tomsweeneyredhat
433f7b7ee2
[release-1.14] Bump google.golang.org/protobuf to v1.33.0
...
As the title says. Addresses CVE-2024-24786
https://issues.redhat.com/browse/RHEL-28226
https://issues.redhat.com/browse/RHEL-28235
[NO NEW TESTS NEEDED]
Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com >
2024-03-15 19:08:37 -04:00
Miloslav Trmač
60ee543f7f
Update c/image for golang.org/x/exp
...
> go get github.com/containers/image/v5@main
> go mod tidy && go mod vendor
This updates c/image with a new version of x/exp.
That package has changed API in an incompatible way,
so just bumping x/exp (as in https://github.com/containers/skopeo/pull/2060 )
would break Skopeo builds.
This updates both c/image and x/exp in lockstep (and nothing
needs updating in Skopeo itself for the x/exp breakage).
Signed-off-by: Miloslav Trmač <mitr@redhat.com >
2023-08-02 22:41:44 +02:00
Miloslav Trmač
bfe82593c8
Update c/image from the main branch
...
> go get github.com/containers/image/v5@main
> make vendor
Signed-off-by: Miloslav Trmač <mitr@redhat.com >
2023-04-01 12:24:04 +02:00
Miloslav Trmač
4b9ffac0cc
Update for c/image's update of github.com/gobuffalo/pop
...
> go get github.com/containers/image/v5@main
> go mod tidy -go=1.16 && go mod tidy -go=1.17
> make vendor
The (go mod tidy) pair is necessary to keep c/image CI working.
Signed-off-by: Miloslav Trmač <mitr@redhat.com >
2022-08-23 22:00:00 +02:00
Miloslav Trmač
06be7a1559
Vendor in c/image with sigstore support
...
Signed-off-by: Miloslav Trmač <mitr@redhat.com >
2022-07-12 13:46:56 +02:00
Miloslav Trmač
e19b57c3b9
Update github.com/containerd/containerd to v1.5.7
...
... to include a fix for
https://github.com/advisories/GHSA-c2h3-6mxw-7mvq .
(Note that Skopeo doesn't depend on the vulnerable code,
so this is primarily to avoid dependency checker warnings.)
Signed-off-by: Miloslav Trmač <mitr@redhat.com >
2021-10-05 18:45:24 +02:00
dependabot[bot]
69decaeb1d
Bump github.com/containers/common from 0.37.1 to 0.38.0
...
Bumps [github.com/containers/common](https://github.com/containers/common ) from 0.37.1 to 0.38.0.
- [Release notes](https://github.com/containers/common/releases )
- [Commits](https://github.com/containers/common/compare/v0.37.1...v0.38.0 )
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com >
2021-05-10 15:56:42 -04:00
dependabot-preview[bot]
aff1b6215b
Bump github.com/containers/ocicrypt from 1.0.3 to 1.1.0
...
Bumps [github.com/containers/ocicrypt](https://github.com/containers/ocicrypt ) from 1.0.3 to 1.1.0.
- [Release notes](https://github.com/containers/ocicrypt/releases )
- [Commits](https://github.com/containers/ocicrypt/compare/v1.0.3...v1.1.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com >
Signed-off-by: Miloslav Trmač <mitr@redhat.com >
2021-02-03 12:42:56 +01:00
dependabot-preview[bot]
a31d6069dc
Bump github.com/containers/common from 0.11.2 to 0.11.4
...
Bumps [github.com/containers/common](https://github.com/containers/common ) from 0.11.2 to 0.11.4.
- [Release notes](https://github.com/containers/common/releases )
- [Commits](https://github.com/containers/common/compare/v0.11.2...v0.11.4 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com >
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com >
2020-05-22 13:35:57 -04:00
