Tom Sweeney 30da27d3c4 [release-1.20] Bump Go Jose v4.1.4, CVE-2026-34986 ...

Bump github.com/go-jose/go-jose/v4 to v4.1.4 to address CVE-2026-34986

Fixes: https://redhat.atlassian.net/browse/RHEL-165034, https://redhat.atlassian.net/browse/RHEL-165006

Signed-off-by: Tom Sweeney <tsweeney@redhat.com>

2026-04-16 18:02:29 -04:00

..

acarl005/stripansi

…

BurntSushi/toml

fix(deps): update module github.com/containers/storage to v1.58.0

2025-04-16 15:55:29 +00:00

containerd

Update module github.com/containers/image/v5 to v5.36.0

2025-07-15 21:58:37 +00:00

containers

Update module github.com/containers/common to v0.64.0

2025-07-17 19:03:14 +00:00

coreos/go-oidc/v3

fix(deps): update module github.com/containers/image/v5 to v5.34.0

2025-01-31 21:34:59 +01:00

cyberphone/json-canonicalization

Update c/image after https://github.com/containers/image/pull/1810

2023-01-23 17:39:09 +01:00

cyphar/filepath-securejoin

fix(deps): update module github.com/containers/storage to v1.58.0

2025-04-16 15:55:29 +00:00

davecgh/go-spew

…

distribution/reference

Update c/image after https://github.com/containers/image/pull/2408

2024-05-14 00:27:15 +02:00

docker

chore(deps): update module github.com/docker/docker to v28.3.3+incompatible [security]

2025-08-01 08:57:22 +00:00

felixge/httpsnoop

fix(deps): update module github.com/containers/storage to v1.52.0

2024-01-20 00:15:27 +01:00

go-jose/go-jose/v4

[release-1.20] Bump Go Jose v4.1.4, CVE-2026-34986

2026-04-16 18:02:29 -04:00

go-logr

Update module github.com/containers/image/v5 to v5.36.0

2025-07-15 21:58:37 +00:00

gogo/protobuf

Update c/image for golang.org/x/exp

2023-08-02 22:41:44 +02:00

golang

Update c/image after https://github.com/containers/image/pull/2408

2024-05-14 00:27:15 +02:00

google

fix(deps): update module github.com/containers/image/v5 to v5.35.0

2025-05-20 21:48:36 +02:00

gorilla/mux

fix(deps): update module github.com/containers/storage to v1.52.0

2024-01-20 00:15:27 +01:00

hashicorp

Update module github.com/containers/image/v5 to v5.36.0

2025-07-15 21:58:37 +00:00

inconshreveable/mousetrap

fix(deps): update module github.com/spf13/cobra to v1.7.0

2023-04-05 16:29:43 +00:00

json-iterator/go

Update go.mod to Go 1.17

2022-06-08 16:46:38 +02:00

klauspost

fix(deps): update module github.com/containers/storage to v1.58.0

2025-04-16 15:55:29 +00:00

letsencrypt/boulder

fix(deps): update module github.com/containers/image/v5 to v5.33.0

2024-11-12 20:34:31 +01:00

Masterminds/semver/v3

Update module github.com/Masterminds/semver/v3 to v3.4.0

2025-06-30 15:53:16 +00:00

mattn

Update module github.com/containers/image/v5 to v5.36.0

2025-07-15 21:58:37 +00:00

Microsoft

Update module github.com/containers/image/v5 to v5.36.0

2025-07-15 21:58:37 +00:00

miekg/pkcs11

Update go.mod to Go 1.17

2022-06-08 16:46:38 +02:00

mistifyio/go-zfs/v3

Update module github.com/containers/storage to v1.47.0

2023-06-27 00:12:20 +00:00

moby

fix(deps): update module github.com/containers/storage to v1.58.0

2025-04-16 15:55:29 +00:00

modern-go

Update go.mod to Go 1.17

2022-06-08 16:46:38 +02:00

opencontainers

Update opencontainers/image-spec after https://github.com/opencontainers/image-spec/pull/1253 .

2025-07-17 19:25:53 +02:00

pkg/errors

…

pmezard/go-difflib

…

proglottis/gpgme

fix(deps): update module github.com/containers/image/v5 to v5.34.0

2025-01-31 21:34:59 +01:00

rivo/uniseg

Update c/image after https://github.com/containers/image/pull/2408

2024-05-14 00:27:15 +02:00

santhosh-tekuri/jsonschema/v6

Update opencontainers/image-spec after https://github.com/opencontainers/image-spec/pull/1253 .

2025-07-17 19:25:53 +02:00

secure-systems-lab/go-securesystemslib

fix(deps): update github.com/containers/image/v5 digest to 58d5eb6

2023-09-04 18:19:51 +00:00

segmentio/ksuid

Add support for Fulcio and Rekor, and --sign-by-sigstore=param-file

2023-01-14 13:33:57 +01:00

sigstore

Update module github.com/containers/image/v5 to v5.36.0

2025-07-15 21:58:37 +00:00

sirupsen/logrus

Update module github.com/sirupsen/logrus to v1.9.3

2023-06-03 23:06:27 +00:00

skratchdot/open-golang

Add support for Fulcio and Rekor, and --sign-by-sigstore=param-file

2023-01-14 13:33:57 +01:00

smallstep/pkcs7

fix(deps): update module github.com/containers/ocicrypt to v1.2.1

2024-12-16 18:06:00 +00:00

spf13

Update module github.com/spf13/pflag to v1.0.7

2025-07-17 19:26:14 +00:00

stefanberger/go-pkcs11uri

fix(deps): update module github.com/containers/common to v0.59.0

2024-05-23 13:34:45 +00:00

stretchr/testify

fix(deps): update module github.com/stretchr/testify to v1.10.0

2024-11-25 18:46:39 +00:00

sylabs/sif/v2

fix(deps): update module github.com/containers/image/v5 to v5.34.0

2025-01-31 21:34:59 +01:00

tchap/go-patricia/v2

Update module github.com/containers/image/v5 to v5.36.0

2025-07-15 21:58:37 +00:00

titanous/rocacheck

Vendor in c/image with sigstore support

2022-07-12 13:46:56 +02:00

ulikunitz/xz

Update c/image after https://github.com/containers/image/pull/2408

2024-05-14 00:27:15 +02:00

vbatts/tar-split

fix(deps): update module github.com/containers/storage to v1.58.0

2025-04-16 15:55:29 +00:00

vbauerster/mpb/v8

Update module github.com/containers/image/v5 to v5.36.0

2025-07-15 21:58:37 +00:00

VividCortex/ewma

Update go.mod to Go 1.17

2022-06-08 16:46:38 +02:00