From 8a1888f69e07b5be46d6749f2a4793430bfb2c4f Mon Sep 17 00:00:00 2001 From: anchore-oss-update-bot Date: Fri, 13 Nov 2026 08:17:18 +0000 Subject: [PATCH] chore(deps): update anchore dependencies Signed-off-by: anchore-oss-update-bot --- .github/workflows/release.yaml | 2 +- .github/workflows/validations.yaml | 12 ++--- .make/go.mod | 8 +-- .make/go.sum | 16 +++--- go.mod | 40 +++++++-------- go.sum | 80 +++++++++++++++--------------- 6 files changed, 79 insertions(+), 79 deletions(-) diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 98227378..4f466446 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -62,7 +62,7 @@ jobs: persist-credentials: false - name: Bootstrap environment - uses: anchore/go-make/.github/actions/setup@abf41688f36f2cbec13105747abbe8e60f5c56ca # v0.9.3 + uses: anchore/go-make/.github/actions/setup@d9953b054534c9f64fa11a7c7dd0710089bda802 # v0.9.7-0.20261113012642-d9953b054534 - name: Build & publish release artifacts run: make ci-release diff --git a/.github/workflows/validations.yaml b/.github/workflows/validations.yaml index cf2ee03d..58bb120a 100644 --- a/.github/workflows/validations.yaml +++ b/.github/workflows/validations.yaml @@ -33,7 +33,7 @@ jobs: persist-credentials: false - name: Bootstrap environment - uses: anchore/go-make/.github/actions/setup@abf41688f36f2cbec13105747abbe8e60f5c56ca # v0.9.3 + uses: anchore/go-make/.github/actions/setup@d9953b054534c9f64fa11a7c7dd0710089bda802 # v0.9.7-0.20261113012642-d9953b054534 - name: Run static analysis run: make static-analysis @@ -72,7 +72,7 @@ jobs: persist-credentials: false - name: Bootstrap environment - uses: anchore/go-make/.github/actions/setup@abf41688f36f2cbec13105747abbe8e60f5c56ca # v0.9.3 + uses: anchore/go-make/.github/actions/setup@d9953b054534c9f64fa11a7c7dd0710089bda802 # v0.9.7-0.20261113012642-d9953b054534 with: # race and coverage builds share nothing with the other jobs' builds cache-key-prefix: "unit-go" @@ -100,7 +100,7 @@ jobs: persist-credentials: false - name: Bootstrap environment - uses: anchore/go-make/.github/actions/setup@abf41688f36f2cbec13105747abbe8e60f5c56ca # v0.9.3 + uses: anchore/go-make/.github/actions/setup@d9953b054534c9f64fa11a7c7dd0710089bda802 # v0.9.7-0.20261113012642-d9953b054534 with: # generate is the only go here, so this job's build cache is too thin to be the saved one cache-save: "false" @@ -128,7 +128,7 @@ jobs: persist-credentials: false - name: Bootstrap environment - uses: anchore/go-make/.github/actions/setup@abf41688f36f2cbec13105747abbe8e60f5c56ca # v0.9.3 + uses: anchore/go-make/.github/actions/setup@d9953b054534c9f64fa11a7c7dd0710089bda802 # v0.9.7-0.20261113012642-d9953b054534 # bun's install cache, keyed on the lockfile (hashFiles is empty until bun.lock exists, which still yields a valid key) - name: Cache bun installs @@ -169,7 +169,7 @@ jobs: persist-credentials: false - name: Bootstrap environment - uses: anchore/go-make/.github/actions/setup@abf41688f36f2cbec13105747abbe8e60f5c56ca # v0.9.3 + uses: anchore/go-make/.github/actions/setup@d9953b054534c9f64fa11a7c7dd0710089bda802 # v0.9.7-0.20261113012642-d9953b054534 # the key is test/cli's pins: the two grype releases its gates install and the claims snapshot # (claimsPin in test/cli/utils_test.go). The DB is built per run and never cached. @@ -200,7 +200,7 @@ jobs: persist-credentials: false - name: Bootstrap environment - uses: anchore/go-make/.github/actions/setup@abf41688f36f2cbec13105747abbe8e60f5c56ca # v0.9.3 + uses: anchore/go-make/.github/actions/setup@d9953b054534c9f64fa11a7c7dd0710089bda802 # v0.9.7-0.20261113012642-d9953b054534 with: # why have another build cache key? We don't want unit/integration/etc test build caches to replace # the snapshot build cache, which includes builds for all OSs and architectures. As long as this key is diff --git a/.make/go.mod b/.make/go.mod index 86eefaf3..b421df38 100644 --- a/.make/go.mod +++ b/.make/go.mod @@ -2,11 +2,11 @@ module github.com/anchore/quill/.make go 1.26.0 -require github.com/anchore/go-make v0.9.3 +require github.com/anchore/go-make v0.9.7-0.20261113012642-d9953b054534 require ( - github.com/bmatcuk/doublestar/v4 v4.10.2 // indirect + github.com/bmatcuk/doublestar/v4 v4.10.4 // indirect github.com/goccy/go-yaml v1.19.2 // indirect - golang.org/x/mod v0.41.0 // indirect - golang.org/x/sys v0.48.0 // indirect + golang.org/x/mod v0.42.0 // indirect + golang.org/x/sys v0.49.0 // indirect ) diff --git a/.make/go.sum b/.make/go.sum index ad13f615..3937c2f0 100644 --- a/.make/go.sum +++ b/.make/go.sum @@ -1,10 +1,10 @@ -github.com/anchore/go-make v0.9.3 h1:D+MkpvEJsOGwkOqKN0rd2zYi9jEzwKtZreNysH0DenI= -github.com/anchore/go-make v0.9.3/go.mod h1:4HuELygGhxex2SaCEgfCbZ0geJ3xFkqtWpmt1NrYwPg= -github.com/bmatcuk/doublestar/v4 v4.10.2 h1:eF7W7HWKg3z9NrWV9pTLnNeoXaqq3Tq9DNKXVMfoCnw= -github.com/bmatcuk/doublestar/v4 v4.10.2/go.mod h1:xBQ8jztBU6kakFMg+8WGxn0c6z1fTSPVIjEY1Wr7jzc= +github.com/anchore/go-make v0.9.7-0.20261113012642-d9953b054534 h1:ns0Our/rLTrA0dMzmkyEC3wdN5Jq48N58tg0m5n6dbQ= +github.com/anchore/go-make v0.9.7-0.20261113012642-d9953b054534/go.mod h1:nfmzAoVug3bT7EeN577MFpkM6ep5s5dd5dNLz4CtuR8= +github.com/bmatcuk/doublestar/v4 v4.10.4 h1:oTKkRmRuOsKMqFe1AQazd9gGBFNEpOmgKp/xzB97dnA= +github.com/bmatcuk/doublestar/v4 v4.10.4/go.mod h1:xBQ8jztBU6kakFMg+8WGxn0c6z1fTSPVIjEY1Wr7jzc= github.com/goccy/go-yaml v1.19.2 h1:PmFC1S6h8ljIz6gMRBopkjP1TVT7xuwrButHID66PoM= github.com/goccy/go-yaml v1.19.2/go.mod h1:XBurs7gK8ATbW4ZPGKgcbrY1Br56PdM69F7LkFRi1kA= -golang.org/x/mod v0.41.0 h1:qJmnOUb4YB+FsEuM3HcWucdZASCPGhsX6uljO6pog0c= -golang.org/x/mod v0.41.0/go.mod h1:Ek9pY8RKWXwsWvd3rQiHYtMqkjSUV+s1Rj7j4H5Ur6o= -golang.org/x/sys v0.48.0 h1:bbX/i/6MgT9BVLM9RT1thmxL04yeTAhbEz4SyadbXoo= -golang.org/x/sys v0.48.0/go.mod h1:hNLxWAXmnKAxqDtdwIYC4bM9oQPEecfsnNMuSxOs3og= +golang.org/x/mod v0.42.0 h1:ICeL3t2L30ljSPHHxDnR4fqVcBt/zR2zJAb9juavmQg= +golang.org/x/mod v0.42.0/go.mod h1:u5fzIrRInkL8MaO1cbRkUHT64v303YIT5KEqpNr7jRs= +golang.org/x/sys v0.49.0 h1:XbzkgYJHdqh/8m2Uu0W/dQv8nktxx4BFHp1M0gROTXA= +golang.org/x/sys v0.49.0/go.mod h1:hNLxWAXmnKAxqDtdwIYC4bM9oQPEecfsnNMuSxOs3og= diff --git a/go.mod b/go.mod index 36499e89..aaac3231 100644 --- a/go.mod +++ b/go.mod @@ -8,14 +8,14 @@ ignore ./cmd/yardstick/internal/labelserver/web/node_modules require ( github.com/Masterminds/semver/v3 v3.5.0 github.com/adrg/xdg v0.5.3 - github.com/anchore/binny v0.14.0 - github.com/anchore/clio v0.1.2 - github.com/anchore/fangs v0.1.1 - github.com/anchore/go-logger v0.2.0 - github.com/anchore/go-sync v0.1.2 - github.com/anchore/grype v0.121.2 - github.com/anchore/packageurl-go v0.2.0 - github.com/anchore/syft v1.57.0 + github.com/anchore/binny v0.14.1-0.20261111223810-9a70ecc46e1b + github.com/anchore/clio v0.1.3-0.20261106204511-a4c473e9b8a3 + github.com/anchore/fangs v0.1.2-0.20261106223455-6ae4f60fe299 + github.com/anchore/go-logger v0.2.1-0.20261102150012-5958d6737944 + github.com/anchore/go-sync v0.1.3-0.20261030235548-da6f55679938 + github.com/anchore/grype v0.121.4-0.20261112162305-a86de897bcc9 + github.com/anchore/packageurl-go v0.2.1-0.20261113033656-eaa3d8472743 + github.com/anchore/syft v1.57.2-0.20261112222416-af5b1fa52ff4 github.com/charmbracelet/bubbletea v1.3.10 github.com/charmbracelet/lipgloss v1.1.0 github.com/dustin/go-humanize v1.1.0 @@ -59,15 +59,15 @@ require ( github.com/acarl005/stripansi v0.0.0-20180116102854-5a71ef0e047d // indirect github.com/acobaugh/osrelease v0.1.0 // indirect github.com/agext/levenshtein v1.2.3 // indirect - github.com/anchore/go-collections v0.1.1 // indirect - github.com/anchore/go-homedir v0.1.1 // indirect - github.com/anchore/go-lzo v0.1.1 // indirect - github.com/anchore/go-macholibre v0.1.1 // indirect - github.com/anchore/go-rpmdb v0.2.2 // indirect + github.com/anchore/go-collections v0.1.2-0.20261102145139-fa2df25c611e // indirect + github.com/anchore/go-homedir v0.1.2-0.20261106170621-6753f05e2253 // indirect + github.com/anchore/go-lzo v0.1.2-0.20261113041526-80bc12f55e8c // indirect + github.com/anchore/go-macholibre v0.1.2-0.20261030232458-0dd5973e8bc6 // indirect + github.com/anchore/go-rpmdb v0.2.3-0.20261109005757-22483d422fb5 // indirect github.com/anchore/go-struct-converter v0.2.0-rc2 // indirect github.com/anchore/go-version v1.2.2-0.20210903204242-51efa5b487c4 // indirect - github.com/anchore/stereoscope v0.4.1 // indirect - github.com/andybalholm/brotli v1.2.0 // indirect + github.com/anchore/stereoscope v0.4.2-0.20261106204048-0c6278c8b7ec // indirect + github.com/andybalholm/brotli v1.2.8 // indirect github.com/apparentlymart/go-textseg/v15 v15.0.0 // indirect github.com/apparentlymart/go-textseg/v17 v17.0.1 // indirect github.com/aquasecurity/go-pep440-version v0.0.1 // indirect @@ -96,7 +96,7 @@ require ( github.com/bitnami/go-version v0.0.0-20250505154626-452e8c5ee607 // indirect github.com/blakesmith/ar v0.0.0-20190502131153-809d4375e1fb // indirect github.com/bmatcuk/doublestar/v2 v2.0.4 // indirect - github.com/bmatcuk/doublestar/v4 v4.10.3 // indirect + github.com/bmatcuk/doublestar/v4 v4.10.4 // indirect github.com/bodgit/plumbing v1.3.0 // indirect github.com/bodgit/sevenzip v1.6.1 // indirect github.com/bodgit/windows v1.0.1 // indirect @@ -172,7 +172,7 @@ require ( github.com/googleapis/enterprise-certificate-proxy v0.3.22 // indirect github.com/googleapis/gax-go/v2 v2.24.1 // indirect github.com/gookit/color v1.6.3 // indirect - github.com/gpustack/gguf-parser-go v0.27.0 // indirect + github.com/gpustack/gguf-parser-go v0.28.1 // indirect github.com/hako/durafmt v0.0.0-20210608085754-5c1018a4e16b // indirect github.com/hashicorp/aws-sdk-go-base/v2 v2.0.0-beta.74 // indirect github.com/hashicorp/errwrap v1.1.0 // indirect @@ -225,7 +225,7 @@ require ( github.com/moby/moby/api v1.56.1 // indirect github.com/moby/moby/client v0.6.2 // indirect github.com/moby/sys/capability v0.4.0 // indirect - github.com/moby/sys/mountinfo v0.7.2 // indirect + github.com/moby/sys/mountinfo v0.7.3 // indirect github.com/moby/sys/signal v0.7.1 // indirect github.com/moby/sys/user v0.4.1 // indirect github.com/moby/sys/userns v0.2.1 // indirect @@ -284,7 +284,7 @@ require ( github.com/spdx/tools-golang v0.6.0-rc4 // indirect github.com/spf13/afero v1.15.0 // indirect github.com/spf13/cast v1.10.0 // indirect - github.com/spf13/pflag v1.0.10 // indirect + github.com/spf13/pflag v1.1.0 // indirect github.com/spf13/viper v1.21.0 // indirect github.com/spiffe/go-spiffe/v2 v2.8.1 // indirect github.com/stefanberger/go-pkcs11uri v0.0.0-20230803200340-78284954bff6 // indirect @@ -328,7 +328,7 @@ require ( golang.org/x/crypto v0.58.0 // indirect golang.org/x/exp v0.0.0-20260410095643-746e56fc9e2f // indirect golang.org/x/mod v0.42.0 // indirect - golang.org/x/net v0.61.0 // indirect + golang.org/x/net v0.62.0 // indirect golang.org/x/oauth2 v0.37.0 // indirect golang.org/x/sync v0.24.0 // indirect golang.org/x/sys v0.49.0 // indirect diff --git a/go.sum b/go.sum index 1fd1b400..ee8f2868 100644 --- a/go.sum +++ b/go.sum @@ -124,41 +124,41 @@ github.com/alecthomas/template v0.0.0-20160405071501-a0175ee3bccc/go.mod h1:LOuy github.com/alecthomas/template v0.0.0-20190718012654-fb15b899a751/go.mod h1:LOuyumcjzFXgccqObfd/Ljyb9UuFJ6TxHnclSeseNhc= github.com/alecthomas/units v0.0.0-20151022065526-2efee857e7cf/go.mod h1:ybxpYRFXyAe+OPACYpWeL0wqObRcbAqCMya13uyzqw0= github.com/alecthomas/units v0.0.0-20190717042225-c3de453c63f4/go.mod h1:ybxpYRFXyAe+OPACYpWeL0wqObRcbAqCMya13uyzqw0= -github.com/anchore/binny v0.14.0 h1:pLwOaI+HIC0hXKHlMYNIXAa4evXWSAo/KqBYqjU/cxQ= -github.com/anchore/binny v0.14.0/go.mod h1:/2CHcobpErNsV5Bq/ZeYCV5WZ39kmETCjX4oJTMfW84= -github.com/anchore/clio v0.1.2 h1:kCWNUkJsRJ5A103fFSLG+CSqIP9bOIFX2X5GEnup0HM= -github.com/anchore/clio v0.1.2/go.mod h1:LqoM9TUMDolUMaPV4hslLvuooqIjpTN8J7V/rBqk/Zc= -github.com/anchore/fangs v0.1.1 h1:NBTHocmWM2/0gNhebpoE/wEB0Z0nxh2lESww2o/Uf5M= -github.com/anchore/fangs v0.1.1/go.mod h1:82oZuk4+RynOvAoxnXKmI1zO5xk/kbOw+5t4fAAPSsk= -github.com/anchore/go-collections v0.1.1 h1:kGlmSehs+ctTBZr+98F2+taHeolHy+XDx1Nczl8GZc8= -github.com/anchore/go-collections v0.1.1/go.mod h1:zgDbPSNDpfU47tVo7aW+2suG7+vXB1Sq1qtDhRJknQ0= -github.com/anchore/go-homedir v0.1.1 h1:KpaO5BPrVT7cVMcEZ9KfFfEi0iuo3DtagPGl0C744X0= -github.com/anchore/go-homedir v0.1.1/go.mod h1:9B0DGhbmMAJVGGEbrlb+PkORM5eDFCEOtZ3xQ22qaLA= -github.com/anchore/go-logger v0.2.0 h1:V8Gazz+F8xwWEWz+whqt8/5163IkO4XrAie+1qbK10k= -github.com/anchore/go-logger v0.2.0/go.mod h1:omqLWBwT/B5/aTwIH6pl5WBylBzeH3BGHUTS6OFeFvY= -github.com/anchore/go-lzo v0.1.1 h1:IwL/fvkdtlIrYIXck6WxZ3nb8WjjHziYYmGxlooyOnM= -github.com/anchore/go-lzo v0.1.1/go.mod h1:3kLx0bve2oN1iDwgM1U5zGku1Tfbdb0No5qp1eL1fIk= -github.com/anchore/go-macholibre v0.1.1 h1:sTBHi3S1WVIOCamc6NyT8Sn9mBmD30DCTfjfVm4k6/M= -github.com/anchore/go-macholibre v0.1.1/go.mod h1:YNq2610RlvGCK0Za+Klz/OCMtUaEnwwAGA/VfUAQaro= -github.com/anchore/go-rpmdb v0.2.2 h1:44VC7mvFAxV9t5JUZYg3S9sqG+E94iZvyWACMDq9hSk= -github.com/anchore/go-rpmdb v0.2.2/go.mod h1:Y64EbetdqhryMjtk8IzXkdCQw/aNDx+feZCT9aj6rjs= +github.com/anchore/binny v0.14.1-0.20261111223810-9a70ecc46e1b h1:q/FY1FTjexV1qlvcB9tF0LWNDgj1MDZZXnWWZvjg0h0= +github.com/anchore/binny v0.14.1-0.20261111223810-9a70ecc46e1b/go.mod h1:4whDHjtrJl65rhgAeSbGC43OSPLt71PxcQleb72o06I= +github.com/anchore/clio v0.1.3-0.20261106204511-a4c473e9b8a3 h1:W16sLd4vathM1Ne6wprCiZICv7Rzo4QKhcVCX4x5suU= +github.com/anchore/clio v0.1.3-0.20261106204511-a4c473e9b8a3/go.mod h1:sEszsAggPF6jIOogy77wzdQHbsD5Axcp5YFB6AyMaDY= +github.com/anchore/fangs v0.1.2-0.20261106223455-6ae4f60fe299 h1:NVSwh4txdukEoePSfy61qqPh9CyUV95oSG5e64aHY0M= +github.com/anchore/fangs v0.1.2-0.20261106223455-6ae4f60fe299/go.mod h1:Aof8Vq3NTIs3AisZCgjsmPGljpBwKxKc5CYB5hD5fNk= +github.com/anchore/go-collections v0.1.2-0.20261102145139-fa2df25c611e h1:SeHa80HyWdiHTXwegntigwPKKlpuEm3cNpguHu21odk= +github.com/anchore/go-collections v0.1.2-0.20261102145139-fa2df25c611e/go.mod h1:I73p2898U63CmHk3/sBF//URywRJZrpakp2+tldg0ZI= +github.com/anchore/go-homedir v0.1.2-0.20261106170621-6753f05e2253 h1:Kw677w/qKRfWrZ3fp/ieHEBDC8hIqRgc0Gq3SSl5QTA= +github.com/anchore/go-homedir v0.1.2-0.20261106170621-6753f05e2253/go.mod h1:9B0DGhbmMAJVGGEbrlb+PkORM5eDFCEOtZ3xQ22qaLA= +github.com/anchore/go-logger v0.2.1-0.20261102150012-5958d6737944 h1:qHZvfInZrxtpx9b+oYNdjHH+MjxJwxFFHPnwue5UiEc= +github.com/anchore/go-logger v0.2.1-0.20261102150012-5958d6737944/go.mod h1:zwNoOiCuL7RqgnQLo1ey3o+3fHMdhl5vyZiZBVYqYmI= +github.com/anchore/go-lzo v0.1.2-0.20261113041526-80bc12f55e8c h1:LZHLROkuCBOZVeXZYAAiBF4Z+IfPFfJ/dBCoddfP748= +github.com/anchore/go-lzo v0.1.2-0.20261113041526-80bc12f55e8c/go.mod h1:3kLx0bve2oN1iDwgM1U5zGku1Tfbdb0No5qp1eL1fIk= +github.com/anchore/go-macholibre v0.1.2-0.20261030232458-0dd5973e8bc6 h1:Xhv5D+W3cWN8GJz/dzCKWfBtn4ZPRq8cMYaDfo6NgwA= +github.com/anchore/go-macholibre v0.1.2-0.20261030232458-0dd5973e8bc6/go.mod h1:YNq2610RlvGCK0Za+Klz/OCMtUaEnwwAGA/VfUAQaro= +github.com/anchore/go-rpmdb v0.2.3-0.20261109005757-22483d422fb5 h1:98YV8Cd/KAic/TPLIChih5Pi4qWe0BVxq0gm5mlDyQY= +github.com/anchore/go-rpmdb v0.2.3-0.20261109005757-22483d422fb5/go.mod h1:Y64EbetdqhryMjtk8IzXkdCQw/aNDx+feZCT9aj6rjs= github.com/anchore/go-struct-converter v0.2.0-rc2 h1:q+859fW2/jbHJHB2etbNfRlFwYpknyvbqqk1hUdamQ4= github.com/anchore/go-struct-converter v0.2.0-rc2/go.mod h1:cDBA5vhcR62nXWo8QH9/Kk2807o65ISaHPNPX66L+Uw= -github.com/anchore/go-sync v0.1.2 h1:RDD5RCanrWqhbtBulqPSZpERadUlgcYjpybYzYd3Uk8= -github.com/anchore/go-sync v0.1.2/go.mod h1:grjZH059bCHM6f6jh+Y7VYvX/q8YcjkDJqG6nplHGkE= +github.com/anchore/go-sync v0.1.3-0.20261030235548-da6f55679938 h1:AS5fHqJu5b5Vd89yGEDWVCLLYXzB1mAnX/5ISkDRe8I= +github.com/anchore/go-sync v0.1.3-0.20261030235548-da6f55679938/go.mod h1:C/BrydbWRZFDqy/zuKjctOdbzax8KasfkEYHsXRKM2Q= github.com/anchore/go-version v1.2.2-0.20210903204242-51efa5b487c4 h1:rmZG77uXgE+o2gozGEBoUMpX27lsku+xrMwlmBZJtbg= github.com/anchore/go-version v1.2.2-0.20210903204242-51efa5b487c4/go.mod h1:Bkc+JYWjMCF8OyZ340IMSIi2Ebf3uwByOk6ho4wne1E= -github.com/anchore/grype v0.121.2 h1:t8eTlmy/XSrNwjoahWG+oUod1oCLL3KL48l/qwkzUQw= -github.com/anchore/grype v0.121.2/go.mod h1:YURyHpbJIfaiRS0uUe7OlB2yOBcxRYWFPiZRKy5g/rs= -github.com/anchore/packageurl-go v0.2.0 h1:CkrM4RMUwrEGAiE1OVlxaZNzWj0TuHRey7o4T/EAErk= -github.com/anchore/packageurl-go v0.2.0/go.mod h1:2JCgOQMIsqZ7TmliXG4PnUthPJAKE3mWQbsW2XHjAOE= -github.com/anchore/stereoscope v0.4.1 h1:7mxw24JCabbJIAcyvQDjBd2pbzo+0HSFVgjYlE8Zm+k= -github.com/anchore/stereoscope v0.4.1/go.mod h1:hYJsi3M8a8N1O66u+rMQSgv5TREGM7QIjKBjPPnwiD8= -github.com/anchore/syft v1.57.0 h1:H/UHtf0KbIlD12dXsfklFMjZ2+erj2an3h/jBHoX/zE= -github.com/anchore/syft v1.57.0/go.mod h1:rxIyiyV5/ng1PxfmJBGMKcCcpfnCI/j9laRBTBxv+K0= +github.com/anchore/grype v0.121.4-0.20261112162305-a86de897bcc9 h1:4uflHfnWATkG4sBXRyLPz0L6QLb4ctEqTip6KDjtjiU= +github.com/anchore/grype v0.121.4-0.20261112162305-a86de897bcc9/go.mod h1:QoB3XeTt6VNygbmvvZ5ZktCJT/DcvyOqVVmf+8fwh7A= +github.com/anchore/packageurl-go v0.2.1-0.20261113033656-eaa3d8472743 h1:37L2pi5IJyRbe3LLm8tEocKIHcTRM3qDjdhKiZMV79U= +github.com/anchore/packageurl-go v0.2.1-0.20261113033656-eaa3d8472743/go.mod h1:2JCgOQMIsqZ7TmliXG4PnUthPJAKE3mWQbsW2XHjAOE= +github.com/anchore/stereoscope v0.4.2-0.20261106204048-0c6278c8b7ec h1:9u3Reg++C764UXIVOim7twzGI9ciynFeVVRq+2MfKWw= +github.com/anchore/stereoscope v0.4.2-0.20261106204048-0c6278c8b7ec/go.mod h1:Hy9iouI2C1Lrqaw7rS28xfDjTwhT990Ac1ttlUOfvXw= +github.com/anchore/syft v1.57.2-0.20261112222416-af5b1fa52ff4 h1:YWaDAl0nJGa4czX1TM/a8FOUEqdGUqHBpKYgynrKDdE= +github.com/anchore/syft v1.57.2-0.20261112222416-af5b1fa52ff4/go.mod h1:PHj+bXUGr1sxpMLsuogjX86P5wZ+A+XZRY6WgfsIgnE= github.com/andreyvit/diff v0.0.0-20170406064948-c7f18ee00883/go.mod h1:rCTlJbsFo29Kk6CurOXKm700vrz8f0KW0JNfpkRJY/8= -github.com/andybalholm/brotli v1.2.0 h1:ukwgCxwYrmACq68yiUqwIWnGY0cTPox/M94sVwToPjQ= -github.com/andybalholm/brotli v1.2.0/go.mod h1:rzTDkvFWvIrjDXZHkuS16NPggd91W3kUSvPlQ1pLaKY= +github.com/andybalholm/brotli v1.2.8 h1:H9F6r7RNwzSRsx/lytpIYkbjNFMt2yNBwsJ2+0gpx78= +github.com/andybalholm/brotli v1.2.8/go.mod h1:rzTDkvFWvIrjDXZHkuS16NPggd91W3kUSvPlQ1pLaKY= github.com/anmitsu/go-shlex v0.0.0-20200514113438-38f4b401e2be h1:9AeTilPcZAjCFIImctFaOjnTIavg87rW78vTPkQqLI8= github.com/anmitsu/go-shlex v0.0.0-20200514113438-38f4b401e2be/go.mod h1:ySMOLuWl6zY27l47sB3qLNK6tF2fkHG55UZxx8oIVo4= github.com/antihax/optional v1.0.0/go.mod h1:uupD/76wgC+ih3iEmQUL+0Ugr19nfwCT1kdvxnR2qWY= @@ -231,8 +231,8 @@ github.com/blakesmith/ar v0.0.0-20190502131153-809d4375e1fb h1:m935MPodAbYS46DG4 github.com/blakesmith/ar v0.0.0-20190502131153-809d4375e1fb/go.mod h1:PkYb9DJNAwrSvRx5DYA+gUcOIgTGVMNkfSCbZM8cWpI= github.com/bmatcuk/doublestar/v2 v2.0.4 h1:6I6oUiT/sU27eE2OFcWqBhL1SwjyvQuOssxT4a1yidI= github.com/bmatcuk/doublestar/v2 v2.0.4/go.mod h1:QMmcs3H2AUQICWhfzLXz+IYln8lRQmTZRptLie8RgRw= -github.com/bmatcuk/doublestar/v4 v4.10.3 h1:1UIv1+fqH3++ViVkpnaPTB+Pi1UHycnPFAq14zgK+gI= -github.com/bmatcuk/doublestar/v4 v4.10.3/go.mod h1:xBQ8jztBU6kakFMg+8WGxn0c6z1fTSPVIjEY1Wr7jzc= +github.com/bmatcuk/doublestar/v4 v4.10.4 h1:oTKkRmRuOsKMqFe1AQazd9gGBFNEpOmgKp/xzB97dnA= +github.com/bmatcuk/doublestar/v4 v4.10.4/go.mod h1:xBQ8jztBU6kakFMg+8WGxn0c6z1fTSPVIjEY1Wr7jzc= github.com/bodgit/plumbing v1.3.0 h1:pf9Itz1JOQgn7vEOE7v7nlEfBykYqvUYioC61TwWCFU= github.com/bodgit/plumbing v1.3.0/go.mod h1:JOTb4XiRu5xfnmdnDJo6GmSbSbtSyufrsyZFByMtKEs= github.com/bodgit/sevenzip v1.6.1 h1:kikg2pUMYC9ljU7W9SaqHXhym5HyKm8/M/jd31fYan4= @@ -580,8 +580,8 @@ github.com/gookit/color v1.6.3 h1:m6E49x+KftGaspcLtPLMsyci2ARhWIUW0PUV1owMlhs= github.com/gookit/color v1.6.3/go.mod h1:9ACFc7/1IpHGBW8RwuDm/0YEnhg3dwwXpoMsmtyHfjs= github.com/gorilla/mux v1.8.1 h1:TuBL49tXwgrFYWhqrNgrUNEY92u81SPhu7sTdzQEiWY= github.com/gorilla/mux v1.8.1/go.mod h1:AKf9I4AEqPTmMytcMc0KkNouC66V3BtZ4qD5fmWSiMQ= -github.com/gpustack/gguf-parser-go v0.27.0 h1:eXFU9pmJEMQHOTL9qI742lXHWSa1CtlMWUU3gFce7nM= -github.com/gpustack/gguf-parser-go v0.27.0/go.mod h1:y4TwTtDqFWTK+xvprOjRUh+dowgU2TKCX37vRKvGiZ0= +github.com/gpustack/gguf-parser-go v0.28.1 h1:El6BAuJnpKI43nElOMc2erMtHQCv0ttu40WFJFf1Moo= +github.com/gpustack/gguf-parser-go v0.28.1/go.mod h1:y4TwTtDqFWTK+xvprOjRUh+dowgU2TKCX37vRKvGiZ0= github.com/grpc-ecosystem/grpc-gateway v1.16.0/go.mod h1:BDjrQk3hbvj6Nolgz8mAMFbcEtjT1g+wF4CSlocrBnw= github.com/hako/durafmt v0.0.0-20210608085754-5c1018a4e16b h1:wDUNC2eKiL35DbLvsDhiblTUXHxcOPwQSCzi7xpQUN4= github.com/hako/durafmt v0.0.0-20210608085754-5c1018a4e16b/go.mod h1:VzxiSdG6j1pi7rwGm/xYI5RbtpBgM8sARDXlvEvxlu0= @@ -770,8 +770,8 @@ github.com/moby/moby/client v0.6.2 h1:ekSPlMccrZGcw6Scb8T9D39qE0mB+XupU/yS0zNw9N github.com/moby/moby/client v0.6.2/go.mod h1:DGcnO7qmPJrqobx/ggQgQ/AUk+2wgVdQv7uxB0/mEsc= github.com/moby/sys/capability v0.4.0 h1:4D4mI6KlNtWMCM1Z/K0i7RV1FkX+DBDHKVJpCndZoHk= github.com/moby/sys/capability v0.4.0/go.mod h1:4g9IK291rVkms3LKCDOoYlnV8xKwoDTpIrNEE35Wq0I= -github.com/moby/sys/mountinfo v0.7.2 h1:1shs6aH5s4o5H2zQLn796ADW1wMrIwHsyJ2v9KouLrg= -github.com/moby/sys/mountinfo v0.7.2/go.mod h1:1YOa8w8Ih7uW0wALDUgT1dTTSBrZ+HiBLGws92L2RU4= +github.com/moby/sys/mountinfo v0.7.3 h1:e0lin8d05kLgtUES/4cS/F70KlbZX/G3aZjLsV7WAgA= +github.com/moby/sys/mountinfo v0.7.3/go.mod h1:dEJRr+H+hx0lNG0BE+Smz95u/FDzjJv4/RjA2I456Iw= github.com/moby/sys/signal v0.7.1 h1:PrQxdvxcGijdo6UXXo/lU/TvHUWyPhj7UOpSo8tuvk0= github.com/moby/sys/signal v0.7.1/go.mod h1:Se1VGehYokAkrSQwL4tDzHvETwUZlnY7S5XtQ50mQp8= github.com/moby/sys/user v0.4.1 h1:RgjRlaDKi/Xmyrz4t8lyzXT6v2ooFeO/7xtchmhVWE0= @@ -961,8 +961,8 @@ github.com/spf13/cobra v1.10.2/go.mod h1:7C1pvHqHw5A4vrJfjNwvOdzYu0Gml16OCs2GRiT github.com/spf13/jwalterweatherman v1.1.0/go.mod h1:aNWZUN0dPAAO/Ljvb5BEdw96iTZ0EXowPYD95IqWIGo= github.com/spf13/pflag v1.0.5/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg= github.com/spf13/pflag v1.0.9/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg= -github.com/spf13/pflag v1.0.10 h1:4EBh2KAYBwaONj6b2Ye1GiHfwjqyROoF4RwYO+vPwFk= -github.com/spf13/pflag v1.0.10/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg= +github.com/spf13/pflag v1.1.0 h1:6W6MbVUrnMb8PEhjkqwsVLY7ryuzRfFHF4mQd7L94ag= +github.com/spf13/pflag v1.1.0/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg= github.com/spf13/viper v1.10.0/go.mod h1:SoyBPwAtKDzypXNDFKN5kzH7ppppbGZtls1UpIy5AsM= github.com/spf13/viper v1.21.0 h1:x5S+0EU27Lbphp4UKm1C+1oQO+rKx36vfCoaVebLFSU= github.com/spf13/viper v1.21.0/go.mod h1:P0lhsswPGWD/1lZJ9ny3fYnVqxiegrlNrEmgLjbTCAY= @@ -1219,8 +1219,8 @@ golang.org/x/net v0.10.0/go.mod h1:0qNGK6F8kojg2nk9dLZ2mShWaEBan6FAoqfSigmmuDg= golang.org/x/net v0.15.0/go.mod h1:idbUs1IY1+zTqbi8yxTbhexhEEk5ur9LInksu6HrEpk= golang.org/x/net v0.21.0/go.mod h1:bIjVDfnllIU7BJ2DNgfnXvpSvtn8VRwhlsaeUTyUS44= golang.org/x/net v0.25.0/go.mod h1:JkAGAh7GEvH74S6FOH42FLoXpXbE/aqXSrIQjXgsiwM= -golang.org/x/net v0.61.0 h1:RR+6j/BTBCrggOLugxa+66R8FvoN6MHlzDlZIbN9YFw= -golang.org/x/net v0.61.0/go.mod h1:WgDCOTH8iwtB66T4/GfI94AHo/hhdb7Hah9NDseQfiI= +golang.org/x/net v0.62.0 h1:18ELalfM5+XNRwzM2nYqXsZQ9ByS1uhj2O/U7+5jqRY= +golang.org/x/net v0.62.0/go.mod h1:WgDCOTH8iwtB66T4/GfI94AHo/hhdb7Hah9NDseQfiI= golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U= golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw= golang.org/x/oauth2 v0.0.0-20190604053449-0f29369cfe45/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=