Skip to content

Commit 8e5b721

Browse files
fix(deps): update vulnfeeds
1 parent 7bac569 commit 8e5b721

10 files changed

Lines changed: 197 additions & 170 deletions

File tree

vulnfeeds/cmd/alpine/Dockerfile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
# See the License for the specific language governing permissions and
1313
# limitations under the License.
1414

15-
FROM golang:1.24.1-alpine@sha256:43c094ad24b6ac0546c62193baeb3e6e49ce14d3250845d166c77c25f64b0386 AS GO_BUILD
15+
FROM golang:1.26.3-alpine@sha256:91eda9776261207ea25fd06b5b7fed8d397dd2c0a283e77f2ab6e91bfa71079d AS GO_BUILD
1616

1717
RUN mkdir /src
1818
WORKDIR /src

vulnfeeds/cmd/combine-to-osv/Dockerfile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
# See the License for the specific language governing permissions and
1313
# limitations under the License.
1414

15-
FROM golang:1.24.1-alpine@sha256:43c094ad24b6ac0546c62193baeb3e6e49ce14d3250845d166c77c25f64b0386 AS GO_BUILD
15+
FROM golang:1.26.3-alpine@sha256:91eda9776261207ea25fd06b5b7fed8d397dd2c0a283e77f2ab6e91bfa71079d AS GO_BUILD
1616

1717
RUN mkdir /src
1818
WORKDIR /src

vulnfeeds/cmd/cpe-repo-gen/Dockerfile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
# See the License for the specific language governing permissions and
1313
# limitations under the License.
1414

15-
FROM golang:1.24.1-alpine@sha256:43c094ad24b6ac0546c62193baeb3e6e49ce14d3250845d166c77c25f64b0386 AS GO_BUILD
15+
FROM golang:1.26.3-alpine@sha256:91eda9776261207ea25fd06b5b7fed8d397dd2c0a283e77f2ab6e91bfa71079d AS GO_BUILD
1616

1717
RUN mkdir /src
1818
WORKDIR /src

vulnfeeds/cmd/debian/Dockerfile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
# See the License for the specific language governing permissions and
1313
# limitations under the License.
1414

15-
FROM golang:1.24.1-alpine@sha256:43c094ad24b6ac0546c62193baeb3e6e49ce14d3250845d166c77c25f64b0386 AS GO_BUILD
15+
FROM golang:1.26.3-alpine@sha256:91eda9776261207ea25fd06b5b7fed8d397dd2c0a283e77f2ab6e91bfa71079d AS GO_BUILD
1616

1717
RUN mkdir /src
1818
WORKDIR /src

vulnfeeds/cmd/download-cves/Dockerfile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
# See the License for the specific language governing permissions and
1313
# limitations under the License.
1414

15-
FROM golang:1.24.1-alpine@sha256:43c094ad24b6ac0546c62193baeb3e6e49ce14d3250845d166c77c25f64b0386 AS GO_BUILD
15+
FROM golang:1.26.3-alpine@sha256:91eda9776261207ea25fd06b5b7fed8d397dd2c0a283e77f2ab6e91bfa71079d AS GO_BUILD
1616

1717
RUN mkdir /src
1818
WORKDIR /src

vulnfeeds/cmd/nvd-cve-osv/Dockerfile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
# See the License for the specific language governing permissions and
1313
# limitations under the License.
1414

15-
FROM golang:1.24.1-alpine@sha256:43c094ad24b6ac0546c62193baeb3e6e49ce14d3250845d166c77c25f64b0386 AS GO_BUILD
15+
FROM golang:1.26.3-alpine@sha256:91eda9776261207ea25fd06b5b7fed8d397dd2c0a283e77f2ab6e91bfa71079d AS GO_BUILD
1616

1717
WORKDIR /go/src
1818

vulnfeeds/go.mod

Lines changed: 35 additions & 34 deletions
Original file line numberDiff line numberDiff line change
@@ -1,44 +1,45 @@
11
module github.com/google/osv/vulnfeeds
22

3-
go 1.23.6
3+
go 1.25.0
44

55
require (
6-
cloud.google.com/go/logging v1.13.0
7-
cloud.google.com/go/secretmanager v1.14.6
6+
cloud.google.com/go/logging v1.18.0
7+
cloud.google.com/go/secretmanager v1.20.0
88
github.com/aquasecurity/go-pep440-version v0.0.1
9-
github.com/atombender/go-jsonschema v0.18.0
9+
github.com/atombender/go-jsonschema v0.23.0
1010
github.com/go-git/go-git/v5 v5.14.0
1111
github.com/google/go-cmp v0.7.0
1212
github.com/google/osv-scanner v1.9.2
1313
github.com/knqyf263/go-cpe v0.0.0-20230627041855-cb0794d06872
1414
github.com/sethvargo/go-retry v0.3.0
15-
golang.org/x/exp v0.0.0-20250305212735-054e65f0b394
15+
golang.org/x/exp v0.0.0-20260410095643-746e56fc9e2f
1616
gopkg.in/yaml.v2 v2.4.0
1717
)
1818

1919
require (
20-
cloud.google.com/go v0.118.3 // indirect
21-
cloud.google.com/go/auth v0.15.0 // indirect
22-
cloud.google.com/go/auth/oauth2adapt v0.2.7 // indirect
23-
cloud.google.com/go/compute/metadata v0.6.0 // indirect
24-
cloud.google.com/go/iam v1.4.1 // indirect
25-
cloud.google.com/go/longrunning v0.6.4 // indirect
26-
dario.cat/mergo v1.0.1 // indirect
20+
cloud.google.com/go v0.123.0 // indirect
21+
cloud.google.com/go/auth v0.19.0 // indirect
22+
cloud.google.com/go/auth/oauth2adapt v0.2.8 // indirect
23+
cloud.google.com/go/compute/metadata v0.9.0 // indirect
24+
cloud.google.com/go/iam v1.7.0 // indirect
25+
cloud.google.com/go/longrunning v0.9.0 // indirect
26+
dario.cat/mergo v1.0.2 // indirect
2727
github.com/Microsoft/go-winio v0.6.2 // indirect
2828
github.com/ProtonMail/go-crypto v1.1.5 // indirect
2929
github.com/aquasecurity/go-version v0.0.1 // indirect
30+
github.com/cespare/xxhash/v2 v2.3.0 // indirect
3031
github.com/cloudflare/circl v1.6.0 // indirect
3132
github.com/cyphar/filepath-securejoin v0.4.1 // indirect
3233
github.com/emirpasic/gods v1.18.1 // indirect
3334
github.com/felixge/httpsnoop v1.0.4 // indirect
3435
github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect
3536
github.com/go-git/go-billy/v5 v5.6.2 // indirect
36-
github.com/go-logr/logr v1.4.2 // indirect
37+
github.com/go-logr/logr v1.4.3 // indirect
3738
github.com/go-logr/stdr v1.2.2 // indirect
3839
github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 // indirect
3940
github.com/google/s2a-go v0.1.9 // indirect
40-
github.com/googleapis/enterprise-certificate-proxy v0.3.5 // indirect
41-
github.com/googleapis/gax-go/v2 v2.14.1 // indirect
41+
github.com/googleapis/enterprise-certificate-proxy v0.3.14 // indirect
42+
github.com/googleapis/gax-go/v2 v2.21.0 // indirect
4243
github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect
4344
github.com/kevinburke/ssh_config v1.2.0 // indirect
4445
github.com/package-url/packageurl-go v0.1.3 // indirect
@@ -47,25 +48,25 @@ require (
4748
github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 // indirect
4849
github.com/skeema/knownhosts v1.3.1 // indirect
4950
github.com/xanzy/ssh-agent v0.3.3 // indirect
50-
go.opentelemetry.io/auto/sdk v1.1.0 // indirect
51-
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.59.0 // indirect
52-
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.59.0 // indirect
53-
go.opentelemetry.io/otel v1.34.0 // indirect
54-
go.opentelemetry.io/otel/metric v1.34.0 // indirect
55-
go.opentelemetry.io/otel/trace v1.34.0 // indirect
56-
golang.org/x/crypto v0.36.0 // indirect
57-
golang.org/x/net v0.37.0 // indirect
58-
golang.org/x/oauth2 v0.27.0 // indirect
59-
golang.org/x/sync v0.12.0 // indirect
60-
golang.org/x/sys v0.31.0 // indirect
61-
golang.org/x/text v0.23.0 // indirect
62-
golang.org/x/time v0.10.0 // indirect
51+
go.opentelemetry.io/auto/sdk v1.2.1 // indirect
52+
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.63.0 // indirect
53+
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.61.0 // indirect
54+
go.opentelemetry.io/otel v1.43.0 // indirect
55+
go.opentelemetry.io/otel/metric v1.43.0 // indirect
56+
go.opentelemetry.io/otel/trace v1.43.0 // indirect
57+
golang.org/x/crypto v0.49.0 // indirect
58+
golang.org/x/net v0.52.0 // indirect
59+
golang.org/x/oauth2 v0.36.0 // indirect
60+
golang.org/x/sync v0.20.0 // indirect
61+
golang.org/x/sys v0.42.0 // indirect
62+
golang.org/x/text v0.35.0 // indirect
63+
golang.org/x/time v0.15.0 // indirect
6364
golang.org/x/xerrors v0.0.0-20240903120638-7835f813f4da // indirect
64-
google.golang.org/api v0.224.0 // indirect
65-
google.golang.org/genproto v0.0.0-20250303144028-a0af3efb3deb // indirect
66-
google.golang.org/genproto/googleapis/api v0.0.0-20250303144028-a0af3efb3deb // indirect
67-
google.golang.org/genproto/googleapis/rpc v0.0.0-20250227231956-55c901821b1e // indirect
68-
google.golang.org/grpc v1.71.0 // indirect
69-
google.golang.org/protobuf v1.36.5 // indirect
65+
google.golang.org/api v0.274.0 // indirect
66+
google.golang.org/genproto v0.0.0-20260319201613-d00831a3d3e7 // indirect
67+
google.golang.org/genproto/googleapis/api v0.0.0-20260401024825-9d38bb4040a9 // indirect
68+
google.golang.org/genproto/googleapis/rpc v0.0.0-20260401024825-9d38bb4040a9 // indirect
69+
google.golang.org/grpc v1.80.0 // indirect
70+
google.golang.org/protobuf v1.36.11 // indirect
7071
gopkg.in/warnings.v0 v0.1.2 // indirect
7172
)

0 commit comments

Comments
 (0)