@@ -99,12 +99,12 @@ github.com/gliderlabs/ssh v0.3.8 h1:a4YXD1V7xMF9g5nTkdfnja3Sxy1PVDCj1Zg4Wb8vY6c=
9999github.com/gliderlabs/ssh v0.3.8 /go.mod h1:xYoytBv1sV0aL3CavoDuJIQNURXkkfPA/wxQ1pL1fAU =
100100github.com/go-git/gcfg/v2 v2.0.2 h1:MY5SIIfTGGEMhdA7d7JePuVVxtKL7Hp+ApGDJAJ7dpo =
101101github.com/go-git/gcfg/v2 v2.0.2 /go.mod h1:/lv2NsxvhepuMrldsFilrgct6pxzpGdSRC13ydTLSLs =
102- github.com/go-git/go-billy/v6 v6.0.0-20260114122816-19306b749ecc h1:rhkjrnRkamkRC7woapp425E4CAH6RPcqsS9X8LA93IY =
103- github.com/go-git/go-billy/v6 v6.0.0-20260114122816-19306b749ecc /go.mod h1:X1oe0Z2qMsa9hkar3AAPuL9hu4Mi3ztXEjdqRhr6fcc =
102+ github.com/go-git/go-billy/v6 v6.0.0-20260226131633-45bd0956d66f h1:Uvbx7nITO3Sd1GdXarX0TbyYmOaSNIJP0mm4LocEyyA =
103+ github.com/go-git/go-billy/v6 v6.0.0-20260226131633-45bd0956d66f /go.mod h1:ZW9JC5gionMP1kv5uiaOaV23q0FFmNrVOV8VW+y/acc =
104104github.com/go-git/go-git-fixtures/v5 v5.1.2-0.20260122163445-0622d7459a67 h1:3hutPZF+/FBjR/9MdsLJ7e1mlt9pwHgwxMW7CrbmWII =
105105github.com/go-git/go-git-fixtures/v5 v5.1.2-0.20260122163445-0622d7459a67 /go.mod h1:xKt0pNHST9tYHvbiLxSY27CQWFwgIxBJuDrOE0JvbZw =
106- github.com/go-git/go-git/v6 v6.0.0-20260223163356-097ea99c34a7 h1:Nnl2N5L5DSMTbfSU3zhBe/9U5rBGYGSigzb2rAOqb80 =
107- github.com/go-git/go-git/v6 v6.0.0-20260223163356-097ea99c34a7 /go.mod h1:B88nWzfnhTlIikoJ4d84Nc9noKS5mJoA7SgDdkt0aPU =
106+ github.com/go-git/go-git/v6 v6.0.0-20260304174202-7077091fca9c h1:Ze40Bwk6O6dzIApcP/U87qR+mJGYm7rADNRrGJgyB7s =
107+ github.com/go-git/go-git/v6 v6.0.0-20260304174202-7077091fca9c /go.mod h1:V/qoTD4qCYizR+fKFA9++d2APoE8Yheci7dXALaSeuI =
108108github.com/go-jose/go-jose/v4 v4.1.3 h1:CVLmWDhDVRa6Mi/IgCgaopNosCaHz7zrMeF9MlZRkrs =
109109github.com/go-jose/go-jose/v4 v4.1.3 /go.mod h1:x4oUasVrzR7071A4TnHLGSPpNOm2a21K9Kf04k1rs08 =
110110github.com/go-logr/logr v1.2.2 /go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A =
@@ -174,8 +174,8 @@ github.com/mattn/go-runewidth v0.0.19 h1:v++JhqYnZuu5jSKrk9RbgF5v4CGUjqRfBm05byF
174174github.com/mattn/go-runewidth v0.0.19 /go.mod h1:XBkDxAl56ILZc9knddidhrOlY5R/pDhgLpndooCuJAs =
175175github.com/muesli/cancelreader v0.2.2 h1:3I4Kt4BQjOR54NavqnDogx/MIoWBFa0StPA8ELUXHmA =
176176github.com/muesli/cancelreader v0.2.2 /go.mod h1:3XuTXfFS2VjM+HTLZY9Ak0l6eUKfijIfMUZ4EgX0QYo =
177- github.com/ossf/osv-schema/bindings/go v0.0.0-20260129002236-09a17f85b44a h1:XHKiGf7vsACh43gFCBb5lOxDjnY6CQYNoQXsO/SlI6k =
178- github.com/ossf/osv-schema/bindings/go v0.0.0-20260129002236-09a17f85b44a /go.mod h1:Eo7R19vlnflsCRdHW1ynyNUyoRwxdaTmTWD9MtKnJTc =
177+ github.com/ossf/osv-schema/bindings/go v0.0.0-20260304051245-ec3272c283e4 h1:4zC49SlXs2waAuZJFEP1lAGf9Bgjg8SQww6y8C9znJ0 =
178+ github.com/ossf/osv-schema/bindings/go v0.0.0-20260304051245-ec3272c283e4 /go.mod h1:NJzqZPEfOy3B1dWe9pKRtmxJ/UF1++6apnQLjz3du8E =
179179github.com/pjbgf/sha1cd v0.5.0 h1:a+UkboSi1znleCDUNT3M5YxjOnN1fz2FhN48FlwCxs0 =
180180github.com/pjbgf/sha1cd v0.5.0 /go.mod h1:lhpGlyHLpQZoxMv8HcgXvZEhcGs0PG/vsZnEJ7H0iCM =
181181github.com/planetscale/vtprotobuf v0.6.1-0.20240319094008-0393e58bdf10 h1:GFCKgmp0tecUJ0sJuv4pzYCqS9+RGSn52M3FUwPs+uo =
@@ -222,24 +222,24 @@ go.opencensus.io v0.24.0 h1:y73uSU6J157QMP2kn2r30vwW1A2W2WFwSCGnAVxeaD0=
222222go.opencensus.io v0.24.0 /go.mod h1:vNK8G9p7aAivkbmorf4v+7Hgx+Zs0yY+0fOtgBfjQKo =
223223go.opentelemetry.io/auto/sdk v1.2.1 h1:jXsnJ4Lmnqd11kwkBV2LgLoFMZKizbCi5fNZ/ipaZ64 =
224224go.opentelemetry.io/auto/sdk v1.2.1 /go.mod h1:KRTj+aOaElaLi+wW1kO/DZRXwkF4C5xPbEe3ZiIhN7Y =
225- go.opentelemetry.io/contrib/detectors/gcp v1.40 .0 h1:Awaf8gmW99tZTOWqkLCOl6aw1/rxAWVlHsHIZ3fT2sA =
226- go.opentelemetry.io/contrib/detectors/gcp v1.40 .0 /go.mod h1:99OY9ZCqyLkzJLTh5XhECpLRSxcZl+ZDKBEO+jMBFR4 =
225+ go.opentelemetry.io/contrib/detectors/gcp v1.41 .0 h1:MBzEwqhroF0JK0DpTVYWDxsenxm6L4PqOEfA90uZ5AA =
226+ go.opentelemetry.io/contrib/detectors/gcp v1.41 .0 /go.mod h1:5pSDD0v0t2HqUmPC5cBBc+nLQO4dLYWnzBNheXLBLgs =
227227go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.63.0 h1:YH4g8lQroajqUwWbq/tr2QX1JFmEXaDLgG+ew9bLMWo =
228228go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.63.0 /go.mod h1:fvPi2qXDqFs8M4B4fmJhE92TyQs9Ydjlg3RvfUp+NbQ =
229- go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.65 .0 h1:7iP2uCb7sGddAr30RRS6xjKy7AZ2JtTOPA3oolgVSw8 =
230- go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.65 .0 /go.mod h1:c7hN3ddxs/z6q9xwvfLPk+UHlWRQyaeR1LdgfL/66l0 =
231- go.opentelemetry.io/otel v1.40 .0 h1:oA5YeOcpRTXq6NN7frwmwFR0Cn3RhTVZvXsP4duvCms =
232- go.opentelemetry.io/otel v1.40 .0 /go.mod h1:IMb+uXZUKkMXdPddhwAHm6UfOwJyh4ct1ybIlV14J0g =
229+ go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.66 .0 h1:PnV4kVnw0zOmwwFkAzCN5O07fw1YOIQor120zrh0AVo =
230+ go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.66 .0 /go.mod h1:ofAwF4uinaf8SXdVzzbL4OsxJ3VfeEg3f/F6CeF49/Y =
231+ go.opentelemetry.io/otel v1.41 .0 h1:YlEwVsGAlCvczDILpUXpIpPSL/VPugt7zHThEMLce1c =
232+ go.opentelemetry.io/otel v1.41 .0 /go.mod h1:Yt4UwgEKeT05QbLwbyHXEwhnjxNO6D8L5PQP51/46dE =
233233go.opentelemetry.io/otel/exporters/stdout/stdoutmetric v1.39.0 h1:5gn2urDL/FBnK8OkCfD1j3/ER79rUuTYmCvlXBKeYL8 =
234234go.opentelemetry.io/otel/exporters/stdout/stdoutmetric v1.39.0 /go.mod h1:0fBG6ZJxhqByfFZDwSwpZGzJU671HkwpWaNe2t4VUPI =
235- go.opentelemetry.io/otel/metric v1.40 .0 h1:rcZe317KPftE2rstWIBitCdVp89A2HqjkxR3c11+p9g =
236- go.opentelemetry.io/otel/metric v1.40 .0 /go.mod h1:ib/crwQH7N3r5kfiBZQbwrTge743UDc7DTFVZrrXnqc =
237- go.opentelemetry.io/otel/sdk v1.40 .0 h1:KHW/jUzgo6wsPh9At46+h4upjtccTmuZCFAc9OJ71f8 =
238- go.opentelemetry.io/otel/sdk v1.40 .0 /go.mod h1:Ph7EFdYvxq72Y8Li9q8KebuYUr2KoeyHx0DRMKrYBUE =
239- go.opentelemetry.io/otel/sdk/metric v1.40 .0 h1:mtmdVqgQkeRxHgRv4qhyJduP3fYJRMX4AtAlbuWdCYw =
240- go.opentelemetry.io/otel/sdk/metric v1.40 .0 /go.mod h1:4Z2bGMf0KSK3uRjlczMOeMhKU2rhUqdWNoKcYrtcBPg =
241- go.opentelemetry.io/otel/trace v1.40 .0 h1:WA4etStDttCSYuhwvEa8OP8I5EWu24lkOzp+ZYblVjw =
242- go.opentelemetry.io/otel/trace v1.40 .0 /go.mod h1:zeAhriXecNGP/s2SEG3+Y8X9ujcJOTqQ5RgdEJcawiA =
235+ go.opentelemetry.io/otel/metric v1.41 .0 h1:rFnDcs4gRzBcsO9tS8LCpgR0dxg4aaxWlJxCno7JlTQ =
236+ go.opentelemetry.io/otel/metric v1.41 .0 /go.mod h1:xPvCwd9pU0VN8tPZYzDZV/BMj9CM9vs00GuBjeKhJps =
237+ go.opentelemetry.io/otel/sdk v1.41 .0 h1:YPIEXKmiAwkGl3Gu1huk1aYWwtpRLeskpV+wPisxBp8 =
238+ go.opentelemetry.io/otel/sdk v1.41 .0 /go.mod h1:ahFdU0G5y8IxglBf0QBJXgSe7agzjE4GiTJ6HT9ud90 =
239+ go.opentelemetry.io/otel/sdk/metric v1.41 .0 h1:siZQIYBAUd1rlIWQT2uCxWJxcCO7q3TriaMlf08rXw8 =
240+ go.opentelemetry.io/otel/sdk/metric v1.41 .0 /go.mod h1:HNBuSvT7ROaGtGI50ArdRLUnvRTRGniSUZbxiWxSO8Y =
241+ go.opentelemetry.io/otel/trace v1.41 .0 h1:Vbk2co6bhj8L59ZJ6/xFTskY+tGAbOnCtQGVVa9TIN0 =
242+ go.opentelemetry.io/otel/trace v1.41 .0 /go.mod h1:U1NU4ULCoxeDKc09yCWdWe+3QoyweJcISEVa1RBzOis =
243243go.uber.org/goleak v1.3.0 h1:2K3zAYmnTNqV73imy9J1T3WC+gmCePx2hEGkimedGto =
244244go.uber.org/goleak v1.3.0 /go.mod h1:CoHD4mav9JJNrW/WLlf7HGZPjdw8EucARQHekz1X6bE =
245245go.yaml.in/yaml/v2 v2.4.3 h1:6gvOSjQoTB3vt1l+CU+tSyi/HOjfOjRLJ4YwYZGwRO0 =
@@ -303,8 +303,8 @@ google.golang.org/genproto v0.0.0-20190819201941-24fa4b261c55/go.mod h1:DMBHOl98
303303google.golang.org/genproto v0.0.0-20200526211855-cb27e3aa2013 /go.mod h1:NbSheEEYHJ7i3ixzK3sjbqSGDJWnxyFXZblF3eUsNvo =
304304google.golang.org/genproto v0.0.0-20260128011058-8636f8732409 h1:VQZ/yAbAtjkHgH80teYd2em3xtIkkHd7ZhqfH2N9CsM =
305305google.golang.org/genproto v0.0.0-20260128011058-8636f8732409 /go.mod h1:rxKD3IEILWEu3P44seeNOAwZN4SaoKaQ/2eTg4mM6EM =
306- google.golang.org/genproto/googleapis/api v0.0.0-20260223185530-2f722ef697dc h1:ULD+ToGXUIU6Pkzr1ARxdyvwfHbelw+agoFDRbLg4TU =
307- google.golang.org/genproto/googleapis/api v0.0.0-20260223185530-2f722ef697dc /go.mod h1:M5krXqk4GhBKvB596udGL3UyjL4I1+cTbK0orROM9ng =
306+ google.golang.org/genproto/googleapis/api v0.0.0-20260226221140-a57be14db171 h1:tu/dtnW1o3wfaxCOjSLn5IRX4YDcJrtlpzYkhHhGaC4 =
307+ google.golang.org/genproto/googleapis/api v0.0.0-20260226221140-a57be14db171 /go.mod h1:M5krXqk4GhBKvB596udGL3UyjL4I1+cTbK0orROM9ng =
308308google.golang.org/genproto/googleapis/rpc v0.0.0-20260217215200-42d3e9bedb6d h1:t/LOSXPJ9R0B6fnZNyALBRfZBH0Uy0gT+uR+SJ6syqQ =
309309google.golang.org/genproto/googleapis/rpc v0.0.0-20260217215200-42d3e9bedb6d /go.mod h1:4Hqkh8ycfw05ld/3BWL7rJOSfebL2Q+DVDeRgYgxUU8 =
310310google.golang.org/grpc v1.19.0 /go.mod h1:mqu4LbDTu4XGKhr4mRzUsmM4RtVoemTSY81AxZiDr8c =
@@ -336,8 +336,8 @@ gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
336336gopkg.in/yaml.v3 v3.0.1 /go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM =
337337honnef.co/go/tools v0.0.0-20190102054323-c2f93a96b099 /go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4 =
338338honnef.co/go/tools v0.0.0-20190523083050-ea95bdfd59fc /go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4 =
339- k8s.io/apimachinery v0.35.1 h1:yxO6gV555P1YV0SANtnTjXYfiivaTPvCTKX6w6qdDsU =
340- k8s.io/apimachinery v0.35.1 /go.mod h1:jQCgFZFR1F4Ik7hvr2g84RTJSZegBc8yHgFWKn//hns =
339+ k8s.io/apimachinery v0.35.2 h1:NqsM/mmZA7sHW02JZ9RTtk3wInRgbVxL8MPfzSANAK8 =
340+ k8s.io/apimachinery v0.35.2 /go.mod h1:jQCgFZFR1F4Ik7hvr2g84RTJSZegBc8yHgFWKn//hns =
341341sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 h1:IpInykpT6ceI+QxKBbEflcR5EXP7sU1kvOlxwZh5txg =
342342sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 /go.mod h1:mdzfpAEoE6DHQEN0uh9ZbOCuHbLK5wOm7dK4ctXE9Tg =
343343sigs.k8s.io/yaml v1.6.0 h1:G8fkbMSAFqgEFgh4b1wmtzDnioxFCUgTZhlbj5P9QYs =
0 commit comments