.org/genproto/googleapis/rpc v0.0.0-20260511170946-3700d4141b60 // indirect
359+ google.golang.org/genproto/googleapis/api v0.0.0-20260526163538-3dc84a4a5aaa // indirect
360+ google.golang.org/genproto/googleapis/rpc v0.0.0-20260523011958-0a33c5d7ca68 // indirect
361361 google.golang.org/grpc v1.81.1 // indirect
362362 google.golang.org/protobuf v1.36.11 // indirect
363363 gopkg.in/evanphx/json-patch.v4 v4.12.0 // indirect
0 commit comments