Skip to content

Commit 31d5bb1

Browse files
renovate[bot]renovate[bot]
authored
fix(deps): lock file maintenance vulnfeeds
1 parent 7bac569 commit 31d5bb1

10 files changed

Lines changed: 320 additions & 274 deletions

File tree

‎vulnfeeds/cmd/alpine/Dockerfile‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
# See the License for the specific language governing permissions and
1313
# limitations under the License.
1414

15-
FROM golang:1.24.1-alpine@sha256:43c094ad24b6ac0546c62193baeb3e6e49ce14d3250845d166c77c25f64b0386 AS GO_BUILD
15+
FROM golang:1.25.7-alpine@sha256:f6751d823c26342f9506c03797d2527668d095b0a15f1862cddb4d927a7a4ced AS GO_BUILD
1616

1717
RUN mkdir /src
1818
WORKDIR /src

‎vulnfeeds/cmd/combine-to-osv/Dockerfile‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
# See the License for the specific language governing permissions and
1313
# limitations under the License.
1414

15-
FROM golang:1.24.1-alpine@sha256:43c094ad24b6ac0546c62193baeb3e6e49ce14d3250845d166c77c25f64b0386 AS GO_BUILD
15+
FROM golang:1.25.7-alpine@sha256:f6751d823c26342f9506c03797d2527668d095b0a15f1862cddb4d927a7a4ced AS GO_BUILD
1616

1717
RUN mkdir /src
1818
WORKDIR /src

‎vulnfeeds/cmd/cpe-repo-gen/Dockerfile‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
# See the License for the specific language governing permissions and
1313
# limitations under the License.
1414

15-
FROM golang:1.24.1-alpine@sha256:43c094ad24b6ac0546c62193baeb3e6e49ce14d3250845d166c77c25f64b0386 AS GO_BUILD
15+
FROM golang:1.25.7-alpine@sha256:f6751d823c26342f9506c03797d2527668d095b0a15f1862cddb4d927a7a4ced AS GO_BUILD
1616

1717
RUN mkdir /src
1818
WORKDIR /src

‎vulnfeeds/cmd/debian/Dockerfile‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
# See the License for the specific language governing permissions and
1313
# limitations under the License.
1414

15-
FROM golang:1.24.1-alpine@sha256:43c094ad24b6ac0546c62193baeb3e6e49ce14d3250845d166c77c25f64b0386 AS GO_BUILD
15+
FROM golang:1.25.7-alpine@sha256:f6751d823c26342f9506c03797d2527668d095b0a15f1862cddb4d927a7a4ced AS GO_BUILD
1616

1717
RUN mkdir /src
1818
WORKDIR /src

‎vulnfeeds/cmd/download-cves/Dockerfile‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
# See the License for the specific language governing permissions and
1313
# limitations under the License.
1414

15-
FROM golang:1.24.1-alpine@sha256:43c094ad24b6ac0546c62193baeb3e6e49ce14d3250845d166c77c25f64b0386 AS GO_BUILD
15+
FROM golang:1.25.7-alpine@sha256:f6751d823c26342f9506c03797d2527668d095b0a15f1862cddb4d927a7a4ced AS GO_BUILD
1616

1717
RUN mkdir /src
1818
WORKDIR /src

‎vulnfeeds/cmd/nvd-cve-osv/Dockerfile‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
# See the License for the specific language governing permissions and
1313
# limitations under the License.
1414

15-
FROM golang:1.24.1-alpine@sha256:43c094ad24b6ac0546c62193baeb3e6e49ce14d3250845d166c77c25f64b0386 AS GO_BUILD
15+
FROM golang:1.25.7-alpine@sha256:f6751d823c26342f9506c03797d2527668d095b0a15f1862cddb4d927a7a4ced AS GO_BUILD
1616

1717
WORKDIR /go/src
1818

‎vulnfeeds/go.mod‎

Lines changed: 40 additions & 37 deletions
Original file line numberDiff line numberDiff line change
@@ -1,44 +1,47 @@
11
module github.com/google/osv/vulnfeeds
22

3-
go 1.23.6
3+
go 1.24.0
4+
5+
toolchain go1.24.13
46

57
require (
6-
cloud.google.com/go/logging v1.13.0
7-
cloud.google.com/go/secretmanager v1.14.6
8+
cloud.google.com/go/logging v1.13.2
9+
cloud.google.com/go/secretmanager v1.16.0
810
github.com/aquasecurity/go-pep440-version v0.0.1
9-
github.com/atombender/go-jsonschema v0.18.0
10-
github.com/go-git/go-git/v5 v5.14.0
11+
github.com/atombender/go-jsonschema v0.22.0
12+
github.com/go-git/go-git/v5 v5.16.4
1113
github.com/google/go-cmp v0.7.0
1214
github.com/google/osv-scanner v1.9.2
1315
github.com/knqyf263/go-cpe v0.0.0-20230627041855-cb0794d06872
1416
github.com/sethvargo/go-retry v0.3.0
15-
golang.org/x/exp v0.0.0-20250305212735-054e65f0b394
17+
golang.org/x/exp v0.0.0-20260112195511-716be5621a96
1618
gopkg.in/yaml.v2 v2.4.0
1719
)
1820

1921
require (
20-
cloud.google.com/go v0.118.3 // indirect
21-
cloud.google.com/go/auth v0.15.0 // indirect
22-
cloud.google.com/go/auth/oauth2adapt v0.2.7 // indirect
23-
cloud.google.com/go/compute/metadata v0.6.0 // indirect
24-
cloud.google.com/go/iam v1.4.1 // indirect
25-
cloud.google.com/go/longrunning v0.6.4 // indirect
26-
dario.cat/mergo v1.0.1 // indirect
22+
cloud.google.com/go v0.123.0 // indirect
23+
cloud.google.com/go/auth v0.18.0 // indirect
24+
cloud.google.com/go/auth/oauth2adapt v0.2.8 // indirect
25+
cloud.google.com/go/compute/metadata v0.9.0 // indirect
26+
cloud.google.com/go/iam v1.5.3 // indirect
27+
cloud.google.com/go/longrunning v0.8.0 // indirect
28+
dario.cat/mergo v1.0.2 // indirect
2729
github.com/Microsoft/go-winio v0.6.2 // indirect
28-
github.com/ProtonMail/go-crypto v1.1.5 // indirect
30+
github.com/ProtonMail/go-crypto v1.1.6 // indirect
2931
github.com/aquasecurity/go-version v0.0.1 // indirect
30-
github.com/cloudflare/circl v1.6.0 // indirect
32+
github.com/cespare/xxhash/v2 v2.3.0 // indirect
33+
github.com/cloudflare/circl v1.6.1 // indirect
3134
github.com/cyphar/filepath-securejoin v0.4.1 // indirect
3235
github.com/emirpasic/gods v1.18.1 // indirect
3336
github.com/felixge/httpsnoop v1.0.4 // indirect
3437
github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect
3538
github.com/go-git/go-billy/v5 v5.6.2 // indirect
36-
github.com/go-logr/logr v1.4.2 // indirect
39+
github.com/go-logr/logr v1.4.3 // indirect
3740
github.com/go-logr/stdr v1.2.2 // indirect
3841
github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 // indirect
3942
github.com/google/s2a-go v0.1.9 // indirect
40-
github.com/googleapis/enterprise-certificate-proxy v0.3.5 // indirect
41-
github.com/googleapis/gax-go/v2 v2.14.1 // indirect
43+
github.com/googleapis/enterprise-certificate-proxy v0.3.7 // indirect
44+
github.com/googleapis/gax-go/v2 v2.16.0 // indirect
4245
github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect
4346
github.com/kevinburke/ssh_config v1.2.0 // indirect
4447
github.com/package-url/packageurl-go v0.1.3 // indirect
@@ -47,25 +50,25 @@ require (
4750
github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 // indirect
4851
github.com/skeema/knownhosts v1.3.1 // indirect
4952
github.com/xanzy/ssh-agent v0.3.3 // indirect
50-
go.opentelemetry.io/auto/sdk v1.1.0 // indirect
51-
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.59.0 // indirect
52-
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.59.0 // indirect
53-
go.opentelemetry.io/otel v1.34.0 // indirect
54-
go.opentelemetry.io/otel/metric v1.34.0 // indirect
55-
go.opentelemetry.io/otel/trace v1.34.0 // indirect
56-
golang.org/x/crypto v0.36.0 // indirect
57-
golang.org/x/net v0.37.0 // indirect
58-
golang.org/x/oauth2 v0.27.0 // indirect
59-
golang.org/x/sync v0.12.0 // indirect
60-
golang.org/x/sys v0.31.0 // indirect
61-
golang.org/x/text v0.23.0 // indirect
62-
golang.org/x/time v0.10.0 // indirect
53+
go.opentelemetry.io/auto/sdk v1.2.1 // indirect
54+
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.63.0 // indirect
55+
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.61.0 // indirect
56+
go.opentelemetry.io/otel v1.39.0 // indirect
57+
go.opentelemetry.io/otel/metric v1.39.0 // indirect
58+
go.opentelemetry.io/otel/trace v1.39.0 // indirect
59+
golang.org/x/crypto v0.46.0 // indirect
60+
golang.org/x/net v0.48.0 // indirect
61+
golang.org/x/oauth2 v0.34.0 // indirect
62+
golang.org/x/sync v0.19.0 // indirect
63+
golang.org/x/sys v0.39.0 // indirect
64+
golang.org/x/text v0.32.0 // indirect
65+
golang.org/x/time v0.14.0 // indirect
6366
golang.org/x/xerrors v0.0.0-20240903120638-7835f813f4da // indirect
64-
google.golang.org/api v0.224.0 // indirect
65-
google.golang.org/genproto v0.0.0-20250303144028-a0af3efb3deb // indirect
66-
google.golang.org/genproto/googleapis/api v0.0.0-20250303144028-a0af3efb3deb // indirect
67-
google.golang.org/genproto/googleapis/rpc v0.0.0-20250227231956-55c901821b1e // indirect
68-
google.golang.org/grpc v1.71.0 // indirect
69-
google.golang.org/protobuf v1.36.5 // indirect
67+
google.golang.org/api v0.259.0 // indirect
68+
google.golang.org/genproto v0.0.0-20251202230838-ff82c1b0f217 // indirect
69+
google.golang.org/genproto/googleapis/api v0.0.0-20251222181119-0a764e51fe1b // indirect
70+
google.golang.org/genproto/googleapis/rpc v0.0.0-20251222181119-0a764e51fe1b // indirect
71+
google.golang.org/grpc v1.78.0 // indirect
72+
google.golang.org/protobuf v1.36.11 // indirect
7073
gopkg.in/warnings.v0 v0.1.2 // indirect
7174
)

0 commit comments

Comments
 (0)