@@ -5,7 +5,7 @@ go 1.25.8
55require (
66 cuelang.org/go v0.16.0
77 github.com/CycloneDX/cyclonedx-go v0.10.0
8- github.com/MakeNowJust/heredoc v1 .0.0
8+ github.com/MakeNowJust/heredoc/v2 v2 .0.1
99 github.com/Maldris/go-billy-afero v0.0.0-20200815120323-e9d3de59c99a
1010 github.com/conforma/crds/api v0.1.7
1111 github.com/conforma/go-gather v1.1.0
@@ -29,7 +29,7 @@ require (
2929 github.com/open-policy-agent/opa v1.15.2
3030 github.com/package-url/packageurl-go v0.1.3
3131 github.com/qri-io/jsonpointer v0.1.1
32- github.com/santhosh-tekuri/jsonschema/v5 v5.3.1
32+ github.com/santhosh-tekuri/jsonschema/v6 v6.0.2
3333 github.com/secure-systems-lab/go-securesystemslib v0.10.0
3434 github.com/sigstore/cosign/v3 v3.0.4
3535 github.com/sigstore/rekor v1.5.0
@@ -104,20 +104,20 @@ require (
104104 github.com/agext/levenshtein v1.2.3 // indirect
105105 github.com/agnivade/levenshtein v1.2.1 // indirect
106106 github.com/alibabacloud-go/alibabacloud-gateway-spi v0.0.5 // indirect
107- github.com/alibabacloud-go/cr-20160607 v1 .0.1 // indirect
108- github.com/alibabacloud-go/cr-20181201 v1.0.10 // indirect
109- github.com/alibabacloud-go/darabonba-openapi v0.2.1 // indirect
107+ github.com/alibabacloud-go/cr-20160607/v2 v2 .0.0 // indirect
108+ github.com/alibabacloud-go/cr-20181201/v3 v3.1.2 // indirect
109+ github.com/alibabacloud-go/darabonba-openapi/v2 v2.1.16 // indirect
110110 github.com/alibabacloud-go/debug v1.0.1 // indirect
111111 github.com/alibabacloud-go/endpoint-util v1.1.1 // indirect
112112 github.com/alibabacloud-go/openapi-util v0.1.1 // indirect
113113 github.com/alibabacloud-go/tea v1.2.2 // indirect
114- github.com/alibabacloud-go/tea-utils v1.4.5 // indirect
114+ github.com/alibabacloud-go/tea-utils/v2 v2.0.9 // indirect
115115 github.com/alibabacloud-go/tea-utils/v2 v2.0.6 // indirect
116116 github.com/alibabacloud-go/tea-xml v1.1.3 // indirect
117117 github.com/aliyun/credentials-go v1.3.9 // indirect
118118 github.com/anchore/go-struct-converter v0.1.0 // indirect
119119 github.com/antlr4-go/antlr/v4 v4.13.1 // indirect
120- github.com/apparentlymart/go-textseg/v15 v15 .0.0 // indirect
120+ github.com/apparentlymart/go-textseg/v16 v16 .0.0 // indirect
121121 github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect
122122 github.com/aws/aws-sdk-go-v2 v1.41.4 // indirect
123123 github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.7 // indirect
@@ -147,8 +147,8 @@ require (
147147 github.com/blang/semver v3.5.1+incompatible // indirect
148148 github.com/blendle/zapdriver v1.3.1 // indirect
149149 github.com/bufbuild/protocompile v0.14.1 // indirect
150- github.com/bytecodealliance/wasmtime-go/v39 v39 .0.1 // indirect
151- github.com/cenkalti/backoff/v4 v4.3.0 // indirect
150+ github.com/bytecodealliance/wasmtime-go/v44 v44 .0.0 // indirect
151+ github.com/cenkalti/backoff/v5 v5.0.3 // indirect
152152 github.com/cenkalti/backoff/v5 v5.0.3 // indirect
153153 github.com/census-instrumentation/opencensus-proto v0.4.1 // indirect
154154 github.com/cespare/xxhash/v2 v2.3.0 // indirect
@@ -201,7 +201,7 @@ require (
201201 github.com/gkampitakis/ciinfo v0.3.2 // indirect
202202 github.com/go-akka/configuration v0.0.0-20200606091224-a002c0330665 // indirect
203203 github.com/go-chi/chi/v5 v5.2.4 // indirect
204- github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect
204+ github.com/go-git/gcfg/v2 v2.0.2 // indirect
205205 github.com/go-git/go-billy/v5 v5.8.0 // indirect
206206 github.com/go-ini/ini v1.67.0 // indirect
207207 github.com/go-jose/go-jose/v4 v4.1.4 // indirect
@@ -233,15 +233,15 @@ require (
233233 github.com/goccy/go-json v0.10.5 // indirect
234234 github.com/goccy/go-yaml v1.18.0 // indirect
235235 github.com/gogo/protobuf v1.3.2 // indirect
236- github.com/golang-jwt/jwt/v4 v4.5.2 // indirect
236+ github.com/golang-jwt/jwt/v5 v5.3.1 // indirect
237237 github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 // indirect
238238 github.com/golang/protobuf v1.5.4 // indirect
239- github.com/golang/snappy v0 .0.4 // indirect
239+ github.com/golang/snappy v1 .0.0 // indirect
240240 github.com/google/cel-go v0.27.0 // indirect
241241 github.com/google/certificate-transparency-go v1.3.2 // indirect
242242 github.com/google/flatbuffers v25.2.10+incompatible // indirect
243243 github.com/google/gnostic-models v0.7.0 // indirect
244- github.com/google/go-github/v73 v73 .0.0 // indirect
244+ github.com/google/go-github/v86 v86 .0.0 // indirect
245245 github.com/google/go-jsonnet v0.22.0 // indirect
246246 github.com/google/go-querystring v1.2.0 // indirect
247247 github.com/google/s2a-go v0.1.9 // indirect
@@ -251,11 +251,11 @@ require (
251251 github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.7 // indirect
252252 github.com/hashicorp/aws-sdk-go-base/v2 v2.0.0-beta.72 // indirect
253253 github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
254- github.com/hashicorp/go-getter v1.8.6 // indirect
254+ github.com/hashicorp/go-getter/v2 v2.2.3 // indirect
255255 github.com/hashicorp/go-retryablehttp v0.7.8 // indirect
256256 github.com/hashicorp/go-version v1.8.0 // indirect
257257 github.com/hashicorp/golang-lru/v2 v2.0.7 // indirect
258- github.com/hashicorp/hcl v1.0.1-vault-7 // indirect
258+ github.com/hashicorp/hcl/v2 v2.24.0 // indirect
259259 github.com/hashicorp/hcl/v2 v2.23.0 // indirect
260260 github.com/huandu/go-clone v1.7.3 // indirect
261261 github.com/huandu/go-sqlbuilder v1.39.1 // indirect
@@ -265,7 +265,7 @@ require (
265265 github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect
266266 github.com/jedisct1/go-minisign v0.0.0-20230811132847-661be99b8267 // indirect
267267 github.com/json-iterator/go v1.1.12 // indirect
268- github.com/jstemmer/go-junit-report v1.0 .0 // indirect
268+ github.com/jstemmer/go-junit-report/v2 v2.1 .0 // indirect
269269 github.com/kevinburke/ssh_config v1.2.0 // indirect
270270 github.com/klauspost/compress v1.18.5 // indirect
271271 github.com/kr/pretty v0.3.1 // indirect
@@ -275,7 +275,7 @@ require (
275275 github.com/lestrrat-go/dsig-secp256k1 v1.0.0 // indirect
276276 github.com/lestrrat-go/httpcc v1.0.1 // indirect
277277 github.com/lestrrat-go/httprc/v3 v3.0.2 // indirect
278- github.com/lestrrat-go/jwx/v3 v3 .0.13 // indirect
278+ github.com/lestrrat-go/jwx/v4 v4 .0.2 // indirect
279279 github.com/lestrrat-go/option/v2 v2.0.0 // indirect
280280 github.com/letsencrypt/boulder v0.20251110.0 // indirect
281281 github.com/logrusorgru/aurora v2.0.3+incompatible // indirect
@@ -309,7 +309,7 @@ require (
309309 github.com/olekukonko/tablewriter v1.1.2 // indirect
310310 github.com/opencontainers/go-digest v1.0.0 // indirect
311311 github.com/opencontainers/image-spec v1.1.1 // indirect
312- github.com/owenrumney/go-sarif/v2 v2 .3.3 // indirect
312+ github.com/owenrumney/go-sarif/v3 v3 .3.0 // indirect
313313 github.com/pelletier/go-toml/v2 v2.2.4 // indirect
314314 github.com/peterh/liner v1.2.2 // indirect
315315 github.com/pjbgf/sha1cd v0.3.2 // indirect
@@ -331,7 +331,7 @@ require (
331331 github.com/segmentio/asm v1.2.1 // indirect
332332 github.com/sergi/go-diff v1.4.0 // indirect
333333 github.com/shibumi/go-pathspec v1.3.0 // indirect
334- github.com/shirou/gopsutil/v3 v3.23.12 // indirect
334+ github.com/shirou/gopsutil/v4 v4.26.4 // indirect
335335 github.com/shoenig/go-m1cpu v0.1.6 // indirect
336336 github.com/shteou/go-ignore v0.3.1 // indirect
337337 github.com/sigstore/fulcio v1.8.4 // indirect
@@ -348,14 +348,14 @@ require (
348348 github.com/syndtr/goleveldb v1.0.1-0.20220721030215-126854af5e6d // indirect
349349 github.com/tchap/go-patricia/v2 v2.3.3 // indirect
350350 github.com/thales-e-security/pool v0.0.2 // indirect
351- github.com/theupdateframework/go-tuf v0.7.0 // indirect
351+ github.com/theupdateframework/go-tuf/v2 v2.4.1 // indirect
352352 github.com/theupdateframework/go-tuf/v2 v2.4.1 // indirect
353353 github.com/tidwall/gjson v1.18.0 // indirect
354354 github.com/tidwall/match v1.1.1 // indirect
355355 github.com/tidwall/pretty v1.2.1 // indirect
356356 github.com/tidwall/sjson v1.2.5 // indirect
357357 github.com/titanous/rocacheck v0.0.0-20171023193734-afe73141d399 // indirect
358- github.com/tjfoc/gmsm v1.4.1 // indirect
358+ github.com/tjfoc/gmsm/v2 v2.0.0 // indirect
359359 github.com/tklauser/go-sysconf v0.3.12 // indirect
360360 github.com/tklauser/numcpus v0.6.1 // indirect
361361 github.com/tmccombs/hcl2json v0.6.7 // indirect
@@ -374,7 +374,7 @@ require (
374374 github.com/yashtewari/glob-intersection v0.2.0 // indirect
375375 github.com/yusufpapurcu/wmi v1.2.3 // indirect
376376 github.com/zclconf/go-cty v1.16.2 // indirect
377- gitlab.com/gitlab-org/api/client-go v1.11 .0 // indirect
377+ gitlab.com/gitlab-org/api/client-go/v2 v2.26 .0 // indirect
378378 go.opencensus.io v0.24.0 // indirect
379379 go.opentelemetry.io/auto/sdk v1.2.1 // indirect
380380 go.opentelemetry.io/contrib/detectors/gcp v1.39.0 // indirect
@@ -392,7 +392,7 @@ require (
392392 go.uber.org/automaxprocs v1.6.0 // indirect
393393 go.uber.org/multierr v1.11.0 // indirect
394394 go.uber.org/zap v1.27.1 // indirect
395- go.yaml.in/yaml/v2 v2.4.3 // indirect
395+ go.yaml.in/yaml/v3 v3.0.4 // indirect
396396 go.yaml.in/yaml/v3 v3.0.4 // indirect
397397 golang.org/x/crypto v0.49.0 // indirect
398398 golang.org/x/mod v0.33.0 // indirect
@@ -401,18 +401,18 @@ require (
401401 golang.org/x/term v0.41.0 // indirect
402402 golang.org/x/time v0.15.0 // indirect
403403 golang.org/x/tools v0.42.0 // indirect
404- gomodules.xyz/jsonpatch/v2 v2.5.0 // indirect
404+ gomodules.xyz/jsonpatch/v3 v3.0.1 // indirect
405405 google.golang.org/api v0.271.0 // indirect
406406 google.golang.org/genproto v0.0.0-20260128011058-8636f8732409 // indirect
407407 google.golang.org/genproto/googleapis/api v0.0.0-20260203192932-546029d2fa20 // indirect
408408 google.golang.org/genproto/googleapis/rpc v0.0.0-20260226221140-a57be14db171 // indirect
409409 google.golang.org/grpc v1.79.3 // indirect
410410 google.golang.org/protobuf v1.36.11 // indirect
411- gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect
411+ gopkg.in/evanphx/json-patch.v5 v5.9.11 // indirect
412412 gopkg.in/inf.v0 v0.9.1 // indirect
413413 gopkg.in/ini.v1 v1.67.1 // indirect
414414 gopkg.in/warnings.v0 v0.1.2 // indirect
415- gopkg.in/yaml.v2 v2.4.0 // indirect
415+ gopkg.in/yaml.v3 v3.0.1 // indirect
416416 k8s.io/utils v0.0.0-20251002143259-bc988d571ff4 // indirect
417417 knative.dev/pkg v0.0.0-20250415155312-ed3e2158b883 // indirect
418418 olympos.io/encoding/edn v0.0.0-20201019073823-d3554ca0b0a3 // indirect
0 commit comments