Guest24897
/
DockerCLI
mirror of https://github.com/docker/cli.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
DockerCLI/vendor.mod

101 lines
4.4 KiB
Modula-2
Raw Normal View History

vendor with go mod Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2021-12-16 15:15:53 -05:00
module github.com/docker/cli
// 'vendor.mod' enables use of 'go mod vendor' to managed 'vendor/' directory.
// There is no 'go.mod' file, as that would imply opting in for all the rules
// around SemVer, which this repo cannot abide by as it uses CalVer.
vendor: github.com/containerd/containerd v1.7.14 no changes in vendored files, but now requires go1.21 full diff: https://github.com/containerd/containerd/compare/v1.7.13...v1.7.14 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-03-16 11:30:13 -04:00
go 1.21
vendor with go mod Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2021-12-16 15:15:53 -05:00
require (
rename and update mergo module Signed-off-by: Boban Acimovic <boban.acimovic@gmail.com>
2023-06-26 16:19:11 -04:00
dario.cat/mergo v1.0.0
vendor: github.com/containerd/containerd v1.7.15 Signed-off-by: Laura Brehm <laurabrehm@hey.com>
2024-04-10 10:52:37 -04:00
github.com/containerd/containerd v1.7.15
vendor: github.com/creack/pty v1.1.21 full diff: https://github.com/creack/pty/compare/v1.18.0...v1.21.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-01-08 04:22:09 -05:00
github.com/creack/pty v1.1.21
vendor: github.com/distribution/reference v0.5.0 full diff: https://github.com/distribution/reference/compare/e42074f83a9c...v0.5.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-09-27 18:13:58 -04:00
github.com/distribution/reference v0.5.0
vendor: github.com/docker/distribution v2.8.3 - Fix storageDriver gcs not registered in binaries - reference: replace uses of deprecated function SplitHostname - Dont parse errors as JSON unless Content-Type is set to JSON - update to go1.20.8 - Set Content-Type header in registry client ReadFrom - deprecate reference package, migrate to github.com/distribution/reference - digestset: deprecate package in favor of go-digest/digestset - Do not close HTTP request body in HTTP handler full diff: https://github.com/distribution/distribution/compare/v2.8.2...v2.8.3 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-10-13 11:54:59 -04:00
github.com/docker/distribution v2.8.3+incompatible
vendor: github.com/docker/docker v26.1.0-dev (c8af8ebe4a89) Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
2024-04-22 12:53:51 -04:00
github.com/docker/docker v26.0.1-0.20240422144514-c8af8ebe4a89+incompatible
vendor: github.com/docker/docker-credential-helpers v0.8.1 full diff: https://github.com/docker/docker-credential-helpers/compare/v0.8.0...v0.8.1 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-01-10 16:35:03 -05:00
github.com/docker/docker-credential-helpers v0.8.1
vendor: github.com/docker/go-connections v0.5.0 no diff, as the tag is the same commit as we used already; https://github.com/docker/go-connections/compare/fa09c952e3ea...v0.5.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-01-05 12:25:04 -05:00
github.com/docker/go-connections v0.5.0
vendor: github.com/docker/go-units v0.5.0 full diff: https://github.com/docker/go-units/compare/v0.4.0...v0.5.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2022-08-31 13:10:26 -04:00
github.com/docker/go-units v0.5.0
vendor with go mod Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2021-12-16 15:15:53 -05:00
github.com/fvbommel/sortorder v1.0.2
github.com/gogo/protobuf v1.3.2
vendor: github.com/google/go-cmp v0.6.0 - removes purego fallbacks full diff: https://github.com/google/go-cmp/compare/v0.5.9...v0.6.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-01-08 04:25:45 -05:00
github.com/google/go-cmp v0.6.0
vendor with go mod Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2021-12-16 15:15:53 -05:00
github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510
vendor: github.com/mattn/go-runewidth v0.0.15 no code-changes, but project updated CI to test against current Go versions; https://github.com/mattn/go-runewidth/compare/v0.0.14...v0.0.15 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-12-27 04:40:19 -05:00
github.com/mattn/go-runewidth v0.0.15
vendor: github.com/mitchellh/mapstructure v1.5.0 note that this repository will be sunset, and the "endorsed" fork will be maintened by "go-viper"; see [mapstructure#349][1] [1]: https://github.com/mitchellh/mapstructure/issues/349 full diff: https://github.com/mitchellh/mapstructure/compare/v1.3.2...v1.5.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-12-27 05:22:24 -05:00
github.com/mitchellh/mapstructure v1.5.0
vendor: github.com/moby/patternmatcher v0.6.0 - integrate frontend/dockerfile/dockerignore from buildkit full diff: https://github.com/moby/patternmatcher/compare/v0.5.0...v0.6.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-08-22 17:52:14 -04:00
github.com/moby/patternmatcher v0.6.0
vendor: github.com/moby/swarmkit/v2 v2.0.0-20240227173239-911c97650f2e Signed-off-by: Laura Brehm <laurabrehm@hey.com>
2024-04-10 11:02:34 -04:00
github.com/moby/swarmkit/v2 v2.0.0-20240227173239-911c97650f2e
vendor: docker v20.10.3-0.20221006185438-87d9d96ab0b6 (v22.06-dev) full diff: https://github.com/docker/docker/compare/e143eed8bc4fcdd5eff73d649130f0d97c2e7723...87d9d96ab0b693c2c83f7d1fd0f4037a9d1aa217 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2022-10-13 09:49:35 -04:00
github.com/moby/sys/sequential v0.5.0
vendor: github.com/moby/sys/signal v0.7.0 full diff: https://github.com/moby/sys/signal/compare/v0.6.0...v0.7.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2022-03-03 07:34:59 -05:00
github.com/moby/sys/signal v0.7.0
vendor: github.com/moby/term v0.5.0 - split exported functions from implementation - windows: IsConsole(): fix deprecation comment - deprecate Termios in favor of unix.Termios - windows: keyToString(): fix string conversion - gha: update actions, add macOS, and add Go1.20 - gha: add windows full diff: https://github.com/moby/term/compare/c43b287e0e0f...v0.5.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-05-02 08:22:36 -04:00
github.com/moby/term v0.5.0
vendor with go mod Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2021-12-16 15:15:53 -05:00
github.com/morikuni/aec v1.0.0
github.com/opencontainers/go-digest v1.0.0
vendor: github.com/opencontainers/image-spec v1.1.0-rc5 full diff: https://github.com/opencontainers/image-spec/compare/v1.1.0-rc4...v1.1.0-rc5 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-10-24 08:36:40 -04:00
github.com/opencontainers/image-spec v1.1.0-rc5
vendor with go mod Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2021-12-16 15:15:53 -05:00
github.com/pkg/errors v0.9.1
vendor: github.com/sirupsen/logrus v1.9.3 full diff: https://github.com/sirupsen/logrus/compare/v1.9.0...v1.9.3 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-06-12 05:21:25 -04:00
github.com/sirupsen/logrus v1.9.3
vendor: github.com/spf13/cobra v1.8.0 release notes: https://github.com/spf13/cobra/releases/tag/v1.8.0 full diff: https://github.com/spf13/cobra/compare/v1.7.0...v1.8.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-11-06 10:54:43 -05:00
github.com/spf13/cobra v1.8.0
vendor with go mod Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2021-12-16 15:15:53 -05:00
github.com/spf13/pflag v1.0.5
github.com/theupdateframework/notary v0.7.1-0.20210315103452-bf96a202a09a
github.com/tonistiigi/go-rosetta v0.0.0-20200727161949-f79598599c5d
github.com/xeipuuv/gojsonschema v1.2.0
plugins: set OTEL_RESOURCE_ATTRIBUTES when invoking a plugin When a plugin is invoked, the docker cli will now set `OTEL_RESOURCE_ATTRIBUTES` to pass OTEL resource attribute names to the plugin as additional resource attributes. At the moment, the only resource attribute passed is `cobra.command_path`. All resource attributes passed by the CLI are prepended with the namespace `docker.cli` to avoid clashing with existing ones the plugin uses or ones defined by the user. For aliased commands like the various builder commands, the command path is overwritten to match with the original name (such as `docker builder`) instead of the forwarded name (such as `docker buildx build`). Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com>
2024-02-13 16:40:55 -05:00
go.opentelemetry.io/otel v1.21.0
cli: add otel sdk tracing and metric providers to the core cli This adds the code used by buildx and compose into the default CLI program to help normalize the usage of these APIs and allow code reuse between projects. It also allows these projects to benefit from improvements or changes that may be made by another team. At the moment, these APIs are a pretty thin layer on the OTEL SDK. It configures an additional exporter to a docker endpoint that's used for usage collection and is only active if the option is configured in docker desktop. This also upgrades the OTEL version to v1.19 which is the one being used by buildkit, buildx, compose, etc. Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com>
2024-02-20 10:42:33 -05:00
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v0.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.21.0
go.opentelemetry.io/otel/metric v1.21.0
go.opentelemetry.io/otel/sdk v1.21.0
go.opentelemetry.io/otel/sdk/metric v1.21.0
go.opentelemetry.io/otel/trace v1.21.0
vendor: golang.org/x/sync v0.6.0 full diff: https://github.com/golang/sync/compare/v0.3.0...v0.6.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-01-08 04:52:47 -05:00
golang.org/x/sync v0.6.0
vendor: golang.org/x/sys v0.18.0 full diff: https://github.com/golang/sys/compare/v0.16.0...v0.18.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-04-09 08:46:54 -04:00
golang.org/x/sys v0.18.0
vendor: golang.org/x/term v0.18.0 no changes in vendored code full diff: https://github.com/golang/term/compare/v0.15.0...v0.18.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-04-09 08:47:48 -04:00
golang.org/x/term v0.18.0
vendor: golang.org/x/text v0.14.0 full diff: https://github.com/golang/text/compare/v0.13.0...v0.14.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-12-18 07:46:41 -05:00
golang.org/x/text v0.14.0
vendor with go mod Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2021-12-16 15:15:53 -05:00
gopkg.in/yaml.v2 v2.4.0
vendor: gotest.tools/v3 v3.5.1 full diff: https://github.com/gotestyourself/gotest.tools/compare/v3.5.0..v3.5.1 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-10-20 11:39:10 -04:00
gotest.tools/v3 v3.5.1
Update container-device-interface to v0.6.2 This includes migrating from the github.com/container-orchestrated-devices repo to tags.cncf.io. Signed-off-by: Evan Lezar <elezar@nvidia.com>
2023-11-03 20:18:37 -04:00
tags.cncf.io/container-device-interface v0.6.2
vendor with go mod Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2021-12-16 15:15:53 -05:00
)
vendor dependencies with go1.17 Some warnings about go1.16 compatibility, so including them here: + go mod tidy -modfile=vendor.mod github.com/docker/cli/cli/registry/client imports github.com/docker/distribution/registry/api/v2 imports github.com/gorilla/mux loaded from github.com/gorilla/mux@v1.7.0, but go 1.16 would select v1.8.0 github.com/docker/cli/cli/compose/loader imports gopkg.in/yaml.v2 tested by gopkg.in/yaml.v2.test imports gopkg.in/check.v1 loaded from gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f, but go 1.16 would select v1.0.0-20201130134442-10cb98267c6c github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/Shopify/logrus-bugsnag loaded from github.com/Shopify/logrus-bugsnag@v0.0.0-20170309145241-6dbc35f2c30d, but go 1.16 would select v0.0.0-20171204204709-577dee27f20d github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server/storage imports gopkg.in/rethinkdb/rethinkdb-go.v6 imports github.com/opentracing/opentracing-go loaded from github.com/opentracing/opentracing-go@v1.1.0, but go 1.16 would select v1.2.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server/storage imports gopkg.in/rethinkdb/rethinkdb-go.v6 imports github.com/opentracing/opentracing-go/ext loaded from github.com/opentracing/opentracing-go@v1.1.0, but go 1.16 would select v1.2.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server/storage imports gopkg.in/rethinkdb/rethinkdb-go.v6 imports github.com/opentracing/opentracing-go/log loaded from github.com/opentracing/opentracing-go@v1.1.0, but go 1.16 would select v1.2.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/afero loaded from github.com/spf13/afero@v1.1.2, but go 1.16 would select v1.2.2 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/cast loaded from github.com/spf13/cast@v1.3.0, but go 1.16 would select v1.3.1 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/jwalterweatherman loaded from github.com/spf13/jwalterweatherman@v1.0.0, but go 1.16 would select v1.1.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports gopkg.in/ini.v1 loaded from gopkg.in/ini.v1@v1.51.0, but go 1.16 would select v1.56.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/afero imports github.com/spf13/afero/mem loaded from github.com/spf13/afero@v1.1.2, but go 1.16 would select v1.2.2 To upgrade to the versions selected by go 1.16: go mod tidy -go=1.16 && go mod tidy -go=1.17 If reproducibility with go 1.16 is not needed: go mod tidy -compat=1.17 For other options, see: https://golang.org/doc/modules/pruning Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2022-03-26 13:41:29 -04:00
require (
github.com/Azure/go-ansiterm v0.0.0-20210617225240-d185dfc1b5a1 // indirect
vendor: github.com/Microsoft/go-winio v0.6.1 Unfortunately also brings in golang.org/x/tools and golang.org/x/mod as a dependency, due to go-winio using a "tools.go" file. full diff: https://github.com/Microsoft/go-winio/compare/v0.5.2...v0.6.1 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-07-19 18:33:50 -04:00
github.com/Microsoft/go-winio v0.6.1 // indirect
vendor: github.com/Microsoft/hcsshim v0.11.4 no changes in vendored files full diff: https://github.com/microsoft/hcsshim/compare/v0.11.1...v0.11.4 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-11-20 12:15:18 -05:00
github.com/Microsoft/hcsshim v0.11.4 // indirect
vendor dependencies with go1.17 Some warnings about go1.16 compatibility, so including them here: + go mod tidy -modfile=vendor.mod github.com/docker/cli/cli/registry/client imports github.com/docker/distribution/registry/api/v2 imports github.com/gorilla/mux loaded from github.com/gorilla/mux@v1.7.0, but go 1.16 would select v1.8.0 github.com/docker/cli/cli/compose/loader imports gopkg.in/yaml.v2 tested by gopkg.in/yaml.v2.test imports gopkg.in/check.v1 loaded from gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f, but go 1.16 would select v1.0.0-20201130134442-10cb98267c6c github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/Shopify/logrus-bugsnag loaded from github.com/Shopify/logrus-bugsnag@v0.0.0-20170309145241-6dbc35f2c30d, but go 1.16 would select v0.0.0-20171204204709-577dee27f20d github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server/storage imports gopkg.in/rethinkdb/rethinkdb-go.v6 imports github.com/opentracing/opentracing-go loaded from github.com/opentracing/opentracing-go@v1.1.0, but go 1.16 would select v1.2.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server/storage imports gopkg.in/rethinkdb/rethinkdb-go.v6 imports github.com/opentracing/opentracing-go/ext loaded from github.com/opentracing/opentracing-go@v1.1.0, but go 1.16 would select v1.2.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server/storage imports gopkg.in/rethinkdb/rethinkdb-go.v6 imports github.com/opentracing/opentracing-go/log loaded from github.com/opentracing/opentracing-go@v1.1.0, but go 1.16 would select v1.2.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/afero loaded from github.com/spf13/afero@v1.1.2, but go 1.16 would select v1.2.2 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/cast loaded from github.com/spf13/cast@v1.3.0, but go 1.16 would select v1.3.1 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/jwalterweatherman loaded from github.com/spf13/jwalterweatherman@v1.0.0, but go 1.16 would select v1.1.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports gopkg.in/ini.v1 loaded from gopkg.in/ini.v1@v1.51.0, but go 1.16 would select v1.56.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/afero imports github.com/spf13/afero/mem loaded from github.com/spf13/afero@v1.1.2, but go 1.16 would select v1.2.2 To upgrade to the versions selected by go 1.16: go mod tidy -go=1.16 && go mod tidy -go=1.17 If reproducibility with go 1.16 is not needed: go mod tidy -compat=1.17 For other options, see: https://golang.org/doc/modules/pruning Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2022-03-26 13:41:29 -04:00
github.com/beorn7/perks v1.0.1 // indirect
cli: add otel sdk tracing and metric providers to the core cli This adds the code used by buildx and compose into the default CLI program to help normalize the usage of these APIs and allow code reuse between projects. It also allows these projects to benefit from improvements or changes that may be made by another team. At the moment, these APIs are a pretty thin layer on the OTEL SDK. It configures an additional exporter to a docker endpoint that's used for usage collection and is only active if the option is configured in docker desktop. This also upgrades the OTEL version to v1.19 which is the one being used by buildkit, buildx, compose, etc. Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com>
2024-02-20 10:42:33 -05:00
github.com/cenkalti/backoff/v4 v4.2.1 // indirect
vendor: github.com/cespare/xxhash/v2 v2.2.0 full diff: https://github.com/cespare/xxhash/compare/v2.1.2...v2.2.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-07-19 18:21:37 -04:00
github.com/cespare/xxhash/v2 v2.2.0 // indirect
vendor: github.com/containerd/containerd v1.7.7 full diff: https://github.com/containerd/containerd/compare/v1.6.24..v1.7.7 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-10-13 15:39:50 -04:00
github.com/containerd/log v0.1.0 // indirect
vendor dependencies with go1.17 Some warnings about go1.16 compatibility, so including them here: + go mod tidy -modfile=vendor.mod github.com/docker/cli/cli/registry/client imports github.com/docker/distribution/registry/api/v2 imports github.com/gorilla/mux loaded from github.com/gorilla/mux@v1.7.0, but go 1.16 would select v1.8.0 github.com/docker/cli/cli/compose/loader imports gopkg.in/yaml.v2 tested by gopkg.in/yaml.v2.test imports gopkg.in/check.v1 loaded from gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f, but go 1.16 would select v1.0.0-20201130134442-10cb98267c6c github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/Shopify/logrus-bugsnag loaded from github.com/Shopify/logrus-bugsnag@v0.0.0-20170309145241-6dbc35f2c30d, but go 1.16 would select v0.0.0-20171204204709-577dee27f20d github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server/storage imports gopkg.in/rethinkdb/rethinkdb-go.v6 imports github.com/opentracing/opentracing-go loaded from github.com/opentracing/opentracing-go@v1.1.0, but go 1.16 would select v1.2.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server/storage imports gopkg.in/rethinkdb/rethinkdb-go.v6 imports github.com/opentracing/opentracing-go/ext loaded from github.com/opentracing/opentracing-go@v1.1.0, but go 1.16 would select v1.2.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server/storage imports gopkg.in/rethinkdb/rethinkdb-go.v6 imports github.com/opentracing/opentracing-go/log loaded from github.com/opentracing/opentracing-go@v1.1.0, but go 1.16 would select v1.2.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/afero loaded from github.com/spf13/afero@v1.1.2, but go 1.16 would select v1.2.2 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/cast loaded from github.com/spf13/cast@v1.3.0, but go 1.16 would select v1.3.1 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/jwalterweatherman loaded from github.com/spf13/jwalterweatherman@v1.0.0, but go 1.16 would select v1.1.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports gopkg.in/ini.v1 loaded from gopkg.in/ini.v1@v1.51.0, but go 1.16 would select v1.56.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/afero imports github.com/spf13/afero/mem loaded from github.com/spf13/afero@v1.1.2, but go 1.16 would select v1.2.2 To upgrade to the versions selected by go 1.16: go mod tidy -go=1.16 && go mod tidy -go=1.17 If reproducibility with go 1.16 is not needed: go mod tidy -compat=1.17 For other options, see: https://golang.org/doc/modules/pruning Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2022-03-26 13:41:29 -04:00
github.com/docker/go v1.5.1-1.0.20160303222718-d30aec9fd63c // indirect
github.com/docker/go-events v0.0.0-20190806004212-e31b211e4f1c // indirect
github.com/docker/go-metrics v0.0.1 // indirect
vendor: github.com/felixge/httpsnoop v1.0.4 full diff: https://github.com/felixge/httpsnoop/compare/v1.0.3...v1.0.4 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-12-08 20:30:45 -05:00
github.com/felixge/httpsnoop v1.0.4 // indirect
cli: add otel sdk tracing and metric providers to the core cli This adds the code used by buildx and compose into the default CLI program to help normalize the usage of these APIs and allow code reuse between projects. It also allows these projects to benefit from improvements or changes that may be made by another team. At the moment, these APIs are a pretty thin layer on the OTEL SDK. It configures an additional exporter to a docker endpoint that's used for usage collection and is only active if the option is configured in docker desktop. This also upgrades the OTEL version to v1.19 which is the one being used by buildkit, buildx, compose, etc. Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com>
2024-02-20 10:42:33 -05:00
github.com/go-logr/logr v1.4.1 // indirect
vendor: github.com/docker/docker 06499c52e2b1 (v25.0.0-dev) full diff: https://github.com/docker/docker/compare/032797ea4bcb...06499c52e2b12b0540fed5c47a22e25c0cf6775a Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-09-07 19:55:58 -04:00
github.com/go-logr/stdr v1.2.2 // indirect
vendor: google.golang.org/protobuf v1.33.0, github.com/golang/protobuf v1.5.4 full diffs: - https://github.com/protocolbuffers/protobuf-go/compare/v1.31.0...v1.33.0 - https://github.com/golang/protobuf/compare/v1.5.3...v1.5.4 From the Go security announcement list; > Version v1.33.0 of the google.golang.org/protobuf module fixes a bug in > the google.golang.org/protobuf/encoding/protojson package which could cause > the Unmarshal function to enter an infinite loop when handling some invalid > inputs. > > This condition could only occur when unmarshaling into a message which contains > a google.protobuf.Any value, or when the UnmarshalOptions.UnmarshalUnknown > option is set. Unmarshal now correctly returns an error when handling these > inputs. > > This is CVE-2024-24786. In a follow-up post; > A small correction: This vulnerability applies when the UnmarshalOptions.DiscardUnknown > option is set (as well as when unmarshaling into any message which contains a > google.protobuf.Any). There is no UnmarshalUnknown option. > > In addition, version 1.33.0 of google.golang.org/protobuf inadvertently > introduced an incompatibility with the older github.com/golang/protobuf > module. (https://github.com/golang/protobuf/issues/1596) Users of the older > module should update to github.com/golang/protobuf@v1.5.4. govulncheck results in our code shows that this does not affect the CLI: govulncheck ./... Scanning your code and 448 packages across 72 dependent modules for known vulnerabilities... === Symbol Results === No vulnerabilities found. Your code is affected by 0 vulnerabilities. This scan also found 1 vulnerability in packages you import and 0 vulnerabilities in modules you require, but your code doesn't appear to call these vulnerabilities. Use '-show verbose' for more details. Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-03-16 11:34:55 -04:00
github.com/golang/protobuf v1.5.4 // indirect
vendor: github.com/gorilla/mux v1.8.1 full diff: https://github.com/gorilla/mux/compare/v1.8.0...v1.8.1 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-12-01 10:12:20 -05:00
github.com/gorilla/mux v1.8.1 // indirect
cli: add otel sdk tracing and metric providers to the core cli This adds the code used by buildx and compose into the default CLI program to help normalize the usage of these APIs and allow code reuse between projects. It also allows these projects to benefit from improvements or changes that may be made by another team. At the moment, these APIs are a pretty thin layer on the OTEL SDK. It configures an additional exporter to a docker endpoint that's used for usage collection and is only active if the option is configured in docker desktop. This also upgrades the OTEL version to v1.19 which is the one being used by buildkit, buildx, compose, etc. Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com>
2024-02-20 10:42:33 -05:00
github.com/grpc-ecosystem/grpc-gateway/v2 v2.16.0 // indirect
vendor: github.com/inconshreveable/mousetrap v1.1.0 removes compatibility code for go1.3 and older; https://github.com/inconshreveable/mousetrap/compare/v1.0.1...v1.1.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2022-12-27 07:43:25 -05:00
github.com/inconshreveable/mousetrap v1.1.0 // indirect
vendor: github.com/klauspost/compress v1.17.4 full diff: https://github.com/klauspost/compress/compare/v1.17.2...v1.17.4 v1.17.4: - huff0: Speed up symbol counting - huff0: Remove byteReader - gzhttp: Allow overriding decompression on transport - gzhttp: Clamp compression level - gzip: Error out if reserved bits are set v1.17.3: - fse: Fix max header size - zstd: Improve better/best compression - gzhttp: Fix missing content type on Close Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-12-27 04:34:40 -05:00
github.com/klauspost/compress v1.17.4 // indirect
vendor: golang_protobuf_extensions v1.0.4 - prevent incompatible versions This module made a whoopsie, and updated to `google.golang.org/protobuf` in a patch release, but `google.golang.org/protobuf` is not backward compatible with `github.com/golang/protobuf`. Updating the minimum version to v1.0.4 which corrects this, to prevent users of containerd as a module from accidentally pulling in the wrong version: - v1.0.3 switched to use `google.golang.org/protobuf`; https://github.com/matttproud/golang_protobuf_extensions/compare/v1.0.2..v1.0.3 - This was reverted in v1.0.4 (which is the same as v1.0.2); https://github.com/matttproud/golang_protobuf_extensions/compare/v1.0.3..v1.0.4 - And a `v2` was created instead; https://github.com/matttproud/golang_protobuf_extensions/releases/tag/v2.0.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2022-11-25 09:24:05 -05:00
github.com/matttproud/golang_protobuf_extensions v1.0.4 // indirect
vendor: github.com/miekg/pkcs11 v1.1.1 updating indirect dependency for containerd and docker/docker update full diff: https://github.com/miekg/pkcs11/compare/v1.0.3...v1.1.1 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2022-04-29 10:00:24 -04:00
github.com/miekg/pkcs11 v1.1.1 // indirect
vendor: github.com/docker/docker 86b86412a1b7 (v26.0-dev) full diff: https://github.com/moby/moby/compare/9e075f3808a5...86b86412a1b7df7dcecc81aa6ba795ff6b0c3ce3 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-02-10 06:26:39 -05:00
github.com/moby/docker-image-spec v1.3.1 // indirect
vendor dependencies with go1.17 Some warnings about go1.16 compatibility, so including them here: + go mod tidy -modfile=vendor.mod github.com/docker/cli/cli/registry/client imports github.com/docker/distribution/registry/api/v2 imports github.com/gorilla/mux loaded from github.com/gorilla/mux@v1.7.0, but go 1.16 would select v1.8.0 github.com/docker/cli/cli/compose/loader imports gopkg.in/yaml.v2 tested by gopkg.in/yaml.v2.test imports gopkg.in/check.v1 loaded from gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f, but go 1.16 would select v1.0.0-20201130134442-10cb98267c6c github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/Shopify/logrus-bugsnag loaded from github.com/Shopify/logrus-bugsnag@v0.0.0-20170309145241-6dbc35f2c30d, but go 1.16 would select v0.0.0-20171204204709-577dee27f20d github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server/storage imports gopkg.in/rethinkdb/rethinkdb-go.v6 imports github.com/opentracing/opentracing-go loaded from github.com/opentracing/opentracing-go@v1.1.0, but go 1.16 would select v1.2.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server/storage imports gopkg.in/rethinkdb/rethinkdb-go.v6 imports github.com/opentracing/opentracing-go/ext loaded from github.com/opentracing/opentracing-go@v1.1.0, but go 1.16 would select v1.2.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server/storage imports gopkg.in/rethinkdb/rethinkdb-go.v6 imports github.com/opentracing/opentracing-go/log loaded from github.com/opentracing/opentracing-go@v1.1.0, but go 1.16 would select v1.2.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/afero loaded from github.com/spf13/afero@v1.1.2, but go 1.16 would select v1.2.2 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/cast loaded from github.com/spf13/cast@v1.3.0, but go 1.16 would select v1.3.1 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/jwalterweatherman loaded from github.com/spf13/jwalterweatherman@v1.0.0, but go 1.16 would select v1.1.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports gopkg.in/ini.v1 loaded from gopkg.in/ini.v1@v1.51.0, but go 1.16 would select v1.56.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/afero imports github.com/spf13/afero/mem loaded from github.com/spf13/afero@v1.1.2, but go 1.16 would select v1.2.2 To upgrade to the versions selected by go 1.16: go mod tidy -go=1.16 && go mod tidy -go=1.17 If reproducibility with go 1.16 is not needed: go mod tidy -compat=1.17 For other options, see: https://golang.org/doc/modules/pruning Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2022-03-26 13:41:29 -04:00
github.com/moby/sys/symlink v0.2.0 // indirect
vendor: github.com/docker/docker fc4d035e7a4e (v25.0.0-dev) full diff: https://github.com/moby/moby/compare/cdb3f9fb8dca...fc4d035e7a4e Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-10-24 10:35:52 -04:00
github.com/moby/sys/user v0.1.0 // indirect
vendor: github.com/prometheus/client_golang v1.17.0 full diffs: - https://github.com/prometheus/client_golang/compare/v1.14.0...v1.17.0 - https://github.com/prometheus/client_model/compare/v0.3.0...v0.5.0 - https://github.com/prometheus/common/compare/v0.42.0...v0.44.0 - https://github.com/prometheus/procfs/compare/v0.9.0...v0.12.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-02-26 11:45:07 -05:00
github.com/prometheus/client_golang v1.17.0 // indirect
github.com/prometheus/client_model v0.5.0 // indirect
github.com/prometheus/common v0.44.0 // indirect
github.com/prometheus/procfs v0.12.0 // indirect
use our own version of text/tabwriter Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>
2022-04-25 06:00:55 -04:00
github.com/rivo/uniseg v0.2.0 // indirect
vendor dependencies with go1.17 Some warnings about go1.16 compatibility, so including them here: + go mod tidy -modfile=vendor.mod github.com/docker/cli/cli/registry/client imports github.com/docker/distribution/registry/api/v2 imports github.com/gorilla/mux loaded from github.com/gorilla/mux@v1.7.0, but go 1.16 would select v1.8.0 github.com/docker/cli/cli/compose/loader imports gopkg.in/yaml.v2 tested by gopkg.in/yaml.v2.test imports gopkg.in/check.v1 loaded from gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f, but go 1.16 would select v1.0.0-20201130134442-10cb98267c6c github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/Shopify/logrus-bugsnag loaded from github.com/Shopify/logrus-bugsnag@v0.0.0-20170309145241-6dbc35f2c30d, but go 1.16 would select v0.0.0-20171204204709-577dee27f20d github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server/storage imports gopkg.in/rethinkdb/rethinkdb-go.v6 imports github.com/opentracing/opentracing-go loaded from github.com/opentracing/opentracing-go@v1.1.0, but go 1.16 would select v1.2.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server/storage imports gopkg.in/rethinkdb/rethinkdb-go.v6 imports github.com/opentracing/opentracing-go/ext loaded from github.com/opentracing/opentracing-go@v1.1.0, but go 1.16 would select v1.2.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server/storage imports gopkg.in/rethinkdb/rethinkdb-go.v6 imports github.com/opentracing/opentracing-go/log loaded from github.com/opentracing/opentracing-go@v1.1.0, but go 1.16 would select v1.2.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/afero loaded from github.com/spf13/afero@v1.1.2, but go 1.16 would select v1.2.2 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/cast loaded from github.com/spf13/cast@v1.3.0, but go 1.16 would select v1.3.1 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/jwalterweatherman loaded from github.com/spf13/jwalterweatherman@v1.0.0, but go 1.16 would select v1.1.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports gopkg.in/ini.v1 loaded from gopkg.in/ini.v1@v1.51.0, but go 1.16 would select v1.56.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/afero imports github.com/spf13/afero/mem loaded from github.com/spf13/afero@v1.1.2, but go 1.16 would select v1.2.2 To upgrade to the versions selected by go 1.16: go mod tidy -go=1.16 && go mod tidy -go=1.17 If reproducibility with go 1.16 is not needed: go mod tidy -compat=1.17 For other options, see: https://golang.org/doc/modules/pruning Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2022-03-26 13:41:29 -04:00
github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb // indirect
github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 // indirect
vendor: github.com/moby/swarmkit/v2 v2.0.0-20221123162438-b17f02f0a054 full diff: https://github.com/moby/swarmkit/compare/6341884e5fc9...b17f02f0a0547a2416ce3bf2f59d9050288ec31b Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2022-11-24 12:05:17 -05:00
go.etcd.io/etcd/raft/v3 v3.5.6 // indirect
vendor: OTEL v0.46.1 / v1.21.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-02-26 11:50:23 -05:00
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.46.1 // indirect
cli: add otel sdk tracing and metric providers to the core cli This adds the code used by buildx and compose into the default CLI program to help normalize the usage of these APIs and allow code reuse between projects. It also allows these projects to benefit from improvements or changes that may be made by another team. At the moment, these APIs are a pretty thin layer on the OTEL SDK. It configures an additional exporter to a docker endpoint that's used for usage collection and is only active if the option is configured in docker desktop. This also upgrades the OTEL version to v1.19 which is the one being used by buildkit, buildx, compose, etc. Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com>
2024-02-20 10:42:33 -05:00
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.21.0 // indirect
go.opentelemetry.io/proto/otlp v1.0.0 // indirect
vendor: golang.org/x/net v0.22.0, golang.org/x/crypto v0.21.0 full diffs changes relevant to vendored code: - https://github.com/golang/net/compare/v0.19.0...v0.22.0 - http2: remove suspicious uint32->v conversion in frame code - http2: send an error of FLOW_CONTROL_ERROR when exceed the maximum octets - https://github.com/golang/crypto/compare/v0.17.0...v0.21.0 - (no changes in vendored code) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-04-09 08:50:53 -04:00
golang.org/x/crypto v0.21.0 // indirect
vendor: golang.org/x/tools v0.16.0, golang.org/x/mod v0.14.0 removes dependency on golang.org/x/sys/execabs full diff: - https://github.com/golang/tools/compare/v0.10.0...v0.16.0 - https://github.com/golang/mod/compare/v0.11.0...v0.14.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-01-08 05:02:26 -05:00
golang.org/x/mod v0.14.0 // indirect
vendor: golang.org/x/net v0.23.0 full diff: https://github.com/golang/net/compare/v0.22.0...v0.23.0 Includes a fix for CVE-2023-45288, which is also addressed in go1.22.2 and go1.21.9; > http2: close connections when receiving too many headers > > Maintaining HPACK state requires that we parse and process > all HEADERS and CONTINUATION frames on a connection. > When a request's headers exceed MaxHeaderBytes, we don't > allocate memory to store the excess headers but we do > parse them. This permits an attacker to cause an HTTP/2 > endpoint to read arbitrary amounts of data, all associated > with a request which is going to be rejected. > > Set a limit on the amount of excess header frames we > will process before closing a connection. > > Thanks to Bartek Nowotarski for reporting this issue. Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-04-09 08:52:51 -04:00
golang.org/x/net v0.23.0 // indirect
vendor: golang.org/x/time v0.3.0 full diff: https://github.com/golang/time/compare/v0.1.0...v0.3.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-03-14 20:35:57 -04:00
golang.org/x/time v0.3.0 // indirect
vendor: golang.org/x/tools v0.16.0, golang.org/x/mod v0.14.0 removes dependency on golang.org/x/sys/execabs full diff: - https://github.com/golang/tools/compare/v0.10.0...v0.16.0 - https://github.com/golang/mod/compare/v0.11.0...v0.14.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-01-08 05:02:26 -05:00
golang.org/x/tools v0.16.0 // indirect
cli: add otel sdk tracing and metric providers to the core cli This adds the code used by buildx and compose into the default CLI program to help normalize the usage of these APIs and allow code reuse between projects. It also allows these projects to benefit from improvements or changes that may be made by another team. At the moment, these APIs are a pretty thin layer on the OTEL SDK. It configures an additional exporter to a docker endpoint that's used for usage collection and is only active if the option is configured in docker desktop. This also upgrades the OTEL version to v1.19 which is the one being used by buildkit, buildx, compose, etc. Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com>
2024-02-20 10:42:33 -05:00
google.golang.org/genproto/googleapis/api v0.0.0-20231002182017-d307bd883b97 // indirect
vendor: google.golang.org/grpc v1.59.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-02-26 11:53:12 -05:00
google.golang.org/genproto/googleapis/rpc v0.0.0-20231016165738-49dd2c1f3d0b // indirect
cli: add otel sdk tracing and metric providers to the core cli This adds the code used by buildx and compose into the default CLI program to help normalize the usage of these APIs and allow code reuse between projects. It also allows these projects to benefit from improvements or changes that may be made by another team. At the moment, these APIs are a pretty thin layer on the OTEL SDK. It configures an additional exporter to a docker endpoint that's used for usage collection and is only active if the option is configured in docker desktop. This also upgrades the OTEL version to v1.19 which is the one being used by buildkit, buildx, compose, etc. Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com>
2024-02-20 10:42:33 -05:00
google.golang.org/grpc v1.60.1 // indirect
vendor: google.golang.org/protobuf v1.33.0, github.com/golang/protobuf v1.5.4 full diffs: - https://github.com/protocolbuffers/protobuf-go/compare/v1.31.0...v1.33.0 - https://github.com/golang/protobuf/compare/v1.5.3...v1.5.4 From the Go security announcement list; > Version v1.33.0 of the google.golang.org/protobuf module fixes a bug in > the google.golang.org/protobuf/encoding/protojson package which could cause > the Unmarshal function to enter an infinite loop when handling some invalid > inputs. > > This condition could only occur when unmarshaling into a message which contains > a google.protobuf.Any value, or when the UnmarshalOptions.UnmarshalUnknown > option is set. Unmarshal now correctly returns an error when handling these > inputs. > > This is CVE-2024-24786. In a follow-up post; > A small correction: This vulnerability applies when the UnmarshalOptions.DiscardUnknown > option is set (as well as when unmarshaling into any message which contains a > google.protobuf.Any). There is no UnmarshalUnknown option. > > In addition, version 1.33.0 of google.golang.org/protobuf inadvertently > introduced an incompatibility with the older github.com/golang/protobuf > module. (https://github.com/golang/protobuf/issues/1596) Users of the older > module should update to github.com/golang/protobuf@v1.5.4. govulncheck results in our code shows that this does not affect the CLI: govulncheck ./... Scanning your code and 448 packages across 72 dependent modules for known vulnerabilities... === Symbol Results === No vulnerabilities found. Your code is affected by 0 vulnerabilities. This scan also found 1 vulnerability in packages you import and 0 vulnerabilities in modules you require, but your code doesn't appear to call these vulnerabilities. Use '-show verbose' for more details. Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-03-16 11:34:55 -04:00
google.golang.org/protobuf v1.33.0 // indirect
vendor dependencies with go1.17 Some warnings about go1.16 compatibility, so including them here: + go mod tidy -modfile=vendor.mod github.com/docker/cli/cli/registry/client imports github.com/docker/distribution/registry/api/v2 imports github.com/gorilla/mux loaded from github.com/gorilla/mux@v1.7.0, but go 1.16 would select v1.8.0 github.com/docker/cli/cli/compose/loader imports gopkg.in/yaml.v2 tested by gopkg.in/yaml.v2.test imports gopkg.in/check.v1 loaded from gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f, but go 1.16 would select v1.0.0-20201130134442-10cb98267c6c github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/Shopify/logrus-bugsnag loaded from github.com/Shopify/logrus-bugsnag@v0.0.0-20170309145241-6dbc35f2c30d, but go 1.16 would select v0.0.0-20171204204709-577dee27f20d github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server/storage imports gopkg.in/rethinkdb/rethinkdb-go.v6 imports github.com/opentracing/opentracing-go loaded from github.com/opentracing/opentracing-go@v1.1.0, but go 1.16 would select v1.2.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server/storage imports gopkg.in/rethinkdb/rethinkdb-go.v6 imports github.com/opentracing/opentracing-go/ext loaded from github.com/opentracing/opentracing-go@v1.1.0, but go 1.16 would select v1.2.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server/storage imports gopkg.in/rethinkdb/rethinkdb-go.v6 imports github.com/opentracing/opentracing-go/log loaded from github.com/opentracing/opentracing-go@v1.1.0, but go 1.16 would select v1.2.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/afero loaded from github.com/spf13/afero@v1.1.2, but go 1.16 would select v1.2.2 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/cast loaded from github.com/spf13/cast@v1.3.0, but go 1.16 would select v1.3.1 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/jwalterweatherman loaded from github.com/spf13/jwalterweatherman@v1.0.0, but go 1.16 would select v1.1.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports gopkg.in/ini.v1 loaded from gopkg.in/ini.v1@v1.51.0, but go 1.16 would select v1.56.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/afero imports github.com/spf13/afero/mem loaded from github.com/spf13/afero@v1.1.2, but go 1.16 would select v1.2.2 To upgrade to the versions selected by go 1.16: go mod tidy -go=1.16 && go mod tidy -go=1.17 If reproducibility with go 1.16 is not needed: go mod tidy -compat=1.17 For other options, see: https://golang.org/doc/modules/pruning Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2022-03-26 13:41:29 -04:00
)