diff --git a/THIRD-PARTY-NOTICES.md b/THIRD-PARTY-NOTICES.md index 28276c11..856bfb69 100644 --- a/THIRD-PARTY-NOTICES.md +++ b/THIRD-PARTY-NOTICES.md @@ -3077,11 +3077,11 @@ The Go-derived source headers below also use the complete [Go BSD license](#upda - `x509/root_darwin_armx.go (lines 3-5)`: [license text 1c830a763cea](#updater-text-1c830a763cea) Applies to: `x509/root_darwin_armx.go`, `x509/root_linux.go`. -### github.com/google/go-containerregistry v0.21.7 +### github.com/google/go-containerregistry v0.22.1 License: Apache-2.0 -Source: https://proxy.golang.org/github.com/google/go-containerregistry/@v/v0.21.7.zip +Source: https://proxy.golang.org/github.com/google/go-containerregistry/@v/v0.22.1.zip - `LICENSE`: [license text 58d1e17ffe51](#updater-text-58d1e17ffe51) @@ -3148,11 +3148,11 @@ Source: https://proxy.golang.org/github.com/pkg/errors/@v/v0.9.1.zip - `LICENSE`: [license text 8d427fd87bc9](#updater-text-8d427fd87bc9) -### github.com/secure-systems-lab/go-securesystemslib v0.11.0 +### github.com/secure-systems-lab/go-securesystemslib v0.11.1 License: MIT -Source: https://proxy.golang.org/github.com/secure-systems-lab/go-securesystemslib/@v/v0.11.0.zip +Source: https://proxy.golang.org/github.com/secure-systems-lab/go-securesystemslib/@v/v0.11.1.zip - `LICENSE`: [license text cb64503e4772](#updater-text-cb64503e4772) @@ -3170,11 +3170,11 @@ The matcher in `gitignore.go` closely matches Python pathspec 0.2.2 at revision - `scripts/updaternotices/licenses/cpython-LICENSE`: [license text be4ab0448730](#updater-text-be4ab0448730) Original source: https://github.com/python/cpython/blob/v2.7.6/LICENSE -### github.com/sigstore/protobuf-specs v0.5.1 +### github.com/sigstore/protobuf-specs v0.5.2 License: Apache-2.0 -Source: https://proxy.golang.org/github.com/sigstore/protobuf-specs/@v/v0.5.1.zip +Source: https://proxy.golang.org/github.com/sigstore/protobuf-specs/@v/v0.5.2.zip - `COPYRIGHT.txt`: [license text 193753bc913f](#updater-text-193753bc913f) - `LICENSE`: [license text cfc7749b96f6](#updater-text-cfc7749b96f6) @@ -3197,11 +3197,11 @@ Source: https://proxy.golang.org/github.com/sigstore/rekor-tiles/v2/@v/v2.3.0.zi - `COPYRIGHT.txt`: [license text 9daa76e002ba](#updater-text-9daa76e002ba) - `LICENSE`: [license text c71d239df917](#updater-text-c71d239df917) -### github.com/sigstore/sigstore v1.10.9 +### github.com/sigstore/sigstore v1.10.10 License: Apache-2.0 -Source: https://proxy.golang.org/github.com/sigstore/sigstore/@v/v1.10.9.zip +Source: https://proxy.golang.org/github.com/sigstore/sigstore/@v/v1.10.10.zip - `COPYRIGHT.txt`: [license text 6622d1d495e7](#updater-text-6622d1d495e7) - `LICENSE`: [license text cfc7749b96f6](#updater-text-cfc7749b96f6) diff --git a/go.mod b/go.mod index fd97d6f7..dbde64e0 100644 --- a/go.mod +++ b/go.mod @@ -10,7 +10,7 @@ require ( github.com/fyne-io/oksvg v0.2.0 github.com/gen2brain/avif v0.6.0 github.com/nozzle/umap v0.0.0-20260130174432-f6085fb2514d - github.com/sigstore/sigstore v1.10.9 + github.com/sigstore/sigstore v1.10.10 github.com/sigstore/sigstore-go v1.3.0 github.com/srwiley/rasterx v0.0.0-20220730225603-2ab79fcdd4ef github.com/stretchr/testify v1.12.1 @@ -71,7 +71,7 @@ require ( github.com/go-viper/mapstructure/v2 v2.5.0 // indirect github.com/godbus/dbus/v5 v5.2.2 // indirect github.com/google/certificate-transparency-go v1.3.3 // indirect - github.com/google/go-containerregistry v0.21.7 // indirect + github.com/google/go-containerregistry v0.22.1 // indirect github.com/google/uuid v1.6.0 // indirect github.com/grpc-ecosystem/grpc-gateway/v2 v2.29.0 // indirect github.com/hack-pad/go-indexeddb v0.3.2 // indirect @@ -87,9 +87,9 @@ require ( github.com/opencontainers/go-digest v1.0.0 // indirect github.com/pkg/errors v0.9.1 // indirect github.com/rymdport/portal v0.4.2 // indirect - github.com/secure-systems-lab/go-securesystemslib v0.11.0 // indirect + github.com/secure-systems-lab/go-securesystemslib v0.11.1 // indirect github.com/shibumi/go-pathspec v1.3.0 // indirect - github.com/sigstore/protobuf-specs v0.5.1 // indirect + github.com/sigstore/protobuf-specs v0.5.2 // indirect github.com/sigstore/rekor v1.5.4 // indirect github.com/sigstore/rekor-tiles/v2 v2.3.0 // indirect github.com/sigstore/timestamp-authority/v2 v2.1.3 // indirect diff --git a/go.sum b/go.sum index 6baaf9e5..0a1e5c9b 100644 --- a/go.sum +++ b/go.sum @@ -127,8 +127,8 @@ github.com/go-gl/gl v0.0.0-20260331235117-4566fea9a276 h1:IO5P06Pcj9K04d+l4nrf3c github.com/go-gl/gl v0.0.0-20260331235117-4566fea9a276/go.mod h1:9YTyiznxEY1fVinfM7RvRcjRHbw2xLBJ3AAGIT0I4Nw= github.com/go-gl/glfw/v3.4/glfw v0.1.0-pre.1.0.20260707082822-2a407d02d01a h1:HWK0MBggT/T6YH7VffE10xBIhqeTq8JzIUPJXrRy87g= github.com/go-gl/glfw/v3.4/glfw v0.1.0-pre.1.0.20260707082822-2a407d02d01a/go.mod h1:T5Dn0JwIJOX1euPZ/iT4tq6nFYtmukjcYa7937HuYK8= -github.com/go-jose/go-jose/v4 v4.1.4 h1:moDMcTHmvE6Groj34emNPLs/qtYXRVcd6S7NHbHz3kA= -github.com/go-jose/go-jose/v4 v4.1.4/go.mod h1:x4oUasVrzR7071A4TnHLGSPpNOm2a21K9Kf04k1rs08= +github.com/go-jose/go-jose/v4 v4.1.5 h1:RjgjO2LOtWOJKUC5wpwY9LR3B3vwVAz6JS2YHfYU6eA= +github.com/go-jose/go-jose/v4 v4.1.5/go.mod h1:x4oUasVrzR7071A4TnHLGSPpNOm2a21K9Kf04k1rs08= github.com/go-logr/logr v1.2.2/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A= github.com/go-logr/logr v1.4.4 h1:tG4xh9yMsRCAiodLVTxyrkzSZ9+o0L1Kg/+cPVcbP/8= github.com/go-logr/logr v1.4.4/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY= @@ -201,8 +201,8 @@ github.com/google/go-cmdtest v0.4.1-0.20220921163831-55ab3332a786 h1:rcv+Ippz6RA github.com/google/go-cmdtest v0.4.1-0.20220921163831-55ab3332a786/go.mod h1:apVn/GCasLZUVpAJ6oWAuyP7Ne7CEsQbTnc0plM3m+o= github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8= github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU= -github.com/google/go-containerregistry v0.21.7 h1:/vPFuVXDjtFREsVArW+0h1CIl5urnOhzei4X2DMW9IU= -github.com/google/go-containerregistry v0.21.7/go.mod h1:kjSbt7/zMsKLWfnHrIvKvhXHUw91jbe9DNjPPJ32gXE= +github.com/google/go-containerregistry v0.22.1 h1:RZuuSYhTvlDvtsK+NkutoCZ//C0X2ebLK8X8l3ULs84= +github.com/google/go-containerregistry v0.22.1/go.mod h1:bJR35SK8XgisYmhg/FMQ/5RK0S/XrOAqLBV5/LR2XE0= github.com/google/pprof v0.0.0-20260402051712-545e8a4df936 h1:EwtI+Al+DeppwYX2oXJCETMO23COyaKGP6fHVpkpWpg= github.com/google/pprof v0.0.0-20260402051712-545e8a4df936/go.mod h1:MxpfABSjhmINe3F1It9d+8exIHFvUqtLIRCdOGNXqiI= github.com/google/renameio v0.1.0 h1:GOZbcHa3HfsPKPlmyPyN2KEohoMXOhdMbHrvbpl2QaA= @@ -296,20 +296,20 @@ github.com/rymdport/portal v0.4.2/go.mod h1:kFF4jslnJ8pD5uCi17brj/ODlfIidOxlgUDT github.com/sassoftware/relic v7.2.1+incompatible h1:Pwyh1F3I0r4clFJXkSI8bOyJINGqpgjJU3DYAZeI05A= github.com/sassoftware/relic/v8 v8.2.0 h1:9/L4S4I6an/JsPNhmcTpqfiOIsLb/iJaePZD1xR+ulE= github.com/sassoftware/relic/v8 v8.2.0/go.mod h1:pZy7hLT9WCOKPonV8G/fplvtBLOZd6/kWtKqeHR6nKc= -github.com/secure-systems-lab/go-securesystemslib v0.11.0 h1:iuCR9kcMFD4QurdKrGvPLoKZLv9YvwPYVr0473BdtFs= -github.com/secure-systems-lab/go-securesystemslib v0.11.0/go.mod h1:+PMOTjUGwHj2vcZ+TFKlb1tXRbrdWE1LYDT5i9JC80Q= +github.com/secure-systems-lab/go-securesystemslib v0.11.1 h1:ayahDPjfSIqKegyt5YVGEvQ7SAi72GHXTy+b2YjUd5w= +github.com/secure-systems-lab/go-securesystemslib v0.11.1/go.mod h1:UyOjhoZLi76ir63u1ptubEevVe6dlNPmNxwgVvKqFFY= github.com/sergi/go-diff v1.4.0 h1:n/SP9D5ad1fORl+llWyN+D6qoUETXNZARKjyY2/KVCw= github.com/sergi/go-diff v1.4.0/go.mod h1:A0bzQcvG0E7Rwjx0REVgAGH58e96+X0MeOfepqsbeW4= github.com/shibumi/go-pathspec v1.3.0 h1:QUyMZhFo0Md5B8zV8x2tesohbb5kfbpTi9rBnKh5dkI= github.com/shibumi/go-pathspec v1.3.0/go.mod h1:Xutfslp817l2I1cZvgcfeMQJG5QnU2lh5tVaaMCl3jE= -github.com/sigstore/protobuf-specs v0.5.1 h1:/5OPaNuolRJmQfeZLayJGFXMpsRJEdgC6ah1/+7Px7U= -github.com/sigstore/protobuf-specs v0.5.1/go.mod h1:DRBzpFuE+LnvQMN10/dU6nBeKwVLGEQ6o2FovN2Rats= +github.com/sigstore/protobuf-specs v0.5.2 h1:RSWWUY8QrVTxbYH00jY/jg2e7YnjzrpwP+PeHTMll0E= +github.com/sigstore/protobuf-specs v0.5.2/go.mod h1:DRBzpFuE+LnvQMN10/dU6nBeKwVLGEQ6o2FovN2Rats= github.com/sigstore/rekor v1.5.4 h1:A9zITTrkRwO+8lfq7L/gBR7rDHHcBQJRI+a0JQo4xDM= github.com/sigstore/rekor v1.5.4/go.mod h1:0bcUHhZPlG+RVW1dI/7sdBp0MiVWVzk9h0tgOH/o0Yc= github.com/sigstore/rekor-tiles/v2 v2.3.0 h1:HhMgH61UP0t899V8Fjt7pz1YdgOBptbaQdnCF+79cdc= github.com/sigstore/rekor-tiles/v2 v2.3.0/go.mod h1:DEFiKSyQ4nF75QRVNdOPaIH3cmvMkO2B6xDZjNYngPc= -github.com/sigstore/sigstore v1.10.9 h1:7Dcpt+ibnltHQZ8XhaU0dFmhHaf/T491eJfA9WDex4Y= -github.com/sigstore/sigstore v1.10.9/go.mod h1:LYW9+qH7bK8wZmLm6lPxIC5lkHtkJDCgkqjChzTAIBs= +github.com/sigstore/sigstore v1.10.10 h1:0hfpqcl1+UnzxuVT4//PzL3LQ8uOCzoF90Ofs5zzBwM= +github.com/sigstore/sigstore v1.10.10/go.mod h1:Q8tpy2X80KVswawYR0eTjWl3gM3AU+ak+h/NtPzRfWs= github.com/sigstore/sigstore-go v1.3.0 h1:hnIMHREyCNTYFtOE1o7ae3Axa9B5W5EjUSBJICP2NBE= github.com/sigstore/sigstore-go v1.3.0/go.mod h1:AyRQXfpH89py1twjE3kEZxlRersng90GSYqQV9zGJE8= github.com/sigstore/sigstore/pkg/signature/kms/aws v1.10.9 h1:2NWAU/utJRwzy1OrQurlY3wlDSynyH1rNJS5GgFchrg= @@ -344,8 +344,8 @@ github.com/tink-crypto/tink-go-gcpkms/v2 v2.4.0 h1:xpI5pnEQ0erFCS3JmcEl7Blluo8Zi github.com/tink-crypto/tink-go-gcpkms/v2 v2.4.0/go.mod h1:wDDAhjfd1t4TjeJCSsmFK7CARPUs/ITi16ZZ8kmAaFQ= github.com/tink-crypto/tink-go-hcvault/v2 v2.5.0 h1:eXuNqgrcYelxU1MVikOJDP3wTS5lvihM4ntoAbAMfvs= github.com/tink-crypto/tink-go-hcvault/v2 v2.5.0/go.mod h1:3RhcxAqek6xUlRFmJifvU4CYLZN60KMQdIKqpZAZJG0= -github.com/tink-crypto/tink-go/v2 v2.7.0 h1:k7QnUXJ1cRDpvoy/5l1FimZqMAArRff8vjUqzi5N04o= -github.com/tink-crypto/tink-go/v2 v2.7.0/go.mod h1:cWNpQ/yAT/QHzAV0kBGMOSJzzYTKofDZdJaUqOPPWCI= +github.com/tink-crypto/tink-go/v2 v2.8.0 h1:1zODq1bZDqOQdNPjhvwGYLDw9On7mDWPnQf+4xXlpAc= +github.com/tink-crypto/tink-go/v2 v2.8.0/go.mod h1:aNXZeyxjQU9iqAeARRNmbESXUW6Mao1HRCCTY8B1TFM= github.com/transparency-dev/formats v0.1.1 h1:4bVHJc+KdBgpA1OJD1yjI+g0i5Z1graCppTMH8lWKJI= github.com/transparency-dev/formats v0.1.1/go.mod h1:qtZ8goRuJ8FTBG9c9+Bj0rn2rUG7eG/AUTkr+Aw3jFw= github.com/transparency-dev/merkle v0.0.2 h1:Q9nBoQcZcgPamMkGn7ghV8XiTZ/kRxn1yCG81+twTK4= diff --git a/scripts/updaternotices/manifest.json b/scripts/updaternotices/manifest.json index d50f6657..b99a3258 100644 --- a/scripts/updaternotices/manifest.json +++ b/scripts/updaternotices/manifest.json @@ -574,7 +574,7 @@ }, { "module": "github.com/google/go-containerregistry", - "version": "v0.21.7", + "version": "v0.22.1", "files": [ { "path": "LICENSE", @@ -582,7 +582,7 @@ } ], "license": "Apache-2.0", - "source": "https://proxy.golang.org/github.com/google/go-containerregistry/@v/v0.21.7.zip", + "source": "https://proxy.golang.org/github.com/google/go-containerregistry/@v/v0.22.1.zip", "packages": [ "github.com/google/go-containerregistry/pkg/name" ] @@ -721,7 +721,7 @@ }, { "module": "github.com/secure-systems-lab/go-securesystemslib", - "version": "v0.11.0", + "version": "v0.11.1", "files": [ { "path": "LICENSE", @@ -729,7 +729,7 @@ } ], "license": "MIT", - "source": "https://proxy.golang.org/github.com/secure-systems-lab/go-securesystemslib/@v/v0.11.0.zip", + "source": "https://proxy.golang.org/github.com/secure-systems-lab/go-securesystemslib/@v/v0.11.1.zip", "packages": [ "github.com/secure-systems-lab/go-securesystemslib/cjson", "github.com/secure-systems-lab/go-securesystemslib/dsse", @@ -767,7 +767,7 @@ }, { "module": "github.com/sigstore/protobuf-specs", - "version": "v0.5.1", + "version": "v0.5.2", "files": [ { "path": "COPYRIGHT.txt", @@ -779,7 +779,7 @@ } ], "license": "Apache-2.0", - "source": "https://proxy.golang.org/github.com/sigstore/protobuf-specs/@v/v0.5.1.zip", + "source": "https://proxy.golang.org/github.com/sigstore/protobuf-specs/@v/v0.5.2.zip", "packages": [ "github.com/sigstore/protobuf-specs/gen/pb-go/bundle/v1", "github.com/sigstore/protobuf-specs/gen/pb-go/common/v1", @@ -856,7 +856,7 @@ }, { "module": "github.com/sigstore/sigstore", - "version": "v1.10.9", + "version": "v1.10.10", "files": [ { "path": "COPYRIGHT.txt", @@ -868,7 +868,7 @@ } ], "license": "Apache-2.0", - "source": "https://proxy.golang.org/github.com/sigstore/sigstore/@v/v1.10.9.zip", + "source": "https://proxy.golang.org/github.com/sigstore/sigstore/@v/v1.10.10.zip", "packages": [ "github.com/sigstore/sigstore/pkg/cryptoutils", "github.com/sigstore/sigstore/pkg/signature",