tomsweeneyredhat
670947188f
[release-1.16] Fix CVE-2025-27144
...
Addresses CVE-2025-27144 by bumping github.com/go-jose/go-jose/v3 to
v3.0.4 and github.com/go-jose/go-jose/v4 to v4.0.5
Fixes: https://issues.redhat.com/browse/OCPBUGS-51251 ,
https://issues.redhat.com/browse/OCPBUGS-51252
[NO NEW TESTS NEEDED]
Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
2025-03-03 21:12:23 -05:00
tomsweeneyredhat
a47ee582a3
[release-1.16] Bump c/common to v0.60.2, c/image to v5.32.2
...
Bumping to the latest version of c/common and c/image to get
the latest updates for zstd:chunked and the multiple
signature keys updates.
Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
2024-08-21 14:43:05 -04:00
renovate[bot]
273e2d0c60
fix(deps): update module golang.org/x/term to v0.20.0
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-05-05 15:04:33 +00:00
renovate[bot]
897619f6b5
fix(deps): update github.com/containers/image/v5 digest to 58d5eb6
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-09-04 18:19:51 +00:00
Miloslav Trmač
06be7a1559
Vendor in c/image with sigstore support
...
Signed-off-by: Miloslav Trmač <mitr@redhat.com>
2022-07-12 13:46:56 +02:00
