mirror of
https://github.com/agent-substrate/substrate.git
synced 2026-11-11 10:23:17 +08:00
dependabot[bot]
8373e60a4a
Bumps [github.com/sigstore/sigstore-go](https://github.com/sigstore/sigstore-go) from 1.2.0 to 1.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/sigstore-go/releases">github.com/sigstore/sigstore-go's releases</a>.</em></p> <blockquote> <h2>v1.2.1</h2> <h2>What's Changed</h2> <p>v1.2.1 resolves GHSA-wqqc-jjcq-vfxm.</p> <ul> <li>Check signature time against public key validity window in <a href="https://redirect.github.com/sigstore/sigstore-go/pull/642">sigstore/sigstore-go#642</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/sigstore/sigstore-go/compare/v1.2.0...v1.2.1">https://github.com/sigstore/sigstore-go/compare/v1.2.0...v1.2.1</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/sigstore-go/commit/4594ab4c779d08be1f4419803a8249188f35ed5f"><code>4594ab4</code></a> Check signature time against public key validity window (<a href="https://redirect.github.com/sigstore/sigstore-go/issues/642">#642</a>)</li> <li><a href="https://github.com/sigstore/sigstore-go/commit/3ad400caec47a75027e4f7188046d0ee07bbdcec"><code>3ad400c</code></a> Bump actions/checkout from 6.0.2 to 6.0.3 (<a href="https://redirect.github.com/sigstore/sigstore-go/issues/639">#639</a>)</li> <li>See full diff in <a href="https://github.com/sigstore/sigstore-go/compare/v1.2.0...v1.2.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/agent-substrate/substrate/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
164 lines
8.6 KiB
AMPL
164 lines
8.6 KiB
AMPL
module github.com/agent-substrate/substrate/hack/tools/ko
|
|
|
|
go 1.26.3
|
|
|
|
require (
|
|
al.essio.dev/pkg/shellescape v1.6.0 // indirect
|
|
cloud.google.com/go/compute/metadata v0.9.0 // indirect
|
|
github.com/Azure/azure-sdk-for-go v68.0.0+incompatible // indirect
|
|
github.com/Azure/go-ansiterm v0.0.0-20250102033503-faa5f7b0171c // indirect
|
|
github.com/Azure/go-autorest v14.2.0+incompatible // indirect
|
|
github.com/Azure/go-autorest/autorest v0.11.30 // indirect
|
|
github.com/Azure/go-autorest/autorest/adal v0.9.24 // indirect
|
|
github.com/Azure/go-autorest/autorest/azure/auth v0.5.13 // indirect
|
|
github.com/Azure/go-autorest/autorest/azure/cli v0.4.7 // indirect
|
|
github.com/Azure/go-autorest/autorest/date v0.3.1 // indirect
|
|
github.com/Azure/go-autorest/logger v0.2.2 // indirect
|
|
github.com/Azure/go-autorest/tracing v0.6.1 // indirect
|
|
github.com/BurntSushi/toml v1.6.0 // indirect
|
|
github.com/Microsoft/go-winio v0.6.2 // indirect
|
|
github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect
|
|
github.com/aws/aws-sdk-go-v2 v1.41.7 // indirect
|
|
github.com/aws/aws-sdk-go-v2/config v1.32.18 // indirect
|
|
github.com/aws/aws-sdk-go-v2/credentials v1.19.17 // indirect
|
|
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.23 // indirect
|
|
github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.23 // indirect
|
|
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.23 // indirect
|
|
github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.24 // indirect
|
|
github.com/aws/aws-sdk-go-v2/service/ecr v1.56.0 // indirect
|
|
github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.38.11 // indirect
|
|
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.9 // indirect
|
|
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.23 // indirect
|
|
github.com/aws/aws-sdk-go-v2/service/signin v1.0.11 // indirect
|
|
github.com/aws/aws-sdk-go-v2/service/sso v1.30.17 // indirect
|
|
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.36.0 // indirect
|
|
github.com/aws/aws-sdk-go-v2/service/sts v1.42.1 // indirect
|
|
github.com/aws/smithy-go v1.25.1 // indirect
|
|
github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.12.0 // indirect
|
|
github.com/blang/semver v3.5.1+incompatible // indirect
|
|
github.com/cenkalti/backoff/v5 v5.0.3 // indirect
|
|
github.com/cespare/xxhash/v2 v2.3.0 // indirect
|
|
github.com/chrismellard/docker-credential-acr-env v0.0.0-20230304212654-82a0ddb27589 // indirect
|
|
github.com/containerd/errdefs v1.0.0 // indirect
|
|
github.com/containerd/errdefs/pkg v0.3.0 // indirect
|
|
github.com/coreos/go-oidc/v3 v3.18.0 // indirect
|
|
github.com/cyberphone/json-canonicalization v0.0.0-20241213102144-19d51d7fe467 // indirect
|
|
github.com/digitorus/pkcs7 v0.0.0-20250730155240-ffadbf3f398c // indirect
|
|
github.com/digitorus/timestamp v0.0.0-20250524132541-c45532741eea // indirect
|
|
github.com/dimchansky/utfbom v1.1.1 // indirect
|
|
github.com/distribution/reference v0.6.0 // indirect
|
|
github.com/docker/cli v29.5.3+incompatible // indirect
|
|
github.com/docker/docker-credential-helpers v0.9.5 // indirect
|
|
github.com/docker/go-connections v0.7.0 // indirect
|
|
github.com/docker/go-units v0.5.0 // indirect
|
|
github.com/dprotaso/go-yit v0.0.0-20260209000607-dfb86291624d // indirect
|
|
github.com/dustin/go-humanize v1.0.1 // indirect
|
|
github.com/evanphx/json-patch/v5 v5.9.11 // indirect
|
|
github.com/felixge/httpsnoop v1.0.4 // indirect
|
|
github.com/fsnotify/fsnotify v1.10.1 // indirect
|
|
github.com/go-jose/go-jose/v4 v4.1.4 // indirect
|
|
github.com/go-logr/logr v1.4.3 // indirect
|
|
github.com/go-logr/stdr v1.2.2 // indirect
|
|
github.com/go-openapi/analysis v0.25.2 // indirect
|
|
github.com/go-openapi/errors v0.22.7 // indirect
|
|
github.com/go-openapi/jsonpointer v0.23.1 // indirect
|
|
github.com/go-openapi/jsonreference v0.21.6 // indirect
|
|
github.com/go-openapi/loads v0.23.3 // indirect
|
|
github.com/go-openapi/runtime v0.32.3 // indirect
|
|
github.com/go-openapi/runtime/server-middleware v0.30.0 // indirect
|
|
github.com/go-openapi/spec v0.22.5 // indirect
|
|
github.com/go-openapi/strfmt v0.26.3 // indirect
|
|
github.com/go-openapi/swag v0.26.0 // indirect
|
|
github.com/go-openapi/swag/cmdutils v0.26.0 // indirect
|
|
github.com/go-openapi/swag/conv v0.26.1 // indirect
|
|
github.com/go-openapi/swag/fileutils v0.26.0 // indirect
|
|
github.com/go-openapi/swag/jsonname v0.26.0 // indirect
|
|
github.com/go-openapi/swag/jsonutils v0.26.0 // indirect
|
|
github.com/go-openapi/swag/loading v0.26.0 // indirect
|
|
github.com/go-openapi/swag/mangling v0.26.0 // indirect
|
|
github.com/go-openapi/swag/netutils v0.26.0 // indirect
|
|
github.com/go-openapi/swag/stringutils v0.26.0 // indirect
|
|
github.com/go-openapi/swag/typeutils v0.26.1 // indirect
|
|
github.com/go-openapi/swag/yamlutils v0.26.0 // indirect
|
|
github.com/go-openapi/validate v0.25.3 // indirect
|
|
github.com/go-viper/mapstructure/v2 v2.5.0 // indirect
|
|
github.com/golang-jwt/jwt/v4 v4.5.2 // indirect
|
|
github.com/google/certificate-transparency-go v1.3.3 // indirect
|
|
github.com/google/go-cmp v0.7.0 // indirect
|
|
github.com/google/go-containerregistry v0.21.7 // indirect
|
|
github.com/google/ko v0.19.1 // indirect
|
|
github.com/google/uuid v1.6.0 // indirect
|
|
github.com/grpc-ecosystem/grpc-gateway/v2 v2.29.0 // indirect
|
|
github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
|
|
github.com/hashicorp/go-retryablehttp v0.7.8 // indirect
|
|
github.com/in-toto/attestation v1.2.0 // indirect
|
|
github.com/in-toto/in-toto-golang v0.11.0 // indirect
|
|
github.com/inconshreveable/mousetrap v1.1.0 // indirect
|
|
github.com/jedisct1/go-minisign v0.0.0-20241212093149-d2f9f49435c7 // indirect
|
|
github.com/klauspost/compress v1.18.6 // indirect
|
|
github.com/mattn/go-isatty v0.0.20 // indirect
|
|
github.com/mitchellh/go-homedir v1.1.0 // indirect
|
|
github.com/moby/docker-image-spec v1.3.1 // indirect
|
|
github.com/moby/moby/api v1.55.0 // indirect
|
|
github.com/moby/moby/client v0.5.0 // indirect
|
|
github.com/moby/term v0.5.2 // indirect
|
|
github.com/oklog/ulid/v2 v2.1.1 // indirect
|
|
github.com/opencontainers/go-digest v1.0.0 // indirect
|
|
github.com/opencontainers/image-spec v1.1.1 // indirect
|
|
github.com/pelletier/go-toml v1.9.5 // indirect
|
|
github.com/pelletier/go-toml/v2 v2.2.4 // indirect
|
|
github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c // indirect
|
|
github.com/pkg/errors v0.9.1 // indirect
|
|
github.com/sagikazarmark/locafero v0.12.0 // indirect
|
|
github.com/sassoftware/relic v7.2.1+incompatible // indirect
|
|
github.com/secure-systems-lab/go-securesystemslib v0.11.0 // indirect
|
|
github.com/shibumi/go-pathspec v1.3.0 // indirect
|
|
github.com/sigstore/cosign/v3 v3.1.1 // indirect
|
|
github.com/sigstore/protobuf-specs v0.5.1 // indirect
|
|
github.com/sigstore/rekor v1.5.2 // indirect
|
|
github.com/sigstore/rekor-tiles/v2 v2.2.2-0.20260601073857-5d098a2b6443 // indirect
|
|
github.com/sigstore/sigstore v1.10.8 // indirect
|
|
github.com/sigstore/sigstore-go v1.2.1 // indirect
|
|
github.com/sigstore/timestamp-authority/v2 v2.1.2 // indirect
|
|
github.com/sirupsen/logrus v1.9.4 // indirect
|
|
github.com/spf13/afero v1.15.0 // indirect
|
|
github.com/spf13/cast v1.10.0 // indirect
|
|
github.com/spf13/cobra v1.10.2 // indirect
|
|
github.com/spf13/pflag v1.0.10 // indirect
|
|
github.com/spf13/viper v1.21.0 // indirect
|
|
github.com/subosito/gotenv v1.6.0 // indirect
|
|
github.com/theupdateframework/go-tuf v0.7.0 // indirect
|
|
github.com/theupdateframework/go-tuf/v2 v2.4.2 // indirect
|
|
github.com/transparency-dev/formats v0.1.1 // indirect
|
|
github.com/transparency-dev/merkle v0.0.2 // indirect
|
|
github.com/youmark/pkcs8 v0.0.0-20240726163527-a2c0da244d78 // indirect
|
|
go.opentelemetry.io/auto/sdk v1.2.1 // indirect
|
|
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.68.0 // indirect
|
|
go.opentelemetry.io/otel v1.44.0 // indirect
|
|
go.opentelemetry.io/otel/metric v1.44.0 // indirect
|
|
go.opentelemetry.io/otel/trace v1.44.0 // indirect
|
|
go.yaml.in/yaml/v2 v2.4.4 // indirect
|
|
go.yaml.in/yaml/v3 v3.0.4 // indirect
|
|
go.yaml.in/yaml/v4 v4.0.0-rc.6 // indirect
|
|
golang.org/x/crypto v0.53.0 // indirect
|
|
golang.org/x/mod v0.37.0 // indirect
|
|
golang.org/x/net v0.56.0 // indirect
|
|
golang.org/x/oauth2 v0.36.0 // indirect
|
|
golang.org/x/sync v0.21.0 // indirect
|
|
golang.org/x/sys v0.46.0 // indirect
|
|
golang.org/x/term v0.44.0 // indirect
|
|
golang.org/x/text v0.38.0 // indirect
|
|
golang.org/x/tools v0.46.0 // indirect
|
|
google.golang.org/genproto/googleapis/api v0.0.0-20260526163538-3dc84a4a5aaa // indirect
|
|
google.golang.org/genproto/googleapis/rpc v0.0.0-20260523011958-0a33c5d7ca68 // indirect
|
|
google.golang.org/grpc v1.82.1 // indirect
|
|
google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af // indirect
|
|
k8s.io/apimachinery v0.36.2 // indirect
|
|
k8s.io/klog/v2 v2.140.0 // indirect
|
|
k8s.io/utils v0.0.0-20260210185600-b8788abfbbc2 // indirect
|
|
sigs.k8s.io/kind v0.32.0 // indirect
|
|
sigs.k8s.io/yaml v1.6.0 // indirect
|
|
)
|
|
|
|
tool github.com/google/ko
|