mirror of
https://github.com/anchore/syft.git
synced 2026-10-30 14:02:26 +01:00
Christopher Angelo PhillipsandAlex Goodman
f15c3343e2
* test: catalog GGUF models larger than the header gguf-parser-go v0.26.3+ rejects a header whose tensors declare more data than follows it. Syft parses only a 50 MB copy of each model, so any larger model is dropped. Signed-off-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com> * fix: fix parser with rollback and verify with test Signed-off-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com> * fix: bound GGUF tensor info before the parser reads it The header pre-scan stopped after the metadata KVs and left tensor infos to gguf-parser-go. Older releases of the library allocate whatever length a tensor name declares, so a tiny file could force a multi-GB allocation, or a fatal out of memory that panic recovery can't catch. - tensor names are bounded like metadata keys (non-empty, length limit, shared string budget) - dimension count is capped at `GGML_MAX_DIMS` - a tensor count larger than the header now fails at EOF in the pre-scan Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * fix: give the GGUF header copy the model's real size The cataloger copies at most 50 MB of a model and parses that copy. Newer gguf-parser-go releases check the tensor data the header declares against the file size, so the truncated copy of any larger model was rejected. - after the header is validated, the copy is extended to the size the resolver reports for the model, leaving the tail as a hole the parser never reads - sources that report no size (OCI model artifacts today) keep the old behavior Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * chore(deps): restore gguf-parser-go v0.26.4 The header copy now carries the model's real size, so the pin to v0.26.0 and its dependabot ignore are no longer needed. This also brings back upstream's string and array length bounds, and the library's own `IsNumeric`. Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * fix: keep the extended GGUF header copy sparse on Windows NTFS reserves disk for the full length of a file extended with truncate unless the file is marked sparse, so cataloging a large model on Windows reserved the model's size in the temp dir until cleanup. - the header copy is marked sparse (`FSCTL_SET_SPARSE`) before it is extended - if the filesystem can't make it sparse (FAT32, exFAT), the copy is not extended, and models larger than it fail to parse as before - `golang.org/x/sys` moves from an indirect to a direct dependency Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com> Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com>
357 lines
17 KiB
AMPL
357 lines
17 KiB
AMPL
module github.com/anchore/syft
|
|
|
|
go 1.26.8
|
|
|
|
require (
|
|
github.com/BurntSushi/toml v1.6.0
|
|
github.com/CycloneDX/cyclonedx-go v0.12.0
|
|
github.com/Masterminds/semver/v3 v3.5.0
|
|
github.com/Masterminds/sprig/v3 v3.3.0
|
|
github.com/OneOfOne/xxhash v1.2.8
|
|
github.com/acarl005/stripansi v0.0.0-20180116102854-5a71ef0e047d
|
|
github.com/acobaugh/osrelease v0.1.0
|
|
github.com/adrg/xdg v0.5.3
|
|
github.com/anchore/bubbly v0.2.2
|
|
github.com/anchore/clio v0.1.1
|
|
github.com/anchore/fangs v0.1.1
|
|
github.com/anchore/go-collections v0.1.1
|
|
github.com/anchore/go-homedir v0.1.1
|
|
github.com/anchore/go-logger v0.2.0
|
|
github.com/anchore/go-macholibre v0.1.1
|
|
github.com/anchore/go-rpmdb v0.2.2
|
|
github.com/anchore/go-sync v0.1.2
|
|
github.com/anchore/go-version v1.2.2-0.20200701162849-18adb9c92b9b
|
|
github.com/anchore/packageurl-go v0.2.0
|
|
github.com/anchore/stereoscope v0.3.4
|
|
github.com/anmitsu/go-shlex v0.0.0-20200514113438-38f4b401e2be
|
|
github.com/aquasecurity/go-pep440-version v0.0.1
|
|
github.com/bitnami/go-version v0.0.0-20250131085805-b1f57a8634ef
|
|
github.com/blakesmith/ar v0.0.0-20190502131153-809d4375e1fb
|
|
github.com/bmatcuk/doublestar/v4 v4.10.2
|
|
github.com/cespare/xxhash/v2 v2.3.0
|
|
github.com/charmbracelet/bubbles v1.0.0
|
|
github.com/charmbracelet/bubbletea v1.3.10
|
|
github.com/charmbracelet/lipgloss v1.1.0
|
|
github.com/dave/jennifer v1.7.1
|
|
github.com/deitch/magic v0.0.0-20230404182410-1ff89d7342da
|
|
github.com/diskfs/go-diskfs v1.9.4
|
|
github.com/distribution/reference v0.6.0
|
|
github.com/dustin/go-humanize v1.1.0
|
|
github.com/elliotchance/phpserialize v1.4.0
|
|
github.com/facebookincubator/nvdtools v0.1.5
|
|
github.com/github/go-spdx/v2 v2.7.1
|
|
github.com/gkampitakis/go-snaps v0.5.23
|
|
github.com/go-git/go-billy/v5 v5.9.2
|
|
github.com/go-git/go-git/v5 v5.19.3
|
|
github.com/go-test/deep v1.1.1
|
|
github.com/go-viper/mapstructure/v2 v2.5.0
|
|
github.com/goccy/go-yaml v1.19.2
|
|
github.com/gohugoio/hashstructure v0.6.0
|
|
github.com/google/go-cmp v0.7.0
|
|
github.com/google/go-containerregistry v0.22.1
|
|
github.com/google/licensecheck v0.3.1
|
|
github.com/google/uuid v1.6.0
|
|
github.com/gookit/color v1.6.2
|
|
github.com/gpustack/gguf-parser-go v0.26.4
|
|
github.com/hashicorp/go-cleanhttp v0.5.2
|
|
github.com/hashicorp/go-getter v1.8.10
|
|
github.com/hashicorp/go-multierror v1.1.1
|
|
github.com/hashicorp/hcl/v2 v2.25.0
|
|
github.com/iancoleman/strcase v0.3.0
|
|
github.com/invopop/jsonschema v0.14.0
|
|
github.com/jedib0t/go-pretty/v6 v6.8.3
|
|
github.com/jinzhu/copier v0.4.0
|
|
github.com/kastenhq/goversion v0.0.0-20230811215019-93b2f8823953
|
|
github.com/klauspost/compress v1.20.1
|
|
github.com/magiconair/properties v1.18.12
|
|
github.com/mholt/archives v0.1.5
|
|
github.com/moby/sys/mountinfo v0.7.2
|
|
github.com/nix-community/go-nix v0.0.0-20250101154619-4bdde671e0a1
|
|
github.com/olekukonko/tablewriter v1.1.5
|
|
github.com/opencontainers/go-digest v1.0.0
|
|
github.com/pelletier/go-toml v1.9.5
|
|
github.com/quasilyte/go-ruleguard/dsl v0.3.23
|
|
github.com/rust-secure-code/go-rustaudit v0.0.0-20250226111315-e20ec32e963c
|
|
github.com/saintfish/chardet v0.0.0-20230101081208-5e3ef4b5456d
|
|
github.com/sanity-io/litter v1.5.8
|
|
github.com/sassoftware/go-rpmutils v0.4.0
|
|
// pinned to pull in 386 arch fix: https://github.com/scylladb/go-set/commit/cc7b2070d91ebf40d233207b633e28f5bd8f03a5
|
|
github.com/scylladb/go-set v1.0.3-0.20200225121959-cc7b2070d91e
|
|
github.com/sergi/go-diff v1.4.0
|
|
github.com/spdx/gordf v0.0.0-20201111095634-7098f93598fb
|
|
github.com/spdx/tools-golang v0.6.0-rc4
|
|
github.com/spf13/afero v1.15.0
|
|
github.com/spf13/cobra v1.10.2
|
|
github.com/stretchr/testify v1.12.1
|
|
github.com/ulikunitz/xz v0.5.17
|
|
github.com/vbatts/go-mtree v0.7.0
|
|
github.com/vifraa/gopom v1.0.0
|
|
github.com/wagoodman/go-partybus v0.0.0-20230516145632-8ccac152c651
|
|
github.com/wagoodman/go-progress v0.0.0-20260303201901-10176f79b2c0
|
|
github.com/xeipuuv/gojsonschema v1.2.0
|
|
github.com/zyedidia/generic v1.2.2-0.20230320175451-4410d2372cb1
|
|
go.uber.org/goleak v1.3.0
|
|
go.yaml.in/yaml/v3 v3.0.5
|
|
golang.org/x/exp v0.0.0-20260410095643-746e56fc9e2f
|
|
golang.org/x/mod v0.41.0
|
|
golang.org/x/net v0.61.0
|
|
golang.org/x/time v0.16.0
|
|
golang.org/x/tools v0.51.0
|
|
modernc.org/sqlite v1.60.1
|
|
)
|
|
|
|
require (
|
|
github.com/pb33f/ordered-map/v2 v2.3.2
|
|
github.com/tailscale/hujson v0.0.0-20260302212456-ecc657c15afd
|
|
golang.org/x/sys v0.49.0
|
|
howett.net/plist v1.0.1
|
|
)
|
|
|
|
require (
|
|
cel.dev/expr v0.25.2 // indirect
|
|
cloud.google.com/go v0.123.0 // indirect
|
|
cloud.google.com/go/auth v0.23.3 // indirect
|
|
cloud.google.com/go/auth/oauth2adapt v0.2.8 // indirect
|
|
cloud.google.com/go/compute/metadata v0.9.1 // indirect
|
|
cloud.google.com/go/iam v1.12.0 // indirect
|
|
cloud.google.com/go/monitoring v1.30.0 // indirect
|
|
cloud.google.com/go/storage v1.68.0 // indirect
|
|
cyphar.com/go-pathrs v0.2.5 // indirect
|
|
dario.cat/mergo v1.0.2 // indirect
|
|
github.com/DataDog/zstd v1.5.5 // indirect
|
|
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.34.0 // indirect
|
|
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.57.0 // indirect
|
|
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.57.0 // indirect
|
|
github.com/Masterminds/goutils v1.1.1 // indirect
|
|
github.com/Microsoft/go-winio v0.6.3-0.20251027160822-ad3df93bed29 // indirect
|
|
github.com/Microsoft/hcsshim v0.15.0-rc.4 // indirect
|
|
github.com/ProtonMail/go-crypto v1.4.1 // indirect
|
|
github.com/STARRY-S/zip v0.2.3 // indirect
|
|
github.com/VividCortex/ewma v1.2.0 // indirect
|
|
github.com/agext/levenshtein v1.2.1 // indirect
|
|
github.com/anchore/go-lzo v0.1.1 // indirect
|
|
github.com/anchore/go-struct-converter v0.2.0-rc2 // indirect
|
|
github.com/andybalholm/brotli v1.2.0 // indirect
|
|
github.com/apparentlymart/go-textseg/v15 v15.0.0 // indirect
|
|
github.com/apparentlymart/go-textseg/v17 v17.0.1 // indirect
|
|
github.com/aquasecurity/go-version v0.0.1 // indirect
|
|
github.com/atotto/clipboard v0.1.4 // indirect
|
|
github.com/aws/aws-sdk-go-v2 v1.47.1 // indirect
|
|
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.20 // indirect
|
|
github.com/aws/aws-sdk-go-v2/config v1.33.6 // indirect
|
|
github.com/aws/aws-sdk-go-v2/credentials v1.20.6 // indirect
|
|
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.20.1 // indirect
|
|
github.com/aws/aws-sdk-go-v2/internal/configsources v1.5.4 // indirect
|
|
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.8.4 // indirect
|
|
github.com/aws/aws-sdk-go-v2/internal/v4a v1.5.4 // indirect
|
|
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.19 // indirect
|
|
github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.11.5 // indirect
|
|
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.14.4 // indirect
|
|
github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.20.4 // indirect
|
|
github.com/aws/aws-sdk-go-v2/service/s3 v1.114.0 // indirect
|
|
github.com/aws/aws-sdk-go-v2/service/signin v1.10.1 // indirect
|
|
github.com/aws/aws-sdk-go-v2/service/sso v1.38.1 // indirect
|
|
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.43.1 // indirect
|
|
github.com/aws/aws-sdk-go-v2/service/sts v1.51.1 // indirect
|
|
github.com/aws/smithy-go v1.28.1 // indirect
|
|
github.com/aymanbagabas/go-osc52/v2 v2.0.1 // indirect
|
|
github.com/bahlo/generic-list-go v0.2.0 // indirect
|
|
github.com/becheran/wildmatch-go v1.0.0 // indirect
|
|
github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d // indirect
|
|
github.com/bodgit/plumbing v1.3.0 // indirect
|
|
github.com/bodgit/sevenzip v1.6.1 // indirect
|
|
github.com/bodgit/windows v1.0.1 // indirect
|
|
github.com/buger/jsonparser v1.1.2 // indirect
|
|
github.com/charmbracelet/colorprofile v0.4.3 // indirect
|
|
github.com/charmbracelet/harmonica v0.2.0 // indirect
|
|
github.com/charmbracelet/x/ansi v0.11.6 // indirect
|
|
github.com/charmbracelet/x/cellbuf v0.0.15 // indirect
|
|
github.com/charmbracelet/x/term v0.2.2 // indirect
|
|
github.com/clipperhouse/displaywidth v0.11.0 // indirect
|
|
github.com/clipperhouse/uax29/v2 v2.7.0 // indirect
|
|
github.com/cloudflare/circl v1.6.3 // indirect
|
|
github.com/cncf/xds/go v0.0.0-20260202195803-dba9d589def2 // indirect
|
|
github.com/containerd/cgroups/v3 v3.1.3 // indirect
|
|
github.com/containerd/containerd/api v1.12.0 // indirect
|
|
github.com/containerd/containerd/v2 v2.4.1 // indirect
|
|
github.com/containerd/continuity v0.5.0 // indirect
|
|
github.com/containerd/errdefs v1.0.0 // indirect
|
|
github.com/containerd/errdefs/pkg v0.3.0 // indirect
|
|
github.com/containerd/fifo v1.1.0 // indirect
|
|
github.com/containerd/log v0.2.0 // indirect
|
|
github.com/containerd/log/otel v0.1.0 // indirect
|
|
github.com/containerd/platforms v1.0.0-rc.5 // indirect
|
|
github.com/containerd/plugin v1.1.0 // indirect
|
|
github.com/containerd/stargz-snapshotter/estargz v0.18.2 // indirect
|
|
github.com/containerd/ttrpc v1.2.9 // indirect
|
|
github.com/containerd/typeurl/v2 v2.3.0 // indirect
|
|
github.com/containers/libtrust v0.0.0-20230121012942-c1716e8a8d01 // indirect
|
|
github.com/containers/ocicrypt v1.3.2 // indirect
|
|
github.com/cyberphone/json-canonicalization v0.0.0-20241213102144-19d51d7fe467 // indirect
|
|
github.com/cyphar/filepath-securejoin v0.7.0 // indirect
|
|
github.com/docker/cli v29.8.2+incompatible // indirect
|
|
github.com/docker/docker-credential-helpers v0.9.8 // indirect
|
|
github.com/docker/go-connections v0.8.1 // indirect
|
|
github.com/docker/go-units v0.5.0 // indirect
|
|
github.com/dsnet/compress v0.0.2-0.20230904184137-39efe44ab707 // indirect
|
|
github.com/emirpasic/gods v1.18.1 // indirect
|
|
github.com/envoyproxy/go-control-plane/envoy v1.37.0 // indirect
|
|
github.com/envoyproxy/protoc-gen-validate v1.3.3 // indirect
|
|
github.com/erikgeiser/coninput v0.0.0-20211004153227-1c3628e74d0f // indirect
|
|
github.com/fatih/color v1.19.0 // indirect
|
|
github.com/felixge/fgprof v0.9.5 // indirect
|
|
github.com/felixge/httpsnoop v1.1.0 // indirect
|
|
github.com/fsnotify/fsnotify v1.10.1 // indirect
|
|
github.com/gabriel-vasile/mimetype v1.4.15 // indirect
|
|
github.com/gkampitakis/ciinfo v0.3.4 // indirect
|
|
github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect
|
|
github.com/go-jose/go-jose/v4 v4.1.5 // indirect
|
|
github.com/go-logr/logr v1.4.4 // indirect
|
|
github.com/go-logr/stdr v1.2.2 // indirect
|
|
github.com/go-restruct/restruct v1.2.0-alpha // indirect
|
|
github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 // indirect
|
|
github.com/google/go-intervals v0.0.2 // indirect
|
|
github.com/google/pprof v0.0.0-20260802141513-ef3492d7dac3 // indirect
|
|
github.com/google/s2a-go v0.1.10 // indirect
|
|
github.com/googleapis/enterprise-certificate-proxy v0.3.22 // indirect
|
|
github.com/googleapis/gax-go/v2 v2.24.1 // indirect
|
|
github.com/hashicorp/aws-sdk-go-base/v2 v2.0.0-beta.74 // indirect
|
|
github.com/hashicorp/errwrap v1.1.0 // indirect
|
|
github.com/hashicorp/go-version v1.9.0 // indirect
|
|
github.com/hashicorp/golang-lru/v2 v2.0.7 // indirect
|
|
github.com/henvic/httpretty v0.1.4 // indirect
|
|
github.com/huandu/xstrings v1.5.0 // indirect
|
|
github.com/inconshreveable/mousetrap v1.1.0 // indirect
|
|
github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect
|
|
github.com/json-iterator/go v1.1.12 // indirect
|
|
github.com/kevinburke/ssh_config v1.2.0 // indirect
|
|
github.com/klauspost/pgzip v1.2.6 // indirect
|
|
github.com/kr/pretty v0.3.1 // indirect
|
|
github.com/kr/text v0.2.0 // indirect
|
|
github.com/lucasb-eyer/go-colorful v1.3.0 // indirect
|
|
github.com/maruel/natural v1.3.0 // indirect
|
|
github.com/mattn/go-colorable v0.1.14 // indirect
|
|
github.com/mattn/go-isatty v0.0.24 // indirect
|
|
github.com/mattn/go-localereader v0.0.2-0.20220822084749-2491eb6c1c75 // indirect
|
|
github.com/mattn/go-runewidth v0.0.27 // indirect
|
|
github.com/mattn/go-sqlite3 v1.14.48 // indirect
|
|
github.com/mgutz/ansi v0.0.0-20200706080929-d51e80ef957d // indirect
|
|
github.com/miekg/pkcs11 v1.1.2 // indirect
|
|
github.com/mikelolasagasti/xz v1.0.1 // indirect
|
|
github.com/minio/minlz v1.0.1 // indirect
|
|
github.com/mistifyio/go-zfs/v4 v4.0.0 // indirect
|
|
github.com/mitchellh/copystructure v1.2.0 // indirect
|
|
github.com/mitchellh/go-homedir v1.1.0 // indirect
|
|
github.com/mitchellh/go-wordwrap v1.0.1 // indirect
|
|
github.com/mitchellh/reflectwalk v1.0.2 // indirect
|
|
github.com/moby/docker-image-spec v1.3.1 // indirect
|
|
github.com/moby/locker v1.0.1 // indirect
|
|
github.com/moby/moby/api v1.56.0 // indirect
|
|
github.com/moby/moby/client v0.6.0 // indirect
|
|
github.com/moby/sys/capability v0.4.0 // indirect
|
|
github.com/moby/sys/signal v0.7.1 // indirect
|
|
github.com/moby/sys/user v0.4.1 // indirect
|
|
github.com/moby/sys/userns v0.2.1 // indirect
|
|
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
|
|
github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee // indirect
|
|
github.com/muesli/ansi v0.0.0-20230316100256-276c6243b2f6 // indirect
|
|
github.com/muesli/cancelreader v0.2.2 // indirect
|
|
github.com/muesli/termenv v0.16.0 // indirect
|
|
github.com/ncruces/go-strftime v1.0.0 // indirect
|
|
github.com/nwaples/rardecode/v2 v2.4.1 // indirect
|
|
github.com/olekukonko/cat v0.0.0-20250911104152-50322a0618f6 // indirect
|
|
github.com/olekukonko/errors v1.2.0 // indirect
|
|
github.com/olekukonko/ll v0.1.6 // indirect
|
|
github.com/opencontainers/image-spec v1.1.1 // indirect
|
|
github.com/opencontainers/runtime-spec v1.3.0 // indirect
|
|
github.com/opencontainers/selinux v1.15.1 // indirect
|
|
github.com/pb33f/go-yaml v0.1.0 // indirect
|
|
github.com/pborman/indent v1.2.1 // indirect
|
|
github.com/pelletier/go-toml/v2 v2.4.3 // indirect
|
|
github.com/pierrec/lz4/v4 v4.1.26 // indirect
|
|
github.com/piprate/json-gold v0.7.0 // indirect
|
|
github.com/pjbgf/sha1cd v0.7.0 // indirect
|
|
github.com/pkg/errors v0.9.1 // indirect
|
|
github.com/pkg/profile v1.7.0 // indirect
|
|
github.com/pkg/xattr v0.4.12 // indirect
|
|
github.com/planetscale/vtprotobuf v0.6.1-0.20240319094008-0393e58bdf10 // indirect
|
|
github.com/pquerna/cachecontrol v0.0.0-20180517163645-1555304b9b35 // indirect
|
|
github.com/proglottis/gpgme v0.1.6 // indirect
|
|
github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec // indirect
|
|
github.com/rivo/uniseg v0.4.7 // indirect
|
|
github.com/rogpeppe/go-internal v1.14.1 // indirect
|
|
github.com/sagikazarmark/locafero v0.11.0 // indirect
|
|
github.com/sahilm/fuzzy v0.1.1 // indirect
|
|
github.com/secure-systems-lab/go-securesystemslib v0.11.1 // indirect
|
|
github.com/shopspring/decimal v1.4.0 // indirect
|
|
github.com/sigstore/fulcio v1.8.7 // indirect
|
|
github.com/sigstore/protobuf-specs v0.5.2 // indirect
|
|
github.com/sigstore/sigstore v1.10.11 // indirect
|
|
github.com/sirupsen/logrus v1.10.2 // indirect
|
|
github.com/skeema/knownhosts v1.3.1 // indirect
|
|
github.com/smallnest/ringbuffer v0.0.0-20241116012123-461381446e3d // indirect
|
|
github.com/smallstep/pkcs7 v0.2.1 // indirect
|
|
github.com/sorairolake/lzip-go v0.3.8 // indirect
|
|
github.com/sourcegraph/conc v0.3.1-0.20240121214520-5f936abd7ae8 // indirect
|
|
github.com/spf13/cast v1.10.0 // indirect
|
|
github.com/spf13/pflag v1.0.10 // indirect
|
|
github.com/spf13/viper v1.21.0 // indirect
|
|
github.com/spiffe/go-spiffe/v2 v2.8.1 // indirect
|
|
github.com/stefanberger/go-pkcs11uri v0.0.0-20230803200340-78284954bff6 // indirect
|
|
github.com/stretchr/objx v0.5.3 // indirect
|
|
github.com/subosito/gotenv v1.6.0 // indirect
|
|
github.com/sylabs/sif/v2 v2.24.2 // indirect
|
|
github.com/sylabs/squashfs v1.0.6 // indirect
|
|
github.com/tchap/go-patricia/v2 v2.3.3 // indirect
|
|
github.com/therootcompany/xz v1.0.1 // indirect
|
|
github.com/tidwall/gjson v1.19.0 // indirect
|
|
github.com/tidwall/match v1.1.1 // indirect
|
|
github.com/tidwall/pretty v1.2.1 // indirect
|
|
github.com/tidwall/sjson v1.2.5 // indirect
|
|
github.com/vbatts/tar-split v0.12.3 // indirect
|
|
github.com/vbauerster/cupwriter v0.0.4 // indirect
|
|
github.com/vbauerster/mpb/v8 v8.14.0 // indirect
|
|
github.com/xanzy/ssh-agent v0.3.3 // indirect
|
|
github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb // indirect
|
|
github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 // indirect
|
|
github.com/xi2/xz v0.0.0-20171230120015-48954b6210f8 // indirect
|
|
github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e // indirect
|
|
github.com/youmark/pkcs8 v0.0.0-20240726163527-a2c0da244d78 // indirect
|
|
github.com/zclconf/go-cty v1.19.0 // indirect
|
|
go.opentelemetry.io/auto/sdk v1.2.1 // indirect
|
|
go.opentelemetry.io/contrib/detectors/gcp v1.44.0 // indirect
|
|
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.71.0 // indirect
|
|
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.71.0 // indirect
|
|
go.opentelemetry.io/otel v1.46.0 // indirect
|
|
go.opentelemetry.io/otel/metric v1.46.0 // indirect
|
|
go.opentelemetry.io/otel/sdk v1.46.0 // indirect
|
|
go.opentelemetry.io/otel/sdk/metric v1.46.0 // indirect
|
|
go.opentelemetry.io/otel/trace v1.46.0 // indirect
|
|
go.podman.io/image/v5 v5.41.2 // indirect
|
|
go.podman.io/storage v1.64.1 // indirect
|
|
go4.org v0.0.0-20230225012048-214862532bf5 // indirect
|
|
golang.org/x/crypto v0.58.0 // indirect
|
|
golang.org/x/oauth2 v0.37.0 // indirect
|
|
golang.org/x/sync v0.24.0 // indirect
|
|
golang.org/x/term v0.47.0 // indirect
|
|
golang.org/x/text v0.43.0 // indirect
|
|
golang.org/x/xerrors v0.0.0-20231012003039-104605ab7028 // indirect
|
|
gonum.org/v1/gonum v0.17.0 // indirect
|
|
google.golang.org/api v0.299.0 // indirect
|
|
google.golang.org/genproto v0.0.0-20260715232425-e75dac1f907d // indirect
|
|
google.golang.org/genproto/googleapis/api v0.0.0-20260825221802-da73d73af1c5 // indirect
|
|
google.golang.org/genproto/googleapis/rpc v0.0.0-20260921155816-b14227669459 // indirect
|
|
google.golang.org/grpc v1.84.0 // indirect
|
|
google.golang.org/protobuf v1.36.12 // indirect
|
|
gopkg.in/warnings.v0 v0.1.2 // indirect
|
|
modernc.org/libc v1.77.1 // indirect
|
|
modernc.org/mathutil v1.7.1 // indirect
|
|
modernc.org/memory v1.12.1 // indirect
|
|
)
|
|
|
|
retract (
|
|
v1.25.0 // published with a replace directive (confusing for API users)
|
|
v0.53.2
|
|
v0.53.1 // published accidentally with incorrect license in depdencies
|
|
)
|