Draft: Identity proof - do NOT merge

Using this to prove my identity. KJIc1D4zXJbRybKEJrWd Signed-off-by: Alan Pope <alan.pope@anchore.com>
2026-10-12 14:17:20 +02:00 · 2024-08-07 08:12:41 +01:00
8 changed files with 161 additions and 105 deletions
@@ -42,7 +42,7 @@ tools:
  # used for signing the checksums file at release
  - name: cosign
    version:
-      want: v2.4.0
+      want: v2.3.0
    method: github-release
    with:
      repo: sigstore/cosign
@@ -39,7 +39,7 @@ jobs:
          OUTPUT="${OUTPUT//$'\r'/'%0D'}" # URL encode all '\r' characters
          echo "result=$OUTPUT" >> $GITHUB_OUTPUT

-      - uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # v4.3.6
+      - uses: actions/upload-artifact@89ef406dd8d7e03cfd12d9e0a4a378f454709029 # v4.3.5
        with:
          name: benchmark-test-results
          path: test/results/**/*
@@ -45,7 +45,7 @@ jobs:

    # Initializes the CodeQL tools for scanning.
    - name: Initialize CodeQL
-      uses: github/codeql-action/init@eb055d739abdc2e8de2e5f4ba1a8b246daa779aa #v3.26.0
+      uses: github/codeql-action/init@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a #v3.25.15
      with:
        languages: ${{ matrix.language }}
        # If you wish to specify custom queries, you can do so here or in a config file.
@@ -56,7 +56,7 @@ jobs:
    # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
    # If this step fails, then you should remove it and run the build manually (see below)
    - name: Autobuild
-      uses: github/codeql-action/autobuild@eb055d739abdc2e8de2e5f4ba1a8b246daa779aa #v3.26.0
+      uses: github/codeql-action/autobuild@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a #v3.25.15

    # ℹ️ Command-line programs to run using the OS shell.
    # 📚 https://git.io/JvXDl
@@ -70,4 +70,4 @@ jobs:
    #   make release

    - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@eb055d739abdc2e8de2e5f4ba1a8b246daa779aa #v3.26.0
+      uses: github/codeql-action/analyze@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a #v3.25.15
@@ -188,7 +188,7 @@ jobs:
    runs-on: macos-latest
    steps:
      - name: Install Cosign
-        uses: sigstore/cosign-installer@v3.6.0
+        uses: sigstore/cosign-installer@v3.5.0

      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 #v4.1.7

@@ -178,3 +178,5 @@ The Syft Team hold regular community meetings online. All are welcome to join to
 - Check the [calendar](https://calendar.google.com/calendar/u/0/r?cid=Y182OTM4dGt0MjRtajI0NnNzOThiaGtnM29qNEBncm91cC5jYWxlbmRhci5nb29nbGUuY29t) for the next meeting date. 
 - Add items to the [agenda](https://docs.google.com/document/d/1ZtSAa6fj2a6KRWviTn3WoJm09edvrNUp4Iz_dOjjyY8/edit?usp=sharing) (join [this group](https://groups.google.com/g/anchore-oss-community) for write access to the [agenda](https://docs.google.com/document/d/1ZtSAa6fj2a6KRWviTn3WoJm09edvrNUp4Iz_dOjjyY8/edit?usp=sharing))
 - See you there!
+
+<!-- KJIc1D4zXJbRybKEJrWd --> 
@@ -51,84 +51,138 @@ var noAssertion = map[string]string{
 	"/packages/TwilioNotifier.hpi:WEB-INF/lib/sdk-3.0.jar":                                           "pkg:maven/sdk/sdk@3.0",

 	// syft generates incorrect purls
-	"/packages/hudson.war:WEB-INF/lib/asm-2.2.3.jar":            "pkg:maven/asm/asm@2.2.3",
-	"/packages/hudson.war:WEB-INF/lib/asm-commons-2.2.3.jar":    "pkg:maven/asm/asm-commons@2.2.3",
-	"/packages/hudson.war:WEB-INF/lib/asm-tree-2.2.3.jar":       "pkg:maven/asm/asm-tree@2.2.3",
-	"/packages/hudson.war:WEB-INF/slave.jar":                    "pkg:maven/org.jvnet.hudson.main/remoting@1.390",
-	"/packages/hudson.war:WEB-INF/lib/xpp3_min-1.1.4c.jar":      "pkg:maven/xpp3_min/xpp3_min@1.1.4c",
-	"/packages/hudson.war:WEB-INF/lib/xpp3-1.1.4c.jar":          "pkg:maven/xpp3/xpp3@1.1.4c",
-	"/packages/hudson.war:WEB-INF/hudson-cli.jar":               "pkg:maven/org.jvnet.hudson.main/hudson-cli@1.390",
-	"/packages/hudson.war:WEB-INF/lib/dom4j-1.6.1-hudson-3.jar": "pkg:maven/org.jvnet.hudson.dom4j/dom4j@1.6.1-hudson-3",
-	"/packages/xpp3_min-1.1.4c.jar":                             "pkg:maven/xpp3/xpp3_min@1.1.4c",
+	"/packages/akka-actor_2.13-2.6.6.jar":                        "pkg:maven/com.typesafe.akka/akka-actor_2.13@2.6.6",
+	"/packages/akka-management-cluster-bootstrap_2.13-1.2.0.jar": "pkg:maven/com.lightbend.akka.management/akka-management-cluster-bootstrap_2.13@1.2.0",
+	"/packages/hudson.war:WEB-INF/lib/asm-2.2.3.jar":             "pkg:maven/asm/asm@2.2.3",
+	"/packages/hudson.war:WEB-INF/lib/asm-commons-2.2.3.jar":     "pkg:maven/asm/asm-commons@2.2.3",
+	"/packages/hudson.war:WEB-INF/lib/asm-tree-2.2.3.jar":        "pkg:maven/asm/asm-tree@2.2.3",
+	"/packages/hudson.war:WEB-INF/slave.jar":                     "pkg:maven/org.jvnet.hudson.main/remoting@1.390",
+	"/packages/hudson.war:WEB-INF/lib/xpp3_min-1.1.4c.jar":       "pkg:maven/xpp3_min/xpp3_min@1.1.4c",
+	"/packages/hudson.war:WEB-INF/lib/xpp3-1.1.4c.jar":           "pkg:maven/xpp3/xpp3@1.1.4c",
+	"/packages/hudson.war:WEB-INF/hudson-cli.jar":                "pkg:maven/org.jvnet.hudson.main/hudson-cli@1.390",
+	"/packages/hudson.war:WEB-INF/lib/dom4j-1.6.1-hudson-3.jar":  "pkg:maven/org.jvnet.hudson.dom4j/dom4j@1.6.1-hudson-3",
+	"/packages/xpp3_min-1.1.4c.jar":                              "pkg:maven/xpp3/xpp3_min@1.1.4c",
+
+	// syft generates an unstable purl
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-auth":                         "pkg:maven/org.apache.dubbo/dubbo-auth@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-cluster":                      "pkg:maven/org.apache.dubbo/dubbo-cluster@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-common":                       "pkg:maven/org.apache.dubbo/dubbo-common@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-compatible":                   "pkg:maven/org.apache.dubbo/dubbo-compatible@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-config-api":                   "pkg:maven/org.apache.dubbo/dubbo-config-api@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-config-spring":                "pkg:maven/org.apache.dubbo/dubbo-config-spring@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-configcenter-apollo":          "pkg:maven/org.apache.dubbo/dubbo-configcenter-apollo@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-configcenter-nacos":           "pkg:maven/org.apache.dubbo/dubbo-configcenter-nacos@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-configcenter-zookeeper":       "pkg:maven/org.apache.dubbo/dubbo-configcenter-zookeeper@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-container-api":                "pkg:maven/org.apache.dubbo/dubbo-container-api@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-container-spring":             "pkg:maven/org.apache.dubbo/dubbo-container-spring@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-filter-cache":                 "pkg:maven/org.apache.dubbo/dubbo-filter-cache@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-filter-validation":            "pkg:maven/org.apache.dubbo/dubbo-filter-validation@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-kubernetes":                   "pkg:maven/org.apache.dubbo/dubbo-kubernetes@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-metadata-api":                 "pkg:maven/org.apache.dubbo/dubbo-metadata-api@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-metadata-definition-protobuf": "pkg:maven/org.apache.dubbo/dubbo-metadata-definition-protobuf@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-metadata-report-nacos":        "pkg:maven/org.apache.dubbo/dubbo-metadata-report-nacos@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-metadata-report-redis":        "pkg:maven/org.apache.dubbo/dubbo-metadata-report-redis@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-metadata-report-zookeeper":    "pkg:maven/org.apache.dubbo/dubbo-metadata-report-zookeeper@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-metrics-api":                  "pkg:maven/org.apache.dubbo/dubbo-metrics-api@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-metrics-prometheus":           "pkg:maven/org.apache.dubbo/dubbo-metrics-prometheus@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-monitor-api":                  "pkg:maven/org.apache.dubbo/dubbo-monitor-api@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-monitor-default":              "pkg:maven/org.apache.dubbo/dubbo-monitor-default@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-qos":                          "pkg:maven/org.apache.dubbo/dubbo-qos@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-reactive":                     "pkg:maven/org.apache.dubbo/dubbo-reactive@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-registry-api":                 "pkg:maven/org.apache.dubbo/dubbo-registry-api@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-registry-multicast":           "pkg:maven/org.apache.dubbo/dubbo-registry-multicast@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-registry-multiple":            "pkg:maven/org.apache.dubbo/dubbo-registry-multiple@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-registry-nacos":               "pkg:maven/org.apache.dubbo/dubbo-registry-nacos@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-registry-zookeeper":           "pkg:maven/org.apache.dubbo/dubbo-registry-zookeeper@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-remoting-api":                 "pkg:maven/org.apache.dubbo/dubbo-remoting-api@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-remoting-http":                "pkg:maven/org.apache.dubbo/dubbo-remoting-http@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-remoting-netty":               "pkg:maven/org.apache.dubbo/dubbo-remoting-netty@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-remoting-netty4":              "pkg:maven/org.apache.dubbo/dubbo-remoting-netty4@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-remoting-zookeeper":           "pkg:maven/org.apache.dubbo/dubbo-remoting-zookeeper@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-remoting-zookeeper-curator5":  "pkg:maven/org.apache.dubbo/dubbo-remoting-zookeeper-curator5@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-rpc-api":                      "pkg:maven/org.apache.dubbo/dubbo-rpc-api@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-rpc-dubbo":                    "pkg:maven/org.apache.dubbo/dubbo-rpc-dubbo@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-rpc-grpc":                     "pkg:maven/org.apache.dubbo/dubbo-rpc-grpc@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-rpc-injvm":                    "pkg:maven/org.apache.dubbo/dubbo-rpc-injvm@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-rpc-rest":                     "pkg:maven/org.apache.dubbo/dubbo-rpc-rest@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-rpc-triple":                   "pkg:maven/org.apache.dubbo/dubbo-rpc-triple@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-serialization-api":            "pkg:maven/org.apache.dubbo/dubbo-serialization-api@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-serialization-fastjson2":      "pkg:maven/org.apache.dubbo/dubbo-serialization-fastjson2@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-serialization-hessian2":       "pkg:maven/org.apache.dubbo/dubbo-serialization-hessian2@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-serialization-jdk":            "pkg:maven/org.apache.dubbo/dubbo-serialization-jdk@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-xds":                          "pkg:maven/org.apache.dubbo/dubbo-xds@3.1.4",
+	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo":                              "pkg:maven/org.apache.dubbo/dubbo@3.1.4",
+	"/packages/dubbo-3.1.4.jar":                                                     "pkg:maven/org.apache.dubbo/dubbo@3.1.4",
 }

 // Constructed by:
 // syft anchore/test_images:java-1abc58f -o json | jq -r '.artifacts.[] | [.metadata.virtualPath, .purl, ""] | @csv' | grep 'pkg:maven' | sort | uniq >> /tmp/java_artifacts_mapping.txt
 // The map was then hand-edited for correctness by comparing to Maven Central.
 var expectedPURLs = map[string]string{
-	"/packages/activemq-client-5.18.2.jar":                                                 "pkg:maven/org.apache.activemq/activemq-client@5.18.2",
-	"/packages/activemq-protobuf-1.1.jar":                                                  "pkg:maven/org.apache.activemq.protobuf/activemq-protobuf@1.1",
-	"/packages/akka-actor_2.13-2.6.6.jar":                                                  "pkg:maven/com.typesafe.akka/akka-actor_2.13@2.6.6",
-	"/packages/akka-management-cluster-bootstrap_2.13-1.2.0.jar":                           "pkg:maven/com.lightbend.akka.management/akka-management-cluster-bootstrap_2.13@1.2.0",
-	"/packages/ant-1.10.3.jar":                                                             "pkg:maven/org.apache.ant/ant@1.10.3",
-	"/packages/apache-chainsaw-2.1.0.jar":                                                  "pkg:maven/log4j/apache-chainsaw@2.1.0",
-	"/packages/apache-log4j-extras-1.1.jar":                                                "pkg:maven/log4j/apache-log4j-extras@1.1",
-	"/packages/apoc-4.4.0.11.jar":                                                          "pkg:maven/org.neo4j.procedure/apoc@4.4.0.11",
-	"/packages/bc-fips-1.0.2.3.jar":                                                        "pkg:maven/org.bouncycastle/bc-fips@1.0.2.3",
-	"/packages/camel-core-3.1.0.jar":                                                       "pkg:maven/org.apache.camel/camel-core@3.1.0",
-	"/packages/cassandra-all-4.1.1.jar":                                                    "pkg:maven/org.apache.cassandra/cassandra-all@4.1.1",
-	"/packages/commons-logging-1.1.1.jar":                                                  "pkg:maven/commons-logging/commons-logging@1.1.1",
-	"/packages/commons-vfs-1.0.jar":                                                        "pkg:maven/commons-vfs/commons-vfs@1.0",
-	"/packages/cxf-rt-transports-http-2.7.3.jar":                                           "pkg:maven/org.apache.cxf/cxf-rt-transports-http@2.7.3",
-	"/packages/dubbo-3.1.4.jar:com.alibaba:hessian-lite":                                   "pkg:maven/com.alibaba/hessian-lite@3.2.13",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-auth":                                "pkg:maven/org.apache.dubbo/dubbo-auth@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-cluster":                             "pkg:maven/org.apache.dubbo/dubbo-cluster@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-common":                              "pkg:maven/org.apache.dubbo/dubbo-common@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-compatible":                          "pkg:maven/org.apache.dubbo/dubbo-compatible@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-config-api":                          "pkg:maven/org.apache.dubbo/dubbo-config-api@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-config-spring":                       "pkg:maven/org.apache.dubbo/dubbo-config-spring@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-configcenter-apollo":                 "pkg:maven/org.apache.dubbo/dubbo-configcenter-apollo@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-configcenter-nacos":                  "pkg:maven/org.apache.dubbo/dubbo-configcenter-nacos@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-configcenter-zookeeper":              "pkg:maven/org.apache.dubbo/dubbo-configcenter-zookeeper@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-container-api":                       "pkg:maven/org.apache.dubbo/dubbo-container-api@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-container-spring":                    "pkg:maven/org.apache.dubbo/dubbo-container-spring@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-filter-cache":                        "pkg:maven/org.apache.dubbo/dubbo-filter-cache@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-filter-validation":                   "pkg:maven/org.apache.dubbo/dubbo-filter-validation@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-kubernetes":                          "pkg:maven/org.apache.dubbo/dubbo-kubernetes@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-metadata-api":                        "pkg:maven/org.apache.dubbo/dubbo-metadata-api@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-metadata-definition-protobuf":        "pkg:maven/org.apache.dubbo/dubbo-metadata-definition-protobuf@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-metadata-report-nacos":               "pkg:maven/org.apache.dubbo/dubbo-metadata-report-nacos@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-metadata-report-redis":               "pkg:maven/org.apache.dubbo/dubbo-metadata-report-redis@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-metadata-report-zookeeper":           "pkg:maven/org.apache.dubbo/dubbo-metadata-report-zookeeper@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-metrics-api":                         "pkg:maven/org.apache.dubbo/dubbo-metrics-api@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-metrics-prometheus":                  "pkg:maven/org.apache.dubbo/dubbo-metrics-prometheus@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-monitor-api":                         "pkg:maven/org.apache.dubbo/dubbo-monitor-api@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-monitor-default":                     "pkg:maven/org.apache.dubbo/dubbo-monitor-default@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-qos":                                 "pkg:maven/org.apache.dubbo/dubbo-qos@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-reactive":                            "pkg:maven/org.apache.dubbo/dubbo-reactive@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-registry-api":                        "pkg:maven/org.apache.dubbo/dubbo-registry-api@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-registry-multicast":                  "pkg:maven/org.apache.dubbo/dubbo-registry-multicast@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-registry-multiple":                   "pkg:maven/org.apache.dubbo/dubbo-registry-multiple@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-registry-nacos":                      "pkg:maven/org.apache.dubbo/dubbo-registry-nacos@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-registry-zookeeper":                  "pkg:maven/org.apache.dubbo/dubbo-registry-zookeeper@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-remoting-api":                        "pkg:maven/org.apache.dubbo/dubbo-remoting-api@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-remoting-http":                       "pkg:maven/org.apache.dubbo/dubbo-remoting-http@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-remoting-netty":                      "pkg:maven/org.apache.dubbo/dubbo-remoting-netty@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-remoting-netty4":                     "pkg:maven/org.apache.dubbo/dubbo-remoting-netty4@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-remoting-zookeeper":                  "pkg:maven/org.apache.dubbo/dubbo-remoting-zookeeper@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-remoting-zookeeper-curator5":         "pkg:maven/org.apache.dubbo/dubbo-remoting-zookeeper-curator5@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-rpc-api":                             "pkg:maven/org.apache.dubbo/dubbo-rpc-api@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-rpc-dubbo":                           "pkg:maven/org.apache.dubbo/dubbo-rpc-dubbo@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-rpc-grpc":                            "pkg:maven/org.apache.dubbo/dubbo-rpc-grpc@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-rpc-injvm":                           "pkg:maven/org.apache.dubbo/dubbo-rpc-injvm@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-rpc-rest":                            "pkg:maven/org.apache.dubbo/dubbo-rpc-rest@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-rpc-triple":                          "pkg:maven/org.apache.dubbo/dubbo-rpc-triple@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-serialization-api":                   "pkg:maven/org.apache.dubbo/dubbo-serialization-api@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-serialization-fastjson2":             "pkg:maven/org.apache.dubbo/dubbo-serialization-fastjson2@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-serialization-hessian2":              "pkg:maven/org.apache.dubbo/dubbo-serialization-hessian2@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-serialization-jdk":                   "pkg:maven/org.apache.dubbo/dubbo-serialization-jdk@3.1.4",
-	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-xds":                                 "pkg:maven/org.apache.dubbo/dubbo-xds@3.1.4",
-	"/packages/dubbo-3.1.4.jar":                                                            "pkg:maven/org.apache.dubbo/dubbo@3.1.4",
+	"/packages/activemq-client-5.18.2.jar": "pkg:maven/org.apache.activemq/activemq-client@5.18.2",
+	"/packages/activemq-protobuf-1.1.jar":  "pkg:maven/org.apache.activemq.protobuf/activemq-protobuf@1.1",
+	// "/packages/akka-actor_2.13-2.6.6.jar":                                                                                                  "pkg:maven/com.typesafe.akka/akka-actor_2.13@2.6.6",
+	// "/packages/akka-management-cluster-bootstrap_2.13-1.2.0.jar":                                                                           "pkg:maven/com.lightbend.akka.management/akka-management-cluster-bootstrap_2.13@1.2.0",
+	"/packages/ant-1.10.3.jar":                           "pkg:maven/org.apache.ant/ant@1.10.3",
+	"/packages/apache-chainsaw-2.1.0.jar":                "pkg:maven/log4j/apache-chainsaw@2.1.0",
+	"/packages/apache-log4j-extras-1.1.jar":              "pkg:maven/log4j/apache-log4j-extras@1.1",
+	"/packages/apoc-4.4.0.11.jar":                        "pkg:maven/org.neo4j.procedure/apoc@4.4.0.11",
+	"/packages/bc-fips-1.0.2.3.jar":                      "pkg:maven/org.bouncycastle/bc-fips@1.0.2.3",
+	"/packages/camel-core-3.1.0.jar":                     "pkg:maven/org.apache.camel/camel-core@3.1.0",
+	"/packages/cassandra-all-4.1.1.jar":                  "pkg:maven/org.apache.cassandra/cassandra-all@4.1.1",
+	"/packages/commons-logging-1.1.1.jar":                "pkg:maven/commons-logging/commons-logging@1.1.1",
+	"/packages/commons-vfs-1.0.jar":                      "pkg:maven/commons-vfs/commons-vfs@1.0",
+	"/packages/cxf-rt-transports-http-2.7.3.jar":         "pkg:maven/org.apache.cxf/cxf-rt-transports-http@2.7.3",
+	"/packages/dubbo-3.1.4.jar:com.alibaba:hessian-lite": "pkg:maven/com.alibaba/hessian-lite@3.2.13",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-auth":                         "pkg:maven/org.apache.dubbo/dubbo-auth@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-cluster":                      "pkg:maven/org.apache.dubbo/dubbo-cluster@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-common":                       "pkg:maven/org.apache.dubbo/dubbo-common@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-compatible":                   "pkg:maven/org.apache.dubbo/dubbo-compatible@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-config-api":                   "pkg:maven/org.apache.dubbo/dubbo-config-api@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-config-spring":                "pkg:maven/org.apache.dubbo/dubbo-config-spring@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-configcenter-apollo":          "pkg:maven/org.apache.dubbo/dubbo-configcenter-apollo@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-configcenter-nacos":           "pkg:maven/org.apache.dubbo/dubbo-configcenter-nacos@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-configcenter-zookeeper":       "pkg:maven/org.apache.dubbo/dubbo-configcenter-zookeeper@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-container-api":                "pkg:maven/org.apache.dubbo/dubbo-container-api@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-container-spring":             "pkg:maven/org.apache.dubbo/dubbo-container-spring@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-filter-cache":                 "pkg:maven/org.apache.dubbo/dubbo-filter-cache@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-filter-validation":            "pkg:maven/org.apache.dubbo/dubbo-filter-validation@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-kubernetes":                   "pkg:maven/org.apache.dubbo/dubbo-kubernetes@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-metadata-api":                 "pkg:maven/org.apache.dubbo/dubbo-metadata-api@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-metadata-definition-protobuf": "pkg:maven/org.apache.dubbo/dubbo-metadata-definition-protobuf@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-metadata-report-nacos":        "pkg:maven/org.apache.dubbo/dubbo-metadata-report-nacos@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-metadata-report-redis":        "pkg:maven/org.apache.dubbo/dubbo-metadata-report-redis@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-metadata-report-zookeeper":    "pkg:maven/org.apache.dubbo/dubbo-metadata-report-zookeeper@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-metrics-api":                  "pkg:maven/org.apache.dubbo/dubbo-metrics-api@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-metrics-prometheus":           "pkg:maven/org.apache.dubbo/dubbo-metrics-prometheus@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-monitor-api":                  "pkg:maven/org.apache.dubbo/dubbo-monitor-api@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-monitor-default":              "pkg:maven/org.apache.dubbo/dubbo-monitor-default@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-qos":                          "pkg:maven/org.apache.dubbo/dubbo-qos@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-reactive":                     "pkg:maven/org.apache.dubbo/dubbo-reactive@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-registry-api":                 "pkg:maven/org.apache.dubbo/dubbo-registry-api@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-registry-multicast":           "pkg:maven/org.apache.dubbo/dubbo-registry-multicast@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-registry-multiple":            "pkg:maven/org.apache.dubbo/dubbo-registry-multiple@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-registry-nacos":               "pkg:maven/org.apache.dubbo/dubbo-registry-nacos@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-registry-zookeeper":           "pkg:maven/org.apache.dubbo/dubbo-registry-zookeeper@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-remoting-api":                 "pkg:maven/org.apache.dubbo/dubbo-remoting-api@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-remoting-http":                "pkg:maven/org.apache.dubbo/dubbo-remoting-http@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-remoting-netty":               "pkg:maven/org.apache.dubbo/dubbo-remoting-netty@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-remoting-netty4":              "pkg:maven/org.apache.dubbo/dubbo-remoting-netty4@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-remoting-zookeeper":           "pkg:maven/org.apache.dubbo/dubbo-remoting-zookeeper@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-remoting-zookeeper-curator5":  "pkg:maven/org.apache.dubbo/dubbo-remoting-zookeeper-curator5@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-rpc-api":                      "pkg:maven/org.apache.dubbo/dubbo-rpc-api@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-rpc-dubbo":                    "pkg:maven/org.apache.dubbo/dubbo-rpc-dubbo@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-rpc-grpc":                     "pkg:maven/org.apache.dubbo/dubbo-rpc-grpc@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-rpc-injvm":                    "pkg:maven/org.apache.dubbo/dubbo-rpc-injvm@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-rpc-rest":                     "pkg:maven/org.apache.dubbo/dubbo-rpc-rest@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-rpc-triple":                   "pkg:maven/org.apache.dubbo/dubbo-rpc-triple@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-serialization-api":            "pkg:maven/org.apache.dubbo/dubbo-serialization-api@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-serialization-fastjson2":      "pkg:maven/org.apache.dubbo/dubbo-serialization-fastjson2@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-serialization-hessian2":       "pkg:maven/org.apache.dubbo/dubbo-serialization-hessian2@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-serialization-jdk":            "pkg:maven/org.apache.dubbo/dubbo-serialization-jdk@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-xds":                          "pkg:maven/org.apache.dubbo/dubbo-xds@3.1.4",
+	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo":                              "pkg:maven/org.apache.dubbo/dubbo@3.1.4",
+	// "/packages/dubbo-3.1.4.jar":                                                                                                            "pkg:maven/org.apache.dubbo/dubbo@3.1.4",
 	"/packages/elasticsearch-8.10.2.jar":                                                   "pkg:maven/org.elasticsearch/elasticsearch@8.10.2",
 	"/packages/elasticsearch-rest-client-sniffer-7.17.11.jar":                              "pkg:maven/org.elasticsearch.client/elasticsearch-rest-client-sniffer@7.17.11",
 	"/packages/example-java-app-gradle-0.1.0.ear":                                          "pkg:maven/example-java-app-gradle/example-java-app-gradle@0.1.0",
@@ -39,7 +39,7 @@ require (
 	github.com/go-git/go-git/v5 v5.12.0
 	github.com/go-test/deep v1.1.1
 	github.com/google/go-cmp v0.6.0
-	github.com/google/go-containerregistry v0.20.2
+	github.com/google/go-containerregistry v0.20.1
 	github.com/google/licensecheck v0.3.1
 	github.com/google/uuid v1.6.0
 	github.com/gookit/color v1.5.4
@@ -79,9 +79,9 @@ require (
 	github.com/zyedidia/generic v1.2.2-0.20230320175451-4410d2372cb1
 	go.uber.org/goleak v1.3.0
 	golang.org/x/mod v0.20.0
-	golang.org/x/net v0.28.0
+	golang.org/x/net v0.27.0
 	gopkg.in/yaml.v3 v3.0.1
-	modernc.org/sqlite v1.32.0
+	modernc.org/sqlite v1.31.1
 )

 require google.golang.org/genproto v0.0.0-20231106174013-bbf56f31fb17 // indirect
@@ -125,7 +125,7 @@ require (
 	github.com/containerd/typeurl/v2 v2.1.1 // indirect
 	github.com/cyphar/filepath-securejoin v0.2.4 // indirect
 	github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
-	github.com/docker/cli v27.1.1+incompatible // indirect
+	github.com/docker/cli v27.0.3+incompatible // indirect
 	github.com/docker/distribution v2.8.3+incompatible // indirect
 	github.com/docker/docker-credential-helpers v0.7.0 // indirect
 	github.com/docker/go-connections v0.4.0 // indirect
@@ -230,11 +230,11 @@ require (
 	go.opentelemetry.io/otel/trace v1.19.0 // indirect
 	go.uber.org/atomic v1.9.0 // indirect
 	go.uber.org/multierr v1.9.0 // indirect
-	golang.org/x/crypto v0.26.0 // indirect
-	golang.org/x/sync v0.8.0 // indirect
-	golang.org/x/sys v0.23.0 // indirect
-	golang.org/x/term v0.23.0 // indirect
-	golang.org/x/text v0.17.0 // indirect
+	golang.org/x/crypto v0.25.0 // indirect
+	golang.org/x/sync v0.7.0 // indirect
+	golang.org/x/sys v0.22.0 // indirect
+	golang.org/x/term v0.22.0 // indirect
+	golang.org/x/text v0.16.0 // indirect
 	golang.org/x/tools v0.21.1-0.20240508182429-e35e4ccd0d2d // indirect
 	golang.org/x/xerrors v0.0.0-20220907171357-04be3eba64a2 // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20231120223509-83a465c0220f // indirect
@@ -227,8 +227,8 @@ github.com/deitch/magic v0.0.0-20230404182410-1ff89d7342da/go.mod h1:B3tI9iGHi4i
 github.com/dgrijalva/jwt-go/v4 v4.0.0-preview1/go.mod h1:+hnT3ywWDTAFrW5aE+u2Sa/wT555ZqwoCS+pk3p6ry4=
 github.com/distribution/reference v0.6.0 h1:0IXCQ5g4/QMHHkarYzh5l+u8T3t73zM5QvfrDyIgxBk=
 github.com/distribution/reference v0.6.0/go.mod h1:BbU0aIcezP1/5jX/8MP0YiH4SdvB5Y4f/wlDRiLyi3E=
-github.com/docker/cli v27.1.1+incompatible h1:goaZxOqs4QKxznZjjBWKONQci/MywhtRv2oNn0GkeZE=
-github.com/docker/cli v27.1.1+incompatible/go.mod h1:JLrzqnKDaYBop7H2jaqPtU4hHvMKP+vjCwu2uszcLI8=
+github.com/docker/cli v27.0.3+incompatible h1:usGs0/BoBW8MWxGeEtqPMkzOY56jZ6kYlSN5BLDioCQ=
+github.com/docker/cli v27.0.3+incompatible/go.mod h1:JLrzqnKDaYBop7H2jaqPtU4hHvMKP+vjCwu2uszcLI8=
 github.com/docker/distribution v2.8.3+incompatible h1:AtKxIZ36LoNK51+Z6RpzLpddBirtxJnzDrHLEKxTAYk=
 github.com/docker/distribution v2.8.3+incompatible/go.mod h1:J2gT2udsDAN96Uj4KfcMRqY0/ypR+oyYUYmja8H+y+w=
 github.com/docker/docker v27.1.1+incompatible h1:hO/M4MtV36kzKldqnA37IWhebRA+LnqqcqDja6kVaKY=
@@ -384,8 +384,8 @@ github.com/google/go-cmp v0.5.6/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/
 github.com/google/go-cmp v0.5.9/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
 github.com/google/go-cmp v0.6.0 h1:ofyhxvXcZhMsU5ulbFiLKl/XBFqE1GSq7atu8tAmTRI=
 github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
-github.com/google/go-containerregistry v0.20.2 h1:B1wPJ1SN/S7pB+ZAimcciVD+r+yV/l/DSArMxlbwseo=
-github.com/google/go-containerregistry v0.20.2/go.mod h1:z38EKdKh4h7IP2gSfUUqEvalZBqs6AoLeWfUy34nQC8=
+github.com/google/go-containerregistry v0.20.1 h1:eTgx9QNYugV4DN5mz4U8hiAGTi1ybXn0TPi4Smd8du0=
+github.com/google/go-containerregistry v0.20.1/go.mod h1:YCMFNQeeXeLF+dnhhWkqDItx/JSkH01j1Kis4PsjzFI=
 github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
 github.com/google/licensecheck v0.3.1 h1:QoxgoDkaeC4nFrtGN1jV7IPmDCHFNIVh54e5hSt6sPs=
 github.com/google/licensecheck v0.3.1/go.mod h1:ORkR35t/JjW+emNKtfJDII0zlciG9JgbT7SmsohlHmY=
@@ -878,8 +878,8 @@ golang.org/x/crypto v0.0.0-20220622213112-05595931fe9d/go.mod h1:IxCIyHEi3zRg3s0
 golang.org/x/crypto v0.3.0/go.mod h1:hebNnKkNXi2UzZN1eVRvBB7co0a+JxK6XbPiWVs/3J4=
 golang.org/x/crypto v0.3.1-0.20221117191849-2c476679df9a/go.mod h1:hebNnKkNXi2UzZN1eVRvBB7co0a+JxK6XbPiWVs/3J4=
 golang.org/x/crypto v0.7.0/go.mod h1:pYwdfH91IfpZVANVyUOhSIPZaFoJGxTFbZhFTx+dXZU=
-golang.org/x/crypto v0.26.0 h1:RrRspgV4mU+YwB4FYnuBoKsUapNIL5cohGAmSH3azsw=
-golang.org/x/crypto v0.26.0/go.mod h1:GY7jblb9wI+FOo5y8/S2oY4zWP07AkOJ4+jxCqdqn54=
+golang.org/x/crypto v0.25.0 h1:ypSNr+bnYL2YhwoMt2zPxHFmbAN1KZs/njMG3hxUp30=
+golang.org/x/crypto v0.25.0/go.mod h1:T+wALwcMOSE0kXgUAnPAHqTLW+XHgcELELW8VaDgm/M=
 golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20190306152737-a1d7652674e8/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20190510132918-efd6b22b2522/go.mod h1:ZjyILWgesfNpC6sMxTJOJm9Kp84zZh5NQWvqDGG3Qr8=
@@ -968,8 +968,8 @@ golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug
 golang.org/x/net v0.2.0/go.mod h1:KqCZLdyyvdV855qA2rE3GC2aiw5xGR5TEjj8smXukLY=
 golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
 golang.org/x/net v0.8.0/go.mod h1:QVkue5JL9kW//ek3r6jTKnTFis1tRmNAW2P1shuFdJc=
-golang.org/x/net v0.28.0 h1:a9JDOJc5GMUJ0+UDqmLT86WiEy7iWyIhz8gz8E4e5hE=
-golang.org/x/net v0.28.0/go.mod h1:yqtgsTWOOnlGLG9GFRrK3++bGOUEkNBoHZc8MEDWPNg=
+golang.org/x/net v0.27.0 h1:5K3Njcw06/l2y9vpGCSdcxWOYHOUk3dVNGDXN+FvAys=
+golang.org/x/net v0.27.0/go.mod h1:dDi0PyhWNoiUOrAS8uXv/vnScO4wnHQO4mj9fn/RytE=
 golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
 golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
 golang.org/x/oauth2 v0.0.0-20190604053449-0f29369cfe45/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
@@ -1000,8 +1000,8 @@ golang.org/x/sync v0.0.0-20201207232520-09787c993a3a/go.mod h1:RxMgew5VJxzue5/jJ
 golang.org/x/sync v0.0.0-20210220032951-036812b2e83c/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.1.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.8.0 h1:3NFvSEYkUoMifnESzZl15y791HH1qU2xm6eCJU5ZPXQ=
-golang.org/x/sync v0.8.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
+golang.org/x/sync v0.7.0 h1:YsImfSBoP9QPYL0xyKJPq0gcaJdG3rInoqxTWbfQu9M=
+golang.org/x/sync v0.7.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
 golang.org/x/sys v0.0.0-20180823144017-11551d06cbcc/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20180905080454-ebe1bf3edb33/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
@@ -1081,15 +1081,15 @@ golang.org/x/sys v0.2.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.3.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.23.0 h1:YfKFowiIMvtgl1UERQoTPPToxltDeZfbj4H7dVUCwmM=
-golang.org/x/sys v0.23.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
+golang.org/x/sys v0.22.0 h1:RI27ohtqKCnwULzJLqkv897zojh5/DwS/ENaMzUOaWI=
+golang.org/x/sys v0.22.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.2.0/go.mod h1:TVmDHMZPmdnySmBfhjOoOdhjzdE1h4u1VwSiw2l1Nuc=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
 golang.org/x/term v0.6.0/go.mod h1:m6U89DPEgQRMq3DNkDClhWw02AUbt2daBVO4cn4Hv9U=
-golang.org/x/term v0.23.0 h1:F6D4vR+EHoL9/sWAWgAR1H2DcHr4PareCbAaCo1RpuU=
-golang.org/x/term v0.23.0/go.mod h1:DgV24QBUrK6jhZXl+20l6UWznPlwAHm1Q1mGHtydmSk=
+golang.org/x/term v0.22.0 h1:BbsgPEJULsl2fV/AT3v15Mjva5yXKQDyKf+TbDz7QJk=
+golang.org/x/term v0.22.0/go.mod h1:F3qCibpT5AMpCRfhfT53vVJwhLtIVHhB9XDjfFvnMI4=
 golang.org/x/text v0.0.0-20170915032832-14c0d48ead0c/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.1-0.20180807135948-17ff2d5776d2/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
@@ -1102,8 +1102,8 @@ golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.4.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
 golang.org/x/text v0.8.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8=
-golang.org/x/text v0.17.0 h1:XtiM5bkSOt+ewxlOE/aE/AKEHibwj/6gvWMl9Rsh0Qc=
-golang.org/x/text v0.17.0/go.mod h1:BuEKDfySbSR4drPmRPG/7iBdf8hvFMuRexcpahXilzY=
+golang.org/x/text v0.16.0 h1:a94ExnEXNtEwYLGJSIUxnWoxoRz/ZcCsV63ROupILh4=
+golang.org/x/text v0.16.0/go.mod h1:GhwF1Be+LQoKShO3cGOHzqOgRrGaYc9AvblQOmPVHnI=
 golang.org/x/time v0.0.0-20181108054448-85acf8d2951c/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
 golang.org/x/time v0.0.0-20190308202827-9d24e82272b4/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
 golang.org/x/time v0.0.0-20191024005414-555d28b269f0/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
@@ -1379,8 +1379,8 @@ modernc.org/opt v0.1.3 h1:3XOZf2yznlhC+ibLltsDGzABUGVx8J6pnFMS3E4dcq4=
 modernc.org/opt v0.1.3/go.mod h1:WdSiB5evDcignE70guQKxYUl14mgWtbClRi5wmkkTX0=
 modernc.org/sortutil v1.2.0 h1:jQiD3PfS2REGJNzNCMMaLSp/wdMNieTbKX920Cqdgqc=
 modernc.org/sortutil v1.2.0/go.mod h1:TKU2s7kJMf1AE84OoiGppNHJwvB753OYfNl2WRb++Ss=
-modernc.org/sqlite v1.32.0 h1:6BM4uGza7bWypsw4fdLRsLxut6bHe4c58VeqjRgST8s=
-modernc.org/sqlite v1.32.0/go.mod h1:UqoylwmTb9F+IqXERT8bW9zzOWN8qwAIcLdzeBZs4hA=
+modernc.org/sqlite v1.31.1 h1:XVU0VyzxrYHlBhIs1DiEgSl0ZtdnPtbLVy8hSkzxGrs=
+modernc.org/sqlite v1.31.1/go.mod h1:UqoylwmTb9F+IqXERT8bW9zzOWN8qwAIcLdzeBZs4hA=
 modernc.org/strutil v1.2.0 h1:agBi9dp1I+eOnxXeiZawM8F4LawKv4NzGWSaLfyeNZA=
 modernc.org/strutil v1.2.0/go.mod h1:/mdcBmfOibveCTBxUl5B5l6W+TTH1FXPLHZE6bTosX0=
 modernc.org/token v1.1.0 h1:Xl7Ap9dKaEs5kLoOQeQmPWevfnk/DM5qcLcYlA8ys6Y=