fix(deps): lock file maintenance vulnfeeds

renovate[bot] · web-flow · commit 37f7eda96a3f · 2025-11-24T06:56:14.000Z
diff --git a/vulnfeeds/cmd/alpine/Dockerfile b/vulnfeeds/cmd/alpine/Dockerfile
@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM golang:1.24.1-alpine@sha256:43c094ad24b6ac0546c62193baeb3e6e49ce14d3250845d166c77c25f64b0386 AS GO_BUILD
+FROM golang:1.25.4-alpine@sha256:d3f0cf7723f3429e3f9ed846243970b20a2de7bae6a5b66fc5914e228d831bbb AS GO_BUILD
 
 RUN mkdir /src
 WORKDIR /src
diff --git a/vulnfeeds/cmd/combine-to-osv/Dockerfile b/vulnfeeds/cmd/combine-to-osv/Dockerfile
@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM golang:1.24.1-alpine@sha256:43c094ad24b6ac0546c62193baeb3e6e49ce14d3250845d166c77c25f64b0386 AS GO_BUILD
+FROM golang:1.25.4-alpine@sha256:d3f0cf7723f3429e3f9ed846243970b20a2de7bae6a5b66fc5914e228d831bbb AS GO_BUILD
 
 RUN mkdir /src
 WORKDIR /src
diff --git a/vulnfeeds/cmd/cpe-repo-gen/Dockerfile b/vulnfeeds/cmd/cpe-repo-gen/Dockerfile
@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM golang:1.24.1-alpine@sha256:43c094ad24b6ac0546c62193baeb3e6e49ce14d3250845d166c77c25f64b0386 AS GO_BUILD
+FROM golang:1.25.4-alpine@sha256:d3f0cf7723f3429e3f9ed846243970b20a2de7bae6a5b66fc5914e228d831bbb AS GO_BUILD
 
 RUN mkdir /src
 WORKDIR /src
diff --git a/vulnfeeds/cmd/debian/Dockerfile b/vulnfeeds/cmd/debian/Dockerfile
@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM golang:1.24.1-alpine@sha256:43c094ad24b6ac0546c62193baeb3e6e49ce14d3250845d166c77c25f64b0386 AS GO_BUILD
+FROM golang:1.25.4-alpine@sha256:d3f0cf7723f3429e3f9ed846243970b20a2de7bae6a5b66fc5914e228d831bbb AS GO_BUILD
 
 RUN mkdir /src
 WORKDIR /src
diff --git a/vulnfeeds/cmd/download-cves/Dockerfile b/vulnfeeds/cmd/download-cves/Dockerfile
@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM golang:1.24.1-alpine@sha256:43c094ad24b6ac0546c62193baeb3e6e49ce14d3250845d166c77c25f64b0386 AS GO_BUILD
+FROM golang:1.25.4-alpine@sha256:d3f0cf7723f3429e3f9ed846243970b20a2de7bae6a5b66fc5914e228d831bbb AS GO_BUILD
 
 RUN mkdir /src
 WORKDIR /src
diff --git a/vulnfeeds/cmd/nvd-cve-osv/Dockerfile b/vulnfeeds/cmd/nvd-cve-osv/Dockerfile
@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM golang:1.24.1-alpine@sha256:43c094ad24b6ac0546c62193baeb3e6e49ce14d3250845d166c77c25f64b0386 AS GO_BUILD
+FROM golang:1.25.4-alpine@sha256:d3f0cf7723f3429e3f9ed846243970b20a2de7bae6a5b66fc5914e228d831bbb AS GO_BUILD
 
 WORKDIR /go/src
 
diff --git a/vulnfeeds/go.mod b/vulnfeeds/go.mod
@@ -3,16 +3,16 @@ module github.com/google/osv/vulnfeeds
 go 1.23.6
 
 require (
-	cloud.google.com/go/logging v1.13.0
-	cloud.google.com/go/secretmanager v1.14.6
+	cloud.google.com/go/logging v1.13.1
+	cloud.google.com/go/secretmanager v1.16.0
 	github.com/aquasecurity/go-pep440-version v0.0.1
-	github.com/atombender/go-jsonschema v0.18.0
-	github.com/go-git/go-git/v5 v5.14.0
+	github.com/atombender/go-jsonschema v0.20.0
+	github.com/go-git/go-git/v5 v5.16.4
 	github.com/google/go-cmp v0.7.0
 	github.com/google/osv-scanner v1.9.2
 	github.com/knqyf263/go-cpe v0.0.0-20230627041855-cb0794d06872
 	github.com/sethvargo/go-retry v0.3.0
-	golang.org/x/exp v0.0.0-20250305212735-054e65f0b394
+	golang.org/x/exp e25ba8c21ef6
 	gopkg.in/yaml.v2 v2.4.0
 )
 
diff --git a/vulnfeeds/tools/debian/debian_converter/poetry.lock b/vulnfeeds/tools/debian/debian_converter/poetry.lock
diff --git a/vulnfeeds/tools/debian/debian_converter/pyproject.toml b/vulnfeeds/tools/debian/debian_converter/pyproject.toml
@@ -3,7 +3,7 @@ name = "debian_converter"
 requires-python = ">=3.11,<4.0"
 dependencies = [
     "markdownify==0.14.1",
-    "pandas==2.2.3",
+    "pandas==2.3.3",
     "python-dateutil==2.9.0.post0",
 ]
 

Original file line number	Diff line number	Diff line change
`@@ -3,7 +3,7 @@ name = "debian_converter"`
`3`	`3`	`requires-python = ">=3.11,<4.0"`
`4`	`4`	`dependencies = [`
`5`	`5`	`"markdownify==0.14.1",`
`6`		`- "pandas==2.2.3",`
	`6`	`+ "pandas==2.3.3",`
`7`	`7`	`"python-dateutil==2.9.0.post0",`
`8`	`8`	`]`
`9`	`9`