ossf/scorecard
1
1
Fork 0
mirror of https://github.com/ossf/scorecard.git synced 2024-09-21 14:07:32 +03:00
Code Issues Actions 7 Packages Projects Releases Wiki Activity
78d0903926
scorecard/tools/go.mod

380 lines
20 KiB
Modula-2
Raw Normal View History

:seedling: Moving tools dependencies to separate go.mod * Moving the tools dependencies to a separate go.mod to reduce the dependencies on scorecard. * This is also increases the security posture by having less dependencies on the main go.mod
2021-09-06 20:34:17 +03:00
module github.com/ossf/scorecard/tools
:seedling: Migrate to go 1.19 (#2332) - Migrate to go 1.19 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-10-07 04:09:38 +03:00
go 1.19
:seedling: Moving tools dependencies to separate go.mod * Moving the tools dependencies to a separate go.mod to reduce the dependencies on scorecard. * This is also increases the security posture by having less dependencies on the main go.mod
2021-09-06 20:34:17 +03:00
require (
Check for issue activity in Maintained (#1251) Co-authored-by: Azeem Shaikh <azeems@google.com>
2021-11-13 01:16:22 +03:00
github.com/golang/mock v1.6.0
:seedling: Bump github.com/golangci/golangci-lint in /tools Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.50.0 to 1.50.1. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.50.0...v1.50.1) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
2022-10-30 16:46:53 +03:00
github.com/golangci/golangci-lint v1.50.1
:seedling: Bump github.com/google/addlicense in /tools (#2459) Bumps [github.com/google/addlicense](https://github.com/google/addlicense) from 1.0.0 to 1.1.0. - [Release notes](https://github.com/google/addlicense/releases) - [Changelog](https://github.com/google/addlicense/blob/master/.goreleaser.yaml) - [Commits](https://github.com/google/addlicense/compare/v1.0.0...v1.1.0) --- updated-dependencies: - dependency-name: github.com/google/addlicense dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-16 22:52:06 +03:00
github.com/google/addlicense v1.1.0
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/google/ko v0.11.3-0.20220812194550-f9b4471f654a
:seedling: Bump github.com/goreleaser/goreleaser in /tools (#2573) Bumps [github.com/goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) from 1.13.1 to 1.14.0. - [Release notes](https://github.com/goreleaser/goreleaser/releases) - [Changelog](https://github.com/goreleaser/goreleaser/blob/main/.goreleaser.yaml) - [Commits](https://github.com/goreleaser/goreleaser/compare/v1.13.1...v1.14.0) --- updated-dependencies: - dependency-name: github.com/goreleaser/goreleaser dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-06 23:36:46 +03:00
github.com/goreleaser/goreleaser v1.14.0
:seedling: Check for OSV for a go.mod changes (#1053) At present we don't have a way to identify any new dependencies to go.mod that have osv/cve. With this it will query the osv.dev for any vulnerabilities and report if it found any. It also has an option to ignore any vulnerabilities if we chose to ignore. This is ignoring 3 osv that are in our dependencies.
2021-09-22 23:41:56 +03:00
github.com/naveensrinivasan/stunning-tribble v0.4.2
:seedling: Bump github.com/onsi/ginkgo/v2 from 2.5.0 to 2.5.1 in /tools (#2470)
2022-11-21 23:59:45 +03:00
github.com/onsi/ginkgo/v2 v2.5.1
:seedling: Bump google.golang.org/protobuf in /tools (#2110) Bumps [google.golang.org/protobuf](https://github.com/protocolbuffers/protobuf-go) from 1.28.0 to 1.28.1. - [Release notes](https://github.com/protocolbuffers/protobuf-go/releases) - [Changelog](https://github.com/protocolbuffers/protobuf-go/blob/master/release.bash) - [Commits](https://github.com/protocolbuffers/protobuf-go/compare/v1.28.0...v1.28.1) --- updated-dependencies: - dependency-name: google.golang.org/protobuf dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-29 18:27:52 +03:00
google.golang.org/protobuf v1.28.1
:seedling: Moving tools dependencies to separate go.mod * Moving the tools dependencies to a separate go.mod to reduce the dependencies on scorecard. * This is also increases the security posture by having less dependencies on the main go.mod
2021-09-06 20:34:17 +03:00
)
require (
:seedling: Bump github.com/golangci/golangci-lint from 1.42.1 to 1.44.0 in /tools (#1540)
2022-01-27 05:56:56 +03:00
4d63.com/gochecknoglobals v0.1.0 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
cloud.google.com/go v0.103.0 // indirect
cloud.google.com/go/compute v1.8.0 // indirect
cloud.google.com/go/iam v0.3.0 // indirect
cloud.google.com/go/kms v1.4.0 // indirect
cloud.google.com/go/storage v1.25.0 // indirect
:seedling: Bump github.com/goreleaser/goreleaser in /tools Bumps [github.com/goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) from 1.0.0 to 1.3.1. - [Release notes](https://github.com/goreleaser/goreleaser/releases) - [Changelog](https://github.com/goreleaser/goreleaser/blob/main/.goreleaser.yaml) - [Commits](https://github.com/goreleaser/goreleaser/compare/v1.0.0...v1.3.1) --- updated-dependencies: - dependency-name: github.com/goreleaser/goreleaser dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-01-27 04:08:18 +03:00
code.gitea.io/sdk/gitea v0.15.1 // indirect
:seedling: Bump github.com/golangci/golangci-lint in /tools (#2331) Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.48.0 to 1.50.0. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.48.0...v1.50.0) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 16:57:46 +03:00
github.com/Abirdcfly/dupword v0.0.7 // indirect
Add a validation step for goreleaser
2021-11-23 19:56:21 +03:00
github.com/AlekSi/pointer v1.2.0 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/Antonboom/errname v0.1.7 // indirect
:seedling: Bump github.com/golangci/golangci-lint in /tools Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.45.2 to 1.46.0. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.45.2...v1.46.0) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-05-12 04:43:11 +03:00
github.com/Antonboom/nilnil v0.1.1 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/Azure/azure-sdk-for-go v66.0.0+incompatible // indirect
:seedling: Bump github.com/goreleaser/goreleaser in /tools (#2373) Bumps [github.com/goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) from 1.11.5 to 1.12.3. - [Release notes](https://github.com/goreleaser/goreleaser/releases) - [Changelog](https://github.com/goreleaser/goreleaser/blob/main/.goreleaser.yaml) - [Commits](https://github.com/goreleaser/goreleaser/compare/v1.11.5...v1.12.3) --- updated-dependencies: - dependency-name: github.com/goreleaser/goreleaser dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-31 15:47:18 +03:00
github.com/Azure/azure-sdk-for-go/sdk/azcore v1.1.1 // indirect
github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.0.0 // indirect
github.com/Azure/azure-sdk-for-go/sdk/internal v1.0.0 // indirect
github.com/Azure/azure-sdk-for-go/sdk/storage/azblob v0.4.1 // indirect
Add a validation step for goreleaser
2021-11-23 19:56:21 +03:00
github.com/Azure/go-autorest v14.2.0+incompatible // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/Azure/go-autorest/autorest v0.11.28 // indirect
github.com/Azure/go-autorest/autorest/adal v0.9.21 // indirect
:seedling: Fix containerd Vulnerability (#1560) Fixes the containerd vulns. https://github.com/ossf/scorecard/issues/1537 Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com> Co-authored-by: Stephen Augustus <foo@auggie.dev>
2022-02-23 03:41:56 +03:00
github.com/Azure/go-autorest/autorest/azure/auth v0.5.11 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/Azure/go-autorest/autorest/azure/cli v0.4.6 // indirect
Add a validation step for goreleaser
2021-11-23 19:56:21 +03:00
github.com/Azure/go-autorest/autorest/date v0.3.0 // indirect
github.com/Azure/go-autorest/autorest/to v0.4.0 // indirect
github.com/Azure/go-autorest/autorest/validation v0.3.1 // indirect
github.com/Azure/go-autorest/logger v0.2.1 // indirect
github.com/Azure/go-autorest/tracing v0.6.0 // indirect
:seedling: Bump github.com/goreleaser/goreleaser in /tools (#2373) Bumps [github.com/goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) from 1.11.5 to 1.12.3. - [Release notes](https://github.com/goreleaser/goreleaser/releases) - [Changelog](https://github.com/goreleaser/goreleaser/blob/main/.goreleaser.yaml) - [Commits](https://github.com/goreleaser/goreleaser/compare/v1.11.5...v1.12.3) --- updated-dependencies: - dependency-name: github.com/goreleaser/goreleaser dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-31 15:47:18 +03:00
github.com/AzureAD/microsoft-authentication-library-for-go v0.4.0 // indirect
:seedling: Bump github.com/golangci/golangci-lint in /tools Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.50.0 to 1.50.1. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.50.0...v1.50.1) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
2022-10-30 16:46:53 +03:00
github.com/BurntSushi/toml v1.2.1 // indirect
:seedling: Moving tools dependencies to separate go.mod * Moving the tools dependencies to a separate go.mod to reduce the dependencies on scorecard. * This is also increases the security posture by having less dependencies on the main go.mod
2021-09-06 20:34:17 +03:00
github.com/Djarvur/go-err113 v0.0.0-20210108212216-aea10b59be24 // indirect
:seedling: Bump github.com/golangci/golangci-lint in /tools (#2331) Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.48.0 to 1.50.0. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.48.0...v1.50.0) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 16:57:46 +03:00
github.com/GaijinEntertainment/go-exhaustruct/v2 v2.3.0 // indirect
Add a validation step for goreleaser
2021-11-23 19:56:21 +03:00
github.com/Masterminds/goutils v1.1.1 // indirect
:seedling: Moving tools dependencies to separate go.mod * Moving the tools dependencies to a separate go.mod to reduce the dependencies on scorecard. * This is also increases the security posture by having less dependencies on the main go.mod
2021-09-06 20:34:17 +03:00
github.com/Masterminds/semver v1.5.0 // indirect
:seedling: Bump github.com/goreleaser/goreleaser in /tools (#2573) Bumps [github.com/goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) from 1.13.1 to 1.14.0. - [Release notes](https://github.com/goreleaser/goreleaser/releases) - [Changelog](https://github.com/goreleaser/goreleaser/blob/main/.goreleaser.yaml) - [Commits](https://github.com/goreleaser/goreleaser/compare/v1.13.1...v1.14.0) --- updated-dependencies: - dependency-name: github.com/goreleaser/goreleaser dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-06 23:36:46 +03:00
github.com/Masterminds/semver/v3 v3.2.0 // indirect
Add a validation step for goreleaser
2021-11-23 19:56:21 +03:00
github.com/Masterminds/sprig v2.22.0+incompatible // indirect
:seedling: Fix containerd Vulnerability (#1560) Fixes the containerd vulns. https://github.com/ossf/scorecard/issues/1537 Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com> Co-authored-by: Stephen Augustus <foo@auggie.dev>
2022-02-23 03:41:56 +03:00
github.com/Microsoft/go-winio v0.5.2 // indirect
:seedling: Bump github.com/golangci/golangci-lint in /tools (#2331) Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.48.0 to 1.50.0. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.48.0...v1.50.0) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 16:57:46 +03:00
github.com/OpenPeeDeeP/depguard v1.1.1 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/ProtonMail/go-crypto v0.0.0-20220812142511-0d231b687066 // indirect
Add a validation step for goreleaser
2021-11-23 19:56:21 +03:00
github.com/acomagu/bufpipe v1.0.3 // indirect
🌱 add google/ko support for building/pusing container image (#1127) * feat: add google/ko support for building/pusing container image Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com> * feat: updates according to reviews Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2021-10-26 20:22:22 +03:00
github.com/alessio/shellescape v1.4.1 // indirect
:seedling: Moving tools dependencies to separate go.mod * Moving the tools dependencies to a separate go.mod to reduce the dependencies on scorecard. * This is also increases the security posture by having less dependencies on the main go.mod
2021-09-06 20:34:17 +03:00
github.com/alexkohler/prealloc v1.0.0 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/alingse/asasalint v0.0.11 // indirect
:seedling: Fix containerd Vulnerability (#1560) Fixes the containerd vulns. https://github.com/ossf/scorecard/issues/1537 Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com> Co-authored-by: Stephen Augustus <foo@auggie.dev>
2022-02-23 03:41:56 +03:00
github.com/asaskevich/govalidator v0.0.0-20210307081110-f21760c49a8d // indirect
:seedling: Bump github.com/golangci/golangci-lint from 1.42.1 to 1.44.0 in /tools (#1540)
2022-01-27 05:56:56 +03:00
github.com/ashanbrown/forbidigo v1.3.0 // indirect
:seedling: Bump github.com/golangci/golangci-lint from 1.44.2 to 1.45.0 in /tools (#1757) * :seedling: Bump github.com/golangci/golangci-lint in /tools Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.44.2 to 1.45.0. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.44.2...v1.45.0) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * golangci-lint: Surface and fix as many lint warnings automatically Signed-off-by: Stephen Augustus <foo@auggie.dev> * generated: Run golangci-lint with `fix: true` Signed-off-by: Stephen Augustus <foo@auggie.dev> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Stephen Augustus <foo@auggie.dev>
2022-03-23 05:23:39 +03:00
github.com/ashanbrown/makezero v1.1.1 // indirect
:seedling: Bump github.com/goreleaser/goreleaser in /tools (#2573) Bumps [github.com/goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) from 1.13.1 to 1.14.0. - [Release notes](https://github.com/goreleaser/goreleaser/releases) - [Changelog](https://github.com/goreleaser/goreleaser/blob/main/.goreleaser.yaml) - [Commits](https://github.com/goreleaser/goreleaser/compare/v1.13.1...v1.14.0) --- updated-dependencies: - dependency-name: github.com/goreleaser/goreleaser dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-06 23:36:46 +03:00
github.com/atc0005/go-teams-notify/v2 v2.7.0 // indirect
:seedling: Fix cosign vulnerability (#2283) - Fixed the cosign vulnerability Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-09-21 18:51:09 +03:00
github.com/aws/aws-sdk-go v1.44.93 // indirect
github.com/aws/aws-sdk-go-v2 v1.16.14 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.4.4 // indirect
:seedling: Fix cosign vulnerability (#2283) - Fixed the cosign vulnerability Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-09-21 18:51:09 +03:00
github.com/aws/aws-sdk-go-v2/config v1.17.5 // indirect
github.com/aws/aws-sdk-go-v2/credentials v1.12.18 // indirect
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.12.15 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.11.25 // indirect
:seedling: Fix cosign vulnerability (#2283) - Fixed the cosign vulnerability Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-09-21 18:51:09 +03:00
github.com/aws/aws-sdk-go-v2/internal/configsources v1.1.21 // indirect
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.4.15 // indirect
github.com/aws/aws-sdk-go-v2/internal/ini v1.3.22 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/aws/aws-sdk-go-v2/internal/v4a v1.0.9 // indirect
github.com/aws/aws-sdk-go-v2/service/ecr v1.17.12 // indirect
github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.13.12 // indirect
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.9.5 // indirect
github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.1.13 // indirect
:seedling: Fix cosign vulnerability (#2283) - Fixed the cosign vulnerability Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-09-21 18:51:09 +03:00
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.9.15 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.13.12 // indirect
:seedling: Fix cosign vulnerability (#2283) - Fixed the cosign vulnerability Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-09-21 18:51:09 +03:00
github.com/aws/aws-sdk-go-v2/service/kms v1.18.9 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/aws/aws-sdk-go-v2/service/s3 v1.27.5 // indirect
:seedling: Fix cosign vulnerability (#2283) - Fixed the cosign vulnerability Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-09-21 18:51:09 +03:00
github.com/aws/aws-sdk-go-v2/service/sso v1.11.21 // indirect
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.13.3 // indirect
github.com/aws/aws-sdk-go-v2/service/sts v1.16.17 // indirect
github.com/aws/smithy-go v1.13.2 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.0.0-20220802171026-617dc7abb2ea // indirect
:seedling: Bump github.com/goreleaser/goreleaser in /tools (#2373) Bumps [github.com/goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) from 1.11.5 to 1.12.3. - [Release notes](https://github.com/goreleaser/goreleaser/releases) - [Changelog](https://github.com/goreleaser/goreleaser/blob/main/.goreleaser.yaml) - [Commits](https://github.com/goreleaser/goreleaser/compare/v1.11.5...v1.12.3) --- updated-dependencies: - dependency-name: github.com/goreleaser/goreleaser dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-31 15:47:18 +03:00
github.com/aymanbagabas/go-osc52 v1.2.1 // indirect
:seedling: Moving tools dependencies to separate go.mod * Moving the tools dependencies to a separate go.mod to reduce the dependencies on scorecard. * This is also increases the security posture by having less dependencies on the main go.mod
2021-09-06 20:34:17 +03:00
github.com/beorn7/perks v1.0.1 // indirect
github.com/bkielbasa/cyclop v1.2.0 // indirect
Add a validation step for goreleaser
2021-11-23 19:56:21 +03:00
github.com/blakesmith/ar v0.0.0-20190502131153-809d4375e1fb // indirect
:seedling: Bump github.com/golangci/golangci-lint in /tools Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.45.2 to 1.46.0. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.45.2...v1.46.0) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-05-12 04:43:11 +03:00
github.com/blizzy78/varnamelen v0.8.0 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/bmatcuk/doublestar/v4 v4.2.0 // indirect
:seedling: Moving tools dependencies to separate go.mod * Moving the tools dependencies to a separate go.mod to reduce the dependencies on scorecard. * This is also increases the security posture by having less dependencies on the main go.mod
2021-09-06 20:34:17 +03:00
github.com/bombsimon/wsl/v3 v3.3.0 // indirect
:seedling: Bump github.com/golangci/golangci-lint in /tools Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.45.2 to 1.46.0. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.45.2...v1.46.0) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-05-12 04:43:11 +03:00
github.com/breml/bidichk v0.2.3 // indirect
github.com/breml/errchkjson v0.3.0 // indirect
:seedling: Bump github.com/golangci/golangci-lint from 1.42.1 to 1.44.0 in /tools (#1540)
2022-01-27 05:56:56 +03:00
github.com/butuzov/ireturn v0.1.1 // indirect
:seedling: Bump github.com/goreleaser/goreleaser in /tools Bumps [github.com/goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) from 1.10.3 to 1.11.5. - [Release notes](https://github.com/goreleaser/goreleaser/releases) - [Changelog](https://github.com/goreleaser/goreleaser/blob/main/.goreleaser.yaml) - [Commits](https://github.com/goreleaser/goreleaser/compare/v1.10.3...v1.11.5) --- updated-dependencies: - dependency-name: github.com/goreleaser/goreleaser dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-10-06 23:02:15 +03:00
github.com/caarlos0/ctrlc v1.2.0 // indirect
github.com/caarlos0/env/v6 v6.10.1 // indirect
:seedling: Bump github.com/goreleaser/goreleaser in /tools Bumps [github.com/goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) from 1.0.0 to 1.3.1. - [Release notes](https://github.com/goreleaser/goreleaser/releases) - [Changelog](https://github.com/goreleaser/goreleaser/blob/main/.goreleaser.yaml) - [Commits](https://github.com/goreleaser/goreleaser/compare/v1.0.0...v1.3.1) --- updated-dependencies: - dependency-name: github.com/goreleaser/goreleaser dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-01-27 04:08:18 +03:00
github.com/caarlos0/go-reddit/v3 v3.0.1 // indirect
Add a validation step for goreleaser
2021-11-23 19:56:21 +03:00
github.com/caarlos0/go-shellwords v1.0.12 // indirect
:seedling: Bump github.com/goreleaser/goreleaser in /tools (#2573) Bumps [github.com/goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) from 1.13.1 to 1.14.0. - [Release notes](https://github.com/goreleaser/goreleaser/releases) - [Changelog](https://github.com/goreleaser/goreleaser/blob/main/.goreleaser.yaml) - [Commits](https://github.com/goreleaser/goreleaser/compare/v1.13.1...v1.14.0) --- updated-dependencies: - dependency-name: github.com/goreleaser/goreleaser dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-06 23:36:46 +03:00
github.com/caarlos0/log v0.2.1 // indirect
:seedling: Bump github.com/goreleaser/goreleaser in /tools Bumps [github.com/goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) from 1.0.0 to 1.3.1. - [Release notes](https://github.com/goreleaser/goreleaser/releases) - [Changelog](https://github.com/goreleaser/goreleaser/blob/main/.goreleaser.yaml) - [Commits](https://github.com/goreleaser/goreleaser/compare/v1.0.0...v1.3.1) --- updated-dependencies: - dependency-name: github.com/goreleaser/goreleaser dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-01-27 04:08:18 +03:00
github.com/cavaliergopher/cpio v1.0.1 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/cenkalti/backoff/v4 v4.1.3 // indirect
:seedling: Fixed the opencontainer image-spec vuln
2021-11-24 22:01:19 +03:00
github.com/cespare/xxhash/v2 v2.1.2 // indirect
:seedling: Bump github.com/golangci/golangci-lint from 1.42.1 to 1.44.0 in /tools (#1540)
2022-01-27 05:56:56 +03:00
github.com/charithe/durationcheck v0.0.9 // indirect
:seedling: Bump github.com/goreleaser/goreleaser in /tools Bumps [github.com/goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) from 1.10.3 to 1.11.5. - [Release notes](https://github.com/goreleaser/goreleaser/releases) - [Changelog](https://github.com/goreleaser/goreleaser/blob/main/.goreleaser.yaml) - [Commits](https://github.com/goreleaser/goreleaser/compare/v1.10.3...v1.11.5) --- updated-dependencies: - dependency-name: github.com/goreleaser/goreleaser dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-10-06 23:02:15 +03:00
github.com/charmbracelet/lipgloss v0.6.1-0.20220911181249-6304a734e792 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/chavacava/garif v0.0.0-20220630083739-93517212f375 // indirect
github.com/chrismellard/docker-credential-acr-env v0.0.0-20220327082430-c57b701bfc08 // indirect
github.com/cloudflare/circl v1.2.0 // indirect
github.com/containerd/stargz-snapshotter/estargz v0.12.0 // indirect
github.com/cpuguy83/go-md2man/v2 v2.0.2 // indirect
:seedling: Bump github.com/golangci/golangci-lint in /tools (#2331) Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.48.0 to 1.50.0. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.48.0...v1.50.0) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 16:57:46 +03:00
github.com/curioswitch/go-reassign v0.2.0 // indirect
:seedling: Bump github.com/golangci/golangci-lint in /tools Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.50.0 to 1.50.1. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.50.0...v1.50.1) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
2022-10-30 16:46:53 +03:00
github.com/daixiang0/gci v0.8.1 // indirect
:seedling: Moving tools dependencies to separate go.mod * Moving the tools dependencies to a separate go.mod to reduce the dependencies on scorecard. * This is also increases the security posture by having less dependencies on the main go.mod
2021-09-06 20:34:17 +03:00
github.com/davecgh/go-spew v1.1.1 // indirect
:seedling: Bump github.com/golangci/golangci-lint from 1.44.2 to 1.45.0 in /tools (#1757) * :seedling: Bump github.com/golangci/golangci-lint in /tools Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.44.2 to 1.45.0. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.44.2...v1.45.0) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * golangci-lint: Surface and fix as many lint warnings automatically Signed-off-by: Stephen Augustus <foo@auggie.dev> * generated: Run golangci-lint with `fix: true` Signed-off-by: Stephen Augustus <foo@auggie.dev> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Stephen Augustus <foo@auggie.dev>
2022-03-23 05:23:39 +03:00
github.com/denis-tingaikin/go-header v0.4.3 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/dghubble/go-twitter v0.0.0-20220716041154-837915ec2f79 // indirect
:seedling: Bump github.com/goreleaser/goreleaser in /tools (#2573) Bumps [github.com/goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) from 1.13.1 to 1.14.0. - [Release notes](https://github.com/goreleaser/goreleaser/releases) - [Changelog](https://github.com/goreleaser/goreleaser/blob/main/.goreleaser.yaml) - [Commits](https://github.com/goreleaser/goreleaser/compare/v1.13.1...v1.14.0) --- updated-dependencies: - dependency-name: github.com/goreleaser/goreleaser dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-06 23:36:46 +03:00
github.com/dghubble/oauth1 v0.7.2 // indirect
:seedling: Bump github.com/goreleaser/goreleaser in /tools Bumps [github.com/goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) from 1.0.0 to 1.3.1. - [Release notes](https://github.com/goreleaser/goreleaser/releases) - [Changelog](https://github.com/goreleaser/goreleaser/blob/main/.goreleaser.yaml) - [Commits](https://github.com/goreleaser/goreleaser/compare/v1.0.0...v1.3.1) --- updated-dependencies: - dependency-name: github.com/goreleaser/goreleaser dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-01-27 04:08:18 +03:00
github.com/dghubble/sling v1.4.0 // indirect
Add a validation step for goreleaser
2021-11-23 19:56:21 +03:00
github.com/dimchansky/utfbom v1.1.1 // indirect
:seedling: Bump github.com/goreleaser/goreleaser in /tools (#2573) Bumps [github.com/goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) from 1.13.1 to 1.14.0. - [Release notes](https://github.com/goreleaser/goreleaser/releases) - [Changelog](https://github.com/goreleaser/goreleaser/blob/main/.goreleaser.yaml) - [Commits](https://github.com/goreleaser/goreleaser/compare/v1.13.1...v1.14.0) --- updated-dependencies: - dependency-name: github.com/goreleaser/goreleaser dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-06 23:36:46 +03:00
github.com/disgoorg/disgo v0.14.1 // indirect
github.com/disgoorg/json v1.0.0 // indirect
:seedling: Bump github.com/goreleaser/goreleaser in /tools Bumps [github.com/goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) from 1.10.3 to 1.11.5. - [Release notes](https://github.com/goreleaser/goreleaser/releases) - [Changelog](https://github.com/goreleaser/goreleaser/blob/main/.goreleaser.yaml) - [Commits](https://github.com/goreleaser/goreleaser/compare/v1.10.3...v1.11.5) --- updated-dependencies: - dependency-name: github.com/goreleaser/goreleaser dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-10-06 23:02:15 +03:00
github.com/disgoorg/log v1.2.0 // indirect
:seedling: Bump github.com/goreleaser/goreleaser in /tools (#2373) Bumps [github.com/goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) from 1.11.5 to 1.12.3. - [Release notes](https://github.com/goreleaser/goreleaser/releases) - [Changelog](https://github.com/goreleaser/goreleaser/blob/main/.goreleaser.yaml) - [Commits](https://github.com/goreleaser/goreleaser/compare/v1.11.5...v1.12.3) --- updated-dependencies: - dependency-name: github.com/goreleaser/goreleaser dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-31 15:47:18 +03:00
github.com/disgoorg/snowflake/v2 v2.0.1 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/docker/cli v20.10.17+incompatible // indirect
github.com/docker/distribution v2.8.1+incompatible // indirect
github.com/docker/docker v20.10.17+incompatible // indirect
:seedling: Fixed the opencontainer image-spec vuln
2021-11-24 22:01:19 +03:00
github.com/docker/docker-credential-helpers v0.6.4 // indirect
🌱 add google/ko support for building/pusing container image (#1127) * feat: add google/ko support for building/pusing container image Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com> * feat: updates according to reviews Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2021-10-26 20:22:22 +03:00
github.com/docker/go-connections v0.4.0 // indirect
github.com/docker/go-units v0.4.0 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/dprotaso/go-yit v0.0.0-20220510233725-9ba8df137936 // indirect
github.com/emirpasic/gods v1.18.1 // indirect
:seedling: Bump github.com/golangci/golangci-lint from 1.42.1 to 1.44.0 in /tools (#1540)
2022-01-27 05:56:56 +03:00
github.com/esimonov/ifshort v1.0.4 // indirect
:seedling: Moving tools dependencies to separate go.mod * Moving the tools dependencies to a separate go.mod to reduce the dependencies on scorecard. * This is also increases the security posture by having less dependencies on the main go.mod
2021-09-06 20:34:17 +03:00
github.com/ettle/strcase v0.1.1 // indirect
:seedling: Fix containerd Vulnerability (#1560) Fixes the containerd vulns. https://github.com/ossf/scorecard/issues/1537 Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com> Co-authored-by: Stephen Augustus <foo@auggie.dev>
2022-02-23 03:41:56 +03:00
github.com/evanphx/json-patch/v5 v5.6.0 // indirect
:seedling: Fix Vulns for containerd
2022-01-21 20:11:25 +03:00
github.com/fatih/color v1.13.0 // indirect
:seedling: Moving tools dependencies to separate go.mod * Moving the tools dependencies to a separate go.mod to reduce the dependencies on scorecard. * This is also increases the security posture by having less dependencies on the main go.mod
2021-09-06 20:34:17 +03:00
github.com/fatih/structtag v1.2.0 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/firefart/nonamedreturns v1.0.4 // indirect
:seedling: Bump github.com/golangci/golangci-lint in /tools Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.45.2 to 1.46.0. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.45.2...v1.46.0) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-05-12 04:43:11 +03:00
github.com/fsnotify/fsnotify v1.5.4 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/fzipp/gocyclo v0.6.0 // indirect
:seedling: Bump github.com/golangci/golangci-lint in /tools (#2331) Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.48.0 to 1.50.0. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.48.0...v1.50.0) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 16:57:46 +03:00
github.com/go-critic/go-critic v0.6.5 // indirect
Add a validation step for goreleaser
2021-11-23 19:56:21 +03:00
github.com/go-git/gcfg v1.5.0 // indirect
github.com/go-git/go-billy/v5 v5.3.1 // indirect
github.com/go-git/go-git/v5 v5.4.2 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/go-logr/logr v1.2.3 // indirect
github.com/go-openapi/analysis v0.21.4 // indirect
github.com/go-openapi/errors v0.20.3 // indirect
:seedling: Fix containerd Vulnerability (#1560) Fixes the containerd vulns. https://github.com/ossf/scorecard/issues/1537 Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com> Co-authored-by: Stephen Augustus <foo@auggie.dev>
2022-02-23 03:41:56 +03:00
github.com/go-openapi/jsonpointer v0.19.5 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/go-openapi/jsonreference v0.20.0 // indirect
:seedling: Fix cosign vulnerability (#2283) - Fixed the cosign vulnerability Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-09-21 18:51:09 +03:00
github.com/go-openapi/loads v0.21.2 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/go-openapi/runtime v0.24.1 // indirect
:seedling: Fix cosign vulnerability (#2283) - Fixed the cosign vulnerability Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-09-21 18:51:09 +03:00
github.com/go-openapi/spec v0.20.7 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/go-openapi/strfmt v0.21.3 // indirect
:seedling: Fix cosign vulnerability (#2283) - Fixed the cosign vulnerability Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-09-21 18:51:09 +03:00
github.com/go-openapi/swag v0.22.3 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/go-openapi/validate v0.22.0 // indirect
:seedling: Moving tools dependencies to separate go.mod * Moving the tools dependencies to a separate go.mod to reduce the dependencies on scorecard. * This is also increases the security posture by having less dependencies on the main go.mod
2021-09-06 20:34:17 +03:00
github.com/go-task/slim-sprig v0.0.0-20210107165309-348f09dbbbc0 // indirect
Add a validation step for goreleaser
2021-11-23 19:56:21 +03:00
github.com/go-telegram-bot-api/telegram-bot-api v4.6.4+incompatible // indirect
:seedling: Moving tools dependencies to separate go.mod * Moving the tools dependencies to a separate go.mod to reduce the dependencies on scorecard. * This is also increases the security posture by having less dependencies on the main go.mod
2021-09-06 20:34:17 +03:00
github.com/go-toolsmith/astcast v1.0.0 // indirect
:seedling: Bump github.com/golangci/golangci-lint in /tools (#2331) Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.48.0 to 1.50.0. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.48.0...v1.50.0) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 16:57:46 +03:00
github.com/go-toolsmith/astcopy v1.0.2 // indirect
github.com/go-toolsmith/astequal v1.0.3 // indirect
:seedling: Moving tools dependencies to separate go.mod * Moving the tools dependencies to a separate go.mod to reduce the dependencies on scorecard. * This is also increases the security posture by having less dependencies on the main go.mod
2021-09-06 20:34:17 +03:00
github.com/go-toolsmith/astfmt v1.0.0 // indirect
github.com/go-toolsmith/astp v1.0.0 // indirect
github.com/go-toolsmith/strparse v1.0.0 // indirect
github.com/go-toolsmith/typep v1.0.2 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/go-xmlfmt/xmlfmt v0.0.0-20220206211657-0a94163c4677 // indirect
:seedling: Moving tools dependencies to separate go.mod * Moving the tools dependencies to a separate go.mod to reduce the dependencies on scorecard. * This is also increases the security posture by having less dependencies on the main go.mod
2021-09-06 20:34:17 +03:00
github.com/gobwas/glob v0.2.3 // indirect
github.com/gofrs/flock v0.8.1 // indirect
🌱 add google/ko support for building/pusing container image (#1127) * feat: add google/ko support for building/pusing container image Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com> * feat: updates according to reviews Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2021-10-26 20:22:22 +03:00
github.com/gogo/protobuf v1.3.2 // indirect
:seedling: Bump github.com/goreleaser/goreleaser in /tools (#2373) Bumps [github.com/goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) from 1.11.5 to 1.12.3. - [Release notes](https://github.com/goreleaser/goreleaser/releases) - [Changelog](https://github.com/goreleaser/goreleaser/blob/main/.goreleaser.yaml) - [Commits](https://github.com/goreleaser/goreleaser/compare/v1.11.5...v1.12.3) --- updated-dependencies: - dependency-name: github.com/goreleaser/goreleaser dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-31 15:47:18 +03:00
github.com/golang-jwt/jwt v3.2.2+incompatible // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/golang-jwt/jwt/v4 v4.4.2 // indirect
Add a validation step for goreleaser
2021-11-23 19:56:21 +03:00
github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
:seedling: Moving tools dependencies to separate go.mod * Moving the tools dependencies to a separate go.mod to reduce the dependencies on scorecard. * This is also increases the security posture by having less dependencies on the main go.mod
2021-09-06 20:34:17 +03:00
github.com/golang/protobuf v1.5.2 // indirect
github.com/golangci/check v0.0.0-20180506172741-cfe4005ccda2 // indirect
github.com/golangci/dupl v0.0.0-20180902072040-3e9179ac440a // indirect
:seedling: Bump github.com/golangci/golangci-lint in /tools Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.45.2 to 1.46.0. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.45.2...v1.46.0) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-05-12 04:43:11 +03:00
github.com/golangci/go-misc v0.0.0-20220329215616-d24fe342adfe // indirect
:seedling: Bump github.com/golangci/golangci-lint in /tools (#2331) Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.48.0 to 1.50.0. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.48.0...v1.50.0) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 16:57:46 +03:00
github.com/golangci/gofmt v0.0.0-20220901101216-f2edd75033f2 // indirect
:seedling: Moving tools dependencies to separate go.mod * Moving the tools dependencies to a separate go.mod to reduce the dependencies on scorecard. * This is also increases the security posture by having less dependencies on the main go.mod
2021-09-06 20:34:17 +03:00
github.com/golangci/lint-1 v0.0.0-20191013205115-297bf364a8e0 // indirect
github.com/golangci/maligned v0.0.0-20180506175553-b1d89398deca // indirect
github.com/golangci/misspell v0.3.5 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/golangci/revgrep v0.0.0-20220804021717-745bb2f7c2e6 // indirect
:seedling: Moving tools dependencies to separate go.mod * Moving the tools dependencies to a separate go.mod to reduce the dependencies on scorecard. * This is also increases the security posture by having less dependencies on the main go.mod
2021-09-06 20:34:17 +03:00
github.com/golangci/unconvert v0.0.0-20180507085042-28b1c447d1f4 // indirect
:seedling: Fix cosign vulnerability (#2283) - Fixed the cosign vulnerability Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-09-21 18:51:09 +03:00
github.com/google/go-cmp v0.5.9 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/google/go-containerregistry v0.11.0 // indirect
:seedling: Bump github.com/goreleaser/goreleaser in /tools (#2573) Bumps [github.com/goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) from 1.13.1 to 1.14.0. - [Release notes](https://github.com/goreleaser/goreleaser/releases) - [Changelog](https://github.com/goreleaser/goreleaser/blob/main/.goreleaser.yaml) - [Commits](https://github.com/goreleaser/goreleaser/compare/v1.13.1...v1.14.0) --- updated-dependencies: - dependency-name: github.com/goreleaser/goreleaser dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-06 23:36:46 +03:00
github.com/google/go-github/v48 v48.2.0 // indirect
Add a validation step for goreleaser
2021-11-23 19:56:21 +03:00
github.com/google/go-querystring v1.1.0 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/google/pprof v0.0.0-20220729232143-a41b82acbcb1 // indirect
Add a validation step for goreleaser
2021-11-23 19:56:21 +03:00
github.com/google/uuid v1.3.0 // indirect
github.com/google/wire v0.5.0 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/googleapis/enterprise-certificate-proxy v0.1.0 // indirect
github.com/googleapis/gax-go/v2 v2.5.1 // indirect
:seedling: Bump github.com/golangci/golangci-lint from 1.42.1 to 1.44.0 in /tools (#1540)
2022-01-27 05:56:56 +03:00
github.com/gordonklaus/ineffassign v0.0.0-20210914165742-4cc7213b9bc8 // indirect
:seedling: Bump github.com/goreleaser/goreleaser in /tools Bumps [github.com/goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) from 1.10.3 to 1.11.5. - [Release notes](https://github.com/goreleaser/goreleaser/releases) - [Changelog](https://github.com/goreleaser/goreleaser/blob/main/.goreleaser.yaml) - [Commits](https://github.com/goreleaser/goreleaser/compare/v1.10.3...v1.11.5) --- updated-dependencies: - dependency-name: github.com/goreleaser/goreleaser dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-10-06 23:02:15 +03:00
github.com/goreleaser/chglog v0.2.2 // indirect
:seedling: Bump github.com/goreleaser/goreleaser in /tools (#1632)
2022-02-14 14:35:10 +03:00
github.com/goreleaser/fileglob v1.3.0 // indirect
:seedling: Bump github.com/goreleaser/goreleaser in /tools (#2573) Bumps [github.com/goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) from 1.13.1 to 1.14.0. - [Release notes](https://github.com/goreleaser/goreleaser/releases) - [Changelog](https://github.com/goreleaser/goreleaser/blob/main/.goreleaser.yaml) - [Commits](https://github.com/goreleaser/goreleaser/compare/v1.13.1...v1.14.0) --- updated-dependencies: - dependency-name: github.com/goreleaser/goreleaser dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-06 23:36:46 +03:00
github.com/goreleaser/nfpm/v2 v2.22.2 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/gorilla/websocket v1.5.0 // indirect
:seedling: Bump github.com/golangci/golangci-lint from 1.42.1 to 1.44.0 in /tools (#1540)
2022-01-27 05:56:56 +03:00
github.com/gostaticanalysis/analysisutil v0.7.1 // indirect
github.com/gostaticanalysis/comment v1.4.2 // indirect
github.com/gostaticanalysis/forcetypeassert v0.1.0 // indirect
:seedling: Moving tools dependencies to separate go.mod * Moving the tools dependencies to a separate go.mod to reduce the dependencies on scorecard. * This is also increases the security posture by having less dependencies on the main go.mod
2021-09-06 20:34:17 +03:00
github.com/gostaticanalysis/nilerr v0.1.1 // indirect
:seedling: Fixed the opencontainer image-spec vuln
2021-11-24 22:01:19 +03:00
github.com/hashicorp/errwrap v1.1.0 // indirect
github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
:seedling: Moving tools dependencies to separate go.mod * Moving the tools dependencies to a separate go.mod to reduce the dependencies on scorecard. * This is also increases the security posture by having less dependencies on the main go.mod
2021-09-06 20:34:17 +03:00
github.com/hashicorp/go-multierror v1.1.1 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/hashicorp/go-retryablehttp v0.7.1 // indirect
github.com/hashicorp/go-version v1.6.0 // indirect
:seedling: Moving tools dependencies to separate go.mod * Moving the tools dependencies to a separate go.mod to reduce the dependencies on scorecard. * This is also increases the security posture by having less dependencies on the main go.mod
2021-09-06 20:34:17 +03:00
github.com/hashicorp/hcl v1.0.0 // indirect
:seedling: Fix containerd Vulnerability (#1560) Fixes the containerd vulns. https://github.com/ossf/scorecard/issues/1537 Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com> Co-authored-by: Stephen Augustus <foo@auggie.dev>
2022-02-23 03:41:56 +03:00
github.com/hexops/gotextdiff v1.0.3 // indirect
Add a validation step for goreleaser
2021-11-23 19:56:21 +03:00
github.com/huandu/xstrings v1.3.2 // indirect
github.com/iancoleman/orderedmap v0.2.0 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/imdario/mergo v0.3.13 // indirect
github.com/inconshreveable/mousetrap v1.0.1 // indirect
:seedling: Bump github.com/goreleaser/goreleaser in /tools (#2469)
2022-11-21 22:26:12 +03:00
github.com/invopop/jsonschema v0.7.0 // indirect
Add a validation step for goreleaser
2021-11-23 19:56:21 +03:00
github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect
:seedling: Moving tools dependencies to separate go.mod * Moving the tools dependencies to a separate go.mod to reduce the dependencies on scorecard. * This is also increases the security posture by having less dependencies on the main go.mod
2021-09-06 20:34:17 +03:00
github.com/jgautheron/goconst v1.5.1 // indirect
:seedling: Bump github.com/golangci/golangci-lint from 1.42.1 to 1.44.0 in /tools (#1540)
2022-01-27 05:56:56 +03:00
github.com/jingyugao/rowserrcheck v1.1.1 // indirect
:seedling: Moving tools dependencies to separate go.mod * Moving the tools dependencies to a separate go.mod to reduce the dependencies on scorecard. * This is also increases the security posture by having less dependencies on the main go.mod
2021-09-06 20:34:17 +03:00
github.com/jirfag/go-printf-func-name v0.0.0-20200119135958-7558a9eaa5af // indirect
Add a validation step for goreleaser
2021-11-23 19:56:21 +03:00
github.com/jmespath/go-jmespath v0.4.0 // indirect
:seedling: Fix containerd Vulnerability (#1560) Fixes the containerd vulns. https://github.com/ossf/scorecard/issues/1537 Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com> Co-authored-by: Stephen Augustus <foo@auggie.dev>
2022-02-23 03:41:56 +03:00
github.com/josharian/intern v1.0.0 // indirect
:seedling: Bump github.com/golangci/golangci-lint from 1.42.1 to 1.44.0 in /tools (#1540)
2022-01-27 05:56:56 +03:00
github.com/julz/importas v0.1.0 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/kevinburke/ssh_config v1.2.0 // indirect
github.com/kisielk/errcheck v1.6.2 // indirect
:seedling: Moving tools dependencies to separate go.mod * Moving the tools dependencies to a separate go.mod to reduce the dependencies on scorecard. * This is also increases the security posture by having less dependencies on the main go.mod
2021-09-06 20:34:17 +03:00
github.com/kisielk/gotool v1.0.0 // indirect
:seedling: Bump github.com/golangci/golangci-lint in /tools Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.50.0 to 1.50.1. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.50.0...v1.50.1) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
2022-10-30 16:46:53 +03:00
github.com/kkHAIKE/contextcheck v1.1.3 // indirect
:seedling: Bump github.com/goreleaser/goreleaser in /tools (#2469)
2022-11-21 22:26:12 +03:00
github.com/klauspost/compress v1.15.12 // indirect
:seedling: Bump github.com/goreleaser/goreleaser in /tools Bumps [github.com/goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) from 1.5.0 to 1.6.1. - [Release notes](https://github.com/goreleaser/goreleaser/releases) - [Changelog](https://github.com/goreleaser/goreleaser/blob/main/.goreleaser.yaml) - [Commits](https://github.com/goreleaser/goreleaser/compare/v1.5.0...v1.6.1) --- updated-dependencies: - dependency-name: github.com/goreleaser/goreleaser dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-03-07 11:27:43 +03:00
github.com/klauspost/pgzip v1.2.5 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/kulti/thelper v0.6.3 // indirect
github.com/kunwardeep/paralleltest v1.0.6 // indirect
:seedling: Bump github.com/goreleaser/goreleaser in /tools (#2373) Bumps [github.com/goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) from 1.11.5 to 1.12.3. - [Release notes](https://github.com/goreleaser/goreleaser/releases) - [Changelog](https://github.com/goreleaser/goreleaser/blob/main/.goreleaser.yaml) - [Commits](https://github.com/goreleaser/goreleaser/compare/v1.11.5...v1.12.3) --- updated-dependencies: - dependency-name: github.com/goreleaser/goreleaser dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-31 15:47:18 +03:00
github.com/kylelemons/godebug v1.1.0 // indirect
:seedling: Moving tools dependencies to separate go.mod * Moving the tools dependencies to a separate go.mod to reduce the dependencies on scorecard. * This is also increases the security posture by having less dependencies on the main go.mod
2021-09-06 20:34:17 +03:00
github.com/kyoh86/exportloopref v0.1.8 // indirect
:seedling: Bump github.com/golangci/golangci-lint in /tools Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.45.2 to 1.46.0. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.45.2...v1.46.0) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-05-12 04:43:11 +03:00
github.com/ldez/gomoddirectives v0.2.3 // indirect
Fix golangci-lint issues
2022-02-20 00:14:22 +03:00
github.com/ldez/tagliatelle v0.3.1 // indirect
:seedling: Bump github.com/golangci/golangci-lint from 1.42.1 to 1.44.0 in /tools (#1540)
2022-01-27 05:56:56 +03:00
github.com/leonklingele/grouper v1.1.0 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/letsencrypt/boulder v0.0.0-20220812202448-7cd35f43e9ae // indirect
github.com/lucasb-eyer/go-colorful v1.2.0 // indirect
:seedling: Bump github.com/golangci/golangci-lint in /tools (#1924) Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.46.0 to 1.46.2. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.46.0...v1.46.2) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-05-22 17:53:42 +03:00
github.com/lufeee/execinquery v1.2.1 // indirect
:seedling: Bump github.com/golangci/golangci-lint in /tools Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.45.2 to 1.46.0. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.45.2...v1.46.0) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-05-12 04:43:11 +03:00
github.com/magiconair/properties v1.8.6 // indirect
:seedling: Fix containerd Vulnerability (#1560) Fixes the containerd vulns. https://github.com/ossf/scorecard/issues/1537 Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com> Co-authored-by: Stephen Augustus <foo@auggie.dev>
2022-02-23 03:41:56 +03:00
github.com/mailru/easyjson v0.7.7 // indirect
:seedling: Bump github.com/golangci/golangci-lint in /tools (#2331) Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.48.0 to 1.50.0. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.48.0...v1.50.0) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 16:57:46 +03:00
github.com/maratori/testableexamples v1.0.0 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/maratori/testpackage v1.1.0 // indirect
:seedling: Moving tools dependencies to separate go.mod * Moving the tools dependencies to a separate go.mod to reduce the dependencies on scorecard. * This is also increases the security posture by having less dependencies on the main go.mod
2021-09-06 20:34:17 +03:00
github.com/matoous/godox v0.0.0-20210227103229-6504466cf951 // indirect
:seedling: Bump github.com/golangci/golangci-lint in /tools (#2331) Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.48.0 to 1.50.0. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.48.0...v1.50.0) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 16:57:46 +03:00
github.com/mattn/go-colorable v0.1.13 // indirect
github.com/mattn/go-isatty v0.0.16 // indirect
:seedling: Bump github.com/goreleaser/goreleaser in /tools (#2469)
2022-11-21 22:26:12 +03:00
github.com/mattn/go-mastodon v0.0.6 // indirect
:seedling: Bump github.com/goreleaser/goreleaser in /tools (#2373) Bumps [github.com/goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) from 1.11.5 to 1.12.3. - [Release notes](https://github.com/goreleaser/goreleaser/releases) - [Changelog](https://github.com/goreleaser/goreleaser/blob/main/.goreleaser.yaml) - [Commits](https://github.com/goreleaser/goreleaser/compare/v1.11.5...v1.12.3) --- updated-dependencies: - dependency-name: github.com/goreleaser/goreleaser dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-31 15:47:18 +03:00
github.com/mattn/go-runewidth v0.0.14 // indirect
🌱 add google/ko support for building/pusing container image (#1127) * feat: add google/ko support for building/pusing container image Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com> * feat: updates according to reviews Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2021-10-26 20:22:22 +03:00
github.com/matttproud/golang_protobuf_extensions v1.0.2-0.20181231171920-c182affec369 // indirect
:seedling: Moving tools dependencies to separate go.mod * Moving the tools dependencies to a separate go.mod to reduce the dependencies on scorecard. * This is also increases the security posture by having less dependencies on the main go.mod
2021-09-06 20:34:17 +03:00
github.com/mbilski/exhaustivestruct v1.2.0 // indirect
:seedling: Bump github.com/golangci/golangci-lint in /tools (#2331) Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.48.0 to 1.50.0. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.48.0...v1.50.0) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 16:57:46 +03:00
github.com/mgechev/revive v1.2.4 // indirect
Add a validation step for goreleaser
2021-11-23 19:56:21 +03:00
github.com/mitchellh/copystructure v1.2.0 // indirect
:seedling: Moving tools dependencies to separate go.mod * Moving the tools dependencies to a separate go.mod to reduce the dependencies on scorecard. * This is also increases the security posture by having less dependencies on the main go.mod
2021-09-06 20:34:17 +03:00
github.com/mitchellh/go-homedir v1.1.0 // indirect
:seedling: Bump github.com/golangci/golangci-lint in /tools Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.45.2 to 1.46.0. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.45.2...v1.46.0) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-05-12 04:43:11 +03:00
github.com/mitchellh/mapstructure v1.5.0 // indirect
Add a validation step for goreleaser
2021-11-23 19:56:21 +03:00
github.com/mitchellh/reflectwalk v1.0.2 // indirect
:seedling: Moving tools dependencies to separate go.mod * Moving the tools dependencies to a separate go.mod to reduce the dependencies on scorecard. * This is also increases the security posture by having less dependencies on the main go.mod
2021-09-06 20:34:17 +03:00
github.com/moricho/tparallel v0.2.1 // indirect
:seedling: Bump github.com/goreleaser/goreleaser in /tools (#1632)
2022-02-14 14:35:10 +03:00
github.com/muesli/mango v0.1.0 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/muesli/mango-cobra v1.2.0 // indirect
:seedling: Bump github.com/goreleaser/goreleaser in /tools (#1632)
2022-02-14 14:35:10 +03:00
github.com/muesli/mango-pflag v0.1.0 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/muesli/reflow v0.3.0 // indirect
:seedling: Bump github.com/goreleaser/goreleaser in /tools Bumps [github.com/goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) from 1.3.1 to 1.4.1. - [Release notes](https://github.com/goreleaser/goreleaser/releases) - [Changelog](https://github.com/goreleaser/goreleaser/blob/main/.goreleaser.yaml) - [Commits](https://github.com/goreleaser/goreleaser/compare/v1.3.1...v1.4.1) --- updated-dependencies: - dependency-name: github.com/goreleaser/goreleaser dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-01-27 11:24:46 +03:00
github.com/muesli/roff v0.1.0 // indirect
:seedling: Bump github.com/goreleaser/goreleaser in /tools (#2373) Bumps [github.com/goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) from 1.11.5 to 1.12.3. - [Release notes](https://github.com/goreleaser/goreleaser/releases) - [Changelog](https://github.com/goreleaser/goreleaser/blob/main/.goreleaser.yaml) - [Commits](https://github.com/goreleaser/goreleaser/compare/v1.11.5...v1.12.3) --- updated-dependencies: - dependency-name: github.com/goreleaser/goreleaser dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-31 15:47:18 +03:00
github.com/muesli/termenv v0.13.0 // indirect
:seedling: Bump github.com/golangci/golangci-lint from 1.42.1 to 1.44.0 in /tools (#1540)
2022-01-27 05:56:56 +03:00
github.com/nakabonne/nestif v0.3.1 // indirect
:seedling: Moving tools dependencies to separate go.mod * Moving the tools dependencies to a separate go.mod to reduce the dependencies on scorecard. * This is also increases the security posture by having less dependencies on the main go.mod
2021-09-06 20:34:17 +03:00
github.com/nbutton23/zxcvbn-go v0.0.0-20210217022336-fa2cb2858354 // indirect
:seedling: Bump github.com/golangci/golangci-lint in /tools (#2331) Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.48.0 to 1.50.0. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.48.0...v1.50.0) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 16:57:46 +03:00
github.com/nishanths/exhaustive v0.8.3 // indirect
:seedling: Bump github.com/golangci/golangci-lint in /tools Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.45.2 to 1.46.0. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.45.2...v1.46.0) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-05-12 04:43:11 +03:00
github.com/nishanths/predeclared v0.2.2 // indirect
:seedling: Fix containerd Vulnerability (#1560) Fixes the containerd vulns. https://github.com/ossf/scorecard/issues/1537 Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com> Co-authored-by: Stephen Augustus <foo@auggie.dev>
2022-02-23 03:41:56 +03:00
github.com/oklog/ulid v1.3.1 // indirect
:seedling: Moving tools dependencies to separate go.mod * Moving the tools dependencies to a separate go.mod to reduce the dependencies on scorecard. * This is also increases the security posture by having less dependencies on the main go.mod
2021-09-06 20:34:17 +03:00
github.com/olekukonko/tablewriter v0.0.5 // indirect
🌱 add google/ko support for building/pusing container image (#1127) * feat: add google/ko support for building/pusing container image Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com> * feat: updates according to reviews Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2021-10-26 20:22:22 +03:00
github.com/opencontainers/go-digest v1.0.0 // indirect
feat: upgrade to ko v0.10.0 Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2022-02-18 23:27:24 +03:00
github.com/opencontainers/image-spec v1.0.3-0.20220114050600-8b9d41f48198 // indirect
:seedling: Bump github.com/golangci/golangci-lint in /tools Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.45.2 to 1.46.0. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.45.2...v1.46.0) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-05-12 04:43:11 +03:00
github.com/pelletier/go-toml v1.9.5 // indirect
:seedling: Fix cosign vulnerability (#2283) - Fixed the cosign vulnerability Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-09-21 18:51:09 +03:00
github.com/pelletier/go-toml/v2 v2.0.5 // indirect
:seedling: Moving tools dependencies to separate go.mod * Moving the tools dependencies to a separate go.mod to reduce the dependencies on scorecard. * This is also increases the security posture by having less dependencies on the main go.mod
2021-09-06 20:34:17 +03:00
github.com/phayes/checkstyle v0.0.0-20170904204023-bfd46e6a821d // indirect
:seedling: Bump github.com/goreleaser/goreleaser in /tools (#2373) Bumps [github.com/goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) from 1.11.5 to 1.12.3. - [Release notes](https://github.com/goreleaser/goreleaser/releases) - [Changelog](https://github.com/goreleaser/goreleaser/blob/main/.goreleaser.yaml) - [Commits](https://github.com/goreleaser/goreleaser/compare/v1.11.5...v1.12.3) --- updated-dependencies: - dependency-name: github.com/goreleaser/goreleaser dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-31 15:47:18 +03:00
github.com/pkg/browser v0.0.0-20210911075715-681adbf594b8 // indirect
:seedling: Moving tools dependencies to separate go.mod * Moving the tools dependencies to a separate go.mod to reduce the dependencies on scorecard. * This is also increases the security posture by having less dependencies on the main go.mod
2021-09-06 20:34:17 +03:00
github.com/pkg/errors v0.9.1 // indirect
github.com/pmezard/go-difflib v1.0.0 // indirect
:seedling: Bump github.com/golangci/golangci-lint in /tools (#2331) Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.48.0 to 1.50.0. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.48.0...v1.50.0) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 16:57:46 +03:00
github.com/polyfloyd/go-errorlint v1.0.5 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/prometheus/client_golang v1.13.0 // indirect
:seedling: Moving tools dependencies to separate go.mod * Moving the tools dependencies to a separate go.mod to reduce the dependencies on scorecard. * This is also increases the security posture by having less dependencies on the main go.mod
2021-09-06 20:34:17 +03:00
github.com/prometheus/client_model v0.2.0 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/prometheus/common v0.37.0 // indirect
github.com/prometheus/procfs v0.8.0 // indirect
:seedling: Bump github.com/golangci/golangci-lint in /tools (#2331) Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.48.0 to 1.50.0. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.48.0...v1.50.0) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 16:57:46 +03:00
github.com/quasilyte/go-ruleguard v0.3.18 // indirect
github.com/quasilyte/gogrep v0.0.0-20220828223005-86e4605de09f // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/quasilyte/regex/syntax v0.0.0-20210819130434-b3f0c404a727 // indirect
:seedling: Bump github.com/golangci/golangci-lint in /tools Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.45.2 to 1.46.0. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.45.2...v1.46.0) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-05-12 04:43:11 +03:00
github.com/quasilyte/stdinfo v0.0.0-20220114132959-f7386bf02567 // indirect
:seedling: Bump github.com/goreleaser/goreleaser in /tools Bumps [github.com/goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) from 1.10.3 to 1.11.5. - [Release notes](https://github.com/goreleaser/goreleaser/releases) - [Changelog](https://github.com/goreleaser/goreleaser/blob/main/.goreleaser.yaml) - [Commits](https://github.com/goreleaser/goreleaser/compare/v1.10.3...v1.11.5) --- updated-dependencies: - dependency-name: github.com/goreleaser/goreleaser dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-10-06 23:02:15 +03:00
github.com/rivo/uniseg v0.4.2 // indirect
Add a validation step for goreleaser
2021-11-23 19:56:21 +03:00
github.com/russross/blackfriday/v2 v2.1.0 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/ryancurrah/gomodguard v1.2.4 // indirect
:seedling: Moving tools dependencies to separate go.mod * Moving the tools dependencies to a separate go.mod to reduce the dependencies on scorecard. * This is also increases the security posture by having less dependencies on the main go.mod
2021-09-06 20:34:17 +03:00
github.com/ryanrolds/sqlclosecheck v0.3.0 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/sanposhiho/wastedassign/v2 v2.0.7 // indirect
:seedling: Bump github.com/goreleaser/goreleaser in /tools Bumps [github.com/goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) from 1.10.3 to 1.11.5. - [Release notes](https://github.com/goreleaser/goreleaser/releases) - [Changelog](https://github.com/goreleaser/goreleaser/blob/main/.goreleaser.yaml) - [Commits](https://github.com/goreleaser/goreleaser/compare/v1.10.3...v1.11.5) --- updated-dependencies: - dependency-name: github.com/goreleaser/goreleaser dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-10-06 23:02:15 +03:00
github.com/sasha-s/go-csync v0.0.0-20210812194225-61421b77c44b // indirect
:seedling: Bump github.com/golangci/golangci-lint in /tools (#2331) Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.48.0 to 1.50.0. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.48.0...v1.50.0) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 16:57:46 +03:00
github.com/sashamelentyev/interfacebloat v1.1.0 // indirect
github.com/sashamelentyev/usestdlibvars v1.20.0 // indirect
github.com/securego/gosec/v2 v2.13.1 // indirect
Add a validation step for goreleaser
2021-11-23 19:56:21 +03:00
github.com/sergi/go-diff v1.2.0 // indirect
:seedling: Moving tools dependencies to separate go.mod * Moving the tools dependencies to a separate go.mod to reduce the dependencies on scorecard. * This is also increases the security posture by having less dependencies on the main go.mod
2021-09-06 20:34:17 +03:00
github.com/shazow/go-diff v0.0.0-20160112020656-b6b7b6733b8c // indirect
:seedling: Fix cosign vulnerability (#2283) - Fixed the cosign vulnerability Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-09-21 18:51:09 +03:00
github.com/sigstore/cosign v1.12.0 // indirect
github.com/sigstore/rekor v0.11.0 // indirect
github.com/sigstore/sigstore v1.4.1-0.20220908204944-ec922cf4f1c2 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/sirupsen/logrus v1.9.0 // indirect
:seedling: Bump github.com/golangci/golangci-lint from 1.44.2 to 1.45.0 in /tools (#1757) * :seedling: Bump github.com/golangci/golangci-lint in /tools Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.44.2 to 1.45.0. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.44.2...v1.45.0) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * golangci-lint: Surface and fix as many lint warnings automatically Signed-off-by: Stephen Augustus <foo@auggie.dev> * generated: Run golangci-lint with `fix: true` Signed-off-by: Stephen Augustus <foo@auggie.dev> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Stephen Augustus <foo@auggie.dev>
2022-03-23 05:23:39 +03:00
github.com/sivchari/containedctx v1.0.2 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/sivchari/nosnakecase v1.7.0 // indirect
github.com/sivchari/tenv v1.7.0 // indirect
:seedling: Bump github.com/goreleaser/goreleaser in /tools (#2573) Bumps [github.com/goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) from 1.13.1 to 1.14.0. - [Release notes](https://github.com/goreleaser/goreleaser/releases) - [Changelog](https://github.com/goreleaser/goreleaser/blob/main/.goreleaser.yaml) - [Commits](https://github.com/goreleaser/goreleaser/compare/v1.13.1...v1.14.0) --- updated-dependencies: - dependency-name: github.com/goreleaser/goreleaser dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-06 23:36:46 +03:00
github.com/slack-go/slack v0.12.1 // indirect
:seedling: Moving tools dependencies to separate go.mod * Moving the tools dependencies to a separate go.mod to reduce the dependencies on scorecard. * This is also increases the security posture by having less dependencies on the main go.mod
2021-09-06 20:34:17 +03:00
github.com/sonatard/noctx v0.0.1 // indirect
github.com/sourcegraph/go-diff v0.6.1 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/spf13/afero v1.9.2 // indirect
github.com/spf13/cast v1.5.0 // indirect
:seedling: Bump github.com/goreleaser/goreleaser in /tools (#2469)
2022-11-21 22:26:12 +03:00
github.com/spf13/cobra v1.6.1 // indirect
:seedling: Moving tools dependencies to separate go.mod * Moving the tools dependencies to a separate go.mod to reduce the dependencies on scorecard. * This is also increases the security posture by having less dependencies on the main go.mod
2021-09-06 20:34:17 +03:00
github.com/spf13/jwalterweatherman v1.1.0 // indirect
github.com/spf13/pflag v1.0.5 // indirect
:seedling: Fix cosign vulnerability (#2283) - Fixed the cosign vulnerability Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-09-21 18:51:09 +03:00
github.com/spf13/viper v1.13.0 // indirect
:seedling: Bump github.com/golangci/golangci-lint from 1.42.1 to 1.44.0 in /tools (#1540)
2022-01-27 05:56:56 +03:00
github.com/ssgreg/nlreturn/v2 v2.2.1 // indirect
:seedling: Bump github.com/golangci/golangci-lint in /tools Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.45.2 to 1.46.0. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.45.2...v1.46.0) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-05-12 04:43:11 +03:00
github.com/stbenjam/no-sprintf-host-port v0.1.1 // indirect
:seedling: Bump github.com/goreleaser/goreleaser in /tools (#2469)
2022-11-21 22:26:12 +03:00
github.com/stretchr/objx v0.5.0 // indirect
github.com/stretchr/testify v1.8.1 // indirect
:seedling: Fix cosign vulnerability (#2283) - Fixed the cosign vulnerability Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-09-21 18:51:09 +03:00
github.com/subosito/gotenv v1.4.1 // indirect
:seedling: Bump github.com/golangci/golangci-lint from 1.42.1 to 1.44.0 in /tools (#1540)
2022-01-27 05:56:56 +03:00
github.com/tdakkota/asciicheck v0.1.1 // indirect
Add a validation step for goreleaser
2021-11-23 19:56:21 +03:00
github.com/technoweenie/multipartstreamer v1.0.1 // indirect
:seedling: Bump github.com/golangci/golangci-lint from 1.42.1 to 1.44.0 in /tools (#1540)
2022-01-27 05:56:56 +03:00
github.com/tetafro/godot v1.4.11 // indirect
:seedling: Fix cosign vulnerability (#2283) - Fixed the cosign vulnerability Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-09-21 18:51:09 +03:00
github.com/theupdateframework/go-tuf v0.5.0 // indirect
:seedling: Bump github.com/golangci/golangci-lint from 1.42.1 to 1.44.0 in /tools (#1540)
2022-01-27 05:56:56 +03:00
github.com/timakin/bodyclose v0.0.0-20210704033933-f49887972144 // indirect
:seedling: Bump github.com/golangci/golangci-lint in /tools (#2331) Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.48.0 to 1.50.0. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.48.0...v1.50.0) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 16:57:46 +03:00
github.com/timonwong/loggercheck v0.9.3 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/titanous/rocacheck v0.0.0-20171023193734-afe73141d399 // indirect
:seedling: Bump github.com/golangci/golangci-lint in /tools Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.50.0 to 1.50.1. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.50.0...v1.50.1) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
2022-10-30 16:46:53 +03:00
github.com/tomarrell/wrapcheck/v2 v2.7.0 // indirect
github.com/tommy-muehle/go-mnd/v2 v2.5.1 // indirect
:seedling: Bump github.com/goreleaser/goreleaser in /tools (#2469)
2022-11-21 22:26:12 +03:00
github.com/tomnomnom/linkheader v0.0.0-20180905144013-02ca5825eb80 // indirect
:seedling: Bump github.com/goreleaser/goreleaser in /tools (#2573) Bumps [github.com/goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) from 1.13.1 to 1.14.0. - [Release notes](https://github.com/goreleaser/goreleaser/releases) - [Changelog](https://github.com/goreleaser/goreleaser/blob/main/.goreleaser.yaml) - [Commits](https://github.com/goreleaser/goreleaser/compare/v1.13.1...v1.14.0) --- updated-dependencies: - dependency-name: github.com/goreleaser/goreleaser dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-06 23:36:46 +03:00
github.com/ulikunitz/xz v0.5.11 // indirect
:seedling: Moving tools dependencies to separate go.mod * Moving the tools dependencies to a separate go.mod to reduce the dependencies on scorecard. * This is also increases the security posture by having less dependencies on the main go.mod
2021-09-06 20:34:17 +03:00
github.com/ultraware/funlen v0.0.3 // indirect
Fix golangci-lint issues
2022-02-20 00:14:22 +03:00
github.com/ultraware/whitespace v0.0.5 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/uudashr/gocognit v1.0.6 // indirect
:seedling: Fixed the opencontainer image-spec vuln
2021-11-24 22:01:19 +03:00
github.com/vbatts/tar-split v0.11.2 // indirect
:seedling: Bump github.com/goreleaser/goreleaser in /tools Bumps [github.com/goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) from 1.10.3 to 1.11.5. - [Release notes](https://github.com/goreleaser/goreleaser/releases) - [Changelog](https://github.com/goreleaser/goreleaser/blob/main/.goreleaser.yaml) - [Commits](https://github.com/goreleaser/goreleaser/compare/v1.10.3...v1.11.5) --- updated-dependencies: - dependency-name: github.com/goreleaser/goreleaser dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-10-06 23:02:15 +03:00
github.com/withfig/autocomplete-tools/integrations/cobra v1.2.1 // indirect
:seedling: Bump github.com/goreleaser/goreleaser in /tools (#2573) Bumps [github.com/goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) from 1.13.1 to 1.14.0. - [Release notes](https://github.com/goreleaser/goreleaser/releases) - [Changelog](https://github.com/goreleaser/goreleaser/blob/main/.goreleaser.yaml) - [Commits](https://github.com/goreleaser/goreleaser/compare/v1.13.1...v1.14.0) --- updated-dependencies: - dependency-name: github.com/goreleaser/goreleaser dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-06 23:36:46 +03:00
github.com/xanzy/go-gitlab v0.77.0 // indirect
Add a validation step for goreleaser
2021-11-23 19:56:21 +03:00
github.com/xanzy/ssh-agent v0.3.1 // indirect
:seedling: Bump github.com/golangci/golangci-lint from 1.42.1 to 1.44.0 in /tools (#1540)
2022-01-27 05:56:56 +03:00
github.com/yagipy/maintidx v1.0.0 // indirect
:seedling: Bump github.com/golangci/golangci-lint in /tools Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.45.2 to 1.46.0. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.45.2...v1.46.0) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-05-12 04:43:11 +03:00
github.com/yeya24/promlinter v0.2.0 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
gitlab.com/bosi/decorder v0.2.3 // indirect
gitlab.com/digitalxero/go-conventional-commit v1.0.7 // indirect
go.mongodb.org/mongo-driver v1.10.1 // indirect
Add a validation step for goreleaser
2021-11-23 19:56:21 +03:00
go.opencensus.io v0.23.0 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
go.uber.org/atomic v1.10.0 // indirect
go.uber.org/automaxprocs v1.5.1 // indirect
go.uber.org/multierr v1.8.0 // indirect
go.uber.org/zap v1.22.0 // indirect
:seedling: Bump github.com/goreleaser/goreleaser in /tools (#2373) Bumps [github.com/goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) from 1.11.5 to 1.12.3. - [Release notes](https://github.com/goreleaser/goreleaser/releases) - [Changelog](https://github.com/goreleaser/goreleaser/blob/main/.goreleaser.yaml) - [Commits](https://github.com/goreleaser/goreleaser/compare/v1.11.5...v1.12.3) --- updated-dependencies: - dependency-name: github.com/goreleaser/goreleaser dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-31 15:47:18 +03:00
gocloud.dev v0.27.0 // indirect
:seedling: Bump github.com/onsi/ginkgo/v2 from 2.1.6 to 2.4.0 in /tools Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.1.6 to 2.4.0. - [Release notes](https://github.com/onsi/ginkgo/releases) - [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md) - [Commits](https://github.com/onsi/ginkgo/compare/v2.1.6...v2.4.0) --- updated-dependencies: - dependency-name: github.com/onsi/ginkgo/v2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-10-29 22:10:40 +03:00
golang.org/x/crypto v0.1.0 // indirect
:seedling: Bump github.com/golangci/golangci-lint in /tools (#2331) Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.48.0 to 1.50.0. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.48.0...v1.50.0) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 16:57:46 +03:00
golang.org/x/exp v0.0.0-20220722155223-a9213eeb770e // indirect
golang.org/x/exp/typeparams v0.0.0-20220827204233-334a2380cb91 // indirect
:seedling: Bump github.com/onsi/ginkgo/v2 from 2.1.6 to 2.4.0 in /tools Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.1.6 to 2.4.0. - [Release notes](https://github.com/onsi/ginkgo/releases) - [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md) - [Commits](https://github.com/onsi/ginkgo/compare/v2.1.6...v2.4.0) --- updated-dependencies: - dependency-name: github.com/onsi/ginkgo/v2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-10-29 22:10:40 +03:00
golang.org/x/mod v0.6.0 // indirect
golang.org/x/net v0.1.0 // indirect
:seedling: Fix cosign vulnerability (#2283) - Fixed the cosign vulnerability Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-09-21 18:51:09 +03:00
golang.org/x/oauth2 v0.0.0-20220822191816-0ebed06d0094 // indirect
:seedling: Bump github.com/golangci/golangci-lint in /tools (#2331) Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.48.0 to 1.50.0. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.48.0...v1.50.0) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 16:57:46 +03:00
golang.org/x/sync v0.0.0-20220819030929-7fc1605a5dde // indirect
:seedling: Bump github.com/onsi/ginkgo/v2 from 2.5.0 to 2.5.1 in /tools (#2470)
2022-11-21 23:59:45 +03:00
golang.org/x/sys v0.2.0 // indirect
:seedling: Bump github.com/onsi/ginkgo/v2 from 2.1.6 to 2.4.0 in /tools Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.1.6 to 2.4.0. - [Release notes](https://github.com/onsi/ginkgo/releases) - [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md) - [Commits](https://github.com/onsi/ginkgo/compare/v2.1.6...v2.4.0) --- updated-dependencies: - dependency-name: github.com/onsi/ginkgo/v2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-10-29 22:10:40 +03:00
golang.org/x/term v0.1.0 // indirect
:seedling: Bump github.com/goreleaser/goreleaser in /tools (#2573) Bumps [github.com/goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) from 1.13.1 to 1.14.0. - [Release notes](https://github.com/goreleaser/goreleaser/releases) - [Changelog](https://github.com/goreleaser/goreleaser/blob/main/.goreleaser.yaml) - [Commits](https://github.com/goreleaser/goreleaser/compare/v1.13.1...v1.14.0) --- updated-dependencies: - dependency-name: github.com/goreleaser/goreleaser dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-06 23:36:46 +03:00
golang.org/x/text v0.5.0 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
golang.org/x/time v0.0.0-20220722155302-e5dcc9cfc0b9 // indirect
:seedling: Bump github.com/onsi/ginkgo/v2 from 2.1.6 to 2.4.0 in /tools Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.1.6 to 2.4.0. - [Release notes](https://github.com/onsi/ginkgo/releases) - [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md) - [Commits](https://github.com/onsi/ginkgo/compare/v2.1.6...v2.4.0) --- updated-dependencies: - dependency-name: github.com/onsi/ginkgo/v2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-10-29 22:10:40 +03:00
golang.org/x/tools v0.2.0 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
golang.org/x/xerrors v0.0.0-20220609144429-65e65417b02f // indirect
:seedling: Fix cosign vulnerability (#2283) - Fixed the cosign vulnerability Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-09-21 18:51:09 +03:00
google.golang.org/api v0.95.0 // indirect
Add a validation step for goreleaser
2021-11-23 19:56:21 +03:00
google.golang.org/appengine v1.6.7 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
google.golang.org/genproto v0.0.0-20220812140447-cec7f5303424 // indirect
:seedling: Fix cosign vulnerability (#2283) - Fixed the cosign vulnerability Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-09-21 18:51:09 +03:00
google.golang.org/grpc v1.49.0 // indirect
Add a validation step for goreleaser
2021-11-23 19:56:21 +03:00
gopkg.in/alexcesaro/quotedprintable.v3 v3.0.0-20150716171945-2caba252f4dc // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
gopkg.in/ini.v1 v1.67.0 // indirect
Add a validation step for goreleaser
2021-11-23 19:56:21 +03:00
gopkg.in/mail.v2 v2.3.1 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
gopkg.in/square/go-jose.v2 v2.6.0 // indirect
Add a validation step for goreleaser
2021-11-23 19:56:21 +03:00
gopkg.in/warnings.v0 v0.1.2 // indirect
:seedling: Moving tools dependencies to separate go.mod * Moving the tools dependencies to a separate go.mod to reduce the dependencies on scorecard. * This is also increases the security posture by having less dependencies on the main go.mod
2021-09-06 20:34:17 +03:00
gopkg.in/yaml.v2 v2.4.0 // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
gopkg.in/yaml.v3 v3.0.1 // indirect
honnef.co/go/tools v0.3.3 // indirect
k8s.io/apimachinery v0.24.3 // indirect
k8s.io/klog/v2 v2.70.1 // indirect
k8s.io/utils v0.0.0-20220812165043-ad590609e2e5 // indirect
:seedling: Bump github.com/golangci/golangci-lint in /tools (#2331) Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.48.0 to 1.50.0. - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](https://github.com/golangci/golangci-lint/compare/v1.48.0...v1.50.0) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 16:57:46 +03:00
mvdan.cc/gofumpt v0.4.0 // indirect
:seedling: Moving tools dependencies to separate go.mod * Moving the tools dependencies to a separate go.mod to reduce the dependencies on scorecard. * This is also increases the security posture by having less dependencies on the main go.mod
2021-09-06 20:34:17 +03:00
mvdan.cc/interfacer v0.0.0-20180901003855-c20040233aed // indirect
mvdan.cc/lint v0.0.0-20170908181259-adc824a0674b // indirect
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
mvdan.cc/unparam v0.0.0-20220706161116-678bad134442 // indirect
sigs.k8s.io/kind v0.14.0 // indirect
:seedling: Fixed the opencontainer image-spec vuln
2021-11-24 22:01:19 +03:00
sigs.k8s.io/yaml v1.3.0 // indirect
:seedling: Moving tools dependencies to separate go.mod * Moving the tools dependencies to a separate go.mod to reduce the dependencies on scorecard. * This is also increases the security posture by having less dependencies on the main go.mod
2021-09-06 20:34:17 +03:00
)
:seedling: Fix CVE warning for containerd The containerd version <1.5.7 has CVE https://github.com/advisories/GHSA-c2h3-6mxw-7mvq Fixed it to address the issue.
2021-10-26 20:27:43 +03:00
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
replace (
:seedling: Fix cosign vulnerability (#2283) - Fixed the cosign vulnerability Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-09-21 18:51:09 +03:00
github.com/sigstore/cosign => github.com/sigstore/cosign v1.12.0
:seedling: Upgrade to go 1.18 (#2143) * :seedling: Upgrade to go 1.18 - Upgrade to go 1.18 - Updated the deps to avoid critical CVE's Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated dockerfile. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the linter issues. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed the CVE dependencies Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Rmoved the cache which is changing between 1.17 and 1.18 Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Updated ko to latest Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> * Fixed linter issue. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-08-17 04:55:48 +03:00
github.com/theupdateframework/go-tuf => github.com/theupdateframework/go-tuf v0.3.0
)
Reference in New Issue Copy Permalink