Guest24897
/
DockerCLI
mirror of https://github.com/docker/cli.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
DockerCLI/vendor.mod

92 lines
3.8 KiB
Modula-2
Raw Normal View History

vendor with go mod Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2021-12-16 15:15:53 -05:00
module github.com/docker/cli
// 'vendor.mod' enables use of 'go mod vendor' to managed 'vendor/' directory.
// There is no 'go.mod' file, as that would imply opting in for all the rules
// around SemVer, which this repo cannot abide by as it uses CalVer.
vendor: github.com/containerd/containerd v1.7.14 no changes in vendored files, but now requires go1.21 full diff: https://github.com/containerd/containerd/compare/v1.7.13...v1.7.14 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-03-16 11:30:13 -04:00
go 1.21
vendor with go mod Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2021-12-16 15:15:53 -05:00
require (
rename and update mergo module Signed-off-by: Boban Acimovic <boban.acimovic@gmail.com>
2023-06-26 16:19:11 -04:00
dario.cat/mergo v1.0.0
vendor: github.com/containerd/containerd v1.7.14 no changes in vendored files, but now requires go1.21 full diff: https://github.com/containerd/containerd/compare/v1.7.13...v1.7.14 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-03-16 11:30:13 -04:00
github.com/containerd/containerd v1.7.14
vendor: github.com/creack/pty v1.1.21 full diff: https://github.com/creack/pty/compare/v1.18.0...v1.21.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-01-08 04:22:09 -05:00
github.com/creack/pty v1.1.21
vendor: github.com/distribution/reference v0.5.0 full diff: https://github.com/distribution/reference/compare/e42074f83a9c...v0.5.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-09-27 18:13:58 -04:00
github.com/distribution/reference v0.5.0
vendor: github.com/docker/distribution v2.8.3 - Fix storageDriver gcs not registered in binaries - reference: replace uses of deprecated function SplitHostname - Dont parse errors as JSON unless Content-Type is set to JSON - update to go1.20.8 - Set Content-Type header in registry client ReadFrom - deprecate reference package, migrate to github.com/distribution/reference - digestset: deprecate package in favor of go-digest/digestset - Do not close HTTP request body in HTTP handler full diff: https://github.com/distribution/distribution/compare/v2.8.2...v2.8.3 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-10-13 11:54:59 -04:00
github.com/docker/distribution v2.8.3+incompatible
vendor: github.com/docker/docker v26.0.0-rc2 full diff: https://github.com/docker/docker/compare/f4c696eef17d...v26.0.0-rc2 Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
2024-03-08 11:10:05 -05:00
github.com/docker/docker v26.0.0-rc2+incompatible // 26.0.0-rc2
vendor: github.com/docker/docker-credential-helpers v0.8.1 full diff: https://github.com/docker/docker-credential-helpers/compare/v0.8.0...v0.8.1 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-01-10 16:35:03 -05:00
github.com/docker/docker-credential-helpers v0.8.1
vendor: github.com/docker/go-connections v0.5.0 no diff, as the tag is the same commit as we used already; https://github.com/docker/go-connections/compare/fa09c952e3ea...v0.5.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-01-05 12:25:04 -05:00
github.com/docker/go-connections v0.5.0
vendor: github.com/docker/go-units v0.5.0 full diff: https://github.com/docker/go-units/compare/v0.4.0...v0.5.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2022-08-31 13:10:26 -04:00
github.com/docker/go-units v0.5.0
vendor with go mod Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2021-12-16 15:15:53 -05:00
github.com/fvbommel/sortorder v1.0.2
github.com/gogo/protobuf v1.3.2
vendor: github.com/google/go-cmp v0.6.0 - removes purego fallbacks full diff: https://github.com/google/go-cmp/compare/v0.5.9...v0.6.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-01-08 04:25:45 -05:00
github.com/google/go-cmp v0.6.0
vendor with go mod Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2021-12-16 15:15:53 -05:00
github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510
vendor: github.com/mattn/go-runewidth v0.0.15 no code-changes, but project updated CI to test against current Go versions; https://github.com/mattn/go-runewidth/compare/v0.0.14...v0.0.15 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-12-27 04:40:19 -05:00
github.com/mattn/go-runewidth v0.0.15
vendor: github.com/mitchellh/mapstructure v1.5.0 note that this repository will be sunset, and the "endorsed" fork will be maintened by "go-viper"; see [mapstructure#349][1] [1]: https://github.com/mitchellh/mapstructure/issues/349 full diff: https://github.com/mitchellh/mapstructure/compare/v1.3.2...v1.5.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-12-27 05:22:24 -05:00
github.com/mitchellh/mapstructure v1.5.0
vendor: github.com/moby/patternmatcher v0.6.0 - integrate frontend/dockerfile/dockerignore from buildkit full diff: https://github.com/moby/patternmatcher/compare/v0.5.0...v0.6.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-08-22 17:52:14 -04:00
github.com/moby/patternmatcher v0.6.0
vendor: github.com/moby/swarmkit/v2 v2.0.0-20240125134710-dcda100a8261 full diff: https://github.com/moby/swarmkit/compare/f082dd7a0cee...dcda100a8261 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-01-30 09:44:28 -05:00
github.com/moby/swarmkit/v2 v2.0.0-20240125134710-dcda100a8261
vendor: docker v20.10.3-0.20221006185438-87d9d96ab0b6 (v22.06-dev) full diff: https://github.com/docker/docker/compare/e143eed8bc4fcdd5eff73d649130f0d97c2e7723...87d9d96ab0b693c2c83f7d1fd0f4037a9d1aa217 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2022-10-13 09:49:35 -04:00
github.com/moby/sys/sequential v0.5.0
vendor: github.com/moby/sys/signal v0.7.0 full diff: https://github.com/moby/sys/signal/compare/v0.6.0...v0.7.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2022-03-03 07:34:59 -05:00
github.com/moby/sys/signal v0.7.0
vendor: github.com/moby/term v0.5.0 - split exported functions from implementation - windows: IsConsole(): fix deprecation comment - deprecate Termios in favor of unix.Termios - windows: keyToString(): fix string conversion - gha: update actions, add macOS, and add Go1.20 - gha: add windows full diff: https://github.com/moby/term/compare/c43b287e0e0f...v0.5.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-05-02 08:22:36 -04:00
github.com/moby/term v0.5.0
vendor with go mod Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2021-12-16 15:15:53 -05:00
github.com/morikuni/aec v1.0.0
github.com/opencontainers/go-digest v1.0.0
vendor: github.com/opencontainers/image-spec v1.1.0-rc5 full diff: https://github.com/opencontainers/image-spec/compare/v1.1.0-rc4...v1.1.0-rc5 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-10-24 08:36:40 -04:00
github.com/opencontainers/image-spec v1.1.0-rc5
vendor with go mod Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2021-12-16 15:15:53 -05:00
github.com/pkg/errors v0.9.1
vendor: github.com/sirupsen/logrus v1.9.3 full diff: https://github.com/sirupsen/logrus/compare/v1.9.0...v1.9.3 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-06-12 05:21:25 -04:00
github.com/sirupsen/logrus v1.9.3
vendor: github.com/spf13/cobra v1.8.0 release notes: https://github.com/spf13/cobra/releases/tag/v1.8.0 full diff: https://github.com/spf13/cobra/compare/v1.7.0...v1.8.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-11-06 10:54:43 -05:00
github.com/spf13/cobra v1.8.0
vendor with go mod Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2021-12-16 15:15:53 -05:00
github.com/spf13/pflag v1.0.5
github.com/theupdateframework/notary v0.7.1-0.20210315103452-bf96a202a09a
github.com/tonistiigi/go-rosetta v0.0.0-20200727161949-f79598599c5d
github.com/xeipuuv/gojsonschema v1.2.0
plugins: set OTEL_RESOURCE_ATTRIBUTES when invoking a plugin When a plugin is invoked, the docker cli will now set `OTEL_RESOURCE_ATTRIBUTES` to pass OTEL resource attribute names to the plugin as additional resource attributes. At the moment, the only resource attribute passed is `cobra.command_path`. All resource attributes passed by the CLI are prepended with the namespace `docker.cli` to avoid clashing with existing ones the plugin uses or ones defined by the user. For aliased commands like the various builder commands, the command path is overwritten to match with the original name (such as `docker builder`) instead of the forwarded name (such as `docker buildx build`). Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com>
2024-02-13 16:40:55 -05:00
go.opentelemetry.io/otel v1.21.0
vendor: golang.org/x/sync v0.6.0 full diff: https://github.com/golang/sync/compare/v0.3.0...v0.6.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-01-08 04:52:47 -05:00
golang.org/x/sync v0.6.0
vendor: golang.org/x/sys v0.16.0 full diff: https://github.com/golang/sys/compare/v0.15.0...v0.16.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-01-15 06:01:27 -05:00
golang.org/x/sys v0.16.0
vendor: golang.org/x/crypto v0.16.0 full diff: https://github.com/golang/crypto/compare/v0.14.0...v0.16.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-12-18 07:47:30 -05:00
golang.org/x/term v0.15.0
vendor: golang.org/x/text v0.14.0 full diff: https://github.com/golang/text/compare/v0.13.0...v0.14.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-12-18 07:46:41 -05:00
golang.org/x/text v0.14.0
vendor with go mod Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2021-12-16 15:15:53 -05:00
gopkg.in/yaml.v2 v2.4.0
vendor: gotest.tools/v3 v3.5.1 full diff: https://github.com/gotestyourself/gotest.tools/compare/v3.5.0..v3.5.1 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-10-20 11:39:10 -04:00
gotest.tools/v3 v3.5.1
Update container-device-interface to v0.6.2 This includes migrating from the github.com/container-orchestrated-devices repo to tags.cncf.io. Signed-off-by: Evan Lezar <elezar@nvidia.com>
2023-11-03 20:18:37 -04:00
tags.cncf.io/container-device-interface v0.6.2
vendor with go mod Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2021-12-16 15:15:53 -05:00
)
vendor dependencies with go1.17 Some warnings about go1.16 compatibility, so including them here: + go mod tidy -modfile=vendor.mod github.com/docker/cli/cli/registry/client imports github.com/docker/distribution/registry/api/v2 imports github.com/gorilla/mux loaded from github.com/gorilla/mux@v1.7.0, but go 1.16 would select v1.8.0 github.com/docker/cli/cli/compose/loader imports gopkg.in/yaml.v2 tested by gopkg.in/yaml.v2.test imports gopkg.in/check.v1 loaded from gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f, but go 1.16 would select v1.0.0-20201130134442-10cb98267c6c github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/Shopify/logrus-bugsnag loaded from github.com/Shopify/logrus-bugsnag@v0.0.0-20170309145241-6dbc35f2c30d, but go 1.16 would select v0.0.0-20171204204709-577dee27f20d github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server/storage imports gopkg.in/rethinkdb/rethinkdb-go.v6 imports github.com/opentracing/opentracing-go loaded from github.com/opentracing/opentracing-go@v1.1.0, but go 1.16 would select v1.2.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server/storage imports gopkg.in/rethinkdb/rethinkdb-go.v6 imports github.com/opentracing/opentracing-go/ext loaded from github.com/opentracing/opentracing-go@v1.1.0, but go 1.16 would select v1.2.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server/storage imports gopkg.in/rethinkdb/rethinkdb-go.v6 imports github.com/opentracing/opentracing-go/log loaded from github.com/opentracing/opentracing-go@v1.1.0, but go 1.16 would select v1.2.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/afero loaded from github.com/spf13/afero@v1.1.2, but go 1.16 would select v1.2.2 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/cast loaded from github.com/spf13/cast@v1.3.0, but go 1.16 would select v1.3.1 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/jwalterweatherman loaded from github.com/spf13/jwalterweatherman@v1.0.0, but go 1.16 would select v1.1.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports gopkg.in/ini.v1 loaded from gopkg.in/ini.v1@v1.51.0, but go 1.16 would select v1.56.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/afero imports github.com/spf13/afero/mem loaded from github.com/spf13/afero@v1.1.2, but go 1.16 would select v1.2.2 To upgrade to the versions selected by go 1.16: go mod tidy -go=1.16 && go mod tidy -go=1.17 If reproducibility with go 1.16 is not needed: go mod tidy -compat=1.17 For other options, see: https://golang.org/doc/modules/pruning Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2022-03-26 13:41:29 -04:00
require (
github.com/Azure/go-ansiterm v0.0.0-20210617225240-d185dfc1b5a1 // indirect
vendor: github.com/Microsoft/go-winio v0.6.1 Unfortunately also brings in golang.org/x/tools and golang.org/x/mod as a dependency, due to go-winio using a "tools.go" file. full diff: https://github.com/Microsoft/go-winio/compare/v0.5.2...v0.6.1 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-07-19 18:33:50 -04:00
github.com/Microsoft/go-winio v0.6.1 // indirect
vendor: github.com/Microsoft/hcsshim v0.11.4 no changes in vendored files full diff: https://github.com/microsoft/hcsshim/compare/v0.11.1...v0.11.4 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-11-20 12:15:18 -05:00
github.com/Microsoft/hcsshim v0.11.4 // indirect
vendor dependencies with go1.17 Some warnings about go1.16 compatibility, so including them here: + go mod tidy -modfile=vendor.mod github.com/docker/cli/cli/registry/client imports github.com/docker/distribution/registry/api/v2 imports github.com/gorilla/mux loaded from github.com/gorilla/mux@v1.7.0, but go 1.16 would select v1.8.0 github.com/docker/cli/cli/compose/loader imports gopkg.in/yaml.v2 tested by gopkg.in/yaml.v2.test imports gopkg.in/check.v1 loaded from gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f, but go 1.16 would select v1.0.0-20201130134442-10cb98267c6c github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/Shopify/logrus-bugsnag loaded from github.com/Shopify/logrus-bugsnag@v0.0.0-20170309145241-6dbc35f2c30d, but go 1.16 would select v0.0.0-20171204204709-577dee27f20d github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server/storage imports gopkg.in/rethinkdb/rethinkdb-go.v6 imports github.com/opentracing/opentracing-go loaded from github.com/opentracing/opentracing-go@v1.1.0, but go 1.16 would select v1.2.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server/storage imports gopkg.in/rethinkdb/rethinkdb-go.v6 imports github.com/opentracing/opentracing-go/ext loaded from github.com/opentracing/opentracing-go@v1.1.0, but go 1.16 would select v1.2.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server/storage imports gopkg.in/rethinkdb/rethinkdb-go.v6 imports github.com/opentracing/opentracing-go/log loaded from github.com/opentracing/opentracing-go@v1.1.0, but go 1.16 would select v1.2.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/afero loaded from github.com/spf13/afero@v1.1.2, but go 1.16 would select v1.2.2 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/cast loaded from github.com/spf13/cast@v1.3.0, but go 1.16 would select v1.3.1 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/jwalterweatherman loaded from github.com/spf13/jwalterweatherman@v1.0.0, but go 1.16 would select v1.1.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports gopkg.in/ini.v1 loaded from gopkg.in/ini.v1@v1.51.0, but go 1.16 would select v1.56.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/afero imports github.com/spf13/afero/mem loaded from github.com/spf13/afero@v1.1.2, but go 1.16 would select v1.2.2 To upgrade to the versions selected by go 1.16: go mod tidy -go=1.16 && go mod tidy -go=1.17 If reproducibility with go 1.16 is not needed: go mod tidy -compat=1.17 For other options, see: https://golang.org/doc/modules/pruning Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2022-03-26 13:41:29 -04:00
github.com/beorn7/perks v1.0.1 // indirect
vendor: github.com/cespare/xxhash/v2 v2.2.0 full diff: https://github.com/cespare/xxhash/compare/v2.1.2...v2.2.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-07-19 18:21:37 -04:00
github.com/cespare/xxhash/v2 v2.2.0 // indirect
vendor: github.com/containerd/containerd v1.7.7 full diff: https://github.com/containerd/containerd/compare/v1.6.24..v1.7.7 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-10-13 15:39:50 -04:00
github.com/containerd/log v0.1.0 // indirect
vendor dependencies with go1.17 Some warnings about go1.16 compatibility, so including them here: + go mod tidy -modfile=vendor.mod github.com/docker/cli/cli/registry/client imports github.com/docker/distribution/registry/api/v2 imports github.com/gorilla/mux loaded from github.com/gorilla/mux@v1.7.0, but go 1.16 would select v1.8.0 github.com/docker/cli/cli/compose/loader imports gopkg.in/yaml.v2 tested by gopkg.in/yaml.v2.test imports gopkg.in/check.v1 loaded from gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f, but go 1.16 would select v1.0.0-20201130134442-10cb98267c6c github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/Shopify/logrus-bugsnag loaded from github.com/Shopify/logrus-bugsnag@v0.0.0-20170309145241-6dbc35f2c30d, but go 1.16 would select v0.0.0-20171204204709-577dee27f20d github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server/storage imports gopkg.in/rethinkdb/rethinkdb-go.v6 imports github.com/opentracing/opentracing-go loaded from github.com/opentracing/opentracing-go@v1.1.0, but go 1.16 would select v1.2.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server/storage imports gopkg.in/rethinkdb/rethinkdb-go.v6 imports github.com/opentracing/opentracing-go/ext loaded from github.com/opentracing/opentracing-go@v1.1.0, but go 1.16 would select v1.2.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server/storage imports gopkg.in/rethinkdb/rethinkdb-go.v6 imports github.com/opentracing/opentracing-go/log loaded from github.com/opentracing/opentracing-go@v1.1.0, but go 1.16 would select v1.2.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/afero loaded from github.com/spf13/afero@v1.1.2, but go 1.16 would select v1.2.2 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/cast loaded from github.com/spf13/cast@v1.3.0, but go 1.16 would select v1.3.1 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/jwalterweatherman loaded from github.com/spf13/jwalterweatherman@v1.0.0, but go 1.16 would select v1.1.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports gopkg.in/ini.v1 loaded from gopkg.in/ini.v1@v1.51.0, but go 1.16 would select v1.56.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/afero imports github.com/spf13/afero/mem loaded from github.com/spf13/afero@v1.1.2, but go 1.16 would select v1.2.2 To upgrade to the versions selected by go 1.16: go mod tidy -go=1.16 && go mod tidy -go=1.17 If reproducibility with go 1.16 is not needed: go mod tidy -compat=1.17 For other options, see: https://golang.org/doc/modules/pruning Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2022-03-26 13:41:29 -04:00
github.com/docker/go v1.5.1-1.0.20160303222718-d30aec9fd63c // indirect
github.com/docker/go-events v0.0.0-20190806004212-e31b211e4f1c // indirect
github.com/docker/go-metrics v0.0.1 // indirect
vendor: github.com/felixge/httpsnoop v1.0.4 full diff: https://github.com/felixge/httpsnoop/compare/v1.0.3...v1.0.4 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-12-08 20:30:45 -05:00
github.com/felixge/httpsnoop v1.0.4 // indirect
vendor: github.com/go-logr/logr v1.3.0 full diff: https://github.com/go-logr/logr/compare/v1.2.4...v1.3.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-02-26 11:39:47 -05:00
github.com/go-logr/logr v1.3.0 // indirect
vendor: github.com/docker/docker 06499c52e2b1 (v25.0.0-dev) full diff: https://github.com/docker/docker/compare/032797ea4bcb...06499c52e2b12b0540fed5c47a22e25c0cf6775a Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-09-07 19:55:58 -04:00
github.com/go-logr/stdr v1.2.2 // indirect
vendor: google.golang.org/protobuf v1.33.0, github.com/golang/protobuf v1.5.4 full diffs: - https://github.com/protocolbuffers/protobuf-go/compare/v1.31.0...v1.33.0 - https://github.com/golang/protobuf/compare/v1.5.3...v1.5.4 From the Go security announcement list; > Version v1.33.0 of the google.golang.org/protobuf module fixes a bug in > the google.golang.org/protobuf/encoding/protojson package which could cause > the Unmarshal function to enter an infinite loop when handling some invalid > inputs. > > This condition could only occur when unmarshaling into a message which contains > a google.protobuf.Any value, or when the UnmarshalOptions.UnmarshalUnknown > option is set. Unmarshal now correctly returns an error when handling these > inputs. > > This is CVE-2024-24786. In a follow-up post; > A small correction: This vulnerability applies when the UnmarshalOptions.DiscardUnknown > option is set (as well as when unmarshaling into any message which contains a > google.protobuf.Any). There is no UnmarshalUnknown option. > > In addition, version 1.33.0 of google.golang.org/protobuf inadvertently > introduced an incompatibility with the older github.com/golang/protobuf > module. (https://github.com/golang/protobuf/issues/1596) Users of the older > module should update to github.com/golang/protobuf@v1.5.4. govulncheck results in our code shows that this does not affect the CLI: govulncheck ./... Scanning your code and 448 packages across 72 dependent modules for known vulnerabilities... === Symbol Results === No vulnerabilities found. Your code is affected by 0 vulnerabilities. This scan also found 1 vulnerability in packages you import and 0 vulnerabilities in modules you require, but your code doesn't appear to call these vulnerabilities. Use '-show verbose' for more details. Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-03-16 11:34:55 -04:00
github.com/golang/protobuf v1.5.4 // indirect
vendor: github.com/gorilla/mux v1.8.1 full diff: https://github.com/gorilla/mux/compare/v1.8.0...v1.8.1 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-12-01 10:12:20 -05:00
github.com/gorilla/mux v1.8.1 // indirect
vendor: github.com/inconshreveable/mousetrap v1.1.0 removes compatibility code for go1.3 and older; https://github.com/inconshreveable/mousetrap/compare/v1.0.1...v1.1.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2022-12-27 07:43:25 -05:00
github.com/inconshreveable/mousetrap v1.1.0 // indirect
vendor: github.com/klauspost/compress v1.17.4 full diff: https://github.com/klauspost/compress/compare/v1.17.2...v1.17.4 v1.17.4: - huff0: Speed up symbol counting - huff0: Remove byteReader - gzhttp: Allow overriding decompression on transport - gzhttp: Clamp compression level - gzip: Error out if reserved bits are set v1.17.3: - fse: Fix max header size - zstd: Improve better/best compression - gzhttp: Fix missing content type on Close Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-12-27 04:34:40 -05:00
github.com/klauspost/compress v1.17.4 // indirect
vendor: golang_protobuf_extensions v1.0.4 - prevent incompatible versions This module made a whoopsie, and updated to `google.golang.org/protobuf` in a patch release, but `google.golang.org/protobuf` is not backward compatible with `github.com/golang/protobuf`. Updating the minimum version to v1.0.4 which corrects this, to prevent users of containerd as a module from accidentally pulling in the wrong version: - v1.0.3 switched to use `google.golang.org/protobuf`; https://github.com/matttproud/golang_protobuf_extensions/compare/v1.0.2..v1.0.3 - This was reverted in v1.0.4 (which is the same as v1.0.2); https://github.com/matttproud/golang_protobuf_extensions/compare/v1.0.3..v1.0.4 - And a `v2` was created instead; https://github.com/matttproud/golang_protobuf_extensions/releases/tag/v2.0.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2022-11-25 09:24:05 -05:00
github.com/matttproud/golang_protobuf_extensions v1.0.4 // indirect
vendor: github.com/miekg/pkcs11 v1.1.1 updating indirect dependency for containerd and docker/docker update full diff: https://github.com/miekg/pkcs11/compare/v1.0.3...v1.1.1 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2022-04-29 10:00:24 -04:00
github.com/miekg/pkcs11 v1.1.1 // indirect
vendor: github.com/docker/docker 86b86412a1b7 (v26.0-dev) full diff: https://github.com/moby/moby/compare/9e075f3808a5...86b86412a1b7df7dcecc81aa6ba795ff6b0c3ce3 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-02-10 06:26:39 -05:00
github.com/moby/docker-image-spec v1.3.1 // indirect
vendor dependencies with go1.17 Some warnings about go1.16 compatibility, so including them here: + go mod tidy -modfile=vendor.mod github.com/docker/cli/cli/registry/client imports github.com/docker/distribution/registry/api/v2 imports github.com/gorilla/mux loaded from github.com/gorilla/mux@v1.7.0, but go 1.16 would select v1.8.0 github.com/docker/cli/cli/compose/loader imports gopkg.in/yaml.v2 tested by gopkg.in/yaml.v2.test imports gopkg.in/check.v1 loaded from gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f, but go 1.16 would select v1.0.0-20201130134442-10cb98267c6c github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/Shopify/logrus-bugsnag loaded from github.com/Shopify/logrus-bugsnag@v0.0.0-20170309145241-6dbc35f2c30d, but go 1.16 would select v0.0.0-20171204204709-577dee27f20d github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server/storage imports gopkg.in/rethinkdb/rethinkdb-go.v6 imports github.com/opentracing/opentracing-go loaded from github.com/opentracing/opentracing-go@v1.1.0, but go 1.16 would select v1.2.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server/storage imports gopkg.in/rethinkdb/rethinkdb-go.v6 imports github.com/opentracing/opentracing-go/ext loaded from github.com/opentracing/opentracing-go@v1.1.0, but go 1.16 would select v1.2.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server/storage imports gopkg.in/rethinkdb/rethinkdb-go.v6 imports github.com/opentracing/opentracing-go/log loaded from github.com/opentracing/opentracing-go@v1.1.0, but go 1.16 would select v1.2.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/afero loaded from github.com/spf13/afero@v1.1.2, but go 1.16 would select v1.2.2 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/cast loaded from github.com/spf13/cast@v1.3.0, but go 1.16 would select v1.3.1 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/jwalterweatherman loaded from github.com/spf13/jwalterweatherman@v1.0.0, but go 1.16 would select v1.1.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports gopkg.in/ini.v1 loaded from gopkg.in/ini.v1@v1.51.0, but go 1.16 would select v1.56.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/afero imports github.com/spf13/afero/mem loaded from github.com/spf13/afero@v1.1.2, but go 1.16 would select v1.2.2 To upgrade to the versions selected by go 1.16: go mod tidy -go=1.16 && go mod tidy -go=1.17 If reproducibility with go 1.16 is not needed: go mod tidy -compat=1.17 For other options, see: https://golang.org/doc/modules/pruning Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2022-03-26 13:41:29 -04:00
github.com/moby/sys/symlink v0.2.0 // indirect
vendor: github.com/docker/docker fc4d035e7a4e (v25.0.0-dev) full diff: https://github.com/moby/moby/compare/cdb3f9fb8dca...fc4d035e7a4e Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-10-24 10:35:52 -04:00
github.com/moby/sys/user v0.1.0 // indirect
vendor: github.com/prometheus/client_golang v1.17.0 full diffs: - https://github.com/prometheus/client_golang/compare/v1.14.0...v1.17.0 - https://github.com/prometheus/client_model/compare/v0.3.0...v0.5.0 - https://github.com/prometheus/common/compare/v0.42.0...v0.44.0 - https://github.com/prometheus/procfs/compare/v0.9.0...v0.12.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-02-26 11:45:07 -05:00
github.com/prometheus/client_golang v1.17.0 // indirect
github.com/prometheus/client_model v0.5.0 // indirect
github.com/prometheus/common v0.44.0 // indirect
github.com/prometheus/procfs v0.12.0 // indirect
use our own version of text/tabwriter Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>
2022-04-25 06:00:55 -04:00
github.com/rivo/uniseg v0.2.0 // indirect
vendor dependencies with go1.17 Some warnings about go1.16 compatibility, so including them here: + go mod tidy -modfile=vendor.mod github.com/docker/cli/cli/registry/client imports github.com/docker/distribution/registry/api/v2 imports github.com/gorilla/mux loaded from github.com/gorilla/mux@v1.7.0, but go 1.16 would select v1.8.0 github.com/docker/cli/cli/compose/loader imports gopkg.in/yaml.v2 tested by gopkg.in/yaml.v2.test imports gopkg.in/check.v1 loaded from gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f, but go 1.16 would select v1.0.0-20201130134442-10cb98267c6c github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/Shopify/logrus-bugsnag loaded from github.com/Shopify/logrus-bugsnag@v0.0.0-20170309145241-6dbc35f2c30d, but go 1.16 would select v0.0.0-20171204204709-577dee27f20d github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server/storage imports gopkg.in/rethinkdb/rethinkdb-go.v6 imports github.com/opentracing/opentracing-go loaded from github.com/opentracing/opentracing-go@v1.1.0, but go 1.16 would select v1.2.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server/storage imports gopkg.in/rethinkdb/rethinkdb-go.v6 imports github.com/opentracing/opentracing-go/ext loaded from github.com/opentracing/opentracing-go@v1.1.0, but go 1.16 would select v1.2.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server/storage imports gopkg.in/rethinkdb/rethinkdb-go.v6 imports github.com/opentracing/opentracing-go/log loaded from github.com/opentracing/opentracing-go@v1.1.0, but go 1.16 would select v1.2.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/afero loaded from github.com/spf13/afero@v1.1.2, but go 1.16 would select v1.2.2 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/cast loaded from github.com/spf13/cast@v1.3.0, but go 1.16 would select v1.3.1 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/jwalterweatherman loaded from github.com/spf13/jwalterweatherman@v1.0.0, but go 1.16 would select v1.1.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports gopkg.in/ini.v1 loaded from gopkg.in/ini.v1@v1.51.0, but go 1.16 would select v1.56.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/afero imports github.com/spf13/afero/mem loaded from github.com/spf13/afero@v1.1.2, but go 1.16 would select v1.2.2 To upgrade to the versions selected by go 1.16: go mod tidy -go=1.16 && go mod tidy -go=1.17 If reproducibility with go 1.16 is not needed: go mod tidy -compat=1.17 For other options, see: https://golang.org/doc/modules/pruning Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2022-03-26 13:41:29 -04:00
github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb // indirect
github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 // indirect
vendor: github.com/moby/swarmkit/v2 v2.0.0-20221123162438-b17f02f0a054 full diff: https://github.com/moby/swarmkit/compare/6341884e5fc9...b17f02f0a0547a2416ce3bf2f59d9050288ec31b Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2022-11-24 12:05:17 -05:00
go.etcd.io/etcd/raft/v3 v3.5.6 // indirect
vendor: OTEL v0.46.1 / v1.21.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-02-26 11:50:23 -05:00
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.46.1 // indirect
go.opentelemetry.io/otel/metric v1.21.0 // indirect
go.opentelemetry.io/otel/trace v1.21.0 // indirect
vendor: golang.org/x/crypto v0.17.0 no changes in vendored files full diff: https://github.com/golang/crypto/compare/v0.16.0...v0.17.0 from the security mailing: > Hello gophers, > > Version v0.17.0 of golang.org/x/crypto fixes a protocol weakness in the > golang.org/x/crypto/ssh package that allowed a MITM attacker to compromise > the integrity of the secure channel before it was established, allowing > them to prevent transmission of a number of messages immediately after > the secure channel was established without either side being aware. > > The impact of this attack is relatively limited, as it does not compromise > confidentiality of the channel. Notably this attack would allow an attacker > to prevent the transmission of the SSH2_MSG_EXT_INFO message, disabling a > handful of newer security features. > > This protocol weakness was also fixed in OpenSSH 9.6. > > Thanks to Fabian Bäumer, Marcus Brinkmann, and Jörg Schwenk from Ruhr > University Bochum for reporting this issue. > > This is CVE-2023-48795 and Go issue https://go.dev/issue/64784. > > Cheers, > Roland on behalf of the Go team Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-12-18 18:35:09 -05:00
golang.org/x/crypto v0.17.0 // indirect
vendor: golang.org/x/tools v0.16.0, golang.org/x/mod v0.14.0 removes dependency on golang.org/x/sys/execabs full diff: - https://github.com/golang/tools/compare/v0.10.0...v0.16.0 - https://github.com/golang/mod/compare/v0.11.0...v0.14.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-01-08 05:02:26 -05:00
golang.org/x/mod v0.14.0 // indirect
vendor: golang.org/x/net v0.19.0 drops various code to support go1.17 and older full diff: https://golang.org/x/net/compare/v0.17.0...v0.19.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-01-08 04:55:39 -05:00
golang.org/x/net v0.19.0 // indirect
vendor: golang.org/x/time v0.3.0 full diff: https://github.com/golang/time/compare/v0.1.0...v0.3.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-03-14 20:35:57 -04:00
golang.org/x/time v0.3.0 // indirect
vendor: golang.org/x/tools v0.16.0, golang.org/x/mod v0.14.0 removes dependency on golang.org/x/sys/execabs full diff: - https://github.com/golang/tools/compare/v0.10.0...v0.16.0 - https://github.com/golang/mod/compare/v0.11.0...v0.14.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-01-08 05:02:26 -05:00
golang.org/x/tools v0.16.0 // indirect
vendor: google.golang.org/grpc v1.59.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-02-26 11:53:12 -05:00
google.golang.org/genproto/googleapis/rpc v0.0.0-20231016165738-49dd2c1f3d0b // indirect
google.golang.org/grpc v1.59.0 // indirect
vendor: google.golang.org/protobuf v1.33.0, github.com/golang/protobuf v1.5.4 full diffs: - https://github.com/protocolbuffers/protobuf-go/compare/v1.31.0...v1.33.0 - https://github.com/golang/protobuf/compare/v1.5.3...v1.5.4 From the Go security announcement list; > Version v1.33.0 of the google.golang.org/protobuf module fixes a bug in > the google.golang.org/protobuf/encoding/protojson package which could cause > the Unmarshal function to enter an infinite loop when handling some invalid > inputs. > > This condition could only occur when unmarshaling into a message which contains > a google.protobuf.Any value, or when the UnmarshalOptions.UnmarshalUnknown > option is set. Unmarshal now correctly returns an error when handling these > inputs. > > This is CVE-2024-24786. In a follow-up post; > A small correction: This vulnerability applies when the UnmarshalOptions.DiscardUnknown > option is set (as well as when unmarshaling into any message which contains a > google.protobuf.Any). There is no UnmarshalUnknown option. > > In addition, version 1.33.0 of google.golang.org/protobuf inadvertently > introduced an incompatibility with the older github.com/golang/protobuf > module. (https://github.com/golang/protobuf/issues/1596) Users of the older > module should update to github.com/golang/protobuf@v1.5.4. govulncheck results in our code shows that this does not affect the CLI: govulncheck ./... Scanning your code and 448 packages across 72 dependent modules for known vulnerabilities... === Symbol Results === No vulnerabilities found. Your code is affected by 0 vulnerabilities. This scan also found 1 vulnerability in packages you import and 0 vulnerabilities in modules you require, but your code doesn't appear to call these vulnerabilities. Use '-show verbose' for more details. Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-03-16 11:34:55 -04:00
google.golang.org/protobuf v1.33.0 // indirect
vendor dependencies with go1.17 Some warnings about go1.16 compatibility, so including them here: + go mod tidy -modfile=vendor.mod github.com/docker/cli/cli/registry/client imports github.com/docker/distribution/registry/api/v2 imports github.com/gorilla/mux loaded from github.com/gorilla/mux@v1.7.0, but go 1.16 would select v1.8.0 github.com/docker/cli/cli/compose/loader imports gopkg.in/yaml.v2 tested by gopkg.in/yaml.v2.test imports gopkg.in/check.v1 loaded from gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f, but go 1.16 would select v1.0.0-20201130134442-10cb98267c6c github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/Shopify/logrus-bugsnag loaded from github.com/Shopify/logrus-bugsnag@v0.0.0-20170309145241-6dbc35f2c30d, but go 1.16 would select v0.0.0-20171204204709-577dee27f20d github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server/storage imports gopkg.in/rethinkdb/rethinkdb-go.v6 imports github.com/opentracing/opentracing-go loaded from github.com/opentracing/opentracing-go@v1.1.0, but go 1.16 would select v1.2.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server/storage imports gopkg.in/rethinkdb/rethinkdb-go.v6 imports github.com/opentracing/opentracing-go/ext loaded from github.com/opentracing/opentracing-go@v1.1.0, but go 1.16 would select v1.2.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server/storage imports gopkg.in/rethinkdb/rethinkdb-go.v6 imports github.com/opentracing/opentracing-go/log loaded from github.com/opentracing/opentracing-go@v1.1.0, but go 1.16 would select v1.2.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/afero loaded from github.com/spf13/afero@v1.1.2, but go 1.16 would select v1.2.2 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/cast loaded from github.com/spf13/cast@v1.3.0, but go 1.16 would select v1.3.1 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/jwalterweatherman loaded from github.com/spf13/jwalterweatherman@v1.0.0, but go 1.16 would select v1.1.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports gopkg.in/ini.v1 loaded from gopkg.in/ini.v1@v1.51.0, but go 1.16 would select v1.56.0 github.com/docker/cli/cli/command imports github.com/theupdateframework/notary/client tested by github.com/theupdateframework/notary/client.test imports github.com/theupdateframework/notary/server imports github.com/theupdateframework/notary/utils imports github.com/spf13/viper imports github.com/spf13/afero imports github.com/spf13/afero/mem loaded from github.com/spf13/afero@v1.1.2, but go 1.16 would select v1.2.2 To upgrade to the versions selected by go 1.16: go mod tidy -go=1.16 && go mod tidy -go=1.17 If reproducibility with go 1.16 is not needed: go mod tidy -compat=1.17 For other options, see: https://golang.org/doc/modules/pruning Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2022-03-26 13:41:29 -04:00
)