Lokesh Mandvekar
20447df139
bump golang.org/x/net to v0.8.0
...
Resolves: CVE-2022-41723
Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-41723
Signed-off-by: Lokesh Mandvekar <lsm5@fedoraproject.org >
2023-03-15 18:58:10 +05:30
Miloslav Trmač
643a2359e4
Update c/image after https://github.com/containers/image/pull/1816
...
... to work around some of the "unexpected EOF" failures.
Signed-off-by: Miloslav Trmač <mitr@redhat.com >
2023-02-09 20:36:27 +01:00
Colin Walters
960713da32
vendor: Bump golang.org/x/net to 4.0
...
I originally thought I needed this to fix a build, but that
was apparently not the case.
Signed-off-by: Colin Walters <walters@verbum.org >
2022-12-13 16:36:57 -05:00
Daniel J Walsh
ee84302b60
Update vendor containers/(common,image)
...
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com >
2022-09-30 06:38:07 -04:00
Miloslav Trmač
06be7a1559
Vendor in c/image with sigstore support
...
Signed-off-by: Miloslav Trmač <mitr@redhat.com >
2022-07-12 13:46:56 +02:00
Daniel J Walsh
923c58a8ee
Update the vendor of containers/common
...
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com >
2022-01-20 13:30:07 -05:00
dependabot-preview[bot]
a31d6069dc
Bump github.com/containers/common from 0.11.2 to 0.11.4
...
Bumps [github.com/containers/common](https://github.com/containers/common ) from 0.11.2 to 0.11.4.
- [Release notes](https://github.com/containers/common/releases )
- [Commits](https://github.com/containers/common/compare/v0.11.2...v0.11.4 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com >
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com >
2020-05-22 13:35:57 -04:00
dependabot-preview[bot]
325327dc3f
Bump github.com/containers/image/v5 from 5.3.1 to 5.4.0
...
Bumps [github.com/containers/image/v5](https://github.com/containers/image ) from 5.3.1 to 5.4.0.
- [Release notes](https://github.com/containers/image/releases )
- [Commits](https://github.com/containers/image/compare/v5.3.1...v5.4.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com >
Signed-off-by: Miloslav Trmač <mitr@redhat.com >
2020-03-31 22:19:09 +02:00
Valentin Rothberg
ebfa1e936b
vendor.conf: pin branches to releases or commits
...
Most of the dependencies have been copied from libpod's vendor.conf
where such a cleanup has been executed recently.
Signed-off-by: Valentin Rothberg <rothberg@redhat.com >
2019-02-21 14:03:14 +01:00
Miloslav Trmač
67ffa00b1d
Run (make vendor)
...
Temporarily vendor opencontainers/image-spec from a fork
to fix "id" value duplication, which is detected and
refused by gojsonschema now
( https://github.com/opencontainers/image-spec/pull/750 ).
Signed-off-by: Miloslav Trmač <mitr@redhat.com >
2018-09-17 16:16:19 +02:00
Miloslav Trmač
14ea9f8bfd
Run (make vendor) for the first time.
...
This primarily adds vendor/github.com/containers/image/docs/ ,
but also updates other dependencies that are not pinned to a specific
commit.
2018-05-19 04:24:17 +02:00
Miloslav Trmač
60aa4aa82d
Vendor after merging mtrmac/image:305-cleanup
...
Signed-off-by: Miloslav Trmač <mitr@redhat.com >
2018-03-15 15:25:31 +01:00
Miloslav Trmač
63272a10d7
Vendor after merging mtrmac/image:docker-certs.d
2017-05-30 18:26:43 +02:00
Miloslav Trmač
69b9106646
Re-vendor, primarily for https://github.com/containers/storage/pull/11
...
containers/storage got new dependencies, so we will need to re-vendor
eventually anyway, and having this separate from other major work is
cleaner.
But the primary goal of this commit is to see whether it makes skopeo
buildable on OS X.
2017-05-11 13:07:14 +02:00
Miloslav Trmač
0caee746fb
Vendor after merging mtrmac/image:openpgp, + other updates
...
Primarily vendor after merging mtrmac/image:openpgp.
Then update for the SigningMechanism API change.
Also skip signing tests if the GPG mechanism does not support signing.
Also abort some of the tests early instead of trying to use invalid (or
nil) values.
The current master of image-tools does not build with Go 1.6, so keep
using an older release.
Also requires adding a few more dependencies of our updated
dependencies.
2017-03-29 20:54:18 +02:00
Erik Hollensbe
f0730043c6
vendor.conf,vendor: vndr update for containers/image
...
Signed-off-by: Erik Hollensbe <github@hollensbe.org >
2017-02-27 02:15:36 -08:00
Erik Hollensbe
1ee74864e9
Vendor after merging erikh/image:kube-fix
...
Based on https://github.com/projectatomic/skopeo/pull/289 by Erik
Hollensbe <github@hollensbe.org >
Signed-off-by: Miloslav Trmač <mitr@redhat.com >
2017-01-19 20:17:36 +01:00