Skip to content

Commit 4413465

Browse files
binbashingbinbashing
committed
upgrades and added dependabot
1 parent e7af6b9 commit 4413465

6 files changed

Lines changed: 482 additions & 353 deletions

File tree

‎.github/dependabot.yml‎

Lines changed: 41 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,41 @@
1+
version: 2
2+
updates:
3+
- package-ecosystem: "gomod"
4+
directory: "/"
5+
schedule:
6+
interval: "weekly"
7+
day: "monday"
8+
time: "06:00"
9+
timezone: "UTC"
10+
open-pull-requests-limit: 5
11+
labels:
12+
- "dependencies"
13+
- "go"
14+
groups:
15+
go-dependencies:
16+
patterns:
17+
- "*"
18+
19+
- package-ecosystem: "docker"
20+
directory: "/"
21+
schedule:
22+
interval: "weekly"
23+
day: "monday"
24+
time: "06:15"
25+
timezone: "UTC"
26+
open-pull-requests-limit: 3
27+
labels:
28+
- "dependencies"
29+
- "docker"
30+
31+
- package-ecosystem: "github-actions"
32+
directory: "/"
33+
schedule:
34+
interval: "weekly"
35+
day: "monday"
36+
time: "06:30"
37+
timezone: "UTC"
38+
open-pull-requests-limit: 3
39+
labels:
40+
- "dependencies"
41+
- "github-actions"

‎Dockerfile‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
FROM golang:1.23-alpine AS builder
1+
FROM golang:1-alpine AS builder
22

33
WORKDIR /src
44

@@ -15,7 +15,7 @@ RUN CGO_ENABLED=0 GOOS=${TARGETOS} GOARCH=${TARGETARCH} go build \
1515
-ldflags="-s -w -X main.version=${VERSION}" \
1616
-o /out/sops-cop .
1717

18-
FROM alpine:3.20
18+
FROM alpine:3
1919

2020
RUN addgroup -S app && adduser -S app -G app
2121

‎README.md‎

Lines changed: 10 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
# SOPS-Cop
22

3-
[![Go Version](https://img.shields.io/badge/Go-1.23%2B-00ADD8?logo=go)](https://go.dev/)
3+
[![Go Version](https://img.shields.io/badge/Go-1.26%2B-00ADD8?logo=go)](https://go.dev/)
44
[![CI](https://github.com/binbashing/sops-cop/actions/workflows/ci.yml/badge.svg)](https://github.com/binbashing/sops-cop/actions/workflows/ci.yml)
55
[![Tests](https://img.shields.io/badge/tests-go%20test%20.%2F...-brightgreen)](https://github.com/binbashing/sops-cop/actions/workflows/ci.yml)
66

@@ -24,7 +24,7 @@ SOPS-Cop is a CLI tool to enforce SOPS encryption rules without requiring the SO
2424

2525
## Requirements
2626

27-
- Go 1.23+
27+
- Go 1.26+
2828

2929
If you install from release binaries, Go is not required.
3030

@@ -121,6 +121,14 @@ GitHub Actions runs tests on push and pull request via:
121121

122122
- `.github/workflows/ci.yml`
123123

124+
## Dependency updates
125+
126+
Dependabot is configured via `.github/dependabot.yml` to open weekly PRs for:
127+
128+
- Go modules (`gomod`)
129+
- Docker base images (`Dockerfile`)
130+
- GitHub Actions workflow dependencies
131+
124132
## Project structure
125133

126134
- `main.go`: CLI entrypoint and YAML validation logic

‎go.mod‎

Lines changed: 92 additions & 81 deletions
Original file line numberDiff line numberDiff line change
@@ -1,119 +1,130 @@
11
module github.com/binbashing/sops-cop
22

3-
go 1.23.0
3+
go 1.26.0
44

55
require (
6-
github.com/getsops/sops/v3 v3.10.2
6+
github.com/getsops/sops/v3 v3.12.1
77
gopkg.in/yaml.v3 v3.0.1
88
)
99

1010
require (
11-
cel.dev/expr v0.22.1 // indirect
12-
cloud.google.com/go v0.120.0 // indirect
13-
cloud.google.com/go/auth v0.15.0 // indirect
11+
cel.dev/expr v0.25.1 // indirect
12+
cloud.google.com/go v0.123.0 // indirect
13+
cloud.google.com/go/auth v0.18.2 // indirect
1414
cloud.google.com/go/auth/oauth2adapt v0.2.8 // indirect
15-
cloud.google.com/go/compute/metadata v0.6.0 // indirect
16-
cloud.google.com/go/iam v1.4.2 // indirect
17-
cloud.google.com/go/kms v1.21.1 // indirect
18-
cloud.google.com/go/longrunning v0.6.6 // indirect
19-
cloud.google.com/go/monitoring v1.24.1 // indirect
20-
cloud.google.com/go/storage v1.51.0 // indirect
21-
filippo.io/age v1.2.1 // indirect
22-
filippo.io/edwards25519 v1.1.0 // indirect
23-
github.com/Azure/azure-sdk-for-go/sdk/azcore v1.18.0 // indirect
24-
github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.9.0 // indirect
25-
github.com/Azure/azure-sdk-for-go/sdk/internal v1.11.1 // indirect
26-
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys v1.3.1 // indirect
27-
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal v1.1.1 // indirect
28-
github.com/AzureAD/microsoft-authentication-library-for-go v1.4.2 // indirect
29-
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.27.0 // indirect
30-
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.51.0 // indirect
31-
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.51.0 // indirect
32-
github.com/ProtonMail/go-crypto v1.2.0 // indirect
33-
github.com/aws/aws-sdk-go-v2 v1.36.3 // indirect
34-
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.10 // indirect
35-
github.com/aws/aws-sdk-go-v2/config v1.29.14 // indirect
36-
github.com/aws/aws-sdk-go-v2/credentials v1.17.67 // indirect
37-
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.30 // indirect
38-
github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.72 // indirect
39-
github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.34 // indirect
40-
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.34 // indirect
41-
github.com/aws/aws-sdk-go-v2/internal/ini v1.8.3 // indirect
42-
github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.34 // indirect
43-
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.12.3 // indirect
44-
github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.7.0 // indirect
45-
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.12.15 // indirect
46-
github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.18.15 // indirect
47-
github.com/aws/aws-sdk-go-v2/service/kms v1.38.3 // indirect
48-
github.com/aws/aws-sdk-go-v2/service/s3 v1.79.2 // indirect
49-
github.com/aws/aws-sdk-go-v2/service/sso v1.25.3 // indirect
50-
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.30.1 // indirect
51-
github.com/aws/aws-sdk-go-v2/service/sts v1.33.19 // indirect
52-
github.com/aws/smithy-go v1.22.3 // indirect
15+
cloud.google.com/go/compute/metadata v0.9.0 // indirect
16+
cloud.google.com/go/iam v1.5.3 // indirect
17+
cloud.google.com/go/kms v1.26.0 // indirect
18+
cloud.google.com/go/longrunning v0.8.0 // indirect
19+
cloud.google.com/go/monitoring v1.24.3 // indirect
20+
cloud.google.com/go/storage v1.60.0 // indirect
21+
filippo.io/age v1.3.1 // indirect
22+
filippo.io/edwards25519 v1.2.0 // indirect
23+
filippo.io/hpke v0.4.0 // indirect
24+
github.com/Azure/azure-sdk-for-go/sdk/azcore v1.21.0 // indirect
25+
github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.13.1 // indirect
26+
github.com/Azure/azure-sdk-for-go/sdk/internal v1.11.2 // indirect
27+
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys v1.4.0 // indirect
28+
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal v1.2.0 // indirect
29+
github.com/AzureAD/microsoft-authentication-library-for-go v1.6.0 // indirect
30+
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.31.0 // indirect
31+
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.55.0 // indirect
32+
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.55.0 // indirect
33+
github.com/ProtonMail/go-crypto v1.4.0 // indirect
34+
github.com/aws/aws-sdk-go-v2 v1.41.2 // indirect
35+
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.5 // indirect
36+
github.com/aws/aws-sdk-go-v2/config v1.32.10 // indirect
37+
github.com/aws/aws-sdk-go-v2/credentials v1.19.10 // indirect
38+
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.18 // indirect
39+
github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.22.4 // indirect
40+
github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.18 // indirect
41+
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.18 // indirect
42+
github.com/aws/aws-sdk-go-v2/internal/ini v1.8.4 // indirect
43+
github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.18 // indirect
44+
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.5 // indirect
45+
github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.10 // indirect
46+
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.18 // indirect
47+
github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.18 // indirect
48+
github.com/aws/aws-sdk-go-v2/service/kms v1.50.1 // indirect
49+
github.com/aws/aws-sdk-go-v2/service/s3 v1.96.2 // indirect
50+
github.com/aws/aws-sdk-go-v2/service/signin v1.0.6 // indirect
51+
github.com/aws/aws-sdk-go-v2/service/sso v1.30.11 // indirect
52+
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.15 // indirect
53+
github.com/aws/aws-sdk-go-v2/service/sts v1.41.7 // indirect
54+
github.com/aws/smithy-go v1.24.2 // indirect
5355
github.com/cenkalti/backoff/v4 v4.3.0 // indirect
5456
github.com/cespare/xxhash/v2 v2.3.0 // indirect
55-
github.com/cloudflare/circl v1.6.0 // indirect
56-
github.com/cncf/xds/go v0.0.0-20250326154945-ae57f3c0d45f // indirect
57-
github.com/envoyproxy/go-control-plane/envoy v1.32.4 // indirect
58-
github.com/envoyproxy/protoc-gen-validate v1.2.1 // indirect
57+
github.com/cloudflare/circl v1.6.3 // indirect
58+
github.com/cncf/xds/go v0.0.0-20260202195803-dba9d589def2 // indirect
59+
github.com/envoyproxy/go-control-plane/envoy v1.37.0 // indirect
60+
github.com/envoyproxy/protoc-gen-validate v1.3.3 // indirect
5961
github.com/fatih/color v1.18.0 // indirect
6062
github.com/felixge/httpsnoop v1.0.4 // indirect
6163
github.com/getsops/gopgagent v0.0.0-20241224165529-7044f28e491e // indirect
62-
github.com/go-jose/go-jose/v4 v4.0.5 // indirect
63-
github.com/go-logr/logr v1.4.2 // indirect
64+
github.com/go-jose/go-jose/v4 v4.1.3 // indirect
65+
github.com/go-logr/logr v1.4.3 // indirect
6466
github.com/go-logr/stdr v1.2.2 // indirect
65-
github.com/golang-jwt/jwt/v5 v5.2.2 // indirect
67+
github.com/goccy/go-yaml v1.19.2 // indirect
68+
github.com/golang-jwt/jwt/v5 v5.3.1 // indirect
6669
github.com/google/go-cmp v0.7.0 // indirect
6770
github.com/google/s2a-go v0.1.9 // indirect
6871
github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 // indirect
6972
github.com/google/uuid v1.6.0 // indirect
70-
github.com/googleapis/enterprise-certificate-proxy v0.3.6 // indirect
71-
github.com/googleapis/gax-go/v2 v2.14.1 // indirect
73+
github.com/googleapis/enterprise-certificate-proxy v0.3.12 // indirect
74+
github.com/googleapis/gax-go/v2 v2.17.0 // indirect
7275
github.com/goware/prefixer v0.0.0-20160118172347-395022866408 // indirect
7376
github.com/hashicorp/errwrap v1.1.0 // indirect
7477
github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
7578
github.com/hashicorp/go-multierror v1.1.1 // indirect
76-
github.com/hashicorp/go-retryablehttp v0.7.7 // indirect
79+
github.com/hashicorp/go-retryablehttp v0.7.8 // indirect
7780
github.com/hashicorp/go-rootcerts v1.0.2 // indirect
7881
github.com/hashicorp/go-secure-stdlib/parseutil v0.2.0 // indirect
7982
github.com/hashicorp/go-secure-stdlib/strutil v0.1.2 // indirect
8083
github.com/hashicorp/go-sockaddr v1.0.7 // indirect
81-
github.com/hashicorp/hcl v1.0.0 // indirect
82-
github.com/hashicorp/vault/api v1.16.0 // indirect
84+
github.com/hashicorp/hcl v1.0.1-vault-7 // indirect
85+
github.com/hashicorp/vault/api v1.22.0 // indirect
86+
github.com/huaweicloud/huaweicloud-sdk-go-v3 v0.1.187 // indirect
87+
github.com/json-iterator/go v1.1.13-0.20220915233716-71ac16282d12 // indirect
8388
github.com/kylelemons/godebug v1.1.0 // indirect
84-
github.com/lib/pq v1.10.9 // indirect
89+
github.com/lib/pq v1.11.2 // indirect
8590
github.com/mattn/go-colorable v0.1.14 // indirect
8691
github.com/mattn/go-isatty v0.0.20 // indirect
8792
github.com/mitchellh/go-homedir v1.1.0 // indirect
8893
github.com/mitchellh/go-wordwrap v1.0.1 // indirect
8994
github.com/mitchellh/mapstructure v1.5.0 // indirect
95+
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
96+
github.com/modern-go/reflect2 v1.0.2 // indirect
9097
github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c // indirect
9198
github.com/pkg/errors v0.9.1 // indirect
9299
github.com/planetscale/vtprotobuf v0.6.1-0.20240319094008-0393e58bdf10 // indirect
93100
github.com/ryanuber/go-glob v1.0.0 // indirect
94-
github.com/sirupsen/logrus v1.9.3 // indirect
95-
go.opentelemetry.io/auto/sdk v1.1.0 // indirect
96-
go.opentelemetry.io/contrib/detectors/gcp v1.35.0 // indirect
97-
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.60.0 // indirect
98-
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.60.0 // indirect
99-
go.opentelemetry.io/otel v1.35.0 // indirect
100-
go.opentelemetry.io/otel/metric v1.35.0 // indirect
101-
go.opentelemetry.io/otel/sdk v1.35.0 // indirect
102-
go.opentelemetry.io/otel/sdk/metric v1.35.0 // indirect
103-
go.opentelemetry.io/otel/trace v1.35.0 // indirect
104-
golang.org/x/crypto v0.37.0 // indirect
105-
golang.org/x/net v0.39.0 // indirect
106-
golang.org/x/oauth2 v0.29.0 // indirect
107-
golang.org/x/sync v0.13.0 // indirect
108-
golang.org/x/sys v0.32.0 // indirect
109-
golang.org/x/term v0.31.0 // indirect
110-
golang.org/x/text v0.24.0 // indirect
111-
golang.org/x/time v0.11.0 // indirect
112-
google.golang.org/api v0.228.0 // indirect
113-
google.golang.org/genproto v0.0.0-20250324211829-b45e905df463 // indirect
114-
google.golang.org/genproto/googleapis/api v0.0.0-20250324211829-b45e905df463 // indirect
115-
google.golang.org/genproto/googleapis/rpc v0.0.0-20250324211829-b45e905df463 // indirect
116-
google.golang.org/grpc v1.71.1 // indirect
117-
google.golang.org/protobuf v1.36.6 // indirect
118-
gopkg.in/ini.v1 v1.67.0 // indirect
101+
github.com/sirupsen/logrus v1.9.4 // indirect
102+
github.com/spiffe/go-spiffe/v2 v2.6.0 // indirect
103+
github.com/tjfoc/gmsm v1.4.1 // indirect
104+
go.mongodb.org/mongo-driver v1.17.9 // indirect
105+
go.opentelemetry.io/auto/sdk v1.2.1 // indirect
106+
go.opentelemetry.io/contrib/detectors/gcp v1.41.0 // indirect
107+
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.66.0 // indirect
108+
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.66.0 // indirect
109+
go.opentelemetry.io/otel v1.41.0 // indirect
110+
go.opentelemetry.io/otel/metric v1.41.0 // indirect
111+
go.opentelemetry.io/otel/sdk v1.41.0 // indirect
112+
go.opentelemetry.io/otel/sdk/metric v1.41.0 // indirect
113+
go.opentelemetry.io/otel/trace v1.41.0 // indirect
114+
go.yaml.in/yaml/v3 v3.0.4 // indirect
115+
golang.org/x/crypto v0.48.0 // indirect
116+
golang.org/x/net v0.51.0 // indirect
117+
golang.org/x/oauth2 v0.35.0 // indirect
118+
golang.org/x/sync v0.19.0 // indirect
119+
golang.org/x/sys v0.41.0 // indirect
120+
golang.org/x/term v0.40.0 // indirect
121+
golang.org/x/text v0.34.0 // indirect
122+
golang.org/x/time v0.14.0 // indirect
123+
google.golang.org/api v0.269.0 // indirect
124+
google.golang.org/genproto v0.0.0-20260226221140-a57be14db171 // indirect
125+
google.golang.org/genproto/googleapis/api v0.0.0-20260226221140-a57be14db171 // indirect
126+
google.golang.org/genproto/googleapis/rpc v0.0.0-20260226221140-a57be14db171 // indirect
127+
google.golang.org/grpc v1.79.1 // indirect
128+
google.golang.org/protobuf v1.36.11 // indirect
129+
gopkg.in/ini.v1 v1.67.1 // indirect
119130
)

0 commit comments

Comments
 (0)