Skip to content

Commit a4928dd

Browse files
renovate-botrenovate-bot
committed
fix(deps): lock file maintenance vulnfeeds
1 parent 1b9cb07 commit a4928dd

File tree

12 files changed

+200
-198
lines changed

12 files changed

+200
-198
lines changed

‎vulnfeeds/cmd/alpine/Dockerfile‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
# See the License for the specific language governing permissions and
1313
# limitations under the License.
1414

15-
FROM golang:1.25.3-alpine@sha256:aee43c3ccbf24fdffb7295693b6e33b21e01baec1b2a55acc351fde345e9ec34 AS GO_BUILD
15+
FROM golang:1.25.4-alpine@sha256:d3f0cf7723f3429e3f9ed846243970b20a2de7bae6a5b66fc5914e228d831bbb AS GO_BUILD
1616

1717
RUN mkdir /src
1818
WORKDIR /src
@@ -25,7 +25,7 @@ COPY ./ /src/
2525
RUN go build -o alpine-osv ./cmd/alpine/
2626

2727

28-
FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine@sha256:cdac858d976cb0e6bfdc3288fee5a0a7bf6348a009089be130b2009e28463c52
28+
FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine@sha256:080b442ad8ade79dd3c159fd89319dcccdb2d868e1c4e548267f3006fb0268f4
2929

3030
WORKDIR /root/
3131
COPY --from=GO_BUILD /src/alpine-osv ./

‎vulnfeeds/cmd/combine-to-osv/Dockerfile‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
# See the License for the specific language governing permissions and
1313
# limitations under the License.
1414

15-
FROM golang:1.25.3-alpine@sha256:aee43c3ccbf24fdffb7295693b6e33b21e01baec1b2a55acc351fde345e9ec34 AS GO_BUILD
15+
FROM golang:1.25.4-alpine@sha256:d3f0cf7723f3429e3f9ed846243970b20a2de7bae6a5b66fc5914e228d831bbb AS GO_BUILD
1616

1717
RUN mkdir /src
1818
WORKDIR /src
@@ -26,7 +26,7 @@ RUN go build -o combine-to-osv ./cmd/combine-to-osv/
2626
RUN go build -o download-cves ./cmd/download-cves/
2727

2828

29-
FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine@sha256:cdac858d976cb0e6bfdc3288fee5a0a7bf6348a009089be130b2009e28463c52
29+
FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine@sha256:080b442ad8ade79dd3c159fd89319dcccdb2d868e1c4e548267f3006fb0268f4
3030
RUN apk --no-cache add jq
3131

3232
WORKDIR /root/

‎vulnfeeds/cmd/cpe-repo-gen/Dockerfile‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
# See the License for the specific language governing permissions and
1313
# limitations under the License.
1414

15-
FROM golang:1.25.3-alpine@sha256:aee43c3ccbf24fdffb7295693b6e33b21e01baec1b2a55acc351fde345e9ec34 AS GO_BUILD
15+
FROM golang:1.25.4-alpine@sha256:d3f0cf7723f3429e3f9ed846243970b20a2de7bae6a5b66fc5914e228d831bbb AS GO_BUILD
1616

1717
RUN mkdir /src
1818
WORKDIR /src
@@ -24,7 +24,7 @@ RUN go mod download
2424
COPY ./ /src/
2525
RUN CGO_ENABLED=0 go build -o cpe-repo-gen ./cmd/cpe-repo-gen
2626

27-
FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine@sha256:cdac858d976cb0e6bfdc3288fee5a0a7bf6348a009089be130b2009e28463c52
27+
FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine@sha256:080b442ad8ade79dd3c159fd89319dcccdb2d868e1c4e548267f3006fb0268f4
2828

2929
RUN apk add --no-cache unzip
3030

‎vulnfeeds/cmd/cve-bulk-converter/Dockerfile‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
# See the License for the specific language governing permissions and
1313
# limitations under the License.
1414

15-
FROM golang:1.25.3-alpine@sha256:aee43c3ccbf24fdffb7295693b6e33b21e01baec1b2a55acc351fde345e9ec34 AS go_build
15+
FROM golang:1.25.4-alpine@sha256:d3f0cf7723f3429e3f9ed846243970b20a2de7bae6a5b66fc5914e228d831bbb AS go_build
1616

1717
RUN mkdir /src
1818
WORKDIR /src
@@ -25,7 +25,7 @@ RUN go mod download && go mod verify
2525
COPY ./ /src/
2626
RUN go build -o cve-bulk-converter ./cmd/cve-bulk-converter/
2727

28-
FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine@sha256:cdac858d976cb0e6bfdc3288fee5a0a7bf6348a009089be130b2009e28463c52
28+
FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine@sha256:080b442ad8ade79dd3c159fd89319dcccdb2d868e1c4e548267f3006fb0268f4
2929
RUN apk --no-cache add jq
3030

3131
WORKDIR /root/

‎vulnfeeds/cmd/debian-copyright-mirror/Dockerfile‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
# See the License for the specific language governing permissions and
1313
# limitations under the License.
1414

15-
FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine@sha256:cdac858d976cb0e6bfdc3288fee5a0a7bf6348a009089be130b2009e28463c52
15+
FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine@sha256:080b442ad8ade79dd3c159fd89319dcccdb2d868e1c4e548267f3006fb0268f4
1616

1717
RUN apk add py3-yaml
1818

‎vulnfeeds/cmd/debian/Dockerfile‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
# See the License for the specific language governing permissions and
1313
# limitations under the License.
1414

15-
FROM golang:1.25.3-alpine@sha256:aee43c3ccbf24fdffb7295693b6e33b21e01baec1b2a55acc351fde345e9ec34 AS GO_BUILD
15+
FROM golang:1.25.4-alpine@sha256:d3f0cf7723f3429e3f9ed846243970b20a2de7bae6a5b66fc5914e228d831bbb AS GO_BUILD
1616

1717
RUN mkdir /src
1818
WORKDIR /src
@@ -25,7 +25,7 @@ COPY ./ /src/
2525
RUN go build -o debian ./cmd/debian/
2626

2727

28-
FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine@sha256:cdac858d976cb0e6bfdc3288fee5a0a7bf6348a009089be130b2009e28463c52
28+
FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine@sha256:080b442ad8ade79dd3c159fd89319dcccdb2d868e1c4e548267f3006fb0268f4
2929

3030
WORKDIR /root/
3131
COPY --from=GO_BUILD /src/debian ./

‎vulnfeeds/cmd/download-cves/Dockerfile‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
# See the License for the specific language governing permissions and
1313
# limitations under the License.
1414

15-
FROM golang:1.25.3-alpine@sha256:aee43c3ccbf24fdffb7295693b6e33b21e01baec1b2a55acc351fde345e9ec34 AS GO_BUILD
15+
FROM golang:1.25.4-alpine@sha256:d3f0cf7723f3429e3f9ed846243970b20a2de7bae6a5b66fc5914e228d831bbb AS GO_BUILD
1616

1717
RUN mkdir /src
1818
WORKDIR /src
@@ -24,7 +24,7 @@ RUN go mod download
2424
COPY ./ /src/
2525
RUN go build -o download-cves ./cmd/download-cves/
2626

27-
FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine@sha256:cdac858d976cb0e6bfdc3288fee5a0a7bf6348a009089be130b2009e28463c52
27+
FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine@sha256:080b442ad8ade79dd3c159fd89319dcccdb2d868e1c4e548267f3006fb0268f4
2828

2929
WORKDIR /usr/local/bin
3030
COPY --from=GO_BUILD /src/download-cves ./

‎vulnfeeds/cmd/nvd-cve-osv/Dockerfile‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
# See the License for the specific language governing permissions and
1313
# limitations under the License.
1414

15-
FROM golang:1.25.3-alpine@sha256:aee43c3ccbf24fdffb7295693b6e33b21e01baec1b2a55acc351fde345e9ec34 AS GO_BUILD
15+
FROM golang:1.25.4-alpine@sha256:d3f0cf7723f3429e3f9ed846243970b20a2de7bae6a5b66fc5914e228d831bbb AS GO_BUILD
1616

1717
WORKDIR /go/src
1818

@@ -22,7 +22,7 @@ RUN go mod download && go mod verify
2222
COPY . .
2323
RUN CGO_ENABLED=0 go build -v -o /usr/local/bin ./cmd/nvd-cve-osv ./cmd/download-cves
2424

25-
FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine@sha256:cdac858d976cb0e6bfdc3288fee5a0a7bf6348a009089be130b2009e28463c52
25+
FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine@sha256:080b442ad8ade79dd3c159fd89319dcccdb2d868e1c4e548267f3006fb0268f4
2626
RUN apk --no-cache add jq
2727

2828
COPY --from=GO_BUILD /usr/local/bin/ ./usr/local/bin/

‎vulnfeeds/go.mod‎

Lines changed: 28 additions & 28 deletions
Original file line numberDiff line numberDiff line change
@@ -1,35 +1,35 @@
11
module github.com/google/osv/vulnfeeds
22

3-
go 1.25.3
3+
go 1.25.4
44

55
require (
6-
cloud.google.com/go/secretmanager v1.15.0
7-
cloud.google.com/go/storage v1.57.0
6+
cloud.google.com/go/secretmanager v1.16.0
7+
cloud.google.com/go/storage v1.57.1
88
github.com/aquasecurity/go-pep440-version v0.0.1
99
github.com/atombender/go-jsonschema v0.20.0
1010
github.com/charmbracelet/lipgloss v1.1.0
11-
github.com/gkampitakis/go-snaps v0.5.7
12-
github.com/go-git/go-git/v5 v5.16.2
11+
github.com/gkampitakis/go-snaps v0.5.15
12+
github.com/go-git/go-git/v5 v5.16.3
1313
github.com/google/go-cmp v0.7.0
1414
github.com/google/osv-scanner v1.9.2
1515
github.com/knqyf263/go-cpe v0.0.0-20230627041855-cb0794d06872
16-
github.com/ossf/osv-schema/bindings/go v0.0.0-20250926044009-f6ae0b6bae32
16+
github.com/ossf/osv-schema/bindings/go v0.0.0-20251029033743-5e05f9d00d92
1717
github.com/sethvargo/go-retry v0.3.0
18-
google.golang.org/api v0.247.0
18+
google.golang.org/api v0.256.0
1919
gopkg.in/dnaeon/go-vcr.v4 v4.0.5
2020
gopkg.in/yaml.v2 v2.4.0
2121
)
2222

2323
require (
2424
cel.dev/expr v0.24.0 // indirect
2525
cloud.google.com/go v0.121.6 // indirect
26-
cloud.google.com/go/auth v0.16.5 // indirect
26+
cloud.google.com/go/auth v0.17.0 // indirect
2727
cloud.google.com/go/auth/oauth2adapt v0.2.8 // indirect
28-
cloud.google.com/go/compute/metadata v0.8.0 // indirect
28+
cloud.google.com/go/compute/metadata v0.9.0 // indirect
2929
cloud.google.com/go/iam v1.5.2 // indirect
3030
cloud.google.com/go/monitoring v1.24.2 // indirect
3131
dario.cat/mergo v1.0.2 // indirect
32-
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.27.0 // indirect
32+
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.29.0 // indirect
3333
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.53.0 // indirect
3434
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.53.0 // indirect
3535
github.com/Microsoft/go-winio v0.6.2 // indirect
@@ -48,18 +48,18 @@ require (
4848
github.com/envoyproxy/go-control-plane/envoy v1.32.4 // indirect
4949
github.com/envoyproxy/protoc-gen-validate v1.2.1 // indirect
5050
github.com/felixge/httpsnoop v1.0.4 // indirect
51-
github.com/gkampitakis/ciinfo v0.3.0 // indirect
51+
github.com/gkampitakis/ciinfo v0.3.2 // indirect
5252
github.com/gkampitakis/go-diff v1.3.2 // indirect
5353
github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect
5454
github.com/go-git/go-billy/v5 v5.6.2 // indirect
55-
github.com/go-jose/go-jose/v4 v4.0.5 // indirect
55+
github.com/go-jose/go-jose/v4 v4.1.2 // indirect
5656
github.com/go-logr/logr v1.4.3 // indirect
5757
github.com/go-logr/stdr v1.2.2 // indirect
5858
github.com/goccy/go-yaml v1.18.0 // indirect
5959
github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 // indirect
6060
github.com/google/s2a-go v0.1.9 // indirect
6161
github.com/google/uuid v1.6.0 // indirect
62-
github.com/googleapis/enterprise-certificate-proxy v0.3.6 // indirect
62+
github.com/googleapis/enterprise-certificate-proxy v0.3.7 // indirect
6363
github.com/googleapis/gax-go/v2 v2.15.0 // indirect
6464
github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect
6565
github.com/kevinburke/ssh_config v1.2.0 // indirect
@@ -90,24 +90,24 @@ require (
9090
go.opentelemetry.io/contrib/detectors/gcp v1.36.0 // indirect
9191
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.61.0 // indirect
9292
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.61.0 // indirect
93-
go.opentelemetry.io/otel v1.36.0 // indirect
94-
go.opentelemetry.io/otel/metric v1.36.0 // indirect
95-
go.opentelemetry.io/otel/sdk v1.36.0 // indirect
96-
go.opentelemetry.io/otel/sdk/metric v1.36.0 // indirect
97-
go.opentelemetry.io/otel/trace v1.36.0 // indirect
98-
golang.org/x/crypto v0.41.0 // indirect
93+
go.opentelemetry.io/otel v1.37.0 // indirect
94+
go.opentelemetry.io/otel/metric v1.37.0 // indirect
95+
go.opentelemetry.io/otel/sdk v1.37.0 // indirect
96+
go.opentelemetry.io/otel/sdk/metric v1.37.0 // indirect
97+
go.opentelemetry.io/otel/trace v1.37.0 // indirect
98+
golang.org/x/crypto v0.43.0 // indirect
9999
golang.org/x/exp v0.0.0-20250819193227-8b4c13bb791b // indirect
100-
golang.org/x/net v0.43.0 // indirect
101-
golang.org/x/oauth2 v0.30.0 // indirect
102-
golang.org/x/sync v0.16.0 // indirect
103-
golang.org/x/sys v0.35.0 // indirect
104-
golang.org/x/text v0.28.0 // indirect
105-
golang.org/x/time v0.12.0 // indirect
100+
golang.org/x/net v0.46.0 // indirect
101+
golang.org/x/oauth2 v0.33.0 // indirect
102+
golang.org/x/sync v0.18.0 // indirect
103+
golang.org/x/sys v0.37.0 // indirect
104+
golang.org/x/text v0.30.0 // indirect
105+
golang.org/x/time v0.14.0 // indirect
106106
golang.org/x/xerrors v0.0.0-20240903120638-7835f813f4da // indirect
107107
google.golang.org/genproto v0.0.0-20250603155806-513f23925822 // indirect
108108
google.golang.org/genproto/googleapis/api v0.0.0-20250818200422-3122310a409c // indirect
109-
google.golang.org/genproto/googleapis/rpc v0.0.0-20250818200422-3122310a409c // indirect
110-
google.golang.org/grpc v1.74.3 // indirect
111-
google.golang.org/protobuf v1.36.7 // indirect
109+
google.golang.org/genproto/googleapis/rpc v0.0.0-20251103181224-f26f9409b101 // indirect
110+
google.golang.org/grpc v1.76.0 // indirect
111+
google.golang.org/protobuf v1.36.10 // indirect
112112
gopkg.in/warnings.v0 v0.1.2 // indirect
113113
)

0 commit comments

Comments
 (0)