Skip to content

chore(deps): bump the go-modules group with 69 updates #1

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Apr 25, 2025

Bumps the go-modules group with 69 updates:

Package From To
github.com/paketo-buildpacks/packit/v2 2.17.0 2.18.0
dario.cat/mergo 1.0.0 1.0.1
github.com/Azure/go-ansiterm 0.0.0-20210617225240-d185dfc1b5a1 0.0.0-20230124172434-306776ec8161
github.com/CycloneDX/cyclonedx-go 0.7.1 0.9.2
github.com/DataDog/zstd 1.4.5 1.5.5
github.com/Masterminds/sprig/v3 3.2.3 3.3.0
github.com/Microsoft/hcsshim 0.11.7 0.12.9
github.com/ProtonMail/go-crypto 1.1.3 1.1.6
github.com/anchore/go-logger 0.0.0-20220728155337-03b66a5207d8 0.0.0-20230725134548-c21dafa1ec5a
github.com/anchore/packageurl-go 0.1.1-0.20230104203445-02e0a6721501 0.1.1-0.20250220190351-d62adb6e1115
github.com/anchore/syft 0.80.0 1.19.0
github.com/andybalholm/brotli 1.0.4 1.1.1
github.com/bmatcuk/doublestar/v4 4.6.0 4.8.1
github.com/cenkalti/backoff/v4 4.2.1 4.3.0
github.com/cloudflare/circl 1.3.7 1.6.0
github.com/containerd/stargz-snapshotter/estargz 0.14.3 0.16.3
github.com/cpuguy83/dockercfg 0.3.1 0.3.2
github.com/cyphar/filepath-securejoin 0.2.5 0.4.1
github.com/docker/cli 27.1.1+incompatible 28.0.4+incompatible
github.com/docker/distribution 2.8.2+incompatible 2.8.3+incompatible
github.com/docker/docker-credential-helpers 0.7.0 0.8.2
github.com/gabriel-vasile/mimetype 1.4.8 1.4.9
github.com/go-git/go-billy/v5 5.6.0 5.6.2
github.com/go-git/go-git/v5 5.13.0 5.14.0
github.com/go-ole/go-ole 1.2.6 1.3.0
github.com/golang/groupcache 0.0.0-20210331224755-41bb18bfe9da 0.0.0-20241129210726-2c02b8208cf8
github.com/google/go-containerregistry 0.20.2 0.20.3
github.com/huandu/xstrings 1.3.3 1.5.0
github.com/jinzhu/copier 0.3.5 0.4.0
github.com/klauspost/compress 1.16.7 1.18.0
github.com/klauspost/pgzip 1.2.5 1.2.6
github.com/knqyf263/go-rpmdb 0.0.0-20230301153543-ba94b245509b 0.1.1
github.com/magiconair/properties 1.8.7 1.8.9
github.com/mattn/go-runewidth 0.0.13 0.0.16
github.com/moby/sys/sequential 0.5.0 0.6.0
github.com/moby/sys/user 0.3.0 0.4.0
github.com/moby/term 0.5.0 0.5.2
github.com/nwaples/rardecode 1.1.0 1.1.3
github.com/opencontainers/image-spec 1.1.0 1.1.1
github.com/pierrec/lz4/v4 4.1.15 4.1.22
github.com/pjbgf/sha1cd 0.3.0 0.3.2
github.com/rivo/uniseg 0.2.0 0.4.7
github.com/sassoftware/go-rpmutils 0.2.0 0.4.0
github.com/shirou/gopsutil/v3 3.23.12 3.24.5
github.com/shopspring/decimal 1.2.0 1.4.0
github.com/skeema/knownhosts 1.3.0 1.3.1
github.com/spdx/tools-golang 0.5.0 0.5.5
github.com/spf13/afero 1.9.5 1.14.0
github.com/spf13/cast 1.5.0 1.7.0
github.com/sylabs/sif/v2 2.8.1 2.21.1
github.com/sylabs/squashfs 0.6.1 1.0.6
github.com/tklauser/go-sysconf 0.3.12 0.3.15
github.com/tklauser/numcpus 0.6.1 0.10.0
github.com/vbatts/go-mtree 0.5.3 0.5.4
github.com/vbatts/tar-split 0.11.3 0.11.6
github.com/vifraa/gopom 0.2.1 1.0.0
github.com/wagoodman/go-partybus 0.0.0-20210627031916-db1f5573bbc5 0.0.0-20230516145632-8ccac152c651
github.com/wagoodman/go-progress 0.0.0-20230301185719-21920a456ad5 0.0.0-20230925121702-07e42b3cdba0
github.com/yusufpapurcu/wmi 1.2.3 1.2.4
golang.org/x/crypto 0.36.0 0.37.0
golang.org/x/mod 0.19.0 0.24.0
golang.org/x/net 0.37.0 0.39.0
golang.org/x/sync 0.12.0 0.13.0
golang.org/x/sys 0.31.0 0.32.0
golang.org/x/text 0.23.0 0.24.0
golang.org/x/xerrors 0.0.0-20220907171357-04be3eba64a2 0.0.0-20231012003039-104605ab7028
google.golang.org/genproto/googleapis/rpc 0.0.0-20240401170217-c3f982113cda 0.0.0-20241223144023-3abc09e42ca8
google.golang.org/grpc 1.59.0 1.67.3
google.golang.org/protobuf 1.36.5 1.36.6

Updates github.com/paketo-buildpacks/packit/v2 from 2.17.0 to 2.18.0

Release notes

Sourced from github.com/paketo-buildpacks/packit/v2's releases.

v2.18.0

What's Changed

Full Changelog: paketo-buildpacks/packit@v2.17.0...v2.18.0

Commits
  • aa5bc77 Bump github.com/anchore/stereoscope
  • f3fa74a Use upstream syft (#639)
  • 7e884aa Bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9
  • f3ac27a Bump golang.org/x/net from 0.37.0 to 0.38.0
  • See full diff in compare view

Updates dario.cat/mergo from 1.0.0 to 1.0.1

Release notes

Sourced from dario.cat/mergo's releases.

v1.0.1

What's Changed

New Contributors

Full Changelog: darccio/mergo@v1.0.0...v1.0.1

Commits

Updates github.com/Azure/go-ansiterm from 0.0.0-20210617225240-d185dfc1b5a1 to 0.0.0-20230124172434-306776ec8161

Commits

Updates github.com/CycloneDX/cyclonedx-go from 0.7.1 to 0.9.2

Release notes

Sourced from github.com/CycloneDX/cyclonedx-go's releases.

v0.9.2

Changelog

Features

  • 39ede217f126cfbc80eabf880f6643be3d392a4f: feat: add MarshalXML and UnmarshalXML (@​DmitriyLewen)
  • e9191ed11a269fcb6b3fb54e000ed6d81b5bf9db: feat: add UnmarshalJSON (@​DmitriyLewen)

Fixes

  • 80fede1f13a956d35eb14696cd2ca9d2d943f809: fix: add json tag for Identity (@​DmitriyLewen)
  • 24e9503293f0837e6e7ea3ff670ef958e6075b87: fix: tests (@​DmitriyLewen)
  • d68a199bc1747e5d6a7d4196c2f270535bbf6e3e: fix: use identity as array in valid-evidence.json (@​DmitriyLewen)
  • ff9cc28f9c9554328bd6c1ad56098be5a692d5e9: fix: use componentEvidence array for Evidence.Identity field (@​DmitriyLewen)

Building and Packaging

  • 016ee293d464d6383be3a714f7fb0debebef8ad5: build(deps): bump actions/checkout from 4.1.7 to 4.2.0 (@​dependabot[bot])
  • 77153ab5fe005f6484ac1e1225e7152df00db3f1: build(deps): bump actions/checkout from 4.2.0 to 4.2.1 (@​dependabot[bot])
  • 4f50d02c1282ac1d0d7448502b231a0e84a1e529: build(deps): bump actions/checkout from 4.2.1 to 4.2.2 (@​dependabot[bot])
  • b84451219e77e0fbbe7d5ba054bcf25dbc7aaea4: build(deps): bump actions/setup-go from 5.0.2 to 5.1.0 (@​dependabot[bot])
  • 238cbea3479fed9fdfcbfa5f1751828390a05211: build(deps): bump actions/setup-go from 5.1.0 to 5.2.0 (@​dependabot[bot])
  • bbe8f3c2c7c4567514ae966c69bf93fc1b3dba2a: build(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0 (@​dependabot[bot])
  • 05f8930fe918a31941ebf90eec627e5e6e908d1c: build(deps): bump github.com/terminalstatic/go-xsd-validate (@​dependabot[bot])
  • 082f87791a5e290c9d4c6e8126dc0cc987028a60: build(deps): bump gitpod/workspace-go from 2a9e01c to 9c95281 (@​dependabot[bot])
  • 093b1c15164dad5d46768db0e3f6ee43eb60ca20: build(deps): bump gitpod/workspace-go from 9c95281 to 6932342 (@​dependabot[bot])
  • 47b7e01ce8f8209894065e9656217b8c00a3c8ea: build(deps): bump golangci/golangci-lint-action from 6.1.0 to 6.1.1 (@​dependabot[bot])
  • ce6eb841cb1e21aa28efbccd9eb8fe5eea0555c9: build(deps): bump goreleaser/goreleaser-action from 6.0.0 to 6.1.0 (@​dependabot[bot])

Others

  • 4d3aff9fab9ae78bd6fbbc9fd0912fab14c8fb64: UPDATE_SNAPSHOTS=true make test (@​DmitriyLewen)
  • 31d954443e6563aeee69d82bdfb82aee83e07df1: refactor (@​DmitriyLewen)
  • 0170729e313a681fc8659643601410ae10ffe803: refactor: update convert package (@​DmitriyLewen)

v0.9.1

Changelog

Fixes

  • 6f0e0cf025dd99ab903e33f8e043d92b28dab4f6: fix: nil pointer dereference during evidence conversion (@​nscuro)
  • ce43b6f4cb5707d3ef2db1af1d597f5b23bf0e15: fix: make linter happy (@​nscuro)
  • 5d799e634b9bed9c86621048544737b210e433e8: fix: remove deprecated goreleaser flag (@​nscuro)

Building and Packaging

  • 6d5bcb0e277207551dbc728eb29959f1d3cbd685: build(deps): bump actions/checkout from 4.1.6 to 4.1.7 (@​dependabot[bot])
  • f34fc0c413da74d20d1cc240863aaf2eb6b274f7: build(deps): bump actions/setup-go from 5.0.1 to 5.0.2 (@​dependabot[bot])
  • 71cff221b8dbbc1d50f839fa76ecea4e42d83a2b: build(deps): bump gitpod/workspace-go from 8d15123 to 2a9e01c (@​dependabot[bot])
  • ea693550558d230b3fbba810b6e75ac2eb0b55c8: build(deps): bump golangci/golangci-lint-action from 6.0.1 to 6.1.0 (@​dependabot[bot])
  • d5cbdad49dfbf54f2dab4ad95bd1a47c710a526c: build(deps): bump goreleaser/goreleaser-action from 5.1.0 to 6.0.0 (@​dependabot[bot])

v0.9.0

Changelog

Features

  • 729c284798ebe341ced210b661362f77d68cd655: feat: Add CycloneDX 1.6 fields swhid and omniborId (@​snyk-tim)
  • b5d35959767efce95f50e96bf752c47fbe374496: feat: add manufacturer and authors (@​snyk-tim)
  • c52e698d2fe3fbd60df6ff397f44e7b0ea15a4bc: feat: raise baseline go version to 1.20 (@​nscuro)

Fixes

  • 9166e10fdecaadd8a97ceed9636261d351d90a65: fix: ioutil -> io (@​nscuro)
  • 349fc8cd072e90d81c0328f1d9dab16aa30fcf60: fix: add bom-ref to OrganizationalEntity/Contact (@​snyk-tim)
  • c97da90e259e0051e02e07300c75ad5e37a0311b: fix: handle breaking changes in skywalking-eyes (@​nscuro)

... (truncated)

Commits
  • cba06ff Merge pull request #205 from CycloneDX/dependabot/go_modules/github.com/termi...
  • 5c81749 Merge pull request #211 from CycloneDX/dependabot/github_actions/actions/setu...
  • 753526c Merge pull request #204 from DmitriyLewen/fix/componentEvidence-as-array
  • 4d3aff9 UPDATE_SNAPSHOTS=true make test
  • d68a199 fix: use identity as array in valid-evidence.json
  • 24e9503 fix: tests
  • 238cbea build(deps): bump actions/setup-go from 5.1.0 to 5.2.0
  • a7f7415 Merge branch 'master' of github.com:DmitriyLewen/cyclonedx-go into fix/compon...
  • 05f8930 build(deps): bump github.com/terminalstatic/go-xsd-validate
  • 464d426 Merge pull request #202 from CycloneDX/dependabot/github_actions/actions/chec...
  • Additional commits viewable in compare view

Updates github.com/DataDog/zstd from 1.4.5 to 1.5.5

Release notes

Sourced from github.com/DataDog/zstd's releases.

zstd 1.5.5

What's Changed

  • Update vendored zstd to 1.5.5 (#125)
  • [circleci] Update to non-deprecated images (#124)

DataDog/zstd@v1.5.2...v1.5.5

zstd 1.5.5 - wrapper patches 1

What's Changed

New Contributors

Full Changelog: DataDog/zstd@v1.5.5...v1.5.5+patch1

zstd 1.5.2

This release updates the upstream zstd version to 1.5.2 (DataDog/zstd#116)

The update 1.5.0 -> 1.5.2 overall has a similar performance profile. Please note that depending on the workload, performance could vary by -10% / +10%

zstd 1.5.2 - wrapper patches 1

What's Changed

New Contributors

Full Changelog: DataDog/zstd@v1.5.2...v1.5.2+patch1

zstd 1.5.0

This release updates the upstream zstd version to 1.5.0 (#106) (thanks @​SirSniper!) which sports some major performance improvements!

It comes with additional changes to the Go wrapper:

  • Allow building against zstd dynamic library instead of static by @​dopuskh3 (#109)
  • Don't block the stream reader when a block is available by @​delthas (#96)

zstd 1.5.0 - wrapper patches 1

What's Changed

Full Changelog: DataDog/zstd@v1.5.0...v1.5.0+patch1

zstd 1.5.0 - wrapper patches 2

... (truncated)

Commits
  • 5f14d6a Merge pull request #125 from DataDog/viq111/1.5.5
  • ca4d3c7 Update vendored zstd to 1.5.5
  • 03725e7 Merge pull request #126 from DataDog/viq111/circleci
  • 1b4c894 [circle] Remove latest as cimg/go does not have the tag
  • ff5a3bb [circleci] Update tested Go versions to 1.19 & 1.20
  • 6e5a54b [circleci] Switch to newer images
  • fd035e5 Merge pull request #117 from bsergean/patch-1
  • c798238 Merge branch '1.x' into patch-1
  • 13d5b10 update documentation
  • d64f463 Merge pull request #120 from DataDog/viq111/fix-min-size
  • Additional commits viewable in compare view

Updates github.com/Masterminds/sprig/v3 from 3.2.3 to 3.3.0

Release notes

Sourced from github.com/Masterminds/sprig/v3's releases.

v3.3.0

What's Changed

New Contributors

Full Changelog: Masterminds/sprig@v3.2.3...v3.3.0

Changelog

Sourced from github.com/Masterminds/sprig/v3's changelog.

Release 3.3.0 (2024-08-29)

Added

Changed

  • #407: Removed duplicate documentation (functions were documentated in 2 places)
  • #290: Corrected copy/paster oops in math documentation (thanks @​zzhu41)
  • #369: Corrected template reference in docs (thanks @​chey)
  • #375: Added link to URL documenation (thanks @​carlpett)
  • #406: Updated the mergo dependency which had a breaking change (which was accounted for)
  • #376: Fixed documentation error (thanks @​jheyduk)
  • #404: Updated dependency tree
  • #391: Fixed misspelling (thanks @​chrishalbert)
  • #405: Updated Go versions used in testing
Commits
  • e708470 Merge pull request #408 from mattfarina/update-changelog-3.3
  • 8fc4354 Updating the changelog for the 3.3.0 release
  • cb81a32 Merge pull request #407 from mattfarina/remove-dup-math-functions
  • 2637693 Removing duplicate documentation
  • 06b9a87 Merge pull request #290 from zzhu41/patch-1
  • e663ec6 Merge pull request #369 from chey/patch-1
  • bb2f73f Merge pull request #375 from carlpett/patch-1
  • f07659e Merge pull request #400 from itzik-elayev/master
  • 98b35c1 Add closing bracket
  • 7a88928 Merge pull request #406 from mattfarina/update-mergo
  • Additional commits viewable in compare view

Updates github.com/Microsoft/hcsshim from 0.11.7 to 0.12.9

Release notes

Sourced from github.com/Microsoft/hcsshim's releases.

v0.12.9

What's Changed

Full Changelog: microsoft/hcsshim@v0.12.8...v0.12.9

v0.12.8

What's Changed

Full Changelog: microsoft/hcsshim@v0.12.7...v0.12.8

v0.12.7

What's Changed

Full Changelog: microsoft/hcsshim@v0.12.6...v0.12.7

v0.12.6

What's Changed

Full Changelog: microsoft/hcsshim@v0.12.5...v0.12.6

v0.12.5

What's Changed

Full Changelog: microsoft/hcsshim@v0.12.4...v0.12.5

Commits
  • 7392335 Switch to using containerd/errdefs/pkg/errgrpc for grpc translation
  • 79d3f32 Update go to 1.22
  • 05636b9 Update JOB_OBJECT_ALL_ACCESS and OpenJobObject (#2095)
  • 1550628 mobve SILOOBJECT_BASIC_INFORMATION to winapi
  • bf52d58 fix SILOOBJECT_BASIC_INFORMATION alignment
  • 8d48d87 Update containerd to v1.7.23 (#2295)
  • 4ad298f Fixing typo (#2289)
  • 86b5333 Bump golangci/golangci-lint-action from 4 to 6
  • 5ae96f3 Update runc to v1.1.14
  • 8f3fccd Update pkg versions
  • Additional commits viewable in compare view

Updates github.com/ProtonMail/go-crypto from 1.1.3 to 1.1.6

Release notes

Sourced from github.com/ProtonMail/go-crypto's releases.

Release v1.1.6

What's Changed

Full Changelog: ProtonMail/go-crypto@v1.1.5...v1.1.6

Release v1.1.6-proton

What's Changed

This release is v1.1.6 with support for the following non-standardized features:

Release v1.1.5

What's Changed

Full Changelog: ProtonMail/go-crypto@v1.1.4...v1.1.5

Release v1.1.5-proton

What's Changed

This release is v1.1.5 with support for the following non-standardized features:

Release v1.1.4

What's Changed

Full Changelog: ProtonMail/go-crypto@v1.1.3...v1.1.4

Release v1.1.4-proton

What's Changed

This release is v1.1.4 with support for the following non-standardized features:

... (truncated)

Commits
  • e52eada Merge pull request #271 from ProtonMail/feat/improve-errors-key-selection
  • 4bf9d90 feat(v2): Improve error message for encryption key selection
  • d47bb38 Merge pull request #266 from caarlos0/issuer-key-id
  • 756ebbd Make Issuer Key ID signature subpacket non-critical
  • 44ef98c Merge pull request #276 from mdosch/fix-random-source-is-broken
  • b105e24 Merge branch 'main' into fix-random-source-is-broken
  • 89b0776 Only check that message signatures are newer than the key
  • 2b2dbe9 openpgp/clearsign: just use rand.Reader in tests
  • 2732e09 Merge pull request #275 from ProtonMail/only-check-msg-sig-newer-than-key
  • 8e272e7 Only check that message signatures are newer than the key
  • Additional commits viewable in compare view

Updates github.com/anchore/go-logger from 0.0.0-20220728155337-03b66a5207d8 to 0.0.0-20230725134548-c21dafa1ec5a

Commits

Updates github.com/anchore/packageurl-go from 0.1.1-0.20230104203445-02e0a6721501 to 0.1.1-0.20250220190351-d62adb6e1115

Commits

Updates github.com/anchore/syft from 0.80.0 to 1.19.0

Release notes

Sourced from github.com/anchore/syft's releases.

v1.19.0

Added Features

Bug Fixes

Additional Changes

(Full Changelog)

v1.18.1

Bug Fixes

  • Runtime Error with Syft on Singularity .sif file (panic: index out of range) [#3390]
  • SPDX expressions are lost from CycloneDX if they contain extra parenthesis [#3441 #3517 @​willmurphyscode]

Additional Changes

  • migrate syft to use anchore fork of archiver without replace [#3516 @​spiffcs]

(Full Changelog)

v1.18.0

Added Features

Bug Fixes

  • fix order of rust dependencies and support git sources in Cargo.lock dependencies [#3502 @​willmurphyscode]
  • Use file indexer directly when scanning with file source [#3333 @​adammcclenaghan]
  • Remove incorrect power-user help text that only image sources are supported [#2046]
  • Invalid SPDX: missing copyright text [#3346 #3495 @​spiffcs]
  • Scanning a source tree with duplicate conanfile.txt dependencies generates multiple components [#3403]

(Full Changelog)

v1.17.0

... (truncated)

Commits
  • 222e654 chore(deps): update tools to latest versions (#3602)
  • 0969453 chore(deps): bump github/codeql-action from 3.28.1 to 3.28.2 (#3604)
  • a5ef816 chore(deps): bump github.com/hashicorp/hcl/v2 from 2.22.0 to 2.23.0 (#3605)
  • 07f0658 chore(deps): bump github.com/aquasecurity/go-pep440-version (#3606)
  • 7f5dbf9 chore: bump stereoscope to v0.0.13 (#3601)
  • c10e904 feat(cataloger): add a terraform provider cataloger (#3378)
  • 1906c17 chore(deps): update tools to latest versions (#3597)
  • 4edfa4d chore(deps): update CPE dictionary index (#3599)
  • a6557d7 chore(deps): bump actions/setup-go from 5.2.0 to 5.3.0 (#3600)
  • 19a75fe feat(golang): add license parsing from vendor dirs (#3522)
  • Additional commits viewable in compare view

Updates github.com/andybalholm/brotli from 1.0.4 to 1.1.1

Commits
  • 57434b5 Encoder: check for empty block
  • 97e8583 matchfinder.M4: some refinements to scoring
  • 17e5901 Make my matchfinder work more accessible.
  • cf812c0 matchfinder: add M0
  • 1b6cf36 matchfinder: remove MultiHash
  • 265f3af matchfinder: penalize score for overlapping matches
  • a8d524a matchfinder: replace Score function with DistanceBitCost
  • 578645e matchfinder: add MultiHash
  • 24b2bfa matchfinder.M4: add Score function
  • 4a024e3 matchfinder.M4: add match chain
  • Additional commits viewable in compare view

Updates github.com/bmatcuk/doublestar/v4 from 4.6.0 to 4.8.1

Release notes

Sourced from github.com/bmatcuk/doublestar/v4's releases.

Small Performance Improvement for MatchUnvalidated

Skip some additional validation checks in MatchUnvalidated. Thanks to @​lukemassa for the PR!

Additional documentation improvements from @​timo-reymann. Thanks!

What's Changed

New Contributors

Full Changelog: bmatcuk/doublestar@v4.8.0...v4.8.1

Fixed Escaped Meta in the "Base" of the Pattern

If the "base" of a pattern (ie, everything up to the first path slash before any meta characters) contains an escaped meta character, doublestar would fail to glob any files.

Thanks to @​tdurieux for finding and fixing this bug!

Breaking-ish Change

I've updated SplitPattern to unescape meta characters in the first returned string. I suspect this shouldn't cause issues for anyone because, if anyone was using this function, they've probably either never passed a pattern with escaped meta characters, or hand-rolled an unescape method to fix the bug - which will now be a no-op for them.

What's Changed

New Contributors

Full Changelog: bmatcuk/doublestar@v4.7.1...v4.8.0

Fixed FilepathGlob("")

To be consistent with filepath.Glob, FilepathGlob("") returns nil.

Added MatchUnvalidated, PathMatchUnvalidated

These functions provide a small performance improvement in cases where you don't care about whether or not the pattern is valid (maybe because you already ran ValidatePattern).

Fixed Match bug with patterns like a/**/

Thanks @​mmxmb for submitting the bug and opening a PR in #89!

Commits

Bumps the go-modules group with 69 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/paketo-buildpacks/packit/v2](https://github.com/paketo-buildpacks/packit) | `2.17.0` | `2.18.0` |
| [dario.cat/mergo](https://github.com/imdario/mergo) | `1.0.0` | `1.0.1` |
| [github.com/Azure/go-ansiterm](https://github.com/Azure/go-ansiterm) | `0.0.0-20210617225240-d185dfc1b5a1` | `0.0.0-20230124172434-306776ec8161` |
| [github.com/CycloneDX/cyclonedx-go](https://github.com/CycloneDX/cyclonedx-go) | `0.7.1` | `0.9.2` |
| [github.com/DataDog/zstd](https://github.com/DataDog/zstd) | `1.4.5` | `1.5.5` |
| [github.com/Masterminds/sprig/v3](https://github.com/Masterminds/sprig) | `3.2.3` | `3.3.0` |
| [github.com/Microsoft/hcsshim](https://github.com/Microsoft/hcsshim) | `0.11.7` | `0.12.9` |
| [github.com/ProtonMail/go-crypto](https://github.com/ProtonMail/go-crypto) | `1.1.3` | `1.1.6` |
| [github.com/anchore/go-logger](https://github.com/anchore/go-logger) | `0.0.0-20220728155337-03b66a5207d8` | `0.0.0-20230725134548-c21dafa1ec5a` |
| [github.com/anchore/packageurl-go](https://github.com/anchore/packageurl-go) | `0.1.1-0.20230104203445-02e0a6721501` | `0.1.1-0.20250220190351-d62adb6e1115` |
| [github.com/anchore/syft](https://github.com/anchore/syft) | `0.80.0` | `1.19.0` |
| [github.com/andybalholm/brotli](https://github.com/andybalholm/brotli) | `1.0.4` | `1.1.1` |
| [github.com/bmatcuk/doublestar/v4](https://github.com/bmatcuk/doublestar) | `4.6.0` | `4.8.1` |
| [github.com/cenkalti/backoff/v4](https://github.com/cenkalti/backoff) | `4.2.1` | `4.3.0` |
| [github.com/cloudflare/circl](https://github.com/cloudflare/circl) | `1.3.7` | `1.6.0` |
| [github.com/containerd/stargz-snapshotter/estargz](https://github.com/containerd/stargz-snapshotter) | `0.14.3` | `0.16.3` |
| [github.com/cpuguy83/dockercfg](https://github.com/cpuguy83/dockercfg) | `0.3.1` | `0.3.2` |
| [github.com/cyphar/filepath-securejoin](https://github.com/cyphar/filepath-securejoin) | `0.2.5` | `0.4.1` |
| [github.com/docker/cli](https://github.com/docker/cli) | `27.1.1+incompatible` | `28.0.4+incompatible` |
| [github.com/docker/distribution](https://github.com/docker/distribution) | `2.8.2+incompatible` | `2.8.3+incompatible` |
| [github.com/docker/docker-credential-helpers](https://github.com/docker/docker-credential-helpers) | `0.7.0` | `0.8.2` |
| [github.com/gabriel-vasile/mimetype](https://github.com/gabriel-vasile/mimetype) | `1.4.8` | `1.4.9` |
| [github.com/go-git/go-billy/v5](https://github.com/go-git/go-billy) | `5.6.0` | `5.6.2` |
| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.13.0` | `5.14.0` |
| [github.com/go-ole/go-ole](https://github.com/go-ole/go-ole) | `1.2.6` | `1.3.0` |
| [github.com/golang/groupcache](https://github.com/golang/groupcache) | `0.0.0-20210331224755-41bb18bfe9da` | `0.0.0-20241129210726-2c02b8208cf8` |
| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.20.2` | `0.20.3` |
| [github.com/huandu/xstrings](https://github.com/huandu/xstrings) | `1.3.3` | `1.5.0` |
| [github.com/jinzhu/copier](https://github.com/jinzhu/copier) | `0.3.5` | `0.4.0` |
| [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.16.7` | `1.18.0` |
| [github.com/klauspost/pgzip](https://github.com/klauspost/pgzip) | `1.2.5` | `1.2.6` |
| [github.com/knqyf263/go-rpmdb](https://github.com/knqyf263/go-rpmdb) | `0.0.0-20230301153543-ba94b245509b` | `0.1.1` |
| [github.com/magiconair/properties](https://github.com/magiconair/properties) | `1.8.7` | `1.8.9` |
| [github.com/mattn/go-runewidth](https://github.com/mattn/go-runewidth) | `0.0.13` | `0.0.16` |
| [github.com/moby/sys/sequential](https://github.com/moby/sys) | `0.5.0` | `0.6.0` |
| [github.com/moby/sys/user](https://github.com/moby/sys) | `0.3.0` | `0.4.0` |
| [github.com/moby/term](https://github.com/moby/term) | `0.5.0` | `0.5.2` |
| [github.com/nwaples/rardecode](https://github.com/nwaples/rardecode) | `1.1.0` | `1.1.3` |
| [github.com/opencontainers/image-spec](https://github.com/opencontainers/image-spec) | `1.1.0` | `1.1.1` |
| [github.com/pierrec/lz4/v4](https://github.com/pierrec/lz4) | `4.1.15` | `4.1.22` |
| [github.com/pjbgf/sha1cd](https://github.com/pjbgf/sha1cd) | `0.3.0` | `0.3.2` |
| [github.com/rivo/uniseg](https://github.com/rivo/uniseg) | `0.2.0` | `0.4.7` |
| [github.com/sassoftware/go-rpmutils](https://github.com/sassoftware/go-rpmutils) | `0.2.0` | `0.4.0` |
| [github.com/shirou/gopsutil/v3](https://github.com/shirou/gopsutil) | `3.23.12` | `3.24.5` |
| [github.com/shopspring/decimal](https://github.com/shopspring/decimal) | `1.2.0` | `1.4.0` |
| [github.com/skeema/knownhosts](https://github.com/skeema/knownhosts) | `1.3.0` | `1.3.1` |
| [github.com/spdx/tools-golang](https://github.com/spdx/tools-golang) | `0.5.0` | `0.5.5` |
| [github.com/spf13/afero](https://github.com/spf13/afero) | `1.9.5` | `1.14.0` |
| [github.com/spf13/cast](https://github.com/spf13/cast) | `1.5.0` | `1.7.0` |
| [github.com/sylabs/sif/v2](https://github.com/sylabs/sif) | `2.8.1` | `2.21.1` |
| [github.com/sylabs/squashfs](https://github.com/sylabs/squashfs) | `0.6.1` | `1.0.6` |
| [github.com/tklauser/go-sysconf](https://github.com/tklauser/go-sysconf) | `0.3.12` | `0.3.15` |
| [github.com/tklauser/numcpus](https://github.com/tklauser/numcpus) | `0.6.1` | `0.10.0` |
| [github.com/vbatts/go-mtree](https://github.com/vbatts/go-mtree) | `0.5.3` | `0.5.4` |
| [github.com/vbatts/tar-split](https://github.com/vbatts/tar-split) | `0.11.3` | `0.11.6` |
| [github.com/vifraa/gopom](https://github.com/vifraa/gopom) | `0.2.1` | `1.0.0` |
| [github.com/wagoodman/go-partybus](https://github.com/wagoodman/go-partybus) | `0.0.0-20210627031916-db1f5573bbc5` | `0.0.0-20230516145632-8ccac152c651` |
| [github.com/wagoodman/go-progress](https://github.com/wagoodman/go-progress) | `0.0.0-20230301185719-21920a456ad5` | `0.0.0-20230925121702-07e42b3cdba0` |
| [github.com/yusufpapurcu/wmi](https://github.com/yusufpapurcu/wmi) | `1.2.3` | `1.2.4` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.36.0` | `0.37.0` |
| [golang.org/x/mod](https://github.com/golang/mod) | `0.19.0` | `0.24.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.37.0` | `0.39.0` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.12.0` | `0.13.0` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.31.0` | `0.32.0` |
| [golang.org/x/text](https://github.com/golang/text) | `0.23.0` | `0.24.0` |
| [golang.org/x/xerrors](https://github.com/golang/xerrors) | `0.0.0-20220907171357-04be3eba64a2` | `0.0.0-20231012003039-104605ab7028` |
| [google.golang.org/genproto/googleapis/rpc](https://github.com/googleapis/go-genproto) | `0.0.0-20240401170217-c3f982113cda` | `0.0.0-20241223144023-3abc09e42ca8` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.59.0` | `1.67.3` |
| google.golang.org/protobuf | `1.36.5` | `1.36.6` |


Updates `github.com/paketo-buildpacks/packit/v2` from 2.17.0 to 2.18.0
- [Release notes](https://github.com/paketo-buildpacks/packit/releases)
- [Commits](paketo-buildpacks/packit@v2.17.0...v2.18.0)

Updates `dario.cat/mergo` from 1.0.0 to 1.0.1
- [Release notes](https://github.com/imdario/mergo/releases)
- [Commits](darccio/mergo@v1.0.0...v1.0.1)

Updates `github.com/Azure/go-ansiterm` from 0.0.0-20210617225240-d185dfc1b5a1 to 0.0.0-20230124172434-306776ec8161
- [Commits](https://github.com/Azure/go-ansiterm/commits)

Updates `github.com/CycloneDX/cyclonedx-go` from 0.7.1 to 0.9.2
- [Release notes](https://github.com/CycloneDX/cyclonedx-go/releases)
- [Changelog](https://github.com/CycloneDX/cyclonedx-go/blob/master/.goreleaser.yml)
- [Commits](CycloneDX/cyclonedx-go@v0.7.1...v0.9.2)

Updates `github.com/DataDog/zstd` from 1.4.5 to 1.5.5
- [Release notes](https://github.com/DataDog/zstd/releases)
- [Commits](DataDog/zstd@v1.4.5...v1.5.5)

Updates `github.com/Masterminds/sprig/v3` from 3.2.3 to 3.3.0
- [Release notes](https://github.com/Masterminds/sprig/releases)
- [Changelog](https://github.com/Masterminds/sprig/blob/master/CHANGELOG.md)
- [Commits](Masterminds/sprig@v3.2.3...v3.3.0)

Updates `github.com/Microsoft/hcsshim` from 0.11.7 to 0.12.9
- [Release notes](https://github.com/Microsoft/hcsshim/releases)
- [Commits](microsoft/hcsshim@v0.11.7...v0.12.9)

Updates `github.com/ProtonMail/go-crypto` from 1.1.3 to 1.1.6
- [Release notes](https://github.com/ProtonMail/go-crypto/releases)
- [Commits](ProtonMail/go-crypto@v1.1.3...v1.1.6)

Updates `github.com/anchore/go-logger` from 0.0.0-20220728155337-03b66a5207d8 to 0.0.0-20230725134548-c21dafa1ec5a
- [Commits](https://github.com/anchore/go-logger/commits)

Updates `github.com/anchore/packageurl-go` from 0.1.1-0.20230104203445-02e0a6721501 to 0.1.1-0.20250220190351-d62adb6e1115
- [Release notes](https://github.com/anchore/packageurl-go/releases)
- [Commits](https://github.com/anchore/packageurl-go/commits)

Updates `github.com/anchore/syft` from 0.80.0 to 1.19.0
- [Release notes](https://github.com/anchore/syft/releases)
- [Changelog](https://github.com/anchore/syft/blob/main/.goreleaser.yaml)
- [Commits](anchore/syft@v0.80.0...v1.19.0)

Updates `github.com/andybalholm/brotli` from 1.0.4 to 1.1.1
- [Commits](andybalholm/brotli@v1.0.4...v1.1.1)

Updates `github.com/bmatcuk/doublestar/v4` from 4.6.0 to 4.8.1
- [Release notes](https://github.com/bmatcuk/doublestar/releases)
- [Commits](bmatcuk/doublestar@v4.6.0...v4.8.1)

Updates `github.com/cenkalti/backoff/v4` from 4.2.1 to 4.3.0
- [Changelog](https://github.com/cenkalti/backoff/blob/v5/CHANGELOG.md)
- [Commits](cenkalti/backoff@v4.2.1...v4.3.0)

Updates `github.com/cloudflare/circl` from 1.3.7 to 1.6.0
- [Release notes](https://github.com/cloudflare/circl/releases)
- [Commits](cloudflare/circl@v1.3.7...v1.6.0)

Updates `github.com/containerd/stargz-snapshotter/estargz` from 0.14.3 to 0.16.3
- [Release notes](https://github.com/containerd/stargz-snapshotter/releases)
- [Commits](containerd/stargz-snapshotter@v0.14.3...v0.16.3)

Updates `github.com/cpuguy83/dockercfg` from 0.3.1 to 0.3.2
- [Release notes](https://github.com/cpuguy83/dockercfg/releases)
- [Commits](cpuguy83/dockercfg@v0.3.1...v0.3.2)

Updates `github.com/cyphar/filepath-securejoin` from 0.2.5 to 0.4.1
- [Release notes](https://github.com/cyphar/filepath-securejoin/releases)
- [Changelog](https://github.com/cyphar/filepath-securejoin/blob/main/CHANGELOG.md)
- [Commits](cyphar/filepath-securejoin@v0.2.5...v0.4.1)

Updates `github.com/docker/cli` from 27.1.1+incompatible to 28.0.4+incompatible
- [Commits](docker/cli@v27.1.1...v28.0.4)

Updates `github.com/docker/distribution` from 2.8.2+incompatible to 2.8.3+incompatible
- [Release notes](https://github.com/docker/distribution/releases)
- [Commits](distribution/distribution@v2.8.2...v2.8.3)

Updates `github.com/docker/docker-credential-helpers` from 0.7.0 to 0.8.2
- [Release notes](https://github.com/docker/docker-credential-helpers/releases)
- [Commits](docker/docker-credential-helpers@v0.7.0...v0.8.2)

Updates `github.com/gabriel-vasile/mimetype` from 1.4.8 to 1.4.9
- [Release notes](https://github.com/gabriel-vasile/mimetype/releases)
- [Commits](gabriel-vasile/mimetype@v1.4.8...v1.4.9)

Updates `github.com/go-git/go-billy/v5` from 5.6.0 to 5.6.2
- [Release notes](https://github.com/go-git/go-billy/releases)
- [Commits](go-git/go-billy@v5.6.0...v5.6.2)

Updates `github.com/go-git/go-git/v5` from 5.13.0 to 5.14.0
- [Release notes](https://github.com/go-git/go-git/releases)
- [Commits](go-git/go-git@v5.13.0...v5.14.0)

Updates `github.com/go-ole/go-ole` from 1.2.6 to 1.3.0
- [Release notes](https://github.com/go-ole/go-ole/releases)
- [Changelog](https://github.com/go-ole/go-ole/blob/master/ChangeLog.md)
- [Commits](go-ole/go-ole@v1.2.6...v1.3.0)

Updates `github.com/golang/groupcache` from 0.0.0-20210331224755-41bb18bfe9da to 0.0.0-20241129210726-2c02b8208cf8
- [Commits](https://github.com/golang/groupcache/commits)

Updates `github.com/google/go-containerregistry` from 0.20.2 to 0.20.3
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Changelog](https://github.com/google/go-containerregistry/blob/main/.goreleaser.yml)
- [Commits](google/go-containerregistry@v0.20.2...v0.20.3)

Updates `github.com/huandu/xstrings` from 1.3.3 to 1.5.0
- [Release notes](https://github.com/huandu/xstrings/releases)
- [Commits](huandu/xstrings@v1.3.3...v1.5.0)

Updates `github.com/jinzhu/copier` from 0.3.5 to 0.4.0
- [Commits](jinzhu/copier@v0.3.5...v0.4.0)

Updates `github.com/klauspost/compress` from 1.16.7 to 1.18.0
- [Release notes](https://github.com/klauspost/compress/releases)
- [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml)
- [Commits](klauspost/compress@v1.16.7...v1.18.0)

Updates `github.com/klauspost/pgzip` from 1.2.5 to 1.2.6
- [Release notes](https://github.com/klauspost/pgzip/releases)
- [Commits](klauspost/pgzip@v1.2.5...v1.2.6)

Updates `github.com/knqyf263/go-rpmdb` from 0.0.0-20230301153543-ba94b245509b to 0.1.1
- [Commits](https://github.com/knqyf263/go-rpmdb/commits/v0.1.1)

Updates `github.com/magiconair/properties` from 1.8.7 to 1.8.9
- [Release notes](https://github.com/magiconair/properties/releases)
- [Commits](magiconair/properties@v1.8.7...v1.8.9)

Updates `github.com/mattn/go-runewidth` from 0.0.13 to 0.0.16
- [Commits](mattn/go-runewidth@v0.0.13...v0.0.16)

Updates `github.com/moby/sys/sequential` from 0.5.0 to 0.6.0
- [Release notes](https://github.com/moby/sys/releases)
- [Commits](moby/sys@signal/v0.5.0...signal/v0.6.0)

Updates `github.com/moby/sys/user` from 0.3.0 to 0.4.0
- [Release notes](https://github.com/moby/sys/releases)
- [Commits](moby/sys@user/v0.3.0...user/v0.4.0)

Updates `github.com/moby/term` from 0.5.0 to 0.5.2
- [Commits](moby/term@v0.5.0...v0.5.2)

Updates `github.com/nwaples/rardecode` from 1.1.0 to 1.1.3
- [Commits](nwaples/rardecode@v1.1.0...v1.1.3)

Updates `github.com/opencontainers/image-spec` from 1.1.0 to 1.1.1
- [Release notes](https://github.com/opencontainers/image-spec/releases)
- [Changelog](https://github.com/opencontainers/image-spec/blob/main/RELEASES.md)
- [Commits](opencontainers/image-spec@v1.1.0...v1.1.1)

Updates `github.com/pierrec/lz4/v4` from 4.1.15 to 4.1.22
- [Commits](pierrec/lz4@v4.1.15...v4.1.22)

Updates `github.com/pjbgf/sha1cd` from 0.3.0 to 0.3.2
- [Release notes](https://github.com/pjbgf/sha1cd/releases)
- [Commits](pjbgf/sha1cd@v0.3.0...v0.3.2)

Updates `github.com/rivo/uniseg` from 0.2.0 to 0.4.7
- [Release notes](https://github.com/rivo/uniseg/releases)
- [Commits](rivo/uniseg@v0.2.0...v0.4.7)

Updates `github.com/sassoftware/go-rpmutils` from 0.2.0 to 0.4.0
- [Release notes](https://github.com/sassoftware/go-rpmutils/releases)
- [Commits](sassoftware/go-rpmutils@v0.2.0...v0.4.0)

Updates `github.com/shirou/gopsutil/v3` from 3.23.12 to 3.24.5
- [Release notes](https://github.com/shirou/gopsutil/releases)
- [Commits](shirou/gopsutil@v3.23.12...v3.24.5)

Updates `github.com/shopspring/decimal` from 1.2.0 to 1.4.0
- [Release notes](https://github.com/shopspring/decimal/releases)
- [Changelog](https://github.com/shopspring/decimal/blob/master/CHANGELOG.md)
- [Commits](shopspring/decimal@v1.2.0...v1.4.0)

Updates `github.com/skeema/knownhosts` from 1.3.0 to 1.3.1
- [Commits](skeema/knownhosts@v1.3.0...v1.3.1)

Updates `github.com/spdx/tools-golang` from 0.5.0 to 0.5.5
- [Release notes](https://github.com/spdx/tools-golang/releases)
- [Changelog](https://github.com/spdx/tools-golang/blob/main/RELEASE-NOTES.md)
- [Commits](spdx/tools-golang@v0.5.0...v0.5.5)

Updates `github.com/spf13/afero` from 1.9.5 to 1.14.0
- [Release notes](https://github.com/spf13/afero/releases)
- [Commits](spf13/afero@v1.9.5...v1.14.0)

Updates `github.com/spf13/cast` from 1.5.0 to 1.7.0
- [Release notes](https://github.com/spf13/cast/releases)
- [Commits](spf13/cast@v1.5.0...v1.7.0)

Updates `github.com/sylabs/sif/v2` from 2.8.1 to 2.21.1
- [Release notes](https://github.com/sylabs/sif/releases)
- [Changelog](https://github.com/sylabs/sif/blob/main/.goreleaser.yml)
- [Commits](sylabs/sif@v2.8.1...v2.21.1)

Updates `github.com/sylabs/squashfs` from 0.6.1 to 1.0.6
- [Commits](sylabs/squashfs@v0.6.1...v1.0.6)

Updates `github.com/tklauser/go-sysconf` from 0.3.12 to 0.3.15
- [Release notes](https://github.com/tklauser/go-sysconf/releases)
- [Commits](tklauser/go-sysconf@v0.3.12...v0.3.15)

Updates `github.com/tklauser/numcpus` from 0.6.1 to 0.10.0
- [Release notes](https://github.com/tklauser/numcpus/releases)
- [Commits](tklauser/numcpus@v0.6.1...v0.10.0)

Updates `github.com/vbatts/go-mtree` from 0.5.3 to 0.5.4
- [Release notes](https://github.com/vbatts/go-mtree/releases)
- [Changelog](https://github.com/vbatts/go-mtree/blob/main/releases.md)
- [Commits](vbatts/go-mtree@v0.5.3...v0.5.4)

Updates `github.com/vbatts/tar-split` from 0.11.3 to 0.11.6
- [Release notes](https://github.com/vbatts/tar-split/releases)
- [Commits](vbatts/tar-split@v0.11.3...v0.11.6)

Updates `github.com/vifraa/gopom` from 0.2.1 to 1.0.0
- [Release notes](https://github.com/vifraa/gopom/releases)
- [Commits](vifraa/gopom@v0.2.1...v1.0.0)

Updates `github.com/wagoodman/go-partybus` from 0.0.0-20210627031916-db1f5573bbc5 to 0.0.0-20230516145632-8ccac152c651
- [Commits](https://github.com/wagoodman/go-partybus/commits)

Updates `github.com/wagoodman/go-progress` from 0.0.0-20230301185719-21920a456ad5 to 0.0.0-20230925121702-07e42b3cdba0
- [Commits](https://github.com/wagoodman/go-progress/commits)

Updates `github.com/yusufpapurcu/wmi` from 1.2.3 to 1.2.4
- [Release notes](https://github.com/yusufpapurcu/wmi/releases)
- [Commits](yusufpapurcu/wmi@v1.2.3...v1.2.4)

Updates `golang.org/x/crypto` from 0.36.0 to 0.37.0
- [Commits](golang/crypto@v0.36.0...v0.37.0)

Updates `golang.org/x/mod` from 0.19.0 to 0.24.0
- [Commits](golang/mod@v0.19.0...v0.24.0)

Updates `golang.org/x/net` from 0.37.0 to 0.39.0
- [Commits](golang/net@v0.37.0...v0.39.0)

Updates `golang.org/x/sync` from 0.12.0 to 0.13.0
- [Commits](golang/sync@v0.12.0...v0.13.0)

Updates `golang.org/x/sys` from 0.31.0 to 0.32.0
- [Commits](golang/sys@v0.31.0...v0.32.0)

Updates `golang.org/x/text` from 0.23.0 to 0.24.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.23.0...v0.24.0)

Updates `golang.org/x/xerrors` from 0.0.0-20220907171357-04be3eba64a2 to 0.0.0-20231012003039-104605ab7028
- [Commits](https://github.com/golang/xerrors/commits)

Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20240401170217-c3f982113cda to 0.0.0-20241223144023-3abc09e42ca8
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/grpc` from 1.59.0 to 1.67.3
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.59.0...v1.67.3)

Updates `google.golang.org/protobuf` from 1.36.5 to 1.36.6

---
updated-dependencies:
- dependency-name: github.com/paketo-buildpacks/packit/v2
  dependency-version: 2.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: dario.cat/mergo
  dependency-version: 1.0.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/Azure/go-ansiterm
  dependency-version: 0.0.0-20230124172434-306776ec8161
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/CycloneDX/cyclonedx-go
  dependency-version: 0.9.2
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/DataDog/zstd
  dependency-version: 1.5.5
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/Masterminds/sprig/v3
  dependency-version: 3.3.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/Microsoft/hcsshim
  dependency-version: 0.12.9
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/ProtonMail/go-crypto
  dependency-version: 1.1.6
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/anchore/go-logger
  dependency-version: 0.0.0-20230725134548-c21dafa1ec5a
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/anchore/packageurl-go
  dependency-version: 0.1.1-0.20250220190351-d62adb6e1115
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/anchore/syft
  dependency-version: 1.19.0
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: go-modules
- dependency-name: github.com/andybalholm/brotli
  dependency-version: 1.1.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/bmatcuk/doublestar/v4
  dependency-version: 4.8.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/cenkalti/backoff/v4
  dependency-version: 4.3.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/cloudflare/circl
  dependency-version: 1.6.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/containerd/stargz-snapshotter/estargz
  dependency-version: 0.16.3
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/cpuguy83/dockercfg
  dependency-version: 0.3.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/cyphar/filepath-securejoin
  dependency-version: 0.4.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/docker/cli
  dependency-version: 28.0.4+incompatible
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: go-modules
- dependency-name: github.com/docker/distribution
  dependency-version: 2.8.3+incompatible
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/docker/docker-credential-helpers
  dependency-version: 0.8.2
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/gabriel-vasile/mimetype
  dependency-version: 1.4.9
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/go-git/go-billy/v5
  dependency-version: 5.6.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/go-git/go-git/v5
  dependency-version: 5.14.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/go-ole/go-ole
  dependency-version: 1.3.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/golang/groupcache
  dependency-version: 0.0.0-20241129210726-2c02b8208cf8
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/google/go-containerregistry
  dependency-version: 0.20.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/huandu/xstrings
  dependency-version: 1.5.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/jinzhu/copier
  dependency-version: 0.4.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/klauspost/compress
  dependency-version: 1.18.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/klauspost/pgzip
  dependency-version: 1.2.6
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/knqyf263/go-rpmdb
  dependency-version: 0.1.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/magiconair/properties
  dependency-version: 1.8.9
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/mattn/go-runewidth
  dependency-version: 0.0.16
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/moby/sys/sequential
  dependency-version: 0.6.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/moby/sys/user
  dependency-version: 0.4.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/moby/term
  dependency-version: 0.5.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/nwaples/rardecode
  dependency-version: 1.1.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/opencontainers/image-spec
  dependency-version: 1.1.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/pierrec/lz4/v4
  dependency-version: 4.1.22
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/pjbgf/sha1cd
  dependency-version: 0.3.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/rivo/uniseg
  dependency-version: 0.4.7
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/sassoftware/go-rpmutils
  dependency-version: 0.4.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/shirou/gopsutil/v3
  dependency-version: 3.24.5
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/shopspring/decimal
  dependency-version: 1.4.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/skeema/knownhosts
  dependency-version: 1.3.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/spdx/tools-golang
  dependency-version: 0.5.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/spf13/afero
  dependency-version: 1.14.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/spf13/cast
  dependency-version: 1.7.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/sylabs/sif/v2
  dependency-version: 2.21.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/sylabs/squashfs
  dependency-version: 1.0.6
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: go-modules
- dependency-name: github.com/tklauser/go-sysconf
  dependency-version: 0.3.15
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/tklauser/numcpus
  dependency-version: 0.10.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/vbatts/go-mtree
  dependency-version: 0.5.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/vbatts/tar-split
  dependency-version: 0.11.6
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/vifraa/gopom
  dependency-version: 1.0.0
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: go-modules
- dependency-name: github.com/wagoodman/go-partybus
  dependency-version: 0.0.0-20230516145632-8ccac152c651
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/wagoodman/go-progress
  dependency-version: 0.0.0-20230925121702-07e42b3cdba0
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/yusufpapurcu/wmi
  dependency-version: 1.2.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: golang.org/x/crypto
  dependency-version: 0.37.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/mod
  dependency-version: 0.24.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/net
  dependency-version: 0.39.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/sync
  dependency-version: 0.13.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/sys
  dependency-version: 0.32.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/text
  dependency-version: 0.24.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/xerrors
  dependency-version: 0.0.0-20231012003039-104605ab7028
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: google.golang.org/genproto/googleapis/rpc
  dependency-version: 0.0.0-20241223144023-3abc09e42ca8
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: google.golang.org/grpc
  dependency-version: 1.67.3
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.6
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Apr 25, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file go Pull requests that update go code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants