@@ -6,22 +6,22 @@ require (
66 github.com/CycloneDX/cyclonedx-go v0.9.0
77 github.com/Masterminds/semver v1.5.0
88 github.com/acarl005/stripansi v0.0.0-20180116102854-5a71ef0e047d
9- github.com/adrg/xdg v0.5.0
9+ github.com/adrg/xdg v0.5.3
1010 github.com/anchore/bubbly v0.0.0-20231115134915-def0aba654a9
1111 github.com/anchore/clio v0.0.0-20240522144804-d81e109008aa
1212 github.com/anchore/go-collections v0.0.0-20240216171411-9321230ce537
1313 github.com/anchore/go-logger v0.0.0-20230725134548-c21dafa1ec5a
1414 github.com/anchore/go-version v1.2.2-0.20210903204242-51efa5b487c4
1515 github.com/anchore/packageurl-go v0.1.1-0.20240507183024-848e011fc24f
16- github.com/anchore/stereoscope v0.0.3-0.20240725180315-50ce3be7aa1f
16+ github.com/anchore/stereoscope v0.1.0
1717 github.com/anchore/syft v1.10.0
1818 github.com/bmatcuk/doublestar/v2 v2.0.4
1919 github.com/charmbracelet/bubbletea v0.26.6
2020 github.com/charmbracelet/lipgloss v0.12.1
2121 github.com/distribution/reference v0.6.0
2222 github.com/docker/docker v28.0.1+incompatible
2323 github.com/dustin/go-humanize v1.0.1
24- github.com/gabriel-vasile/mimetype v1.4.4
24+ github.com/gabriel-vasile/mimetype v1.4.8
2525 github.com/gkampitakis/go-snaps v0.5.6
2626 github.com/glebarez/sqlite v1.9.0
2727 github.com/go-git/go-git/v5 v5.14.0
@@ -43,12 +43,12 @@ require (
4343 github.com/notaryproject/notation-go v1.3.1
4444 github.com/olekukonko/tablewriter v0.0.5
4545 github.com/opencontainers/go-digest v1.0.0
46- github.com/opencontainers/image-spec v1.1.0
46+ github.com/opencontainers/image-spec v1.1.1
4747 github.com/oras-project/oras-credentials-go v0.3.1
4848 github.com/pkg/errors v0.9.1
4949 github.com/scylladb/go-set v1.0.3-0.20200225121959-cc7b2070d91e
5050 github.com/sigstore/sigstore v1.9.1
51- github.com/spf13/afero v1.11 .0
51+ github.com/spf13/afero v1.12 .0
5252 github.com/spf13/cobra v1.8.1
5353 github.com/stretchr/testify v1.10.0
5454 github.com/wagoodman/go-partybus v0.0.0-20230516145632-8ccac152c651
@@ -59,16 +59,23 @@ require (
5959)
6060
6161require (
62- cloud.google.com/go v0.112.1 // indirect
62+ cel.dev/expr v0.16.2 // indirect
63+ cloud.google.com/go v0.116.0 // indirect
64+ cloud.google.com/go/auth v0.13.0 // indirect
65+ cloud.google.com/go/auth/oauth2adapt v0.2.6 // indirect
6366 cloud.google.com/go/compute/metadata v0.6.0 // indirect
64- cloud.google.com/go/iam v1.1.6 // indirect
65- cloud.google.com/go/storage v1.38.0 // indirect
67+ cloud.google.com/go/iam v1.2.2 // indirect
68+ cloud.google.com/go/monitoring v1.21.2 // indirect
69+ cloud.google.com/go/storage v1.49.0 // indirect
6670 dario.cat/mergo v1.0.0 // indirect
6771 github.com/AdaLogics/go-fuzz-headers v0.0.0-20230811130428-ced1acdcaa24 // indirect
6872 github.com/AdamKorcz/go-118-fuzz-build v0.0.0-20230306123547-8075edf89bb0 // indirect
6973 github.com/Azure/go-ntlmssp v0.0.0-20221128193559-754e69321358 // indirect
7074 github.com/BurntSushi/toml v1.4.0 // indirect
7175 github.com/DataDog/zstd v1.5.5 // indirect
76+ github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.25.0 // indirect
77+ github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.48.1 // indirect
78+ github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.48.1 // indirect
7279 github.com/Masterminds/goutils v1.1.1 // indirect
7380 github.com/Masterminds/semver/v3 v3.3.1 // indirect
7481 github.com/Masterminds/sprig/v3 v3.2.3 // indirect
@@ -87,14 +94,17 @@ require (
8794 github.com/aymanbagabas/go-osc52/v2 v2.0.1 // indirect
8895 github.com/becheran/wildmatch-go v1.0.0 // indirect
8996 github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d // indirect
90- github.com/bmatcuk/doublestar/v4 v4.6.1 // indirect
97+ github.com/bmatcuk/doublestar/v4 v4.8.1 // indirect
98+ github.com/census-instrumentation/opencensus-proto v0.4.1 // indirect
99+ github.com/cespare/xxhash/v2 v2.3.0 // indirect
91100 github.com/charmbracelet/bubbles v0.18.0 // indirect
92101 github.com/charmbracelet/harmonica v0.2.0 // indirect
93102 github.com/charmbracelet/x/ansi v0.1.4 // indirect
94103 github.com/charmbracelet/x/input v0.1.0 // indirect
95104 github.com/charmbracelet/x/term v0.1.1 // indirect
96105 github.com/charmbracelet/x/windows v0.1.0 // indirect
97106 github.com/cloudflare/circl v1.6.0 // indirect
107+ github.com/cncf/xds/go v0.0.0-20240905190251-b4127c9b8d78 // indirect
98108 github.com/containerd/cgroups v1.1.0 // indirect
99109 github.com/containerd/containerd v1.7.27 // indirect
100110 github.com/containerd/containerd/api v1.8.0 // indirect
@@ -109,7 +119,7 @@ require (
109119 github.com/cyphar/filepath-securejoin v0.4.1 // indirect
110120 github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
111121 github.com/deitch/magic v0.0.0-20230404182410-1ff89d7342da // indirect
112- github.com/docker/cli v27.5.0 +incompatible// indirect
122+ github.com/docker/cli v28.0.1 +incompatible// indirect
113123 github.com/docker/distribution v2.8.3+incompatible // indirect
114124 github.com/docker/docker-credential-helpers v0.8.2 // indirect
115125 github.com/docker/go-connections v0.5.0 // indirect
@@ -119,6 +129,8 @@ require (
119129 github.com/edsrzf/mmap-go v1.1.0 // indirect
120130 github.com/elliotchance/phpserialize v1.4.0 // indirect
121131 github.com/emirpasic/gods v1.18.1 // indirect
132+ github.com/envoyproxy/go-control-plane v0.13.1 // indirect
133+ github.com/envoyproxy/protoc-gen-validate v1.1.0 // indirect
122134 github.com/erikgeiser/coninput v0.0.0-20211004153227-1c3628e74d0f // indirect
123135 github.com/etdub/goparsetime v0.0.0-20160315173935-ea17b0ac3318 // indirect
124136 github.com/facebookincubator/nvdtools v0.1.5 // indirect
@@ -141,14 +153,13 @@ require (
141153 github.com/gogo/protobuf v1.3.2 // indirect
142154 github.com/golang-jwt/jwt/v4 v4.5.1 // indirect
143155 github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 // indirect
144- github.com/golang/protobuf v1.5.4 // indirect
145156 github.com/golang/snappy v0.0.4 // indirect
146157 github.com/google/go-containerregistry v0.20.3 // indirect
147158 github.com/google/licensecheck v0.3.1 // indirect
148159 github.com/google/pprof v0.0.0-20240409012703-83162a5b38cd // indirect
149- github.com/google/s2a-go v0.1.7 // indirect
150- github.com/googleapis/enterprise-certificate-proxy v0.3.2 // indirect
151- github.com/googleapis/gax-go/v2 v2.12.2 // indirect
160+ github.com/google/s2a-go v0.1.8 // indirect
161+ github.com/googleapis/enterprise-certificate-proxy v0.3.4 // indirect
162+ github.com/googleapis/gax-go/v2 v2.14.1 // indirect
152163 github.com/hashicorp/errwrap v1.1.0 // indirect
153164 github.com/hashicorp/go-safetemp v1.0.0 // indirect
154165 github.com/hashicorp/hcl v1.0.1-vault-5 // indirect
@@ -163,7 +174,7 @@ require (
163174 github.com/jmespath/go-jmespath v0.4.0 // indirect
164175 github.com/kastenhq/goversion v0.0.0-20230811215019-93b2f8823953 // indirect
165176 github.com/kevinburke/ssh_config v1.2.0 // indirect
166- github.com/klauspost/compress v1.17.11 // indirect
177+ github.com/klauspost/compress v1.18.0 // indirect
167178 github.com/klauspost/pgzip v1.2.5 // indirect
168179 github.com/knqyf263/go-rpmdb v0.1.1 // indirect
169180 github.com/kr/pretty v0.3.1 // indirect
@@ -204,9 +215,10 @@ require (
204215 github.com/pborman/indent v1.2.1 // indirect
205216 github.com/pelletier/go-toml v1.9.5 // indirect
206217 github.com/pelletier/go-toml/v2 v2.1.0 // indirect
207- github.com/pierrec/lz4/v4 v4.1.19 // indirect
218+ github.com/pierrec/lz4/v4 v4.1.22 // indirect
208219 github.com/pjbgf/sha1cd v0.3.2 // indirect
209220 github.com/pkg/profile v1.7.0 // indirect
221+ github.com/planetscale/vtprotobuf v0.6.1-0.20240319094008-0393e58bdf10 // indirect
210222 github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
211223 github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec // indirect
212224 github.com/rivo/uniseg v0.4.7 // indirect
@@ -228,8 +240,8 @@ require (
228240 github.com/spf13/pflag v1.0.5 // indirect
229241 github.com/spf13/viper v1.18.2 // indirect
230242 github.com/subosito/gotenv v1.6.0 // indirect
231- github.com/sylabs/sif/v2 v2.17.1 // indirect
232- github.com/sylabs/squashfs v1.0.0 // indirect
243+ github.com/sylabs/sif/v2 v2.20.2 // indirect
244+ github.com/sylabs/squashfs v1.0.5 // indirect
233245 github.com/therootcompany/xz v1.0.1 // indirect
234246 github.com/tidwall/gjson v1.17.0 // indirect
235247 github.com/tidwall/match v1.1.1 // indirect
@@ -247,31 +259,35 @@ require (
247259 github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e // indirect
248260 go.opencensus.io v0.24.0 // indirect
249261 go.opentelemetry.io/auto/sdk v1.1.0 // indirect
250- go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.52.0 // indirect
262+ go.opentelemetry.io/contrib/detectors/gcp v1.31.0 // indirect
263+ go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.54.0 // indirect
251264 go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.58.0 // indirect
252265 go.opentelemetry.io/otel v1.33.0 // indirect
253266 go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.33.0 // indirect
254267 go.opentelemetry.io/otel/metric v1.33.0 // indirect
268+ go.opentelemetry.io/otel/sdk v1.33.0 // indirect
269+ go.opentelemetry.io/otel/sdk/metric v1.31.0 // indirect
255270 go.opentelemetry.io/otel/trace v1.33.0 // indirect
256271 go.opentelemetry.io/proto/otlp v1.4.0 // indirect
257272 go.uber.org/atomic v1.9.0 // indirect
258273 go.uber.org/multierr v1.9.0 // indirect
259- golang.org/x/crypto v0.35 .0 // indirect
274+ golang.org/x/crypto v0.36 .0 // indirect
260275 golang.org/x/exp v0.0.0-20240719175910-8a7402abbf56 // indirect
261276 golang.org/x/mod v0.23.0 // indirect
262277 golang.org/x/net v0.36.0 // indirect
263278 golang.org/x/oauth2 v0.27.0 // indirect
264- golang.org/x/sync v0.11 .0 // indirect
265- golang.org/x/sys v0.30 .0 // indirect
266- golang.org/x/term v0.29 .0 // indirect
267- golang.org/x/text v0.22 .0 // indirect
268- golang.org/x/time v0.5 .0 // indirect
279+ golang.org/x/sync v0.12 .0 // indirect
280+ golang.org/x/sys v0.31 .0 // indirect
281+ golang.org/x/term v0.30 .0 // indirect
282+ golang.org/x/text v0.23 .0 // indirect
283+ golang.org/x/time v0.8 .0 // indirect
269284 golang.org/x/xerrors v0.0.0-20231012003039-104605ab7028 // indirect
270- google.golang.org/api v0.169 .0 // indirect
271- google.golang.org/genproto v0.0.0-20240213162025-012b6fc9bca9 // indirect
285+ google.golang.org/api v0.215 .0 // indirect
286+ google.golang.org/genproto v0.0.0-20241118233622-e639e219e697 // indirect
272287 google.golang.org/genproto/googleapis/api v0.0.0-20241209162323-e6fa225c2576 // indirect
273- google.golang.org/genproto/googleapis/rpc v0.0.0-20241209162323-e6fa225c2576 // indirect
288+ google.golang.org/genproto/googleapis/rpc v0.0.0-20241223144023-3abc09e42ca8 // indirect
274289 google.golang.org/grpc v1.68.1 // indirect
290+ google.golang.org/grpc/stats/opentelemetry v0.0.0-20241028142157-ada6787961b3 // indirect
275291 google.golang.org/protobuf v1.36.5 // indirect
276292 gopkg.in/ini.v1 v1.67.0 // indirect
277293 gopkg.in/warnings.v0 v0.1.2 // indirect
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?v=4&size=40){kind=avatar}
0 commit comments