Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Apr 25, 2025

Bumps the go-modules group with 69 updates:

Package From To
github.com/paketo-buildpacks/packit/v2 2.17.0 2.18.0
dario.cat/mergo 1.0.0 1.0.1
github.com/Azure/go-ansiterm 0.0.0-20210617225240-d185dfc1b5a1 0.0.0-20230124172434-306776ec8161
github.com/CycloneDX/cyclonedx-go 0.7.1 0.9.2
github.com/DataDog/zstd 1.4.5 1.5.5
github.com/Masterminds/sprig/v3 3.2.3 3.3.0
github.com/Microsoft/hcsshim 0.11.7 0.12.9
github.com/ProtonMail/go-crypto 1.1.3 1.1.6
github.com/anchore/go-logger 0.0.0-20220728155337-03b66a5207d8 0.0.0-20230725134548-c21dafa1ec5a
github.com/anchore/packageurl-go 0.1.1-0.20230104203445-02e0a6721501 0.1.1-0.20250220190351-d62adb6e1115
github.com/anchore/syft 0.80.0 1.19.0
github.com/andybalholm/brotli 1.0.4 1.1.1
github.com/bmatcuk/doublestar/v4 4.6.0 4.8.1
github.com/cenkalti/backoff/v4 4.2.1 4.3.0
github.com/cloudflare/circl 1.3.7 1.6.0
github.com/containerd/stargz-snapshotter/estargz 0.14.3 0.16.3
github.com/cpuguy83/dockercfg 0.3.1 0.3.2
github.com/cyphar/filepath-securejoin 0.2.5 0.4.1
github.com/docker/cli 27.1.1+incompatible 28.0.4+incompatible
github.com/docker/distribution 2.8.2+incompatible 2.8.3+incompatible
github.com/docker/docker-credential-helpers 0.7.0 0.8.2
github.com/gabriel-vasile/mimetype 1.4.8 1.4.9
github.com/go-git/go-billy/v5 5.6.0 5.6.2
github.com/go-git/go-git/v5 5.13.0 5.14.0
github.com/go-ole/go-ole 1.2.6 1.3.0
github.com/golang/groupcache 0.0.0-20210331224755-41bb18bfe9da 0.0.0-20241129210726-2c02b8208cf8
github.com/google/go-containerregistry 0.20.2 0.20.3
github.com/huandu/xstrings 1.3.3 1.5.0
github.com/jinzhu/copier 0.3.5 0.4.0
github.com/klauspost/compress 1.16.7 1.18.0
github.com/klauspost/pgzip 1.2.5 1.2.6
github.com/knqyf263/go-rpmdb 0.0.0-20230301153543-ba94b245509b 0.1.1
github.com/magiconair/properties 1.8.7 1.8.9
github.com/mattn/go-runewidth 0.0.13 0.0.16
github.com/moby/sys/sequential 0.5.0 0.6.0
github.com/moby/sys/user 0.3.0 0.4.0
github.com/moby/term 0.5.0 0.5.2
github.com/nwaples/rardecode 1.1.0 1.1.3
github.com/opencontainers/image-spec 1.1.0 1.1.1
github.com/pierrec/lz4/v4 4.1.15 4.1.22
github.com/pjbgf/sha1cd 0.3.0 0.3.2
github.com/rivo/uniseg 0.2.0 0.4.7
github.com/sassoftware/go-rpmutils 0.2.0 0.4.0
github.com/shirou/gopsutil/v3 3.23.12 3.24.5
github.com/shopspring/decimal 1.2.0 1.4.0
github.com/skeema/knownhosts 1.3.0 1.3.1
github.com/spdx/tools-golang 0.5.0 0.5.5
github.com/spf13/afero 1.9.5 1.14.0
github.com/spf13/cast 1.5.0 1.7.0
github.com/sylabs/sif/v2 2.8.1 2.21.1
github.com/sylabs/squashfs 0.6.1 1.0.6
github.com/tklauser/go-sysconf 0.3.12 0.3.15
github.com/tklauser/numcpus 0.6.1 0.10.0
github.com/vbatts/go-mtree 0.5.3 0.5.4
github.com/vbatts/tar-split 0.11.3 0.11.6
github.com/vifraa/gopom 0.2.1 1.0.0
github.com/wagoodman/go-partybus 0.0.0-20210627031916-db1f5573bbc5 0.0.0-20230516145632-8ccac152c651
github.com/wagoodman/go-progress 0.0.0-20230301185719-21920a456ad5 0.0.0-20230925121702-07e42b3cdba0
github.com/yusufpapurcu/wmi 1.2.3 1.2.4
golang.org/x/crypto 0.36.0 0.37.0
golang.org/x/mod 0.19.0 0.24.0
golang.org/x/net 0.37.0 0.39.0
golang.org/x/sync 0.12.0 0.13.0
golang.org/x/sys 0.31.0 0.32.0
golang.org/x/text 0.23.0 0.24.0
golang.org/x/xerrors 0.0.0-20220907171357-04be3eba64a2 0.0.0-20231012003039-104605ab7028
google.golang.org/genproto/googleapis/rpc 0.0.0-20240401170217-c3f982113cda 0.0.0-20241223144023-3abc09e42ca8
google.golang.org/grpc 1.59.0 1.67.3
google.golang.org/protobuf 1.36.5 1.36.6

Updates github.com/paketo-buildpacks/packit/v2 from 2.17.0 to 2.18.0

Release notes

Sourced from github.com/paketo-buildpacks/packit/v2's releases.

v2.18.0

What's Changed

Full Changelog: paketo-buildpacks/packit@v2.17.0...v2.18.0

Commits
  • aa5bc77 Bump github.com/anchore/stereoscope
  • f3fa74a Use upstream syft (#639)
  • 7e884aa Bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9
  • f3ac27a Bump golang.org/x/net from 0.37.0 to 0.38.0
  • See full diff in compare view

Updates dario.cat/mergo from 1.0.0 to 1.0.1

Release notes

Sourced from dario.cat/mergo's releases.

v1.0.1

What's Changed

New Contributors

Full Changelog: darccio/mergo@v1.0.0...v1.0.1

Commits

Updates github.com/Azure/go-ansiterm from 0.0.0-20210617225240-d185dfc1b5a1 to 0.0.0-20230124172434-306776ec8161

Commits

Updates github.com/CycloneDX/cyclonedx-go from 0.7.1 to 0.9.2

Release notes

Sourced from github.com/CycloneDX/cyclonedx-go's releases.

v0.9.2

Changelog

Features

  • 39ede217f126cfbc80eabf880f6643be3d392a4f: feat: add MarshalXML and UnmarshalXML (@​DmitriyLewen)
  • e9191ed11a269fcb6b3fb54e000ed6d81b5bf9db: feat: add UnmarshalJSON (@​DmitriyLewen)

Fixes

  • 80fede1f13a956d35eb14696cd2ca9d2d943f809: fix: add json tag for Identity (@​DmitriyLewen)
  • 24e9503293f0837e6e7ea3ff670ef958e6075b87: fix: tests (@​DmitriyLewen)
  • d68a199bc1747e5d6a7d4196c2f270535bbf6e3e: fix: use identity as array in valid-evidence.json (@​DmitriyLewen)
  • ff9cc28f9c9554328bd6c1ad56098be5a692d5e9: fix: use componentEvidence array for Evidence.Identity field (@​DmitriyLewen)

Building and Packaging

  • 016ee293d464d6383be3a714f7fb0debebef8ad5: build(deps): bump actions/checkout from 4.1.7 to 4.2.0 (@​dependabot[bot])
  • 77153ab5fe005f6484ac1e1225e7152df00db3f1: build(deps): bump actions/checkout from 4.2.0 to 4.2.1 (@​dependabot[bot])
  • 4f50d02c1282ac1d0d7448502b231a0e84a1e529: build(deps): bump actions/checkout from 4.2.1 to 4.2.2 (@​dependabot[bot])
  • b84451219e77e0fbbe7d5ba054bcf25dbc7aaea4: build(deps): bump actions/setup-go from 5.0.2 to 5.1.0 (@​dependabot[bot])
  • 238cbea3479fed9fdfcbfa5f1751828390a05211: build(deps): bump actions/setup-go from 5.1.0 to 5.2.0 (@​dependabot[bot])
  • bbe8f3c2c7c4567514ae966c69bf93fc1b3dba2a: build(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0 (@​dependabot[bot])
  • 05f8930fe918a31941ebf90eec627e5e6e908d1c: build(deps): bump github.com/terminalstatic/go-xsd-validate (@​dependabot[bot])
  • 082f87791a5e290c9d4c6e8126dc0cc987028a60: build(deps): bump gitpod/workspace-go from 2a9e01c to 9c95281 (@​dependabot[bot])
  • 093b1c15164dad5d46768db0e3f6ee43eb60ca20: build(deps): bump gitpod/workspace-go from 9c95281 to 6932342 (@​dependabot[bot])
  • 47b7e01ce8f8209894065e9656217b8c00a3c8ea: build(deps): bump golangci/golangci-lint-action from 6.1.0 to 6.1.1 (@​dependabot[bot])
  • ce6eb841cb1e21aa28efbccd9eb8fe5eea0555c9: build(deps): bump goreleaser/goreleaser-action from 6.0.0 to 6.1.0 (@​dependabot[bot])

Others

  • 4d3aff9fab9ae78bd6fbbc9fd0912fab14c8fb64: UPDATE_SNAPSHOTS=true make test (@​DmitriyLewen)
  • 31d954443e6563aeee69d82bdfb82aee83e07df1: refactor (@​DmitriyLewen)
  • 0170729e313a681fc8659643601410ae10ffe803: refactor: update convert package (@​DmitriyLewen)

v0.9.1

Changelog

Fixes

  • 6f0e0cf025dd99ab903e33f8e043d92b28dab4f6: fix: nil pointer dereference during evidence conversion (@​nscuro)
  • ce43b6f4cb5707d3ef2db1af1d597f5b23bf0e15: fix: make linter happy (@​nscuro)
  • 5d799e634b9bed9c86621048544737b210e433e8: fix: remove deprecated goreleaser flag (@​nscuro)

Building and Packaging

  • 6d5bcb0e277207551dbc728eb29959f1d3cbd685: build(deps): bump actions/checkout from 4.1.6 to 4.1.7 (@​dependabot[bot])
  • f34fc0c413da74d20d1cc240863aaf2eb6b274f7: build(deps): bump actions/setup-go from 5.0.1 to 5.0.2 (@​dependabot[bot])
  • 71cff221b8dbbc1d50f839fa76ecea4e42d83a2b: build(deps): bump gitpod/workspace-go from 8d15123 to 2a9e01c (@​dependabot[bot])
  • ea693550558d230b3fbba810b6e75ac2eb0b55c8: build(deps): bump golangci/golangci-lint-action from 6.0.1 to 6.1.0 (@​dependabot[bot])
  • d5cbdad49dfbf54f2dab4ad95bd1a47c710a526c: build(deps): bump goreleaser/goreleaser-action from 5.1.0 to 6.0.0 (@​dependabot[bot])

v0.9.0

Changelog

Features

  • 729c284798ebe341ced210b661362f77d68cd655: feat: Add CycloneDX 1.6 fields swhid and omniborId (@​snyk-tim)
  • b5d35959767efce95f50e96bf752c47fbe374496: feat: add manufacturer and authors (@​snyk-tim)
  • c52e698d2fe3fbd60df6ff397f44e7b0ea15a4bc: feat: raise baseline go version to 1.20 (@​nscuro)

Fixes

  • 9166e10fdecaadd8a97ceed9636261d351d90a65: fix: ioutil -> io (@​nscuro)
  • 349fc8cd072e90d81c0328f1d9dab16aa30fcf60: fix: add bom-ref to OrganizationalEntity/Contact (@​snyk-tim)
  • c97da90e259e0051e02e07300c75ad5e37a0311b: fix: handle breaking changes in skywalking-eyes (@​nscuro)

... (truncated)

Commits
  • cba06ff Merge pull request #205 from CycloneDX/dependabot/go_modules/github.com/termi...
  • 5c81749 Merge pull request #211 from CycloneDX/dependabot/github_actions/actions/setu...
  • 753526c Merge pull request #204 from DmitriyLewen/fix/componentEvidence-as-array
  • 4d3aff9 UPDATE_SNAPSHOTS=true make test
  • d68a199 fix: use identity as array in valid-evidence.json
  • 24e9503 fix: tests
  • 238cbea build(deps): bump actions/setup-go from 5.1.0 to 5.2.0
  • a7f7415 Merge branch 'master' of github.com:DmitriyLewen/cyclonedx-go into fix/compon...
  • 05f8930 build(deps): bump github.com/terminalstatic/go-xsd-validate
  • 464d426 Merge pull request #202 from CycloneDX/dependabot/github_actions/actions/chec...
  • Additional commits viewable in compare view

Updates github.com/DataDog/zstd from 1.4.5 to 1.5.5

Release notes

Sourced from github.com/DataDog/zstd's releases.

zstd 1.5.5

What's Changed

  • Update vendored zstd to 1.5.5 (#125)
  • [circleci] Update to non-deprecated images (#124)

DataDog/zstd@v1.5.2...v1.5.5

zstd 1.5.5 - wrapper patches 1

What's Changed

New Contributors

Full Changelog: DataDog/zstd@v1.5.5...v1.5.5+patch1

zstd 1.5.2

This release updates the upstream zstd version to 1.5.2 (DataDog/zstd#116)

The update 1.5.0 -> 1.5.2 overall has a similar performance profile. Please note that depending on the workload, performance could vary by -10% / +10%

zstd 1.5.2 - wrapper patches 1

What's Changed

New Contributors

Full Changelog: DataDog/zstd@v1.5.2...v1.5.2+patch1

zstd 1.5.0

This release updates the upstream zstd version to 1.5.0 (#106) (thanks @​SirSniper!) which sports some major performance improvements!

It comes with additional changes to the Go wrapper:

  • Allow building against zstd dynamic library instead of static by @​dopuskh3 (#109)
  • Don't block the stream reader when a block is available by @​delthas (#96)

zstd 1.5.0 - wrapper patches 1

What's Changed

Full Changelog: DataDog/zstd@v1.5.0...v1.5.0+patch1

zstd 1.5.0 - wrapper patches 2

... (truncated)

Commits
  • 5f14d6a Merge pull request #125 from DataDog/viq111/1.5.5
  • ca4d3c7 Update vendored zstd to 1.5.5
  • 03725e7 Merge pull request #126 from DataDog/viq111/circleci
  • 1b4c894 [circle] Remove latest as cimg/go does not have the tag
  • ff5a3bb [circleci] Update tested Go versions to 1.19 & 1.20
  • 6e5a54b [circleci] Switch to newer images
  • fd035e5 Merge pull request #117 from bsergean/patch-1
  • c798238 Merge branch '1.x' into patch-1
  • 13d5b10 update documentation
  • d64f463 Merge pull request #120 from DataDog/viq111/fix-min-size
  • Additional commits viewable in compare view

Updates github.com/Masterminds/sprig/v3 from 3.2.3 to 3.3.0

Release notes

Sourced from github.com/Masterminds/sprig/v3's releases.

v3.3.0

What's Changed

New Contributors

Full Changelog: Masterminds/sprig@v3.2.3...v3.3.0

Changelog

Sourced from github.com/Masterminds/sprig/v3's changelog.

Release 3.3.0 (2024-08-29)

Added

Changed

  • #407: Removed duplicate documentation (functions were documentated in 2 places)
  • #290: Corrected copy/paster oops in math documentation (thanks @​zzhu41)
  • #369: Corrected template reference in docs (thanks @​chey)
  • #375: Added link to URL documenation (thanks @​carlpett)
  • #406: Updated the mergo dependency which had a breaking change (which was accounted for)
  • #376: Fixed documentation error (thanks @​jheyduk)
  • #404: Updated dependency tree
  • #391: Fixed misspelling (thanks @​chrishalbert)
  • #405: Updated Go versions used in testing
Commits
  • e708470 Merge pull request #408 from mattfarina/update-changelog-3.3
  • 8fc4354 Updating the changelog for the 3.3.0 release
  • cb81a32 Merge pull request #407 from mattfarina/remove-dup-math-functions
  • 2637693 Removing duplicate documentation
  • 06b9a87 Merge pull request #290 from zzhu41/patch-1
  • e663ec6 Merge pull request #369 from chey/patch-1
  • bb2f73f Merge pull request #375 from carlpett/patch-1
  • f07659e Merge pull request #400 from itzik-elayev/master
  • 98b35c1 Add closing bracket
  • 7a88928 Merge pull request #406 from mattfarina/update-mergo
  • Additional commits viewable in compare view

Updates github.com/Microsoft/hcsshim from 0.11.7 to 0.12.9

Release notes

Sourced from github.com/Microsoft/hcsshim's releases.

v0.12.9

What's Changed

Full Changelog: microsoft/hcsshim@v0.12.8...v0.12.9

v0.12.8

What's Changed

Full Changelog: microsoft/hcsshim@v0.12.7...v0.12.8

v0.12.7

What's Changed

Full Changelog: microsoft/hcsshim@v0.12.6...v0.12.7

v0.12.6

What's Changed

Full Changelog: microsoft/hcsshim@v0.12.5...v0.12.6

v0.12.5

What's Changed

Full Changelog: microsoft/hcsshim@v0.12.4...v0.12.5

Commits
  • 7392335 Switch to using containerd/errdefs/pkg/errgrpc for grpc translation
  • 79d3f32 Update go to 1.22
  • 05636b9 Update JOB_OBJECT_ALL_ACCESS and OpenJobObject (#2095)
  • 1550628 mobve SILOOBJECT_BASIC_INFORMATION to winapi
  • bf52d58 fix SILOOBJECT_BASIC_INFORMATION alignment
  • 8d48d87 Update containerd to v1.7.23 (#2295)
  • 4ad298f Fixing typo (#2289)
  • 86b5333 Bump golangci/golangci-lint-action from 4 to 6
  • 5ae96f3 Update runc to v1.1.14
  • 8f3fccd Update pkg versions
  • Additional commits viewable in compare view

Updates github.com/ProtonMail/go-crypto from 1.1.3 to 1.1.6

Release notes

Sourced from github.com/ProtonMail/go-crypto's releases.

Release v1.1.6

What's Changed

Full Changelog: ProtonMail/go-crypto@v1.1.5...v1.1.6

Release v1.1.6-proton

What's Changed

This release is v1.1.6 with support for the following non-standardized features:

Release v1.1.5

What's Changed

Full Changelog: ProtonMail/go-crypto@v1.1.4...v1.1.5

Release v1.1.5-proton

What's Changed

This release is v1.1.5 with support for the following non-standardized features:

Release v1.1.4

What's Changed

Full Changelog: ProtonMail/go-crypto@v1.1.3...v1.1.4

Release v1.1.4-proton

What's Changed

This release is v1.1.4 with support for the following non-standardized features:

... (truncated)

Commits
  • e52eada Merge pull request #271 from ProtonMail/feat/improve-errors-key-selection
  • 4bf9d90 feat(v2): Improve error message for encryption key selection
  • d47bb38 Merge pull request #266 from caarlos0/issuer-key-id
  • 756ebbd Make Issuer Key ID signature subpacket non-critical
  • 44ef98c Merge pull request #276 from mdosch/fix-random-source-is-broken
  • b105e24 Merge branch 'main' into fix-random-source-is-broken
  • 89b0776 Only check that message signatures are newer than the key
  • 2b2dbe9 openpgp/clearsign: just use rand.Reader in tests
  • 2732e09 Merge pull request #275 from ProtonMail/only-check-msg-sig-newer-than-key
  • 8e272e7 Only check that message signatures are newer than the key
  • Additional commits viewable in compare view

Updates github.com/anchore/go-logger from 0.0.0-20220728155337-03b66a5207d8 to 0.0.0-20230725134548-c21dafa1ec5a

Commits

Updates github.com/anchore/packageurl-go from 0.1.1-0.20230104203445-02e0a6721501 to 0.1.1-0.20250220190351-d62adb6e1115

Commits

Updates github.com/anchore/syft from 0.80.0 to 1.19.0

Release notes

Sourced from github.com/anchore/syft's releases.

v1.19.0

Added Features

Bug Fixes

Additional Changes

(Full Changelog)

v1.18.1

Bug Fixes

  • Runtime Error with Syft on Singularity .sif file (panic: index out of range) [#3390]
  • SPDX expressions are lost from CycloneDX if they contain extra parenthesis [#3441 #3517 @​willmurphyscode]

Additional Changes

  • migrate syft to use anchore fork of archiver without replace [#3516 @​spiffcs]

(Full Changelog)

v1.18.0

Added Features

Bug Fixes

  • fix order of rust dependencies and support git sources in Cargo.lock dependencies [#3502 @​willmurphyscode]
  • Use file indexer directly when scanning with file source [#3333 @​adammcclenaghan]
  • Remove incorrect power-user help text that only image sources are supported [#2046]
  • Invalid SPDX: missing copyright text [#3346 #3495 @​spiffcs]
  • Scanning a source tree with duplicate conanfile.txt dependencies generates multiple components [#3403]

(Full Changelog)

v1.17.0

... (truncated)

Commits
  • 222e654 chore(deps): update tools to latest versions (#3602)
  • 0969453 chore(deps): bump github/codeql-action from 3.28.1 to 3.28.2 (#3604)
  • a5ef816 chore(deps): bump github.com/hashicorp/hcl/v2 from 2.22.0 to 2.23.0 (#3605)
  • 07f0658 chore(deps): bump github.com/aquasecurity/go-pep440-version (#3606)
  • 7f5dbf9 chore: bump stereoscope to v0.0.13 (#3601)
  • c10e904 feat(cataloger): add a terraform provider cataloger (#3378)
  • 1906c17 chore(deps): update tools to latest versions (#3597)
  • 4edfa4d chore(deps): update CPE dictionary index (#3599)
  • a6557d7 chore(deps): bump actions/setup-go from 5.2.0 to 5.3.0 (#3600)
  • 19a75fe feat(golang): add license parsing from vendor dirs (#3522)
  • Additional commits viewable in compare view

Updates github.com/andybalholm/brotli from 1.0.4 to 1.1.1

Commits
  • 57434b5 Encoder: check for empty block
  • 97e8583 matchfinder.M4: some refinements to scoring
  • 17e5901 Make my matchfinder work more accessible.
  • cf812c0 matchfinder: add M0
  • 1b6cf36 matchfinder: remove MultiHash
  • 265f3af matchfinder: penalize score for overlapping matches
  • a8d524a matchfinder: replace Score function with DistanceBitCost
  • 578645e matchfinder: add MultiHash
  • 24b2bfa matchfinder.M4: add Score function
  • 4a024e3 matchfinder.M4: add match chain
  • Additional commits viewable in compare view

Updates github.com/bmatcuk/doublestar/v4 from 4.6.0 to 4.8.1

Release notes

Sourced from github.com/bmatcuk/doublestar/v4's releases.

Small Performance Improvement for MatchUnvalidated

Skip some additional validation checks in MatchUnvalidated. Thanks to @​lukemassa for the PR!

Additional documentation improvements from @​timo-reymann. Thanks!

What's Changed

New Contributors

Full Changelog: bmatcuk/doublestar@v4.8.0...v4.8.1

Fixed Escaped Meta in the "Base" of the Pattern

If the "base" of a pattern (ie, everything up to the first path slash before any meta characters) contains an escaped meta character, doublestar would fail to glob any files.

Thanks to @​tdurieux for finding and fixing this bug!

Breaking-ish Change

I've updated SplitPattern to unescape meta characters in the first returned string. I suspect this shouldn't cause issues for anyone because, if anyone was using this function, they've probably either never passed a pattern with escaped meta characters, or hand-rolled an unescape method to fix the bug - which will now be a no-op for them.

What's Changed

New Contributors

Full Changelog: bmatcuk/doublestar@v4.7.1...v4.8.0

Fixed FilepathGlob("")

To be consistent with filepath.Glob, FilepathGlob("") returns nil.

Added MatchUnvalidated, PathMatchUnvalidated

These functions provide a small performance improvement in cases where you don't care about whether or not the pattern is valid (maybe because you already ran ValidatePattern).

Fixed Match bug with patterns like a/**/

Thanks @​mmxmb for submitting the bug and opening a PR in #89!

Commits

@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Apr 25, 2025
Bumps the go-modules group with 69 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/paketo-buildpacks/packit/v2](https://github.com/paketo-buildpacks/packit) | `2.17.0` | `2.18.0` |
| [dario.cat/mergo](https://github.com/imdario/mergo) | `1.0.0` | `1.0.1` |
| [github.com/Azure/go-ansiterm](https://github.com/Azure/go-ansiterm) | `0.0.0-20210617225240-d185dfc1b5a1` | `0.0.0-20230124172434-306776ec8161` |
| [github.com/CycloneDX/cyclonedx-go](https://github.com/CycloneDX/cyclonedx-go) | `0.7.1` | `0.9.2` |
| [github.com/DataDog/zstd](https://github.com/DataDog/zstd) | `1.4.5` | `1.5.5` |
| [github.com/Masterminds/sprig/v3](https://github.com/Masterminds/sprig) | `3.2.3` | `3.3.0` |
| [github.com/Microsoft/hcsshim](https://github.com/Microsoft/hcsshim) | `0.11.7` | `0.12.9` |
| [github.com/ProtonMail/go-crypto](https://github.com/ProtonMail/go-crypto) | `1.1.3` | `1.1.6` |
| [github.com/anchore/go-logger](https://github.com/anchore/go-logger) | `0.0.0-20220728155337-03b66a5207d8` | `0.0.0-20230725134548-c21dafa1ec5a` |
| [github.com/anchore/packageurl-go](https://github.com/anchore/packageurl-go) | `0.1.1-0.20230104203445-02e0a6721501` | `0.1.1-0.20250220190351-d62adb6e1115` |
| [github.com/anchore/syft](https://github.com/anchore/syft) | `0.80.0` | `1.19.0` |
| [github.com/andybalholm/brotli](https://github.com/andybalholm/brotli) | `1.0.4` | `1.1.1` |
| [github.com/bmatcuk/doublestar/v4](https://github.com/bmatcuk/doublestar) | `4.6.0` | `4.8.1` |
| [github.com/cenkalti/backoff/v4](https://github.com/cenkalti/backoff) | `4.2.1` | `4.3.0` |
| [github.com/cloudflare/circl](https://github.com/cloudflare/circl) | `1.3.7` | `1.6.0` |
| [github.com/containerd/stargz-snapshotter/estargz](https://github.com/containerd/stargz-snapshotter) | `0.14.3` | `0.16.3` |
| [github.com/cpuguy83/dockercfg](https://github.com/cpuguy83/dockercfg) | `0.3.1` | `0.3.2` |
| [github.com/cyphar/filepath-securejoin](https://github.com/cyphar/filepath-securejoin) | `0.2.5` | `0.4.1` |
| [github.com/docker/cli](https://github.com/docker/cli) | `27.1.1+incompatible` | `28.0.4+incompatible` |
| [github.com/docker/distribution](https://github.com/docker/distribution) | `2.8.2+incompatible` | `2.8.3+incompatible` |
| [github.com/docker/docker-credential-helpers](https://github.com/docker/docker-credential-helpers) | `0.7.0` | `0.8.2` |
| [github.com/gabriel-vasile/mimetype](https://github.com/gabriel-vasile/mimetype) | `1.4.8` | `1.4.9` |
| [github.com/go-git/go-billy/v5](https://github.com/go-git/go-billy) | `5.6.0` | `5.6.2` |
| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.13.0` | `5.14.0` |
| [github.com/go-ole/go-ole](https://github.com/go-ole/go-ole) | `1.2.6` | `1.3.0` |
| [github.com/golang/groupcache](https://github.com/golang/groupcache) | `0.0.0-20210331224755-41bb18bfe9da` | `0.0.0-20241129210726-2c02b8208cf8` |
| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.20.2` | `0.20.3` |
| [github.com/huandu/xstrings](https://github.com/huandu/xstrings) | `1.3.3` | `1.5.0` |
| [github.com/jinzhu/copier](https://github.com/jinzhu/copier) | `0.3.5` | `0.4.0` |
| [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.16.7` | `1.18.0` |
| [github.com/klauspost/pgzip](https://github.com/klauspost/pgzip) | `1.2.5` | `1.2.6` |
| [github.com/knqyf263/go-rpmdb](https://github.com/knqyf263/go-rpmdb) | `0.0.0-20230301153543-ba94b245509b` | `0.1.1` |
| [github.com/magiconair/properties](https://github.com/magiconair/properties) | `1.8.7` | `1.8.9` |
| [github.com/mattn/go-runewidth](https://github.com/mattn/go-runewidth) | `0.0.13` | `0.0.16` |
| [github.com/moby/sys/sequential](https://github.com/moby/sys) | `0.5.0` | `0.6.0` |
| [github.com/moby/sys/user](https://github.com/moby/sys) | `0.3.0` | `0.4.0` |
| [github.com/moby/term](https://github.com/moby/term) | `0.5.0` | `0.5.2` |
| [github.com/nwaples/rardecode](https://github.com/nwaples/rardecode) | `1.1.0` | `1.1.3` |
| [github.com/opencontainers/image-spec](https://github.com/opencontainers/image-spec) | `1.1.0` | `1.1.1` |
| [github.com/pierrec/lz4/v4](https://github.com/pierrec/lz4) | `4.1.15` | `4.1.22` |
| [github.com/pjbgf/sha1cd](https://github.com/pjbgf/sha1cd) | `0.3.0` | `0.3.2` |
| [github.com/rivo/uniseg](https://github.com/rivo/uniseg) | `0.2.0` | `0.4.7` |
| [github.com/sassoftware/go-rpmutils](https://github.com/sassoftware/go-rpmutils) | `0.2.0` | `0.4.0` |
| [github.com/shirou/gopsutil/v3](https://github.com/shirou/gopsutil) | `3.23.12` | `3.24.5` |
| [github.com/shopspring/decimal](https://github.com/shopspring/decimal) | `1.2.0` | `1.4.0` |
| [github.com/skeema/knownhosts](https://github.com/skeema/knownhosts) | `1.3.0` | `1.3.1` |
| [github.com/spdx/tools-golang](https://github.com/spdx/tools-golang) | `0.5.0` | `0.5.5` |
| [github.com/spf13/afero](https://github.com/spf13/afero) | `1.9.5` | `1.14.0` |
| [github.com/spf13/cast](https://github.com/spf13/cast) | `1.5.0` | `1.7.0` |
| [github.com/sylabs/sif/v2](https://github.com/sylabs/sif) | `2.8.1` | `2.21.1` |
| [github.com/sylabs/squashfs](https://github.com/sylabs/squashfs) | `0.6.1` | `1.0.6` |
| [github.com/tklauser/go-sysconf](https://github.com/tklauser/go-sysconf) | `0.3.12` | `0.3.15` |
| [github.com/tklauser/numcpus](https://github.com/tklauser/numcpus) | `0.6.1` | `0.10.0` |
| [github.com/vbatts/go-mtree](https://github.com/vbatts/go-mtree) | `0.5.3` | `0.5.4` |
| [github.com/vbatts/tar-split](https://github.com/vbatts/tar-split) | `0.11.3` | `0.11.6` |
| [github.com/vifraa/gopom](https://github.com/vifraa/gopom) | `0.2.1` | `1.0.0` |
| [github.com/wagoodman/go-partybus](https://github.com/wagoodman/go-partybus) | `0.0.0-20210627031916-db1f5573bbc5` | `0.0.0-20230516145632-8ccac152c651` |
| [github.com/wagoodman/go-progress](https://github.com/wagoodman/go-progress) | `0.0.0-20230301185719-21920a456ad5` | `0.0.0-20230925121702-07e42b3cdba0` |
| [github.com/yusufpapurcu/wmi](https://github.com/yusufpapurcu/wmi) | `1.2.3` | `1.2.4` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.36.0` | `0.37.0` |
| [golang.org/x/mod](https://github.com/golang/mod) | `0.19.0` | `0.24.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.37.0` | `0.39.0` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.12.0` | `0.13.0` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.31.0` | `0.32.0` |
| [golang.org/x/text](https://github.com/golang/text) | `0.23.0` | `0.24.0` |
| [golang.org/x/xerrors](https://github.com/golang/xerrors) | `0.0.0-20220907171357-04be3eba64a2` | `0.0.0-20231012003039-104605ab7028` |
| [google.golang.org/genproto/googleapis/rpc](https://github.com/googleapis/go-genproto) | `0.0.0-20240401170217-c3f982113cda` | `0.0.0-20241223144023-3abc09e42ca8` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.59.0` | `1.67.3` |
| google.golang.org/protobuf | `1.36.5` | `1.36.6` |


Updates `github.com/paketo-buildpacks/packit/v2` from 2.17.0 to 2.18.0
- [Release notes](https://github.com/paketo-buildpacks/packit/releases)
- [Commits](paketo-buildpacks/packit@v2.17.0...v2.18.0)

Updates `dario.cat/mergo` from 1.0.0 to 1.0.1
- [Release notes](https://github.com/imdario/mergo/releases)
- [Commits](darccio/mergo@v1.0.0...v1.0.1)

Updates `github.com/Azure/go-ansiterm` from 0.0.0-20210617225240-d185dfc1b5a1 to 0.0.0-20230124172434-306776ec8161
- [Commits](https://github.com/Azure/go-ansiterm/commits)

Updates `github.com/CycloneDX/cyclonedx-go` from 0.7.1 to 0.9.2
- [Release notes](https://github.com/CycloneDX/cyclonedx-go/releases)
- [Changelog](https://github.com/CycloneDX/cyclonedx-go/blob/master/.goreleaser.yml)
- [Commits](CycloneDX/cyclonedx-go@v0.7.1...v0.9.2)

Updates `github.com/DataDog/zstd` from 1.4.5 to 1.5.5
- [Release notes](https://github.com/DataDog/zstd/releases)
- [Commits](DataDog/zstd@v1.4.5...v1.5.5)

Updates `github.com/Masterminds/sprig/v3` from 3.2.3 to 3.3.0
- [Release notes](https://github.com/Masterminds/sprig/releases)
- [Changelog](https://github.com/Masterminds/sprig/blob/master/CHANGELOG.md)
- [Commits](Masterminds/sprig@v3.2.3...v3.3.0)

Updates `github.com/Microsoft/hcsshim` from 0.11.7 to 0.12.9
- [Release notes](https://github.com/Microsoft/hcsshim/releases)
- [Commits](microsoft/hcsshim@v0.11.7...v0.12.9)

Updates `github.com/ProtonMail/go-crypto` from 1.1.3 to 1.1.6
- [Release notes](https://github.com/ProtonMail/go-crypto/releases)
- [Commits](ProtonMail/go-crypto@v1.1.3...v1.1.6)

Updates `github.com/anchore/go-logger` from 0.0.0-20220728155337-03b66a5207d8 to 0.0.0-20230725134548-c21dafa1ec5a
- [Commits](https://github.com/anchore/go-logger/commits)

Updates `github.com/anchore/packageurl-go` from 0.1.1-0.20230104203445-02e0a6721501 to 0.1.1-0.20250220190351-d62adb6e1115
- [Release notes](https://github.com/anchore/packageurl-go/releases)
- [Commits](https://github.com/anchore/packageurl-go/commits)

Updates `github.com/anchore/syft` from 0.80.0 to 1.19.0
- [Release notes](https://github.com/anchore/syft/releases)
- [Changelog](https://github.com/anchore/syft/blob/main/.goreleaser.yaml)
- [Commits](anchore/syft@v0.80.0...v1.19.0)

Updates `github.com/andybalholm/brotli` from 1.0.4 to 1.1.1
- [Commits](andybalholm/brotli@v1.0.4...v1.1.1)

Updates `github.com/bmatcuk/doublestar/v4` from 4.6.0 to 4.8.1
- [Release notes](https://github.com/bmatcuk/doublestar/releases)
- [Commits](bmatcuk/doublestar@v4.6.0...v4.8.1)

Updates `github.com/cenkalti/backoff/v4` from 4.2.1 to 4.3.0
- [Changelog](https://github.com/cenkalti/backoff/blob/v5/CHANGELOG.md)
- [Commits](cenkalti/backoff@v4.2.1...v4.3.0)

Updates `github.com/cloudflare/circl` from 1.3.7 to 1.6.0
- [Release notes](https://github.com/cloudflare/circl/releases)
- [Commits](cloudflare/circl@v1.3.7...v1.6.0)

Updates `github.com/containerd/stargz-snapshotter/estargz` from 0.14.3 to 0.16.3
- [Release notes](https://github.com/containerd/stargz-snapshotter/releases)
- [Commits](containerd/stargz-snapshotter@v0.14.3...v0.16.3)

Updates `github.com/cpuguy83/dockercfg` from 0.3.1 to 0.3.2
- [Release notes](https://github.com/cpuguy83/dockercfg/releases)
- [Commits](cpuguy83/dockercfg@v0.3.1...v0.3.2)

Updates `github.com/cyphar/filepath-securejoin` from 0.2.5 to 0.4.1
- [Release notes](https://github.com/cyphar/filepath-securejoin/releases)
- [Changelog](https://github.com/cyphar/filepath-securejoin/blob/main/CHANGELOG.md)
- [Commits](cyphar/filepath-securejoin@v0.2.5...v0.4.1)

Updates `github.com/docker/cli` from 27.1.1+incompatible to 28.0.4+incompatible
- [Commits](docker/cli@v27.1.1...v28.0.4)

Updates `github.com/docker/distribution` from 2.8.2+incompatible to 2.8.3+incompatible
- [Release notes](https://github.com/docker/distribution/releases)
- [Commits](distribution/distribution@v2.8.2...v2.8.3)

Updates `github.com/docker/docker-credential-helpers` from 0.7.0 to 0.8.2
- [Release notes](https://github.com/docker/docker-credential-helpers/releases)
- [Commits](docker/docker-credential-helpers@v0.7.0...v0.8.2)

Updates `github.com/gabriel-vasile/mimetype` from 1.4.8 to 1.4.9
- [Release notes](https://github.com/gabriel-vasile/mimetype/releases)
- [Commits](gabriel-vasile/mimetype@v1.4.8...v1.4.9)

Updates `github.com/go-git/go-billy/v5` from 5.6.0 to 5.6.2
- [Release notes](https://github.com/go-git/go-billy/releases)
- [Commits](go-git/go-billy@v5.6.0...v5.6.2)

Updates `github.com/go-git/go-git/v5` from 5.13.0 to 5.14.0
- [Release notes](https://github.com/go-git/go-git/releases)
- [Commits](go-git/go-git@v5.13.0...v5.14.0)

Updates `github.com/go-ole/go-ole` from 1.2.6 to 1.3.0
- [Release notes](https://github.com/go-ole/go-ole/releases)
- [Changelog](https://github.com/go-ole/go-ole/blob/master/ChangeLog.md)
- [Commits](go-ole/go-ole@v1.2.6...v1.3.0)

Updates `github.com/golang/groupcache` from 0.0.0-20210331224755-41bb18bfe9da to 0.0.0-20241129210726-2c02b8208cf8
- [Commits](https://github.com/golang/groupcache/commits)

Updates `github.com/google/go-containerregistry` from 0.20.2 to 0.20.3
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Changelog](https://github.com/google/go-containerregistry/blob/main/.goreleaser.yml)
- [Commits](google/go-containerregistry@v0.20.2...v0.20.3)

Updates `github.com/huandu/xstrings` from 1.3.3 to 1.5.0
- [Release notes](https://github.com/huandu/xstrings/releases)
- [Commits](huandu/xstrings@v1.3.3...v1.5.0)

Updates `github.com/jinzhu/copier` from 0.3.5 to 0.4.0
- [Commits](jinzhu/copier@v0.3.5...v0.4.0)

Updates `github.com/klauspost/compress` from 1.16.7 to 1.18.0
- [Release notes](https://github.com/klauspost/compress/releases)
- [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml)
- [Commits](klauspost/compress@v1.16.7...v1.18.0)

Updates `github.com/klauspost/pgzip` from 1.2.5 to 1.2.6
- [Release notes](https://github.com/klauspost/pgzip/releases)
- [Commits](klauspost/pgzip@v1.2.5...v1.2.6)

Updates `github.com/knqyf263/go-rpmdb` from 0.0.0-20230301153543-ba94b245509b to 0.1.1
- [Commits](https://github.com/knqyf263/go-rpmdb/commits/v0.1.1)

Updates `github.com/magiconair/properties` from 1.8.7 to 1.8.9
- [Release notes](https://github.com/magiconair/properties/releases)
- [Commits](magiconair/properties@v1.8.7...v1.8.9)

Updates `github.com/mattn/go-runewidth` from 0.0.13 to 0.0.16
- [Commits](mattn/go-runewidth@v0.0.13...v0.0.16)

Updates `github.com/moby/sys/sequential` from 0.5.0 to 0.6.0
- [Release notes](https://github.com/moby/sys/releases)
- [Commits](moby/sys@signal/v0.5.0...signal/v0.6.0)

Updates `github.com/moby/sys/user` from 0.3.0 to 0.4.0
- [Release notes](https://github.com/moby/sys/releases)
- [Commits](moby/sys@user/v0.3.0...user/v0.4.0)

Updates `github.com/moby/term` from 0.5.0 to 0.5.2
- [Commits](moby/term@v0.5.0...v0.5.2)

Updates `github.com/nwaples/rardecode` from 1.1.0 to 1.1.3
- [Commits](nwaples/rardecode@v1.1.0...v1.1.3)

Updates `github.com/opencontainers/image-spec` from 1.1.0 to 1.1.1
- [Release notes](https://github.com/opencontainers/image-spec/releases)
- [Changelog](https://github.com/opencontainers/image-spec/blob/main/RELEASES.md)
- [Commits](opencontainers/image-spec@v1.1.0...v1.1.1)

Updates `github.com/pierrec/lz4/v4` from 4.1.15 to 4.1.22
- [Commits](pierrec/lz4@v4.1.15...v4.1.22)

Updates `github.com/pjbgf/sha1cd` from 0.3.0 to 0.3.2
- [Release notes](https://github.com/pjbgf/sha1cd/releases)
- [Commits](pjbgf/sha1cd@v0.3.0...v0.3.2)

Updates `github.com/rivo/uniseg` from 0.2.0 to 0.4.7
- [Release notes](https://github.com/rivo/uniseg/releases)
- [Commits](rivo/uniseg@v0.2.0...v0.4.7)

Updates `github.com/sassoftware/go-rpmutils` from 0.2.0 to 0.4.0
- [Release notes](https://github.com/sassoftware/go-rpmutils/releases)
- [Commits](sassoftware/go-rpmutils@v0.2.0...v0.4.0)

Updates `github.com/shirou/gopsutil/v3` from 3.23.12 to 3.24.5
- [Release notes](https://github.com/shirou/gopsutil/releases)
- [Commits](shirou/gopsutil@v3.23.12...v3.24.5)

Updates `github.com/shopspring/decimal` from 1.2.0 to 1.4.0
- [Release notes](https://github.com/shopspring/decimal/releases)
- [Changelog](https://github.com/shopspring/decimal/blob/master/CHANGELOG.md)
- [Commits](shopspring/decimal@v1.2.0...v1.4.0)

Updates `github.com/skeema/knownhosts` from 1.3.0 to 1.3.1
- [Commits](skeema/knownhosts@v1.3.0...v1.3.1)

Updates `github.com/spdx/tools-golang` from 0.5.0 to 0.5.5
- [Release notes](https://github.com/spdx/tools-golang/releases)
- [Changelog](https://github.com/spdx/tools-golang/blob/main/RELEASE-NOTES.md)
- [Commits](spdx/tools-golang@v0.5.0...v0.5.5)

Updates `github.com/spf13/afero` from 1.9.5 to 1.14.0
- [Release notes](https://github.com/spf13/afero/releases)
- [Commits](spf13/afero@v1.9.5...v1.14.0)

Updates `github.com/spf13/cast` from 1.5.0 to 1.7.0
- [Release notes](https://github.com/spf13/cast/releases)
- [Commits](spf13/cast@v1.5.0...v1.7.0)

Updates `github.com/sylabs/sif/v2` from 2.8.1 to 2.21.1
- [Release notes](https://github.com/sylabs/sif/releases)
- [Changelog](https://github.com/sylabs/sif/blob/main/.goreleaser.yml)
- [Commits](sylabs/sif@v2.8.1...v2.21.1)

Updates `github.com/sylabs/squashfs` from 0.6.1 to 1.0.6
- [Commits](sylabs/squashfs@v0.6.1...v1.0.6)

Updates `github.com/tklauser/go-sysconf` from 0.3.12 to 0.3.15
- [Release notes](https://github.com/tklauser/go-sysconf/releases)
- [Commits](tklauser/go-sysconf@v0.3.12...v0.3.15)

Updates `github.com/tklauser/numcpus` from 0.6.1 to 0.10.0
- [Release notes](https://github.com/tklauser/numcpus/releases)
- [Commits](tklauser/numcpus@v0.6.1...v0.10.0)

Updates `github.com/vbatts/go-mtree` from 0.5.3 to 0.5.4
- [Release notes](https://github.com/vbatts/go-mtree/releases)
- [Changelog](https://github.com/vbatts/go-mtree/blob/main/releases.md)
- [Commits](vbatts/go-mtree@v0.5.3...v0.5.4)

Updates `github.com/vbatts/tar-split` from 0.11.3 to 0.11.6
- [Release notes](https://github.com/vbatts/tar-split/releases)
- [Commits](vbatts/tar-split@v0.11.3...v0.11.6)

Updates `github.com/vifraa/gopom` from 0.2.1 to 1.0.0
- [Release notes](https://github.com/vifraa/gopom/releases)
- [Commits](vifraa/gopom@v0.2.1...v1.0.0)

Updates `github.com/wagoodman/go-partybus` from 0.0.0-20210627031916-db1f5573bbc5 to 0.0.0-20230516145632-8ccac152c651
- [Commits](https://github.com/wagoodman/go-partybus/commits)

Updates `github.com/wagoodman/go-progress` from 0.0.0-20230301185719-21920a456ad5 to 0.0.0-20230925121702-07e42b3cdba0
- [Commits](https://github.com/wagoodman/go-progress/commits)

Updates `github.com/yusufpapurcu/wmi` from 1.2.3 to 1.2.4
- [Release notes](https://github.com/yusufpapurcu/wmi/releases)
- [Commits](yusufpapurcu/wmi@v1.2.3...v1.2.4)

Updates `golang.org/x/crypto` from 0.36.0 to 0.37.0
- [Commits](golang/crypto@v0.36.0...v0.37.0)

Updates `golang.org/x/mod` from 0.19.0 to 0.24.0
- [Commits](golang/mod@v0.19.0...v0.24.0)

Updates `golang.org/x/net` from 0.37.0 to 0.39.0
- [Commits](golang/net@v0.37.0...v0.39.0)

Updates `golang.org/x/sync` from 0.12.0 to 0.13.0
- [Commits](golang/sync@v0.12.0...v0.13.0)

Updates `golang.org/x/sys` from 0.31.0 to 0.32.0
- [Commits](golang/sys@v0.31.0...v0.32.0)

Updates `golang.org/x/text` from 0.23.0 to 0.24.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.23.0...v0.24.0)

Updates `golang.org/x/xerrors` from 0.0.0-20220907171357-04be3eba64a2 to 0.0.0-20231012003039-104605ab7028
- [Commits](https://github.com/golang/xerrors/commits)

Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20240401170217-c3f982113cda to 0.0.0-20241223144023-3abc09e42ca8
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/grpc` from 1.59.0 to 1.67.3
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.59.0...v1.67.3)

Updates `google.golang.org/protobuf` from 1.36.5 to 1.36.6

---
updated-dependencies:
- dependency-name: github.com/paketo-buildpacks/packit/v2
  dependency-version: 2.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: dario.cat/mergo
  dependency-version: 1.0.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/Azure/go-ansiterm
  dependency-version: 0.0.0-20230124172434-306776ec8161
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/CycloneDX/cyclonedx-go
  dependency-version: 0.9.2
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/DataDog/zstd
  dependency-version: 1.5.5
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/Masterminds/sprig/v3
  dependency-version: 3.3.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/Microsoft/hcsshim
  dependency-version: 0.12.9
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/ProtonMail/go-crypto
  dependency-version: 1.1.6
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/anchore/go-logger
  dependency-version: 0.0.0-20230725134548-c21dafa1ec5a
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/anchore/packageurl-go
  dependency-version: 0.1.1-0.20250220190351-d62adb6e1115
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/anchore/syft
  dependency-version: 1.19.0
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: go-modules
- dependency-name: github.com/andybalholm/brotli
  dependency-version: 1.1.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/bmatcuk/doublestar/v4
  dependency-version: 4.8.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/cenkalti/backoff/v4
  dependency-version: 4.3.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/cloudflare/circl
  dependency-version: 1.6.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/containerd/stargz-snapshotter/estargz
  dependency-version: 0.16.3
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/cpuguy83/dockercfg
  dependency-version: 0.3.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/cyphar/filepath-securejoin
  dependency-version: 0.4.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/docker/cli
  dependency-version: 28.0.4+incompatible
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: go-modules
- dependency-name: github.com/docker/distribution
  dependency-version: 2.8.3+incompatible
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/docker/docker-credential-helpers
  dependency-version: 0.8.2
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/gabriel-vasile/mimetype
  dependency-version: 1.4.9
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/go-git/go-billy/v5
  dependency-version: 5.6.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/go-git/go-git/v5
  dependency-version: 5.14.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/go-ole/go-ole
  dependency-version: 1.3.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/golang/groupcache
  dependency-version: 0.0.0-20241129210726-2c02b8208cf8
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/google/go-containerregistry
  dependency-version: 0.20.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/huandu/xstrings
  dependency-version: 1.5.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/jinzhu/copier
  dependency-version: 0.4.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/klauspost/compress
  dependency-version: 1.18.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/klauspost/pgzip
  dependency-version: 1.2.6
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/knqyf263/go-rpmdb
  dependency-version: 0.1.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/magiconair/properties
  dependency-version: 1.8.9
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/mattn/go-runewidth
  dependency-version: 0.0.16
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/moby/sys/sequential
  dependency-version: 0.6.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/moby/sys/user
  dependency-version: 0.4.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/moby/term
  dependency-version: 0.5.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/nwaples/rardecode
  dependency-version: 1.1.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/opencontainers/image-spec
  dependency-version: 1.1.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/pierrec/lz4/v4
  dependency-version: 4.1.22
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/pjbgf/sha1cd
  dependency-version: 0.3.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/rivo/uniseg
  dependency-version: 0.4.7
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/sassoftware/go-rpmutils
  dependency-version: 0.4.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/shirou/gopsutil/v3
  dependency-version: 3.24.5
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/shopspring/decimal
  dependency-version: 1.4.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/skeema/knownhosts
  dependency-version: 1.3.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/spdx/tools-golang
  dependency-version: 0.5.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/spf13/afero
  dependency-version: 1.14.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/spf13/cast
  dependency-version: 1.7.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/sylabs/sif/v2
  dependency-version: 2.21.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/sylabs/squashfs
  dependency-version: 1.0.6
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: go-modules
- dependency-name: github.com/tklauser/go-sysconf
  dependency-version: 0.3.15
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/tklauser/numcpus
  dependency-version: 0.10.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/vbatts/go-mtree
  dependency-version: 0.5.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/vbatts/tar-split
  dependency-version: 0.11.6
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/vifraa/gopom
  dependency-version: 1.0.0
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: go-modules
- dependency-name: github.com/wagoodman/go-partybus
  dependency-version: 0.0.0-20230516145632-8ccac152c651
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/wagoodman/go-progress
  dependency-version: 0.0.0-20230925121702-07e42b3cdba0
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/yusufpapurcu/wmi
  dependency-version: 1.2.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: golang.org/x/crypto
  dependency-version: 0.37.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/mod
  dependency-version: 0.24.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/net
  dependency-version: 0.39.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/sync
  dependency-version: 0.13.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/sys
  dependency-version: 0.32.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/text
  dependency-version: 0.24.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/xerrors
  dependency-version: 0.0.0-20231012003039-104605ab7028
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: google.golang.org/genproto/googleapis/rpc
  dependency-version: 0.0.0-20241223144023-3abc09e42ca8
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: google.golang.org/grpc
  dependency-version: 1.67.3
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.6
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/go_modules/go-modules-4a3db6b9bd branch from 743430a to 4ac7200 Compare May 8, 2025 23:53
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github May 21, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this May 21, 2025
@dependabot dependabot bot deleted the dependabot/go_modules/go-modules-4a3db6b9bd branch May 21, 2025 23:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant