1
0
Fork 0
mirror of https://code.forgejo.org/forgejo/runner.git synced 2025-06-27 16:35:58 +00:00
forgejo-runner/go.mod

105 lines
4.5 KiB
Modula-2
Raw Normal View History

2022-04-27 17:45:53 +08:00
module gitea.com/gitea/act_runner
go 1.23.0
2024-12-04 10:12:38 +01:00
toolchain go1.23.10
2022-04-27 17:45:53 +08:00
require (
code.gitea.io/actions-proto-go v0.4.1
code.gitea.io/gitea-vet v0.2.3
connectrpc.com/connect v1.18.1
Update module github.com/avast/retry-go/v4 to v4.6.1 (#519) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/avast/retry-go/v4](https://github.com/avast/retry-go) | require | patch | `v4.6.0` -> `v4.6.1` | --- ### Release Notes <details> <summary>avast/retry-go (github.com/avast/retry-go/v4)</summary> ### [`v4.6.1`](https://github.com/avast/retry-go/releases/tag/v4.6.1) [Compare Source](https://github.com/avast/retry-go/compare/4.6.0...4.6.1) #### What's Changed - Update link to docs by [@&#8203;ajeetdsouza](https://github.com/ajeetdsouza) in https://github.com/avast/retry-go/pull/100 - fix test for slow windows + add newer golang versions by [@&#8203;JaSei](https://github.com/JaSei) in https://github.com/avast/retry-go/pull/126 - Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/avast/retry-go/pull/123 - Make sure DelayType function gets consistent values of n by [@&#8203;haaawk](https://github.com/haaawk) in https://github.com/avast/retry-go/pull/125 #### New Contributors - [@&#8203;ajeetdsouza](https://github.com/ajeetdsouza) made their first contribution in https://github.com/avast/retry-go/pull/100 - [@&#8203;haaawk](https://github.com/haaawk) made their first contribution in https://github.com/avast/retry-go/pull/125 **Full Changelog**: https://github.com/avast/retry-go/compare/4.6.0...v4.6.1 </details> --- ### Configuration 📅 **Schedule**: Branch creation - "* 0-3 * * *" (UTC), Automerge - "* 0-3 * * *" (UTC). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMTIuMCIsInVwZGF0ZWRJblZlciI6IjM5LjIxMi4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Reviewed-on: https://code.forgejo.org/forgejo/runner/pulls/519 Reviewed-by: earl-warren <earl-warren@noreply.code.forgejo.org> Co-authored-by: Renovate Bot <bot@kriese.eu> Co-committed-by: Renovate Bot <bot@kriese.eu>
2025-03-25 07:27:50 +00:00
github.com/avast/retry-go/v4 v4.6.1
Update module github.com/docker/docker to v25.0.10+incompatible (#574) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/docker/docker](https://github.com/docker/docker) | require | patch | `v25.0.8+incompatible` -> `v25.0.10+incompatible` | --- ### Release Notes <details> <summary>docker/docker (github.com/docker/docker)</summary> ### [`v25.0.10+incompatible`](https://github.com/docker/docker/compare/v25.0.9...v25.0.10) [Compare Source](https://github.com/docker/docker/compare/v25.0.9...v25.0.10) ### [`v25.0.9+incompatible`](https://github.com/docker/docker/compare/v25.0.8...v25.0.9) [Compare Source](https://github.com/docker/docker/compare/v25.0.8...v25.0.9) </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC4xMS42IiwidXBkYXRlZEluVmVyIjoiNDAuMTEuNiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Reviewed-on: https://code.forgejo.org/forgejo/runner/pulls/574 Reviewed-by: Michael Kriese <michael.kriese@gmx.de> Co-authored-by: Renovate Bot <bot@kriese.eu> Co-committed-by: Renovate Bot <bot@kriese.eu>
2025-05-26 05:09:11 +00:00
github.com/docker/docker v25.0.10+incompatible
github.com/google/uuid v1.6.0
github.com/joho/godotenv v1.5.1
2024-03-11 18:32:49 +07:00
github.com/mattn/go-isatty v0.0.20
github.com/nektos/act v0.2.49
github.com/sirupsen/logrus v1.9.3
Update module github.com/spf13/cobra to v1.9.1 (#557) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/spf13/cobra](https://github.com/spf13/cobra) | require | minor | `v1.8.1` -> `v1.9.1` | --- ### Release Notes <details> <summary>spf13/cobra (github.com/spf13/cobra)</summary> ### [`v1.9.1`](https://github.com/spf13/cobra/releases/tag/v1.9.1) [Compare Source](https://github.com/spf13/cobra/compare/v1.9.0...v1.9.1) ##### 🐛 Fixes - Fix CompletionFunc implementation by [@&#8203;ccoVeille](https://github.com/ccoVeille) in https://github.com/spf13/cobra/pull/2234 - Revert "Make detection for test-binary more universal ([#&#8203;2173](https://github.com/spf13/cobra/issues/2173))" by [@&#8203;marckhouzam](https://github.com/marckhouzam) in https://github.com/spf13/cobra/pull/2235 **Full Changelog**: https://github.com/spf13/cobra/compare/v1.9.0...v1.9.1 ### [`v1.9.0`](https://github.com/spf13/cobra/releases/tag/v1.9.0) [Compare Source](https://github.com/spf13/cobra/compare/v1.8.1...v1.9.0) #### ✨ Features - Allow linker to perform deadcode elimination for program using Cobra by [@&#8203;aarzilli](https://github.com/aarzilli) in https://github.com/spf13/cobra/pull/1956 - Add default completion command even if there are no other sub-commands by [@&#8203;marckhouzam](https://github.com/marckhouzam) in https://github.com/spf13/cobra/pull/1559 - Add CompletionWithDesc helper by [@&#8203;ccoVeille](https://github.com/ccoVeille) in https://github.com/spf13/cobra/pull/2231 #### 🐛 Fixes - Fix deprecation comment for Command.SetOutput by [@&#8203;thaJeztah](https://github.com/thaJeztah) in https://github.com/spf13/cobra/pull/2172 - Replace deprecated ioutil usage by [@&#8203;nirs](https://github.com/nirs) in https://github.com/spf13/cobra/pull/2181 - Fix --version help and output for plugins by [@&#8203;nirs](https://github.com/nirs) in https://github.com/spf13/cobra/pull/2180 - Allow to reset the templates to the default by [@&#8203;marckhouzam](https://github.com/marckhouzam) in https://github.com/spf13/cobra/pull/2229 #### 🤖 Completions - Make Powershell completion work in constrained mode by [@&#8203;lstemplinger](https://github.com/lstemplinger) in https://github.com/spf13/cobra/pull/2196 - Improve detection for flags that accept multiple values by [@&#8203;thaJeztah](https://github.com/thaJeztah) in https://github.com/spf13/cobra/pull/2210 - add CompletionFunc type to help with completions by [@&#8203;ccoVeille](https://github.com/ccoVeille) in https://github.com/spf13/cobra/pull/2220 - Add similar whitespace escape logic to bash v2 completions than in other completions by [@&#8203;kangasta](https://github.com/kangasta) in https://github.com/spf13/cobra/pull/1743 - Print ActiveHelp for bash along other completions by [@&#8203;marckhouzam](https://github.com/marckhouzam) in https://github.com/spf13/cobra/pull/2076 - fix(completions): Complete map flags multiple times by [@&#8203;gabe565](https://github.com/gabe565) in https://github.com/spf13/cobra/pull/2174 - fix(bash): nounset unbound file filter variable on empty extension by [@&#8203;scop](https://github.com/scop) in https://github.com/spf13/cobra/pull/2228 #### 🧪 Testing - Test also with go 1.23 by [@&#8203;nirs](https://github.com/nirs) in https://github.com/spf13/cobra/pull/2182 - Make detection for test-binary more universal by [@&#8203;thaJeztah](https://github.com/thaJeztah) in https://github.com/spf13/cobra/pull/2173 #### ✍🏼 Documentation - docs: update README.md by [@&#8203;eltociear](https://github.com/eltociear) in https://github.com/spf13/cobra/pull/2197 - Improve site formatting by [@&#8203;nirs](https://github.com/nirs) in https://github.com/spf13/cobra/pull/2183 - doc: add Conduit by [@&#8203;raulb](https://github.com/raulb) in https://github.com/spf13/cobra/pull/2230 - doc: azion project added to the list of CLIs that use cobra by [@&#8203;maxwelbm](https://github.com/maxwelbm) in https://github.com/spf13/cobra/pull/2198 - Fix broken links in active_help.md by [@&#8203;vuil](https://github.com/vuil) in https://github.com/spf13/cobra/pull/2202 - chore: fix function name in comment by [@&#8203;zhuhaicity](https://github.com/zhuhaicity) in https://github.com/spf13/cobra/pull/2216 #### 🔧 Dependency upgrades - build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6 by [@&#8203;thaJeztah](https://github.com/thaJeztah) in https://github.com/spf13/cobra/pull/2206 - Update to latest go-md2man by [@&#8203;mikelolasagasti](https://github.com/mikelolasagasti) in https://github.com/spf13/cobra/pull/2201 - Upgrade `pflag` dependencies for v1.9.0 by [@&#8203;jpmcb](https://github.com/jpmcb) in https://github.com/spf13/cobra/pull/2233 *** Thank you to all of our amazing contributors and all the great work that's been going into the completions feature!! ##### 👋🏼 New Contributors - [@&#8203;gabe565](https://github.com/gabe565) made their first contribution in https://github.com/spf13/cobra/pull/2174 - [@&#8203;maxwelbm](https://github.com/maxwelbm) made their first contribution in https://github.com/spf13/cobra/pull/2198 - [@&#8203;lstemplinger](https://github.com/lstemplinger) made their first contribution in https://github.com/spf13/cobra/pull/2196 - [@&#8203;vuil](https://github.com/vuil) made their first contribution in https://github.com/spf13/cobra/pull/2202 - [@&#8203;mikelolasagasti](https://github.com/mikelolasagasti) made their first contribution in https://github.com/spf13/cobra/pull/2201 - [@&#8203;zhuhaicity](https://github.com/zhuhaicity) made their first contribution in https://github.com/spf13/cobra/pull/2216 - [@&#8203;ccoVeille](https://github.com/ccoVeille) made their first contribution in https://github.com/spf13/cobra/pull/2220 - [@&#8203;kangasta](https://github.com/kangasta) made their first contribution in https://github.com/spf13/cobra/pull/1743 - [@&#8203;aarzilli](https://github.com/aarzilli) made their first contribution in https://github.com/spf13/cobra/pull/1956 **Full Changelog**: https://github.com/spf13/cobra/compare/v1.8.1...v1.9.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC4wLjgiLCJ1cGRhdGVkSW5WZXIiOiI0MC4wLjgiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=--> Reviewed-on: https://code.forgejo.org/forgejo/runner/pulls/557 Reviewed-by: earl-warren <earl-warren@noreply.code.forgejo.org> Co-authored-by: Renovate Bot <bot@kriese.eu> Co-committed-by: Renovate Bot <bot@kriese.eu>
2025-05-02 21:53:20 +00:00
github.com/spf13/cobra v1.9.1
github.com/stretchr/testify v1.10.0
golang.org/x/term v0.32.0
golang.org/x/time v0.12.0
Update module google.golang.org/protobuf to v1.36.6 (#522) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [google.golang.org/protobuf](https://github.com/protocolbuffers/protobuf-go) | require | patch | `v1.36.4` -> `v1.36.6` | --- ### Release Notes <details> <summary>protocolbuffers/protobuf-go (google.golang.org/protobuf)</summary> ### [`v1.36.6`](https://github.com/protocolbuffers/protobuf-go/releases/tag/v1.36.6) [Compare Source](https://github.com/protocolbuffers/protobuf-go/compare/v1.36.5...v1.36.6) **Full Changelog**: https://github.com/protocolbuffers/protobuf-go/compare/v1.36.5...v1.36.6 User-visible changes: [CL/657895](https://go-review.googlesource.com/c/protobuf/+/657895): internal_gengo: generate a const string literal for the raw descriptor [CL/653536](https://go-review.googlesource.com/c/protobuf/+/653536): proto: Add CloneOf\[M Message]\(m M) M Maintenance: [CL/649135](https://go-review.googlesource.com/c/protobuf/+/649135): all: set Go language version to Go 1.22 [CL/654955](https://go-review.googlesource.com/c/protobuf/+/654955): types/descriptorpb: regenerate using latest protobuf v30 release ### [`v1.36.5`](https://github.com/protocolbuffers/protobuf-go/releases/tag/v1.36.5) [Compare Source](https://github.com/protocolbuffers/protobuf-go/compare/v1.36.4...v1.36.5) **Full Changelog**: https://github.com/protocolbuffers/protobuf-go/compare/v1.36.4...v1.36.5 Bug fixes: [CL/644437](https://go-review.googlesource.com/c/protobuf/+/644437): protogen: fix name mangling for fields with identical GoCamelCase Maintenance: [CL/641655](https://go-review.googlesource.com/c/protobuf/+/641655): all: remove weak field support </details> --- ### Configuration 📅 **Schedule**: Branch creation - "* 0-3 * * *" (UTC), Automerge - "* 0-3 * * *" (UTC). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMTIuMCIsInVwZGF0ZWRJblZlciI6IjM5LjIxMi4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Reviewed-on: https://code.forgejo.org/forgejo/runner/pulls/522 Reviewed-by: earl-warren <earl-warren@noreply.code.forgejo.org> Co-authored-by: Renovate Bot <bot@kriese.eu> Co-committed-by: Renovate Bot <bot@kriese.eu>
2025-03-27 07:07:15 +00:00
google.golang.org/protobuf v1.36.6
gopkg.in/yaml.v3 v3.0.1
Update module gotest.tools/v3 to v3.5.2 (#524) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [gotest.tools/v3](https://github.com/gotestyourself/gotest.tools) | require | patch | `v3.5.1` -> `v3.5.2` | --- ### Release Notes <details> <summary>gotestyourself/gotest.tools (gotest.tools/v3)</summary> ### [`v3.5.2`](https://github.com/gotestyourself/gotest.tools/releases/tag/v3.5.2) [Compare Source](https://github.com/gotestyourself/gotest.tools/compare/v3.5.1...v3.5.2) #### What's Changed - assert: ensure message is always displayed & fix under bazel by [@&#8203;cstrahan](https://github.com/cstrahan) in https://github.com/gotestyourself/gotest.tools/pull/276 - go.mod: golang.org/x/tools v0.13.0 for go1.22+ compatibility by [@&#8203;thaJeztah](https://github.com/thaJeztah) in https://github.com/gotestyourself/gotest.tools/pull/282 - poll: Continue(): use format.Message for formatting by [@&#8203;thaJeztah](https://github.com/thaJeztah) in https://github.com/gotestyourself/gotest.tools/pull/279 - fix TestFromDirSymlink on Windows due to missing drive-letter by [@&#8203;thaJeztah](https://github.com/thaJeztah) in https://github.com/gotestyourself/gotest.tools/pull/283 - Fix various linting issues and minor bugs by [@&#8203;thaJeztah](https://github.com/thaJeztah) in https://github.com/gotestyourself/gotest.tools/pull/280 - fix badges in readme, gofmt, and minor linting fix by [@&#8203;thaJeztah](https://github.com/thaJeztah) in https://github.com/gotestyourself/gotest.tools/pull/284 - circleci: add go1.21, go1.22, go1.23, and update golangci-lint to v1.60.3 by [@&#8203;thaJeztah](https://github.com/thaJeztah) in https://github.com/gotestyourself/gotest.tools/pull/285 - assert, assert/cmp: un-deprecate assert.ErrorType for now by [@&#8203;thaJeztah](https://github.com/thaJeztah) in https://github.com/gotestyourself/gotest.tools/pull/286 #### New Contributors - [@&#8203;cstrahan](https://github.com/cstrahan) made their first contribution in https://github.com/gotestyourself/gotest.tools/pull/276 **Full Changelog**: https://github.com/gotestyourself/gotest.tools/compare/v3.5.1...v3.5.2 </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMTIuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI1Mi4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Reviewed-on: https://code.forgejo.org/forgejo/runner/pulls/524 Co-authored-by: Renovate Bot <bot@kriese.eu> Co-committed-by: Renovate Bot <bot@kriese.eu>
2025-05-02 13:48:30 +00:00
gotest.tools/v3 v3.5.2
2022-04-27 17:45:53 +08:00
)
require (
dario.cat/mergo v1.0.0 // indirect
github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161 // indirect
2022-04-27 17:45:53 +08:00
github.com/Masterminds/semver v1.5.0 // indirect
github.com/Microsoft/go-winio v0.6.2 // indirect
github.com/ProtonMail/go-crypto v1.1.3 // indirect
Update github.com/cloudflare/circl (indirect) to v1.6.1 [SECURITY] (#605) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/cloudflare/circl](https://github.com/cloudflare/circl) | indirect | minor | `v1.3.7` -> `v1.6.1` | --- ### CIRCL-Fourq: Missing and wrong validation can lead to incorrect results [GHSA-2x5j-vhc8-9cwm](https://github.com/advisories/GHSA-2x5j-vhc8-9cwm) / [GO-2025-3754](https://pkg.go.dev/vuln/GO-2025-3754) <details> <summary>More information</summary> #### Details ##### Impact The CIRCL implementation of FourQ fails to validate user-supplied low-order points during Diffie-Hellman key exchange, potentially allowing attackers to force the identity point and compromise session security. Moreover, there is an incorrect point validation in ScalarMult can lead to incorrect results in the isEqual function and if a point is on the curve. ##### Patches Version 1.6.1 (https://github.com/cloudflare/circl/tree/v1.6.1) mitigates the identified issues. We acknowledge Alon Livne (Botanica Software Labs) for the reported findings. #### Severity Low #### References - [https://github.com/cloudflare/circl/security/advisories/GHSA-2x5j-vhc8-9cwm](https://github.com/cloudflare/circl/security/advisories/GHSA-2x5j-vhc8-9cwm) - [https://github.com/cloudflare/circl](https://github.com/cloudflare/circl) - [https://github.com/cloudflare/circl/tree/v1.6.1](https://github.com/cloudflare/circl/tree/v1.6.1) This data is provided by [OSV](https://osv.dev/vulnerability/GHSA-2x5j-vhc8-9cwm) and the [GitHub Advisory Database](https://github.com/github/advisory-database) ([CC-BY 4.0](https://github.com/github/advisory-database/blob/main/LICENSE.md)). </details> --- ### CIRCL-Fourq: Missing and wrong validation can lead to incorrect results in github.com/cloudflare/circl [GHSA-2x5j-vhc8-9cwm](https://github.com/advisories/GHSA-2x5j-vhc8-9cwm) / [GO-2025-3754](https://pkg.go.dev/vuln/GO-2025-3754) <details> <summary>More information</summary> #### Details CIRCL-Fourq: Missing and wrong validation can lead to incorrect results in github.com/cloudflare/circl #### Severity Unknown #### References - [https://github.com/cloudflare/circl/security/advisories/GHSA-2x5j-vhc8-9cwm](https://github.com/cloudflare/circl/security/advisories/GHSA-2x5j-vhc8-9cwm) - [https://github.com/cloudflare/circl/tree/v1.6.1](https://github.com/cloudflare/circl/tree/v1.6.1) This data is provided by [OSV](https://osv.dev/vulnerability/GO-2025-3754) and the [Go Vulnerability Database](https://github.com/golang/vulndb) ([CC-BY 4.0](https://github.com/golang/vulndb#license)). </details> --- ### Release Notes <details> <summary>cloudflare/circl (github.com/cloudflare/circl)</summary> ### [`v1.6.1`](https://github.com/cloudflare/circl/releases/tag/v1.6.1): CIRCL v1.6.1 [Compare Source](https://github.com/cloudflare/circl/compare/v1.6.0...v1.6.1) #### CIRCL v1.6.1 - Fixes some point checks on the FourQ curve. - Hybrid KEM fails on low-order points. ##### What's Changed - kem/hybrid: ensure X25519 hybrids fails with low order points by [@&#8203;Lekensteyn](https://github.com/Lekensteyn) in https://github.com/cloudflare/circl/pull/541 - .github: Use native ARM64 builders instead of QEMU by [@&#8203;Lekensteyn](https://github.com/Lekensteyn) in https://github.com/cloudflare/circl/pull/542 - Fixes several errors on twisted Edwards curves. by [@&#8203;armfazh](https://github.com/armfazh) in https://github.com/cloudflare/circl/pull/545 - Release v1.6.1 by [@&#8203;armfazh](https://github.com/armfazh) in https://github.com/cloudflare/circl/pull/546 **Full Changelog**: https://github.com/cloudflare/circl/compare/v1.6.0...v1.6.1 ### [`v1.6.0`](https://github.com/cloudflare/circl/releases/tag/v1.6.0): CIRCL v1.6.0 [Compare Source](https://github.com/cloudflare/circl/compare/v1.5.0...v1.6.0) #### CIRCL v1.6.0 ##### New! - [Prio3](https://github.com/cloudflare/circl/blob/main/vdaf/prio3) Verifiable Distributed Aggregation Function ([draft-irtf-cfrg-vdaf](https://datatracker.ietf.org/doc/draft-irtf-cfrg-vdaf/)). - [X-Wing](https://github.com/cloudflare/circl/blob/main/kem/xwing): general-purpose hybrid post-quantum KEM ([draft-connolly-cfrg-xwing-kem](https://datatracker.ietf.org/doc/draft-connolly-cfrg-xwing-kem/)) ##### What's Changed - Add OIDs to ML-DSA by [@&#8203;bwesterb](https://github.com/bwesterb) in https://github.com/cloudflare/circl/pull/519 - Adds Prio3 a set of verifiable distributed aggregation functions. by [@&#8203;armfazh](https://github.com/armfazh) in https://github.com/cloudflare/circl/pull/522 - Run semgrep cronjob only in upstream repository. by [@&#8203;armfazh](https://github.com/armfazh) in https://github.com/cloudflare/circl/pull/526 - X-Wing PQ/T hybrid by [@&#8203;bwesterb](https://github.com/bwesterb) in https://github.com/cloudflare/circl/pull/471 - ckem: move crypto/elliptic to crypto/ecdh by [@&#8203;MingLLuo](https://github.com/MingLLuo) in https://github.com/cloudflare/circl/pull/529 - hpke: Update HPKE code to use ecdh stdlib package. by [@&#8203;armfazh](https://github.com/armfazh) in https://github.com/cloudflare/circl/pull/530 - prio3: Adds polynomial multiplication using NTT by [@&#8203;armfazh](https://github.com/armfazh) in https://github.com/cloudflare/circl/pull/532 - Add Prio3 in readme. by [@&#8203;armfazh](https://github.com/armfazh) in https://github.com/cloudflare/circl/pull/527 ##### New Contributors - [@&#8203;MingLLuo](https://github.com/MingLLuo) made their first contribution in https://github.com/cloudflare/circl/pull/529 **Full Changelog**: https://github.com/cloudflare/circl/compare/v1.5.0...v1.6.0 ### [`v1.5.0`](https://github.com/cloudflare/circl/releases/tag/v1.5.0): CIRCL v1.5.0 [Compare Source](https://github.com/cloudflare/circl/compare/v1.4.0...v1.5.0) ### CIRCL v1.5.0 **New:** ML-DSA, Module-Lattice-based Digital Signature Algorithm. ##### What's Changed - kem: add X25519MLKEM768 TLS hybrid KEM by [@&#8203;bwesterb](https://github.com/bwesterb) in https://github.com/cloudflare/circl/pull/510 - Create semgrep.yml by [@&#8203;hrushikeshdeshpande](https://github.com/hrushikeshdeshpande) in https://github.com/cloudflare/circl/pull/514 - repo: Some fixes reported by CodeQL by [@&#8203;armfazh](https://github.com/armfazh) in https://github.com/cloudflare/circl/pull/515 - Add ML-DSA (FIPS204) by [@&#8203;bwesterb](https://github.com/bwesterb) in https://github.com/cloudflare/circl/pull/480 - sign/mldsa: Add test for ML-DSA signature verification. by [@&#8203;armfazh](https://github.com/armfazh) in https://github.com/cloudflare/circl/pull/517 - Release v1.5.0 by [@&#8203;armfazh](https://github.com/armfazh) in https://github.com/cloudflare/circl/pull/518 ##### New Contributors - [@&#8203;hrushikeshdeshpande](https://github.com/hrushikeshdeshpande) made their first contribution in https://github.com/cloudflare/circl/pull/514 **Full Changelog**: https://github.com/cloudflare/circl/compare/v1.4.0...v1.5.0 ### [`v1.4.0`](https://github.com/cloudflare/circl/releases/tag/v1.4.0): CIRCL v1.4.0 [Compare Source](https://github.com/cloudflare/circl/compare/v1.3.9...v1.4.0) ### CIRCL v1.4.0 ##### Changes New: ML-KEM compatible with FIPS-203. ##### Commit History - eddilithium3: fix typos by [@&#8203;bwesterb](https://github.com/bwesterb) in https://github.com/cloudflare/circl/pull/503 - Add ML-KEM (FIPS 203). by [@&#8203;bwesterb](https://github.com/bwesterb) in https://github.com/cloudflare/circl/pull/470 - Add ML-KEM decapsulation key check. by [@&#8203;bwesterb](https://github.com/bwesterb) in https://github.com/cloudflare/circl/pull/507 - Preparing for release v1.4.0 by [@&#8203;armfazh](https://github.com/armfazh) in https://github.com/cloudflare/circl/pull/508 **Full Changelog**: https://github.com/cloudflare/circl/compare/v1.3.9...v1.4.0 ### [`v1.3.9`](https://github.com/cloudflare/circl/releases/tag/v1.3.9): CIRCL v1.3.9 [Compare Source](https://github.com/cloudflare/circl/compare/v1.3.8...v1.3.9) #### CIRCL v1.3.9 ##### Changes: - Fix bug on BLS12381 decoding elements. ##### Commit History - dilithium: fix typo by [@&#8203;bwesterb](https://github.com/bwesterb) in https://github.com/cloudflare/circl/pull/498 - bls12381: Detects invalid prefix in G1 and G2 serialized elements by [@&#8203;armfazh](https://github.com/armfazh) in https://github.com/cloudflare/circl/pull/500 - Preparing CIRCL release v1.3.9 by [@&#8203;armfazh](https://github.com/armfazh) in https://github.com/cloudflare/circl/pull/501 **Full Changelog**: https://github.com/cloudflare/circl/compare/v1.3.8...v1.3.9 ### [`v1.3.8`](https://github.com/cloudflare/circl/releases/tag/v1.3.8): CIRCL v1.3.8 [Compare Source](https://github.com/cloudflare/circl/compare/v1.3.7...v1.3.8) ### CIRCL v1.3.8 #### New - BLS Signatures on top of BLS12-381. - Adopt faster squaring in pairings. - BlindRSA compliant with RFC9474. - (Verifiable) Secret Sharing compatible with the Group interface (elliptic curves). #### Notice - Update on cpabe/tkn20 ciphertexts, read more at https://github.com/cloudflare/circl/wiki/tkn20-Ciphertext-Format-(v1.3.8) ##### What's Changed - Implement Granger-Scott faster squaring in the cyclotomic subgroup. by [@&#8203;armfazh](https://github.com/armfazh) in https://github.com/cloudflare/circl/pull/449 - Updates avo and CIRCL's own dependency. by [@&#8203;armfazh](https://github.com/armfazh) in https://github.com/cloudflare/circl/pull/474 - Updating documentation for OPRF package. by [@&#8203;armfazh](https://github.com/armfazh) in https://github.com/cloudflare/circl/pull/475 - group: removes order method from group interface by [@&#8203;armfazh](https://github.com/armfazh) in https://github.com/cloudflare/circl/pull/356 - zk/dleq: Adding DLEQ proofs for Qn, the subgroup of squares in (Z/nZ)\* by [@&#8203;armfazh](https://github.com/armfazh) in https://github.com/cloudflare/circl/pull/451 - Reduce x/crypto and x/sys versions to match Go 1.21 by [@&#8203;Lekensteyn](https://github.com/Lekensteyn) in https://github.com/cloudflare/circl/pull/476 - Bump GitHub Actions versions and use Go 1.22 and 1.21 by [@&#8203;Lekensteyn](https://github.com/Lekensteyn) in https://github.com/cloudflare/circl/pull/477 - Adding rule for constant values by [@&#8203;armfazh](https://github.com/armfazh) in https://github.com/cloudflare/circl/pull/478 - Add BLS signatures over BLS12-381 by [@&#8203;armfazh](https://github.com/armfazh) in https://github.com/cloudflare/circl/pull/446 - group: Implements Shamir and Feldman secret sharing. by [@&#8203;armfazh](https://github.com/armfazh) in https://github.com/cloudflare/circl/pull/348 - blindrsa: add support for all variants of RFC9474 by [@&#8203;armfazh](https://github.com/armfazh) in https://github.com/cloudflare/circl/pull/479 - Explicitly installs Go with version before CodeQL analysis. by [@&#8203;armfazh](https://github.com/armfazh) in https://github.com/cloudflare/circl/pull/481 - Bumps golangci-lint action by [@&#8203;armfazh](https://github.com/armfazh) in https://github.com/cloudflare/circl/pull/485 - ecc/bls12381: Ensures pairing operations don't overwrite their input by [@&#8203;armfazh](https://github.com/armfazh) in https://github.com/cloudflare/circl/pull/494 - Align to the `purego` build tag, removing `noasm` build tag by [@&#8203;mattyclarkson](https://github.com/mattyclarkson) in https://github.com/cloudflare/circl/pull/492 - cpabe: Serializing ciphertext with 32-bit prefixes. by [@&#8203;armfazh](https://github.com/armfazh) in https://github.com/cloudflare/circl/pull/490 ##### New Contributors - [@&#8203;mattyclarkson](https://github.com/mattyclarkson) made their first contribution in https://github.com/cloudflare/circl/pull/492 **Full Changelog**: https://github.com/cloudflare/circl/compare/v1.3.7...v1.3.8 </details> --- ### Configuration 📅 **Schedule**: Branch creation - "" (UTC), Automerge - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC40OC40IiwidXBkYXRlZEluVmVyIjoiNDAuNDguNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Reviewed-on: https://code.forgejo.org/forgejo/runner/pulls/605 Reviewed-by: earl-warren <earl-warren@noreply.code.forgejo.org> Co-authored-by: Renovate Bot <bot@kriese.eu> Co-committed-by: Renovate Bot <bot@kriese.eu>
2025-06-14 09:34:54 +00:00
github.com/cloudflare/circl v1.6.1 // indirect
github.com/containerd/containerd v1.7.27 // indirect
github.com/containerd/log v0.1.0 // indirect
github.com/creack/pty v1.1.24 // indirect
github.com/cyphar/filepath-securejoin v0.3.6 // indirect
github.com/davecgh/go-spew v1.1.1 // indirect
github.com/distribution/reference v0.6.0 // indirect
github.com/docker/cli v25.0.7+incompatible // indirect
github.com/docker/docker-credential-helpers v0.8.0 // indirect
github.com/docker/go-connections v0.5.0 // indirect
github.com/docker/go-units v0.5.0 // indirect
github.com/emirpasic/gods v1.18.1 // indirect
github.com/fatih/color v1.16.0 // indirect
github.com/felixge/httpsnoop v1.0.4 // indirect
github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect
github.com/go-git/go-billy/v5 v5.6.1 // indirect
github.com/go-git/go-git/v5 v5.13.1 // indirect
github.com/go-logr/logr v1.4.2 // indirect
github.com/go-logr/stdr v1.2.2 // indirect
github.com/gobwas/glob v0.2.3 // indirect
2022-04-27 17:45:53 +08:00
github.com/gogo/protobuf v1.3.2 // indirect
github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
2024-03-11 18:32:49 +07:00
github.com/google/go-cmp v0.6.0 // indirect
2022-11-22 15:34:13 +08:00
github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 // indirect
github.com/imdario/mergo v0.3.16 // indirect
github.com/inconshreveable/mousetrap v1.1.0 // indirect
2022-04-27 17:45:53 +08:00
github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect
github.com/julienschmidt/httprouter v1.3.0 // indirect
github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51 // indirect
2022-08-12 14:59:58 +08:00
github.com/kevinburke/ssh_config v1.2.0 // indirect
github.com/klauspost/compress v1.17.4 // indirect
github.com/mattn/go-colorable v0.1.13 // indirect
github.com/mattn/go-runewidth v0.0.15 // indirect
github.com/mitchellh/mapstructure v1.5.0 // indirect
github.com/moby/buildkit v0.13.2 // indirect
2023-10-04 14:58:57 +02:00
github.com/moby/patternmatcher v0.6.0 // indirect
github.com/moby/sys/sequential v0.5.0 // indirect
github.com/moby/sys/user v0.3.0 // indirect
github.com/moby/sys/userns v0.1.0 // indirect
2022-04-27 17:45:53 +08:00
github.com/opencontainers/go-digest v1.0.0 // indirect
github.com/opencontainers/image-spec v1.1.0 // indirect
github.com/opencontainers/selinux v1.11.0 // indirect
github.com/pjbgf/sha1cd v0.3.0 // indirect
2022-04-27 17:45:53 +08:00
github.com/pkg/errors v0.9.1 // indirect
github.com/pmezard/go-difflib v1.0.0 // indirect
github.com/rhysd/actionlint v1.6.27 // indirect
github.com/rivo/uniseg v0.4.7 // indirect
2023-11-07 20:19:08 +01:00
github.com/robfig/cron/v3 v3.0.1 // indirect
github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 // indirect
github.com/skeema/knownhosts v1.3.0 // indirect
Update module github.com/spf13/cobra to v1.9.1 (#557) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/spf13/cobra](https://github.com/spf13/cobra) | require | minor | `v1.8.1` -> `v1.9.1` | --- ### Release Notes <details> <summary>spf13/cobra (github.com/spf13/cobra)</summary> ### [`v1.9.1`](https://github.com/spf13/cobra/releases/tag/v1.9.1) [Compare Source](https://github.com/spf13/cobra/compare/v1.9.0...v1.9.1) ##### 🐛 Fixes - Fix CompletionFunc implementation by [@&#8203;ccoVeille](https://github.com/ccoVeille) in https://github.com/spf13/cobra/pull/2234 - Revert "Make detection for test-binary more universal ([#&#8203;2173](https://github.com/spf13/cobra/issues/2173))" by [@&#8203;marckhouzam](https://github.com/marckhouzam) in https://github.com/spf13/cobra/pull/2235 **Full Changelog**: https://github.com/spf13/cobra/compare/v1.9.0...v1.9.1 ### [`v1.9.0`](https://github.com/spf13/cobra/releases/tag/v1.9.0) [Compare Source](https://github.com/spf13/cobra/compare/v1.8.1...v1.9.0) #### ✨ Features - Allow linker to perform deadcode elimination for program using Cobra by [@&#8203;aarzilli](https://github.com/aarzilli) in https://github.com/spf13/cobra/pull/1956 - Add default completion command even if there are no other sub-commands by [@&#8203;marckhouzam](https://github.com/marckhouzam) in https://github.com/spf13/cobra/pull/1559 - Add CompletionWithDesc helper by [@&#8203;ccoVeille](https://github.com/ccoVeille) in https://github.com/spf13/cobra/pull/2231 #### 🐛 Fixes - Fix deprecation comment for Command.SetOutput by [@&#8203;thaJeztah](https://github.com/thaJeztah) in https://github.com/spf13/cobra/pull/2172 - Replace deprecated ioutil usage by [@&#8203;nirs](https://github.com/nirs) in https://github.com/spf13/cobra/pull/2181 - Fix --version help and output for plugins by [@&#8203;nirs](https://github.com/nirs) in https://github.com/spf13/cobra/pull/2180 - Allow to reset the templates to the default by [@&#8203;marckhouzam](https://github.com/marckhouzam) in https://github.com/spf13/cobra/pull/2229 #### 🤖 Completions - Make Powershell completion work in constrained mode by [@&#8203;lstemplinger](https://github.com/lstemplinger) in https://github.com/spf13/cobra/pull/2196 - Improve detection for flags that accept multiple values by [@&#8203;thaJeztah](https://github.com/thaJeztah) in https://github.com/spf13/cobra/pull/2210 - add CompletionFunc type to help with completions by [@&#8203;ccoVeille](https://github.com/ccoVeille) in https://github.com/spf13/cobra/pull/2220 - Add similar whitespace escape logic to bash v2 completions than in other completions by [@&#8203;kangasta](https://github.com/kangasta) in https://github.com/spf13/cobra/pull/1743 - Print ActiveHelp for bash along other completions by [@&#8203;marckhouzam](https://github.com/marckhouzam) in https://github.com/spf13/cobra/pull/2076 - fix(completions): Complete map flags multiple times by [@&#8203;gabe565](https://github.com/gabe565) in https://github.com/spf13/cobra/pull/2174 - fix(bash): nounset unbound file filter variable on empty extension by [@&#8203;scop](https://github.com/scop) in https://github.com/spf13/cobra/pull/2228 #### 🧪 Testing - Test also with go 1.23 by [@&#8203;nirs](https://github.com/nirs) in https://github.com/spf13/cobra/pull/2182 - Make detection for test-binary more universal by [@&#8203;thaJeztah](https://github.com/thaJeztah) in https://github.com/spf13/cobra/pull/2173 #### ✍🏼 Documentation - docs: update README.md by [@&#8203;eltociear](https://github.com/eltociear) in https://github.com/spf13/cobra/pull/2197 - Improve site formatting by [@&#8203;nirs](https://github.com/nirs) in https://github.com/spf13/cobra/pull/2183 - doc: add Conduit by [@&#8203;raulb](https://github.com/raulb) in https://github.com/spf13/cobra/pull/2230 - doc: azion project added to the list of CLIs that use cobra by [@&#8203;maxwelbm](https://github.com/maxwelbm) in https://github.com/spf13/cobra/pull/2198 - Fix broken links in active_help.md by [@&#8203;vuil](https://github.com/vuil) in https://github.com/spf13/cobra/pull/2202 - chore: fix function name in comment by [@&#8203;zhuhaicity](https://github.com/zhuhaicity) in https://github.com/spf13/cobra/pull/2216 #### 🔧 Dependency upgrades - build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6 by [@&#8203;thaJeztah](https://github.com/thaJeztah) in https://github.com/spf13/cobra/pull/2206 - Update to latest go-md2man by [@&#8203;mikelolasagasti](https://github.com/mikelolasagasti) in https://github.com/spf13/cobra/pull/2201 - Upgrade `pflag` dependencies for v1.9.0 by [@&#8203;jpmcb](https://github.com/jpmcb) in https://github.com/spf13/cobra/pull/2233 *** Thank you to all of our amazing contributors and all the great work that's been going into the completions feature!! ##### 👋🏼 New Contributors - [@&#8203;gabe565](https://github.com/gabe565) made their first contribution in https://github.com/spf13/cobra/pull/2174 - [@&#8203;maxwelbm](https://github.com/maxwelbm) made their first contribution in https://github.com/spf13/cobra/pull/2198 - [@&#8203;lstemplinger](https://github.com/lstemplinger) made their first contribution in https://github.com/spf13/cobra/pull/2196 - [@&#8203;vuil](https://github.com/vuil) made their first contribution in https://github.com/spf13/cobra/pull/2202 - [@&#8203;mikelolasagasti](https://github.com/mikelolasagasti) made their first contribution in https://github.com/spf13/cobra/pull/2201 - [@&#8203;zhuhaicity](https://github.com/zhuhaicity) made their first contribution in https://github.com/spf13/cobra/pull/2216 - [@&#8203;ccoVeille](https://github.com/ccoVeille) made their first contribution in https://github.com/spf13/cobra/pull/2220 - [@&#8203;kangasta](https://github.com/kangasta) made their first contribution in https://github.com/spf13/cobra/pull/1743 - [@&#8203;aarzilli](https://github.com/aarzilli) made their first contribution in https://github.com/spf13/cobra/pull/1956 **Full Changelog**: https://github.com/spf13/cobra/compare/v1.8.1...v1.9.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC4wLjgiLCJ1cGRhdGVkSW5WZXIiOiI0MC4wLjgiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=--> Reviewed-on: https://code.forgejo.org/forgejo/runner/pulls/557 Reviewed-by: earl-warren <earl-warren@noreply.code.forgejo.org> Co-authored-by: Renovate Bot <bot@kriese.eu> Co-committed-by: Renovate Bot <bot@kriese.eu>
2025-05-02 21:53:20 +00:00
github.com/spf13/pflag v1.0.6 // indirect
github.com/stretchr/objx v0.5.2 // indirect
github.com/timshannon/bolthold v0.0.0-20240314194003-30aac6950928 // indirect
github.com/xanzy/ssh-agent v0.3.3 // indirect
github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb // indirect
2022-11-22 15:34:13 +08:00
github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 // indirect
github.com/xeipuuv/gojsonschema v1.2.0 // indirect
go.etcd.io/bbolt v1.3.10 // indirect
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.46.1 // indirect
go.opentelemetry.io/otel v1.21.0 // indirect
go.opentelemetry.io/otel/metric v1.21.0 // indirect
go.opentelemetry.io/otel/trace v1.21.0 // indirect
golang.org/x/crypto v0.36.0 // indirect
golang.org/x/net v0.38.0 // indirect
golang.org/x/sync v0.12.0 // indirect
golang.org/x/sys v0.33.0 // indirect
golang.org/x/tools v0.21.1-0.20240508182429-e35e4ccd0d2d // indirect
2022-04-27 17:45:53 +08:00
gopkg.in/warnings.v0 v0.1.2 // indirect
2022-11-22 15:34:13 +08:00
gopkg.in/yaml.v2 v2.4.0 // indirect
2022-04-27 17:45:53 +08:00
)
replace github.com/nektos/act => code.forgejo.org/forgejo/act v1.26.0