Skip to content

Commit dff728d

Browse files
authored
Merge pull request #454 from linyows/fix/security-alerts-slack-docker
Resolve Dependabot security alerts (slack-go, docker/docker)
2 parents 3005d55 + 68ce4d3 commit dff728d

2 files changed

Lines changed: 151 additions & 175 deletions

File tree

go.mod

Lines changed: 47 additions & 53 deletions
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ require (
2323
github.com/mholt/archives v0.1.5
2424
github.com/migueleliasweb/go-github-mock v1.5.0
2525
github.com/prometheus/client_golang v1.23.2
26-
github.com/slack-go/slack v0.23.0
26+
github.com/slack-go/slack v0.23.1
2727
go.opentelemetry.io/otel v1.43.0
2828
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.43.0
2929
go.opentelemetry.io/otel/exporters/prometheus v0.65.0
@@ -40,33 +40,34 @@ require (
4040
require (
4141
4d63.com/gocheckcompilerdirectives v1.3.0 // indirect
4242
4d63.com/gochecknoglobals v0.2.2 // indirect
43-
buf.build/gen/go/bufbuild/bufplugin/protocolbuffers/go v1.36.6-20250121211742-6d880cc6cc8d.1 // indirect
44-
buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go v1.36.11-20260209202127-80ab13bee0bf.1 // indirect
45-
buf.build/gen/go/bufbuild/registry/connectrpc/go v1.18.1-20250606164443-9d1800bf4ccc.1 // indirect
46-
buf.build/gen/go/bufbuild/registry/protocolbuffers/go v1.36.6-20250606164443-9d1800bf4ccc.1 // indirect
47-
buf.build/gen/go/pluginrpc/pluginrpc/protocolbuffers/go v1.36.6-20241007202033-cf42259fcbfc.1 // indirect
48-
buf.build/go/app v0.1.0 // indirect
49-
buf.build/go/bufplugin v0.9.0 // indirect
43+
buf.build/gen/go/bufbuild/bufplugin/protocolbuffers/go v1.36.11-20250718181942-e35f9b667443.1 // indirect
44+
buf.build/gen/go/bufbuild/protodescriptor/protocolbuffers/go v1.36.11-20250109164928-1da0de137947.1 // indirect
45+
buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go v1.36.11-20260415201107-50325440f8f2.1 // indirect
46+
buf.build/gen/go/bufbuild/registry/connectrpc/go v1.19.2-20260126144947-819582968857.1 // indirect
47+
buf.build/gen/go/bufbuild/registry/protocolbuffers/go v1.36.11-20260126144947-819582968857.1 // indirect
48+
buf.build/gen/go/pluginrpc/pluginrpc/protocolbuffers/go v1.36.11-20241007202033-cf42259fcbfc.1 // indirect
49+
buf.build/go/app v0.2.1-0.20260407195847-833f8f978cda // indirect
50+
buf.build/go/bufplugin v0.10.0 // indirect
51+
buf.build/go/bufprivateusage v0.1.0 // indirect
5052
buf.build/go/interrupt v1.1.0 // indirect
51-
buf.build/go/protovalidate v1.1.0 // indirect
53+
buf.build/go/protovalidate v1.2.0 // indirect
5254
buf.build/go/protoyaml v0.6.0 // indirect
5355
buf.build/go/spdx v0.2.0 // indirect
54-
buf.build/go/standard v0.1.0 // indirect
56+
buf.build/go/standard v0.1.1-0.20260325175353-2b287e071df5 // indirect
5557
cel.dev/expr v0.25.1 // indirect
5658
cloud.google.com/go v0.123.0 // indirect
5759
cloud.google.com/go/auth v0.19.0 // indirect
5860
cloud.google.com/go/auth/oauth2adapt v0.2.8 // indirect
5961
cloud.google.com/go/compute/metadata v0.9.0 // indirect
6062
cloud.google.com/go/iam v1.7.0 // indirect
6163
cloud.google.com/go/monitoring v1.24.3 // indirect
62-
connectrpc.com/connect v1.19.1 // indirect
63-
connectrpc.com/otelconnect v0.7.2 // indirect
64+
connectrpc.com/connect v1.19.2 // indirect
65+
connectrpc.com/otelconnect v0.9.0 // indirect
6466
github.com/4meepo/tagalign v1.4.2 // indirect
6567
github.com/Abirdcfly/dupword v0.1.3 // indirect
6668
github.com/Antonboom/errname v1.1.0 // indirect
6769
github.com/Antonboom/nilnil v1.1.0 // indirect
6870
github.com/Antonboom/testifylint v1.6.1 // indirect
69-
github.com/Azure/go-ansiterm v0.0.0-20250102033503-faa5f7b0171c // indirect
7071
github.com/BurntSushi/toml v1.6.0 // indirect
7172
github.com/Djarvur/go-err113 v0.0.0-20210108212216-aea10b59be24 // indirect
7273
github.com/GaijinEntertainment/go-exhaustruct/v3 v3.3.1 // indirect
@@ -113,9 +114,9 @@ require (
113114
github.com/bombsimon/wsl/v4 v4.7.0 // indirect
114115
github.com/breml/bidichk v0.3.3 // indirect
115116
github.com/breml/errchkjson v0.4.1 // indirect
116-
github.com/bufbuild/buf v1.55.1 // indirect
117-
github.com/bufbuild/protocompile v0.14.1 // indirect
118-
github.com/bufbuild/protoplugin v0.0.0-20250218205857-750e09ce93e1 // indirect
117+
github.com/bufbuild/buf v1.69.0 // indirect
118+
github.com/bufbuild/protocompile v0.14.2-0.20260429155904-12ef1ef2ce91 // indirect
119+
github.com/bufbuild/protoplugin v0.0.0-20260414125817-25d1d281b46b // indirect
119120
github.com/butuzov/ireturn v0.4.0 // indirect
120121
github.com/butuzov/mirror v1.3.0 // indirect
121122
github.com/catenacyber/perfsprint v0.9.1 // indirect
@@ -130,27 +131,24 @@ require (
130131
github.com/charmbracelet/x/term v0.2.2 // indirect
131132
github.com/chavacava/garif v0.1.0 // indirect
132133
github.com/ckaznocha/intrange v0.3.1 // indirect
134+
github.com/cli/browser v1.3.0 // indirect
133135
github.com/clipperhouse/displaywidth v0.6.1 // indirect
134136
github.com/clipperhouse/stringish v0.1.1 // indirect
135137
github.com/clipperhouse/uax29/v2 v2.3.0 // indirect
136138
github.com/cncf/xds/go v0.0.0-20251210132809-ee656c7534f5 // indirect
137139
github.com/containerd/errdefs v1.0.0 // indirect
138140
github.com/containerd/errdefs/pkg v0.3.0 // indirect
139-
github.com/containerd/stargz-snapshotter/estargz v0.18.1 // indirect
140141
github.com/cpuguy83/go-md2man/v2 v2.0.7 // indirect
141-
github.com/creack/pty v1.1.24 // indirect
142142
github.com/curioswitch/go-reassign v0.3.0 // indirect
143143
github.com/daixiang0/gci v0.13.6 // indirect
144144
github.com/dave/dst v0.27.3 // indirect
145145
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
146146
github.com/denis-tingaikin/go-header v0.5.0 // indirect
147147
github.com/distribution/reference v0.6.0 // indirect
148148
github.com/dlclark/regexp2 v1.11.5 // indirect
149-
github.com/docker/cli v29.2.0+incompatible // indirect
150-
github.com/docker/distribution v2.8.3+incompatible // indirect
151-
github.com/docker/docker v28.5.2+incompatible // indirect
152-
github.com/docker/docker-credential-helpers v0.9.4 // indirect
153-
github.com/docker/go-connections v0.6.0 // indirect
149+
github.com/docker/cli v29.4.3+incompatible // indirect
150+
github.com/docker/docker-credential-helpers v0.9.6 // indirect
151+
github.com/docker/go-connections v0.7.0 // indirect
154152
github.com/docker/go-units v0.5.0 // indirect
155153
github.com/dsnet/compress v0.0.2-0.20230904184137-39efe44ab707 // indirect
156154
github.com/envoyproxy/go-control-plane/envoy v1.36.0 // indirect
@@ -162,7 +160,6 @@ require (
162160
github.com/fsnotify/fsnotify v1.9.0 // indirect
163161
github.com/fzipp/gocyclo v0.6.0 // indirect
164162
github.com/ghostiam/protogetter v0.3.15 // indirect
165-
github.com/go-chi/chi/v5 v5.2.3 // indirect
166163
github.com/go-critic/go-critic v0.13.0 // indirect
167164
github.com/go-jose/go-jose/v4 v4.1.4 // indirect
168165
github.com/go-logr/logr v1.4.3 // indirect
@@ -177,7 +174,7 @@ require (
177174
github.com/go-viper/mapstructure/v2 v2.4.0 // indirect
178175
github.com/go-xmlfmt/xmlfmt v1.1.3 // indirect
179176
github.com/gobwas/glob v0.2.3 // indirect
180-
github.com/gofrs/flock v0.12.1 // indirect
177+
github.com/gofrs/flock v0.13.0 // indirect
181178
github.com/golangci/dupl v0.0.0-20250308024227-f665c8d69b32 // indirect
182179
github.com/golangci/go-printf-func-name v0.1.0 // indirect
183180
github.com/golangci/gofmt v0.0.0-20250106114630-d62b90e6713d // indirect
@@ -187,8 +184,8 @@ require (
187184
github.com/golangci/plugin-module-register v0.1.1 // indirect
188185
github.com/golangci/revgrep v0.8.0 // indirect
189186
github.com/golangci/unconvert v0.0.0-20250410112200-a129a6e6413e // indirect
190-
github.com/google/cel-go v0.26.1 // indirect
191-
github.com/google/go-containerregistry v0.20.7 // indirect
187+
github.com/google/cel-go v0.28.0 // indirect
188+
github.com/google/go-containerregistry v0.21.6 // indirect
192189
github.com/google/s2a-go v0.1.9 // indirect
193190
github.com/google/uuid v1.6.0 // indirect
194191
github.com/googleapis/enterprise-certificate-proxy v0.3.14 // indirect
@@ -217,7 +214,7 @@ require (
217214
github.com/karamaru-alpha/copyloopvar v1.2.1 // indirect
218215
github.com/kisielk/errcheck v1.9.0 // indirect
219216
github.com/kkHAIKE/contextcheck v1.1.6 // indirect
220-
github.com/klauspost/compress v1.18.2 // indirect
217+
github.com/klauspost/compress v1.18.6 // indirect
221218
github.com/klauspost/pgzip v1.2.6 // indirect
222219
github.com/kulti/thelper v0.6.3 // indirect
223220
github.com/kunwardeep/paralleltest v1.0.14 // indirect
@@ -236,16 +233,16 @@ require (
236233
github.com/matoous/godox v1.1.0 // indirect
237234
github.com/matryer/is v1.4.1 // indirect
238235
github.com/mattn/go-colorable v0.1.14 // indirect
239-
github.com/mattn/go-isatty v0.0.20 // indirect
236+
github.com/mattn/go-isatty v0.0.22 // indirect
240237
github.com/mattn/go-runewidth v0.0.19 // indirect
241238
github.com/mgechev/revive v1.9.0 // indirect
242239
github.com/mikelolasagasti/xz v1.0.1 // indirect
243240
github.com/minio/minlz v1.0.1 // indirect
244241
github.com/mitchellh/go-homedir v1.1.0 // indirect
245242
github.com/moby/docker-image-spec v1.3.1 // indirect
246-
github.com/moby/term v0.5.2 // indirect
243+
github.com/moby/moby/api v1.54.2 // indirect
244+
github.com/moby/moby/client v0.4.1 // indirect
247245
github.com/moricho/tparallel v0.3.2 // indirect
248-
github.com/morikuni/aec v1.0.0 // indirect
249246
github.com/muesli/termenv v0.16.0 // indirect
250247
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
251248
github.com/nakabonne/nestif v0.3.1 // indirect
@@ -258,9 +255,8 @@ require (
258255
github.com/opencontainers/go-digest v1.0.0 // indirect
259256
github.com/opencontainers/image-spec v1.1.1 // indirect
260257
github.com/pelletier/go-toml/v2 v2.2.4 // indirect
258+
github.com/petermattis/goid v0.0.0-20260330135022-df67b199bc81 // indirect
261259
github.com/pierrec/lz4/v4 v4.1.22 // indirect
262-
github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c // indirect
263-
github.com/pkg/errors v0.9.1 // indirect
264260
github.com/planetscale/vtprotobuf v0.6.1-0.20240319094008-0393e58bdf10 // indirect
265261
github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
266262
github.com/polyfloyd/go-errorlint v1.8.0 // indirect
@@ -274,7 +270,7 @@ require (
274270
github.com/quasilyte/regex/syntax v0.0.0-20210819130434-b3f0c404a727 // indirect
275271
github.com/quasilyte/stdinfo v0.0.0-20220114132959-f7386bf02567 // indirect
276272
github.com/quic-go/qpack v0.6.0 // indirect
277-
github.com/quic-go/quic-go v0.57.0 // indirect
273+
github.com/quic-go/quic-go v0.59.0 // indirect
278274
github.com/raeperd/recvcheck v0.2.0 // indirect
279275
github.com/rivo/uniseg v0.4.7 // indirect
280276
github.com/rogpeppe/go-internal v1.14.1 // indirect
@@ -288,10 +284,10 @@ require (
288284
github.com/sashamelentyev/interfacebloat v1.1.0 // indirect
289285
github.com/sashamelentyev/usestdlibvars v1.28.0 // indirect
290286
github.com/securego/gosec/v2 v2.22.3 // indirect
291-
github.com/segmentio/asm v1.2.0 // indirect
292-
github.com/segmentio/encoding v0.5.1 // indirect
287+
github.com/segmentio/asm v1.2.1 // indirect
288+
github.com/segmentio/encoding v0.5.4 // indirect
293289
github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 // indirect
294-
github.com/sirupsen/logrus v1.9.3 // indirect
290+
github.com/sirupsen/logrus v1.9.4 // indirect
295291
github.com/sivchari/containedctx v1.0.3 // indirect
296292
github.com/sonatard/noctx v0.1.0 // indirect
297293
github.com/sorairolake/lzip-go v0.3.8 // indirect
@@ -304,13 +300,13 @@ require (
304300
github.com/spiffe/go-spiffe/v2 v2.6.0 // indirect
305301
github.com/ssgreg/nlreturn/v2 v2.2.1 // indirect
306302
github.com/stbenjam/no-sprintf-host-port v0.2.0 // indirect
307-
github.com/stoewer/go-strcase v1.3.1 // indirect
308303
github.com/stretchr/objx v0.5.2 // indirect
309304
github.com/stretchr/testify v1.11.1 // indirect
310305
github.com/subosito/gotenv v1.6.0 // indirect
311306
github.com/tdakkota/asciicheck v0.4.1 // indirect
312307
github.com/tetafro/godot v1.5.1 // indirect
313-
github.com/tetratelabs/wazero v1.9.0 // indirect
308+
github.com/tetratelabs/wazero v1.11.0 // indirect
309+
github.com/tidwall/btree v1.8.1 // indirect
314310
github.com/timakin/bodyclose v0.0.0-20241222091800-1db5c5ca4d67 // indirect
315311
github.com/timonwong/loggercheck v0.11.0 // indirect
316312
github.com/tomarrell/wrapcheck/v2 v2.11.0 // indirect
@@ -320,7 +316,6 @@ require (
320316
github.com/ultraware/whitespace v0.2.0 // indirect
321317
github.com/uudashr/gocognit v1.2.0 // indirect
322318
github.com/uudashr/iface v1.3.1 // indirect
323-
github.com/vbatts/tar-split v0.12.2 // indirect
324319
github.com/xen0n/gosmopolitan v1.3.0 // indirect
325320
github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e // indirect
326321
github.com/yagipy/maintidx v1.0.0 // indirect
@@ -337,8 +332,7 @@ require (
337332
go.opentelemetry.io/auto/sdk v1.2.1 // indirect
338333
go.opentelemetry.io/contrib/detectors/gcp v1.39.0 // indirect
339334
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.64.0 // indirect
340-
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.64.0 // indirect
341-
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.39.0 // indirect
335+
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.68.0 // indirect
342336
go.opentelemetry.io/otel/trace v1.43.0 // indirect
343337
go.opentelemetry.io/proto/otlp v1.10.0 // indirect
344338
go.uber.org/automaxprocs v1.6.0 // indirect
@@ -348,27 +342,27 @@ require (
348342
go.yaml.in/yaml/v2 v2.4.4 // indirect
349343
go.yaml.in/yaml/v3 v3.0.4 // indirect
350344
go4.org v0.0.0-20230225012048-214862532bf5 // indirect
351-
golang.org/x/crypto v0.49.0 // indirect
352-
golang.org/x/exp v0.0.0-20251209150349-8475f28825e9 // indirect
345+
golang.org/x/crypto v0.51.0 // indirect
346+
golang.org/x/exp v0.0.0-20260410095643-746e56fc9e2f // indirect
353347
golang.org/x/exp/typeparams v0.0.0-20250210185358-939b2ce775ac // indirect
354-
golang.org/x/mod v0.33.0 // indirect
355-
golang.org/x/net v0.52.0 // indirect
348+
golang.org/x/mod v0.36.0 // indirect
349+
golang.org/x/net v0.54.0 // indirect
356350
golang.org/x/sync v0.20.0 // indirect
357-
golang.org/x/sys v0.42.0 // indirect
358-
golang.org/x/term v0.41.0 // indirect
359-
golang.org/x/text v0.35.0 // indirect
351+
golang.org/x/sys v0.44.0 // indirect
352+
golang.org/x/term v0.43.0 // indirect
353+
golang.org/x/text v0.37.0 // indirect
360354
golang.org/x/time v0.15.0 // indirect
361-
golang.org/x/tools v0.42.0 // indirect
355+
golang.org/x/tools v0.45.0 // indirect
362356
google.golang.org/genproto v0.0.0-20260319201613-d00831a3d3e7 // indirect
363-
google.golang.org/genproto/googleapis/api v0.0.0-20260401024825-9d38bb4040a9 // indirect
364-
google.golang.org/genproto/googleapis/rpc v0.0.0-20260401024825-9d38bb4040a9 // indirect
357+
google.golang.org/genproto/googleapis/api v0.0.0-20260427160629-7cedc36a6bc4 // indirect
358+
google.golang.org/genproto/googleapis/rpc v0.0.0-20260427160629-7cedc36a6bc4 // indirect
365359
gopkg.in/alexcesaro/quotedprintable.v3 v3.0.0-20150716171945-2caba252f4dc // indirect
366360
gopkg.in/yaml.v2 v2.4.0 // indirect
367361
gopkg.in/yaml.v3 v3.0.1 // indirect
368-
gotest.tools/v3 v3.5.2 // indirect
369362
honnef.co/go/tools v0.6.1 // indirect
370363
mvdan.cc/gofumpt v0.8.0 // indirect
371364
mvdan.cc/unparam v0.0.0-20250301125049-0df0534333a4 // indirect
365+
mvdan.cc/xurls/v2 v2.6.0 // indirect
372366
pluginrpc.com/pluginrpc v0.5.0 // indirect
373367
)
374368

0 commit comments

Comments
 (0)